last executing test programs: 4m12.612194416s ago: executing program 0 (id=5123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x2d, 0x0, 0x9}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000705500000000000009000000fff5dd00000010000100050808004149014003000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xac, &(0x7f0000001240)=""/172, 0x40f00, 0x4b}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4m12.476088795s ago: executing program 0 (id=5126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x2}}) 4m12.308652944s ago: executing program 0 (id=5130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x40, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x8106, @val=0xc3f339eccd85e028}, "134a318536459f4c07660000000000000000000000000000000000000000000080f6d65e2d6015a6749554c6253275f5"}}}}}}}, 0x66) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x1411, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0xef58f0937f2f9031}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000811) 4m12.024024667s ago: executing program 0 (id=5136): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5661929908bb5f68561f4c5cb49135e7167039dcaf891181545a8dcfb734b47763c7cad6251e3c048d0de0bd40cacf6dd7a5959e173e2adb6fc7847d9905345565bfa2abfc61497df27cc79d2139453b05e6885a043541d666ed6db90b160dd8cb5982316dbc6eb0fbee73a634aa152feb8137b299", 0x75}, {&(0x7f0000000400)="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", 0x3d}, {&(0x7f0000000240)="bc65a72a7b723fa63b3101d8777939bf42f0a69315cc6e639e8bfe6c5671f01e15d07a4e49380121fbeea6c83338853b911a783f1a8eefc00c79c0fd1d1e77ccbb52d6ca329ff31c8333a4b638b0cb14969fdda8cbabd92e522f134ec7285b425f964d8d5cd564f2c0fae23f3628d0a3e1f3b24fd67e80b04cc75b05ca46e3e41336", 0x82}], 0x3, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff0}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @timestamping={{0x5, 0x1, 0x25, 0x5}}], 0x60}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 4m11.926888976s ago: executing program 0 (id=5138): r0 = socket(0x1e, 0x4, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000300)={0x5, 0x1, 0x80000000, 0x8, 0x3}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_newroute={0xb8, 0x18, 0x100, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x10, 0x0, 0x0, 0x1, 0xfe, 0x5, 0xc80}, [@RTA_ENCAP_TYPE={0x6}, @RTA_METRICS={0x91, 0x8, 0x0, 0x1, "b9831891575f9e1c2f25a9baf23f2b8b0d8c6e3292ddbe6b22340552f743bb34777925fd66581db1bcadbae9a68f4d2121cdd5a74229a6c53b5e8cc0769cda13bef32393887e967060b92256e66600576cd5e64fd48ef06ac4233e360ca3d6e814ec81b558d38e6f1d886c0bcf125455d19dc28ae7e8ce2f6af18c1c57e5667b975ad423e174c57dd2df1d35e7"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48800}, 0x0) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="110000000400000004000015", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@i}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec7290f21bd072950ded39556e", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}, {&(0x7f0000000280)="c6e5bf4e5ba26d3e5c9bb5360f92e67a44ba6b62e2274d6487af77d783d4c6693cee943690f5864e779d1beb21efed6e6d476f87"}, {&(0x7f0000000040)="dcbe422f5d028b81e662578f53c6471fd1c854f19dfa4247ae100a162723a5a403ccb3dd5913918efd77b8c43fbc4981d9bafc3b48e16322a5389908ee89a3c08fa633f1ae892c748b831b5b007a53f960f174194ce4812b382d45c202230aa6be00be2fbb427a3a"}, {&(0x7f00000000c0)="d1bc1a7600e5a60a93d380d591a3ee81db3154323e5c991f724a3fb2ef7fce391b98a4c3dee9b879f3c7f9c8ea68e307bd072d45d3b6d21ac4b6a820d8b9d3f6ab9c2a99257afdff89172e4c0118cd53e3620717e20c3f3a2f7d36a39493b166bcb349e584a2d14678b014398a181abcd2e3aef487a0667aabc0f4927dc0f23f897606e702a0ee605e8a0c3336b2936f03dbef8244cd3f87de18e4374edf5610cd7e53baa579063b65fdcc608037b6459e05632743841ec2ba0f81aaa631d64e2a33955d814e"}, {&(0x7f00000001c0)="93890dce91f8091f06ba66f5ad81571882d65b82d7ab4616336da4ecaf1965633209d1f7a7d363f8dadd4d6a3926d74bfec60d9d08bf196fe146"}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61152000000000006113500000000000bf5000000000000004000000080000003d0301000000000025050000000000006916660000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4m10.93912831s ago: executing program 0 (id=5149): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x6, 0x0, 0x0, 0x8, 0x80000001}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x6, 0x0, 0x0, 0x8, 0x80000001}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000280)=0x4) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000300)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000300)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r5, 0x6) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xdffc}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x292, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x292, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) 3m55.899524734s ago: executing program 32 (id=5149): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x6, 0x0, 0x0, 0x8, 0x80000001}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x6, 0x0, 0x0, 0x8, 0x80000001}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000280)=0x4) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000300)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000300)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r5, 0x6) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xdffc}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x292, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x292, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) 6.046012779s ago: executing program 2 (id=7223): r0 = socket(0x6, 0x1, 0x2) (async) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x1ff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r3, 0xc79, 0x3, [0x1, 0x40, 0x4]}, 0xe) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000001b80)={0x1058, 0x14, 0x200, 0x70bd29, 0x25dfdbfe, {0x28, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "1dbfadf24ccd04e13fbe7810813c950cd796eb1fd345e781220e839de97ce03aac5e79a23c2d058e5903f5eab2a784a1eb77bb83d6e84192861bb0a54eca2b80dd440a845130430369d1f1e59a426b8b7623551f999e7ef3c447fcc69d4238323f6f6228a887e0866acc76c10bd97fa024069eaf6593339f582db36a145141491714bea58c1f6d22c9f6a5c1972e28a8f078d3ba866491199dc2e00cf55644e0cbb5e58f5c5e83951fb01931c1e44207d03bfe2da18c9074758ff4b851e80227748b45aa9f5fbbde755277967ce8c02b01b1da01ad56dd0b8aa1786088f13dc1e1f5ca0c7af846c99de94e32ef9be099efdda482ce22667087631a5323b479add17d68db45993fad94391ad6c01509093cd76576102bd93a632806b50c1476f039eb64a77236071f49f91dc9d7d3f297b0b0c1334a26ac87762c3ffc1f2dd8a4362be6f13c41d0a863e05fd73e6ec622ef85b9830a16e74c9f2b0311e7a402a90b0497d098a1fa669c14c72e01c50be28162ad5f51933dbca3b36bf9856757f15ba07d9269908ee904a696211e16408b90917b6dfbbe4b29b8b76b1925b3c922e9aa623e247b15d487e1547cffb8e1ccebbaffab9b7aac1854a544fb4b20697a9d83bb9e748c2382017c5accd5715066e94a4b7ce5f7cc3ae68da337fe9bc0a8af356c56a85a428de9154f338727cb3f30201fe4f75bb2b4d3dbdfbb1711bdd2c4ffa1bc02d5dd0c7b1073de7a947c2515ac31f773af9058982adaf6561500192ea7e3eab581e33ea103f5a6c9ec646afb9a9c5e9bfb04bafc57dabda8ce4e4289fd24015205aa29d406417c4da62b2f1707816e250f4b1c27f4b532a12affe4e29d7705500ff7270a183c854e7cb1d93ff6246b157f231c7420b1b0abe100b841fb04e98d562197bf999d1ea1090842691724547aab221404b54ce5ec49961ed09a15cc9e3fc2b4fbaa9c055c913f3f463ec9fcdda26fda1c83a7f1bf38eb203b4de2a7337b0117e5cb6650d4cbc08d813c332032a72c7bb0b4e66f1e16bb687aa8f0d89c531a95308b4e3b652744b02083eff2ba3a73df4fc922448acb0797f416af7c427bf1d265ec0ca09f59188e0dc32d4348934a529b6fc9c4c77cbbf1b05b57d1562e8e05aa10c156df164101ca08a99141938d6ee01a647e9807ae455fc5a61757e1c4a1a44b89c95988673e202d7ff223b976328dee596531c754fcad80e3c60765bcdf5542cb7547aa343bbc471388302a4a5b4f10ce4899c46debc4a49e96a11d9f6c1691ea89849e79b168022e4f1039de98c4fe96bc4c7aae3e6d4f0961954b5486f4638d8a53b26c86a3891e20e3868b61e0ffbb84aa5e3a4a44de0e629dd7080beee3b2a8b7cb1a6c82e9ad343b7038a4ca51c5ebb72bbc1c2efece9cb0c090302246d604855ea24bf9f616eb97e77cd24c9ca474ef2e492d5b82c1146ed00efbc0a44521fd6c98f351f3c14af7ef934577a9e758c109d3b611c861a1d06c154bcef63b9e3617e2a53bfcd83cc8226974924e48bff29fbef136365f51eb832076842f4eeca66346de657fa99d720a96987d8307a0da175b2c3dc2ea81c801c5f14200cdd3f9adec6aa9de77567598bd550a2f38228b48c362e39f32c90a1469eb5f45b79735fd2f688560023a92a5d79cc3f14f9257d3e003ae8c038155ba62b29e057be46377a9c645eebe2e70e0677c7aa9962eb553974e241b8f6f30dbad957a1c8409015b377a41684924e1c0f47c2ca0945d8ab8835b6787d23a8b5c08f73e686f66f5bf6e253352524948d2d495e56e2cc24e1c7d73e50fc3b42b599c777ce9a201052e6e906c257e9fb6ddab2a7f67960559e88cd441349bf5c6f8067811def9bc24829655f244e99348fce8c500b5655ab5f1805d4d2bd4748fe3b79a00e189ade63650df7426291a8b5f63703fa674d8b7aefb3bf415fbec1863dcfb848a24a7faf3a568ef6a053315125361600bc49450b59e9dc500b0ce85039d6766cb861839cd498e6b8c30735d97824905c4c44f9ee3438e2d2c785a1b57477ce74dbaa91bbf1101312d7f273accecefa1f76aacabb874564728b4c6942dc0bdbe461fded8e98e539638a4c0997a36fca648641ece6e47fb1ee0ffeb41802d0a0e172a19fc0369ec5d95d7e37369f5ccf6d425bbe0a4fedb753db3e7949c59c9f972f87f75baa220fc032fa63bb7bb7c76386d4c5f4078b26e7b871c76bfe9990e31104ed074540fbdee68d766fe9dd1c9d6cab0e8e19ec553c0e19a54d92d0a0cd6b9eab9573c795363176c5b0cb50437a45578dc3064ac61363a98ea9a5a231485c8714550a14c2fb65ff2dcaca954a46ce2e5b0ceaab631510bd69f2b5e22579ca9fbac335ad9999d3d78f0ef7830b5ae8a78b7f7be80c4cade1cf77d0d067853b06ab3e5c2a90ed7caea64b1efc4ffeeee95c076eb4ec31baf4829ffbd2ff06ecb645998221d35bf7f2a5e5183caedf768aa269c4c72f3c802aed4036695415ee09a1bfdd6cc5c211a9191191cf1fb5da981ecdc06177861162d9dd61c93d171b88932896a44ca346c24c8fc18d37390a0aed20c08c73b8c736081e84c3598fb426ea896bbba1ab89f68dd6a3c163aa28f9a0653cfbb979029f4336ef6dc3a393dc0705607d217a50a296c286f12793999080636ca2288171843c5f88432eed9a65ba74ac0d1d1e0d5f17596c5d98baa8a2259d224e280caab25ebe325ba339d29076747239cfb1be554d287f15ed7bcf75eec2c90a7056e11cd5ba88978113f5c71af08d732a6eee46a7c5aed4daced2c6818ae20b6be09c3e34e40ac744e2395e98965dfdbb8c94ec45b7c611e3ab5031b19f735e81ee58d042efcb8e995740fa178702ab7ff233c5f46574c6c5906ad7f7e5f8c04f9d47b35e9d995043fb606c541fdde3845f88951f98ac6bd8b3c1e6441a6e0b26d7ffa005288bad71a926e7997615f9effdf4c0cdab8e4f37dfd1911ddef92da9a19a4e1e90a754a2d64bc8b9e6f402d516e739c5d293aecb060f41d646e327d0fcb8d9ec5c5f2688572b80ec2a957c726b8bd53fa8074fa6b5b26059c1ffd2f4c58fc4bb15f2fd30b9cf85a96ade1e2d0e9a1112489b4ee91fd4e12e8060c765ddcb5392dff92fd3591a7b0b628a6e40b1dda6dd911acc11d67b838a214b43868e186cf04d67e02d3755e71b8bafb4f6c1dfca08ff89551e1310946b7331c112dc49feef0b99fb8bbe4b0af4e73d1cf855c5e7df4a62c6e9820ecc79936f0ef81dd4033dc535dc5c00a70616440089adbc3bfdfe7d99d95f32d4bc73b2d4ca153f440b251b7b9b62c56a077fc64c41571eca95951d553a7ce833d9515e4d45267018e210f414d26515e98350eb3bceffbb4ab35fb05fc71a8d7e6a868a587b88e689c117379bd0b5e69e926a7cfb2fcb17bef559bde9965f826208b1bcb70925499183f3c47b50df5adcacf9c57d917e7ecc0dab6ed756a769b36ffae66697872f9ddd57f1a65ef27cebebe69f0d8231c670522629c120c36cf99ade7814b2efb2461a0655d449a9ac3c25f8362e585183ed3fb65cab00aad5d97b743dd9c7b1a1843e883b4b3c8ef0a38708ddacf182c13187276e1187675b2439cdbdf1bd73e9729ba257e1f3eaef4929ccf706897dd6648bc8dcaa10ab2ec72890f85f6c6a49fa60e20934decb88916d42d1a09056ba2b99b2fb2d5f46b2f72b96f324ce3fbfef1d8550abee91bde25b505409bd376a360d4785cada72cffdd16949bb7b5c477ea950e910a3b28af9d28a646ddccb118b9959b393648487ccd2bcd88811f7cac7c42de55b5b4f8679fb7ed7b696f72a0a6f3f7203a330a0fbea8be2e3174318bcdaae42c38a3cf3326d46fee93bbe7e5963afeba0716501cec222d9b6de8efa906cbe85405987eefde5c563e4971e7b9785b20da58aff6c1c85f7f809132de158a845b959ebca6a6b82d6525bf6d64bc2a687138a344c63d1c217799512df4e24d457209de4e081c63fac582c326f5190403cbd23f3ca5672d34b184a9d17863354c930bcc747f105e2a430bd563e4a03f3606b5e52e1ec1cfce08492c36c90a91a955ce6b90d91bdec02c4102d23f597ce57f8279570a08a6beebf52f1db1b7d63d28d6226eb19d6041569c3593788456d16eac26fd687376d855f3e831c1f1ca0a4c55ef639fe8f4ca90919df30c2605cd1732fd833735fcb59bc2ced17101c1b53545478c91a244cd5b7a1e2d28ddc1c8b0e09ee17bb6db8f7af6a7222383f709b4bcc6667f394294f2df981f64deffa2a982bafebe9e7bf927c7d19d0afff8b4a2d5e74e5dc19065b65998791e9eef4072d0001557dda56794ce9e31674292a982d627cb1384fc851150bd6d95fa04afe28515151da1ca4b7c10b0bf4b56b96a610f6ddaff68c7b097960ac2104c5f9b1743157ad217c8a207df86ef7b2789c2ebb97dd43957325ca8d7625849e27d078a6d44e0431db8baa0471840696913a2639ec0274b9ca5762f548d0d83f9736408c9e0d45b232670c74c62da331f927665bc99df867f48a3f35ef853d47b8df9bd224a5b9212a163fcdc7498f1fdfe5bd7d61b19625ceb01f537954474d1d53a12e2ec748b6fb8d8691330e2a41272d059ba1bc69018de82d557c3583add199343eb040ee24d65101c74ff15cbe020def75e36b2655e5669749036443eb0f3efd5dd09f15d1b694f94e8cdca05eb49d46dab73cf487db2145627898617fe7d91648aed77e700a729217f38ac179bc6ec04e71d9305fbfd2089c5819878c3b1d944babf639bc8c7463128c9e8d79ad1bb30b5ffbb208a452dc8c74cebaca690fafa8efe43115578a9f6fa05563b9728f01069bb4cfda7177d3c646e0e5a6e6ddf74a2da658f78d056fad8260671b946066fd53e60e5b94e697b9cb0477b7255982c4aebb7a1564e50ed1f95c25e6525e2c728b3247770d2cea4ffaeb4f26de27ddd502d2521081bd6f7255447fb4b0ffd1034519e11ebb10e749fa7a967fbe4e17c80b8843a07f03375bd88854a04e765e8334ea4f7d717f5a1ba670b3bd1ad3810f4e26ee76113f22b4262a845006628341d699b94a2e9c5cab216f6a7c6b4f9b50b8cee85240d2c0bfe49ad090e07314d2af06cb12a949909ba9e9d8b173d6f6fbee5dc3181f524e85b638c98707854af2c081c252c2d7ea0c9a2e787c7db438b30ca5698c5f2d9fc66f9b42e3e5012d1225a12c70ddb8af9b3689a513f460a75267fd9eec7f2948eed23b96413d9ceefe27cdacd562967ed049a3652d1555d4a854f1078ad5c5648028c2c6f04354152aa1e240ed3b2f7284f78dea4db6daf4f0c09f6412f2b7316bd40181d060f461b9d7878c2c77e4b2b8432d8416faf17c7f109acc2375c785bd779dac9f971499e155f3e0483abe4916e115c00d7fea588338ee0b6983a14d216535909392c850e2c0d45cbd2630929c187d77a1b3a790b2191f40a4d7a53d8fa95ba091a960eb3d1d11d0763a6e283ce57838a22a14a1c5239d3b9173ab10e08cf697dacf635cea5704b3a87eb6ab51f9fa13d8b604d31b91e66388f7bc2676d93a7d2d09c48eeff0012d44bda480085ec10b2abd0b49dbe9a42126f37fc09325f7f36172c4bf293b985d5ece87b5910859c7d16ed1e88ae4618a3949c5a90b6ec72d0238c85134a416f9abdda241d95ed39d2ffff30cf50ed307a877da9f12ea6b375cccc7e190b59079d59ad67d784cb9a868ae584e8f60307f1921d7923528aa39287761fec0552ee6610a1d7150c1ff44d1f929e9489cd009453d4990426316f"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "5806518967df1380cb45c7ecb70ad63c522f4ee7a95b2f7e09832289184bad5cbfa3e0bb5ceff280a4fcb5edfb138e6c560c24f7961ca00c53a188"}]}, 0x1058}, 0x1, 0x0, 0x0, 0x10}, 0x20048081) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x2}}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xfff3}, {0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5b, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x5}, {0x8100, 0x5, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x1d, 0x4, 0x0, @private2, @mcast2, {[], "99e94bd732d3a74eb514f6cc32d5e061574af3d2a0e03cb60881db3d33"}}}}}, 0x0) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000051c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005180)={&(0x7f0000001740)={0x404, r10, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x304, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "55bdcd73a961"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "181571b8ff60"}, @NL80211_NAN_FUNC_SRF={0x138, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "e515b63c4f728a207f599cf2c329c9d1e3a199769224d7bb6f1a7c706192caad00ac54eb52f81f916409468ecb9458400c80d25183f61860d30e201369c2085aef10b91f12f773f9818e42b8eaddc77d6f9ba848e5190017b07d30732363b714dc4b0440fc10ac1daffa6ab6b0f14a172c12ceb7f39b824b95c1e4b280df664832518e9fbc13f9a4066bcdeadb1e8100eda266de2b90c15866742c340f489c01f042dfadbdfe102ce2261c86392ed303d97e0f7d5a1b036ac405582eed7256dc481687aba0676a2ba97a5199a4447c4a855c332cf86289ce8d166482ad74388d81824e0e7c288ae689d6a98a1a6ee2338ab344803d83e6d3daa676b9849b91"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x7c, 0xe, 0x0, 0x1, [{0x76, 0x0, "daf6fc6032b226a47449c2c28f1dce1930694021aebb3b66b11f90e259f0dd545fb6c18ca7b9bc8916e8ba57d00076d7a6ddc2214ab967f46cfcef078b166394c0670498a566839386b53151cd3684587a6f43f29622125f27fc4ffd9dc10bf9a7700d077f213cdac3f0bb1cd354091429e1"}]}, @NL80211_NAN_FUNC_TERM_REASON={0xffffffffffffffa9, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xcb}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x19b}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2ddddf1480b8"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xc0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x71, 0xb, "87532288ac9c6fea60567edbbe96488c90126f4fc2ec7bd088cd17939966135c0e7eb2ef5f7e3907b86f300d57077c1c1f4ac3f31451aa9115a7df6ebe59a90968308c2c9195739ed24052382de2f180d07399a0eceb1c9d088de38f13df47857e1131c89762536730e7710729"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6ce42222f22a"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "88caa73c330a"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xc}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) (async) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 5.696844543s ago: executing program 2 (id=7225): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000007600010000000000ffdbdf25030000fa"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x884) 4.970981445s ago: executing program 2 (id=7230): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000040)) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f00000000c0)=0x1a9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x3, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000240)={0xc000, 0x7fff, 0x1, 0x1ff, 0x4, 0x0, [{0x6, 0x5, 0xf, '\x00', 0x2000}, {0x4, 0x80000001, 0x7fff, '\x00', 0xb84}, {0x8, 0x6, 0x80, '\x00', 0x4}, {0xfffffffffffffffd, 0x96, 0x631c}]}) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000340)=0xf, 0x4) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000380)="f2678b2c3d6b5b27fe81c07141") sendto$ax25(r0, &(0x7f00000003c0)="e5636b472291403a192861be8708b91f121e7e8f27ae44a5002c982cf39c4d870cbf53263c47106eac2c0e65419681dfe1a111d6f81167bb0c49b1854a70d8704f83df7ee9e39cf69569868463e64dc7a88ec3bd98c38d1f388fce4fc2c9a06c7310466fb80fed5a13bd64a631b3321de9445a67e7321cb0de0dd0a2d23697337127b0bd4f835887b9be1d3ddc001ddd676a74cbc03246", 0x97, 0x1, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @null, @default, @null]}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x13) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x1412, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x8050) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000640)={0x0, 0xff, 0x100, 0x7, 0x9}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x3, 0xffffffff, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x9, 0x56}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x30, 0x8000, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x66, 0x0, 0x7, 0x0, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xb3, 0x1, 0xb, [{@empty, 0x8}, {@multicast1, 0x6}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x10000}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}, @timestamp_prespec={0x44, 0x2c, 0x7b, 0x3, 0x1, [{@remote, 0x5}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@broadcast, 0x2}, {@rand_addr=0x64010100, 0xfffffbff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x40, 0x7, 0xff, 0x1, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x65, 0x0, 0x10, 0x2f, 0x0, @loopback, @local, {[@lsrr={0x83, 0x2b, 0x43, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @cipso={0x86, 0x1f, 0x3, [{0x7, 0x6, "e8062123"}, {0x7, 0xb, "a5d1a83479633cdd0f"}, {0x2, 0x8, "3d43a2daa16b"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000940)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x4, 0x1, {{0xa, 0x4, 0x1, 0x35, 0x28, 0x65, 0x0, 0x92, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @local, {[@generic={0x83, 0x11, "5f0a060c049f09ef76bd1559d41a76"}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000680), 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x204, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4840}, 0xc004) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000d00)) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r3) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c404}, 0x20000000) r12 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg(r12, &(0x7f0000002440)={&(0x7f0000000e80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000f00)=""/196, 0xc4}, {&(0x7f0000001000)=""/246, 0xf6}, {&(0x7f0000001100)=""/198, 0xc6}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/102, 0x66}], 0x6, &(0x7f0000002400)=""/41, 0x29}, 0x10141) r13 = openat$cgroup_procs(r3, &(0x7f0000002480)='cgroup.procs\x00', 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r13, 0x4030582b, &(0x7f00000024c0)={0x0, 0x0, 0x7, 0x9, 0x5, 0x7}) bind$packet(0xffffffffffffffff, &(0x7f0000002500)={0x11, 0x18, r7, 0x1, 0x4e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) openat$cgroup_type(r3, &(0x7f0000002540), 0x2, 0x0) 4.726474032s ago: executing program 2 (id=7235): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xdc, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0xa8, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="250e8aefc3c223"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x9, 0x0, @random="0200000032"}, {0xa, 0x0, @default_ibss_ssid}, {0xd, 0x0, @random="e880dcb8c898559986"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x19, 0x0, @random="ce7e986dd5049999e00b824e63ab5e62526c77e429"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) (async) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) 2.447005796s ago: executing program 5 (id=7250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006006a"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000010c0)=ANY=[], 0x32600) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="a5ca8683d601768d343ca112b53e7aa9b7692478467c2525cc9cef426e1540e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce2bcb9e70676fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0", 0x130}], 0x5}, 0x8bb3a321ef809a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000600)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000680), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="63e5765680ce51", 0x7}, {&(0x7f00000000c0)="f75e7ef77a4845332e31654641bfc1a0146e1606bfa2ef38e73cfee36086b4fc3130ed057b80b4b040dd586639860294a1", 0x31}, {&(0x7f0000000100)="c62135f777dfdfa55cc7bf337ba24931c74dd0a6", 0x14}, {&(0x7f0000000140)="9f0d00f8459df4d9b926f3ec4d3aafd2968d5638", 0x14}, {&(0x7f00000001c0)="3289202eee89120574fe8fd6c9183eb880", 0x11}, {&(0x7f0000000200)="371f6df3fb3ce4f278e39ec057b6162f80936dbbd3674dbd8ec646a3a02ec5a4cb42ed43efcc7b43323dc55419b5b35fdb1674882fe89ecf10a4b0dbc1cfd61a0995321b00a56f3281ee1b40be35a1452de8ef06cbe791c9c6edff6e1ae0797495d5dc7c02907899144b15e1144b12d1bc8dcdf3e3fd9bd88f0a41199db4be9b94f835bdaa9388bb5cf10aa00d57f248abe58a70e71c73c5a159df0ffae8497d107c50652e19c307ac893b3dda5fbf7fbc96a9e8601ae232822fdb22e5a96c9fd03ae864572b09b70e", 0xc9}, {&(0x7f0000000300)="96e2a7fa71c278a4797d47e0e3f749b360123de6510ace8917373c002fc7a1938239c465bd4f7f3f2e160f4be1c23fc60abc32052590573fa38c11250d8576d12ae0ca835f511b968394e34198565b0186371f802fbd2fab6e", 0x59}, {&(0x7f0000000380)="9cf79983b19342474e21abe58b53757844b1755d6e1b9698d20726ca69c83140efb5e3b4abd60b597982e2f75f9c1aef2e45c2f68c4fde1c0fcf887d99195e2b04cc3ef6d1a917a931a5d93d99ec84ac76b35d33c4886e18", 0x58}, {&(0x7f0000000440)="cb5cf35008dc88e2f18469cbf7cb9a467044bfd8ef4f949dafb7d6221ac93d16b67667df0e9ea1f4e75a939c208c40fa7ecd5a28522f178ddadbe5a337eed03619ba8ae450af449ae2e7c86f8bd0a6b37f0f1cb9914175d3cac7a1ea0bdfe718f973ca704312db55c7abdb5b82197f3b33cf59f7fea04336b89a41dbb39ea58c7e22", 0x82}], 0x9, &(0x7f00000008c0)=ANY=[], 0x68}}], 0x1, 0x1000000a) 2.310453434s ago: executing program 1 (id=7252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r8, &(0x7f00000002c0)="04", 0x1) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010016000000140000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00c400050207ffffff000000000002d58838068b9100000006e2"], 0xfd6c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x24000840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)) 2.139451931s ago: executing program 3 (id=7253): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x4, 0x4, 0x0, 0x3], 0x3, 0x1}, {0x3, [0x4, 0x2, 0x3, 0x3, 0x2], 0x0, 0x1}}}}, {{@ip={@local, @private=0xa010101, 0xffffffff, 0xff000000, 'lo\x00', 'veth0\x00', {}, {0xce4b219a202b6460}, 0x1d, 0x1, 0x42}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x72, 0x0, [0x16, 0x23, 0x16, 0x31, 0x2c, 0xf, 0x12, 0x35, 0x1d, 0x26, 0x16, 0x3d, 0x0, 0x1, 0x1, 0x4], 0x0, 0x7, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (async) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rwr'], 0x9) 1.976077608s ago: executing program 5 (id=7254): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 1.970255748s ago: executing program 3 (id=7255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54001200f5e67fa0ccdfb9791befaaec7aeb07f8ef7a40d9383f4054c09a1ee3e1a13fed021a346959af5b99ed33bf2783e1d8ec0756e204ee8f7ae662e5963e3ca7270475a8c3773383a32aaa3d89430728724c4608358be27cf0d3443a8adc36e4e9176c1f0474ef67ed78e9a6885b48397661b629c09067b1d11f6613472452949eda99d61c0a585b22337834cbc99d6a5e74c860a89e9fa99e76b8c196863e0ef96f878907559a0a25757f3450204ba27fc8067b7d71c7f7401f2a0398aaae51d05636dc87dd7b5e5abc3eb4064e50", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x364, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x869}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2d85}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0xc}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x42c, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb402}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x22025da4}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ID={0xed, 0x3, "246ba7a120603b32dff44276819b9e63198bcaca255196a5b115f5f0b555d5734bfed81f1bf776ab8df6da144293d6a3429ee072da3d5514caff5f35af964dfa105e84a479f57ee56b73ebf58f1a2b72bfc1286afa0600eb2eb626d42ab68a94b5dc8474a479886b2b6d72aac184893497df1338238c13c7bc5699812b710746c522a8e6e4221c8ff5687362dfc67e01b37f8750e10ea60bded064a06798ac27a0cfc483d7a7987735aeb10a4849b1f2843ac6553f454c1f9ddbb4f0aae280388ac0aa8785e6aea3966150b16803eaea472e7cc1d0219271bac5f8a3da9cec5d4a5bd71a04e28be122"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x800}, 0x44010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r3, 0x511, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000800900030073797a300000000064000000060a010400000000000000000500000008000b40000000003c000480240001800b00010074756e6e656c00001400028008000140000000010800024000000009140001800b00010074756e6e656c0000040002800900010073797a3000"], 0xd8}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRES8=r6, @ANYBLOB="15e860e2a95de94231774d79", @ANYBLOB="d2aa8d9a98092a487a4e72210cff51541678854328d3d2195f541b84687d15523484c6ea22fc0fd47fd26b67e4a9d2c8f6b4cef14ebcc046c6ae25c9c1652d6171e74c7fd641794535f527ed18bd374d8af420902bda6c0a461cdd0975dc4d4ed62d0ea5942853ec4f4f3fc91784458b202a7480fc20693edd54106a4161abcd22b41e56a23f363957feb04e1aa75ea4c819f20be02f1017e1762ef5f984c53ff42545a7e70313da62b4e344680dee73bb47e39bc3802b0a4766afca987f19840f51f5ac4c8993542acb8a7f2940ffafd6af", @ANYRES64=r6, @ANYRES64=r9, @ANYRES8=r7, @ANYRES8=r8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff850000005000000018110000ffc5bab676f91bf6ecb6876f5295a13305e426781214c56ba726d4b2c6ae35130286167e09724e25e6230e08572042e5", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000000600)="ff0204a4ffb5ffffffffffffffff3f13363d882e2be82db15e6c261f1c3e53abf879b63a8ce9755d356de743457e0dfd392258f53c10ae382d4c356088ab0f20467b842c05531546", 0x48) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x80000) recvmmsg(r13, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000001c00)=""/200, 0xc8}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/208, 0xd0}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x2}], 0x1, 0x40000180, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r10}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1401000016000100045b63a9fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004400}, 0x410) 1.760194247s ago: executing program 2 (id=7256): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000000)="06b45c43410800be", 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r1, 0x0, 0x0, 0x4008825, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f"], 0xe0}], 0x100001ab}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x1865}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="f7ff4d00b87756952f92c28800979c611e37d4e203a6dd052e3e3607e10d836ae5522c21e304000000000000cd5aa7fdfbcb1ae478db4a5d33bfcc8a27b8a9558414e1d7945612b39c4093517704a0d08f"], 0x55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140076c010000100000000000000fd8858260000000005000008140000001100019100000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r8, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x4}}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x8008001}, 0x20000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002040)=ANY=[@ANYRESOCT=r5, @ANYRES8=r9, @ANYRES8=r7, @ANYRES16=r9, @ANYBLOB="d86dd298fc47f86c365e93a289e3685f825a92f2c917aa91e258179ec3b3c8edd423416a647cc27a8301e503503125c75791a1fc95b89562bb6ccd79384a3d3f826e7f2ca57f27c7a4298d1dc893b38b607fe539f2f15b3a76df204990afff9273205448b6db46d64bf1598cd83ccf5aa02edd10af8c6a154edfc460492abc564468c77448b755149e43b3ac6e01d8a3d4a687219ac6f3b05b223644bb9a82b95b113e9815cd1746c7ee9d6fbc5cbd1c6497ed7b2797b10b477f877cfb75d67da3068ce8a991e1eaf0f34e50bd1b8049d2969be963781038a9d6a169f6c8b4f9133090d429d0cfd6831cbe5b03f70dee4f1ca298542d3a8289473255bba8bcb606de3f00676b50978957ed82be30c813cc97f390b8bc3b3657abd67f76ff10272ccd3307f652fb8b44b7a0c636bf4e63fa644b5b9f0055d11ba300c5f7f0fdfe6bc2528e54ffe739e49250f86529a8ca71552f1f6af6e16f47d2e3b9b4f43d6fb20dfcf73432aaa5c1d7131ef90abfb90afa72cd420394bd2de020eb4e603c67f7014c15e5929010f3530e0296500bc9daaf4e198f6a7852b83d636c46e4ce324bd1a2533b7e3fcefab955f61146c13b62b096537aed626d597b8bdd020dd3c2bd342767d2c321d82da1d095e71883f54b7db5c4823a23ca20593e1b83f3f1861246369edf330d6dea575b30bb1faf65891d106263ec39a4a75df9fd568df2304fda90e097ccd67d8bd144f591a6ad2037ebfc4f8640ac3dfd7fbdb8ad3bef681c9223ef306a6390fdc9b6ce8ea1e86ed3e375f5608a5a429e973bb4863a07672663763411305161dd93443c946427108ef7f5a3ae42f9e5f7bf17072948a6803844ee2b67636317ceda746d9c1c53bfca45ffc50fdfc48cfdd875d7d1c1f893dd4c64d74a047e17bf12e4711d742894f899fde2cd7af44b7dc0cd464cd4908d385adbf499b6311c7c465b2cfff9702eb1300a944596b8b5ae1b03e6a610d8355bb7f94c2fc0c3ad5fb2076319d26873f09a44d6f33dd870b8f10119c0a36fc85e13f1fe7cd84fc10dd406ac1c5b97c52c9967d064d3e3698f219c17cb3ed90b77c8b525307a33019244cdb65a14aa56c83c56b77848d71efd124d406a68245027c3d4a6e1682a9c314cd07bd32d85c1feb87c876840a30d669f33ac97439afc9e63b79ec53061dd5f5cf23eac93285784c8fbca614cb2dba80fe8ffe4501b2defcef85c0effda833ce441d537f25b72182cd4a6e7a399bac3a55aeb6cad44808cfd4cf6180b6b08449e9fac961f25f2f728a704d89fd699bbbfd7db611a7393574a2751e2b4b4d9decdb9326ff59e01e3677945ea7a2578ef600010213d69223cae283fc7f03c7a8dc239fcf166cae32fce843c50c37df08d809e55c3563960743daf2a68844dcbc4c6f4986acb6d4977ad2c8068f42b07ff71414d91eb8de297ceeda34fa4a2de23e517ad5e8c793cbb0d1c2f1292e88c7c1d22d0c32dd6678aefa3297b992104c0cda83558ee5d6fcddc8857e105324bf66f68536ec4b4970835565cba75ad8d64c2cfefcc46a82419aec61b8bffd4093b585a49cc9ec4773114a9929738c93eaced047aa592715219eb1e7f9cbb3dd803fa9cee11265a78053c1b05104a3397837a73e98d551c186401f2ad81724e09a0805325e69d874b556e5db9342901b32dfffb6c40892b018b4ceed694db9aab99f6d4e37b1575d745d192e1a94d92f45364cd9c2d74fc33683b73371e8b7c395203990bbde9f9a72f94a5cf40cfdb3c0372f1bccaeceb32f9721f7da45dd0cb8c910c416cfa59a6a352a1c6369a11a74e5b9d4047011a3f13a263333a085a50fa26cbbebe36c2d5f3b55a4bf0d63f473f83813ba32ca1c702cfc59766530ad9f5c1e768d8c7b6bc82bfdb042f30c7401ffd1c85ae0689e0317005bb2f9edf3dae01d99a2da55120ecced4f695bf00674d080fb45d76f48cb487cc21db6e57c751fa2d6fe2c9e29816ed92ffe7c7576e25d3756f1c96e8593182c38345b4579936b7270a2c2751ba7c1ca0b8dde350ad6692bfffb90ff50c145039bf05e705aac216ffe0bd5bb71acf83a9fdd66f5ed68fdacb0bd5d6888e031a78798442075699ae4f3a4a71f58931b5328c428a94c1d8f2af2f2be2dbf1cfd7987d6e166896fcda4e52d73d80427c21c401325837ae9846c37c360bfb3d0d1d988b405c1300084e6bbe7eb02456ed3ce12a237682e7123422bc24881af1a377f1aa0e6dc7cdc7ded94492dd8c1504b1f92e1cb41fce9fea5a523446112e69af4043f95b38c7b1604aad703ce921af1e13555fd27d0322c6af3727a7e10d2d08fee7897e4b7c856fd9d3e234de7f7c58b047bbfc731794f92f865e4039b0759e4573051a124edd8d27e434d02df18e87de7df9f341bc5c05a6f351d54b6a6942382cb7b2ec8b06c0dc8b9d7d862620bde3d0f7cf25b197c791a5722eaed006ed0246b8144762d12cc9dd322f4f8eca1e1f89c4b8d98bd00c97dd8f668a5a8b2462b3fe909334412b1896cdb32d315f2d91cca770c99695f7478fdc023e0b8e6af758ddcc04d0a46d293e92ace2410fa0ff41d9d3506765d5eb98337be38c92617300b59fb0d5eaac3fdfa51e2f4a854946327ae9aaca40b99ba4307d0f8687242e9e8bec7fac60ab2bc64c8eecb5810b7576de0b0386224fa191af8a7cfdc313514e5db9227729ee846d6ee97cd5c38854efbec9c58b0007ab7cff83fbe04f41ef179ac5d569d97c61084e15fdbc6f50a375a3cc5a324bf912d5ebbeb05f6194430e1cd931efbd35a0d499a3f538393d39cdebb81a3a9415743a02920a3baeecdfbe3f4e9676acc537736f55c7c5be98ede90d10826c35479ce5741b8980118da2653d1b521043f717c304e12106772cdd3f974e3df9c7002bd1a5c2bf428299ec96b3ac1a8cac95d805eb931c0e8e3868cec83ca293aa7079fe151a3ae65b871a8384e129e915b50f360a29051542c4edb68a4a6088c79adb6bc2810fff221dc7b548e280a6a58f0c72e1b0bf8ba74c2561f7c29b18f2242761d148ccfad21997b6d3f10c0bd48d0e2041d3e16a39a43d74c4dfa135ab4caaa9f589db204db532635d85968d6ada4b3e598c980092496f0ccbba94745333ce964e5f43676caf939cd0dc930c9395a78312d4df607d75eaa3e099dc54b66c6dc87b7bb123413825c24c3734a0a96de8576ee01286935f349abab2662b6fdb4b95b4a8053c63040bf204205e60fa5c2cd0b5a20c1808f00b9c597ed8ae15e9eb6899504b8b48af5995f283da43baa38cc94e2ce9e0ff6669e466d95eb1543e3a4a34996422fc907f20e20f9e74c0734eab2e65a904057b11df3b5e6cf9f6ad929f9d94849139a478ec471e7ea2b4df30a81ff0b36f2db3ea6e251279169eed1ee87420bc4ef69fa4032dfb9240851b63ba0db48adc9bd15b7089245871e1c025429b256073cbada5f31474b48ce2eb2c50c725d3606993e7ad4d074fd746057e7cbb68122024c1e7fbf84b66f5207ef91b243a14c472e12671a7d462b65c3527560e8fd1a273cfc3475d031006423adadbb1f75074ab9527e38b11c335a755eae8da69c161c78376cf60901c3fa8d1e399abb165758c0779afbf5e52a95a0d32178e66016dad4cfe27758a6e95e3b6bd840c8e8985c8817d444d0cbd6f592fdd8e5b596797cdde24a933fc4f0a778bb1a99ffb5e23bbea7a8d30657cd3bb5c59c2c6b8e6bb92a7e04efb8e6eaff10d719680be9afbbd16e40f3b851845a2dfb1d66bde323608194a9e1b409e26ab76f2097c912e4a875e6d6c3fd08f3db0fe1a79d5479ae663b555e051b30e6e26f1f6306ba03aa238b963303d75fd7b26bd57eed2d725f57e3049308fcdaef56652785f2d7bf4b96c4a22dfbe9363581948e0cb63f034e7de0998fa63b3e037436a55682aeff90b47b1448826fe39bb52ede4d0648c189d2adef98468229f2d0ff3934374736a53ab378f4289f5056f72766832f9ee18d12420a34a8b536be63f029045ec6ec77ee297efdfc052de2402507e3900bdb2cabeee44c97c82ac67dd42864b6f6edffaf70179df5c9927bfe6c2216651a437c227c6dc7ead8fc67730e72d0e64d2d0efab9d433accd33c8499dc760ae7cc49e3ab17abd69315c9d2e92ea8000254bf329c72fdb07779f2f364e5c026a2e0b42bdb067f507cdd444fb1ffa949de7e4c9f617594913fbead041bb89093c4f0317447b1a5ab4ebb17b15b576676de864652a9699f6f4209e44ce2843bed80e9caeb59114d4fda50d4e8747c02ed80edcccfb93a7a221ebc25c1f769adf08e8b63c5b8eca458fddb8b1ba77e3eacf538ed8131118b468cb8fae6338e6f4fab87938e149333888defea26ee6c928c6c0db38ab34b924b1eee09c71b66589fd4be103a4ea6de4ce3d058215fdc2c303150325d60e6d1d0db3fb754bcc72a60b531cfa77d6ed0d97078d8cf91c95ccc17b71ac4c9a0759cdd0039208462ffbc7465407d3baac4b9c53a691f3b5761829970521264285bf9e351852201c6bd04596aeb8c10c11b31acc784697e168e602201036f155593b0b5f9b100ac0ac17001c539de4742c3901fad6e9e128c4f11525eebef8a2bc1e0316601b9900c2dd15511bc4f6bf307baafe12f8fc3d48db77eaf34514ac67e8c1f698d84e78ef5d7351bd330850e1bccd52c2a4bb2ee991891c92d9c7e1c1de1cefa56b1d9fe6d10841b2e6cb17b421b143aad6039aced9dcaa04000d83772f11bf148046ece38f57da1f491944b45f5fffe254c3270cf838fcec958ec922f054b1d8caa0e43ac91bd49ee5c3b596b3af37a6dc747500b9fd31f847bdf0cb059ce75e84a46f9fc55bb30883ee46dea01ef48e6792315a8eb2a3ce423142b89840ba45f6b70ba9061404b3a1000a9f1d87b90b8626587122c723864e38d8aa077cad4866a2ca07ce00559c42b35f2d441407b70e1e7d9182643d1b4e47b8a7c8f635b32087a899736dd9b419606360254f5fa38eae8390c3025144359c169a47f34a1d4937584fb309832da0f58c917fb6963b93e8491d8d45682ba35a51aa05a8a8231450443815e09c33d754d23c76b9de5acb20940744c97cb6dd7d551ea8524f8878fe474996e87958b991225864c42f0d9bd8071bcb8e34a71aecc0e6d63b124bf1db6df615e0ef293814590eb2ce0d63933294cf0a2c9abca206ec79ff7f2ed60a155b79fb72667ae990e12953e49b99bd6b7d88668636ebb3b8a76b909eff80f02df7bb57ca93b7732c9f3776d5563c5be489ceac1b272a89bf6d27acd1732e4752a8fe8c85d41dfe2515e6310efa2a41834886d94971f1d8ecbab8eb141799cf544e7968d8b834fef8f404441cacc7b6d5fdc0b30a72faea6bf622fe6a57b1d3ab1a53d659a11a0541adc9a5146b90b53aa04e41d329ba1f064eb7acdf41a6366484601d9999060017768aac007f92143d25354d3bdf5b2c7a10e03f9d19f9e3dbf3711c95d541ad9cbdd0b9a6653874a64722b171dbbe6d56090b1a6b6cf74c04c7649f1d3b77af7bce7da4390dc70720b50f8f3273c8f119e6272b92737881231975d74bdf8177c9bb0e2b432a04d994d43546a57676886d18003b02f92bd0aa4efce040a58004f86d06cb90714454273afff444b739463c5f8f8c38ae20ed402f42ea80ba1cfe4f4610d6d4785fa2cc6362fbbe8e2bdbeef02b83286d7edea1230de28c5205e02fbb6ac7df928f2bf0becd2c0c970a6641b19c54fe62937eb27f03d4c7be240af50b13aaa775ede82c1c4d2af9efff42e", @ANYRESHEX=r1, @ANYRES64, @ANYRES16=r7, @ANYRES8=r1, @ANYRES16=r6], 0x28}}, 0x40000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 1.566164464s ago: executing program 1 (id=7258): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.507763827s ago: executing program 4 (id=7259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000014c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000000440)={0x1028, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1028}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0x58, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001700), r0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x79}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000001ac0)={&(0x7f0000001a00), 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, 0x1401, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xb8, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x27}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x9}, {0xb}, {0x37fd486547fb7c80}, {0x6, 0x1}, {0x4}, {0x36}, {0x24, 0x1}, {0x24, 0x1}, {0x16, 0x1}, {0x48, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x24}, {0x68, 0x1}, {0x1b}, {0x24, 0x1}, {0x3}, {0x48, 0x1}, {0x9}, {0x16, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x48}, {0x3}, {0x5}, {0x30, 0x1}, {0x6c, 0x1}, {0x1b, 0x1}, {0x1}, {0x9}, {0x5, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x638, 0x4560, 0x1, 0xffaa, 0x7, 0x100, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x5, 0x9, 0x1ff, 0x5, 0x1]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3a1, 0x0, 0xffff, 0x6c, 0x9, 0x6, 0x5116]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x4, 0x6a, 0x4, 0x8, 0x5, 0x6]}}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x35, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8081}, 0x40020) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001e40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, 0x0, 0x1, 0x70bd28, 0x5, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000040) getpeername(r0, &(0x7f0000001f40)=@can={0x1d, 0x0}, &(0x7f0000001fc0)=0x80) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000002040), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r13, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r12}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5ad, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x0, 0x11, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002280)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002480)=[{0x7, 0x2, 0x3, 0xb}, {0x4, 0x1, 0x2, 0xc}, {0x0, 0x4, 0x7, 0x9}, {0x4, 0x1, 0xb, 0x6}], 0x10, 0x4fc1}, 0x94) 1.47893142s ago: executing program 5 (id=7260): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000220000000000000080000006b1189000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009042802000000000000050000000008000f401401000e", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00100000bfa20000fbffffff07020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x48799000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c00108004000880040008000c000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@delchain={0x14f0, 0x65, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0x8}, {0xf, 0x2}, {0xffe0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x13e0, 0x2, [@TCA_MATCHALL_ACT={0xc60, 0x2, [@m_ife={0xe8, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x9f, 0x6, "42598cbb7b5f632732c8e146c87607c38be58b1abfacc8801e4d06709b7bd91626fd0e8276d05bf31a8f5b9adc6712a900b6d69c9ad16741c13d6427d300692d577a04ba2e08a4e84256013e08a9cb160881bb67ad0376ad59dd445cd48f16edfbb5cc6a4d53b5df8e4602b7858fc9cd88a615b6faf74a04812bd0dad2c1a1d9426f7fdae94063e33a9d1bda84a8547d74770984dda825e6a8da52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x100, 0x1d, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x8, 0x80000001, 0xa}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc, 0x4, 0x2, 0x2, 0x80000001}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7d2880ab, 0x81, 0xfffffffffffffff9, 0x6, 0x101}, 0x400}}]}, {0x7b, 0x6, "dc0b5c92a85272a9554ac403f4b4e3c837a32671400104001ca53408040e1fb06dd93dd3a59cc9f88e2301d16e09d39fd1ffa727eb6b40577925a68aaf6a99fec376d6cb0bd6d723a30dfc89f5753df8c3671f0d463ec5d4e0501d996d2d1a2bcc09bffcfcc17c78d332b93cd9db066b5c829a4f4c83d8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x12c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x1d4, 0x6, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x9, 0x20000005, 0x401, 0x5c}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xd, 0x5, 0x25c9e3f0, 0x744b47bc}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x0, 0x693e6a45, 0x40}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2c8d}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0xfc, 0x6, "b49d4df0f999be82f1aa717a934e5e17c375dae9e24d4d28743235fffaf1b1e93d58f9d3ff5738f0acadeb3e438fcc4d75649fa6860471b0986c70a9b7712f0036da9e1d0ab447109b217f86d767dd9df7f641c70228ef913cb0a8310658c6c29a5a79a1d3013358129f116c28f251724e071c474c30bc89643cbec3622c1bb45b25eb73bfdd06a298901a5e8f2691d0061286862d4cbec0eb009bd9a33b98db0128debc4abc4f5ed2f86957f9cef40f1c8c2241d18a93539c0cf2c8b1db1547a504014d43d61cfb6262d87930a8fc6567727ce9d947bca4bdcb1dac6710b351a6c81a357cd7777691577076a64599f8a809bcbf19fc8f9d"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_xt={0x214, 0x1b, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffeb}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xf}, @TCA_IPT_INDEX={0x8, 0x3, 0xd25f}, @TCA_IPT_TARG={0x128, 0x6, {0x3, 'mangle\x00', 0x7, 0x9, "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"}}]}, {0x80, 0x6, "aa8ed35c5aa483881d4f37adef32acf5d7e481ece4f9a230991bf1463217ef69b667f08dea99579d0a91fba076a7f0bba0694db04ff7816bc75c22cc320e2b8bcf449e22532806203213a49faa13b95c08d087de9efd49a56bde8f3a600b9314524dd7318691051f10eb3a8e8c225aa52207ff6fc787f265004eca16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x13c, 0x12, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf16aa}]}, {0xed, 0x6, "2f314a28cb12c03447ebf1c53592f5f8f9f50c668add6b156a629b0dd38f8b9b45d5545318203920d0491b906b3370a45654e4ad9575b2fcb1580d0d631d1f047f4f8aff9ae52fdfa458f55413154e86c989d41f424f8305d455028e8e691ace15e39a055a3f29ba6c4e7761c9bec0d81237a252d7ce7889aebdc9ad4260eaac0846fe1fef55296061a60d11a6401be128106024027839b9200b8ad4de0196ea0691e1d2a0c6c0ffc0eb5c15355f00af6b4c26983b442898505cb61629ece0984ed10c0f70655f9c813721e18890e92417e6f8107120a9ef0b36b337728525da364397412fa79e0dd6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x150, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x101, 0xb, 0x4, 0x10000, 0x7}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x19}]}, {0xc3, 0x6, "5912870fb4017c2a6757809eba8e3090634d579d445b0c577df2939224158358aa7c1548aa50a88ac1f1c46cec3042a39c72cd403c68f07b8cc563e6aff831d61382ba087636c3dc2cfab44b40099e6e031fb310107255dd3ff268662fe76dbd51d6a0ac81b4821f89010ea40bb7df5554827cbe33c0687b1e819581b5cb4e71e1fca971ca14d5f672e8f737555f2ef8408c14f4921bbab40740a3e8dc402c22ddf16b0aa593f3637fc450ffa57006c73b870a07484bc2ec20153d85c73867"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x138, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xc, 0x10000000, 0x81, 0x3f5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xe1, 0x6, "bb90fe32867de9b301ab9107e118ee9f5878eccb994e7fa6ab18505bde3a0114dda9f6b2f7fba9b667dd558423bfc130d428ea50339124f48c896e5b9ef8484f9c8ef374dc70721963efe532844757f7cee2534eda66a1bf0cf46803a58f1248c128f4483dbdf4acc49053e19631201874091d40d1091b718c0c9bd5d8cfa3313a07b1f273911453db958fd08d0df42625334f1214fab0caa69af24a75dadbb39d086b2fa9151f473b82320481e0d3191536d2f0f871b803482b8f319ca20df471b4ab02f8e97a985d9709426968728f946aa8d36e42852a0ed9106c98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfa7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x8, 0x3, 0x5, 0xf}, 0x2}}]}, {0x9e, 0x6, "8189e6aff905340e4f5ce4090d162d28d9b2eae591b9387dca975582785799cbb0a24af79cf92b0f2b81feb8d4efd5d1b5e434f63585a5ae70388af439908f62f62bf7c425b608cdf79d86c1e615e16e12345abbc103e6e7f293cefef6ff747ab178fcd3fb93c97dd054a8a996552cb931071f852963697d9b65bc18b3b94d2e44fa11df43bb0d46af753123c787fcd00635fdc89f9514a32f9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xa4, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2f2, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11df}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1158, 0x20000008}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x7, 0x9}}]}, {0x3c, 0x6, "24288e1591ea78d1ba44d25a960ff1eaaf5fdbe6ed312e5c164d8d0e17f951bf371f1648f7b7dbfc5a800ce260de5e300aa128ce98327500"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}, @TCA_MATCHALL_ACT={0x76c, 0x2, [@m_connmark={0x194, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x3, 0xd50e00, 0x8}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x9, 0x5, 0x5, 0x3}, 0x1c13}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5263, 0x3, 0x0, 0x1c29}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x55, 0x7, 0xcea, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x10, 0xffffffffffffffff, 0x6, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x31, 0x844, 0x10000000, 0x2, 0x5}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x9, 0x3, 0x5, 0xf}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x9, 0xffffffffffffffff, 0x6, 0x3}, 0x6}}]}, {0x81, 0x6, "cad9ec63d6b72c56444dbfd1a2b6a6fa2cfdb26856d142c45264fc8d74418a0427174adc305a0d7100c515e4a04481dc1b458eb53925d640468e5eb7def1abfe07ae343859284b0ad56f2dee4f5c88ed1845b0e63af75d717595021a943dddec9beb97b11ad38ff05ce0aa7ae121db87db718cc6742815fd8a82e60d29"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0xdc, 0x2, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x89, 0xffffffffffffffff, 0x9}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x1c000, 0x4, 0x23, 0x40}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x19965}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x58, 0x6, "bb68cde3b10813ecef990039c28a81d2c58d871245cde3af35895927eaf59de3b4ce8d02d5e8f359df39b4c22c3061ec701817c0730b27c9de1e00f767a7df8be7c3445388d7e1066d84cfab233210eb991003f8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd703, 0x7fff, 0x4, 0xfffffff7, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1488, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6, 0x7, 0x4, 0x101}}]}, {0x69, 0x6, "45bc328ba8bc03e164a7616dcdb956e37c46238ac1493d3b6dcc9f50f99bcec6f3c9bb7e971e1063afdef6fbc256cddf1f3456ca7b51588f4d71996e0a4616d2bcdf12b19c34104da74102074b5afb699bdbe9b354486f22d0568072acc64979f4d1993acb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xc8, 0xf, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x3, 0x10001, 0x10000}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x5e, 0x6, "aceaf198ff8c2f6ec78e2f98205ae18fe7c37d45746d7f58356357d196d439138872383688d79c20a0cd53e97e357759c23acb6f1507287acee9f018c0904d0d0d7d05c9548717580ee8efba5e7d02a9e646b59bfd560000ce04"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe4, 0x5, 0x0, 0x0, {{0xf}, {0x90, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x18}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x0, 0x8, 0x101}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x26, 0x6, "becf6bb0e260f9c3301ff76bb8b17452cac7d4a294b9b496bcdddb7de9a09d57d05b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x13c, 0xc, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x80}]}, {0xf7, 0x6, "a3bcc7d9029f9a834e16086624f0f318fc0c07f577d3662187eb45d73ffe70a54e926c3d792b5c60ea7cef885b39888e7132cee7deb9eba9408cadeb05c81ca1f8df7abb8705c7311950528c95f9ad996c279cf6333447db3f9e11c9dd82baf02c978226574af3e6f9d4ab764b080bc4f15dc96b3a875e71522b681b3dbcaa501f7fddd6810f8c410034df36248008b630c11fa905b802e7a563046a8e80e2f96669daf29a3a8039b26d44603505b678c7d0ab6fcb285e8b52f849613db8d32d5f39fe8c3712347ed1e105ef33fc9700825b55e31252e0329080fb61274eccc5d3036a68c9eb531e0ee74c9e9974a8f442810d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x13c, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x7f, 0x1, 0x1000, 0xff3}, 0x6}}]}, {0xed, 0x6, "5929a0c5f7459296356604666306ee987d4de99ac3aa1354f80031a2a3fed8b7d9f3534df04695df90cac0b4e7e86d7b0cc6b14de0ca168db4e340c00015e8cbeae766b5e587253c584298d7579c5620b479173cafad9e881123ed0896e48e061d858d32dc0f8aa9250d4f791f37ba60148f7e80a6bbbde43d63629d43f083ff54d8ebafd0d971a1dc9751cf98f3891e01c93ff1fa62feb9bf51c606c6734ba462b0786619d8c31e8f9ad70dfc82a0e9daebc3c988391100c59e9be6317e34b59f2a524a2885241b87ecb4fa9684d5cf2dce16b24f3c34e6533ad18327852c06556e9eda9cc1d0c3f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0xc, 0xfd, 0x4, 0x7ff}, {0x2, 0x7, 0x1, 0xf8c}, {0x80, 0x5, 0x9, 0x5}, {0x3, 0x8, 0xd, 0x2}, {0x0, 0x40, 0x0, 0xe38}, {0x65ad, 0x7, 0x3, 0x8000}, {0x9, 0xd3, 0x24, 0x6}, {0x80, 0x4, 0xd, 0x8}, {0x7, 0x7f, 0xb2, 0x8}]}}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x9, 0x8, 0x7f, 0x3}, {0x8, 0x10, 0xf8, 0x949}, {0xf, 0x80, 0x7, 0x5}, {0x81, 0x3, 0xa, 0xfff}]}}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0xb}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xf, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x5, 0x93}}, @TCA_CHAIN={0x8}]}, 0x14f0}, 0x1, 0x0, 0x0, 0x4000010}, 0xc818) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff8, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r10, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46850) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(r10) 1.476341341s ago: executing program 3 (id=7261): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x3a8, r5, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x18, 0x6, 0xc, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xcf4, 0x2, 0xfff, 0x8, 0x2, 0x5, 0x6]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x0, 0x6, 0x8, 0x9, 0xce9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe, 0x67, 0x3, 0x3ff, 0x3, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x10, 0x60, 0x36, 0x30, 0x18, 0x1b, 0x0, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa3, 0x3, 0x1, 0x6, 0x6, 0xfffb, 0x40, 0x3]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x3}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {}, {0x1, 0x5}, {0x0, 0x3}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x5}, {0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x3}, {}, {0x4, 0x8}, {0x6}, {0x2, 0x4}, {0x4, 0x6}, {0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1800, 0xd, 0x7, 0x1, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x6c, 0x3, 0xc, 0x16, 0x2, 0x36, 0xb, 0x3, 0x2, 0x63, 0x12, 0x0, 0x48, 0x12, 0x16, 0x0, 0x24, 0x24, 0x36, 0x64, 0xb, 0x36, 0x36, 0x36, 0x18, 0x60, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x5}, {0x6, 0x9}, {0x3, 0x7}, {0x0, 0x4}, {0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {}, {0x6, 0x8}, {0x3, 0x3}, {0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x8}, {}, {0x6, 0x8}, {0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x2}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x6}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x4, 0x4}, {}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x6}, {0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x1}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x2, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x1b, 0x1, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x3}, {0x3}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {}, {0x0, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x1}, {0x7, 0x8}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x3}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x5}, {0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x7}, {0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c6e, 0xfffd, 0x7, 0xd4, 0xfcd, 0x2, 0x2, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x36, 0x1b, 0x60, 0xb, 0x1f, 0x31, 0x6, 0x60, 0x69, 0x1, 0x4, 0x16, 0x5, 0x13, 0x1, 0x60, 0x6c, 0xb, 0x3, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7, 0x1, 0x3, 0xf33, 0x1000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x0, 0x7fff, 0x0, 0x6acf, 0x8000, 0x40, 0x3]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x0, 0x5, 0x10, 0xaf, 0x8001, 0xf4, 0x4]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8be, 0x4, 0xffff, 0x3, 0x6, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000040}, 0x44810) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.300503955s ago: executing program 1 (id=7262): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_proto_private(r2, 0x8920, &(0x7f0000000580)="943a") (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd72e5ffffffff3800000008000300", @ANYRES32=r3, @ANYBLOB="1c005a80180001801400030005002d4804006f480800050030000c00"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4044110) 1.196153104s ago: executing program 4 (id=7263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00ef00100001002abd7000e6770083655d4636702a2dcab3a5fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003007465616d300000000000000000000000180016801400018010000200010000005c050000ff010000"], 0x4c}}, 0x20084084) 1.155047851s ago: executing program 1 (id=7264): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, &(0x7f0000000000)="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", 0x1000, 0x0, &(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e) getsockname(r0, &(0x7f0000001080)=@ax25={{0x3, @bcast}, [@default, @null, @bcast, @rose, @null, @default, @default, @default]}, &(0x7f0000001100)=0x80) r1 = socket$unix(0x1, 0x1, 0x0) r2 = accept4$unix(r1, &(0x7f0000001140), &(0x7f00000011c0)=0x6e, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0xffffffffffffffff, 0x1, 0x18}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000013c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000014c0)=[0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000001540)=[{}], 0x8, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x1, &(0x7f0000001780)=@raw=[@alu={0x7, 0x1, 0x4, 0x6, 0x7, 0x6, 0x8}], &(0x7f00000017c0)='GPL\x00', 0x6, 0x6c, &(0x7f0000001800)=""/108, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000018c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001900)=[{0x0, 0x2, 0x9, 0x2}, {0x1, 0x1, 0xb, 0x3}, {0x0, 0x5, 0x2, 0x8}, {0x5, 0x3, 0xc, 0x5}, {0x2, 0x3, 0x1, 0x2}, {0x1, 0x1, 0x9, 0x4}], 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x9, 0x15, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0xa}, @ldst={0x1, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001300)='GPL\x00', 0x9, 0x55, &(0x7f0000001340)=""/85, 0x41100, 0x54, '\x00', r4, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x5, 0x9, 0x37}, 0x10, r5, r6, 0x4, 0x0, &(0x7f0000001a40)=[{0x1, 0x4, 0x8, 0x3}, {0x4, 0x5, 0x0, 0x5}, {0x1, 0x5, 0x8, 0xb}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x3}, 0x94) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001b40)={0x40, 0x400, 0x5, 0x4a, 0x9}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) recvfrom$unix(r0, &(0x7f0000001c00)=""/16, 0x10, 0x10122, &(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$int_out(r7, 0x0, &(0x7f0000001cc0)) r8 = socket$inet6(0xa, 0x1, 0x1000) connect$inet6(r8, &(0x7f0000001d00)={0xa, 0x4e23, 0xffffffff, @empty, 0x9}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001d40)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x58, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xb5a1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x400c040) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xff, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000001f80)) recvfrom$unix(r2, &(0x7f0000002000)=""/221, 0xdd, 0x2000, 0x0, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002280)={r10, &(0x7f0000002180)="bf8d828be070abf7ed9cb56d33aef2da7c4f1958650a7f95862a09700240d915d7d755203d73455c629f29ea2a51eeace67c", &(0x7f00000021c0)=""/148}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000022c0)) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000002300)='{\x00', 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000023c0)={{r9, 0xffffffffffffffff}, &(0x7f0000002340), &(0x7f0000002380)='%pI4 \x00'}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x5}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x30, 0x30]}}, &(0x7f0000002500)=""/241, 0x50, 0xf1, 0x0, 0xe00000}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@bloom_filter={0x1e, 0xe8ea, 0xffffffff, 0x7, 0x9810, r11, 0x3a994c41, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x4, @value=r12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x11, 0xc, &(0x7f0000002640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit, @alu={0x4, 0x0, 0xb, 0x7ef8070722b37a83, 0xb, 0x50, 0xfffffffffffffff0}, @generic={0xfc, 0x1, 0x8, 0x9, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x6, 0x2, 0x9, 0x9, 0x26b}, @alu={0x7, 0x1, 0x2, 0x0, 0x3, 0x5ea2440b632295ec, 0x1}]}, &(0x7f00000026c0)='GPL\x00', 0xd889, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000027c0)=[r10, 0xffffffffffffffff, r9, r10, r13], &(0x7f0000002800)=[{0x1, 0x4, 0xf, 0x8}]}, 0x94) 1.091180723s ago: executing program 3 (id=7265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) unshare(0x20000400) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x3}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) syz_emit_ethernet(0x82, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) 1.087255191s ago: executing program 5 (id=7266): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000f5000079104800000000006307045a0000000095b3000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000c, 0x6e073, 0xffffffffffffffff, 0x0) 1.008533583s ago: executing program 4 (id=7267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newchain={0x34, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf4}}, @TCA_RATE={0x6, 0x5, {0x18, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000820}, 0x44004) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x4000880) 936.112841ms ago: executing program 3 (id=7268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16c, 0x16c, 0x3, [@union={0x1, 0x4, 0x0, 0x5, 0x0, 0x6, [{0x7, 0x4, 0x3}, {0xd, 0x2, 0x8}, {0x0, 0x1, 0x3ff}, {0x7, 0x2, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @fwd={0x4}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x7, [{0x2, 0x4, 0x80000000}, {0xf, 0x5, 0x7}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x8, 0x2}, {0xb, 0x1}, {0x6}, {0x852, 0x1}, {0x3, 0x4}]}, @enum={0x4, 0xa, 0x0, 0x6, 0x4, [{0xa, 0xf3}, {0x1, 0xbbdbe80}, {0x3, 0x8263}, {0xb, 0x4}, {0x1, 0x3}, {0x10, 0x491}, {0xd, 0x1}, {0x5, 0x6}, {0x7, 0x80}, {0xc, 0x5}]}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x4}, {0xf, 0x6}]}, @volatile={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xd}}]}, {0x0, [0x5f]}}, &(0x7f0000000340)=""/233, 0x187, 0xe9, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r1}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x21, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xa, {0x2, 0x4e24, @multicast2}, 'bond_slave_0\x00'}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) 834.487141ms ago: executing program 4 (id=7269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000500)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000fc0)={r2, &(0x7f0000000ec0), 0x0}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x216073cd09ebf819}}}}}}}, 0x0) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xb6}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x80, 0x0, 0x6c}, {0xfffffffffffffffe, 0x800000000000000, 0x4, 0xba8, 0x1, 0x0, 0xffffffff, 0x1000000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x5, 0x1}}, 0xe8) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}}) ioctl$sock_proto_private(r6, 0x89ea, &(0x7f0000000440)="845e95076d5c1c757691d06c522ec50054bdc5198cc76b90184d68b4f7c566bdb5561e9327f93f5fab99e01604c2390df6110793710412ff88a0a33a45d12639d56489b479d08444b44465ce8741ff5906511c5effb1e9f3f0c2997a402e2b1d83d3ca5b7ef8252357") sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r8 = getpid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000004c0)=r8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) 780.263681ms ago: executing program 3 (id=7270): unshare(0x400) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) recvmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x10}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x4}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0xffffffffffff0000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x95, '\x00', 0x0, 0x7ff, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) socket$kcm(0x2, 0xa, 0x2) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r12, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) 692.129898ms ago: executing program 1 (id=7271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280067b1fa5"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1, r0}, 0xc) 647.544699ms ago: executing program 5 (id=7272): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000980)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) pselect6(0x40, &(0x7f0000000000)={0x9, 0x100000000000, 0x9, 0x7, 0xc4, 0x6, 0x1, 0xe4a}, &(0x7f0000000040)={0x1, 0x172f, 0x894, 0x9, 0x0, 0x1, 0x4, 0x6}, &(0x7f0000000080)={0x8001, 0xfe9, 0xa4, 0x3, 0x4, 0x2, 0x8, 0x9}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xfffffffffffffdcb]}, 0x8}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0xd1}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 601.431051ms ago: executing program 2 (id=7273): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xffffff9b, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48010000}, {0x85, 0x0, 0x0, 0xcb}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe24}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x400000000010, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4811) 536.931505ms ago: executing program 4 (id=7274): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000000000c000000020000000000000000000004000000000000001a6ab8c47ed44c569abbc8743019e83de29440febbaafff7a72f24ae13970b71cc36605b2216a5de629d2e02a099926f380db61f21f3389b188f604365bc0d68775fd7ecc138cb64ecd22ba8154e8112b12eca4e2499631aca45b8eb34aa"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffd3f}, 0x94) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x40002100, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) 422.266509ms ago: executing program 4 (id=7275): socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000ac0)="647d533402295c6ca022b9886c088f8498d6e880e94e3681b4199b799336455936787537122f381c1a324360fc92987d46e9ae57487cae20610737bd00f9bea538c2d09da9410314df6eaf6517ebe701728d2f8cf657d231d88517fdbb6f775a0adfcdc8de87a00544d0f20d8391a6e99034998817692c97971a3b094b30ecf9aedf5386015470828b21787ce1d8676a76d15ef51cd0519439e82b6f8b4a13cb25d7d375cad22b8600147659d0b1e1a003006c36b2673a41712461fef614744a928b37d30e4f08a50960dea2ccbb1336fb000000", 0xd4}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df54606b9dd00f44401d19f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) 324.754746ms ago: executing program 1 (id=7276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xfffffffe, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[], 0x14}}, 0x28040001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 0s ago: executing program 5 (id=7277): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) (async, rerun: 32) sendto$packet(r0, &(0x7f00000002c0)="1a04050073ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610000000014000280080003400700000008000240000000020900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000140)=0x536, 0x2) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x20, 0x5a, 0x30d, 0x0, 0x0, "", [@typed={0x8, 0x120, 0x0, 0x0, @fd=r3}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x20}], 0x1}, 0x0) kernel console output (not intermixed with test programs): tribute type 3 has an invalid length. [ 700.582216][T28731] netlink: 'syz.3.5865': attribute type 11 has an invalid length. [ 700.590746][T28730] netlink: 'syz.3.5865': attribute type 11 has an invalid length. [ 700.798846][T28743] nbd: must specify at least one socket [ 700.816523][T28743] block nbd0: NBD_DISCONNECT [ 700.822390][T28743] block nbd0: Send disconnect failed -32 [ 700.908885][T28749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.931758][T28749] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.939046][T28749] tipc: Resetting bearer [ 700.945373][T28749] tipc: Resetting bearer [ 700.952323][T28749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.982623][T28747] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.990476][T28747] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.998734][T28747] bridge0: entered allmulticast mode [ 701.009510][T24194] bridge_slave_0: left allmulticast mode [ 701.027864][T24194] bridge_slave_0: left promiscuous mode [ 701.052765][T24194] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.166369][T24194] dvmrp0: left allmulticast mode [ 701.181973][T24194] dvmrp1: left allmulticast mode [ 701.192677][T24194] dvmrp6: left allmulticast mode [ 701.409751][T24194] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 701.504431][T24194] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 702.386553][T24194] team0: Port device bridge17 removed [ 702.410724][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5877'. [ 702.435599][T24194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.446742][T24194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.450065][ T5839] Bluetooth: hci4: command tx timeout [ 702.462716][T24194] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 702.472888][T24194] bond0 (unregistering): Released all slaves [ 702.483584][T24194] bond1 (unregistering): Released all slaves [ 702.499413][T24194] bond2 (unregistering): Released all slaves [ 702.514476][T24194] bond3 (unregistering): Released all slaves [ 702.528789][T24194] bond4 (unregistering): Released all slaves [ 702.554048][T24194] `: Port device bond5 removed [ 702.560464][T24194] bond5 (unregistering): Released all slaves [ 702.573999][T24194] bond6 (unregistering): Released all slaves [ 702.594825][T28768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5874'. [ 702.821381][T28549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 702.853600][T28549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 702.896229][T24194] tipc: Disabling bearer [ 702.921897][T24194] tipc: Left network mode [ 702.935703][T28549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 702.994818][T28549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 703.118246][T24194] IPVS: stopping backup sync thread 15415 ... [ 703.497194][T28823] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 703.688116][T28835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.744069][T28549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.792864][T28839] nft_compat: unsupported protocol 0 [ 703.797416][T28549] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.833019][T28835] tipc: Enabling of bearer rejected, failed to enable media [ 703.857221][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.864535][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.869060][T28841] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5891'. [ 703.916375][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.923650][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.071575][T28852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5896'. [ 704.288447][T28859] bond3: option all_slaves_active: invalid value (5) [ 704.292535][T28865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5897'. [ 704.309190][T28859] bond3 (unregistering): Released all slaves [ 704.362972][T28869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5898'. [ 704.388823][T28862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 704.407453][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5897'. [ 704.453773][T28864] validate_nla: 2 callbacks suppressed [ 704.453816][T28864] netlink: 'syz.1.5898': attribute type 3 has an invalid length. [ 704.521470][ T5839] Bluetooth: hci4: command tx timeout [ 705.046354][T28883] pimreg: entered allmulticast mode [ 705.264025][T28549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.334515][T28900] IPVS: Scheduler module ip_vs_ not found [ 705.436460][T28549] veth0_vlan: entered promiscuous mode [ 705.450688][T28909] netlink: 'syz.3.5911': attribute type 1 has an invalid length. [ 705.476307][T28549] veth1_vlan: entered promiscuous mode [ 705.605557][T28909] 8021q: adding VLAN 0 to HW filter on device bond9 [ 705.655914][T28912] vlan5: entered promiscuous mode [ 705.661333][T28912] bond9: entered promiscuous mode [ 705.666686][T28912] vlan5: entered allmulticast mode [ 705.672031][T28912] bond9: entered allmulticast mode [ 705.713065][T28921] netlink: 'syz.4.5913': attribute type 1 has an invalid length. [ 705.729667][T28914] bond9: (slave bridge7): making interface the new active one [ 705.747449][T28914] bridge7: entered promiscuous mode [ 705.753794][T28914] bridge7: entered allmulticast mode [ 705.763686][T28914] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 705.831672][T24194] hsr_slave_0: left promiscuous mode [ 705.851798][T24194] hsr_slave_1: left promiscuous mode [ 705.858186][T24194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.894384][T24194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.548665][T24194] ` (unregistering): Port device team_slave_1 removed [ 706.576995][T24194] ` (unregistering): Port device C removed [ 706.761794][T28921] __nla_validate_parse: 3 callbacks suppressed [ 706.761819][T28921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5913'. [ 706.871304][T28549] veth0_macvtap: entered promiscuous mode [ 706.904355][T28549] veth1_macvtap: entered promiscuous mode [ 706.981196][T28549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.021667][T28549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.095745][T24192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.112296][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'. [ 707.123322][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5924'. [ 707.135523][T28967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5923'. [ 707.145021][T28967] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 707.185196][T24192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.218934][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.260032][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.331498][T28974] syzkaller0: entered promiscuous mode [ 707.337039][T28974] syzkaller0: entered allmulticast mode [ 707.356072][T24194] IPVS: stop unused estimator thread 0... [ 707.397419][T28974] netlink: 'syz.4.5926': attribute type 10 has an invalid length. [ 707.429135][T28974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5926'. [ 707.471460][T24192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.479327][T24192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.527294][T28974] team0: entered promiscuous mode [ 707.550264][T28974] team_slave_1: entered promiscuous mode [ 707.556321][T28974] team0: entered allmulticast mode [ 707.562789][T28974] team_slave_1: entered allmulticast mode [ 707.569205][T28974] tipc: Resetting bearer [ 707.575464][T28974] bridge0: port 1(team0) entered blocking state [ 707.583931][T28974] bridge0: port 1(team0) entered disabled state [ 707.608510][T28974] tipc: Resetting bearer [ 707.614014][T28989] xt_hashlimit: size too large, truncated to 1048576 [ 707.746295][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5931'. [ 707.780302][T28991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5931'. [ 707.796059][T28996] x_tables: duplicate underflow at hook 4 [ 707.831303][T28996] netlink: 732 bytes leftover after parsing attributes in process `syz.5.5933'. [ 707.867281][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.891269][T28996] netlink: 732 bytes leftover after parsing attributes in process `syz.5.5933'. [ 707.899910][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.946484][T29004] x_tables: duplicate underflow at hook 4 [ 708.064264][T29009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5935'. [ 708.808031][T29050] bridge0: port 1(team0) entered disabled state [ 708.834193][T29050] bridge_slave_1: left allmulticast mode [ 708.850030][T29050] bridge_slave_1: left promiscuous mode [ 708.857536][T29050] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.753817][T29088] netlink: 'syz.4.5958': attribute type 4 has an invalid length. [ 710.820593][T29142] tipc: Enabled bearer , priority 0 [ 710.848367][T29142] syzkaller0: entered promiscuous mode [ 710.861430][T29142] syzkaller0: entered allmulticast mode [ 710.963542][T29140] tipc: Resetting bearer [ 711.021666][T29140] tipc: Disabling bearer [ 711.026019][T29151] netlink: 'syz.1.5979': attribute type 1 has an invalid length. [ 711.152166][T29156] bond8: option lacp_active: invalid value (8) [ 711.173272][T29156] bond8 (unregistering): Released all slaves [ 711.212752][T29160] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 711.224808][T29160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 711.235577][T29160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 712.920444][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 714.186135][T29165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.197004][T29177] __nla_validate_parse: 10 callbacks suppressed [ 714.197025][T29177] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5984'. [ 714.385561][T29191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5989'. [ 714.388051][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5988'. [ 714.429745][T29191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5989'. [ 714.458756][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5991'. [ 714.497753][T29200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5992'. [ 714.506397][T29198] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5991'. [ 714.553273][T29202] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 714.593431][T29204] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5994'. [ 714.722218][T29216] netlink: 'syz.1.5997': attribute type 11 has an invalid length. [ 715.106588][T29230] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 715.172048][T29218] lo speed is unknown, defaulting to 1000 [ 715.811434][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.821448][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.831023][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.839302][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.848162][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.929314][T29269] netlink: 'syz.2.6011': attribute type 3 has an invalid length. [ 715.965493][ T1670] block nbd3: Connection timed out, retrying (0/2 alive) [ 715.975057][ T1670] block nbd3: Connection timed out, retrying (0/2 alive) [ 715.983250][ T1670] block nbd3: Connection timed out, retrying (0/2 alive) [ 715.990874][ T1670] block nbd3: Connection timed out, retrying (0/2 alive) [ 715.998347][ T11] block nbd3: Dead connection, failed to find a fallback [ 716.008634][ T11] block nbd3: shutting down sockets [ 716.015510][ T11] blk_print_req_error: 27 callbacks suppressed [ 716.015527][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.032260][ T11] buffer_io_error: 27 callbacks suppressed [ 716.032279][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 716.038348][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6011'. [ 716.046176][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.065924][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 716.073946][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.083612][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 716.091621][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.101412][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 716.110975][T26795] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.122322][T29260] IPVS: Scheduler module ip_vs_ not found [ 716.128296][T26795] Buffer I/O error on dev nbd3, logical block 0, async page read [ 716.138381][T26795] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.182374][T26795] Buffer I/O error on dev nbd3, logical block 1, async page read [ 716.190344][T26795] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.209947][T26795] Buffer I/O error on dev nbd3, logical block 2, async page read [ 716.217803][T26795] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.223048][T29269] netlink: 'syz.2.6011': attribute type 12 has an invalid length. [ 716.249927][T26795] Buffer I/O error on dev nbd3, logical block 3, async page read [ 716.257796][T26795] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.299985][T26795] Buffer I/O error on dev nbd3, logical block 0, async page read [ 716.307858][T26795] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.359984][T26795] Buffer I/O error on dev nbd3, logical block 1, async page read [ 716.368556][T26795] ldm_validate_partition_table(): Disk read failed. [ 716.432322][T26795] Dev nbd3: unable to read RDB block 0 [ 716.438511][T26795] nbd3: unable to read partition table [ 716.439923][T29277] sctp: [Deprecated]: syz.4.6014 (pid 29277) Use of int in max_burst socket option. [ 716.439923][T29277] Use struct sctp_assoc_value instead [ 716.489607][T26795] ldm_validate_partition_table(): Disk read failed. [ 716.525218][T26795] Dev nbd3: unable to read RDB block 0 [ 716.553962][T26795] nbd3: unable to read partition table [ 716.848826][T29258] lo speed is unknown, defaulting to 1000 [ 716.870445][T29291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6019'. [ 716.971576][ T5839] Bluetooth: hci1: link tx timeout [ 716.977956][ T5839] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 717.002755][T29291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 717.049036][T29298] bond3: option ad_select: unable to set because the bond device is up [ 717.890889][ T5839] Bluetooth: hci5: command tx timeout [ 718.403381][T29325] syzkaller0: entered promiscuous mode [ 718.413199][T29325] syzkaller0: entered allmulticast mode [ 718.473090][T29338] netlink: 'syz.4.6025': attribute type 1 has an invalid length. [ 718.537855][T29338] netlink: 'syz.4.6025': attribute type 2 has an invalid length. [ 719.003164][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 719.120303][T29258] chnl_net:caif_netlink_parms(): no params data found [ 719.224932][ T6670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.393834][T29368] __nla_validate_parse: 1 callbacks suppressed [ 719.393856][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 719.493361][ T6670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.539064][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 719.585630][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6035'. [ 719.595393][T29377] netlink: 'syz.2.6035': attribute type 14 has an invalid length. [ 719.636252][ T6670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.739435][T29393] syzkaller1: entered promiscuous mode [ 719.745313][T29393] syzkaller1: entered allmulticast mode [ 719.775931][ T6670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.837846][T29258] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.852187][T29258] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.863035][T29258] bridge_slave_0: entered allmulticast mode [ 719.872126][T29258] bridge_slave_0: entered promiscuous mode [ 719.886896][T29258] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.894325][T29258] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.904125][T29258] bridge_slave_1: entered allmulticast mode [ 719.912746][T29258] bridge_slave_1: entered promiscuous mode [ 719.967032][ T5830] Bluetooth: hci5: command tx timeout [ 719.998888][T29258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.030745][T29258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.133781][ T6672] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.204048][ T35] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.225976][T29258] team0: Port device team_slave_0 added [ 720.257148][T29410] syz_tun: entered allmulticast mode [ 720.275027][T29410] netlink: 'syz.1.6044': attribute type 4 has an invalid length. [ 720.297909][T29258] team0: Port device team_slave_1 added [ 720.300152][T29410] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6044'. [ 720.336091][ T35] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.367432][T29414] hsr0: entered promiscuous mode [ 720.434179][ T6672] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.487309][T29258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.511916][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.585113][T29258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.625191][T29258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.642353][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.688487][T29258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.709036][T29409] syz_tun: left allmulticast mode [ 720.724780][ T6670] bridge_slave_0: left allmulticast mode [ 720.740094][ T6670] bridge_slave_0: left promiscuous mode [ 720.747770][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.073374][ T6670] bond6 (unregistering): (slave geneve3): Releasing active interface [ 721.376591][ T6670] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 721.385019][ T6670] bridge6 (unregistering): left promiscuous mode [ 721.391518][ T6670] bridge6 (unregistering): left allmulticast mode [ 721.414320][ T6670] bond9 (unregistering): (slave bridge7): Releasing active interface [ 721.422659][ T6670] bridge7 (unregistering): left promiscuous mode [ 721.429164][ T6670] bridge7 (unregistering): left allmulticast mode [ 721.464162][ T6670] bond1 (unregistering): Released all slaves [ 721.478096][ T6670] bond2 (unregistering): Released all slaves [ 721.494807][ T6670] bond3 (unregistering): Released all slaves [ 721.510777][ T6670] bond4 (unregistering): Released all slaves [ 721.529369][ T6670] bond5 (unregistering): Released all slaves [ 721.551721][ T6670] bond6 (unregistering): Released all slaves [ 721.570606][ T6670] bond7 (unregistering): Released all slaves [ 721.587202][ T6670] bond8 (unregistering): Released all slaves [ 721.607798][ T6670] bond0 (unregistering): Released all slaves [ 721.625333][ T6670] bond9 (unregistering): Released all slaves [ 721.661082][T29434] 8021q: VLANs not supported on caif0 [ 721.866089][ T6670] !: left promiscuous mode [ 721.954805][T29258] hsr_slave_0: entered promiscuous mode [ 721.979515][T29258] hsr_slave_1: entered promiscuous mode [ 721.996289][T29258] debugfs: 'hsr0' already exists in 'hsr' [ 722.006209][T29258] Cannot create hsr debugfs directory [ 722.044278][ T6670] tipc: Left network mode [ 722.051304][ T5830] Bluetooth: hci5: command tx timeout [ 722.117962][T29461] netlink: 'syz.2.6057': attribute type 2 has an invalid length. [ 722.161755][ T6670] IPVS: stopping backup sync thread 21170 ... [ 722.166293][T29461] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6057'. [ 722.172160][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6056'. [ 722.178406][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6057'. [ 722.213059][T29461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6057'. [ 722.584277][T29480] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6062'. [ 722.656038][T29258] netdevsim netdevsim3 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.883501][T29486] syzkaller0: entered promiscuous mode [ 722.903222][T29486] syzkaller0: entered allmulticast mode [ 722.928567][T29258] netdevsim netdevsim3 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.021251][T29500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6065'. [ 723.267954][T29513] netlink: 'syz.4.6068': attribute type 1 has an invalid length. [ 723.297391][T29513] netlink: 'syz.4.6068': attribute type 1 has an invalid length. [ 723.314868][T29513] netlink: 'syz.4.6068': attribute type 2 has an invalid length. [ 723.408334][T29258] netdevsim netdevsim3 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.593040][ T6670] hsr_slave_0: left promiscuous mode [ 723.609451][ T6670] hsr_slave_1: left promiscuous mode [ 724.026616][T29258] netdevsim netdevsim3 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.128288][ T5830] Bluetooth: hci5: command tx timeout [ 724.665862][T29258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 724.702081][T29258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 724.771573][T29258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 724.793545][T29258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 724.916035][T29571] __nla_validate_parse: 1 callbacks suppressed [ 724.916057][T29571] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6082'. [ 724.967350][T29571] netlink: 'syz.5.6082': attribute type 10 has an invalid length. [ 725.006462][T29571] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.078919][T29571] bond0: (slave team0): Enslaving as an active interface with an up link [ 725.190397][T29258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.272826][T29258] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.279206][T29583] netlink: 'syz.2.6083': attribute type 1 has an invalid length. [ 725.300179][T24194] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.307467][T24194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.318539][T29583] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6083'. [ 725.351180][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.358570][T24194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.389201][T29547] lo speed is unknown, defaulting to 1000 [ 725.492462][T29583] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 725.793614][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6087'. [ 725.961999][T29258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.112637][T29258] veth0_vlan: entered promiscuous mode [ 726.162233][T29258] veth1_vlan: entered promiscuous mode [ 726.184148][T29594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6086'. [ 726.257438][T29258] veth0_macvtap: entered promiscuous mode [ 726.281566][T29258] veth1_macvtap: entered promiscuous mode [ 726.334073][T29258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.365903][T29258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.399727][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.425686][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.450428][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.472305][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.734109][ T6684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.761520][ T6684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.828076][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.841894][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.883801][T29621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6093'. [ 726.940975][T29621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6093'. [ 726.977722][T29628] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 726.992969][T29621] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6093'. [ 727.029725][T29628] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 727.227598][T29642] netlink: 'syz.1.6100': attribute type 21 has an invalid length. [ 727.268627][T29642] netlink: 'syz.1.6100': attribute type 20 has an invalid length. [ 727.326347][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6102'. [ 727.371743][T29651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.413243][ T5830] Bluetooth: hci5: command tx timeout [ 727.451366][T29655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6103'. [ 727.492582][T29655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6103'. [ 727.592206][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.604352][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.625666][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.637082][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.646553][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.758842][T29669] netlink: 'syz.1.6105': attribute type 83 has an invalid length. [ 728.258860][T29672] vlan0: entered promiscuous mode [ 728.270203][T29659] lo speed is unknown, defaulting to 1000 [ 728.560476][T29659] chnl_net:caif_netlink_parms(): no params data found [ 728.861826][T29659] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.870670][T29659] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.878680][T29659] bridge_slave_0: entered allmulticast mode [ 728.887678][T29659] bridge_slave_0: entered promiscuous mode [ 728.897349][T29659] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.905520][T29659] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.913278][T29659] bridge_slave_1: entered allmulticast mode [ 728.923063][T29659] bridge_slave_1: entered promiscuous mode [ 729.072028][T29659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.114291][T29659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.276908][T29659] team0: Port device team_slave_0 added [ 729.286213][T29659] team0: Port device team_slave_1 added [ 729.434671][T29659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.470035][T29659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.505088][T29659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.575017][T29734] syzkaller0: entered promiscuous mode [ 729.580655][T29734] syzkaller0: entered allmulticast mode [ 729.651691][T29744] siw: device registration error -23 [ 729.695191][T29659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.712892][T29659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.740770][ T5839] Bluetooth: hci3: command tx timeout [ 729.764046][T29749] netlink: 'syz.5.6121': attribute type 13 has an invalid length. [ 729.776876][T29749] netlink: 'syz.5.6121': attribute type 17 has an invalid length. [ 729.846314][T29659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.968315][T29760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.031582][T29749] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.038862][T29749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.046529][T29749] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.053819][T29749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.069194][T29749] bridge0: left allmulticast mode [ 730.282734][T29749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.597545][T29659] hsr_slave_0: entered promiscuous mode [ 730.628391][T29659] hsr_slave_1: entered promiscuous mode [ 730.643461][T29659] debugfs: 'hsr0' already exists in 'hsr' [ 730.659551][T29659] Cannot create hsr debugfs directory [ 730.739050][T29784] __nla_validate_parse: 6 callbacks suppressed [ 730.739074][T29784] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6127'. [ 730.788558][T29785] ipvlan0: entered promiscuous mode [ 730.796043][T29785] ipvlan0: entered allmulticast mode [ 730.809091][T29785] gretap0: entered allmulticast mode [ 730.820643][T29784] IPv6: sit2: Disabled Multicast RS [ 730.828209][T29784] sit2: entered allmulticast mode [ 730.874024][T29791] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 731.128226][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 731.157033][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6129'. [ 731.196041][T29794] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6129'. [ 731.225337][T29659] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.258303][T29807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6133'. [ 731.382573][T29659] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.470447][T29659] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.497809][T29818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6137'. [ 731.572696][T29823] vcan0: tx address claim with dest, not broadcast [ 731.608361][T29659] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.802834][ T5839] Bluetooth: hci3: command tx timeout [ 731.966653][T29858] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6143'. [ 731.972939][T29860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6144'. [ 731.991390][T29860] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.6144'. [ 732.142639][T29659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 732.229056][T29659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 732.274231][T29659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 732.319085][T29866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6147'. [ 732.385063][T29659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 732.746432][T29659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.866490][T29659] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.915649][T24192] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.922917][T24192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.994858][T24192] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.002128][T24192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.190713][T29659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.582665][T29659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.654572][T29916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.813716][T29895] lo speed is unknown, defaulting to 1000 [ 733.882336][ T5839] Bluetooth: hci3: command tx timeout [ 734.335369][T29659] veth0_vlan: entered promiscuous mode [ 734.368849][T29659] veth1_vlan: entered promiscuous mode [ 734.464634][T29659] veth0_macvtap: entered promiscuous mode [ 734.476369][T29659] veth1_macvtap: entered promiscuous mode [ 734.544561][T29659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.616050][T29659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.681320][ T85] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.704856][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.720413][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.791157][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.919019][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.930668][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.038494][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.049130][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.713605][T29968] erspan0: entered promiscuous mode [ 735.737669][T29968] macsec1: entered promiscuous mode [ 735.768757][T29968] erspan0: left promiscuous mode [ 735.966356][ T5839] Bluetooth: hci3: command tx timeout [ 736.376323][T30003] openvswitch: netlink: Actions may not be safe on all matching packets [ 736.901085][T30017] __nla_validate_parse: 2 callbacks suppressed [ 736.901109][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 736.954365][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 736.980000][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 736.997542][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.021574][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.040099][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.049165][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.067466][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.085350][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.100014][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 737.137101][T30026] hsr0: entered promiscuous mode [ 737.265407][T29998] lo speed is unknown, defaulting to 1000 [ 737.686255][T30060] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 737.733692][T30063] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 737.764667][T30056] bond9: entered promiscuous mode [ 737.770533][T30056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 737.867442][T30056] bond9: (slave gre2): refused to change device type [ 738.071904][T30077] netlink: 'syz.3.6196': attribute type 1 has an invalid length. [ 738.106982][T30077] netlink: 'syz.3.6196': attribute type 1 has an invalid length. [ 738.375879][T30095] netlink: 'syz.2.6202': attribute type 1 has an invalid length. [ 738.400552][T30093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.439066][T30100] netlink: 'syz.1.6201': attribute type 13 has an invalid length. [ 738.448227][T30100] netlink: 'syz.1.6201': attribute type 17 has an invalid length. [ 738.583511][T30100] 8021q: adding VLAN 0 to HW filter on device .` [ 738.603564][T30100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 738.635534][T12331] lo speed is unknown, defaulting to 1000 [ 738.645221][T12331] syz2: Port: 1 Link ACTIVE [ 738.665643][T30112] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 739.767430][T30133] netlink: zone id is out of range [ 739.788617][T30133] netlink: zone id is out of range [ 739.818453][T30153] openvswitch: netlink: Message has 1 unknown bytes. [ 739.835370][T30133] netlink: zone id is out of range [ 739.839552][T30146] openvswitch: netlink: IP tunnel TTL not specified. [ 739.853610][T30153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.870269][T30133] netlink: zone id is out of range [ 739.875864][T30133] netlink: zone id is out of range [ 740.014367][T30156] netlink: 'syz.3.6217': attribute type 21 has an invalid length. [ 740.056672][T30156] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.467617][T30169] netlink: 'syz.1.6219': attribute type 1 has an invalid length. [ 741.065531][T11421] lec:lec_start_xmit: lec0:No lecd attached [ 741.378934][T30180] netlink: 'syz.3.6222': attribute type 27 has an invalid length. [ 741.440907][T30161] lo speed is unknown, defaulting to 1000 [ 741.792693][T30213] net_ratelimit: 12 callbacks suppressed [ 741.792714][T30213] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 742.301677][T30236] __nla_validate_parse: 168 callbacks suppressed [ 742.301700][T30236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6233'. [ 742.351123][T30236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6233'. [ 742.352924][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6234'. [ 742.388351][T30236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6233'. [ 742.413921][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6233'. [ 742.459271][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6235'. [ 742.656028][T30252] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 742.947124][T30276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6245'. [ 743.152120][T30284] delete_channel: no stack [ 743.378971][T30292] syzkaller0: entered promiscuous mode [ 743.404922][T30292] syzkaller0: entered allmulticast mode [ 743.406158][T12328] IPVS: starting estimator thread 0... [ 743.502577][T30300] IPVS: using max 25 ests per chain, 60000 per kthread [ 743.548928][T30296] syzkaller1: entered promiscuous mode [ 743.568199][T30296] syzkaller1: entered allmulticast mode [ 743.662387][T30306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6253'. [ 746.080115][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 746.088178][ C0] lec:lec_tx_timeout: lec0 [ 747.326885][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 753.000069][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 753.008090][ C0] lec:lec_tx_timeout: lec0 [ 767.406195][T30313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 767.420377][T30318] netlink: 'syz.5.6254': attribute type 10 has an invalid length. [ 767.438106][T30318] team0: Port device dummy0 added [ 767.452519][T30318] netlink: 'syz.5.6254': attribute type 10 has an invalid length. [ 767.487230][T30318] team0: Port device dummy0 removed [ 767.522253][T30318] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 767.621445][T30324] dvmrp1: entered allmulticast mode [ 767.668371][T30328] block nbd0: Unsupported socket: should be TCP or UNIX. [ 767.682055][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6260'. [ 767.693017][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6262'. [ 767.726352][T30331] netlink: zone id is out of range [ 767.736314][T30331] netlink: zone id is out of range [ 767.742543][T30328] netlink: 121 bytes leftover after parsing attributes in process `syz.3.6260'. [ 767.746465][T30331] netlink: zone id is out of range [ 767.767603][T30331] netlink: zone id is out of range [ 767.773899][T30331] netlink: zone id is out of range [ 767.783428][T30331] netlink: zone id is out of range [ 767.803001][T30331] netlink: zone id is out of range [ 767.809670][T30331] netlink: zone id is out of range [ 767.819090][T30331] netlink: zone id is out of range [ 767.829082][T30331] netlink: zone id is out of range [ 767.858484][T30337] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6263'. [ 768.028446][T30343] vxcan2: entered allmulticast mode [ 768.222243][T30350] 8021q: VLANs not supported on lo [ 768.237281][T30351] sctp: [Deprecated]: syz.3.6266 (pid 30351) Use of int in max_burst socket option. [ 768.237281][T30351] Use struct sctp_assoc_value instead [ 768.285728][T30317] lo speed is unknown, defaulting to 1000 [ 768.372051][T30353] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.379973][T30353] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.468414][T30360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6268'. [ 768.514673][T30353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.535401][T30353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.654051][T30369] netlink: 'syz.4.6270': attribute type 10 has an invalid length. [ 768.826966][T30369] team0: Device vxcan1 is of different type [ 768.860849][ T85] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.871200][ T85] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.882188][T30376] netlink: 'syz.4.6270': attribute type 10 has an invalid length. [ 768.913016][ T85] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.938941][ T85] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.128999][T30394] netlink: 'syz.2.6275': attribute type 10 has an invalid length. [ 769.168181][T30394] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 769.211369][T30394] team0: Failed to send options change via netlink (err -105) [ 769.220336][T30394] team0: Port device netdevsim0 added [ 769.283145][T30399] netlink: 'syz.3.6277': attribute type 29 has an invalid length. [ 769.333310][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6277'. [ 769.916201][T30420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6282'. [ 770.136467][T30423] batadv0: entered allmulticast mode [ 770.160414][T30428] netlink: 'syz.1.6284': attribute type 21 has an invalid length. [ 770.179049][T30423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 770.225509][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6286'. [ 770.619649][T30444] nbd: socks must be embedded in a SOCK_ITEM attr [ 770.702667][T30320] block nbd64: NBD_DISCONNECT [ 770.721079][T30448] nbd: nbd64 already in use [ 770.750027][T30452] netem: incorrect gi model size [ 770.771895][T30452] netem: change failed [ 770.936016][T30320] udevd[30320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 771.015379][T30461] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 771.075518][T30461] bond5 (unregistering): Released all slaves [ 771.299573][T30439] lo speed is unknown, defaulting to 1000 [ 771.379755][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 771.391522][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 771.399636][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 771.408100][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 771.416339][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 772.006989][T30503] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 772.006994][T30504] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 772.287536][T30505] vlan2: entered promiscuous mode [ 772.307362][T30505] geneve1: entered promiscuous mode [ 772.317078][T30505] vlan2: entered allmulticast mode [ 772.325318][T30505] geneve1: entered allmulticast mode [ 772.348902][T30472] lo speed is unknown, defaulting to 1000 [ 772.501391][T30510] __nla_validate_parse: 9 callbacks suppressed [ 772.501412][T30510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6308'. [ 772.503159][T30513] netlink: 19 bytes leftover after parsing attributes in process `syz.5.6309'. [ 772.507808][T30510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6308'. [ 772.535988][T30510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6308'. [ 772.826396][T24182] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.897678][T24186] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.975996][T30472] chnl_net:caif_netlink_parms(): no params data found [ 773.016703][T24186] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.111089][T30534] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 773.124021][T30534] bond1 (unregistering): Released all slaves [ 773.157806][T24192] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.480460][ T5839] Bluetooth: hci2: command tx timeout [ 774.023676][ T6687] bond3 (unregistering): (slave gretap2): Releasing active interface [ 774.414000][ T6687] .` (unregistering): Released all slaves [ 774.425230][ T6687] bond1 (unregistering): (slave veth5): Releasing active interface [ 774.434927][ T6687] bond1 (unregistering): Released all slaves [ 774.448832][ T6687] bond2 (unregistering): Released all slaves [ 774.464530][ T6687] bond3 (unregistering): Released all slaves [ 774.479858][ T6687] bond4 (unregistering): Released all slaves [ 774.504542][ T6687] bond5 (unregistering): (slave veth9): Releasing active interface [ 774.515129][ T6687] bond5 (unregistering): Released all slaves [ 774.529414][ T6687] bond6 (unregistering): Released all slaves [ 774.544223][ T6687] bond7 (unregistering): Released all slaves [ 774.558838][ T6687] bond0 (unregistering): (slave batadv_slave_0): Releasing active interface [ 774.568599][ T6687] bond0 (unregistering): Released all slaves [ 774.585645][ T6687] bond8 (unregistering): Released all slaves [ 774.609918][ T6687] bond9 (unregistering): Released all slaves [ 774.672496][T30513] lo speed is unknown, defaulting to 1000 [ 774.903903][ T6687] : left promiscuous mode [ 774.978964][ T6687] l24): left promiscuous mode [ 775.032263][T30472] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.048091][T30472] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.056869][T30472] bridge_slave_0: entered allmulticast mode [ 775.068406][T30472] bridge_slave_0: entered promiscuous mode [ 775.105097][ T6687] 5n: left promiscuous mode [ 775.113986][T30472] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.121957][T30472] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.129160][T30472] bridge_slave_1: entered allmulticast mode [ 775.139875][T30472] bridge_slave_1: entered promiscuous mode [ 775.217818][ T6687] tipc: Disabling bearer [ 775.225740][ T6687] tipc: Left network mode [ 775.560393][ T5839] Bluetooth: hci2: command tx timeout [ 775.569299][T30472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.632691][T30472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.883618][T30607] syzkaller0: entered promiscuous mode [ 775.889177][T30607] syzkaller0: entered allmulticast mode [ 775.903794][T30472] team0: Port device team_slave_0 added [ 775.936054][T30472] team0: Port device team_slave_1 added [ 776.188719][T30472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.229938][T30472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.314436][T30472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.354637][T30628] sit0: entered allmulticast mode [ 776.385968][T30629] sit0: left allmulticast mode [ 776.431372][T30472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.438875][T30472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.478694][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'. [ 776.485824][T30472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.512842][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'. [ 776.742977][T30472] hsr_slave_0: entered promiscuous mode [ 776.754373][T30472] hsr_slave_1: entered promiscuous mode [ 776.769665][T30472] debugfs: 'hsr0' already exists in 'hsr' [ 776.783756][T30472] Cannot create hsr debugfs directory [ 776.905480][T30657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 776.964430][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6337'. [ 776.994397][T30669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6337'. [ 777.052427][T30662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6337'. [ 777.137600][T30669] vlan2: entered allmulticast mode [ 777.143942][T30669] macvtap0: entered allmulticast mode [ 777.359065][T30675] bond0: entered promiscuous mode [ 777.386160][T30685] sctp: [Deprecated]: syz.3.6341 (pid 30685) Use of int in maxseg socket option. [ 777.386160][T30685] Use struct sctp_assoc_value instead [ 777.389704][T30675] bond_slave_0: entered promiscuous mode [ 777.407360][T30675] bond_slave_1: entered promiscuous mode [ 777.417920][T30675] batadv_slave_0: entered promiscuous mode [ 777.425327][T30675] batadv_slave_0: left promiscuous mode [ 777.435345][T30675] bond0: left promiscuous mode [ 777.441955][T30675] bond_slave_0: left promiscuous mode [ 777.448597][T30675] bond_slave_1: left promiscuous mode [ 777.455579][T30686] net_ratelimit: 46 callbacks suppressed [ 777.455600][T30686] netlink: zone id is out of range [ 777.478483][T30686] netlink: zone id is out of range [ 777.492013][T30686] netlink: zone id is out of range [ 777.504397][T30686] netlink: zone id is out of range [ 777.511072][T30686] netlink: zone id is out of range [ 777.529677][T30686] netlink: zone id is out of range [ 777.536960][T30686] netlink: zone id is out of range [ 777.542964][T30686] netlink: zone id is out of range [ 777.548236][T30686] netlink: zone id is out of range [ 777.554269][T30686] netlink: zone id is out of range [ 777.641510][ T5839] Bluetooth: hci2: command tx timeout [ 777.696840][ T6687] hsr_slave_0: left promiscuous mode [ 777.947189][T30704] netlink: 'syz.3.6344': attribute type 1 has an invalid length. [ 777.955654][T30704] __nla_validate_parse: 2 callbacks suppressed [ 777.955675][T30704] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6344'. [ 778.096552][ T6687] pim6reg (unregistering): left allmulticast mode [ 778.319261][ T6687] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 778.566635][T23445] lo speed is unknown, defaulting to 1000 [ 778.568386][T30691] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 778.575444][T23445] infiniband syz2: ib_query_port failed (-19) [ 778.583047][T30691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 778.610529][T30691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 778.794414][T30472] netdevsim netdevsim1 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.865636][T30730] lo speed is unknown, defaulting to 1000 [ 778.946453][T30729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.968568][T30730] lo speed is unknown, defaulting to 1000 [ 779.054703][T30472] netdevsim netdevsim1 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.082318][T30730] lo speed is unknown, defaulting to 1000 [ 779.126419][T30730] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 779.163002][T30729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.303751][T30472] netdevsim netdevsim1 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.397675][T30730] lo speed is unknown, defaulting to 1000 [ 779.437941][T30729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.470211][T30730] lo speed is unknown, defaulting to 1000 [ 779.516473][T30472] netdevsim netdevsim1 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.554486][T30730] lo speed is unknown, defaulting to 1000 [ 779.618350][T30729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.635130][T30730] lo speed is unknown, defaulting to 1000 [ 779.665092][T30730] lo speed is unknown, defaulting to 1000 [ 779.672836][ T6687] IPVS: stop unused estimator thread 0... [ 779.677837][T30730] lo speed is unknown, defaulting to 1000 [ 779.694949][T30730] lo speed is unknown, defaulting to 1000 [ 779.720435][ T5839] Bluetooth: hci2: command tx timeout [ 779.729231][T30730] lo speed is unknown, defaulting to 1000 [ 779.972205][T24182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.029910][T24182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.072647][T30472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 780.168167][T30779] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 780.181007][T30779] bond0: (slave sit0): Error -95 calling set_mac_address [ 780.240286][T30779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6359'. [ 780.278089][T30472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.338408][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6361'. [ 780.347019][T30472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.388511][ T6687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.397689][T30472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 780.457972][T24182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.603019][T30801] netlink: 'syz.3.6363': attribute type 27 has an invalid length. [ 780.740325][T30801] vlan2: left allmulticast mode [ 780.745278][T30801] macvtap0: left allmulticast mode [ 780.992018][T30827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6365'. [ 781.065063][T30827] bond5: option arp_all_targets: invalid value (129) [ 781.083631][T30828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6367'. [ 781.098903][T30827] bond5 (unregistering): Released all slaves [ 781.153718][T30472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.235052][T30472] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.351937][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.359184][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.430388][T24186] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.437618][T24186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.507839][T30848] syzkaller1: entered promiscuous mode [ 781.513958][T30848] syzkaller1: entered allmulticast mode [ 781.588748][T30854] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6372'. [ 781.763416][T30869] syzkaller0: entered promiscuous mode [ 781.782291][T30869] syzkaller0: entered allmulticast mode [ 781.824775][T30869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 781.932055][T30882] netlink: 'syz.4.6376': attribute type 10 has an invalid length. [ 781.975621][T30882] team0: Port device dummy0 added [ 781.989277][T30882] netlink: 'syz.4.6376': attribute type 10 has an invalid length. [ 782.022072][T30882] team0: Port device dummy0 removed [ 782.032321][T30882] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 782.218092][T30472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.287563][T30472] veth0_vlan: entered promiscuous mode [ 782.307949][T30472] veth1_vlan: entered promiscuous mode [ 782.356432][T30472] veth0_macvtap: entered promiscuous mode [ 782.371799][T30472] veth1_macvtap: entered promiscuous mode [ 782.401878][T30472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.455950][T30472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.477275][ T6667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.500818][ T6667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.517507][ T6667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.534797][ T6667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.452597][T30854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.622464][T30941] batman_adv: batadv0: Adding interface: wlan1 [ 784.639413][T30941] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.665686][T30941] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 784.677866][T30948] netlink: 'syz.3.6378': attribute type 1 has an invalid length. [ 784.686188][T24182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.699852][T24182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.771326][T30948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.827602][T30941] bond1: (slave veth3): Enslaving as an active interface with a down link [ 784.845609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.873591][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.000879][T30948] netlink: 'syz.3.6378': attribute type 1 has an invalid length. [ 785.103325][T30957] pim6reg1: entered promiscuous mode [ 785.147684][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6296'. [ 785.164506][T30957] pim6reg1: entered allmulticast mode [ 785.172729][T30961] net_ratelimit: 337 callbacks suppressed [ 785.172747][T30961] openvswitch: netlink: Message has 179 unknown bytes. [ 785.190377][T30961] netlink: 'syz.4.6384': attribute type 2 has an invalid length. [ 785.198240][T30961] netlink: 'syz.4.6384': attribute type 9 has an invalid length. [ 785.202103][T30943] lo speed is unknown, defaulting to 1000 [ 785.208821][T30961] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6384'. [ 785.218999][T30941] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 785.229768][T30941] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 785.754318][T30991] netlink: 'syz.3.6392': attribute type 1 has an invalid length. [ 785.824167][T30988] Bluetooth: MGMT ver 1.23 [ 786.189258][T31009] Bluetooth: MGMT ver 1.23 [ 786.496104][T31025] netlink: 'syz.3.6401': attribute type 3 has an invalid length. [ 786.559097][T31025] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6401'. [ 786.568918][T31025] netlink: 'syz.3.6401': attribute type 1 has an invalid length. [ 786.577486][T31025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6401'. [ 786.752863][T31039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6404'. [ 786.972089][T31053] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6405'. [ 787.445101][T31067] tunl0: entered promiscuous mode [ 787.454714][T31030] lo speed is unknown, defaulting to 1000 [ 787.998150][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6410'. [ 788.008630][T31083] openvswitch: netlink: Flow actions attr not present in new flow. [ 788.221036][T31090] bond1: entered promiscuous mode [ 788.226689][T31090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.242504][T31090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.249461][T31090] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 788.261414][T31090] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 788.720062][T31096] syzkaller0: entered promiscuous mode [ 788.726369][T31096] syzkaller0: entered allmulticast mode [ 789.828758][T31046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.014013][T31098] : entered promiscuous mode [ 790.033527][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6417'. [ 790.065239][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6417'. [ 790.219040][T31117] sctp: [Deprecated]: syz.2.6420 (pid 31117) Use of int in maxseg socket option. [ 790.219040][T31117] Use struct sctp_assoc_value instead [ 790.338916][T31130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'. [ 790.358810][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 790.384516][T31131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6423'. [ 790.442037][T23445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.696729][T31149] netlink: 'syz.4.6427': attribute type 58 has an invalid length. [ 790.910177][T10228] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.936951][T31137] lo speed is unknown, defaulting to 1000 [ 790.946681][T31162] netlink: 'syz.4.6430': attribute type 1 has an invalid length. [ 790.969977][T31162] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6430'. [ 791.160331][ T6667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 791.264641][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 791.274951][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 791.290334][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 791.306765][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 791.333401][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 791.334478][T31184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6437'. [ 791.393008][T31181] veth0_to_batadv: entered promiscuous mode [ 791.399207][T31181] veth0_to_batadv: entered allmulticast mode [ 791.653828][T31203] netlink: 'syz.3.6442': attribute type 4 has an invalid length. [ 791.666570][T31203] netlink: 'syz.3.6442': attribute type 4 has an invalid length. [ 791.697915][T10228] lo speed is unknown, defaulting to 1000 [ 791.719921][T10228] syz2: Port: 1 Link ACTIVE [ 792.232749][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.254187][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.368274][T31243] netlink: 'syz.4.6453': attribute type 10 has an invalid length. [ 792.370126][T31244] netlink: 'syz.4.6453': attribute type 10 has an invalid length. [ 792.453499][T31243] bond0: (slave dummy0): Releasing backup interface [ 792.502545][T10228] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.541587][T31243] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 792.566263][T31243] team0: Failed to send options change via netlink (err -105) [ 792.576403][T31243] team0: Port device dummy0 added [ 792.793326][T31263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.203291][T23445] lo speed is unknown, defaulting to 1000 [ 793.209102][T23445] syz2: Port: 1 Link DOWN [ 793.215042][T10228] lo speed is unknown, defaulting to 1000 [ 793.329741][T31305] xt_hashlimit: size too large, truncated to 1048576 [ 793.789442][T31317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.878421][T31323] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 793.908822][ T85] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 794.030157][T24192] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 794.143338][T31308] lo speed is unknown, defaulting to 1000 [ 794.193215][T31337] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 794.203737][T31337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.392608][T31340] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 794.757871][T31371] xt_l2tp: missing protocol rule (udp|l2tpip) [ 794.817142][T31368] IPVS: persistence engine module ip_vs_pe_ not found [ 794.928159][T31370] IPVS: persistence engine module ip_vs_pe_ not found [ 795.194437][T31382] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 795.382842][T31387] netlink: zone id is out of range [ 795.399274][T31387] netlink: zone id is out of range [ 795.447050][T31387] netlink: zone id is out of range [ 795.456021][T31387] netlink: zone id is out of range [ 795.468805][T31387] netlink: zone id is out of range [ 795.474551][T31387] netlink: zone id is out of range [ 795.580451][T31397] __nla_validate_parse: 19 callbacks suppressed [ 795.580474][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6491'. [ 795.652466][T31403] netlink: 'syz.1.6490': attribute type 1 has an invalid length. [ 795.722592][T31408] netlink: 'syz.1.6490': attribute type 1 has an invalid length. [ 795.746458][T31405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6492'. [ 796.293368][T31423] erspan0: entered promiscuous mode [ 796.317032][T31423] erspan0: left promiscuous mode [ 796.360252][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.957143][T31456] netlink: 'syz.5.6507': attribute type 1 has an invalid length. [ 797.128247][T31464] bond5: (slave veth7): Enslaving as an active interface with a down link [ 797.144948][T31464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6507'. [ 797.197304][T31456] bond5: (slave veth9): Enslaving as an active interface with a down link [ 797.215857][T31464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 797.349556][T31445] lo speed is unknown, defaulting to 1000 [ 797.391485][T31476] syzkaller0: entered promiscuous mode [ 797.397040][T31476] syzkaller0: entered allmulticast mode [ 797.522002][T31484] syzkaller0: entered promiscuous mode [ 797.528243][T31484] syzkaller0: entered allmulticast mode [ 797.990707][T31504] netlink: 'syz.2.6517': attribute type 1 has an invalid length. [ 798.017823][T31504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6517'. [ 798.062433][T31504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6517'. [ 798.319398][T31523] netlink: 'syz.2.6521': attribute type 4 has an invalid length. [ 798.379705][T31525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6523'. [ 798.456780][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6521'. [ 798.920935][T31546] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6528'. [ 798.960684][T31522] lo speed is unknown, defaulting to 1000 [ 799.127303][T31551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6530'. [ 799.178198][T31553] bridge0: port 3(vlan0) entered blocking state [ 799.185925][T31553] bridge0: port 3(vlan0) entered disabled state [ 799.193047][T31553] vlan0: entered allmulticast mode [ 799.209040][T31553] bond0: entered allmulticast mode [ 799.226235][T31553] bond_slave_0: entered allmulticast mode [ 799.234310][T31553] bond_slave_1: entered allmulticast mode [ 799.261342][T31553] vlan0: entered promiscuous mode [ 799.266431][T31553] bond0: entered promiscuous mode [ 799.272980][T31553] bond_slave_0: entered promiscuous mode [ 799.278926][T31553] bond_slave_1: entered promiscuous mode [ 799.735170][T31539] lo speed is unknown, defaulting to 1000 [ 800.192243][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6535'. [ 800.264144][T31575] netlink: 'syz.1.6535': attribute type 1 has an invalid length. [ 800.389689][T31586] xt_bpf: check failed: parse error [ 800.402725][T31584] dvmrp1: entered allmulticast mode [ 800.811250][T31595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6541'. [ 801.042105][T31598] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 801.051886][ T42] IPVS: starting estimator thread 0... [ 801.108004][T31590] lo speed is unknown, defaulting to 1000 [ 801.170560][T31599] IPVS: using max 29 ests per chain, 69600 per kthread [ 801.183075][T31605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6544'. [ 801.363820][T31615] net_ratelimit: 32 callbacks suppressed [ 801.363840][T31615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.493608][T31623] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6552'. [ 801.574479][T31627] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6553'. [ 801.967286][T31638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6557'. [ 802.062803][T31647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6560'. [ 802.246094][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6562'. [ 802.257379][T31657] netlink: 'syz.5.6563': attribute type 9 has an invalid length. [ 802.283220][T31656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6562'. [ 802.296753][T31654] netlink: 'syz.2.6562': attribute type 21 has an invalid length. [ 802.304921][T31654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6562'. [ 802.320840][T31662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6563'. [ 802.346544][T31654] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 802.848775][T31668] netlink: 'syz.3.6566': attribute type 1 has an invalid length. [ 803.001405][T31705] 5n: entered promiscuous mode [ 804.600745][T11421] lec:lec_start_xmit: lec0:No lecd attached [ 804.920146][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 805.358187][T31793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.808171][T31793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.849013][T31807] __nla_validate_parse: 21 callbacks suppressed [ 805.849046][T31807] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6603'. [ 805.901787][T31807] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6603'. [ 805.930348][T31807] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 806.102516][T31793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.171521][T31811] tipc: Started in network mode [ 806.176626][T31811] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 806.219933][T31811] tipc: Enabling of bearer rejected, failed to enable media [ 806.482806][T31793] team0: Port device netdevsim0 removed [ 806.511546][T31793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.659189][T31819] netlink: 'syz.1.6607': attribute type 3 has an invalid length. [ 806.690048][T31787] lo speed is unknown, defaulting to 1000 [ 806.802886][T10228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.928823][T31792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.030156][T31792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.106375][T10229] lo speed is unknown, defaulting to 1000 [ 807.112868][T10229] syz2: Port: 1 Link ACTIVE [ 807.378044][T31832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6610'. [ 807.460179][T24192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.507175][T24186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.586360][T24192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.671745][T31836] nbd: must specify at least one socket [ 807.801976][T10229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.842591][ T85] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.909714][T31840] bond2: option min_links: invalid value (18446744073709551612) [ 807.917612][T31840] bond2: option min_links: allowed values 0 - 2147483647 [ 807.959689][T31840] bond2 (unregistering): Released all slaves [ 808.049129][T31850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6613'. [ 808.897085][T31871] syzkaller0: entered promiscuous mode [ 808.903617][T31871] syzkaller0: entered allmulticast mode [ 809.193682][T31880] netlink: 'syz.5.6621': attribute type 1 has an invalid length. [ 809.614303][T31854] lo speed is unknown, defaulting to 1000 [ 809.958286][T31903] netlink: 'syz.4.6627': attribute type 4 has an invalid length. [ 809.966302][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 809.966338][ C0] lec:lec_tx_timeout: lec0 [ 809.975250][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 810.043897][T31903] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6627'. [ 810.275839][T31909] x_tables: duplicate underflow at hook 1 [ 810.778558][T31941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6639'. [ 810.803197][T31943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6640'. [ 810.832458][T31943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6640'. [ 810.898850][T31948] syzkaller0: entered promiscuous mode [ 810.916395][T31948] syzkaller0: entered allmulticast mode [ 811.012960][T31948] Cannot find set identified by id 0 to match [ 811.421589][T31963] nbd5: detected capacity change from 0 to 77309411391 [ 811.478514][ T5839] block nbd5: Receive control failed (result -104) [ 811.490760][ T5830] block nbd5: Receive control failed (result -32) [ 811.599231][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6652'. [ 811.711808][T31992] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6654'. [ 811.729250][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6654'. [ 811.741702][T31992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6654'. [ 811.772914][T31998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6657'. [ 811.890185][T32002] Cannot find del_set index 0 as target [ 811.918972][T32005] netlink: 'syz.2.6660': attribute type 31 has an invalid length. [ 812.045472][T32009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6661'. [ 812.466122][T32032] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 812.474786][T32030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6668'. [ 812.511738][T32030] bridge_slave_0: left allmulticast mode [ 812.517926][T32030] bridge_slave_0: left promiscuous mode [ 812.525374][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.534286][T32030] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.555763][T32030] bridge_slave_1: left allmulticast mode [ 812.562115][T32030] bridge_slave_1: left promiscuous mode [ 812.576140][T32030] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.602008][T32030] bond0: (slave bond_slave_0): Releasing backup interface [ 812.613629][T32030] bond0: (slave bond_slave_1): Releasing backup interface [ 812.626886][T32030] team0: Port device team_slave_0 removed [ 812.637549][T32030] team0: Port device team_slave_1 removed [ 812.648170][T32030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.664626][T32030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.681093][T32030] batman_adv: batadv0: Removing interface: wlan1 [ 812.711701][T32030] bond1: (slave veth3): Releasing active interface [ 812.743822][T32030] bond2: (slave ip6gretap1): Removing an active aggregator [ 812.780600][T32030] bond2: (slave ip6gretap1): Releasing backup interface [ 812.800979][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.189476][T32060] batadv_slave_1: entered promiscuous mode [ 813.414445][T32068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6678'. [ 813.455984][T32071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6679'. [ 813.512099][T32071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6679'. [ 813.547208][T32072] netlink: 'syz.4.6679': attribute type 1 has an invalid length. [ 813.731246][T32078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.799082][T32060] lo speed is unknown, defaulting to 1000 [ 813.873429][T32050] batadv_slave_1: left promiscuous mode [ 813.951645][T32078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.079054][T32078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.181880][T32096] IPv6: addrconf: prefix option has invalid lifetime [ 814.255041][T32078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.563600][T32103] bond2: option resend_igmp: invalid value (2880) [ 814.610116][T32103] bond2: option resend_igmp: allowed values 0 - 255 [ 814.648382][T32103] bond2 (unregistering): Released all slaves [ 815.000066][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 815.008397][ C0] lec:lec_tx_timeout: lec0 [ 815.077675][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.095660][ T6687] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.130868][T24192] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.205606][T32127] openvswitch: netlink: Flow key attribute not present in set flow. [ 816.142019][ T6667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.435641][T32148] team0 (unregistering): Port device team_slave_0 removed [ 816.505953][T32148] team0 (unregistering): Port device team_slave_1 removed [ 816.557806][T32148] team0 (unregistering): Port device dummy0 removed [ 817.202522][T32164] macsec1: entered promiscuous mode [ 817.567161][T32183] syzkaller0: entered promiscuous mode [ 817.600232][T32183] syzkaller0: entered allmulticast mode [ 817.665811][T32197] __nla_validate_parse: 8 callbacks suppressed [ 817.665833][T32197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6706'. [ 817.808170][T32202] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6707'. [ 819.945399][T32199] gre1: entered allmulticast mode [ 820.039605][T32217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6712'. [ 820.137585][T32221] veth1_macvtap: left promiscuous mode [ 820.144357][T32221] macsec0: entered allmulticast mode [ 820.184655][T32221] netlink: 'syz.5.6713': attribute type 3 has an invalid length. [ 820.433226][T32235] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6717'. [ 820.823608][T32217] lo speed is unknown, defaulting to 1000 [ 820.920018][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 821.294716][T32251] syzkaller1: entered promiscuous mode [ 821.300648][T32251] syzkaller1: entered allmulticast mode [ 821.314563][T32251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6720'. [ 821.446976][T32257] syzkaller1: left promiscuous mode [ 821.454406][T32257] syzkaller1: left allmulticast mode [ 822.069992][T32279] netlink: 'syz.1.6727': attribute type 13 has an invalid length. [ 822.088185][T32279] netlink: 'syz.1.6727': attribute type 17 has an invalid length. [ 822.110625][T32279] netlink: 'syz.1.6727': attribute type 27 has an invalid length. [ 822.314538][T32289] syzkaller0: entered promiscuous mode [ 822.324752][T32289] syzkaller0: entered allmulticast mode [ 822.440951][T32295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6730'. [ 822.553225][T32299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6734'. [ 822.963716][T32321] dvmrp12: entered allmulticast mode [ 822.989515][T32320] dvmrp12: left allmulticast mode [ 823.038531][T32318] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6740'. [ 823.836136][T32358] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.6751'. [ 824.267272][T32378] ip6erspan0: entered allmulticast mode [ 824.355524][T32380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6758'. [ 824.496806][T32392] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 824.534129][T32392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 824.571094][T32392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 824.773850][T32417] netlink: 'syz.1.6768': attribute type 1 has an invalid length. [ 824.777805][T32410] ipip0: entered promiscuous mode [ 825.322902][T32393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.533805][T32446] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6774'. [ 825.593528][T32446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.689542][T32460] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6778'. [ 825.701742][T32460] syzkaller0: entered promiscuous mode [ 825.707346][T32460] syzkaller0: entered allmulticast mode [ 825.721516][T32460] tcf_pedit_act: 7 callbacks suppressed [ 825.721534][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.734968][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.741919][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.748714][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.755656][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.762497][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.769288][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.776166][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.783025][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.790156][T32460] tc action pedit offset must be on 32 bit boundaries [ 825.796984][T32460] 0: reclassify loop, rule prio 0, protocol 800 [ 825.950766][T32470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.158415][T32480] syzkaller0: entered promiscuous mode [ 826.193368][T32480] syzkaller0: entered allmulticast mode [ 826.419665][T32496] netlink: 452 bytes leftover after parsing attributes in process `syz.4.6787'. [ 826.439153][T32496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6787'. [ 826.479009][ T42] IPVS: starting estimator thread 0... [ 826.580630][T32500] IPVS: using max 29 ests per chain, 69600 per kthread [ 826.781088][T32517] netlink: 'syz.4.6793': attribute type 3 has an invalid length. [ 826.994993][T32494] lo speed is unknown, defaulting to 1000 [ 827.425156][T32544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6799'. [ 827.436214][T32543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.443507][T32543] IPv6: NLM_F_CREATE should be set when creating new route [ 827.452096][T32544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.782046][T32546] syzkaller0: entered promiscuous mode [ 828.617508][T32562] IPVS: sh: FWM 3 0x00000003 - no destination available [ 830.390758][T32582] __nla_validate_parse: 2 callbacks suppressed [ 830.390782][T32582] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6808'. [ 830.682579][T32591] netlink: 'syz.3.6809': attribute type 1 has an invalid length. [ 830.824091][T32591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.035073][T32608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6814'. [ 831.335469][T32613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6816'. [ 833.599736][T32592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.841289][T32644] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6826'. [ 833.884427][T32644] siw: device registration error -23 [ 833.904024][T32644] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 833.931402][T32644] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 834.066601][T32655] netlink: 'syz.4.6831': attribute type 7 has an invalid length. [ 834.118099][T32655] netlink: 'syz.4.6831': attribute type 8 has an invalid length. [ 834.136404][T32660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6833'. [ 834.153100][T32655] netlink: 'syz.4.6831': attribute type 9 has an invalid length. [ 834.174178][T32657] syzkaller0: entered promiscuous mode [ 834.179737][T32657] syzkaller0: entered allmulticast mode [ 834.196136][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6832'. [ 834.272187][T32669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6832'. [ 834.484498][T32678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.536092][T32680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6838'. [ 834.673066][ T6670] pimreg: left allmulticast mode [ 834.906861][T32696] netlink: 'syz.1.6841': attribute type 1 has an invalid length. [ 835.020462][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6841'. [ 835.345388][ T6670] bond0 (unregistering): left promiscuous mode [ 835.351817][ T6670] bond_slave_0: left promiscuous mode [ 835.357451][ T6670] bond_slave_1: left promiscuous mode [ 835.364841][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.375659][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.386936][ T6670] bond0 (unregistering): Released all slaves [ 835.397485][ T6670] bond1 (unregistering): Released all slaves [ 835.412125][ T6670] bond2 (unregistering): (slave lo): Releasing backup interface [ 835.421168][ T6670] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 835.434181][ T6670] bond2 (unregistering): Released all slaves [ 835.449682][ T6670] bond3 (unregistering): Released all slaves [ 835.473503][ T6670] bond4 (unregistering): Released all slaves [ 835.489625][ T6670] bond5 (unregistering): Released all slaves [ 835.504805][ T6670] bond6 (unregistering): Released all slaves [ 835.518240][ T6670] bond7 (unregistering): Released all slaves [ 835.669679][T32664] lo speed is unknown, defaulting to 1000 [ 835.697071][ T6670] tipc: Disabling bearer [ 835.726929][ T6670] tipc: Left network mode [ 835.830754][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 835.965987][ T29] audit: type=1800 audit(1775300507.167:9): pid=32714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6846" name="memory.events" dev="tmpfs" ino=754 res=0 errno=0 [ 836.157102][T32722] batman_adv: batadv0: Adding interface: dummy0 [ 836.190987][T32722] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.248069][T32722] batman_adv: batadv0: Interface activated: dummy0 [ 836.289028][T32727] batadv0: mtu less than device minimum [ 836.296710][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.309612][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.321679][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.333787][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.346023][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.358026][T32727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.412718][T32699] lo speed is unknown, defaulting to 1000 [ 836.499726][ T42] IPVS: starting estimator thread 0... [ 836.519880][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 836.590341][T32733] IPVS: using max 29 ests per chain, 69600 per kthread [ 836.861981][T32740] bridge2: entered promiscuous mode [ 836.867366][T32740] bridge2: entered allmulticast mode [ 837.466783][T32766] syzkaller0: entered promiscuous mode [ 837.493650][T32766] syzkaller0: entered allmulticast mode [ 838.025707][ T6670] batadv0: left promiscuous mode [ 838.033147][ T318] IPVS: Scheduler module ip_vs_sip not found [ 838.067090][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.081812][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.139663][ T6670] pim6reg99999991 (unregistering): left allmulticast mode [ 838.440900][ T6670] team_slave_1 (unregistering): left promiscuous mode [ 838.447920][ T6670] team_slave_1 (unregistering): left allmulticast mode [ 838.462950][ T6670] team0 (unregistering): Port device team_slave_1 removed [ 838.485475][ T1073] smc: removing ib device syz1 [ 838.704419][ T332] netlink: 'syz.4.6865': attribute type 10 has an invalid length. [ 838.746951][ T332] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 839.061272][ T345] netlink: 'syz.5.6867': attribute type 1 has an invalid length. [ 839.151783][ T346] net_ratelimit: 13 callbacks suppressed [ 839.151805][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.167202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.388108][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6872'. [ 839.464421][ T356] lo speed is unknown, defaulting to 1000 [ 840.133438][ T389] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6876'. [ 840.271090][ T389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6876'. [ 840.875408][ T389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.066997][ T407] netlink: 'syz.4.6880': attribute type 15 has an invalid length. [ 841.140734][ T415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.181941][ T416] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6884'. [ 841.524435][ T431] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6888'. [ 841.538281][ T434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6889'. [ 841.551078][ T431] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6888'. [ 841.592856][ T431] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6888'. [ 842.040668][ T11] block nbd5: Connection timed out, retrying (0/2 alive) [ 842.047823][ T11] block nbd5: Connection timed out, retrying (0/2 alive) [ 842.055940][T29271] block nbd5: Dead connection, failed to find a fallback [ 842.063198][T29271] block nbd5: shutting down sockets [ 842.068435][T29271] blk_print_req_error: 138 callbacks suppressed [ 842.068453][T29271] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.086352][ T11] block nbd5: Connection timed out, retrying (0/2 alive) [ 842.093751][ T11] block nbd5: Connection timed out, retrying (0/2 alive) [ 842.101268][T29271] buffer_io_error: 138 callbacks suppressed [ 842.101285][T29271] Buffer I/O error on dev nbd5, logical block 0, async page read [ 842.116683][T29271] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.126511][T29271] Buffer I/O error on dev nbd5, logical block 3, async page read [ 842.134487][T29271] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.144132][T29271] Buffer I/O error on dev nbd5, logical block 2, async page read [ 842.152064][T29271] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.161760][T29271] Buffer I/O error on dev nbd5, logical block 1, async page read [ 842.169659][T31845] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.180687][T31845] Buffer I/O error on dev nbd5, logical block 0, async page read [ 842.199746][T31845] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.209453][T31845] Buffer I/O error on dev nbd5, logical block 1, async page read [ 842.217505][T31845] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.227646][T31845] Buffer I/O error on dev nbd5, logical block 2, async page read [ 842.246645][T31845] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.256354][T31845] Buffer I/O error on dev nbd5, logical block 3, async page read [ 842.264257][T31845] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.276929][T31845] Buffer I/O error on dev nbd5, logical block 0, async page read [ 842.286229][T31845] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 842.295965][T31845] Buffer I/O error on dev nbd5, logical block 1, async page read [ 842.304553][T31845] ldm_validate_partition_table(): Disk read failed. [ 842.317120][T31845] Dev nbd5: unable to read RDB block 0 [ 842.330615][T31845] nbd5: unable to read partition table [ 842.363755][T31845] ldm_validate_partition_table(): Disk read failed. [ 842.396836][T31845] Dev nbd5: unable to read RDB block 0 [ 842.450166][T31845] nbd5: unable to read partition table [ 842.979693][ T507] lo speed is unknown, defaulting to 1000 [ 843.673648][ T6670] IPVS: stop unused estimator thread 0... [ 843.877751][ T537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6905'. [ 844.270208][ T552] FAULT_INJECTION: forcing a failure. [ 844.270208][ T552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 844.314914][ T552] CPU: 1 UID: 0 PID: 552 Comm: syz.1.6909 Not tainted syzkaller #0 PREEMPT(full) [ 844.314944][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 844.314958][ T552] Call Trace: [ 844.314967][ T552] [ 844.314977][ T552] dump_stack_lvl+0xe8/0x150 [ 844.315012][ T552] should_fail_ex+0x412/0x560 [ 844.315050][ T552] prepare_alloc_pages+0x22a/0x650 [ 844.315085][ T552] __alloc_frozen_pages_noprof+0x12f/0x380 [ 844.315118][ T552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 844.315149][ T552] ? __pfx_policy_nodemask+0x10/0x10 [ 844.315173][ T552] ? do_raw_spin_lock+0x12b/0x2f0 [ 844.315202][ T552] ? __lock_acquire+0x6b5/0x2cf0 [ 844.315228][ T552] alloc_pages_mpol+0x232/0x4a0 [ 844.315259][ T552] vma_alloc_folio_noprof+0xea/0x210 [ 844.315287][ T552] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 844.315324][ T552] do_pte_missing+0x1656/0x3490 [ 844.315369][ T552] handle_mm_fault+0x1bec/0x3310 [ 844.315414][ T552] ? handle_mm_fault+0xee/0x3310 [ 844.315450][ T552] ? __pfx_handle_mm_fault+0x10/0x10 [ 844.315476][ T552] ? lock_vma_under_rcu+0x45a/0x500 [ 844.315497][ T552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.315550][ T552] do_user_addr_fault+0xa73/0x1340 [ 844.315586][ T552] ? rcu_is_watching+0x15/0xb0 [ 844.315612][ T552] ? trace_page_fault_user+0x84/0x210 [ 844.315641][ T552] exc_page_fault+0x6a/0xc0 [ 844.315669][ T552] asm_exc_page_fault+0x26/0x30 [ 844.315688][ T552] RIP: 0033:0x7fb845e5dfcb [ 844.315707][ T552] Code: 00 00 00 48 8d 3d bd a6 1a 00 48 89 c1 31 c0 e8 5b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 a6 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 844.315724][ T552] RSP: 002b:00007fb846e2dfa0 EFLAGS: 00010206 [ 844.315743][ T552] RAX: 0000000000000000 RBX: 00007fb846215fa0 RCX: 0000000000000000 [ 844.315757][ T552] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000540 [ 844.315769][ T552] RBP: 00007fb846e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 844.315781][ T552] R10: 0000200000000540 R11: 0000000000000000 R12: 0000000000000001 [ 844.315793][ T552] R13: 00007fb846216038 R14: 00007fb846215fa0 R15: 00007ffe3fb8c7b8 [ 844.315828][ T552] [ 844.317222][ T552] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 844.773160][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6913'. [ 844.794784][ T567] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6913'. [ 844.829917][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6913'. [ 844.978533][ T980] IPVS: starting estimator thread 0... [ 845.071432][ T579] IPVS: using max 27 ests per chain, 64800 per kthread [ 845.622797][ T604] syzkaller0: entered promiscuous mode [ 845.628358][ T604] syzkaller0: entered allmulticast mode [ 845.674800][ T607] FAULT_INJECTION: forcing a failure. [ 845.674800][ T607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.710126][ T607] CPU: 1 UID: 0 PID: 607 Comm: syz.4.6923 Not tainted syzkaller #0 PREEMPT(full) [ 845.710157][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 845.710169][ T607] Call Trace: [ 845.710176][ T607] [ 845.710184][ T607] dump_stack_lvl+0xe8/0x150 [ 845.710220][ T607] should_fail_ex+0x412/0x560 [ 845.710257][ T607] _copy_from_user+0x2d/0xb0 [ 845.710283][ T607] __sys_sendto+0x2b0/0x710 [ 845.710313][ T607] ? __pfx___sys_sendto+0x10/0x10 [ 845.710365][ T607] ? exc_page_fault+0x6a/0xc0 [ 845.710396][ T607] ? do_user_addr_fault+0xc6f/0x1340 [ 845.710437][ T607] __x64_sys_sendto+0xde/0x100 [ 845.710467][ T607] do_syscall_64+0x14d/0xf80 [ 845.710491][ T607] ? trace_irq_disable+0x3b/0x150 [ 845.710508][ T607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.710529][ T607] ? clear_bhb_loop+0x40/0x90 [ 845.710555][ T607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.710592][ T607] RIP: 0033:0x7f4008b5d04e [ 845.710612][ T607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 845.710629][ T607] RSP: 002b:00007f40099b7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 845.710652][ T607] RAX: ffffffffffffffda RBX: 00007f40099b96c0 RCX: 00007f4008b5d04e [ 845.710666][ T607] RDX: 0000000000000020 RSI: 00007f40099b8000 RDI: 0000000000000003 [ 845.710679][ T607] RBP: 0000000000000000 R08: 00007f40099b7f04 R09: 000000000000000c [ 845.710692][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 845.710704][ T607] R13: 00007f40099b7f58 R14: 00007f40099b8000 R15: 0000000000000000 [ 845.710737][ T607] [ 846.067577][ T614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6926'. [ 846.474708][ T630] lo speed is unknown, defaulting to 1000 [ 846.610413][ T633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.697813][ T622] openvswitch: netlink: Message has 16 unknown bytes. [ 846.777715][ T621] macsec1: entered promiscuous mode [ 847.258236][ T660] lo speed is unknown, defaulting to 1000 [ 848.096961][ T700] pimreg: entered allmulticast mode [ 848.486117][ T711] netlink: 'syz.5.6951': attribute type 1 has an invalid length. [ 848.511283][ T708] bond2 (unregistering): Released all slaves [ 848.765240][ T714] bond7: (slave gretap0): making interface the new active one [ 848.821374][ T714] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 849.048104][ T729] __nla_validate_parse: 1 callbacks suppressed [ 849.048124][ T729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6958'. [ 849.813428][ T751] x_tables: duplicate underflow at hook 2 [ 849.943634][ T757] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6965'. [ 850.083851][T24192] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 850.099391][ T759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.410280][ T777] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6969'. [ 850.594261][ T779] syzkaller0: entered promiscuous mode [ 850.600294][ T779] syzkaller0: entered allmulticast mode [ 850.751136][ T781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6971'. [ 851.147841][ T794] lo speed is unknown, defaulting to 1000 [ 851.231396][ T797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.620743][ T810] netlink: 'syz.5.6976': attribute type 5 has an invalid length. [ 851.804093][ T749] Bluetooth: hci5: command 0x0406 tx timeout [ 851.810676][ T749] Bluetooth: hci3: command 0x0406 tx timeout [ 852.083424][ T830] netlink: 'syz.4.6983': attribute type 8 has an invalid length. [ 852.280047][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.605479][ T847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6989'. [ 852.629503][ T847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6989'. [ 852.890382][ T869] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6993'. [ 852.925104][ T869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'. [ 852.955444][ T869] tc_dump_action: action bad kind [ 853.078590][ T881] netlink: 'syz.3.6994': attribute type 2 has an invalid length. [ 853.190250][ T881] netlink: 'syz.3.6994': attribute type 2 has an invalid length. [ 853.744893][ T913] lo speed is unknown, defaulting to 1000 [ 854.353513][ T936] lo speed is unknown, defaulting to 1000 [ 855.372973][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7012'. [ 855.815938][ T1019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7022'. [ 855.953091][ T1019] bond5: entered promiscuous mode [ 855.958609][ T1019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 855.977079][ T1026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'. [ 856.040329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.354087][ T1037] lo: entered allmulticast mode [ 856.413405][T10229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.503564][T10229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.909309][ T1059] macvlan0: entered promiscuous mode [ 856.922834][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 856.993382][ T1067] hsr0: entered promiscuous mode [ 857.068698][ T1069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7030'. [ 857.126372][ T1069] hsr_slave_0: left promiscuous mode [ 857.151501][ T1069] hsr_slave_1: left promiscuous mode [ 857.197552][ T1069] hsr0 (unregistering): left promiscuous mode [ 857.437113][ T1082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7034'. [ 857.755674][ T1115] netlink: 'syz.3.7044': attribute type 1 has an invalid length. [ 857.766078][ T1114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7044'. [ 857.781955][ T1108] netlink: 'syz.1.7043': attribute type 11 has an invalid length. [ 857.826919][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7043'. [ 857.876210][ T1115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 858.068226][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7046'. [ 858.209473][ T1128] netlink: 'syz.1.7048': attribute type 2 has an invalid length. [ 858.257033][ T1128] !9: entered promiscuous mode [ 858.283754][ T1128] netlink: 'syz.1.7048': attribute type 2 has an invalid length. [ 858.311728][ T1128] !9: left promiscuous mode [ 858.759182][ T1142] netlink: 'syz.1.7054': attribute type 3 has an invalid length. [ 858.993468][ T1140] bond8: option primary_reselect: invalid value (4) [ 859.093345][ T1140] bond8 (unregistering): Released all slaves [ 859.116439][ T1168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7058'. [ 859.207474][ T1164] macsec0: entered allmulticast mode [ 859.214222][ T1164] veth1_macvtap: entered allmulticast mode [ 859.220590][ T1164] macsec0: left allmulticast mode [ 859.225653][ T1164] veth1_macvtap: left allmulticast mode [ 859.345301][ T1169] syzkaller1: entered promiscuous mode [ 859.353707][ T1169] syzkaller1: entered allmulticast mode [ 859.464224][ T1183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7063'. [ 859.610346][ T1190] tipc: Started in network mode [ 859.632761][ T1190] tipc: Node identity d2ac929655a8, cluster identity 4711 [ 859.650291][ T1190] tipc: Enabled bearer , priority 0 [ 859.729330][ T1194] netlink: 'syz.3.7064': attribute type 21 has an invalid length. [ 859.797181][ T1190] syzkaller0: entered promiscuous mode [ 859.802932][ T1190] syzkaller0: entered allmulticast mode [ 859.810925][ T1190] tipc: Resetting bearer [ 859.820992][ T1194] netlink: 'syz.3.7064': attribute type 4 has an invalid length. [ 859.832674][ T1194] netlink: 'syz.3.7064': attribute type 5 has an invalid length. [ 859.845406][ T1189] tipc: Resetting bearer [ 859.963504][T24192] wlan1: Trigger new scan to find an IBSS to join [ 860.683812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.234876][ T1189] tipc: Disabling bearer [ 862.267514][T24192] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.317913][T10229] tipc: Node number set to 2265223830 [ 862.335044][ T1238] syzkaller1: tun_chr_ioctl cmd 35108 [ 862.443123][ T1247] netlink: 'syz.3.7076': attribute type 2 has an invalid length. [ 862.633854][ T1250] __nla_validate_parse: 2 callbacks suppressed [ 862.633879][ T1250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7077'. [ 862.664195][ T1250] syzkaller1: entered promiscuous mode [ 862.671463][ T1250] syzkaller1: entered allmulticast mode [ 862.901893][ T1267] netlink: 'syz.3.7081': attribute type 11 has an invalid length. [ 863.001614][T29835] wlan1: Trigger new scan to find an IBSS to join [ 863.045167][ T1272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7082'. [ 863.093186][ T1272] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7082'. [ 863.161401][ T1284] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7084'. [ 863.198603][ T1287] Cannot find add_set index 0 as target [ 863.240950][ T1287] netlink: 'syz.3.7087': attribute type 39 has an invalid length. [ 863.348362][ T1291] batman_adv: batadv0: Adding interface: vlan3 [ 863.354913][ T1291] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.397102][ T1291] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 863.484002][ T1298] netlink: 'syz.5.7090': attribute type 4 has an invalid length. [ 863.511544][ T1298] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7090'. [ 863.659696][ T1318] lo: entered allmulticast mode [ 863.715195][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7095'. [ 863.808280][ T1323] netlink: 'syz.1.7097': attribute type 21 has an invalid length. [ 863.812001][ T1328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7099'. [ 863.825489][ T1328] netlink: 'syz.5.7099': attribute type 30 has an invalid length. [ 863.833935][ T1323] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7097'. [ 863.954044][ T1328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7099'. [ 863.982078][ T1328] netlink: 'syz.5.7099': attribute type 30 has an invalid length. [ 864.050370][ T1341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7103'. [ 864.292592][ T1353] gretap0: entered promiscuous mode [ 864.319962][ T1355] netlink: 'syz.1.7107': attribute type 2 has an invalid length. [ 864.397345][ T1359] netlink: 'syz.5.7110': attribute type 2 has an invalid length. [ 864.416321][ T1359] netlink: 'syz.5.7110': attribute type 1 has an invalid length. [ 864.444727][ T1361] lo speed is unknown, defaulting to 1000 [ 864.451483][ T1359] netlink: 'syz.5.7110': attribute type 1 has an invalid length. [ 864.492265][ T1361] lo speed is unknown, defaulting to 1000 [ 864.508331][ T1361] lo speed is unknown, defaulting to 1000 [ 864.523025][ T1369] "syz.4.7113" (1369) uses obsolete ecb(arc4) skcipher [ 864.601460][ T1365] netlink: 'syz.1.7112': attribute type 6 has an invalid length. [ 864.618244][ T1371] lo speed is unknown, defaulting to 1000 [ 864.983369][ T980] lo speed is unknown, defaulting to 1000 [ 864.990813][ T1361] infiniband sqz0: set active [ 864.995701][ T1361] infiniband sqz0: added lo [ 865.053318][ T1361] RDS/IB: sqz0: added [ 865.057692][ T1361] smc: adding ib device sqz0 with port count 1 [ 865.064209][ T1361] smc: ib device sqz0 port 1 has no pnetid [ 865.102941][ T980] lo speed is unknown, defaulting to 1000 [ 865.143322][ T1361] lo speed is unknown, defaulting to 1000 [ 865.193469][ T1387] xfrm0: entered promiscuous mode [ 865.211879][ T1387] xfrm0: entered allmulticast mode [ 865.815951][ T1361] lo speed is unknown, defaulting to 1000 [ 865.965902][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 866.273928][ T1432] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 866.447516][ T1361] lo speed is unknown, defaulting to 1000 [ 866.931079][ T489] wlan1: Creating new IBSS network, BSSID 3a:fc:45:91:dc:94 [ 866.992739][ T1361] lo speed is unknown, defaulting to 1000 [ 867.533069][ T1361] lo speed is unknown, defaulting to 1000 [ 867.574708][ T1461] sctp: [Deprecated]: syz.2.7137 (pid 1461) Use of int in max_burst socket option deprecated. [ 867.574708][ T1461] Use struct sctp_assoc_value instead [ 867.651411][ T1464] __nla_validate_parse: 13 callbacks suppressed [ 867.651432][ T1464] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7136'. [ 867.798885][ T1472] IPv6: Can't replace route, no match found [ 868.003135][ T1480] veth0: entered promiscuous mode [ 868.019001][T11421] lec:lec_start_xmit: lec0:No lecd attached [ 868.028739][ T1478] dvmrp1: left allmulticast mode [ 868.176367][ T1361] lo speed is unknown, defaulting to 1000 [ 868.338816][ T1479] veth0: left promiscuous mode [ 868.520761][ T1499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7147'. [ 868.720865][ T1505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7149'. [ 868.909565][ T1361] lo speed is unknown, defaulting to 1000 [ 868.930364][ T1518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.047921][ T1522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7153'. [ 869.148698][ T5830] block nbd6: Receive control failed (result -1) [ 869.482218][ T1536] validate_nla: 2 callbacks suppressed [ 869.482241][ T1536] netlink: 'syz.5.7156': attribute type 2 has an invalid length. [ 869.616525][ T1543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7159'. [ 869.640117][ T1540] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7157'. [ 869.667587][ T1540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7157'. [ 869.691610][ T1540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7157'. [ 869.786383][ T1547] netlink: 'syz.3.7161': attribute type 1 has an invalid length. [ 869.880242][ T1552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7162'. [ 870.006359][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7161'. [ 870.032422][ T1556] bond7: (slave veth5): Enslaving as an active interface with a down link [ 870.259317][ T1560] bond7: (slave veth7): Enslaving as an active interface with a down link [ 870.505374][ T1583] FAULT_INJECTION: forcing a failure. [ 870.505374][ T1583] name failslab, interval 1, probability 0, space 0, times 0 [ 870.521278][ T1583] CPU: 0 UID: 0 PID: 1583 Comm: syz.4.7170 Not tainted syzkaller #0 PREEMPT(full) [ 870.521305][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 870.521317][ T1583] Call Trace: [ 870.521325][ T1583] [ 870.521333][ T1583] dump_stack_lvl+0xe8/0x150 [ 870.521368][ T1583] should_fail_ex+0x412/0x560 [ 870.521405][ T1583] should_failslab+0xa8/0x100 [ 870.521429][ T1583] ? vm_area_dup+0x2b/0x680 [ 870.521452][ T1583] kmem_cache_alloc_noprof+0x87/0x650 [ 870.521483][ T1583] vm_area_dup+0x2b/0x680 [ 870.521510][ T1583] __split_vma+0x1dc/0xa40 [ 870.521539][ T1583] ? mas_find+0xb0e/0xd30 [ 870.521584][ T1583] ? __pfx___split_vma+0x10/0x10 [ 870.521629][ T1583] ? __pfx___up_read+0x10/0x10 [ 870.521654][ T1583] vms_gather_munmap_vmas+0x32d/0x1370 [ 870.521680][ T1583] ? __mt_destroy+0x1c9/0x280 [ 870.521708][ T1583] ? vms_complete_munmap_vmas+0xa0b/0xc60 [ 870.521749][ T1583] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 870.521800][ T1583] do_vmi_align_munmap+0x2b4/0x4b0 [ 870.521849][ T1583] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 870.521915][ T1583] do_vmi_munmap+0x252/0x2d0 [ 870.521949][ T1583] __vm_munmap+0x22c/0x3d0 [ 870.521980][ T1583] ? __pfx___vm_munmap+0x10/0x10 [ 870.522005][ T1583] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 870.522061][ T1583] __x64_sys_munmap+0x60/0x70 [ 870.522082][ T1583] do_syscall_64+0x14d/0xf80 [ 870.522104][ T1583] ? trace_irq_disable+0x3b/0x150 [ 870.522121][ T1583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.522142][ T1583] ? clear_bhb_loop+0x40/0x90 [ 870.522167][ T1583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.522186][ T1583] RIP: 0033:0x7f4008b9c647 [ 870.522207][ T1583] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.522223][ T1583] RSP: 002b:00007f40099b7d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 870.522247][ T1583] RAX: ffffffffffffffda RBX: 00007f4000000000 RCX: 00007f4008b9c647 [ 870.522262][ T1583] RDX: 0000000000000000 RSI: 0000000002c00000 RDI: 00007f4004000000 [ 870.522275][ T1583] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 870.522288][ T1583] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 870.522301][ T1583] R13: 0000000000001000 R14: 00007f4004000000 R15: 0000000001400000 [ 870.522333][ T1583] [ 870.803400][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.818169][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.825527][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.942525][ T1598] 8021q: VLANs not supported on ip_vti0 [ 870.978897][ T1597] netlink: 'syz.4.7173': attribute type 1 has an invalid length. [ 871.237577][ T1613] bond8: entered promiscuous mode [ 871.248090][ T1613] bond8: entered allmulticast mode [ 871.255055][ T1613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 871.351683][ T1623] FAULT_INJECTION: forcing a failure. [ 871.351683][ T1623] name failslab, interval 1, probability 0, space 0, times 0 [ 871.375523][ T1623] CPU: 1 UID: 0 PID: 1623 Comm: syz.5.7183 Not tainted syzkaller #0 PREEMPT(full) [ 871.375551][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 871.375564][ T1623] Call Trace: [ 871.375572][ T1623] [ 871.375580][ T1623] dump_stack_lvl+0xe8/0x150 [ 871.375615][ T1623] should_fail_ex+0x412/0x560 [ 871.375651][ T1623] should_failslab+0xa8/0x100 [ 871.375686][ T1623] ? mas_alloc_nodes+0x291/0x350 [ 871.375710][ T1623] kmem_cache_alloc_noprof+0x87/0x650 [ 871.375740][ T1623] mas_alloc_nodes+0x291/0x350 [ 871.375767][ T1623] mas_preallocate+0x2d6/0x640 [ 871.375794][ T1623] ? rcu_is_watching+0x15/0xb0 [ 871.375823][ T1623] ? __pfx_mas_preallocate+0x10/0x10 [ 871.375859][ T1623] ? __mas_set_range+0x12f/0x3c0 [ 871.375894][ T1623] __split_vma+0x318/0xa40 [ 871.375936][ T1623] ? __pfx___split_vma+0x10/0x10 [ 871.375981][ T1623] ? can_vma_merge_left+0x11a/0x3e0 [ 871.376009][ T1623] vma_modify+0xa30/0x2060 [ 871.376053][ T1623] vma_modify_flags+0x24b/0x330 [ 871.376082][ T1623] ? __pfx_vma_modify_flags+0x10/0x10 [ 871.376121][ T1623] ? rcu_is_watching+0x15/0xb0 [ 871.376145][ T1623] ? percpu_counter_add_batch+0xea/0x1d0 [ 871.376177][ T1623] ? __vm_enough_memory+0x11b/0x380 [ 871.376206][ T1623] mprotect_fixup+0x47a/0xa80 [ 871.376240][ T1623] ? __pfx_mprotect_fixup+0x10/0x10 [ 871.376266][ T1623] ? apparmor_file_mprotect+0x1d0/0x400 [ 871.376290][ T1623] ? security_file_mprotect+0x1a/0x290 [ 871.376325][ T1623] do_mprotect_pkey+0x8ab/0xcd0 [ 871.376367][ T1623] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 871.376434][ T1623] __x64_sys_mprotect+0x80/0x90 [ 871.376463][ T1623] do_syscall_64+0x14d/0xf80 [ 871.376487][ T1623] ? trace_irq_disable+0x3b/0x150 [ 871.376506][ T1623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.376526][ T1623] ? clear_bhb_loop+0x40/0x90 [ 871.376552][ T1623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.376573][ T1623] RIP: 0033:0x7f4bd3f9c617 [ 871.376594][ T1623] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.376612][ T1623] RSP: 002b:00007f4bd4d79d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 871.376635][ T1623] RAX: ffffffffffffffda RBX: 00007f4bcc000000 RCX: 00007f4bd3f9c617 [ 871.376650][ T1623] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f4bcc000000 [ 871.376672][ T1623] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 871.376686][ T1623] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 871.376699][ T1623] R13: 0000000000001000 R14: 00007f4bd0000000 R15: 0000000002000000 [ 871.376733][ T1623] [ 871.731156][ T1632] netlink: 'syz.1.7184': attribute type 1 has an invalid length. [ 871.755540][ T1632] netlink: 'syz.1.7184': attribute type 2 has an invalid length. [ 872.105447][ T1648] netlink: 'syz.3.7189': attribute type 9 has an invalid length. [ 872.130484][ T1648] netlink: 'syz.3.7189': attribute type 6 has an invalid length. [ 872.314182][ T1658] TC_ACT_REPEAT abuse ? [ 872.495953][ T1667] : entered promiscuous mode [ 872.669328][ T1687] __nla_validate_parse: 7 callbacks suppressed [ 872.669351][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7199'. [ 872.688072][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7194'. [ 872.858777][ T1700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7204'. [ 873.029800][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 873.037925][ C0] lec:lec_tx_timeout: lec0 [ 873.042570][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 873.206426][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7209'. [ 873.271379][ T1718] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.314255][ T1718] bridge_slave_0 (unregistering): left allmulticast mode [ 873.324045][ T1718] bridge_slave_0 (unregistering): left promiscuous mode [ 873.331398][ T1718] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.517918][ T1741] ip6t_srh: unknown srh invflags BA61 [ 873.554059][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7214'. [ 873.832507][ T1765] netlink: 'syz.4.7220': attribute type 6 has an invalid length. [ 873.849365][ T1764] syzkaller0: entered promiscuous mode [ 873.889550][ T1764] syzkaller0: entered allmulticast mode [ 874.021977][ T1769] syzkaller1: entered promiscuous mode [ 874.027658][ T1769] syzkaller1: entered allmulticast mode [ 874.112219][ T1769] netlink: 'syz.5.7224': attribute type 1 has an invalid length. [ 874.252342][ T1760] FAULT_INJECTION: forcing a failure. [ 874.252342][ T1760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.252348][ T1774] bond3: entered promiscuous mode [ 874.252377][ T1760] CPU: 0 UID: 0 PID: 1760 Comm: syz.1.7222 Not tainted syzkaller #0 PREEMPT(full) [ 874.252404][ T1760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.252414][ T1760] Call Trace: [ 874.252422][ T1760] [ 874.252429][ T1760] dump_stack_lvl+0xe8/0x150 [ 874.252459][ T1760] should_fail_ex+0x412/0x560 [ 874.252491][ T1760] _copy_from_user+0x2d/0xb0 [ 874.252512][ T1760] do_sock_getsockopt+0x165/0x3f0 [ 874.252539][ T1760] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 874.252565][ T1760] ? ksys_write+0x1fc/0x270 [ 874.252591][ T1760] __x64_sys_getsockopt+0x1a4/0x240 [ 874.252623][ T1760] do_syscall_64+0x14d/0xf80 [ 874.252645][ T1760] ? trace_irq_disable+0x3b/0x150 [ 874.252661][ T1760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.252679][ T1760] ? clear_bhb_loop+0x40/0x90 [ 874.252701][ T1760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.252718][ T1760] RIP: 0033:0x7fb845f9c819 [ 874.252735][ T1760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.252750][ T1760] RSP: 002b:00007fb846e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 874.252770][ T1760] RAX: ffffffffffffffda RBX: 00007fb846215fa0 RCX: 00007fb845f9c819 [ 874.252783][ T1760] RDX: 0000000000000001 RSI: 400000000000003a RDI: 0000000000000003 [ 874.252794][ T1760] RBP: 00007fb846e2f090 R08: 00002000000000c0 R09: 0000000000000000 [ 874.252806][ T1760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.252817][ T1760] R13: 00007fb846216038 R14: 00007fb846215fa0 R15: 00007ffe3fb8c7b8 [ 874.252848][ T1760] [ 874.440742][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 874.473584][ T1775] vcan1: entered promiscuous mode [ 874.517971][ T1775] vcan1: entered allmulticast mode [ 874.553844][ T1773] vcan1: entered promiscuous mode [ 874.580089][ T1773] vcan1: entered allmulticast mode [ 875.405673][ T1806] lo speed is unknown, defaulting to 1000 [ 875.422002][ T1806] lo speed is unknown, defaulting to 1000 [ 875.422140][ T1816] lo speed is unknown, defaulting to 1000 [ 875.772044][ T1816] lo speed is unknown, defaulting to 1000 [ 876.399565][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.409924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.740932][ T1886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7242'. [ 877.021629][ T1898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.078113][ T1903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7247'. [ 877.382401][ T1916] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7251'. [ 877.487997][ T1922] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7251'. [ 877.729015][ T1926] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 878.049842][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 878.057947][ C0] lec:lec_tx_timeout: lec0 [ 878.118410][ T1950] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 878.151879][ T1950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.364582][ T1964] netlink: 'syz.3.7261': attribute type 1 has an invalid length. [ 878.401625][ T1964] 8021q: adding VLAN 0 to HW filter on device bond10 [ 878.462110][ T1964] bond10: (slave bridge1): making interface the new active one [ 878.507847][ T1964] bond10: (slave bridge1): Enslaving as an active interface with an up link [ 879.212786][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7271'. [ 879.247951][ T2002] syzkaller0: entered promiscuous mode [ 879.271577][ T2002] syzkaller0: entered allmulticast mode [ 879.748906][ T2024] [ 879.751322][ T2024] ====================================================== [ 879.758371][ T2024] WARNING: possible circular locking dependency detected [ 879.765422][ T2024] syzkaller #0 Not tainted [ 879.769863][ T2024] ------------------------------------------------------ [ 879.776907][ T2024] syz.1.7276/2024 is trying to acquire lock: [ 879.783015][ T2024] ffffffff8ee9ed10 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 879.792700][ T2024] [ 879.792700][ T2024] but task is already holding lock: [ 879.800087][ T2024] ffff888092889d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 879.809403][ T2024] [ 879.809403][ T2024] which lock already depends on the new lock. [ 879.809403][ T2024] [ 879.819805][ T2024] [ 879.819805][ T2024] the existing dependency chain (in reverse order) is: [ 879.828827][ T2024] [ 879.828827][ T2024] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 879.836670][ T2024] lock_sock_nested+0x41/0x100 [ 879.841981][ T2024] inet_shutdown+0x6a/0x390 [ 879.847048][ T2024] nbd_mark_nsock_dead+0x2e9/0x560 [ 879.852690][ T2024] recv_work+0x1c7f/0x1d90 [ 879.857636][ T2024] process_scheduled_works+0xb6e/0x18c0 [ 879.863709][ T2024] worker_thread+0xa53/0xfc0 [ 879.868835][ T2024] kthread+0x388/0x470 [ 879.873516][ T2024] ret_from_fork+0x51e/0xb90 [ 879.878636][ T2024] ret_from_fork_asm+0x1a/0x30 [ 879.883928][ T2024] [ 879.883928][ T2024] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 879.891578][ T2024] __mutex_lock+0x19f/0x1300 [ 879.896696][ T2024] nbd_queue_rq+0x37b/0x1100 [ 879.901815][ T2024] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 879.907892][ T2024] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 879.914753][ T2024] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 879.921265][ T2024] blk_mq_run_hw_queue+0x348/0x4f0 [ 879.926908][ T2024] blk_mq_dispatch_list+0xd16/0xe10 [ 879.932632][ T2024] blk_mq_flush_plug_list+0x48d/0x570 [ 879.938543][ T2024] __blk_flush_plug+0x3ed/0x4d0 [ 879.943921][ T2024] __submit_bio+0x28d/0x580 [ 879.948955][ T2024] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 879.955201][ T2024] block_read_full_folio+0x599/0x830 [ 879.961037][ T2024] filemap_read_folio+0x137/0x3b0 [ 879.966597][ T2024] do_read_cache_folio+0x358/0x590 [ 879.972235][ T2024] read_part_sector+0xb6/0x2b0 [ 879.977525][ T2024] adfspart_check_ICS+0xa5/0xa40 [ 879.982989][ T2024] bdev_disk_changed+0x7ba/0x1550 [ 879.988557][ T2024] blkdev_get_whole+0x380/0x510 [ 879.993934][ T2024] bdev_open+0x31e/0xd30 [ 879.998877][ T2024] blkdev_open+0x470/0x610 [ 880.003818][ T2024] do_dentry_open+0x785/0x14e0 [ 880.009131][ T2024] vfs_open+0x3b/0x340 [ 880.013732][ T2024] path_openat+0x2e08/0x3860 [ 880.018852][ T2024] do_file_open+0x23e/0x4a0 [ 880.023917][ T2024] do_sys_openat2+0x113/0x200 [ 880.029132][ T2024] __x64_sys_openat+0x138/0x170 [ 880.034534][ T2024] do_syscall_64+0x14d/0xf80 [ 880.039658][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.046075][ T2024] [ 880.046075][ T2024] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 880.053320][ T2024] __mutex_lock+0x19f/0x1300 [ 880.058437][ T2024] nbd_queue_rq+0xc6/0x1100 [ 880.063558][ T2024] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 880.069636][ T2024] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 880.076490][ T2024] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 880.083004][ T2024] blk_mq_run_hw_queue+0x348/0x4f0 [ 880.088643][ T2024] blk_mq_dispatch_list+0xd16/0xe10 [ 880.094487][ T2024] blk_mq_flush_plug_list+0x48d/0x570 [ 880.100472][ T2024] __blk_flush_plug+0x3ed/0x4d0 [ 880.105853][ T2024] __submit_bio+0x28d/0x580 [ 880.110885][ T2024] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 880.117042][ T2024] block_read_full_folio+0x599/0x830 [ 880.122855][ T2024] filemap_read_folio+0x137/0x3b0 [ 880.128492][ T2024] do_read_cache_folio+0x358/0x590 [ 880.134144][ T2024] read_part_sector+0xb6/0x2b0 [ 880.139440][ T2024] adfspart_check_ICS+0xa5/0xa40 [ 880.144907][ T2024] bdev_disk_changed+0x7ba/0x1550 [ 880.150488][ T2024] blkdev_get_whole+0x380/0x510 [ 880.155868][ T2024] bdev_open+0x31e/0xd30 [ 880.160637][ T2024] blkdev_open+0x470/0x610 [ 880.165580][ T2024] do_dentry_open+0x785/0x14e0 [ 880.170876][ T2024] vfs_open+0x3b/0x340 [ 880.175649][ T2024] path_openat+0x2e08/0x3860 [ 880.180858][ T2024] do_file_open+0x23e/0x4a0 [ 880.185883][ T2024] do_sys_openat2+0x113/0x200 [ 880.191087][ T2024] __x64_sys_openat+0x138/0x170 [ 880.196477][ T2024] do_syscall_64+0x14d/0xf80 [ 880.201617][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.208137][ T2024] [ 880.208137][ T2024] -> #5 (set->srcu){.+.+}-{0:0}: [ 880.215282][ T2024] __synchronize_srcu+0xca/0x300 [ 880.220849][ T2024] elevator_switch+0x1e8/0x7a0 [ 880.226179][ T2024] elevator_change+0x2cc/0x450 [ 880.231656][ T2024] elevator_set_default+0x36c/0x430 [ 880.237485][ T2024] blk_register_queue+0x366/0x430 [ 880.243053][ T2024] __add_disk+0x677/0xd50 [ 880.248018][ T2024] add_disk_fwnode+0xfb/0x480 [ 880.253228][ T2024] nbd_dev_add+0x72c/0xb50 [ 880.258180][ T2024] nbd_init+0x168/0x1f0 [ 880.262862][ T2024] do_one_initcall+0x250/0x8d0 [ 880.268173][ T2024] do_initcall_level+0x104/0x190 [ 880.273754][ T2024] do_initcalls+0x59/0xa0 [ 880.278646][ T2024] kernel_init_freeable+0x2a6/0x3e0 [ 880.284393][ T2024] kernel_init+0x1d/0x1d0 [ 880.289275][ T2024] ret_from_fork+0x51e/0xb90 [ 880.294496][ T2024] ret_from_fork_asm+0x1a/0x30 [ 880.299902][ T2024] [ 880.299902][ T2024] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 880.307752][ T2024] __mutex_lock+0x19f/0x1300 [ 880.312894][ T2024] elevator_change+0x1b3/0x450 [ 880.318196][ T2024] elevator_set_none+0xb5/0x140 [ 880.323581][ T2024] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 880.329927][ T2024] nbd_start_device+0x17f/0xb10 [ 880.335319][ T2024] nbd_genl_connect+0x165b/0x1cf0 [ 880.340894][ T2024] genl_family_rcv_msg_doit+0x22a/0x330 [ 880.347022][ T2024] genl_rcv_msg+0x61c/0x7a0 [ 880.352064][ T2024] netlink_rcv_skb+0x232/0x4b0 [ 880.357379][ T2024] genl_rcv+0x28/0x40 [ 880.361895][ T2024] netlink_unicast+0x80f/0x9b0 [ 880.367273][ T2024] netlink_sendmsg+0x813/0xb40 [ 880.372566][ T2024] ____sys_sendmsg+0x972/0x9f0 [ 880.377860][ T2024] ___sys_sendmsg+0x2a5/0x360 [ 880.383062][ T2024] __x64_sys_sendmsg+0x1bd/0x2a0 [ 880.388643][ T2024] do_syscall_64+0x14d/0xf80 [ 880.393766][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.400182][ T2024] [ 880.400182][ T2024] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 880.408860][ T2024] blk_alloc_queue+0x546/0x680 [ 880.414169][ T2024] __blk_mq_alloc_disk+0x197/0x390 [ 880.419823][ T2024] nbd_dev_add+0x499/0xb50 [ 880.424787][ T2024] nbd_init+0x168/0x1f0 [ 880.429495][ T2024] do_one_initcall+0x250/0x8d0 [ 880.434814][ T2024] do_initcall_level+0x104/0x190 [ 880.440299][ T2024] do_initcalls+0x59/0xa0 [ 880.445220][ T2024] kernel_init_freeable+0x2a6/0x3e0 [ 880.451001][ T2024] kernel_init+0x1d/0x1d0 [ 880.455861][ T2024] ret_from_fork+0x51e/0xb90 [ 880.460981][ T2024] ret_from_fork_asm+0x1a/0x30 [ 880.466282][ T2024] [ 880.466282][ T2024] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 880.473499][ T2024] fs_reclaim_acquire+0x71/0x100 [ 880.479145][ T2024] __kmalloc_cache_noprof+0x40/0x660 [ 880.484973][ T2024] cryptomgr_notify+0x85/0x930 [ 880.490271][ T2024] notifier_call_chain+0x1be/0x400 [ 880.495934][ T2024] blocking_notifier_call_chain+0x6a/0x90 [ 880.502295][ T2024] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 880.508109][ T2024] crypto_alloc_tfm_node+0x13e/0x3f0 [ 880.514009][ T2024] crypto_alloc_sync_skcipher+0x39/0xd0 [ 880.520076][ T2024] rxkad_init+0x20/0xe0 [ 880.524756][ T2024] rxrpc_init_security+0x72/0x120 [ 880.530307][ T2024] af_rxrpc_init+0x13d/0x2e0 [ 880.535424][ T2024] do_one_initcall+0x250/0x8d0 [ 880.540722][ T2024] do_initcall_level+0x104/0x190 [ 880.546208][ T2024] do_initcalls+0x59/0xa0 [ 880.551075][ T2024] kernel_init_freeable+0x2a6/0x3e0 [ 880.556899][ T2024] kernel_init+0x1d/0x1d0 [ 880.561759][ T2024] ret_from_fork+0x51e/0xb90 [ 880.566899][ T2024] ret_from_fork_asm+0x1a/0x30 [ 880.572194][ T2024] [ 880.572194][ T2024] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 880.580281][ T2024] down_read+0x47/0x2e0 [ 880.585542][ T2024] blocking_notifier_call_chain+0x54/0x90 [ 880.591788][ T2024] __crypto_register_alg+0x32b/0x3c0 [ 880.597602][ T2024] crypto_register_alg+0x447/0x810 [ 880.603333][ T2024] do_one_initcall+0x250/0x8d0 [ 880.608641][ T2024] do_initcall_level+0x104/0x190 [ 880.614131][ T2024] do_initcalls+0x59/0xa0 [ 880.619003][ T2024] kernel_init_freeable+0x2a6/0x3e0 [ 880.624766][ T2024] kernel_init+0x1d/0x1d0 [ 880.629637][ T2024] ret_from_fork+0x51e/0xb90 [ 880.634777][ T2024] ret_from_fork_asm+0x1a/0x30 [ 880.640077][ T2024] [ 880.640077][ T2024] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 880.647641][ T2024] __lock_acquire+0x15a5/0x2cf0 [ 880.653032][ T2024] lock_acquire+0xf0/0x2e0 [ 880.657979][ T2024] down_write+0x96/0x200 [ 880.662866][ T2024] crypto_alg_mod_lookup+0x211/0x5f0 [ 880.668683][ T2024] crypto_alloc_tfm_node+0x13e/0x3f0 [ 880.674496][ T2024] tls_set_sw_offload+0xa33/0x1780 [ 880.680145][ T2024] tls_setsockopt+0xf3e/0x15c0 [ 880.685450][ T2024] do_sock_setsockopt+0x17c/0x1b0 [ 880.691051][ T2024] __x64_sys_setsockopt+0x13d/0x1b0 [ 880.696792][ T2024] do_syscall_64+0x14d/0xf80 [ 880.701925][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.708349][ T2024] [ 880.708349][ T2024] other info that might help us debug this: [ 880.708349][ T2024] [ 880.718581][ T2024] Chain exists of: [ 880.718581][ T2024] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 880.718581][ T2024] [ 880.731628][ T2024] Possible unsafe locking scenario: [ 880.731628][ T2024] [ 880.739171][ T2024] CPU0 CPU1 [ 880.744552][ T2024] ---- ---- [ 880.749918][ T2024] lock(sk_lock-AF_INET6); [ 880.754426][ T2024] lock(&nsock->tx_lock); [ 880.761363][ T2024] lock(sk_lock-AF_INET6); [ 880.768475][ T2024] lock(crypto_alg_sem); [ 880.772811][ T2024] [ 880.772811][ T2024] *** DEADLOCK *** [ 880.772811][ T2024] [ 880.780954][ T2024] 1 lock held by syz.1.7276/2024: [ 880.785992][ T2024] #0: ffff888092889d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 880.795865][ T2024] [ 880.795865][ T2024] stack backtrace: [ 880.801889][ T2024] CPU: 0 UID: 0 PID: 2024 Comm: syz.1.7276 Not tainted syzkaller #0 PREEMPT(full) [ 880.801911][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 880.801921][ T2024] Call Trace: [ 880.801932][ T2024] [ 880.801941][ T2024] dump_stack_lvl+0xe8/0x150 [ 880.801966][ T2024] print_circular_bug+0x2e1/0x300 [ 880.801991][ T2024] check_noncircular+0x12e/0x150 [ 880.802015][ T2024] __lock_acquire+0x15a5/0x2cf0 [ 880.802041][ T2024] lock_acquire+0xf0/0x2e0 [ 880.802058][ T2024] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 880.802082][ T2024] down_write+0x96/0x200 [ 880.802103][ T2024] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 880.802121][ T2024] ? __pfx_down_write+0x10/0x10 [ 880.802143][ T2024] ? crypto_larval_alloc+0x1bf/0x290 [ 880.802162][ T2024] crypto_alg_mod_lookup+0x211/0x5f0 [ 880.802183][ T2024] crypto_alloc_tfm_node+0x13e/0x3f0 [ 880.802206][ T2024] tls_set_sw_offload+0xa33/0x1780 [ 880.802237][ T2024] tls_setsockopt+0xf3e/0x15c0 [ 880.802254][ T2024] ? __pfx_tls_setsockopt+0x10/0x10 [ 880.802271][ T2024] ? __fget_files+0x2a/0x420 [ 880.802283][ T2024] ? aa_sock_opt_perm+0xff/0x1a0 [ 880.802297][ T2024] ? sock_common_setsockopt+0x36/0xc0 [ 880.802313][ T2024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 880.802329][ T2024] do_sock_setsockopt+0x17c/0x1b0 [ 880.802351][ T2024] __x64_sys_setsockopt+0x13d/0x1b0 [ 880.802371][ T2024] do_syscall_64+0x14d/0xf80 [ 880.802389][ T2024] ? trace_irq_disable+0x3b/0x150 [ 880.802402][ T2024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.802418][ T2024] ? clear_bhb_loop+0x40/0x90 [ 880.802434][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.802449][ T2024] RIP: 0033:0x7fb845f9c819 [ 880.802464][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.802479][ T2024] RSP: 002b:00007fb846e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 880.802497][ T2024] RAX: ffffffffffffffda RBX: 00007fb846215fa0 RCX: 00007fb845f9c819 [ 880.802508][ T2024] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 880.802518][ T2024] RBP: 00007fb846032c91 R08: 0000000000000038 R09: 0000000000000000 [ 880.802528][ T2024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.802538][ T2024] R13: 00007fb846216038 R14: 00007fb846215fa0 R15: 00007ffe3fb8c7b8 [ 880.802554][ T2024]