last executing test programs: 1m54.751469028s ago: executing program 4 (id=3047): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000d0000000000010801000000002e3000305f2e00901d3c4b388a716d95c2901252e2a3abe9ec9953ed39d39d7d5507c8e57f8bb08d36a85c5e1b90e47631d8a72b1c117d7d4901884da2cb39dd6abae4fa7e112358baaeb3295c5136f44b5b232f2e1564ff1e401ed08afd665dada5b8b1067f55093dd83d127a343ed241b910f2f9328fc5c26962b045849097cab34d461000652db038f1cbbd012446b27eb197b442b20267c88acef54f0fc7425e"], &(0x7f00000001c0)=""/139, 0x2c, 0x8b, 0x0, 0x3}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f4fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c5", 0x8}], 0x1}, 0x8400) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}, {&(0x7f0000003ac0)="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", 0x5ac}], 0x2}, 0x0) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x10, 0x1, 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r8, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000004580)={0xa, 0x7fff, 0x5, 0x4, 0x0, 0x40}) 1m50.100259899s ago: executing program 4 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x201, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 1m49.48165418s ago: executing program 4 (id=3055): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb393) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)=ANY=[@ANYBLOB="f1000000120008002abd7000fbdbdf2573657169762861656769733132386c2d6165736e69290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000200000000000000000000008000100030000000800010000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x100, 0x101, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'pim6reg\x00', {}, 0x2f, 0x15}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x1, 0x2}, 0x30c, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) 1m48.207931126s ago: executing program 4 (id=3061): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x891a, 0x0) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xcd, "db4198f1368f4724a0aff57ae2db0a452cdfc27d60edcdb13d37b7b0e33b2e43f37fa56f56d4ed2a3c135d20487acb75cc8c016d2fac289f4f8770e2ea78e7b4067933eb344b3e4ee774dc878de27fe21ad80d3e3ffa1fbf460a679151bd47d49b8aa1a96e469e613def3f52b788e58a41ec5658e05c06ef5957c0112a543e8fb5fde432f71122858a30544d8f70babf72d68a8359222a9dcbbec0d06bcf046985fde1e38511e2c4baadddda2010fad668efbf0d27629bb81c80111bd076a911af8ee67181f08c983b7a447376"}, &(0x7f0000000180)=0xd5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84d, 0x9, 0x1, 0x3}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x3, 0xb}, 0x5, 0x80000034, 0x91f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc78a96afdb3f3285}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x88c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x8}}, 0x8}, 0x90) 1m47.115745095s ago: executing program 4 (id=3067): socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000040000000959080001000000180000000000000000000000000000016608b70005000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000315265449853972c9603c5000000000000b7020002000000008500000086"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ce8004000173"], 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8c010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m43.231291177s ago: executing program 4 (id=3074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000002c0)=""/239, &(0x7f00000003c0)=0xef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000002c0)=""/239, &(0x7f00000003c0)=0xef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) unshare(0x6a040000) (async) socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) (async) 1m33.901994639s ago: executing program 3 (id=3103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) (async) bind$tipc(r4, 0x0, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xaffa9c0077a76a7d) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004094) (async) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000100)=0x28) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001c0004800504bd24dd70ac8fc20d0300010000005d9dc6008000000300050000000500030006000000080002000200000062265133a35321764c702008c0a711d60b8f10d33bad58fdec49ab6934e006006472537f4ec8da77cf46d9c60cf8e05c2508244724ee9b81ee9ed127d623b5ded0d1795c9614aa6abb06c407422b059db4cb521f8c28a0a5d40a4cf2d99de8b1265d3ef3e77f65c65457831f76ee45476b8020f0bc32a94f1fa9ace09a1203b84dd9ea034dd7bf485d505f7eea5f3d4df71fba78752542707dd1b234608bb85a0d1b4ddb98988e110ef2fe"], 0x40}}, 0x0) 1m33.734451397s ago: executing program 3 (id=3104): syz_emit_ethernet(0x3f, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0x9, 0x2b, 0x1, @remote, @local, {[@srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x10}], 'P'}}}}}, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000), 0x8) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1}}]}, 0x34}}, 0x2000400c) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) (async) clock_gettime(0xffffffea, 0x0) (async) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) splice(r9, 0x0, r8, 0x0, 0x406f413, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a010200000000000000000a0000000c000340000000000000000120000000140a01010000000000000000000000060c00064000000000000000023c000000030a05a8d220221e68bd8800070000050900030073797a31000000000900010073797a300000000008000b400000000408000a4000000000140000001100010000000000000000000000000a5af258ed0651b2f8208613bc74b29ac7398f03b52953e42bc1267c0886619b28b66bbb6c8836be52265cb9508a49f4e19d9fb634e0eb8bf59d2f9284fc552eedd78d38a78e01f62a3913"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c0c0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, &(0x7f00000001c0)=""/254, 0xfe}, 0x53fcc493}], 0x1, 0x40, &(0x7f0000000300)={0x0, 0x3938700}) 1m33.677070175s ago: executing program 3 (id=3105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x11, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44811}, 0x8000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000201050000000000000000000000000314001980080600"], 0x28}, 0x1, 0x0, 0x0, 0x404c0}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040004}, 0x4040010) gettid() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYBLOB="6cb0bfa83fd698d543f1850adfcca717982fbbd63cd39808ea1075f125238ad7ffe38785b0f181f5edb834707571c56c8f33cc94dadf93c099d6f4f6647be31bfb5e6118336d2a786b27940c4ce12a588fc58738d1b1e37fce40b54eaa27b265cf9d3e6ff35f28468859d7468322b819d19788e2294a50d64cfc40cc6fad42f58c2601cb8d42a84930992df158747c5edcf028188c16dc8b6e5e8a6dbbff48b9a3f597224647f385f87c42ea", @ANYRESHEX=r5, @ANYRES16=r5, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="de5be7299d8f8d5d55d0f09135a8c82c302b9dfa43568c3ade9d", @ANYRES64, @ANYRES64=r0, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1m33.555681257s ago: executing program 3 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2}, &(0x7f0000000200)=0x8) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xffffffffffffff4b) close(r0) 1m33.414411965s ago: executing program 3 (id=3107): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000805) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x2010, 0xffffffffffffffff, 0xaa0f2000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r8, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x8079f000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0xffffe000) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x338ee000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x40) 1m33.355123841s ago: executing program 3 (id=3108): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5d}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000051) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 1m28.048723487s ago: executing program 32 (id=3074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000002c0)=""/239, &(0x7f00000003c0)=0xef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000002c0)=""/239, &(0x7f00000003c0)=0xef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) unshare(0x6a040000) (async) socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) (async) 1m18.028927133s ago: executing program 33 (id=3108): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5d}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20000051) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 31.061654169s ago: executing program 2 (id=3227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xff], 'bridge_slave_0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x5, 0x49}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x7, 0x7fffffff]}, @timestamp={0x44, 0x4, 0x1c}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 30.877696126s ago: executing program 2 (id=3228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @sack_perm, @mss={0x2, 0x9}, @sack_perm], 0x4) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r10, {}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 27.914734791s ago: executing program 2 (id=3239): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000b00000000000000000100000c"], 0x0, 0x46, 0x0, 0xa}, 0x28) writev(r0, &(0x7f0000000bc0)=[{0x0, 0x49}, {&(0x7f0000000680)="589daae13b0000c4fa0a", 0xa}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_RATE64={0xc, 0x4, 0xa38bafd9371ebbe1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x74}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) 21.564338225s ago: executing program 2 (id=3254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000001050500000000000000000a000005440002802c0001"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000010000003f0100004000000044000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000274797df69513905ccd2bc5a8f5a6e3cdf98bd923d41396c31b0d4d9fffe14e12b1ab2f693f96d4b4b57e529f9e5ebed4325d6630a3597c47ad45e4dbb9b0c8235a9c1e3ed533fd14a214f6fcff706877479ef8c57c677740446926a312c087d0ccf751e208c09b5e7c420bbee7d9e8aac24b17f28f432e97d47f6f4dad5f09f2baf1bb878564a45d107b0cfa9dc740229b39b44c3d0cc8d76496903", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 20.696823783s ago: executing program 2 (id=3256): r0 = socket$qrtr(0x2a, 0x2, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) close(r5) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r6, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x5}, 0x90) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x891a, 0x0) 19.729271145s ago: executing program 2 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0xff, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r4, 0xec9, 0x4b, 0x4}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r9, 0x40049409, 0xffffffffffffffff) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r11) accept4$tipc(r7, &(0x7f0000000040)=@name, &(0x7f0000000180)=0x10, 0x0) 16.043875541s ago: executing program 5 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 10.823293614s ago: executing program 5 (id=3287): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) (async) recvmsg$unix(r4, &(0x7f00000005c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000500)=""/112, 0x70}], 0x2}, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1588e7ff02000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, &(0x7f0000000380), 0x0}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 10.775038902s ago: executing program 1 (id=3288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xe20}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r6) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x48, &(0x7f0000000040)={0x32, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8.78248348s ago: executing program 5 (id=3291): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000020002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(0x4) close(r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 8.455625173s ago: executing program 5 (id=3294): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfffffbff, 0xe, 0x9, 0xfb, 0x4, 0x1, 0x10002}, 0x1c) unshare(0x400) recvmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r6], 0x10b8}, 0x20000c00) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x5b, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) recvmmsg(r8, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 7.921012441s ago: executing program 0 (id=3295): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) (async, rerun: 64) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) (rerun: 64) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) recvmsg(r3, &(0x7f0000000400)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, &(0x7f00000002c0)=""/156, 0x9c}, 0x20000040) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x948}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x6c}}, 0x8800) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{}, "7a33ff4b380aaf20", "1255bd62b5dfa23eb7e9b67d19b58a2c", "761786d9", "239bb4b02dc47fef"}, 0x28) 7.60219466s ago: executing program 0 (id=3296): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12f6"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x4, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @random="a059becdc644"}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12f6"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x4, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @random="a059becdc644"}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) (async) 5.652487003s ago: executing program 5 (id=3300): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x2e, 0x4, 0x1, 0x28, 0xb8, 0x68, 0x0, 0xf, 0x2d, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x8, [0xffffff7f, 0xc2c, 0x5]}, @ssrr={0x89, 0xf, 0xb7, [@multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x39, [@loopback, @private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x42, 0x0, [{0x0, 0xf, "dfc30c392ed3e6d759a1925208"}, {0x1, 0x2}, {0x1, 0xb, "d1af32522fc2cb80db"}, {0x7, 0xd, "201495c5e2b8950635a41d"}, {0x2, 0x5, "979ab7"}, {0x1, 0x2}, {0x2, 0x3, 'J'}, {0x7, 0x9, "e77886962b9f86"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf}]}]}}}}}) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x1ffffffffffffff6, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580100002c00040025bd7000fedbdf25150000008c142d2c0473f770f3953436610c15d0be6da86a96ff47323c3c04a9bc2c2a0e31e76e974b8b0f3ac73a9b17f8fa0cb5226c698b35abe8a9e779b6bdc12f51711d489460091585ec6ab5cc5a6c50c1ade1902d565a89dd3f41cd79e203e7a1625df08ed80b194627d4e12d6f8e06afb707b25ec85f8d86e4af4ee03987076afa2e9921f0e3ca2188a1c9c7bcef5fc460fff181e59ea42b28f9ff01fadc60870e003e8094f60800ce0082e8744774a91b37e74c21f15c8fd0022fdd8c09ec5071d92f8b290700339519cef95335457724cf27e9c1dc18860bc3b145", @ANYRES32=r3, @ANYBLOB='\x00\x00\b\x00p\x00', @ANYRES32=r2, @ANYBLOB="800042800400b28008004a00", @ANYRES32=0x0, @ANYBLOB="640010008047d6ae1a396e1cd8c6ead714bdbd6af3fcd7b91918abb0abcdef98935659b3f834cb24362ad5980175e9ecc95674025dad529573ed296686393fe4d8cfdf2727eab6028cd3bdef2a10dda12ba7250cab95ffc0e7c553de0ff7437ecb62476304002580c1fc10800400ff801200208089d84e6461e418bc1cc89f07b2ea00000000"], 0x158}, 0x1, 0x0, 0x0, 0x4084}, 0x4004) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@delchain={0x4dc, 0x65, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xa}, {0xa}, {0x17, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_u32={{0x8}, {0x4a0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x72}, @TCA_U32_SEL={0x484, 0x5, {0x1, 0x4, 0xf7, 0xe, 0xc, 0xd3a1, 0xffff, 0xfffff66e, [{0x5, 0x1, 0x4, 0x9}, {0x7, 0x9, 0x2, 0xffffffff}, {0x2, 0xfffffffb, 0xafe, 0x80000000}, {0x4, 0xe4000000, 0x2a088745, 0x6}, {0x7, 0x3, 0x4, 0x2}, {0x10000, 0x80000000, 0x0, 0x7}, {0x3, 0x400, 0x0, 0x3}, {0x5, 0x6, 0x20000, 0x40}, {0xfffffbff, 0x4, 0x4, 0x8000}, {0x0, 0x81, 0x7, 0x7f}, {0x3, 0x6, 0x2, 0x5}, {0x2, 0xf, 0x7, 0xe}, {0x9, 0xffff485c, 0x2, 0x2}, {0x1, 0x8000, 0x80000000, 0x9}, {0xc2b, 0xf0, 0x80000001, 0x7ff}, {0x9, 0x9404, 0x80, 0x91}, {0xd5, 0x0, 0x0, 0xe0}, {0x6, 0x7f, 0x5, 0x4}, {0x4, 0xfc0, 0x5, 0x1}, {0x3c54, 0x1cf9d277, 0x77ec, 0x9}, {0x5, 0x1, 0xdc, 0x1000}, {0x5, 0x3, 0xfffffff4, 0x9}, {0x4, 0x204b, 0xc98e, 0x6}, {0x6, 0x5, 0x80, 0x1000}, {0x1, 0x3c4, 0x2000, 0x791}, {0x3, 0x85f, 0x9, 0x2}, {0x0, 0x8, 0x10000000, 0xffffffff}, {0x3, 0x7, 0x1, 0x6}, {0x1, 0x1, 0x1ff, 0xa}, {0xbb54, 0x8, 0x2, 0x6}, {0x200, 0x0, 0x7, 0x18}, {0x7f, 0x4, 0x7, 0x2}, {0x3, 0x5, 0x6}, {0x9, 0x4, 0x2, 0x9}, {0x0, 0xd, 0x1, 0x9}, {0x9, 0x81, 0x1, 0x329}, {0x101, 0x100, 0x9, 0xc}, {0x80, 0x4, 0x4, 0x2}, {0xd86, 0xffffb585, 0x819, 0x80}, {0x9, 0xd, 0x41a, 0xf7600000}, {0x4, 0xef, 0x65, 0x7f}, {0x3, 0xf6, 0x5, 0x7}, {0x1ff, 0x101, 0xf, 0xfffffff7}, {0x5, 0x4e1, 0x101, 0x4}, {0x3, 0x7e8, 0x60, 0x9}, {0xffffff7f, 0x1, 0xfffffffe, 0x7}, {0xe7, 0x1, 0x1}, {0x8, 0x2d3c, 0x1}, {0x6, 0x3, 0x4, 0xfffffff1}, {0x1, 0x6, 0x100, 0xfffffffc}, {0x1, 0x8, 0xfff, 0x5bd1}, {0x101, 0x8, 0xe, 0x8}, {0x7fff, 0x1, 0x6, 0x3}, {0x5bccdaf3, 0xd5c, 0x5, 0xfff}, {0x7, 0x6, 0x5, 0x10000}, {0x8, 0x1, 0x1, 0x82}, {0x4, 0x8, 0x80, 0xc}, {0xa8a, 0x5e, 0x8, 0x7}, {0x1ff, 0x7fffffff, 0x101, 0x4}, {0x6, 0x7, 0x100, 0x7}, {0xa, 0x87d, 0x8, 0x5}, {0x7fffffff, 0xab2, 0x5, 0x5}, {0x1ff, 0x8000, 0x5, 0xfffffeff}, {0x1, 0x1000, 0x1, 0xe4e}, {0x0, 0x9, 0x3, 0x7fffffff}, {0x0, 0x5, 0x4, 0xfffffffc}, {0x2, 0x5, 0x9, 0x7fffffff}, {0x1fa78db5, 0x800, 0x3, 0x400}, {0x2, 0x1, 0x7, 0x7}, {0x53, 0xce, 0x9fbf, 0x9}, {0xcd, 0x0, 0x8, 0x5}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x30}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r10}, 0xc) socket$netlink(0x10, 0x3, 0x0) 5.422336839s ago: executing program 5 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRESDEC=r5, @ANYBLOB="5f71579fe99af8f9a03f5cbd707074d0ec784855ac39001c9406b805363db70e9b374d95a333ca76436fbe0a6625d2df1675f08284ed484fc8ecfd6ce3b480a15e8b57b48c0b93340a2617fa070a993ea9380d2e948d2fb1f25211e4a09c6bf32737520966dcc93a0b94d8cef0b873f2d97102b02b1dd5ab342bd057f173003fc99c72600062f192fcd88d3f57932d09a64877c054dc21218aa00853750d3dbc506212cab8b182cd0fc4b7ab87d032f8fb5936ba7c38835fe173296755c6bf87f6fc585ae6cb36862cda89ea3ad60371165f26e786", @ANYRES16=0xffffffffffffffff], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x24008050}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[], 0x50}}, 0x40000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff000043ac77070002000000", @ANYRES16=r10, @ANYRES16=r3], 0x14}}, 0x20008894) bind$inet(r12, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r12, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) 5.218670958s ago: executing program 6 (id=3303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.06975933s ago: executing program 6 (id=3304): r0 = socket$qrtr(0x2a, 0x2, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) close(0xffffffffffffffff) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r5, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x5}, 0x90) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x891a, 0x0) 4.812631812s ago: executing program 6 (id=3305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0xfffffffffffffeb2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000b9000500ac1e0101"], 0x1c}, 0x1, 0x0, 0x0, 0xc844}, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000102010800000000000000000a0000000600074000000000040001805a51b4f3f248d50c76bdd6676746d1b37326adf09ceac27a430d3c63ee31be2c67a39ccca6c92e2bf542475ce2eecc"], 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="1400032d4325d1ee8200000065700000006810098d035e7166937b292469bcf2b74dff7c6bd7a95d44051bec933f645f7ccc27927898d21672ce12de4f773bc379b1d6603312049c296e67881758b0d59cb166b020b26764b8ddee74332ad0f1eec33d61954c77f191a53c9fdcfdbe365a3ab81cd7c50547e65a14bfeeab8710e3db72e6d782117383adc562ea3cd9b7126dd69237b5617c180cd3"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 4.420952131s ago: executing program 34 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0xff, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r4, 0xec9, 0x4b, 0x4}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r9, 0x40049409, 0xffffffffffffffff) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r11) accept4$tipc(r7, &(0x7f0000000040)=@name, &(0x7f0000000180)=0x10, 0x0) 3.906112884s ago: executing program 0 (id=3307): r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) (async) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x0, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.848842108s ago: executing program 1 (id=3308): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x22dc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x22a8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2250, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0xfffffffe, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0x7, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x70e, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x7ff, 0x1, 0x800}, {0x8ab, 0xd3a, 0x100, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x6, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x83}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x2, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3002}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x3, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x7f, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45127, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x6, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x22dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="005d6d8b6a35002bbd7000fddbdf2527000003db54bc87a3cafcc89d2080273c0200d67112f5fdce477cf7a5ab28af3033ec450ffe9b2e9c1a8e4340bbe11a2dd2108b4cd0fc82d2d08a9fb99a2e964d7524c13863cfe8dcebb786a2bf93c9ddc5759ca814838322f75081", @ANYRES32=r9, @ANYBLOB="0600360004000000"], 0x24}}, 0x400c0c4) 2.228200914s ago: executing program 6 (id=3309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000002540)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000e106eb20fc3b59"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002400)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x420000, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000640)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001e00)={{r1, &(0x7f0000000680)='\x00', 0x40, &(0x7f00000006c0)={@align=0x1, {0x100, 0x1, 0x8, 0x2}}, 0xd, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}, 0x7, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000800)='%)-(!$\x00', &(0x7f0000000840)="b85240d908bc0591dafb1fd20f9f111a591266ea12306a1808da4f88d818b278c3bab852b2e98d43b66e29e36fb3c264", 0x30, 0x30}, {0x3, 0xd3e9, &(0x7f0000000880)='$\x00', &(0x7f00000008c0)="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", 0x1000, 0x2a}, {0x2, 0x3, &(0x7f00000018c0)='/dev/ppp\x00', &(0x7f0000001900)="d2fab43306c6d91ad9e7a5a37637d2f29eedbeb5a930b5c5eb4cb30580f6c4ec60de1265d41b2d4977fc2c940e64eedb3857a109d3be9ec03a21880ae63c115719afd81edce4867d4a7e43812796e1b05ae0ed4cec4e49608650f3ef311935", 0x5f, 0xa}, {0x2, 0x0, &(0x7f0000001980)='nl80211\x00', &(0x7f00000019c0)="284b771c5a62486cc9f3e3db8697a416d432f016aec6f92c5960b6ad2c", 0x1d, 0x18}, {0x2, 0x2e4d, &(0x7f0000001a00)='syzkaller0\x00', &(0x7f0000001a40)="614abe70104720497fcbd2bebfe010f3318ed5e9245a7f2eb12dc7fa9ca4f33854494312249005fff6887c28147024f9832dddc8f34b734ea6905ed0dbc3bbd3725b2d55a0854f158ac00202818d8caa5c73ef5c716f78dc5c4f370fb44d5641f6ce2789b9fe61458f67021a6bb005f4f79f777ff30158120336fe7ff3597b85235ff450f68cbfe4510397c92927", 0x8e, 0x1}, {0x2, 0x4, &(0x7f0000001b00)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001b40)="6b8d7aac4a4ca906342a09df918635970da30f3335adf688b7d8463770391ad5b4d92a38d856c5e8e6aabf35bf665a35573bd293f8dd4ae5071cc87f1479326acf5b0cd613f54dbc80b1490dae7e7729130c6bbe77c0d4295d43f62323c7142ad30a7c15372a60f031a9c9e8a0fa74603bd888", 0x73, 0x22}, {0x2, 0x61, &(0x7f0000001c00)='\xfb#}\']{\\\x00', &(0x7f0000001c40)="2f64133db8caf5009235e9fe974ce180c69693fc1c9e53e2e64a2330e2eada8aaf7b087c665c1f7676f72e952efad372a908572136aa621038f6ba39aaffa37ee714aa73782b607f24f3b54ce6ab264b727276beace8d79891e670f191fb471780090e7618b71a7627c92988445f60c5d313581c475a20737b9daf6fe36243bed2de5e2e", 0x84, 0x2}]}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001e80)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040050) recvfrom$inet(r4, &(0x7f0000001ec0), 0x0, 0x40000101, &(0x7f0000001f00)={0x2, 0x4e21, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000023c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="fbdbdf2587000000080c984ff13f66c90403", @ANYRES32=0x0, @ANYBLOB="31002a008325402c0dffffffffffff01000000ffffffffffff000000009d0b0000ffffffffffff00010000680406000200000000"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x48, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000095"], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1347eb3795fe9957, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r8}}, 0x40) sendmsg$nl_generic(r5, &(0x7f00000022c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f80)={0x19c, 0x1f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x30, 0x130, 0x0, 0x1, [@typed={0x4, 0xed}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x3}}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x4c}]}, @generic="cafa9bd16b32f5b4d6b9a169e6563097bfb639c71554180362b3", @nested={0x4, 0x3f}, @generic="da24d1f81a040088ca774aca9fa3d38246676458ffab9a4e7199de46e3c9c105cc10582f86c80d00ff7abcccee9891c664584052516ee250ebf2f40a8eb6d8be36eba9302ab9f8766f6aa1b065850114c90d77785f0472e664010267e6d1962a9ddd6a1f2a7120d5726201021878bbf7b18ecb5c01f59bc1c9aa0a040b3a38f0b9d8be109c6a", @typed={0x7, 0x84, 0x0, 0x0, @str='+/\x00'}, @typed={0xb, 0xe0, 0x0, 0x0, @str='%)-(!$\x00'}, @nested={0x9d, 0x10c, 0x0, 0x1, [@generic="ca8d7eb4806b91600d8a6893170c7d4d89dc3d7e354defaba9313604e4607059a56180f7d0acde648dd05b02bb1b4f491c9c810a144223ff6af7138f1243c6f78e110e766c0b3bbf538a53693ad251425c5b200ee7ebed9a2969fa8069b8cb8f193b8f97d2857198b6b2a2b4e8297461d83408d4ec4f19f01b1d101705b582f0c342b9f91df7dab59ff0e883ec8ebd206109f30da065496ab9"]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 1.816530022s ago: executing program 0 (id=3310): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket(0x14, 0x2, 0x4) sendto$unix(r0, &(0x7f0000000240)="46375f3e775404233a87a86640f2fc5dbed5b1679a0bbed2e89c06d51001", 0x1e, 0x4000000, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x80000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x4004084) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000003e00070127bd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280725eb86208000700", @ANYRES32=0x0, @ANYBLOB="7ac9952fa1a0c963f473a6ee06813369b6951c324ced699740b005d6b0a43bfd38c4340b77c132ee7edf44a946ca2e381e9e353bd33a0c236d1f6e63f3e94a10f241eca04a7812ea2e9e4e17cefa0e34ddde1aba6caeef703acba626e8ee1c5894ad3ba562dbd9cbd67100dbc28d840a636fe43eff52ac801aaa2692032e3f14ac28a20dc8f826a6012c07a93c59e8fe44efce"], 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x4040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2e, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec63", @nested={0x4, 0x95}]}]}]}, 0x48}, {&(0x7f0000000080)={0x64, 0x3c, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="5d1d172573b738210e6bd97571ced00a22698c7d3a31", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r4}, @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xc7, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x28}]}, 0x64}], 0x2, 0x0, 0x0, 0x84}, 0x380) sendto$inet(r1, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400e890) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000016c0)=0xe8) getgid() getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_UID={0x8, 0x19, r8}]}, 0x24}}, 0x24008800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) socket$phonet_pipe(0x23, 0x5, 0x2) 1.509149916s ago: executing program 6 (id=3311): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000200012800b00010062726964000300"/40], 0x40}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x40, 0x0, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80, 0x4, 0x6}}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800fe00", @ANYRES32, @ANYBLOB="0f00fc0073797a6b616c6c65723100000c00018008001600ffff"], 0x1420}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5411, &(0x7f0000000940)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) 1.372914428s ago: executing program 1 (id=3312): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8efffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x41000, 0xc}, 0x94) 1.038495209s ago: executing program 1 (id=3313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080), 0x4) 958.340779ms ago: executing program 1 (id=3314): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = accept4(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00010000260000001c0012800b00010069703667726500000c0002800600020001040000630621361f976b6259b090ae1f2265879274ad650db170c1a80a6af6d9f414c83b160776215b9ba93a1799201ffc2d6405e358a82609521785e0b8949059bf6af348"], 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@local}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0x1000, 0x4) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbff, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) accept4(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00010000260000001c0012800b00010069703667726500000c0002800600020001040000630621361f976b6259b090ae1f2265879274ad650db170c1a80a6af6d9f414c83b160776215b9ba93a1799201ffc2d6405e358a82609521785e0b8949059bf6af348"], 0x3c}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@local}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0x1000, 0x4) (async) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbff, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) 747.842161ms ago: executing program 1 (id=3315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x20000010) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r3, 0x37, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) shutdown(r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000016c0)=0x40) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r6, 0xfffffff9, 0x8001, 0x6}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r6, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f0000000500)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 475.559438ms ago: executing program 6 (id=3316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'geneve1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000b00000073110000a200000000010000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000001"], 0x18}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000e11ce8dfec3a9e7aa2e59bd56008b8fb8d762fe074a281664050798235c6cad8eadbf99c9e3791fc661074cb6c2e1a81", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r7 = socket(0x2b, 0x80801, 0x1) getsockname$inet6(r7, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r4, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$cgroup_int(r6, &(0x7f0000000280)=0x8, 0x12) 367.471628ms ago: executing program 0 (id=3317): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xe7b, 0x6, 0x1, 0x2, 0xffff, 0x400, 0x5, 0x36b, r1}, &(0x7f0000000100)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6}, 0x1c) 0s ago: executing program 0 (id=3318): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-]$:-\x00', 0x0, &(0x7f0000000040)={@align=0x7fff, {0x7, 0x2, 0x7, 0x3fffc00000}}, 0x965, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f00000003c0)={&(0x7f00000002c0)=[{0x0, 0x89, 0x1, 0x1, 0x3}, {0x7ff, 0x6, 0x2945139e, 0x3, 0x4}, {0x8, 0xfffffffffffffffb, 0x5116d9c8, 0x7, 0x2}, {0x6, 0x1, 0x6, 0xfffffffffffffffa, 0x1000}, {0x9650, 0x4, 0x0, 0x8, 0x7}, {0x98, 0x0, 0x8, 0xffffffffffff13f3, 0xfffffff7}], 0x6, 0x28, 0x1, 0x8}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000780)={0x384, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2a3d, 0x6b}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x400, 0x9, 0x2, 0x9]}, @NL80211_ATTR_FRAME={0x345, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="3ca8aeb53fe0", {0x6, 0x1}}, 0x82, @default, 0x9400, @void, @val={0x1, 0x5, [{0x30}, {0x24, 0x1}, {0x36, 0x1}, {0xb, 0x1}, {0x6}]}, @val={0x3, 0x1, 0xb3}, @val={0x4, 0x6, {0x5, 0x8, 0x6, 0xfff7}}, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xaa, 0x5, 0x32, 0x8000}}, [{0xdd, 0x95, "0ed2dc704a2f3d9ff30c7e81d445a9542c65eda7526a78cf03d8e98dd7d3a144879cbb92ceefe989728b5b3782490217c18f7baa8ae5c8d434f45c646ea1152bf1daae6cf3a91110db601901cfd47bb2928668a226925fd54585b95cf8b620b387fb4aa448d47df09fd8890e6be7f249cbd328152b3b598120041a47173da302bc31a5f74c1854211c372492f8636a8ed3f7bd58a6"}, {0xdd, 0x98, "ee91ee260c70b75d2ab84efe69326dc06a2a2c52c099e49da7334c7247112b1e6d9d791daa8a655f804415cfaba8a6b1b4ffded4adb5056905e16f13ed3cc09ee61a44a6a6e9b1eed464532e0b25454c59d00f2e92e3f410f79dd5be21aff1161d523a60aa40fdfd78ca3ea8bb9c0f5060d44054a14fa0420097869a394522e038679cc2c8abadafcf115f2e3870734ccd3e9fccbd0f9861"}, {0xdd, 0x12, "086bfd19245f3d8661550850c20dafdb62cb"}, {0xdd, 0x8c, "4168f08ec6747c19b55cc2bf8440f688e366707a188243eca5a7664bb96270ce51aa7d3c163b779b000b8caa15d0998bf970307ff687c04b91f2d066c451357b8ad90aee23d38e7b302c5ae4d66da1c1fff03fa512432bbd0231962f10b00a29d77bcd97d4c2af977082b38e4f83217a5f8d5e41f7e1eef8978163e5a4d3154278473453487e6da469c6caf7"}, {0xdd, 0x2d, "44351d3dbbc320486c17fcd106a280b19b784bd2c620af87331694cb09fe4909a8d0499093d4629a5c8efc0381"}, {0xdd, 0xf0, "12994dd1d4486275741ed8645775abdd9712f81124c22d9375f068b36fe4e86328103c9a160c4969ee3236d885b98da8e769f0c68b559a3e26afcbfdf179f0ac6ac31b5f3975d4f049207b0b06730956cd5ba9f7021aa4418aeb92cc0deec1e0ea9462e745c0c1d67052934fb9b6323274a63a37540fb780ff37bc9d5a99fe590c1655a8b2c9f99e81db0c9d5b4c8d266a6fe73e789038ff8055df994d8ee87d7c2119f10f798ef6be436ad3bcc26f854faf91d8c54df4753693bb27fb63cd74c052e89bca28ea2bb9ccc0978e20fd543547938e4b90eb802ad50fbe161039edb17c5ab0361e2eaf1c64d555786fd870"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7fff, 0x6, 0x0]}]}, 0x384}}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000bc0)={'vlan0\x00', 0x4000}) sendmsg$nl_generic(r0, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x3, 0x200, 0x70bd28, 0x25dfdbfc, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x100000c0}, 0x50) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1e8, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd85}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x140}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x41e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x35}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x227}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb52e}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb883}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1e8}}, 0x4800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xf8, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x87}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3de}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8400}, 0x25) sendmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001200)=@phonet={0x23, 0x6, 0xd, 0x7e}, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=[{0xc8, 0x110, 0x3, "6b515ea72540d3fb74b689538796cf9437e3d8d243b2fce5a6aa9caf24c4d9841a256c82c17f5eabcdfce4b77a1c27f8bdec7b76f325db86ed68c4649939233c3e6f27a2f697f560838843d395c13d9d9ed38b5b785e28f1ecba3dbac3e3cb14f29f68f874193b6b95436fb5c1be3ed5b28e1f1adcbb7c626575f51eda5bae4951247718acb30b28ae88ae544cb4ca17fdfa3947eff2c8a94df7282adbab69acb7c7a220425196430dd482f3ed981ebe8c3a2a95f14f22"}, {0x88, 0x11, 0x1, "3b29e865da9a8875151f09bd33d3208478a3c29d4105aaa6af4a95828aad6dec86fc5b56526976e787522727bc3d76ab9b47f2319648b50f578a1805a13f06213d142b553d15ddc407a7bccb08304a9ae63f31718650a63c19f263e7d40ff213e2e4a8ae2802b0364650b0276010dee380f28811"}, {0xa8, 0x119, 0x7, "d76f5b6e0338280d574eafa5d314192a5fc9d4ad77fc20af1c470848ea9e4bb9277052316aae86d8ffe23902d9578a1b7f1b8646d78cbd568e21b47f443396ee4ce1b97c812b8b5619be9c41008db32d5d204b36fddb8b5aedeabe543cb26f53637d5003d496abacf7f69daa43abf62a1f0eef52f50ee3d3ef9423d9af4145c830dc79fae07e893b4517ea772087e81a4d"}, {0x10, 0x119}, {0x1010, 0x115, 0x2, "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"}], 0x1218}}], 0x1, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002780)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002740)={&(0x7f0000002600)={0x130, r8, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x58b8, 0x6}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbb, 0xbe, "daf5925b7b5d04b81a74cdbcc20bbd12a8e248f4d3f645c3b611ae9ef7a2b616556ddf4d5eeacec380fc1d9945044d3cd9061c175fc6f2117e457a026895f07e3d99b094bab7ef741f3dec31b4df08016fe2e0762cf9acba1ca3b362fbf6c3d0e73e0f9c5a2d7161b1b7fdd5678bbb12efec88070db0906a2e7bdb631e5830134394cb33696ec881c56407837c93dc411c63f72a2fb70e35999a52af36a1101f1077325c2d3b0e3f751ed5cb1b84ac07e7a68568141aca"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x7, 0xb6ad, 0xb, 0x2, 0x5bdf, 0x68d]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x801}, 0x48000) listen(r0, 0xa9) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) recvmsg$unix(r2, &(0x7f0000006cc0)={&(0x7f00000027c0), 0x6e, &(0x7f0000006b80)=[{&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/161, 0xa1}, {&(0x7f0000002980)=""/33, 0x21}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/189, 0xbd}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/203, 0xcb}, {&(0x7f0000005b80)=""/4096, 0x1000}], 0x9, &(0x7f0000006c40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000006d00)={0x6, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @remote}}}, 0x108) kernel console output (not intermixed with test programs): .950026][T15873] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 406.658578][T15899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 406.691981][T15899] batman_adv: batadv0: Adding interface: gretap3 [ 406.709975][T15899] batman_adv: batadv0: Interface activated: gretap3 [ 406.753311][T15907] netlink: 'syz.0.2418': attribute type 6 has an invalid length. [ 406.788185][T15907] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.870016][T15910] tipc: Enabled bearer , priority 0 [ 406.895670][T15910] syzkaller0: entered promiscuous mode [ 406.913296][T15910] syzkaller0: entered allmulticast mode [ 406.941231][T15910] tipc: Resetting bearer [ 407.059488][T15909] tipc: Resetting bearer [ 407.080243][T15923] __nla_validate_parse: 15 callbacks suppressed [ 407.080267][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 407.159808][T15909] tipc: Disabling bearer [ 407.189537][T15931] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 407.320988][T15923] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.435630][T15931] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.693389][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 407.723371][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 407.801502][T15953] IPv4: Oversized IP packet from 127.202.26.0 [ 407.966726][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'. [ 407.980891][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'. [ 408.050314][T15963] netlink: 'syz.2.2429': attribute type 23 has an invalid length. [ 408.258135][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 408.301915][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'. [ 408.478172][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2434'. [ 409.186479][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 409.579333][T16017] netlink: 'syz.4.2442': attribute type 16 has an invalid length. [ 409.579343][T16016] netlink: 'syz.4.2442': attribute type 16 has an invalid length. [ 409.579362][T16016] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2442'. [ 409.615780][T15997] lo speed is unknown, defaulting to 1000 [ 409.941506][T16028] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 409.972139][T16028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.990960][T16028] team0: Port device netdevsim1 added [ 410.006141][T16029] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 410.037725][T16029] team0: Port device netdevsim1 removed [ 410.069909][T16029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.092418][T16029] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 410.845974][T16056] netlink: 'syz.2.2454': attribute type 3 has an invalid length. [ 410.936176][T16057] netlink: 'syz.4.2455': attribute type 30 has an invalid length. [ 410.987625][T16062] netlink: 'syz.4.2455': attribute type 30 has an invalid length. [ 412.424668][T16118] openvswitch: netlink: EtherType 50a is less than min 600 [ 412.478801][T16118] __nla_validate_parse: 10 callbacks suppressed [ 412.478900][T16118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2474'. [ 412.596430][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2478'. [ 412.628494][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2478'. [ 413.068365][T16164] netlink: 'syz.1.2483': attribute type 8 has an invalid length. [ 413.095382][T16164] netlink: 'syz.1.2483': attribute type 9 has an invalid length. [ 413.263948][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 414.214310][T16197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2492'. [ 414.559831][T16206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'. [ 414.603157][T16206] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2494'. [ 414.652053][T16204] netlink: 'syz.1.2494': attribute type 11 has an invalid length. [ 414.869738][T16212] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 415.484760][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 415.990553][T16256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2505'. [ 416.037697][T16255] syzkaller0: entered promiscuous mode [ 416.056754][T16255] syzkaller0: entered allmulticast mode [ 416.090613][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 417.017622][T16289] netlink: 'syz.1.2517': attribute type 8 has an invalid length. [ 417.025768][T16287] bridge0: entered allmulticast mode [ 417.780231][T16309] __nla_validate_parse: 1 callbacks suppressed [ 417.780252][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 418.065345][T16320] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 418.102432][T16320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2529'. [ 418.484117][T16339] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 418.503703][T16339] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 418.806522][T10297] hsr0: entered promiscuous mode [ 418.822596][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'. [ 418.892137][T16354] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2536'. [ 419.035361][T16358] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 419.061990][T16358] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 419.586318][T16385] netlink: 'syz.0.2547': attribute type 2 has an invalid length. [ 419.608470][T16385] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 419.681968][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 419.811220][T16398] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 419.864094][T16398] bond16: entered promiscuous mode [ 419.889317][T16398] 8021q: adding VLAN 0 to HW filter on device bond16 [ 420.031154][T16407] tipc: Enabled bearer , priority 0 [ 420.064366][T16413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 420.111784][T16400] tipc: Resetting bearer [ 420.715904][T16443] netlink: 'syz.0.2562': attribute type 29 has an invalid length. [ 420.945932][T16452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2565'. [ 421.093573][T10293] tipc: Node number set to 910570652 [ 421.597670][T16485] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 421.644030][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 421.754909][T16499] syzkaller1: entered promiscuous mode [ 421.776069][T16499] syzkaller1: entered allmulticast mode [ 422.461083][T16525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2584'. [ 422.491949][ T29] audit: type=1804 audit(1780790268.494:12): pid=16528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2585" name="/newroot/539/cgroup.controllers" dev="tmpfs" ino=2777 res=1 errno=0 [ 422.519068][T16525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2584'. [ 422.560138][ T29] audit: type=1800 audit(1780790268.494:13): pid=16528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2585" name="cgroup.controllers" dev="tmpfs" ino=2777 res=0 errno=0 [ 422.586439][T16534] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2586'. [ 422.618765][T16534] netlink: ct family unspecified [ 423.032640][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 423.387085][T16572] netlink: 'syz.0.2598': attribute type 1 has an invalid length. [ 423.405494][T16577] netlink: 'syz.2.2597': attribute type 16 has an invalid length. [ 423.414792][T16577] netlink: 'syz.2.2597': attribute type 3 has an invalid length. [ 423.422794][T16577] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2597'. [ 423.493909][T16572] 8021q: adding VLAN 0 to HW filter on device bond13 [ 423.504761][T16575] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 423.534048][T16579] 8021q: adding VLAN 0 to HW filter on device bond13 [ 423.569397][T16579] bond13: (slave gre2): The slave device specified does not support setting the MAC address [ 423.606897][T16579] bond13: (slave gre2): Error -95 calling set_mac_address [ 423.753285][T16584] gretap1: entered promiscuous mode [ 423.809827][T16584] bond13: (slave gretap1): making interface the new active one [ 423.824617][T16584] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 423.847051][T16595] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 423.869114][T16572] macvlan0: entered promiscuous mode [ 423.887822][T16572] macvlan0: entered allmulticast mode [ 423.904306][T16572] bond13: entered promiscuous mode [ 423.923007][T16572] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 423.967827][T16572] bond13: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 424.024317][T16572] bond13: left promiscuous mode [ 424.122553][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'. [ 424.609976][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 424.658902][T16633] netlink: 'syz.4.2611': attribute type 8 has an invalid length. [ 424.767814][T16636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2612'. [ 424.821842][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2612'. [ 424.916738][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 424.934982][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 425.156530][T16648] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 425.181129][T16648] netlink: 'syz.1.2614': attribute type 6 has an invalid length. [ 425.205519][T16648] netlink: 'syz.1.2614': attribute type 3 has an invalid length. [ 425.249291][T16655] syzkaller0: entered promiscuous mode [ 425.274449][T16655] syzkaller0: entered allmulticast mode [ 425.276557][T16659] netlink: 'syz.0.2616': attribute type 2 has an invalid length. [ 425.314933][T16659] netlink: 'syz.0.2616': attribute type 2 has an invalid length. [ 425.346042][T16662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2619'. [ 425.360254][T16656] ip6erspan2: entered allmulticast mode [ 425.366561][T16662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2619'. [ 425.384110][T16654] lo speed is unknown, defaulting to 1000 [ 425.650142][T16674] syzkaller1: entered promiscuous mode [ 425.663898][T16674] syzkaller1: entered allmulticast mode [ 427.087048][T16716] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 427.179117][T16724] netlink: 'syz.0.2636': attribute type 4 has an invalid length. [ 427.358337][T16716] 8021q: adding VLAN 0 to HW filter on device bond8 [ 428.003412][T16756] hmac(sha2: entered promiscuous mode [ 428.298241][T16768] __nla_validate_parse: 40 callbacks suppressed [ 428.298263][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 428.516328][T16783] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 428.550940][T16783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 428.585316][T16784] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 428.608621][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 428.671689][T16788] x_tables: unsorted entry at hook 2 [ 428.729740][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 428.985109][T16799] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 429.010868][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2665'. [ 429.539553][T16829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2672'. [ 429.690301][T16829] xt_l2tp: missing protocol rule (udp|l2tpip) [ 429.809761][T16842] netlink: 'syz.4.2675': attribute type 142 has an invalid length. [ 430.112242][T16856] tunl0: Caught tx_queue_len zero misconfig [ 430.119973][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 430.308356][T16867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2682'. [ 430.327848][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 430.329311][T16867] nbd: must specify at least one socket [ 430.340045][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 430.849781][T16897] netlink: 'syz.4.2691': attribute type 89 has an invalid length. [ 430.928635][T16894] can: request_module (can-proto-3) failed. [ 431.129884][T16904] netlink: 'syz.0.2693': attribute type 1 has an invalid length. [ 431.142080][T16904] netlink: 'syz.0.2693': attribute type 2 has an invalid length. [ 431.477652][T16915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.539409][T16916] bridge0: port 1(vlan3) entered disabled state [ 431.560581][T16915] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 431.672671][T16933] netlink: 'syz.0.2702': attribute type 83 has an invalid length. [ 431.776460][T10297] lo speed is unknown, defaulting to 1000 [ 431.782558][T10297] syz0: Port: 1 Link DOWN [ 432.804385][ T6401] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.819281][ T6401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.839860][ T6401] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.871375][ T6401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.947598][ T6401] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.948468][ T5770] lo speed is unknown, defaulting to 1000 [ 432.976196][ T6401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.024382][ T6401] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.046555][ T6401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.071823][ T6401] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.114339][ T6401] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.152314][ T6401] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.185435][T16965] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 433.186651][ T6401] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.222238][T16969] rdma_rxe: rxe_newlink: failed to add lo [ 433.345030][T16984] __nla_validate_parse: 4 callbacks suppressed [ 433.345049][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 433.401970][T16965] bond9: entered promiscuous mode [ 433.451200][T16965] 8021q: adding VLAN 0 to HW filter on device bond9 [ 433.491143][ T6401] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.516320][ T6401] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.545050][ T6401] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.569386][ T6401] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.672366][T16978] macvtap1: entered allmulticast mode [ 433.756617][T16985] macvtap2: entered allmulticast mode [ 433.895472][T16993] bond9: (slave bridge11): making interface the new active one [ 433.923905][T16993] bridge11: entered promiscuous mode [ 433.950690][T16993] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 434.677658][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 435.189520][T17071] syz.2.2735: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 435.250000][T17071] CPU: 1 UID: 0 PID: 17071 Comm: syz.2.2735 Not tainted syzkaller #0 PREEMPT(full) [ 435.250035][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.250050][T17071] Call Trace: [ 435.250059][T17071] [ 435.250078][T17071] dump_stack_lvl+0xe8/0x150 [ 435.250109][T17071] warn_alloc+0x249/0x340 [ 435.250144][T17071] ? stack_trace_save+0xa9/0x100 [ 435.250180][T17071] ? __pfx_warn_alloc+0x10/0x10 [ 435.250220][T17071] ? kasan_save_track+0x4f/0x80 [ 435.250250][T17071] ? kasan_save_track+0x3e/0x80 [ 435.250278][T17071] ? __kasan_kmalloc+0x93/0xb0 [ 435.250309][T17071] ? __kmalloc_cache_noprof+0x31c/0x660 [ 435.250338][T17071] ? xskq_create+0x56/0x170 [ 435.250374][T17071] ? xsk_setsockopt+0x54c/0x990 [ 435.250403][T17071] ? do_sock_setsockopt+0x17c/0x1b0 [ 435.250426][T17071] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 435.250448][T17071] ? do_syscall_64+0x174/0x580 [ 435.250476][T17071] __vmalloc_node_range_noprof+0x132/0x1750 [ 435.250543][T17071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.250579][T17071] ? __kasan_kmalloc+0x93/0xb0 [ 435.250617][T17071] vmalloc_user_noprof+0xad/0xe0 [ 435.250650][T17071] ? xskq_create+0xbf/0x170 [ 435.250683][T17071] xskq_create+0xbf/0x170 [ 435.250719][T17071] xsk_init_queue+0x8a/0xe0 [ 435.250754][T17071] xsk_setsockopt+0x54c/0x990 [ 435.250789][T17071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.250821][T17071] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.250855][T17071] ? aa_sock_opt_perm+0xff/0x1a0 [ 435.250891][T17071] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 435.250920][T17071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.250954][T17071] do_sock_setsockopt+0x17c/0x1b0 [ 435.250983][T17071] __x64_sys_setsockopt+0x13d/0x1b0 [ 435.251022][T17071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.251047][T17071] do_syscall_64+0x174/0x580 [ 435.251078][T17071] ? trace_irq_disable+0x3b/0x140 [ 435.251109][T17071] ? clear_bhb_loop+0x40/0x90 [ 435.251134][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.251153][T17071] RIP: 0033:0x7fefbe39ce59 [ 435.251173][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.251190][T17071] RSP: 002b:00007fefbf28b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.251212][T17071] RAX: ffffffffffffffda RBX: 00007fefbe615fa0 RCX: 00007fefbe39ce59 [ 435.251245][T17071] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 435.251257][T17071] RBP: 00007fefbe432d6f R08: 0000000000000004 R09: 0000000000000000 [ 435.251270][T17071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.251283][T17071] R13: 00007fefbe616038 R14: 00007fefbe615fa0 R15: 00007ffcc48f3768 [ 435.251315][T17071] [ 435.528764][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.538976][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.543916][T17071] Mem-Info: [ 435.550543][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.561752][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.571821][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.581915][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.586092][T17071] active_anon:11563 inactive_anon:5 isolated_anon:0 [ 435.586092][T17071] active_file:2889 inactive_file:40444 isolated_file:0 [ 435.586092][T17071] unevictable:768 dirty:83 writeback:0 [ 435.586092][T17071] slab_reclaimable:11878 slab_unreclaimable:148997 [ 435.586092][T17071] mapped:30572 shmem:1320 pagetables:1404 [ 435.586092][T17071] sec_pagetables:0 bounce:0 [ 435.586092][T17071] kernel_misc_reclaimable:0 [ 435.586092][T17071] free:1256480 free_pcp:14786 free_cma:0 [ 435.593206][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.646938][T17077] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2737'. [ 435.697946][T17071] Node 0 active_anon:46252kB inactive_anon:20kB active_file:11556kB inactive_file:161572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122288kB dirty:328kB writeback:0kB shmem:3744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15200kB pagetables:5448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 435.732750][T17071] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 435.766558][T17071] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.796717][T17071] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 435.802578][T17071] Node 0 DMA32 free:1072700kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46476kB inactive_anon:20kB active_file:11556kB inactive_file:161572kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2552556kB mlocked:0kB bounce:0kB free_pcp:57764kB local_pcp:19368kB free_cma:0kB [ 435.836404][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 435.842883][T17071] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.872623][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 435.877502][T17071] Node 1 Normal free:3937840kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 435.909733][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 435.914614][T17071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.936976][T17071] Node 0 DMA32: 4440*4kB (UM) 3823*8kB (UE) 2364*16kB (UM) 505*32kB (UME) 284*64kB (UM) 203*128kB (UME) 427*256kB (UM) 308*512kB (UME) 194*1024kB (UM) 91*2048kB (UM) 67*4096kB (UM) = 1072952kB [ 436.035531][T17071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.092211][T17071] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937840kB [ 436.197381][T17071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.243001][T17071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.292181][T17071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.333067][T17071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.373756][T17071] 44630 total pagecache pages [ 436.393184][T17071] 0 pages in swap cache [ 436.408054][T17099] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 436.418568][T17071] Free swap = 124996kB [ 436.432696][T17071] Total swap = 124996kB [ 436.456055][T17071] 2097051 pages RAM [ 436.470939][T17071] 0 pages HighMem/MovableOnly [ 436.482586][T17071] 427129 pages reserved [ 436.497675][T17071] 0 pages cma reserved [ 436.586499][T17101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.609794][T17101] bond9: (slave bond10): making interface the new active one [ 436.622445][T17101] bond9: (slave bond10): Enslaving as an active interface with an up link [ 436.668307][T17099] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.465147][T17161] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 437.701852][T17170] netlink: 'syz.1.2762': attribute type 2 has an invalid length. [ 437.748521][T17170] netlink: 'syz.1.2762': attribute type 2 has an invalid length. [ 437.848321][T17173] macsec1: entered promiscuous mode [ 438.049722][T17182] netlink: 'syz.2.2767': attribute type 9 has an invalid length. [ 438.374707][T17193] __nla_validate_parse: 61 callbacks suppressed [ 438.374740][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 438.428234][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2770'. [ 439.101986][T17227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 439.164939][T17227] nbd2: detected capacity change from 0 to 8 [ 439.201411][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 439.212429][T11829] block nbd2: Dead connection, failed to find a fallback [ 439.437612][T17243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 440.218178][T17279] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2793'. [ 441.092556][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 441.124571][T17317] openvswitch: netlink: IP tunnel dst address not specified [ 441.140608][T17319] netlink: 'syz.1.2807': attribute type 11 has an invalid length. [ 441.156825][T17317] tipc: Enabled bearer , priority 10 [ 441.505849][T17331] netlink: 'syz.3.2809': attribute type 1 has an invalid length. [ 441.650110][T17327] gretap2: entered allmulticast mode [ 441.724602][T17327] bond11: (slave gretap2): making interface the new active one [ 441.752173][T17327] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 442.107863][T17347] vlan0: entered allmulticast mode [ 442.118938][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 442.127465][T17347] vet: entered allmulticast mode [ 442.234973][T17350] 8021q: adding VLAN 0 to HW filter on device bond12 [ 442.311721][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2821'. [ 443.299762][T17390] FAULT_INJECTION: forcing a failure. [ 443.299762][T17390] name failslab, interval 1, probability 0, space 0, times 0 [ 443.333685][T17390] CPU: 1 UID: 0 PID: 17390 Comm: syz.4.2827 Not tainted syzkaller #0 PREEMPT(full) [ 443.333718][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.333733][T17390] Call Trace: [ 443.333742][T17390] [ 443.333752][T17390] dump_stack_lvl+0xe8/0x150 [ 443.333787][T17390] should_fail_ex+0x412/0x560 [ 443.333817][T17390] should_failslab+0xa8/0x100 [ 443.333841][T17390] __kmalloc_noprof+0xe8/0x760 [ 443.333874][T17390] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 443.333902][T17390] tomoyo_realpath_from_path+0xe3/0x5d0 [ 443.333926][T17390] ? tomoyo_domain+0xd7/0x130 [ 443.333955][T17390] ? tomoyo_path_number_perm+0x219/0x630 [ 443.333986][T17390] tomoyo_path_number_perm+0x246/0x630 [ 443.334019][T17390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.334047][T17390] ? __lock_acquire+0x6b5/0x2cf0 [ 443.334088][T17390] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 443.334138][T17390] ? __fget_files+0x2a/0x420 [ 443.334168][T17390] ? __fget_files+0x2a/0x420 [ 443.334194][T17390] ? __fget_files+0x3a0/0x420 [ 443.334219][T17390] ? __fget_files+0x2a/0x420 [ 443.334250][T17390] security_file_ioctl+0xc3/0x2a0 [ 443.334281][T17390] __se_sys_ioctl+0x47/0x170 [ 443.334322][T17390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.334346][T17390] do_syscall_64+0x174/0x580 [ 443.334370][T17390] ? trace_irq_disable+0x3b/0x140 [ 443.334403][T17390] ? clear_bhb_loop+0x40/0x90 [ 443.334430][T17390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.334451][T17390] RIP: 0033:0x7ffb6279ce59 [ 443.334472][T17390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.334491][T17390] RSP: 002b:00007ffb636a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.334513][T17390] RAX: ffffffffffffffda RBX: 00007ffb62a16090 RCX: 00007ffb6279ce59 [ 443.334529][T17390] RDX: 0000000000000000 RSI: 000000000000891a RDI: 0000000000000003 [ 443.334543][T17390] RBP: 00007ffb636a4090 R08: 0000000000000000 R09: 0000000000000000 [ 443.334556][T17390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.334569][T17390] R13: 00007ffb62a16128 R14: 00007ffb62a16090 R15: 00007ffe14b05c38 [ 443.334605][T17390] [ 443.335599][T17390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.303877][T17396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2829'. [ 445.398585][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 445.585050][T17410] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2835'. [ 445.719936][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.737468][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.747617][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.759182][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.767135][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.814832][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.833982][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.841996][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.850477][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.858329][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.059307][T17420] x_tables: duplicate underflow at hook 1 [ 446.246188][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 446.930508][T17411] lo speed is unknown, defaulting to 1000 [ 447.394505][T17462] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 447.529475][T17465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 447.561242][T17470] xt_TCPMSS: Only works on TCP SYN packets [ 447.685976][T17466] netlink: 'syz.1.2850': attribute type 49 has an invalid length. [ 447.923749][T17466] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.938927][T17466] ip6gretap0: entered promiscuous mode [ 447.945557][ T50] Bluetooth: hci5: command tx timeout [ 447.957448][T17466] ip6gretap0: entered allmulticast mode [ 448.001628][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 448.519154][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.538125][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.551095][T17411] bridge_slave_0: entered allmulticast mode [ 448.560099][T17411] bridge_slave_0: entered promiscuous mode [ 448.619080][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.647536][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.669171][T17411] bridge_slave_1: entered allmulticast mode [ 448.696080][T17411] bridge_slave_1: entered promiscuous mode [ 449.094744][T17411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.366227][T17411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.422132][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 449.546645][T17411] team0: Port device team_slave_0 added [ 449.576590][T17411] team0: Port device team_slave_1 added [ 449.753196][T17411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.775911][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.826511][T17411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.919644][T17411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.934162][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.009790][T17411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.023628][ T5645] Bluetooth: hci5: command tx timeout [ 450.547251][T17411] hsr_slave_0: entered promiscuous mode [ 450.570957][T17411] hsr_slave_1: entered promiscuous mode [ 450.596214][T17411] debugfs: 'hsr0' already exists in 'hsr' [ 450.622967][T17411] Cannot create hsr debugfs directory [ 450.751827][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 451.058496][T17564] tipc: New replicast peer: 255.255.255.255 [ 451.091114][T17564] tipc: Enabled bearer , priority 10 [ 451.147190][T17567] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 451.682590][T17581] netlink: 'syz.1.2875': attribute type 4 has an invalid length. [ 451.761744][T17587] netlink: 'syz.1.2875': attribute type 4 has an invalid length. [ 451.859252][T17581] netlink: 'syz.1.2875': attribute type 4 has an invalid length. [ 451.901548][T17583] netlink: 'syz.4.2876': attribute type 2 has an invalid length. [ 452.107356][ T5645] Bluetooth: hci5: command 0x040f tx timeout [ 452.428426][T17600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 452.546513][ T5770] tipc: Node number set to 4227989504 [ 452.574354][T17610] lo speed is unknown, defaulting to 1000 [ 452.707872][T17610] lo speed is unknown, defaulting to 1000 [ 452.726510][T17617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 452.768790][T17610] lo speed is unknown, defaulting to 1000 [ 452.786946][T17610] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 452.856729][T17610] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 452.894112][T17610] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 453.006143][T17610] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 453.044585][T17411] bond0: (slave netdevsim1): Releasing backup interface [ 453.064244][T17610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 453.162529][T17625] pim6reg: entered allmulticast mode [ 453.186132][T17610] lo speed is unknown, defaulting to 1000 [ 453.254388][T17610] lo speed is unknown, defaulting to 1000 [ 453.255386][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'. [ 453.276028][T17610] lo speed is unknown, defaulting to 1000 [ 453.300611][T17610] lo speed is unknown, defaulting to 1000 [ 453.325287][T17610] lo speed is unknown, defaulting to 1000 [ 453.367497][T17610] lo speed is unknown, defaulting to 1000 [ 453.834771][T17411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.874543][T17411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.898499][T17411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.923286][T17411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.943274][T17411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.970684][T17411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.988324][T17411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.021957][T17411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.183820][ T5645] Bluetooth: hci5: command 0x040f tx timeout [ 454.195448][T17654] vet: left promiscuous mode [ 454.201605][T17654] vet: entered promiscuous mode [ 454.231850][T17654] tipc: Resetting bearer [ 454.261570][T17654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.299600][T17654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.326218][T17654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.362890][T17654] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 454.444447][ T6392] bond5: (slave bridge5): link status up again after 0 ms [ 454.523915][ T6392] bond5: (slave bridge5): link status up again after 0 ms [ 454.569260][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 454.685119][T17411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.762603][T17671] netlink: 'syz.3.2900': attribute type 4 has an invalid length. [ 454.774059][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 454.872319][T17411] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.923671][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 454.959139][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.966453][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.070443][T17685] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 455.121459][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.128744][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.219170][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 455.254009][T17699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.273625][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 455.310221][T17700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.348324][T17699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2907'. [ 455.433665][T17699] ip6gre1: entered promiscuous mode [ 455.466965][T17699] ip6gre1: entered allmulticast mode [ 455.503792][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 455.934196][T17714] netlink: 'syz.3.2909': attribute type 3 has an invalid length. [ 455.971433][T17714] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2909'. [ 456.858895][T17411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.036164][T17411] veth0_vlan: entered promiscuous mode [ 457.080378][T17411] veth1_vlan: entered promiscuous mode [ 457.165804][T17411] veth0_macvtap: entered promiscuous mode [ 457.195130][T17411] veth1_macvtap: entered promiscuous mode [ 457.266938][T17411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.307919][T17411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.397420][T17753] bridge0: port 4(batadv0) entered blocking state [ 457.404352][T17753] bridge0: port 4(batadv0) entered disabled state [ 457.417547][T17753] batadv0: entered allmulticast mode [ 457.437012][T17753] batadv0: entered promiscuous mode [ 457.458892][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.487186][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 457.497770][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.536305][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.566795][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.724041][T17756] IPVS: Scheduler module ip_vs_ not found [ 457.821666][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.837044][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.869386][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 457.879045][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 458.017924][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.037661][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.100438][T17774] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 458.550874][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 458.910351][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 459.161838][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 459.436350][ T57] net_ratelimit: 30 callbacks suppressed [ 459.436372][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 459.624677][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 459.643680][T17841] lo speed is unknown, defaulting to 1000 [ 459.754619][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 459.903629][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 460.043710][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 460.193814][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 460.258586][T17854] team_slave_1: Caught tx_queue_len zero misconfig [ 460.324990][T17841] lo speed is unknown, defaulting to 1000 [ 460.473793][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 460.594175][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 460.640305][T17868] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 460.682761][T17868] netlink: 'syz.1.2951': attribute type 21 has an invalid length. [ 460.744568][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 460.876650][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 461.499092][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 461.902502][T17412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.912501][T17412] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.920813][T17412] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.939592][T17412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.947650][T17412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.218119][T17932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2966'. [ 462.563261][T17950] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2970'. [ 462.746572][T17950] bridge_slave_0: left allmulticast mode [ 462.767341][T17950] bridge_slave_0: left promiscuous mode [ 462.773362][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.802291][T17950] bridge_slave_1: left allmulticast mode [ 462.821779][T17950] bridge_slave_1: left promiscuous mode [ 462.832171][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.853347][T17950] bond0: (slave bond_slave_0): Releasing backup interface [ 462.871358][T17950] bond0: (slave bond_slave_1): Releasing backup interface [ 462.902662][T17950] team0: Port device team_slave_0 removed [ 462.917591][T17950] team0: Port device team_slave_1 removed [ 462.926956][T17950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.935457][T17950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.947701][T17950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.960251][T17950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.971547][T17965] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 462.987776][T17958] netlink: 'syz.4.2974': attribute type 3 has an invalid length. [ 463.219632][T17973] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 463.432387][T17913] lo speed is unknown, defaulting to 1000 [ 463.715983][T17992] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 463.767912][T17992] bond0: (slave dummy0): Releasing backup interface [ 463.817155][T17992] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 463.966040][T17992] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 463.967002][T18001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 464.023816][ T50] Bluetooth: hci0: command tx timeout [ 464.057144][T17992] team0: Failed to send options change via netlink (err -105) [ 464.091872][T17992] team0: Port device dummy0 added [ 464.126696][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 464.141360][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 464.197380][T17913] lo speed is unknown, defaulting to 1000 [ 464.279625][T18014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'. [ 464.704531][T18031] bridge0: port 1(batadv1) entered blocking state [ 464.711370][T18031] bridge0: port 1(batadv1) entered disabled state [ 464.718682][T18031] batadv1: entered allmulticast mode [ 464.726471][T18031] batadv1: entered promiscuous mode [ 464.773798][ T35] net_ratelimit: 22 callbacks suppressed [ 464.773817][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 464.926566][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 464.977908][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 464.992141][T18041] veth1_to_bond: entered allmulticast mode [ 465.096317][T18042] veth1_to_bond (unregistering): left allmulticast mode [ 465.200213][T18053] netlink: 'syz.1.2994': attribute type 4 has an invalid length. [ 465.214453][ T6394] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 465.224476][ T6394] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 465.252519][T17913] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.260203][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.267585][T17913] bridge_slave_0: entered allmulticast mode [ 465.268483][T18054] netlink: 'syz.1.2994': attribute type 4 has an invalid length. [ 465.279275][T17913] bridge_slave_0: entered promiscuous mode [ 465.290535][T17913] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.297838][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.305209][T17913] bridge_slave_1: entered allmulticast mode [ 465.313141][T17913] bridge_slave_1: entered promiscuous mode [ 465.359669][T17913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.374616][T17913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.431822][T17913] team0: Port device team_slave_0 added [ 465.446189][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 465.464922][T17913] team0: Port device team_slave_1 added [ 465.511495][T18060] netlink: 'syz.0.2996': attribute type 4 has an invalid length. [ 465.572554][T17913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.586175][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.659424][T17913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.677212][T17913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.684808][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.717540][T18064] smbdirect: ib_dev[syz2] removed [ 465.722515][T17913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.937207][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 465.956540][T17913] hsr_slave_0: entered promiscuous mode [ 465.963383][T17913] hsr_slave_1: entered promiscuous mode [ 465.978893][T17913] debugfs: 'hsr0' already exists in 'hsr' [ 465.984919][T17913] Cannot create hsr debugfs directory [ 465.993821][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 466.005475][T18083] FAULT_INJECTION: forcing a failure. [ 466.005475][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.033623][T18083] CPU: 0 UID: 0 PID: 18083 Comm: syz.1.3003 Not tainted syzkaller #0 PREEMPT(full) [ 466.033653][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.033666][T18083] Call Trace: [ 466.033674][T18083] [ 466.033683][T18083] dump_stack_lvl+0xe8/0x150 [ 466.033714][T18083] should_fail_ex+0x412/0x560 [ 466.033743][T18083] _copy_from_user+0x2d/0xb0 [ 466.033772][T18083] do_sock_getsockopt+0x200/0x7e0 [ 466.033803][T18083] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 466.033855][T18083] ? __fget_files+0x3a0/0x420 [ 466.033881][T18083] ? __fget_files+0x2a/0x420 [ 466.033916][T18083] __x64_sys_getsockopt+0x1a4/0x240 [ 466.033947][T18083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.033972][T18083] do_syscall_64+0x174/0x580 [ 466.033995][T18083] ? trace_irq_disable+0x3b/0x140 [ 466.034028][T18083] ? clear_bhb_loop+0x40/0x90 [ 466.034054][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.034075][T18083] RIP: 0033:0x7ff9ec19ce59 [ 466.034096][T18083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.034114][T18083] RSP: 002b:00007ff9ed117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 466.034137][T18083] RAX: ffffffffffffffda RBX: 00007ff9ec415fa0 RCX: 00007ff9ec19ce59 [ 466.034152][T18083] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 466.034164][T18083] RBP: 00007ff9ed117090 R08: 00002000000000c0 R09: 0000000000000000 [ 466.034178][T18083] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.034192][T18083] R13: 00007ff9ec416038 R14: 00007ff9ec415fa0 R15: 00007ffef8704308 [ 466.034227][T18083] [ 466.125365][ T5645] Bluetooth: hci0: command tx timeout [ 466.242542][T18091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.564214][T18098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3007'. [ 466.734680][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 466.853864][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 466.973755][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 467.059306][T18119] FAULT_INJECTION: forcing a failure. [ 467.059306][T18119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.086010][T18119] CPU: 0 UID: 0 PID: 18119 Comm: syz.1.3014 Not tainted syzkaller #0 PREEMPT(full) [ 467.086040][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.086053][T18119] Call Trace: [ 467.086061][T18119] [ 467.086070][T18119] dump_stack_lvl+0xe8/0x150 [ 467.086099][T18119] should_fail_ex+0x412/0x560 [ 467.086145][T18119] _copy_from_user+0x2d/0xb0 [ 467.086173][T18119] mptcp_getsockopt+0x12a9/0x1ed0 [ 467.086213][T18119] ? process_measurement+0x195e/0x1c80 [ 467.086240][T18119] ? process_measurement+0x361/0x1c80 [ 467.086264][T18119] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 467.086304][T18119] ? __pfx_process_measurement+0x10/0x10 [ 467.086331][T18119] ? tomoyo_check_open_permission+0x38e/0x470 [ 467.086368][T18119] ? __lock_acquire+0x6b5/0x2cf0 [ 467.086400][T18119] ? __lock_acquire+0x6b5/0x2cf0 [ 467.086427][T18119] ? __lock_acquire+0x6b5/0x2cf0 [ 467.086460][T18119] ? unwind_next_frame+0xa6/0x2550 [ 467.086497][T18119] ? __lock_acquire+0x6b5/0x2cf0 [ 467.086546][T18119] ? aa_file_perm+0x192/0x15e0 [ 467.086572][T18119] ? aa_label_sk_perm+0x532/0x6e0 [ 467.086612][T18119] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 467.086645][T18119] ? _parse_integer_limit+0x1ae/0x1f0 [ 467.086694][T18119] ? __lock_acquire+0x6b5/0x2cf0 [ 467.086743][T18119] ? __might_fault+0xaf/0x130 [ 467.086773][T18119] ? __might_fault+0xaf/0x130 [ 467.086818][T18119] ? sock_common_getsockopt+0x2d/0xb0 [ 467.086853][T18119] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 467.086886][T18119] do_sock_getsockopt+0x51d/0x7e0 [ 467.086916][T18119] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 467.086959][T18119] ? __fget_files+0x3a0/0x420 [ 467.086985][T18119] ? __fget_files+0x2a/0x420 [ 467.087019][T18119] __x64_sys_getsockopt+0x1a4/0x240 [ 467.087051][T18119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.087075][T18119] do_syscall_64+0x174/0x580 [ 467.087099][T18119] ? trace_irq_disable+0x3b/0x140 [ 467.087132][T18119] ? clear_bhb_loop+0x40/0x90 [ 467.087160][T18119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.087181][T18119] RIP: 0033:0x7ff9ec19ce59 [ 467.087202][T18119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.087220][T18119] RSP: 002b:00007ff9ed117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 467.087243][T18119] RAX: ffffffffffffffda RBX: 00007ff9ec415fa0 RCX: 00007ff9ec19ce59 [ 467.087259][T18119] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 467.087273][T18119] RBP: 00007ff9ed117090 R08: 00002000000000c0 R09: 0000000000000000 [ 467.087286][T18119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.087300][T18119] R13: 00007ff9ec416038 R14: 00007ff9ec415fa0 R15: 00007ffef8704308 [ 467.087335][T18119] [ 467.399458][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 467.527997][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 467.625318][T18130] nbd: must specify a size in bytes for the device [ 467.692069][T17913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.711320][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.721502][T17913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.749103][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.757519][T17913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.782869][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.804466][T17913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.828916][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.930699][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 468.012852][T18151] FAULT_INJECTION: forcing a failure. [ 468.012852][T18151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.086866][T18151] CPU: 0 UID: 0 PID: 18151 Comm: syz.0.3024 Not tainted syzkaller #0 PREEMPT(full) [ 468.086909][T18151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.086922][T18151] Call Trace: [ 468.086930][T18151] [ 468.086940][T18151] dump_stack_lvl+0xe8/0x150 [ 468.086969][T18151] should_fail_ex+0x412/0x560 [ 468.086999][T18151] _copy_to_user+0x31/0xb0 [ 468.087031][T18151] mptcp_getsockopt+0x1961/0x1ed0 [ 468.087073][T18151] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 468.087113][T18151] ? __pfx_process_measurement+0x10/0x10 [ 468.087140][T18151] ? tomoyo_check_open_permission+0x38e/0x470 [ 468.087176][T18151] ? __lock_acquire+0x6b5/0x2cf0 [ 468.087207][T18151] ? __lock_acquire+0x6b5/0x2cf0 [ 468.087233][T18151] ? __lock_acquire+0x6b5/0x2cf0 [ 468.087265][T18151] ? unwind_next_frame+0xa6/0x2550 [ 468.087302][T18151] ? __lock_acquire+0x6b5/0x2cf0 [ 468.087351][T18151] ? aa_file_perm+0x192/0x15e0 [ 468.087407][T18151] ? __lock_acquire+0x6b5/0x2cf0 [ 468.087461][T18151] ? __might_fault+0xaf/0x130 [ 468.087506][T18151] ? sock_common_getsockopt+0x2d/0xb0 [ 468.087539][T18151] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 468.087572][T18151] do_sock_getsockopt+0x51d/0x7e0 [ 468.087611][T18151] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 468.087654][T18151] ? __fget_files+0x3a0/0x420 [ 468.087680][T18151] ? __fget_files+0x2a/0x420 [ 468.087714][T18151] __x64_sys_getsockopt+0x1a4/0x240 [ 468.087746][T18151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.087788][T18151] do_syscall_64+0x174/0x580 [ 468.087810][T18151] ? trace_irq_disable+0x3b/0x140 [ 468.087842][T18151] ? clear_bhb_loop+0x40/0x90 [ 468.087869][T18151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.087890][T18151] RIP: 0033:0x7fd88cf9ce59 [ 468.087910][T18151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.087928][T18151] RSP: 002b:00007fd88de94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 468.087951][T18151] RAX: ffffffffffffffda RBX: 00007fd88d215fa0 RCX: 00007fd88cf9ce59 [ 468.087967][T18151] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 468.087979][T18151] RBP: 00007fd88de94090 R08: 00002000000000c0 R09: 0000000000000000 [ 468.087993][T18151] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.088006][T18151] R13: 00007fd88d216038 R14: 00007fd88d215fa0 R15: 00007ffe5447dc68 [ 468.088053][T18151] [ 468.343426][ T5645] Bluetooth: hci0: command 0x040f tx timeout [ 468.638547][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 468.781705][T17913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.246634][T17913] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.460289][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.467545][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.579919][T18172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'. [ 469.595447][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.602653][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.796853][T18173] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 469.813808][ T6394] net_ratelimit: 1 callbacks suppressed [ 469.813828][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 469.974014][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 470.103772][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 470.198571][T18184] tipc: Enabled bearer , priority 10 [ 470.235557][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 470.410138][T18186] sctp: [Deprecated]: syz.2.3033 (pid 18186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.410138][T18186] Use struct sctp_sack_info instead [ 470.428749][ T5645] Bluetooth: hci0: command 0x040f tx timeout [ 470.805043][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 470.963746][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 471.083670][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 471.203725][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 471.339595][T18202] FAULT_INJECTION: forcing a failure. [ 471.339595][T18202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.363063][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 471.411155][T18202] CPU: 0 UID: 0 PID: 18202 Comm: syz.1.3036 Not tainted syzkaller #0 PREEMPT(full) [ 471.411185][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.411198][T18202] Call Trace: [ 471.411206][T18202] [ 471.411216][T18202] dump_stack_lvl+0xe8/0x150 [ 471.411253][T18202] should_fail_ex+0x412/0x560 [ 471.411283][T18202] _copy_to_user+0x31/0xb0 [ 471.411313][T18202] mptcp_getsockopt+0x1ba7/0x1ed0 [ 471.411354][T18202] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 471.411395][T18202] ? __pfx_process_measurement+0x10/0x10 [ 471.411423][T18202] ? tomoyo_check_open_permission+0x38e/0x470 [ 471.411460][T18202] ? __lock_acquire+0x6b5/0x2cf0 [ 471.411491][T18202] ? __lock_acquire+0x6b5/0x2cf0 [ 471.411517][T18202] ? __lock_acquire+0x6b5/0x2cf0 [ 471.411551][T18202] ? unwind_next_frame+0xa6/0x2550 [ 471.411588][T18202] ? __lock_acquire+0x6b5/0x2cf0 [ 471.411637][T18202] ? aa_file_perm+0x192/0x15e0 [ 471.411701][T18202] ? __lock_acquire+0x6b5/0x2cf0 [ 471.411755][T18202] ? __might_fault+0xaf/0x130 [ 471.411802][T18202] ? sock_common_getsockopt+0x2d/0xb0 [ 471.411836][T18202] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 471.411869][T18202] do_sock_getsockopt+0x51d/0x7e0 [ 471.411901][T18202] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 471.411943][T18202] ? __fget_files+0x3a0/0x420 [ 471.411970][T18202] ? __fget_files+0x2a/0x420 [ 471.412004][T18202] __x64_sys_getsockopt+0x1a4/0x240 [ 471.412036][T18202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.412061][T18202] do_syscall_64+0x174/0x580 [ 471.412084][T18202] ? trace_irq_disable+0x3b/0x140 [ 471.412117][T18202] ? clear_bhb_loop+0x40/0x90 [ 471.412144][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.412169][T18202] RIP: 0033:0x7ff9ec19ce59 [ 471.412190][T18202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.412209][T18202] RSP: 002b:00007ff9ed117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 471.412232][T18202] RAX: ffffffffffffffda RBX: 00007ff9ec415fa0 RCX: 00007ff9ec19ce59 [ 471.412248][T18202] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 471.412262][T18202] RBP: 00007ff9ed117090 R08: 00002000000000c0 R09: 0000000000000000 [ 471.412276][T18202] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.412289][T18202] R13: 00007ff9ec416038 R14: 00007ff9ec415fa0 R15: 00007ffef8704308 [ 471.412325][T18202] [ 471.700868][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 471.923913][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 472.418712][T17913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.507227][ T5645] Bluetooth: hci0: command 0x040f tx timeout [ 472.736710][T17913] veth0_vlan: entered promiscuous mode [ 472.805008][T17913] veth1_vlan: entered promiscuous mode [ 472.937056][T17913] veth0_macvtap: entered promiscuous mode [ 472.982337][T17913] veth1_macvtap: entered promiscuous mode [ 473.072014][T17913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.097259][T18232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3045'. [ 473.127289][T17913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.183312][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.242352][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.268826][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.289684][T18233] lo speed is unknown, defaulting to 1000 [ 473.314324][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'. [ 473.352766][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.822894][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.887393][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.139090][T18241] bond18: Unable to set up delay as MII monitoring is disabled [ 474.176410][T18241] bond18 (unregistering): Released all slaves [ 474.519133][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.551432][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.585311][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 474.804057][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3048'. [ 474.887486][T18246] geneve0: entered promiscuous mode [ 474.939310][T18246] geneve0: left promiscuous mode [ 475.105928][ T35] net_ratelimit: 18 callbacks suppressed [ 475.105950][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 475.127494][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2963'. [ 475.263655][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 475.403726][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 475.513727][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 475.624012][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 475.733734][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 475.866732][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 475.993805][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 476.120614][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.135277][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 476.144534][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.155273][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.165034][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.175298][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.283733][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 476.663880][ T5645] Bluetooth: hci0: command 0x040f tx timeout [ 476.846080][T18255] lo speed is unknown, defaulting to 1000 [ 477.513989][T18255] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.521477][T18255] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.542884][T18255] bridge_slave_0: entered allmulticast mode [ 477.557503][T18255] bridge_slave_0: entered promiscuous mode [ 477.567063][T18255] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.574967][T18255] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.582320][T18255] bridge_slave_1: entered allmulticast mode [ 477.591341][T18255] bridge_slave_1: entered promiscuous mode [ 477.645024][T18255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.660457][T18255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.707865][T18255] team0: Port device team_slave_0 added [ 477.718557][T18255] team0: Port device team_slave_1 added [ 477.817544][T18255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.825757][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.853950][T18255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.870851][T18255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.879897][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.909617][T18255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.992438][T18255] hsr_slave_0: entered promiscuous mode [ 477.999622][T18255] hsr_slave_1: entered promiscuous mode [ 478.007100][T18255] debugfs: 'hsr0' already exists in 'hsr' [ 478.012990][T18255] Cannot create hsr debugfs directory [ 478.264524][ T5645] Bluetooth: hci3: command tx timeout [ 478.445609][T18276] FAULT_INJECTION: forcing a failure. [ 478.445609][T18276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.508650][T18276] CPU: 0 UID: 0 PID: 18276 Comm: syz.0.3050 Not tainted syzkaller #0 PREEMPT(full) [ 478.508679][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.508693][T18276] Call Trace: [ 478.508702][T18276] [ 478.508711][T18276] dump_stack_lvl+0xe8/0x150 [ 478.508743][T18276] should_fail_ex+0x412/0x560 [ 478.508773][T18276] _copy_to_user+0x31/0xb0 [ 478.508804][T18276] simple_read_from_buffer+0xe1/0x170 [ 478.508839][T18276] proc_fail_nth_read+0x1bb/0x230 [ 478.508872][T18276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.508906][T18276] ? rw_verify_area+0x2a6/0x4d0 [ 478.508937][T18276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.508968][T18276] vfs_read+0x20c/0xa70 [ 478.509006][T18276] ? __pfx___mutex_lock+0x10/0x10 [ 478.509044][T18276] ? __pfx_vfs_read+0x10/0x10 [ 478.509080][T18276] ? __fget_files+0x2a/0x420 [ 478.509111][T18276] ? __fget_files+0x3a0/0x420 [ 478.509136][T18276] ? __fget_files+0x2a/0x420 [ 478.509171][T18276] ksys_read+0x150/0x270 [ 478.509206][T18276] ? __pfx_ksys_read+0x10/0x10 [ 478.509234][T18276] ? fput+0xa0/0xd0 [ 478.509266][T18276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.509290][T18276] do_syscall_64+0x174/0x580 [ 478.509314][T18276] ? clear_bhb_loop+0x40/0x90 [ 478.509341][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.509362][T18276] RIP: 0033:0x7fd88cf5d68e [ 478.509381][T18276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.509400][T18276] RSP: 002b:00007fd88de93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.509423][T18276] RAX: ffffffffffffffda RBX: 00007fd88de946c0 RCX: 00007fd88cf5d68e [ 478.509438][T18276] RDX: 000000000000000f RSI: 00007fd88de940a0 RDI: 0000000000000004 [ 478.509452][T18276] RBP: 00007fd88de94090 R08: 0000000000000000 R09: 0000000000000000 [ 478.509465][T18276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.509478][T18276] R13: 00007fd88d216038 R14: 00007fd88d215fa0 R15: 00007ffe5447dc68 [ 478.509520][T18276] [ 478.879326][T18284] netlink: 'syz.3.3054': attribute type 2 has an invalid length. [ 479.000410][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 479.471956][T18299] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3057'. [ 479.500947][ C1] sched: DL replenish lagged too much [ 480.185712][ T6394] net_ratelimit: 18 callbacks suppressed [ 480.185732][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 480.323745][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 480.344186][ T50] Bluetooth: hci3: command tx timeout [ 480.433760][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 480.563731][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 480.628100][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 480.673735][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 480.701787][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 480.715110][T18324] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 480.749666][T18324] netlink: 'syz.3.3063': attribute type 1 has an invalid length. [ 480.759482][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3063'. [ 480.793213][T18324] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.804659][T18324] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.873717][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 480.984278][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 481.093799][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 481.203699][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 481.313380][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 481.327512][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 481.367871][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 481.378389][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 481.880429][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'. [ 482.423859][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 483.620660][T18365] lo speed is unknown, defaulting to 1000 [ 484.263863][T11783] IPVS: ip_vs_send_async error -101 [ 484.503754][ T5645] Bluetooth: hci3: command 0x040f tx timeout [ 485.233706][ T57] net_ratelimit: 21 callbacks suppressed [ 485.233738][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 485.332909][T18371] lo speed is unknown, defaulting to 1000 [ 485.386680][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 485.513908][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 485.673995][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 485.803748][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 485.913749][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 486.029867][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 486.153906][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 486.275314][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 486.384920][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 486.583871][ T5645] Bluetooth: hci3: command 0x040f tx timeout [ 486.928941][T18370] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 486.989214][T18370] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3074'. [ 487.348123][ T29] audit: type=1800 audit(1780790333.354:14): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3076" name="memory.events" dev="tmpfs" ino=3076 res=0 errno=0 [ 488.372429][T18396] syzkaller0: entered promiscuous mode [ 488.401800][T18396] syzkaller0: entered allmulticast mode [ 489.314162][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 490.284660][ T6392] net_ratelimit: 24 callbacks suppressed [ 490.284682][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 490.424445][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 490.543703][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 490.635415][T18419] netlink: 'syz.3.3089': attribute type 10 has an invalid length. [ 490.643805][T18419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3089'. [ 490.653166][T18419] dummy0: entered promiscuous mode [ 490.659296][T18419] dummy0: entered allmulticast mode [ 490.666357][T18419] bridge0: port 3(dummy0) entered blocking state [ 490.673101][T18419] bridge0: port 3(dummy0) entered disabled state [ 490.703673][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 490.827025][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 490.953828][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 491.073689][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 491.193757][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 491.313666][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 491.379227][T18426] openvswitch: netlink: IPv6 tunnel dst address is zero [ 491.390596][T18426] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3092'. [ 492.084112][T18447] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3098'. [ 492.124761][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 492.185377][T18449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3098'. [ 492.444016][T18449] bond0 (unregistering): left promiscuous mode [ 492.457584][T18449] bond_slave_0: left promiscuous mode [ 492.470826][T18449] bond_slave_1: left promiscuous mode [ 492.526142][T18449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.581441][T18449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.618058][T18449] bond0 (unregistering): Released all slaves [ 493.297570][T18455] xt_TCPMSS: Only works on TCP SYN packets [ 493.455132][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'. [ 493.471987][T18456] ip6tnl1: entered allmulticast mode [ 493.488088][ T6392] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.711767][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 494.853955][T18480] sctp: [Deprecated]: syz.3.3106 (pid 18480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.853955][T18480] Use struct sctp_sack_info instead [ 495.291550][T18487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.335385][ T57] net_ratelimit: 23 callbacks suppressed [ 495.335408][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 495.453840][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 495.564012][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 495.727359][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 495.756504][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 495.773730][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 495.966612][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 495.978501][T18255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.067448][T18255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.076789][T18255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.091245][T18255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.100213][T18255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.117834][T18255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.127003][T18255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.147452][T18255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.258660][T18255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.290585][T18255] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.312933][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.320177][ T6394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.355185][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.362427][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.407888][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 496.543814][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 496.664776][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 496.774147][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 496.886668][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 497.000236][T18255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.075380][T18255] veth0_vlan: entered promiscuous mode [ 497.091558][T18255] veth1_vlan: entered promiscuous mode [ 497.138030][T18255] veth0_macvtap: entered promiscuous mode [ 497.151836][T18255] veth1_macvtap: entered promiscuous mode [ 497.182106][T18255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.203057][T18255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.223010][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.254369][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.304319][ T6392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.319516][ T6392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.432210][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.456099][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.508655][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.518864][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.695187][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3049'. [ 497.863866][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 499.712005][T18487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.892284][T18515] netlink: 'syz.0.3111': attribute type 21 has an invalid length. [ 499.901788][T18515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3111'. [ 499.914861][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 499.932952][T18515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.424209][ T6392] net_ratelimit: 10 callbacks suppressed [ 500.424231][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 500.481625][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.496645][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.524820][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.535573][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.544045][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.590121][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 500.724794][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 500.844072][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 500.964001][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 501.062849][T18517] lo speed is unknown, defaulting to 1000 [ 501.083693][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 501.203698][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 501.316928][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 501.433789][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 501.553772][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 501.787960][T18517] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.797340][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.806947][T18517] bridge_slave_0: entered allmulticast mode [ 501.816671][T18517] bridge_slave_0: entered promiscuous mode [ 501.826283][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.833946][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.841283][T18517] bridge_slave_1: entered allmulticast mode [ 501.851041][T18517] bridge_slave_1: entered promiscuous mode [ 501.907479][T18517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.922149][T18517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.974382][T18517] team0: Port device team_slave_0 added [ 501.985086][T18517] team0: Port device team_slave_1 added [ 502.038547][T18517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.046171][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.075988][T18517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.089492][T18517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.097902][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.152233][T18517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.452230][T18517] hsr_slave_0: entered promiscuous mode [ 502.489639][T18517] hsr_slave_1: entered promiscuous mode [ 502.529014][T18517] debugfs: 'hsr0' already exists in 'hsr' [ 502.567832][T18517] Cannot create hsr debugfs directory [ 502.664646][ T50] Bluetooth: hci1: command tx timeout [ 503.081382][T18544] vlan2: entered promiscuous mode [ 503.087765][T18544] bridge0: entered promiscuous mode [ 503.424614][T18517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.453392][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.462563][T18517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.482037][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.492636][T18517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 503.511923][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.525516][T18517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.552270][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.679659][T18517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.708525][T18517] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.726564][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.733887][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.752973][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.760251][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.589983][T18487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.741514][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.751053][ T50] Bluetooth: hci1: command tx timeout [ 505.011415][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3118'. [ 505.202015][T18580] bond1: Removing last ns target with arp_interval on [ 505.443872][ T57] net_ratelimit: 18 callbacks suppressed [ 505.443895][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 505.584102][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 505.733724][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 505.855376][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 506.013742][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 506.108091][T18517] veth0_vlan: entered promiscuous mode [ 506.153759][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 506.179236][T18517] veth1_vlan: entered promiscuous mode [ 506.277734][T18591] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 506.289498][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 506.319192][T18517] veth0_macvtap: entered promiscuous mode [ 506.428913][ T5003] udevd[5003]: worker [11829] /devices/virtual/block/nbd2 is taking a long time [ 506.447765][T18596] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3121'. [ 506.490525][T18591] xt_TCPMSS: Only works on TCP SYN packets [ 506.504191][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 506.563648][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 506.576873][T18517] veth1_macvtap: entered promiscuous mode [ 506.696493][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 506.704307][T18592] Bluetooth: MGMT ver 1.23 [ 506.736363][T18517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.759468][T18592] netlink: 'syz.0.3120': attribute type 49 has an invalid length. [ 506.825595][ T5645] Bluetooth: hci1: command tx timeout [ 506.851758][T18517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.905506][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 507.029095][ T6392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.071795][ T6392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.206749][ T6392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.267495][ T6392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.367235][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 507.756137][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.795982][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.940460][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.960565][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.378408][T18613] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 508.418190][T18613] bond1 (unregistering): Released all slaves [ 508.903886][ T5645] Bluetooth: hci1: command 0x0419 tx timeout [ 509.032375][T18615] block nbd5: server does not support multiple connections per device. [ 509.061210][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.079929][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.099017][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.131231][T17412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.140541][T17412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.246915][T18615] block nbd5: shutting down sockets [ 509.331212][T18487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.915654][ T5638] bridge0: port 1(syz_tun) entered disabled state [ 510.523045][T17412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.539314][T17412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.548727][T17412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.568063][T17412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.576153][T17412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.985184][T17412] Bluetooth: hci1: command 0x0419 tx timeout [ 511.225180][T17412] Bluetooth: hci4: command tx timeout [ 511.256556][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3127'. [ 512.664363][T17412] Bluetooth: hci2: command tx timeout [ 513.304289][T17412] Bluetooth: hci4: command tx timeout [ 514.745051][T17412] Bluetooth: hci2: command tx timeout [ 514.852935][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 514.878414][ T5638] syz_tun (unregistering): left allmulticast mode [ 514.885306][ T5638] syz_tun (unregistering): left promiscuous mode [ 514.893343][ T5638] bridge0: port 1(syz_tun) entered disabled state [ 514.984784][ T57] net_ratelimit: 15 callbacks suppressed [ 514.984805][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 515.053955][T18637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.181124][T18637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.383733][ T50] Bluetooth: hci4: command tx timeout [ 515.393878][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 515.553745][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 515.654464][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 515.680471][T18622] lo speed is unknown, defaulting to 1000 [ 515.704833][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 515.966839][T18664] bridge1: port 1(veth3) entered blocking state [ 515.989718][T18664] bridge1: port 1(veth3) entered disabled state [ 516.012044][T18664] veth3: entered allmulticast mode [ 516.042221][T18664] veth3: entered promiscuous mode [ 516.328969][T18662] bridge1: port 2(veth0_to_bond) entered blocking state [ 516.352608][T18662] bridge1: port 2(veth0_to_bond) entered disabled state [ 516.370553][T18662] veth0_to_bond: entered allmulticast mode [ 516.389820][T18662] veth0_to_bond: entered promiscuous mode [ 516.500522][T18665] bridge1: port 3(veth5) entered blocking state [ 516.521985][T18665] bridge1: port 3(veth5) entered disabled state [ 516.541875][T18665] veth5: entered allmulticast mode [ 516.558884][T18665] veth5: entered promiscuous mode [ 516.582829][ T6392] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.824657][ T50] Bluetooth: hci2: command tx timeout [ 516.854739][ T6392] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.963822][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 517.094569][T18676] : renamed from bond0 (while UP) [ 517.231108][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'. [ 517.293231][ T6394] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.464570][ T50] Bluetooth: hci4: command tx timeout [ 517.589097][ T139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.623124][T18631] lo speed is unknown, defaulting to 1000 [ 517.933822][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 518.314031][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 518.464668][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 518.603677][ T1332] bond5: (slave bridge5): failed to get link speed/duplex [ 518.905159][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 519.061976][T18622] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.070069][T18622] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.078069][T18622] bridge_slave_0: entered allmulticast mode [ 519.088263][T18622] bridge_slave_0: entered promiscuous mode [ 519.122544][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.131502][T18622] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.139537][T18622] bridge_slave_1: entered allmulticast mode [ 519.149498][T18622] bridge_slave_1: entered promiscuous mode [ 519.258878][T18622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.288087][T18622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.426536][T18622] team0: Port device team_slave_0 added [ 519.457935][T18622] team0: Port device team_slave_1 added [ 519.560895][T18622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.569507][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.596517][T18622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.625685][T18622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.632838][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.663056][T18622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.979635][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.006884][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.034799][T18631] bridge_slave_0: entered allmulticast mode [ 520.059299][T18631] bridge_slave_0: entered promiscuous mode [ 520.097952][T18622] hsr_slave_0: entered promiscuous mode [ 520.118152][T18622] hsr_slave_1: entered promiscuous mode [ 520.142301][T18622] debugfs: 'hsr0' already exists in 'hsr' [ 520.156086][T18622] Cannot create hsr debugfs directory [ 520.318131][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.365585][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.398600][T18631] bridge_slave_1: entered allmulticast mode [ 520.438876][T18631] bridge_slave_1: entered promiscuous mode [ 520.464429][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3139'. [ 520.474670][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 520.628820][T18711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3141'. [ 520.643285][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 520.989134][T17412] Bluetooth: hci2: command 0x0419 tx timeout [ 520.995741][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 521.085695][T18631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.152562][T18631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.363006][T18631] team0: Port device team_slave_0 added [ 521.467716][T18631] team0: Port device team_slave_1 added [ 521.648004][T18631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.676493][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.765222][T18631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.837211][T18631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.851940][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.905908][T18631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.251244][T18732] netlink: zone id is out of range [ 522.283347][T18732] netlink: zone id is out of range [ 522.322582][T18732] netlink: zone id is out of range [ 522.333263][T18631] hsr_slave_0: entered promiscuous mode [ 522.389869][T18631] hsr_slave_1: entered promiscuous mode [ 522.404740][T18732] netlink: zone id is out of range [ 522.426537][T18631] debugfs: 'hsr0' already exists in 'hsr' [ 522.453972][T18732] netlink: zone id is out of range [ 522.459669][T18631] Cannot create hsr debugfs directory [ 522.472579][T18732] netlink: zone id is out of range [ 522.493790][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 522.515018][T18732] netlink: zone id is out of range [ 522.918981][T18745] netlink: 'syz.5.3147': attribute type 1 has an invalid length. [ 523.032944][T18740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3147'. [ 523.144163][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.820351][T18622] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.831695][T18622] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.929320][ T1332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.563735][ T57] net_ratelimit: 389 callbacks suppressed [ 525.563776][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 525.683792][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 525.793862][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 525.903727][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 526.013865][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 526.157352][ T1332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.264084][T18759] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3151'. [ 526.291574][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'. [ 526.301115][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 526.961540][T18622] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.973416][T18622] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.023779][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 527.154682][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 527.283752][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 527.483761][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 527.719831][T18781] tipc: Enabling of bearer rejected, failed to enable media [ 528.641642][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'. [ 528.718046][T18801] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 528.742286][T18801] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 528.756394][T18801] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 528.802587][T18803] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3161'. [ 529.841821][ T6392] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 529.882749][T18810] xt_hashlimit: size too large, truncated to 1048576 [ 530.593834][ T57] net_ratelimit: 28 callbacks suppressed [ 530.593854][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 530.612594][T18824] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3166'. [ 530.647493][T18825] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3166'. [ 530.719518][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 530.746032][ T1332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.532923][T18622] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.545915][T18622] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.603995][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 531.733758][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 531.854115][T18833] syzkaller1: entered promiscuous mode [ 531.868214][T18833] syzkaller1: entered allmulticast mode [ 531.906054][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 532.035448][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 532.173818][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 532.303666][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 532.433624][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 532.543769][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 532.620767][T18814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.763759][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 533.275920][ T1332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.971634][T18870] netlink: 'syz.5.3178': attribute type 1 has an invalid length. [ 533.989777][T18870] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3178'. [ 535.237813][T18622] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.248620][T18622] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.613958][ T12] net_ratelimit: 18 callbacks suppressed [ 535.613981][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 535.733824][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 535.843801][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 535.953738][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 536.063638][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 536.173756][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 536.283647][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 536.393716][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 536.510730][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 536.624011][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 536.837792][T18878] netlink: 'syz.0.3180': attribute type 1 has an invalid length. [ 537.117609][T18878] bond2: entered promiscuous mode [ 537.151163][T18878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.236726][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3183'. [ 538.279225][ T1332] bridge0: port 3(dummy0) entered disabled state [ 538.331354][ T1332] bridge_slave_1: left allmulticast mode [ 538.370839][ T1332] bridge_slave_1: left promiscuous mode [ 538.406273][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.482453][ T1332] bridge_slave_0: left allmulticast mode [ 538.514653][ T1332] bridge_slave_0: left promiscuous mode [ 538.541270][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.241908][T18919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3188'. [ 539.523860][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3188'. [ 539.780485][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.833048][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.872112][ T1332] bond0 (unregistering): Released all slaves [ 540.532165][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.574604][T18622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.611940][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.625433][ T6392] net_ratelimit: 11 callbacks suppressed [ 540.625455][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 540.648166][T18622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.697580][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.731052][T18622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.774960][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.979982][T18622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 541.037276][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.079013][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 541.369384][T18951] xt_TCPMSS: Only works on TCP SYN packets [ 541.816994][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 542.044184][T18631] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 542.100887][T18631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.192669][T18631] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.224138][T18972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3195'. [ 542.256253][T18631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.299438][T18631] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 542.375290][T18631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.401075][T18631] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.442456][T18631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.464380][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 542.481276][T18976] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 542.500111][T18976] batman_adv: batadv0: Adding interface: wlan0 [ 542.519465][T18976] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.576907][T18977] netlink: 'syz.5.3196': attribute type 1 has an invalid length. [ 542.600124][T18976] batman_adv: batadv0: Interface activated: wlan0 [ 542.800819][T18977] netlink: 'syz.5.3196': attribute type 10 has an invalid length. [ 542.816555][T18977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3196'. [ 542.883109][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.936423][T18977] dummy0: entered promiscuous mode [ 543.124286][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 543.200806][T18622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.318862][T18622] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.388578][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.395840][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.445168][T18631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.504900][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.512144][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.581986][T18631] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.664401][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 543.761197][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.768425][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.157595][T18996] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 544.411162][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.418441][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.466176][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 544.716634][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 544.894598][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 545.054165][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 545.198018][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.684501][ T57] net_ratelimit: 2 callbacks suppressed [ 545.684523][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 545.895158][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 546.093854][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 546.270090][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 546.453699][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 546.645989][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 546.813704][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 547.018360][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 547.253997][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 547.314204][T19045] netlink: 'syz.1.3202': attribute type 1 has an invalid length. [ 547.543952][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 548.229426][T19059] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.327703][T19059] bridge_slave_0 (unregistering): left allmulticast mode [ 548.387357][T19059] bridge_slave_0 (unregistering): left promiscuous mode [ 548.415077][T19059] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.601527][T19061] macvtap1: entered allmulticast mode [ 548.615847][T19061] dummy0: entered allmulticast mode [ 548.633414][T19061] dummy0: entered promiscuous mode [ 548.698258][T19061] dummy0: left allmulticast mode [ 548.851106][T18631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.865716][T10292] dummy0: left promiscuous mode [ 549.440117][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 549.459474][T18622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.800980][T18622] veth0_vlan: entered promiscuous mode [ 549.892309][T18622] veth1_vlan: entered promiscuous mode [ 549.930595][T19084] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3209'. [ 550.111588][T18622] veth0_macvtap: entered promiscuous mode [ 550.177864][T18622] veth1_macvtap: entered promiscuous mode [ 550.290102][T18622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.383431][T18622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.560108][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.598678][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.659391][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.708005][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.773790][ T6400] net_ratelimit: 13 callbacks suppressed [ 550.773812][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 550.920464][T18631] veth0_vlan: entered promiscuous mode [ 551.124676][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 551.257483][T18631] veth1_vlan: entered promiscuous mode [ 551.344147][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 551.509573][ T6400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.523170][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 551.566698][ T6400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.802603][T18631] veth0_macvtap: entered promiscuous mode [ 551.830687][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.859996][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 551.890123][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.961468][T18631] veth1_macvtap: entered promiscuous mode [ 552.096240][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 552.184511][T18631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.224884][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 552.265596][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 552.294061][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 552.319080][T18631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.338117][T19120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3125'. [ 552.468999][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 553.438814][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.623942][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 553.735178][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.777054][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.853119][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3220'. [ 553.925201][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.973730][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 554.013846][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.042009][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 554.193386][T19149] macsec1: entered promiscuous mode [ 554.601772][ T1332] hsr_slave_0: left promiscuous mode [ 554.625524][ T1332] hsr_slave_1: left promiscuous mode [ 554.642795][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.661462][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.706761][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.723610][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.852993][ T1332] veth1_macvtap: left promiscuous mode [ 554.866880][ T1332] veth0_macvtap: left promiscuous mode [ 554.882883][ T1332] veth1_vlan: left promiscuous mode [ 554.893071][ T1332] veth0_vlan: left promiscuous mode [ 555.879146][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 555.950596][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 556.479507][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.525247][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.611566][ T6394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.620454][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 556.638522][ T6394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.753726][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 556.883771][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 557.023989][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 557.163704][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 557.293675][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 557.423739][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 557.563733][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 557.776122][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 557.905012][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 558.397406][T19187] netlink: 'syz.0.3229': attribute type 3 has an invalid length. [ 559.456601][T19211] tipc: Started in network mode [ 559.482513][T19211] tipc: Node identity , cluster identity 4711 [ 559.518591][T19211] tipc: Failed to obtain node identity [ 559.554853][T19211] tipc: Enabling of bearer rejected, failed to enable media [ 560.050317][T19222] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3237'. [ 560.181470][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.189297][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.696114][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 560.974409][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.068002][T19215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.627661][T19243] net_ratelimit: 13 callbacks suppressed [ 561.627692][T19243] openvswitch: netlink: IP tunnel dst address not specified [ 562.022583][ T57] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.273661][T19247] xt_TCPMSS: Only works on TCP SYN packets [ 562.509272][T19254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3245'. [ 563.255920][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 563.276620][ T57] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.302762][ T57] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.169963][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3245'. [ 564.220179][ T57] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.293732][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 564.475806][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 564.528119][T19280] netlink: 'syz.6.3248': attribute type 1 has an invalid length. [ 564.601324][T19282] netlink: 'syz.6.3248': attribute type 33 has an invalid length. [ 564.640312][T19280] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3248'. [ 564.654520][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 564.714301][T19282] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3248'. [ 564.830486][T19282] `: renamed from team0 [ 564.917664][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 565.074229][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 565.233673][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 565.271970][T19292] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3250'. [ 565.519297][T19292]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.599217][T19292]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.639542][T19292]  (unregistering): Released all slaves [ 565.705263][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 565.833664][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 566.659534][ T57] net_ratelimit: 6 callbacks suppressed [ 566.659559][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 566.865533][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 566.926240][T19317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3254'. [ 566.965151][T19317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3254'. [ 567.003690][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 567.138671][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 567.158232][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 567.293716][ T35] bond5: (slave bridge5): failed to get link speed/duplex [ 567.423750][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 567.562352][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 567.693712][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 567.813728][ T6394] bond5: (slave bridge5): failed to get link speed/duplex [ 567.940812][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 568.332548][T19348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3258'. [ 568.377418][T19348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3258'. [ 569.774063][T19376] netlink: 'syz.1.3264': attribute type 4 has an invalid length. [ 569.818386][T19355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.842230][T19378] netlink: 'syz.1.3264': attribute type 4 has an invalid length. [ 570.747854][T19380] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.182252][T19380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.217928][T19380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.111384][T19393] kthread_run failed with err -4 [ 572.135792][ T6400] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.179646][ T6400] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.313353][ T6400] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.623701][ T6400] net_ratelimit: 9 callbacks suppressed [ 572.623723][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 572.681643][T19430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.773272][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 573.878092][T19355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.924798][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 574.045219][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 574.155569][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 574.265189][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 574.383628][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 574.493725][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 574.603666][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 574.713716][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 575.809617][T19454] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 575.818638][T19454] ±ÿÿÿÿa–ïD: renamed from lo [ 576.727231][T19484] netlink: 'syz.0.3286': attribute type 13 has an invalid length. [ 576.818785][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3286'. [ 577.666355][T19489] netlink: 'syz.5.3287': attribute type 11 has an invalid length. [ 578.209957][T19496] net_ratelimit: 18 callbacks suppressed [ 578.209982][T19496] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 579.479304][ T6401] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.598506][ T6401] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.852679][T19355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.255026][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 580.273739][ T6401] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.283343][ T6401] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.294763][T19509] ipvlan0: entered allmulticast mode [ 580.301830][T19509] veth0_vlan: entered allmulticast mode [ 580.316035][T19509] team0: Device ipvlan0 failed to register rx_handler [ 580.373817][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 580.546651][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 580.665927][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 580.762675][T19532] vlan0: entered promiscuous mode [ 580.783755][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 580.955010][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 581.074159][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 581.183722][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 581.251280][T19537] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3297'. [ 581.298830][T19537] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3297'. [ 581.310817][T19537] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3297'. [ 581.320238][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 582.577446][T19355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.821628][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3300'. [ 583.583647][ T6401] net_ratelimit: 13 callbacks suppressed [ 583.583667][ T6401] bond5: (slave bridge5): failed to get link speed/duplex [ 583.733618][ T6392] bond5: (slave bridge5): failed to get link speed/duplex [ 583.926001][T19558] batman_adv: batadv0: Interface deactivated: wlan0 [ 585.385413][ T50] Bluetooth: hci5: command 0x040f tx timeout [ 586.266925][T19577] bridge0: port 2(syz_tun) entered blocking state [ 586.285841][T19577] bridge0: port 2(syz_tun) entered disabled state [ 586.305067][T19577] syz_tun: entered allmulticast mode [ 586.323365][T19577] syz_tun: entered promiscuous mode [ 586.355132][T19584] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 586.387077][T19584] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 586.426160][T19584] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 586.942413][T19597] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3311'. [ 587.464621][T17412] Bluetooth: hci5: command 0x040f tx timeout [ 587.500667][T19593] : entered promiscuous mode [ 587.525844][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 587.644727][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 587.683190][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.697032][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.715078][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.738765][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.854861][ T139] bond5: (slave bridge5): failed to get link speed/duplex [ 587.908171][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.306345][ T6401] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.424005][ T30] INFO: task udevd:11829 blocked for more than 143 seconds. [ 588.438982][ T12] bond5: (slave bridge5): failed to get link speed/duplex SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 588.469380][ T30] Not tainted syzkaller #0 [ 588.493287][ T6401] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.513344][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.569827][ T30] task:udevd state:D stack:23256 pid:11829 tgid:11829 ppid:5003 task_flags:0x400140 flags:0x00080000 [ 588.676227][ T30] Call Trace: [ 588.718420][ T30] [ 588.769703][ T30] __schedule+0x1821/0x5740 [ 588.838281][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 588.898355][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 588.921559][ T30] ? __pfx___schedule+0x10/0x10 [ 588.952712][ T30] ? schedule+0x90/0x360 [ 588.964021][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 588.992557][ T30] schedule+0x164/0x360 [ 589.029335][ T30] schedule_timeout+0x158/0x2c0 [ 589.070743][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 589.107065][ T30] ? __pfx_process_timeout+0x10/0x10 [ 589.113879][ T6400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.167380][ T30] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 589.202229][ T30] ? prepare_to_wait_event+0x436/0x480 [ 589.239087][ T30] nbd_queue_rq+0x857/0x1100 [ 589.274350][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 589.310444][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 589.350083][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 589.360648][ T6400] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.396312][ T30] ? sbitmap_get+0x229/0x390 [ 589.418325][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 589.424677][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 589.451766][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 589.484168][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 589.517291][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 589.544182][ T50] Bluetooth: hci5: command 0x040f tx timeout [ 589.557257][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 589.564850][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 589.582814][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 589.601054][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 589.638309][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 589.644362][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 589.659493][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 589.682426][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 589.695194][ T30] ? blk_mq_dispatch_list+0x200/0xe10 [ 589.704590][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 589.722808][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 589.740689][ T30] ? rcu_is_watching+0x15/0xb0 [ 589.759802][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 589.781119][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 589.805074][ T30] ? blk_mq_submit_bio+0x1b9f/0x29a0 [ 589.828581][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 589.834775][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 589.861541][ T30] ? blk_mq_submit_bio+0x2fa/0x29a0 [ 589.896345][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 589.916700][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 589.939459][ T30] __submit_bio+0x28d/0x580 [ 589.957178][ T30] ? __pfx___submit_bio+0x10/0x10 [ 589.965488][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 589.995033][ T30] ? bio_associate_blkg+0x6d/0x230 [ 590.000339][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 590.025311][ T50] Bluetooth: hci0: command tx timeout [ 590.036005][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 590.051788][ T30] block_read_full_folio+0x7b7/0x830 [ 590.068576][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 590.074459][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 590.097449][ T30] filemap_read_folio+0x137/0x3b0 [ 590.113879][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 590.125231][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 590.136603][ T30] ? filemap_add_folio+0x356/0x530 [ 590.148207][ T30] do_read_cache_folio+0x358/0x590 [ 590.161206][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 590.172701][ T30] read_part_sector+0xb6/0x2b0 [ 590.185545][ T30] adfspart_check_ICS+0xb1/0x960 [ 590.195330][ T30] ? seq_buf_printf+0x212/0x2d0 [ 590.203852][ T6400] bond5: (slave bridge5): failed to get link speed/duplex [ 590.214880][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.233935][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 590.241588][ T30] bdev_disk_changed+0x817/0x1770 [ 590.253636][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 590.265091][ T30] blkdev_get_whole+0x380/0x510 [ 590.275293][ T30] bdev_open+0x31e/0xd30 [ 590.285436][ T30] blkdev_open+0x470/0x610 [ 590.295660][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 590.305178][ T30] do_dentry_open+0x822/0x13a0 [ 590.313740][ T12] bond5: (slave bridge5): failed to get link speed/duplex [ 590.326461][ T30] vfs_open+0x3b/0x340 [ 590.343992][ T30] ? path_openat+0x2df0/0x3860 [ 590.355344][ T30] path_openat+0x2e08/0x3860 [ 590.367528][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 590.383711][ T30] ? stack_depot_save_flags+0x33/0x810 [ 590.390858][ T30] ? __pfx_path_openat+0x10/0x10 [ 590.405726][ T30] ? __x64_sys_openat+0x138/0x170 [ 590.419646][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 590.431024][ T30] do_file_open+0x23e/0x4a0 [ 590.436855][ T57] bond5: (slave bridge5): failed to get link speed/duplex [ 590.453850][ T30] ? __pfx_do_file_open+0x10/0x10 [ 590.460458][ T30] ? _raw_spin_unlock+0x28/0x50 [ 590.473578][ T30] ? alloc_fd+0x64b/0x6c0 [ 590.479515][ T30] do_sys_openat2+0x113/0x200 [ 590.493986][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 590.504186][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 590.515672][ T30] ? rcu_is_watching+0x15/0xb0 [ 590.525518][ T30] __x64_sys_openat+0x138/0x170 [ 590.536549][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.553876][ T30] do_syscall_64+0x174/0x580 [ 590.560052][ T30] ? clear_bhb_loop+0x40/0x90 [ 590.573345][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.596054][ T30] RIP: 0033:0x7f79698a7407 [ 590.606533][ T30] RSP: 002b:00007ffe5828cf90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 590.621053][ T30] RAX: ffffffffffffffda RBX: 00007f7969fc9880 RCX: 00007f79698a7407 [ 590.639143][ T30] RDX: 00000000000a0800 RSI: 000055842fb8d520 RDI: ffffffffffffff9c [ 590.656300][ T30] RBP: 000055842fb76910 R08: 0000000000000000 R09: 0000000000000000 [ 590.679845][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055842fb93f10 [ 590.704170][ T30] R13: 000055842fb84190 R14: 0000000000000000 R15: 000055842fb93f10 [ 590.715580][ T30] [ 590.725873][ T30] [ 590.725873][ T30] Showing all locks held in the system: [ 590.758004][ T30] 1 lock held by khungtaskd/30: [ 590.775208][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 590.803657][ T30] 3 locks held by kworker/u8:8/1332: [ 590.809162][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 590.833147][ T30] #1: ffffc9000613fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 590.863764][ T30] #2: ffffffff8e962df8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 590.883759][ T30] 2 locks held by getty/5392: [ 590.888549][ T30] #0: ffff8880363970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 590.913594][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 590.935306][ T30] 2 locks held by sshd-session/5621: [ 590.955412][ T30] 3 locks held by kworker/0:7/5832: [ 590.960855][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 590.987574][ T30] #1: ffffc900051e7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 591.013851][ T30] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 591.034695][ T30] 3 locks held by kworker/0:11/10297: [ 591.046737][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 591.073598][ T30] #1: ffffc9000e1ffc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 591.103695][ T30] #2: ffff88802a508250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 591.123774][ T30] 7 locks held by kworker/1:13/10314: [ 591.129268][ T30] 3 locks held by udevd/11829: [ 591.141533][ T30] #0: ffff888026391350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 591.175532][ T30] #1: ffff88802509a018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 591.193117][ T30] #2: ffff8880273851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 591.234190][ T30] 1 lock held by syz-executor/18631: [ 591.252374][ T30] #0: ffff88808d388ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 591.398446][ T30] 2 locks held by syz.5.3302/19555: [ 591.407428][ T30] 1 lock held by syz-executor/19575: [ 591.423673][ T30] 1 lock held by syz.0.3318/19621: [ 591.429841][ T30] 2 locks held by dhcpcd-run-hook/19641: [ 591.445251][ T30] [ 591.464083][ T30] ============================================= [ 591.464083][ T30] [ 591.508364][ T30] NMI backtrace for cpu 0 [ 591.508387][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 591.508411][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.508423][ T30] Call Trace: [ 591.508432][ T30] [ 591.508442][ T30] dump_stack_lvl+0xe8/0x150 [ 591.508473][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 591.508505][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.508532][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 591.508567][ T30] sys_info+0x135/0x170 [ 591.508593][ T30] watchdog+0xfd3/0x1030 [ 591.508634][ T30] ? watchdog+0x1c9/0x1030 [ 591.508672][ T30] kthread+0x389/0x470 [ 591.508701][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.508729][ T30] ? __pfx_kthread+0x10/0x10 [ 591.508760][ T30] ret_from_fork+0x514/0xb70 [ 591.508787][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 591.508810][ T30] ? __switch_to+0xc79/0x1410 [ 591.508845][ T30] ? __pfx_kthread+0x10/0x10 [ 591.508875][ T30] ret_from_fork_asm+0x1a/0x30 [ 591.508919][ T30] [ 591.508927][ T30] Sending NMI from CPU 0 to CPUs 1: [ 591.620666][ C1] NMI backtrace for cpu 1 [ 591.620684][ C1] CPU: 1 UID: 0 PID: 6401 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 591.620705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.620723][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 591.620754][ C1] RIP: 0010:unwind_next_frame+0x1c6/0x2550 [ 591.620779][ C1] Code: 24 10 74 08 4c 89 ff e8 18 2c ba 00 4d 8b 27 48 83 f3 01 48 c7 c2 20 a5 c9 8b 49 29 dc 0f 84 b2 02 00 00 49 81 fc 00 00 00 81 <0f> 92 c0 49 81 fc 18 8c ad 8b 0f 93 c1 08 c1 0f 85 05 01 00 00 48 [ 591.620795][ C1] RSP: 0018:ffffc90000a08718 EFLAGS: 00000206 [ 591.620810][ C1] RAX: 1ffff92000141112 RBX: 0000000000000001 RCX: 0000000000000103 [ 591.620822][ C1] RDX: ffffffff8bc9a520 RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 [ 591.620836][ C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 591.620849][ C1] R10: ffffc90000a08898 R11: fffff52000141115 R12: ffffffff816d74b2 [ 591.620863][ C1] R13: 1ffff92000141109 R14: ffffc90000a08848 R15: ffffc90000a08890 [ 591.620876][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 591.620891][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.620902][ C1] CR2: 00005634bf80d950 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 591.620918][ C1] Call Trace: [ 591.620925][ C1] [ 591.620937][ C1] ? unwind_next_frame+0xa6/0x2550 [ 591.620959][ C1] ? arch_stack_walk+0xe3/0x150 [ 591.620985][ C1] __unwind_start+0x5b8/0x760 [ 591.621010][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.621038][ C1] arch_stack_walk+0xe3/0x150 [ 591.621063][ C1] ? arch_stack_walk+0xe3/0x150 [ 591.621087][ C1] stack_trace_save+0xa9/0x100 [ 591.621113][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 591.621141][ C1] ? unwind_next_frame+0xa6/0x2550 [ 591.621161][ C1] ? lock_acquire+0x106/0x350 [ 591.621182][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 591.621200][ C1] kasan_save_track+0x3e/0x80 [ 591.621259][ C1] kasan_save_free_info+0x46/0x50 [ 591.621280][ C1] __kasan_slab_free+0x5c/0x80 [ 591.621307][ C1] kfree+0x1c5/0x640 [ 591.621329][ C1] ? ref_tracker_free+0x522/0x840 [ 591.621349][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.621370][ C1] ref_tracker_free+0x522/0x840 [ 591.621392][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.621411][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.621436][ C1] ? dst_destroy+0x10f/0x350 [ 591.621458][ C1] ? rcu_core+0x7cd/0x1070 [ 591.621476][ C1] ? handle_softirqs+0x22a/0x840 [ 591.621492][ C1] ? do_softirq+0x76/0xd0 [ 591.621508][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 591.621525][ C1] ? nsim_dev_trap_report_work+0x7d6/0xb90 [ 591.621548][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 591.621565][ C1] ? worker_thread+0xa53/0xfc0 [ 591.621582][ C1] ? kthread+0x389/0x470 [ 591.621603][ C1] ? ret_from_fork+0x514/0xb70 [ 591.621620][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 591.621645][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 591.621662][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 591.621680][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 591.621697][ C1] dst_destroy+0x10f/0x350 [ 591.621728][ C1] ? rcu_core+0x751/0x1070 [ 591.621746][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 591.621770][ C1] rcu_core+0x7cd/0x1070 [ 591.621797][ C1] ? __pfx_rcu_core+0x10/0x10 [ 591.621817][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 591.621848][ C1] handle_softirqs+0x22a/0x840 [ 591.621868][ C1] ? do_softirq+0x76/0xd0 [ 591.621888][ C1] ? nsim_dev_trap_report_work+0x7d6/0xb90 [ 591.621913][ C1] do_softirq+0x76/0xd0 [ 591.621929][ C1] [ 591.621935][ C1] [ 591.621941][ C1] __local_bh_enable_ip+0xf8/0x130 [ 591.621960][ C1] nsim_dev_trap_report_work+0x7d6/0xb90 [ 591.621994][ C1] ? process_scheduled_works+0xa70/0x1860 [ 591.622013][ C1] process_scheduled_works+0xb5d/0x1860 [ 591.622050][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.622072][ C1] ? assign_work+0x3d5/0x5e0 [ 591.622092][ C1] worker_thread+0xa53/0xfc0 [ 591.622126][ C1] kthread+0x389/0x470 [ 591.622149][ C1] ? __pfx_worker_thread+0x10/0x10 [ 591.622167][ C1] ? __pfx_kthread+0x10/0x10 [ 591.622190][ C1] ret_from_fork+0x514/0xb70 [ 591.622210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 591.622229][ C1] ? __switch_to+0xc79/0x1410 [ 591.622257][ C1] ? __pfx_kthread+0x10/0x10 [ 591.622281][ C1] ret_from_fork_asm+0x1a/0x30 [ 591.622312][ C1] [ 592.211361][ T50] Bluetooth: hci0: command tx timeout [ 592.434983][ T1332] dvmrp0: left allmulticast mode [ 592.570502][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 592.577577][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 592.586742][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.596899][ T30] Call Trace: [ 592.600234][ T30] [ 592.603204][ T30] vpanic+0x56c/0xa60 [ 592.607238][ T30] ? __pfx___schedule+0x10/0x10 [ 592.612131][ T30] ? __pfx_vpanic+0x10/0x10 [ 592.616678][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 592.622890][ T30] panic+0xc5/0xd0 [ 592.626660][ T30] ? __pfx_panic+0x10/0x10 [ 592.631165][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 592.636609][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 592.642835][ T30] watchdog+0x102c/0x1030 [ 592.647239][ T30] ? watchdog+0x1c9/0x1030 [ 592.651805][ T30] kthread+0x389/0x470 [ 592.655923][ T30] ? __pfx_watchdog+0x10/0x10 [ 592.660654][ T30] ? __pfx_kthread+0x10/0x10 [ 592.665296][ T30] ret_from_fork+0x514/0xb70 [ 592.669976][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 592.675134][ T30] ? __switch_to+0xc79/0x1410 [ 592.679879][ T30] ? __pfx_kthread+0x10/0x10 [ 592.684527][ T30] ret_from_fork_asm+0x1a/0x30 [ 592.689353][ T30] [ 592.693067][ T30] Kernel Offset: disabled [ 592.697416][ T30] Rebooting in 86400 seconds..