last executing test programs: 7m39.456685855s ago: executing program 32 (id=3138): syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@generic={0x8863}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) close(0x3) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100000, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 7m39.373349304s ago: executing program 33 (id=3137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 7m38.458113959s ago: executing program 34 (id=3139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x80000000000000a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x5, 0x2, 0x4, 0x10010, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f00000004c0), &(0x7f00000005c0)=@tcp6=r5, 0x2}, 0x20) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0xf}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r9, r10, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x48, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0x7}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "798ee5eccf76505130e4f7503f7600f0"}]}}]}, 0x48}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r11, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000)='bridge0\x00', 0x20400, &(0x7f0000000140)={@_ha_fsid={[0x6, 0xff]}, {0xfffd, 0xc, 0x80, 0x7}}, 0x2c, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0xd7}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000003c0)={0x1, 0x5, [@remote, @local, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @multicast]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 7m36.431636395s ago: executing program 35 (id=3140): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="b3ea", 0x2}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) pipe(&(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) unshare(0x20000400) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r11, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000040)={r10}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r10, 0x2cf4e000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050000000006001500050000002800"], 0x4c}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x2000) 6m32.518896337s ago: executing program 7 (id=3398): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000000c0)="2d000000805842", 0x7}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x2405c030) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0xffffff24) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x816, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xac, 0x8, 0x0, 0x0}}, 0xffffffffffffffc7) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000400)=""/16, &(0x7f0000000280)=0x10) socket(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r9, &(0x7f0000000940)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0, &(0x7f0000000900)}, 0x8}], 0x4c, 0x100, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x58) 6m31.325451639s ago: executing program 7 (id=3405): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x28000000) 6m30.511946489s ago: executing program 7 (id=3415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fe4100000071101a000000000095000000000000002e0d47f6588d2fe013cfaa7a762e76fd8815d78573e073acb7c223528b9970213e82530efc27d56bd6759499cda83af3b813ff0abf12fc2c9d04232568f74c858dce49f76923ab0ee9092b"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 6m30.408670375s ago: executing program 7 (id=3417): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e22, 0x4e22], [0x4e22, 0xe], 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x258) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={0x0, 0x0, 0x8}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'ip_vti0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) (rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000110001002fbd7000fedb68dffc020000000000000000000000000001000004d402003200"], 0x28}, 0x1, 0x0, 0x0, 0x122859f4608ff214}, 0x4000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="a02627bd7000fbdbdf25110000003000018008000b00736970000c0007001200000008000000060002008700000007000600666f0000080006007772720008000600af210000080006006e0000005c00018008000800010001000cce07000100000008000000080005000400000014000300fe80000000000000000000000000003908000b007369700008000500020000000700060072720000060004004e2300000800050004000000"], 0xb0}, 0x1, 0x0, 0x0, 0x24008004}, 0x402c880) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) socket$inet(0x2, 0x4, 0x6) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f14010828bd7000fddbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$kcm(0x29, 0x5, 0x0) (async) recvmmsg(r5, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000002a00)=""/4089, 0xff9}], 0x100000000000033d}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003a00)=""/4096}, {&(0x7f0000004a00)=""/35}, {&(0x7f0000004a40)=""/250}, {&(0x7f0000004b40)=""/93}, {&(0x7f0000004bc0)=""/140}], 0x0, &(0x7f0000004d00)=""/122}, 0x262}], 0x1, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="b4b00992a653f6e3d0399165d8c0e85cfb5f7e0afdfca37c8e9832aa5596be72b2016d8cca59854c011e68de7bca3af5a4e316a497d9e4e1120512b55ce48a75dc44f0c31277c713ee4a4f5bdf", @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) 6m29.722518633s ago: executing program 7 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701feffffff00000000018f0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000ffff38bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300331a05003c0012800b00010069703667726500002c0002801400060000000000000000000000ffffac141443140007000000000000000004"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 6m29.454188953s ago: executing program 7 (id=3422): r0 = socket$inet(0x2, 0x3, 0x33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffbd, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x7, 0x1c000) syz_emit_ethernet(0x41, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4, 0x4e22, r3, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"0bd14fc5c84799db81f2da"}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) socket$inet(0x2, 0x3, 0x33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffbd, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r1, 0x8b2a, &(0x7f0000000040)) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x1c000) (async) syz_emit_ethernet(0x41, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4, 0x4e22, r3, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"0bd14fc5c84799db81f2da"}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (async) 6m14.307720744s ago: executing program 36 (id=3422): r0 = socket$inet(0x2, 0x3, 0x33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffbd, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x7, 0x1c000) syz_emit_ethernet(0x41, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4, 0x4e22, r3, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"0bd14fc5c84799db81f2da"}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) socket$inet(0x2, 0x3, 0x33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffbd, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r1, 0x8b2a, &(0x7f0000000040)) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x1c000) (async) syz_emit_ethernet(0x41, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4, 0x4e22, r3, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"0bd14fc5c84799db81f2da"}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (async) 6m5.975475714s ago: executing program 4 (id=3556): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xfffe, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m5.974558162s ago: executing program 8 (id=3557): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@local, @private=0xa010102, 0x0, 0xffffff00, 0xc, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, {[0xff, 0x80, 0xff, 0x0, 0xff]}}, 0x4, 0x0, 0x93f, 0x3, 0x9, 0x4, 'ip_vti0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x3e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@multicast, @broadcast, @empty, 0xf, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xffffffff, 0x8, 0x6, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, {[0xff, 0x0, 0x0, 0xff]}}, 0xe, 0x1, 0x10, 0x93, 0x2, 0x5, 'sit0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, 0xf, 0xfffffffe}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x4, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200900b0}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff9fb9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x15f8, @local, 0x800}}}}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x642b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe82}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r6 = socket(0x8, 0x3, 0xfffffff7) ioctl$XFS_IOC_GET_RESBLKS(r6, 0x80105873, &(0x7f0000000940)) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x10, &(0x7f0000000c80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @btf_id={0x18, 0x680911ee68aa98e4, 0x3, 0x0, 0x5}], &(0x7f0000000d00)='syzkaller\x00', 0xe1, 0x0, 0x0, 0x40f00, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000dc0)=[r11], &(0x7f0000000e00)=[{0x0, 0x5, 0x3, 0x2}, {0x5, 0x3, 0xe, 0x4}, {0x4, 0x1, 0x5, 0x4}, {0x3, 0x4, 0x5, 0x4}, {0x4, 0x4, 0x10, 0xb}, {0x2, 0x3, 0x5, 0xb}, {0x3, 0x3, 0x4, 0x11}, {0x3, 0x2, 0x10, 0xa}, {0x3, 0x5, 0x6, 0xb}, {0x2, 0x3, 0x2, 0x4}], 0x10, 0x5}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r12, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xb0, r13, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5f68}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4840}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x840002}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40088c0) sendmmsg$alg(r6, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001300)="51b07b7eda108faca882e4f0986d67a796e04f12c79ed9f4bdd7855e4c44d62efc7a4534bff7c6052a767524bb26b5595e64f4e7cd8f95c2b16a53fa98a59e1bb93205bf3f3e815e5ab9b8d7d71d24230c2669b9e4a339a128916e2db4f502eaf4f9220de01b1da2d95aa1778aa7de647a608aa5fff198d8a6f85eb415d7e611ef854c9e2d7392caaf1958937f3d3af1bf681a2be7d131141337802801eec4ba6668bbb095343c4bb1dfce6a77eaa0402daae274d98d361dd0b751a36623fa08944b54eac4194ea8f27733904e3f2a10272e5055314777c2e968ea232ac9b78e51ec0ece", 0xe4}, {&(0x7f0000001400)="ccf6e0bd6d02732b9c6d3baf6bd69bde6b5ba20aef6a88916dd3f9ffb50976", 0x1f}, {&(0x7f0000001440)="83e0e13405f8970de3fbb5cafef74c1a91cf27a31eaa66dddd56f98aa99637", 0x1f}, {&(0x7f0000001480)="8b235c9a285a1668defdabd2853981738e9895aea276c194ff8425a8885edc11252f71a8b4a529fa23d7342d29adb5832fab48b5e47dfa06de71696b6f5f12cc9d85a5d3ca6ce18863e08f1a5f23276d6045ae4ff466dd4dad9de3f2deb100120f256e3716fcd1da14e9f060bb5cb96047a99da32e068af048575195c76972d22ebf551c7669c46039281d8f4af01cab95416235a73e2f311a11c062b9a2c84dee64d5f7c5f00f42b068ea3379b617395a6fd225617aaa0d4e9452dd9d8bcead833c8a6602edc9c92afdb2304c16517f36b50889f5345f038155ac5afb47e96fdc2ba9fac13d0336025d3c", 0xeb}, {&(0x7f0000001580)="421698ebd9481896e02bd8f51fc3dfc88ce85138223e4ad8b3a6d12e7b2384169768977d821b81051072d56264f79fc5abb164c2844d84", 0x37}, {&(0x7f00000015c0)="f31fd0fb8ac724b71326ae56fa6421a7d53366e0d5ab91a61c9c13f04cc4cd0cce7d4a5e2846e57118e25cd4cf45b115475aa79545d6994c2886fb07ae595bc51a3c32a5a44805fbaab5c38af04901901a536a4ebb7415903865cec1af557044d4eb91f2be58d8a08623c13f11708bd1415546c069a49293363c1fc7af08c8d5300ba99909b1007c63c64ae7e64a3cae7023fab4", 0x94}, {&(0x7f0000001680)="aab998a9c3e5c994d6f420c667f1d4", 0xf}, {&(0x7f00000016c0)="710045cc6aa87a5e5f39fde22be5bbf6215548b6a017d3dd0e8bc92ab2998cd60026b18f0c92eefa1babe4aeed6bd264d715e97046e6355c206de2ac47b3b0131bf0b19036e78293d54d471965d3056b0aa91f89bdb47b487041cf5241cf9b1bed53f2207d7b3a9d695dda1a0da805eb181f4663de5fd772d32bb2fb677bb8493a4779cd291bc797771482019f327095757c852fe5ae9013f32d2ccfc74a28e4be359e7e6fed5a493fe4ba038059", 0xae}], 0x8, 0x0, 0x0, 0x20000004}, {0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001800)="f8443b811ab23faa5b4fb53d570152d12575252cf78cabf3f8eeb2d06fa6e49011f3d9e48c142d8c55767214fe874a0ac410a2d2fe61e3b82551976084b6109cf35753573bd8ca70badd2d45b58dd063a73ab6038e77ae91cbe2a27cee84eefed67afd5857fd86e5d131e49d71446cf3", 0x70}, {&(0x7f0000001880)="abf7eba29e4f4256e54e249bc526c54136fd77641b5434caaefd0b6d7bf536ec9d81f39e5aff127f45059a5d6be40aba73949e54e8c035d0f5cb3c173cb1acc6c4e8153024b47d98da25d3115d2340f0c56137dc430938cd91970a7b8750cdf16c79925280d0ecf5129b98989908caee1891fe8a3f5783f278eaccf17a78afea690bb91a0303e07a1a3b6f8228376d51da7258dc51c11958ce2f573f8d1615e14e7166770cb629ccff9c7f4737423e578201c6d25c0940495966b47d7edc3a79d5ec3a6d885170b2a4b9a2d04f056fc5655ceeaae5483fa502af3f2b262c2cbc2218eb2d3ab48ec8bf3874e6a8032e5e", 0xf0}, {&(0x7f0000001980)="e73a630d37e93c572981910db71d1f06054fbb023d8e377af66d70634e3a93de36de4cbf66519931b7aa70e05debfae340f8f148549015efe07972a3a7ede34e5e47d45e71b943e7c54327da2c0fbb4a3e6bbc9d445cbef6efb1c887acec767721c212af9943bfd3c07d2f881806aed27ec27965583a7444522e3763e8e11d0ac8390263c14359b5fd6c9e73d598371bbb3fbaa0f433473d0ec115949c3e5c2c", 0xa0}, {&(0x7f0000001a40)="a14ad7f4567d2a2e23867020d6363b2834ec84812abfbb46604f29c83e9092d44da0e1829d1f79a8d8b4d30730ab80ec1c337685357bc7a6c1f8af736aa9", 0x3e}, {&(0x7f0000001a80)="af975fbd232a7a318b22dd8b08ef0ab08e2696abaf236b68add6d45795888969cc1fc08a450b1d295a5504ef93e02915dda68f21e83b746af243314d935bc52d163c168284ba7d12354d9b77965c30e420ea07aacdab01c33799c3c453fbd51f8e0a1de55287b428a7366491df2a2977db603d31e59cbd2433830c4230109ca13bb5a02aeaef39b933a3d8181671056994e8685a98e74271bf157d", 0x9b}, {&(0x7f0000001b40)="f743135646e2bf486524016ad5bb64c84b81a9c7ddb720e27758e669368c047c758b95bf6f5f79bf6ddb5985538c50ec13d67c6fab06b3a16b1fe8e7a8fc193f74f5c6838ffcb10f8837ccc9bb1abf617fca603b7a1a36274497f046d1916f0304df951e4376aff377902a04688e6ead3c5db5eb06e1e65b97cb0bfe7bb9dcca08637fbd7ed639c6394cb61e3d4c644cb25669699f07c2884a75ab5b1cd64c9c20726e445a0c9fc475ee3fde7d9fd6e5cb78d2d0dfe6d28a294278923b465cdf9cd6e7cf2933d0fad7bee55085f0fe078a9ede", 0xd3}], 0x6, 0x0, 0x0, 0x20000000}], 0x2, 0x80) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r16, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x801) syz_genetlink_get_family_id$fou(&(0x7f0000001e80), r4) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r16) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x48, r17, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x44045}, 0x44) 6m5.857740278s ago: executing program 6 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000006c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x3}, 0x4, 0xe, 0x7, 0x200, 0x3, 'syz0\x00', "716a1bf48d5380999c0854bc413cf2b2f8dca55c840e2d8a42eaa2ad39e310c4", "3ea3fcd10fc0a691c4dcd066f65a30d105aa046a17a7e7394de41c20f6515e2a", [{0x10, 0x0, {0x2, 0x100}}, {0x9, 0x5b07, {0x1, 0x3}}, {0x3a9, 0x6, {0x2, 0x5}}, {0x0, 0x1, {0x1, 0xc8b0}}, {0xd85a, 0x113, {0x0, 0x5}}, {0x1, 0x101, {0x0, 0x4}}, {0xf42, 0x1, {0x3, 0x6}}, {0x400, 0x8, {0x1, 0x1}}, {0x8, 0x7f, {0x2, 0x2bf1}}, {0x5, 0x2, {0x1, 0x4}}, {0x7, 0x3, {0x1, 0x2}}, {0x8, 0x0, {0x1, 0x3}}, {0x4, 0x3, {0x0, 0x4}}, {0x9, 0x7fff, {0x0, 0x7}}, {0x81, 0x7, {0x0, 0x1}}, {0x8, 0x2, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x401}}, {0xc65, 0xd, {0x3, 0x2}}, {0xd, 0x62, {0x3, 0x8}}, {0x8, 0x0, {0x1, 0x2}}, {0x81, 0x2, {0x0, 0x80000000}}, {0x40, 0x101, {0x3, 0x2e}}, {0xf64, 0x4, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x6}}, {0x3, 0x6, {0x3, 0xd}}, {0x769a, 0x2a52, {0x1, 0x8}}, {0x9961, 0x1, {0x0, 0x1}}, {0xd0e3, 0x4827, {0x2, 0x6}}, {0x4, 0xa8, {0x0, 0x101}}, {0x1, 0xe5, {0x2, 0x9}}, {0x9, 0xf, {0x1, 0xfffffff9}}, {0x100, 0x5, {0x2, 0x1a78}}, {0x6e6, 0x7, {0x3, 0x4}}, {0x9, 0x9, {0x1, 0x800}}, {0x4, 0xfffc, {0x1}}, {0x3, 0x7992, {0x3, 0xfffffffb}}, {0xe0f3, 0xf4, {0x2, 0x2}}, {0xffff, 0x9, {0x1, 0x80000000}}, {0x4, 0xa970, {0x1, 0x401}}, {0x1a00, 0xbec, {0x2, 0xc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m5.830015833s ago: executing program 4 (id=3559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bdff00000000000c000000180001801400020076657468305f746f5f626f6e64005c00140003801000018008"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873720024000280080002"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @local}, &(0x7f0000000400)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe57, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x5, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x24044880) socketpair(0x15, 0x2, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001000)={r7, 0x5, 0x1, 0x7ee, 0x6, 0x4}, 0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000140)={r7, 0xfffb, 0x2}, 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x44}}, 0x4c084) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m5.647074588s ago: executing program 8 (id=3560): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x800000, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000580)=0x8, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000580)=0x8, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x403, 0x200000}, 0x20}, 0x1, 0xba01}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x403, 0x200000}, 0x20}, 0x1, 0xba01}, 0x8000) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x9) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x9) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000200)=0xc7f, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4, @remote}, 0x10) syz_emit_ethernet(0xae, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/324], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 6m5.585575555s ago: executing program 4 (id=3562): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xe}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008810) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 6m5.571118865s ago: executing program 6 (id=3563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) socket$inet(0x2, 0x800, 0x7) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x4000001) 6m5.376954937s ago: executing program 5 (id=3564): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xfffffff}}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) connect$inet(0xffffffffffffffff, 0x0, 0x0) 6m5.035045801s ago: executing program 8 (id=3565): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x28, 0x1, 0x0) close(r1) unshare(0x2c020400) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0) writev(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000940)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x5, 0x2, 0x3, 0x2}], 0x10, 0xe840}, 0x94) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0}}, 0x100, 0x0, 0x0, 0x0, 0x48}, 0x9c) 6m4.949242028s ago: executing program 5 (id=3566): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xf}, {0x9, 0x5}, {0x9, 0x8}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}]}, 0x34}}, 0x0) 6m4.402798277s ago: executing program 6 (id=3567): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @exit, @alu={0x7, 0x0, 0x1, 0x3, 0x0, 0x1, 0x700}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000004700", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x818}]}, 0x24}}, 0x18) 6m3.958915478s ago: executing program 5 (id=3568): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m3.957432318s ago: executing program 8 (id=3569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x800003, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3, 0x500}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 6m3.934441804s ago: executing program 5 (id=3570): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1d, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) readv(r10, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r11 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r12}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000400)=""/80, 0x50}], 0x1}, 0x2000) 6m3.754705387s ago: executing program 8 (id=3571): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000040)="060000007f00000100500000000000006d6800"/44, 0x2c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x8000, 0x7800, 0x7ff, 0x7, {{0x16, 0x4, 0x3, 0x4, 0x58, 0x64, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp={0x44, 0x10, 0x50, 0x0, 0xf, [0x645f, 0x7, 0xd]}, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x7, [{@private=0xa010101, 0x4}, {@remote, 0x4}, {@empty, 0x131}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x81}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}]}]}}}}}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000040000000c0000000c000180b3fe01006c36571e2af27897adefe8696baabf44a0cf1a3beb73469eca3f2a5ae7bb1375e6cb600608f3346f65412152588a2b19a2e2d2bc00a108d339f4c5c16f017037027a781bbac59491c40040669c9ab517de0a5237f1bacd54fe30332ade77aa04a7c96f8c7d93daf3d70eb905e06d446740f70477723717d718447e2ef38accc8cde84282d309c610b7da482c8414bc4ff89177ba1266e3886529704150a1cfd352ff6c", @ANYRES32=r5, @ANYBLOB="14000380040003800c0001800000020000000000"], 0xfea8}, 0x1, 0x0, 0x0, 0x4048091}, 0x40) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(r0, 0x0, 0x487, &(0x7f0000000080)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000040)=0x100008, 0x4) (async) recvmmsg(r9, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/32, 0x20}, 0x68000}], 0x1, 0x10002, 0x0) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt(r0, 0x0, 0x487, &(0x7f0000000100)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f0000010051000000000000010000060000000000000000", 0x44) 6m3.678724538s ago: executing program 4 (id=3572): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x12, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xfffffffc, 0x20000002, 0x13, 0x3, 0x16, 0x6}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @private2, 0x3ff}, 0x1c) 6m3.678281861s ago: executing program 6 (id=3573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x901, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffff9e, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 6m3.539627025s ago: executing program 6 (id=3574): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="33fe00005f00071b189da80400008000000000af1f7c"], 0xfe33) close(0x3) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r4, 0x11, 0x0, 0xfffffffb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r3, r4, 0x0, 0x0, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m3.319738047s ago: executing program 5 (id=3575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xfffe}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @generic={0x81, 0x6, 0x4, 0x8}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m3.179131422s ago: executing program 4 (id=3576): r0 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) socket$kcm(0x10, 0x4, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (async) 6m3.018383381s ago: executing program 6 (id=3577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00000012b7371f7dcf561d4c9a0f97db35d4d15ea56c37e7725dfd50fb2c524d5ff9f8c71978dc60cf018f23c671e537e9d360f0f8db2d71562e04b2cd6dc68fc571645716806f217544e9b0d624ad00a349817e77b68d31b4d22d91473f1f11d3b44bb268d3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe8000000000000000000000000000bb000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000040000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100001a000100feffffff00010000fc010000000000000000000000000000fc0100000000000000000000000000010001071c4e230fb50a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d46c000000ac1414bb00000000000000000000000000000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc0300000000000080000000053500000200010020000000000000002c001300ffffffff000000000000000000000000ac1e01010000000044d4000000000000000000000a00000008001d00fffeffff08001f0001000000"], 0x12c}}, 0x844) (async, rerun: 32) r2 = socket(0x2, 0x805, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000000c0)=0xffff, 0x4) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) sendto$inet6(r5, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0xcf, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) (async) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x0, 0x6, 0xb, 0xa, r9}, 0x10) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) (async) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 6m2.984015752s ago: executing program 4 (id=3578): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40201}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd70ce0c000025090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090008000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090000000000556db6174115d124e373740ad4572c57ba301ab2f1209b71054f1e1f13bbb113b4ffc70d2986f6ec4118ad2875fae1b8fb759e56a42c197ccedf115d3bb20af5e23e26cab126bd69d6"], 0x70}, 0x1, 0x0, 0x0, 0x260040c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000091115300000000007f52f80c040000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x40a0040) r8 = accept4(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x80, 0x800) sendmsg$nl_route(r8, 0x0, 0x4000085) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)=r6) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40201}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd70ce0c000025090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090008000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090000000000556db6174115d124e373740ad4572c57ba301ab2f1209b71054f1e1f13bbb113b4ffc70d2986f6ec4118ad2875fae1b8fb759e56a42c197ccedf115d3bb20af5e23e26cab126bd69d6"], 0x70}, 0x1, 0x0, 0x0, 0x260040c4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000091115300000000007f52f80c040000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) close(r2) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x40a0040) (async) accept4(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x80, 0x800) (async) sendmsg$nl_route(r8, 0x0, 0x4000085) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) (async) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)=r6) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) 6m2.9036359s ago: executing program 8 (id=3579): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x5, 0x8, {{0xa, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x88, 0xe, "e58b0442a117b337e32d64b1"}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000011402002cbd700dfedbdf2508000100000000000800010000000000080001100000000008000100020000000800010001000000d5181fda4e9b10a495fe2931397d2bb1c6be0a010001000000000018a8650c13"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) sendmsg$tipc(r4, &(0x7f0000000700)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000200)="aeb6981c1592ac106d58ac3ede25a4c5e53fb15eabd2d1e8e87f65508c56c659bcd0f7e8208685a8c1f34364239de75d66cf2d02043d159d7f22b4a012746df24183a3c7fcc32772847597fe185e17bc5930", 0x52}, {&(0x7f0000000300)="a8af1a0b12eaa1950758f4a843463d007da051aa2165e5a4b34d2a1f1a15337f81665a2e76d62169e163192156b9a41097941bf817ec7ce96f758de90846a68e5a26203c22feda3c58dd0e1e278954662b9730cb1b62036572a432d0c87b581798bafb96781a7027928b8ac055d47834146ec35674271b2a2058c8bc797e48045e3ca6505896f23ee1c89a127323598edc94422113ea", 0x96}, {&(0x7f00000003c0)="d78b20d96a7bf49769adc91745600fed233aba73b9a3b72b946d2c0025afe617e63c6d33f28d17c94408d9eed381bafbe8e3405303d437581460bdddd649fbfb44539a14fd439a163650057d10a475e0d1d3448ba03927306b4d1c56566013e681a82fe3ecbd1993086afcd2d783d71b4c913ca698b60dbebd296f43582785d129f4d8b5d9bd895e96637f7a4d4c5e4e1b1070842c7e52484b111b93b262c7bd3d2f6bb361d70264c067387238112a7e972c92b3a3bceb4c816c105aec96326c", 0xc0}, {&(0x7f0000000540)="557162c8a5c558c54ee79cbbc8f11aad4b28647d6dd7367944aa7dfe5eb3c53d17dc26e409f3fe9abf4855d534a86c651a0b9abe4170a1ce31b6d0308b4fd38e52ff569cb6c20edd400a9644627c12b630143a979772d0968cdcfda8eb27500e7a0680b2d4c3f10b1455161b9aa687614b0ab44bb6a3c0113c3beeb793a86b691af01da7786876ca046a576d60da0b6070", 0x91}], 0x4, &(0x7f0000000640)="660f7a6d9431f0824c3a874783cd85aeb872389b1e80841c392f5ec8000150c6a475c3a811b5a87be031d1ee054389dea7a5a8d493e47d4b2be5c4d09df9430f075756c3de71e946ab81df9e8630bc67e6cb34d034c5d734af7fb20f7b5d9a29d745dccf70506f413bf05c48013a659b668c7ffbfc829d8a61acc7d89372df68f6707a2a348c4f08f21035c27ea7e6e4c806ad5066135f6277d51cf6", 0x9c, 0x4000000}, 0x8010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 6m2.903430525s ago: executing program 5 (id=3580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309", 0x42}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5m47.831171663s ago: executing program 37 (id=3580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309", 0x42}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5m47.782177161s ago: executing program 38 (id=3579): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x5, 0x8, {{0xa, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x88, 0xe, "e58b0442a117b337e32d64b1"}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000011402002cbd700dfedbdf2508000100000000000800010000000000080001100000000008000100020000000800010001000000d5181fda4e9b10a495fe2931397d2bb1c6be0a010001000000000018a8650c13"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) sendmsg$tipc(r4, &(0x7f0000000700)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000200)="aeb6981c1592ac106d58ac3ede25a4c5e53fb15eabd2d1e8e87f65508c56c659bcd0f7e8208685a8c1f34364239de75d66cf2d02043d159d7f22b4a012746df24183a3c7fcc32772847597fe185e17bc5930", 0x52}, {&(0x7f0000000300)="a8af1a0b12eaa1950758f4a843463d007da051aa2165e5a4b34d2a1f1a15337f81665a2e76d62169e163192156b9a41097941bf817ec7ce96f758de90846a68e5a26203c22feda3c58dd0e1e278954662b9730cb1b62036572a432d0c87b581798bafb96781a7027928b8ac055d47834146ec35674271b2a2058c8bc797e48045e3ca6505896f23ee1c89a127323598edc94422113ea", 0x96}, {&(0x7f00000003c0)="d78b20d96a7bf49769adc91745600fed233aba73b9a3b72b946d2c0025afe617e63c6d33f28d17c94408d9eed381bafbe8e3405303d437581460bdddd649fbfb44539a14fd439a163650057d10a475e0d1d3448ba03927306b4d1c56566013e681a82fe3ecbd1993086afcd2d783d71b4c913ca698b60dbebd296f43582785d129f4d8b5d9bd895e96637f7a4d4c5e4e1b1070842c7e52484b111b93b262c7bd3d2f6bb361d70264c067387238112a7e972c92b3a3bceb4c816c105aec96326c", 0xc0}, {&(0x7f0000000540)="557162c8a5c558c54ee79cbbc8f11aad4b28647d6dd7367944aa7dfe5eb3c53d17dc26e409f3fe9abf4855d534a86c651a0b9abe4170a1ce31b6d0308b4fd38e52ff569cb6c20edd400a9644627c12b630143a979772d0968cdcfda8eb27500e7a0680b2d4c3f10b1455161b9aa687614b0ab44bb6a3c0113c3beeb793a86b691af01da7786876ca046a576d60da0b6070", 0x91}], 0x4, &(0x7f0000000640)="660f7a6d9431f0824c3a874783cd85aeb872389b1e80841c392f5ec8000150c6a475c3a811b5a87be031d1ee054389dea7a5a8d493e47d4b2be5c4d09df9430f075756c3de71e946ab81df9e8630bc67e6cb34d034c5d734af7fb20f7b5d9a29d745dccf70506f413bf05c48013a659b668c7ffbfc829d8a61acc7d89372df68f6707a2a348c4f08f21035c27ea7e6e4c806ad5066135f6277d51cf6", 0x9c, 0x4000000}, 0x8010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 5m47.725566035s ago: executing program 39 (id=3577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00000012b7371f7dcf561d4c9a0f97db35d4d15ea56c37e7725dfd50fb2c524d5ff9f8c71978dc60cf018f23c671e537e9d360f0f8db2d71562e04b2cd6dc68fc571645716806f217544e9b0d624ad00a349817e77b68d31b4d22d91473f1f11d3b44bb268d3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe8000000000000000000000000000bb000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000040000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100001a000100feffffff00010000fc010000000000000000000000000000fc0100000000000000000000000000010001071c4e230fb50a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d46c000000ac1414bb00000000000000000000000000000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc0300000000000080000000053500000200010020000000000000002c001300ffffffff000000000000000000000000ac1e01010000000044d4000000000000000000000a00000008001d00fffeffff08001f0001000000"], 0x12c}}, 0x844) (async, rerun: 32) r2 = socket(0x2, 0x805, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000000c0)=0xffff, 0x4) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) sendto$inet6(r5, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0xcf, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) (async) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x0, 0x6, 0xb, 0xa, r9}, 0x10) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) (async) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 5m47.641255711s ago: executing program 40 (id=3578): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40201}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd70ce0c000025090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090008000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090000000000556db6174115d124e373740ad4572c57ba301ab2f1209b71054f1e1f13bbb113b4ffc70d2986f6ec4118ad2875fae1b8fb759e56a42c197ccedf115d3bb20af5e23e26cab126bd69d6"], 0x70}, 0x1, 0x0, 0x0, 0x260040c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000091115300000000007f52f80c040000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x40a0040) r8 = accept4(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x80, 0x800) sendmsg$nl_route(r8, 0x0, 0x4000085) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)=r6) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40201}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd70ce0c000025090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090008000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090000000000556db6174115d124e373740ad4572c57ba301ab2f1209b71054f1e1f13bbb113b4ffc70d2986f6ec4118ad2875fae1b8fb759e56a42c197ccedf115d3bb20af5e23e26cab126bd69d6"], 0x70}, 0x1, 0x0, 0x0, 0x260040c4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000091115300000000007f52f80c040000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) close(r2) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x40a0040) (async) accept4(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x80, 0x800) (async) sendmsg$nl_route(r8, 0x0, 0x4000085) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) (async) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)=r6) (async) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) 26.708188865s ago: executing program 9 (id=5714): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.922578464s ago: executing program 9 (id=5738): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000004}, 0x0) 20.580021309s ago: executing program 9 (id=5744): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 20.305555253s ago: executing program 9 (id=5746): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 19.623825705s ago: executing program 9 (id=5753): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002f80)={0x10, 0x26, 0x20, 0x70bd29, 0x25dfdbfb}, 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x0) 19.00198671s ago: executing program 9 (id=5755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 10.792288556s ago: executing program 3 (id=5809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x7, 0x2, 0x7, {{0x8, 0x4, 0x3, 0x3e, 0x20, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x5, [{@local, 0x1}]}]}}}}}) sendmsg$xdp(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x2c, 0x4, r3, 0x2c}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="083a6dae2d2e928f259d2ef572467397c2dc8a2b81bf70712eb5cc182ff8e23db1a0ededd3abe7a43cb1541c4338623b5ed821de32e8eaa13be3", 0x3a}], 0x1, 0x0, 0x0, 0x80}, 0x40801) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r9, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10}}], 0x1, 0x2000c010) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0303080003000a0101e1ac1414aac705080400000000020000000100150400"/46], 0x2e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1a, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000050000000090a01040000000000000000070000000900010073797a30000000000c0009800800014060000002080005400000000208007f05000000000000020073797a31000000000800084000000001140000001000010000000000000000000084000a"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 10.736787727s ago: executing program 2 (id=5810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0e013e2b8fee4fc373c3cb9c9ce2abc102fca715024b82a4c6d0bb4af8", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd63bb7a4e004d110020010000000000000000000000000002fe80000000000000000000aa4e224e22004d907864ebe114f6ff9df4140f23e2ade16a28ace6c0b8bec259e8e5f080bb0d10f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27b955e1025c02"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002700010029bd7000000000000601000045694520f2f8e0b12199ce1a3ec5a3c0248c75a7fed98a4f24da566896a01528b052d45af286fbb1351e"], 0x14}}, 0xc000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x10, 0x0, &(0x7f0000000600)="f7ed0000000000000000004829000000", 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r4], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040041) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r9, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001d00"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRES64=r8, @ANYRES8=r10, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000340)) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r5, 0x0, 0x26, 0xcf, &(0x7f0000000d80)="9779eae6797be1369acf840e8f4dc52a4a4201d2526e69f4019eb9b49330bee26f02986fbcdb", &(0x7f0000000dc0)=""/207, 0x0, 0x0, 0xdc, 0x1000, &(0x7f0000000ec0)="6090f07709cb64c97ee1f6e0e9a42e88b2b0df72cf2913336064ba2288ab3719c371203a6c08e0110e3c34706a1ba4c0cec4ec9e051e371a413730a609597abffa1a99ed4c1eb6e0285bdf8fd17026cdd37c51c8f82c9d737eb63a3027913c08507a050df045102d3ab9d2dc46910d69305e50ec78b8aec8b7fd93eae9d0a58be09a85683c1ff6b3509093b1f2e8746855134fef2d95d8ebd06e7e07c6b753e9b4c28c57f8061ddb145946624fe16d84245da93feb7f66c9ffc6d76dc551439de6a3ed42c20ff0a0bc33c8aa6fa1b3f12dc023055c1c105a43b385cd", &(0x7f0000000fc0)="f9af400e58a4487a514b00915f817f8b7b4f7ca3a252582962fce7327371b268a331545571f3095e6dea3c633210811ccb0d0b5bdd824b64240003ce539d76ab2adff108886af108a84c898eca42e1eacc11c5e7067e9cf877d19375326e07eaca1a201e306ff88f44fb26e88b9ba98c1158bae3176be7deec1b051e5a2115195c5b45a88e47ab94326e1bcd31786112f902ab01944041cda6eac623d3de29d7e2e1f81bf051a04351af9f883b541cd25720427d1d1035397fc279fe05b99a794d52e8cbb953aaf0b0366ad0ac5b5a3c3fbdcbe97cab29e73b1b8172fffcb1c4fc88e70a802cd031a605d293015101439da1179f703162df6b4322368da47acb616b9a5e4f2a84fb33092c3317fa3df53c2d24ad9af95921b397f1d3fcae50dacd1414fdceb7bd66068411ff579e0322cecfdb563817fa948d7f19afd775b7579f7e0ede38b979021a91b987319a529d43a3cad782044b27a377d1971e17080b350e12983974e890f9158a4708622cea59ccb390db0b6b635f88c88f37acd386eda14931ece2d0b05dcd11e507ff4f9dcc0d3bb877b85bdff496283e56ddaf7bd56a22e66d9d2052dce21f368eee83eaa6a7cd96200e88ba8488df459295cedbcd72ba30c93bc71562dba108d076e0684dcaa4b1c3e5f11e6e67719bf73e97628cbac2d8dac2bb5722f4ed5db9900a1af55bd9d48239db99e9a399bc7cd1f68d24382780dc9028162ffbd7d3297619e32075ba898be40270cca18833facf4e27aaffba7ba5a01734350ddd5323dd1cd4ff2bbd53e84d1e8665cc5c7fc4a8e1a00872bd1d1947089b51c048c31f7829a88460a2143a55cad446cd168714e7bd4c4c84b2227cca7e9c73a40830189ea2835bb2b2b4eb929e4b8de048feb9bbcbd01bae222583e569d94d9becfa9fb9c89e93f8fd26b43847f5b1609c65837eab797dbd16c32268c1042b7e25f28137c87c8c9b522865099597236f5751a595d84d05c6c5fd06199dcdb5ab716be13c22df348855d19cb01ab33067f9fc29e5903dc3927233f96f79248c8a34a3135850906538bb57181b906142e818c13be268edfbee76c925227c2c48892cd41098a34ead67b5449111caa7d8a9fadc8dc3ef6636094173dd36d5b3a73672348e540b8de476e83627cf885350b680dc50d4a2195de7353e7fb97fc48b37605dd0c6ec7f4220112d4f7b2673df73f6d6689a448a131ebef23ebf50fddd72012e8152dcf97971314c1cd5ec3234647705df6978709770af816ca8f8a5cf9ee09f9cbcde9a9ff6045a3c7e7af659674bc3705610681da2d636e02d3a61866be7ceffd61bee1d479598c86d90657bfd16430a8943fe8b9f348c9d4e9a8fadaeb760b4d180321ab856a109717cfc567e3aa917b4c20f817db942b36c617881414d01fb78835c4afe4ae9ec544e6ebbb4c88b80c3d426fb881f29f5396d6c44611fa6afbfcc0e94c98597d8aedd01b528cebe6adf7471c068977f8058272c827ab1cb536d2c3d30dabb0559ce54441a18d2697326b69747a74fc3f9e326aa473e14396d5aee987436bbb8775a52696824f4dc2ec65310b769a1eebe7792566fb647204c817d64ffcea74ad741301d9f65a5fbfdcf7987f934ecd6ed340a224011b89be3fb3e789c55c398ce8b2f5d722b1ea5487d5ce60c5c141da1451acbb7a22a6b3b99ff94c8c0b6118baa01812f9df2fbb5bc226872cf6a1163460a0309842d2ee1ad0c9eb13d541f1e3c99276ff5ac701c7fa19ce03cddda87734bca984279d962df5356087ea46e7afa6112d81da6d07fa7f2011961c26c52ad587aede0a749c2493f60c14eb184338ad191db9cb3c43c880cd1d45ac78bb0757b93ac2693affb8cbfa8f91539332f9b0c57947c76dab1e3aaefcfa20eb474d3f2e0ce4fbbe5c2c3b71cd003fe68de894569935fff4f1bd548ea86eb00e0dbf3879af295f90575d21501776dae3300881e6bff6a92d5e33ce8b46e40428581acf4d754119a344f095d5dfde26a14a575875bd8c0ee086f85149b5fd29343514e4fbb95d289ee6b34fd9f071e8a6399c8b8f93fae7892057f2312b387b2f4d1dba8dff330cc744e91b69cd9a31c87e64f793e6881890c975a1ea40f61bec0c816e168c64f95492dfa194192e4961a590169a431e305e930734871f8deb4849bb55ce87dc0eba6a79b951049aefa8adae213d4770324b1d20547cafff5da4ed2cd1a7e4093fc6796bdba27892bfbd0fd2d72d111e6cfaa64be9c4126b358eda090138d99e27d72533540f5ee1a8cfa09c241ad9597db3ca896e9b3a4ef2cf3a14cf589cab306ae0fe7e4dcb30c83d88fb8f43cc3c15364e5e943d5690fec2e8b27b5a1e5b135e6421079188e29459b53d5f10ff0267a0d5b06a0a5044da564f7cc1fce99ecf95c635e1e89d21b8a0a9ea3b7b8df8aafb7b5bf45b408a90c49da2c1f28af87cec51482e423e15bd2893601f84744992bca44c719afd0c67a09bbf171b950211c6d08d6d3baf9d2f98d4cf7745494e4f5dec68ae1259ea702385f73cd21465c4e41822f081031aff0402f9c368b856fbca062c90408e0b3bf5ed1e5e61d59a432065edfa4f8085314f88b6cf58974ed0318e638599a636606834348f80a138ac0318ab714a4bfca21d2e801a2ecaa40b3fd1945365957b187dea8613c2f8e3ce09d85e7f6ab0155745f7e72ded1257e7742361bb9b8367a97344e0a4ba16256704ff0a4913deba3431bca987f4a1d5c8be6c9edff49bb9cdeba6e46b6bf5fab0b3dd1122270a803b583ed3c35b32e983c1532ab48a574d2fc65fe263eaa4dd98f248acac0bd21b6dc0dd1f9981f92425cb201fc36526423e053362bd94d58dfce7bd3a12417913bda1f7e434c4a793f2a8cf21c71338c8c164adb9bb209271ed36013c329e843290b9c00176d0dcfbfee53c1a642bb98e4a4c11bd87b2abb52e40a321866ddabfc3ba6ae4a234f9ee3b1ca617c83b359c614dd0f6cd5bcd90a3630130079ec7ffa805f84adec29ee1874f0a4d2280d82744fbc8844ea20ac96e65a99ae567f08513b62c1bb36b332b2eeb3a3cdb2f6a0dca4472d98f11e6522e50efff04242e4324b9462c1dc5d873200d40d8de5b8f04391e3acdd25182c9acedf1c0ae3ee644797e77cb0f44b563ae8b3d3bbc5c760d4f757d0e3c5ff6634474bfd1688fbb1f8aa8b1ef362016ba13d750dcea02acc0ee56834879a7dd0c8289fc27b14c57caabf3429273ac973d3ed298273472964379fd1eb9e12e537739c8dea11a6434e1797b5ee93549294d6d6891f587831925072e5c820401c959e8402d6a5ca24176b6edac3141fc0c3e71c28d14bc736a32505f6981f047470bb50b9a034377c86535460d483c169a0cee8fdbaf42518938232dfd352ce33853d5af720ace359bc72b47f59bfcf7090693648239db63633c8b00d47a8d88f5864b84d9247c6ba4ab5d52fb32222650c683bcc46598ba6a9eab58edd5acbefe848638b8c2131a582121679e54fc9d059df98e72452633a9fec263f48b9e0828837d86d9bca66c71cd43475c9aeb5eb7ede777e67b6cfbf76492cf9966a94c558dcf02e1a9f0b8bce102aaf00b4d1b7d95caff28cc2c4d0625a642e7adfe79a757e10be3ba4e4ef2c19ba8c0d2151407e7489ce3932b61b154a7d95db2d3da16c24fa6053e0169ae86e5d44de613fd35ef15185ff0df82e47f7bfa4059d6278a09163efcaf66259727d45843ae46a7eb49a4743d61167c4089d9d30fc878de888742ffbc1e4dc69419e1e33f7405f9ef274911b9d63687c3e6134d057d5e98bc2747368618a7a62326e6f5e586bf77772092e19ca15fb20815f92e49c88defc7043994eccc0450aa0294a3a3cca83ba085c38085db42fb41ad1cf9ebecf6f76663f3931957bd16c8cdb4ee8fa7e6c123577ea7b3b4ec007a3c01c610ebbcd1a0d63ec776eaaf8b4f1c1de8eba72c71cf758b1fdbb0058fcce5ff4d68c26ccfd52a83bcbfc70b02918f941e0de6f2b3ed55d32e37a016b45c424708b70d320b775c5c086e5c22e6813c0d69c893e2ea943a999082ff30be3a8cdd792cb79de0f9c8791130114d375d9062ce8cc4066d54b8dbae563111fc690114f31234ccaa2f2502832547c55b5dc9f528cc4511921be5efd4f543a166fb9b384e753385df43d767768c168877fe7ac3bf7e57796ad73de9c45b328c11e883865077e5cdf6732c2c3ce4e01928173d5bf67685df27fcb58415442f2d8d98cd2091d8c0afd09f7625359b5400eec27cf51285d8e40ffe09d885dce4cb104353ce89590d30ec577eec47dc201080bbd78f0cf833121da83492f33d0f950a19ea750bbe98661b0645be33d1feda5da0ee4d9d92656f626ddea8f601e60ab50153e388a99bef1b475adcbceaee1c8881af89a3a3925be9f95ed43273db581a5b140ba6c061e04868533d8b3a83a7fd9f3d37dd7469c30b86c4b791ed6c5e436cf3d34a6c7b3dadc535c4cf68a48014ce04b9e5c52748d49167b1f62650b976b0059352eb901f28545b9bf512f6ad4fede16f76348930bbce68efc7675b997ce77a651419447ef363ed6ce673c1582339ccebd9fece8da94027a0599e0b5c69a1e1106bceef6457af3fa5402381f5b1a78aa06015eeca9f07d887ef1bc1dbc4c4d5ba0a8fe471a02745305e9e849afe473a49b4000884a80cea6078e92bd228a6a505c8c58622d911d1c97fcf41604f0cbe9e28c866c406a0c9d6441f14fa1c0acde8397a996cd5d65161b25dbefcc372b6327330906d1272b6028071c6fe86b493659a8f5073fcc028265b2d1366973668fcf75dece3afbdf363194b300374d39e7aa09fd129a8260a717758e86eefc2f111e1315f3f1af3a8640c6f7f68dc57051d60e30732c020fd70204249373aa2cd6f5bf6ce8aa362fdfc2ee453a4e7dccb5a8c3dc27a2a74377a1fd8a492f70d5a38e1d81fb1d3bc4f9bc31795cdc1245ebffe0ebb78bcce42aac5915356ba23a719dca0d081804d9f049a93d4e8e15cefc925939bbe0e767f5f03f59439da4f88953861f95f48de11199b912a967381dd8ac199ce0f07d429175558f243f96602ab7c5e94be1f8e95e71daeecdef90c3d5066e97847638cd5ff61982ff3cc890fd07e026ea96adfaee74ea718cf4027414f8b80617cb4815efddeb09257aa6e33906dcda16e1c21632b636ac22d8081bb74bb8fb407e9f57c373518159db463212c1d060f439776df00735d639d7043a689cb8d207a7675d0654eea7bf7ea7bd0a8b1034ee12c2f053fe3fbaa63925ebe642fcdd706f306908926b29c4144150498cee600de00ff3bd9577c36e7ffeae0a4a56d05cd8709710ef46797aa8bc5ee44852557900a248048d1165aca06cfb709f57cc008e5ebd98427913114d6c2cc660daec4477c775636b66f9f012144a49cbe8ce0ecc3263af78d5cf94dd0306da7898017774f2f7472b550b55bf5da766e7a6bb2fc6d5f33e61aaf94ae7673bc9d6655a4174f3c04b50b2373e4b8a2330a5052840ec0a0100d85c33217168a60f54f94051989aef1d7d70a92bafe4f640c65f3e07a8fedfad2eaa4cb012a3f1fd43d1253caa8a3cbb0564a022198724b5aa6b672d529e8e8915e225a2710367629ba6bea32fd3c8850d705d902bc8de16b3811774bb14455505d0762319a0b5ba5b20ca176c4e669b9c456c60114d29fb538a01fb8f40b60b3223feb26baf10cc1e604ac20c13f6d7d7e73d073f190d34f378c5827c0f794b09b1a5d857cd42f12f0c3f7636be3d808687b4618f19", 0x2, 0x0, 0xe}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000924b1ffef965fded81fb7eefafe7fb4c631b4508824d41af86090402c61fdfe32e7308f56839b5e4a44bdfd14bcefdfbcaac1e49e752691502c1705180624a0b536f951215d8438a6ba2888b27638cba2043987fbc9e1c9d619a779cecaaf99ddd8c55486f810765b8a9b2b27a5ce7de9aed78ea3b7cb0c68f", @ANYRES16=r12, @ANYBLOB="020026bd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0xd, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) 10.648721855s ago: executing program 0 (id=5811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x20, &(0x7f0000000000)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x0, 0x800, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x5, 0x4, 0x3}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x78, 0x29, &(0x7f00000003c0)="3e7417fdf44caef911a3e82ad9070513e164bb8474deba2e626b8003d63446662be8ac6c71e497789376e13cd95009b86dcccb281304778f4c22079eb44c90ceb11857cc89d27847a2763590403ed32654084a69ecc2a3e0e7f2028f47c0476d406fb285dc05a3549970cb7e9dded150a1b1a1b87676c4b6", &(0x7f00000004c0)=""/41, 0x0, 0x0, 0xc, 0xda, &(0x7f0000000500)="903963ba8828afa5b3777a49", &(0x7f00000006c0)="62933b74b2f8eb2f72ee230ff6cc2a5cd4042317c7cf8c459095bcf3e4c6a20287e514046a09216ffcbd7cf7073712f857ca8ebb0e3a4241898275874eaaaad64a2106edc8443f2d4e2c6c46aae0aa5b55b8da4b99d9e59c42cfb6abb6dee252032dd53a206544610a48dfbe4c2f44b2580efc5377ddf9d700eb2a58325eb7a7aca2688d4ea203ec500bb0fbcbbb2f2336decb505ae4e05be0eda56225c30685740657f3961210774cb685fd24ef580c1f61d755378dfa7e6937bb8b2b363d2caa5d170f0e4167040e965abd7930d3088e917fe07aeef160c38c", 0x4, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)="b53e270cd8249961618196b10028a06e86c4", 0x12}], 0x1}, 0x4048010) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) 10.525369495s ago: executing program 1 (id=5812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) 10.062557378s ago: executing program 1 (id=5813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24004885) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xf, 0x10}, 0x20) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) 9.79580762s ago: executing program 2 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) 9.679229306s ago: executing program 1 (id=5815): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000b58284e6574400000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x8001) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r4) (async) close(r4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2c8, 0x198, 0x98, 0x98, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'batadv_slave_1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {}, 0x8, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x7}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'wg2\x00', 'geneve0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x42}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x4, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYBLOB="e1ed6f2409000000c8e7a7232e84e348930eeb2518c47315734d"], 0xfdef) 9.602293725s ago: executing program 3 (id=5816): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 9.459743923s ago: executing program 0 (id=5817): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x2000c810) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33, 0x20000600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) 9.459186032s ago: executing program 2 (id=5818): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x767, @remote, 0x6}, 0x1c) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000580)="06c3", 0xffd8}], 0x1) 8.849760643s ago: executing program 2 (id=5819): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24004885) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xf, 0x10}, 0x20) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 9) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) 7.635438081s ago: executing program 0 (id=5820): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="70000000000000002900000004000000670a000000000000000100050200020740000000010e000800050000080000ae63e1be000000000000ffffffff000000000900000000000000030000000000000006000000000000009003000000000000c204000000020502ffff000000000050000000000000002900000036"], 0xc0}, 0x1400c8d4) 7.575909077s ago: executing program 1 (id=5821): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)={0x10c, 0x30, 0x1, 0x0, 0x0, "", [@nested={0xfa, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x10c}], 0x1}, 0x0) 7.457930775s ago: executing program 2 (id=5822): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x98}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000040)="de31ddf22cba9d810f063f89db8955c57f4066f1a657052d0b4400b754073839eff576dde06b1c3ef6272172a3d9d7175f04bf0b648ca5", 0x37}, {&(0x7f00000000c0)="989c1e62eb7933a5a6", 0x9}, {&(0x7f0000000300)="a89be3f40ec6c725cda57cc73585c726f946bd9630064817b89d436a692641bea79b6ec680a6341493b4c7fa635cdeb8447fdac547983ab8786411c8f50495da4efd1aa29be9d6758a25492f5b6c2ed0192e341fe5db275b0467ceff0e2d44f26e5085daa96c1520f0e3b7754a94f11fe037a7eed391ca2a59516eee5e3e5e1f1aed0f5d1109959fc0a5feb49f558683273c89d4b2445828e1f5637aca1f2b88516ee23b8a4b4fab752e6836d4b804712510cbabf595e75efadc8fa0b6b7f774f9e20e73805d7145b9b61bd58ca7de8d4ebf415f887a6b2fdb", 0xd9}, {&(0x7f0000000540)="9de2944a06ceae8af49e09a93d8558e7c0430469ee2c4acc3cb18b2c15965a922c4e7c5f3504d47efe57ba610b81a3ce2df2633a28fc7f22e78286918012e94a19f228ee9d437d6999d42ecbbc1c292006ae6be1baf686960fb8da4b11b3cfddec886d4405c0848e85a6ba2ab151e8599841c21eda23217da42fb5a2162f422a9bf0fef69f3a783e95991907bfb74e17d7af07105961ee1443a37dec1b794f39580024f6c41cec6ebe", 0xa9}, {&(0x7f0000000600)="fc18b571c8851718f15cdeb354b2dd6035a855", 0x13}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="34abd21896a4583ef3fbaec82f6063afa49f9383734a2a", 0x17}, {&(0x7f0000001cc0)="fc6c545ef9a09752361130526ed8c7e44d6be9960cda56cfd27165df8c9e41e331dfd3a07aa992", 0x27}, {&(0x7f0000001d00)="78f131812abd6bf6ecdbd8765d63ed30520a64ddc52cae77df5cc21d", 0x1c}, {&(0x7f0000001d40)="b5c9240082fd508293e71490a3f8413e82fdd9f7b8ed82835c60f406ba36b197f97b481e9decfadbb57594d1eaeeaf89f86f90e1c01f77bc853e60f09749a04d88aa2bbc5e3fd0c701b42b9f236b109b902107cf83e5abd1e2a9c61ff5bf1cd7f078cae3011e3d8b4c1f38741d720ac7b5653dbe57bdf11714a0c0b8", 0x7c}], 0xa, &(0x7f0000001e80)=[{0x80, 0x108, 0x9270, "d5fe1a470f378ea8b02c309daa788c695b357489a3cbe4c4fc7b1f74ab14081d5f9a0704c554494b618051f0717f2b780af87a47fa364909bf9957cc15f8c320730f0003e0cdfbced48d358164cdf410830a2ecb13c08cd2d7dd4548b3eac4a2a6029ecbe9c9f36f14cc77c3f1fd"}], 0x80}, 0x8001) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.325304726s ago: executing program 3 (id=5823): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000000f08000100010000009a8a451d454c3f80c81d1d9554a307582f2a0765ea7d52153f532a2d9340565993d0ca6ad6a4f0aac768d83531c3c74b7b7281f9759c963d939e9d80ac31c698362b7ea338915c08f8dc606a2fd63728dea4c38780809d8bb3fb9401eddcb2d1ce302d2e"], 0x1c}}, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffccd, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r4, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x41) 5.548498988s ago: executing program 0 (id=5824): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="c22290d83d34f571355c72665fc7098a7bec1fab", 0x14, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x5, @empty, 0x2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280027}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1}}], 0x1, 0x10005) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x8001, 0xff00}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)=ANY=[], 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 5.548102569s ago: executing program 1 (id=5825): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24004885) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xf, 0x10}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f00000002c0)) unshare(0x8000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0x108, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000600), 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000840), 0x8, 0x36, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) 4.122823925s ago: executing program 3 (id=5826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000007d000000b708000000640000dbaaf8fff1000000b5080000020000007b8aeeff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3.417877386s ago: executing program 41 (id=5755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.009042425s ago: executing program 0 (id=5828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x20, &(0x7f0000000000)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x0, 0x800, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x5, 0x4, 0x3}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x78, 0x29, &(0x7f00000003c0)="3e7417fdf44caef911a3e82ad9070513e164bb8474deba2e626b8003d63446662be8ac6c71e497789376e13cd95009b86dcccb281304778f4c22079eb44c90ceb11857cc89d27847a2763590403ed32654084a69ecc2a3e0e7f2028f47c0476d406fb285dc05a3549970cb7e9dded150a1b1a1b87676c4b6", &(0x7f00000004c0)=""/41, 0x0, 0x0, 0xc, 0xda, &(0x7f0000000500)="903963ba8828afa5b3777a49", &(0x7f00000006c0)="62933b74b2f8eb2f72ee230ff6cc2a5cd4042317c7cf8c459095bcf3e4c6a20287e514046a09216ffcbd7cf7073712f857ca8ebb0e3a4241898275874eaaaad64a2106edc8443f2d4e2c6c46aae0aa5b55b8da4b99d9e59c42cfb6abb6dee252032dd53a206544610a48dfbe4c2f44b2580efc5377ddf9d700eb2a58325eb7a7aca2688d4ea203ec500bb0fbcbbb2f2336decb505ae4e05be0eda56225c30685740657f3961210774cb685fd24ef580c1f61d755378dfa7e6937bb8b2b363d2caa5d170f0e4167040e965abd7930d3088e917fe07aeef160c38c", 0x4, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)="b53e270cd8249961618196b10028a06e86c4", 0x12}], 0x1}, 0x4048010) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) 2.342621102s ago: executing program 3 (id=5829): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x767, @remote, 0x6}, 0x1c) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000580)="06c3", 0xffd8}], 0x1) 1.024874051s ago: executing program 2 (id=5830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x800003, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0xffe4}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 707.416051ms ago: executing program 1 (id=5831): syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 173.20669ms ago: executing program 3 (id=5832): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c300000010d3a4a50523290ade61fb0000000000", @ANYRES8, @ANYBLOB='\n@\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r5, 0x25, 0x10, @val=@perf_event={0x401}}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000200), &(0x7f0000000140)}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x200, 0x8}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x80000000, 0xcb, &(0x7f00000005c0)=""/203, 0x41000, 0x10, '\x00', r9, @fallback, r10, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x10, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000a00)=[r11, r12, 0x1, r13, r14], &(0x7f0000000b40)=[{0x3, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xe, 0xb}, {0x3, 0x4, 0x10}, {0x3, 0x1, 0x5, 0x5}, {0x0, 0x3, 0x5, 0x5}, {0x5, 0x3, 0x0, 0x6}, {0x1, 0x3, 0xd, 0x8}, {0x5, 0x4, 0x10, 0x2}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0xd}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) r15 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r15, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a00056086816cf3347327380400008008000380"], 0x1c}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 0 (id=5833): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x1b, 0x0, &(0x7f0000001040)) kernel console output (not intermixed with test programs): T25018] do_syscall_64+0x166/0x520 [ 823.318732][T25018] ? trace_irq_disable+0x3b/0x140 [ 823.318755][T25018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.318780][T25018] ? clear_bhb_loop+0x70/0xc0 [ 823.318808][T25018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.318832][T25018] RIP: 0033:0x7f753ad9e159 [ 823.318860][T25018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.318881][T25018] RSP: 002b:00007f753bca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 823.318906][T25018] RAX: ffffffffffffffda RBX: 00007f753b025fa0 RCX: 00007f753ad9e159 [ 823.318924][T25018] RDX: 0000000000000002 RSI: 0000200000004f00 RDI: 0000000000000004 [ 823.318939][T25018] RBP: 00007f753bca6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.318954][T25018] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 823.318969][T25018] R13: 00007f753b026038 R14: 00007f753b025fa0 R15: 00007ffea35ee6b8 [ 823.319006][T25018] [ 823.800670][T25021] netlink: 'syz.3.4484': attribute type 1 has an invalid length. [ 823.875570][T25021] bond2: entered promiscuous mode [ 823.878738][T25021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 823.907875][T24993] sock: sock_timestamping_bind_phc: sock not bind to device [ 824.085731][T25021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.086208][T25021] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 824.086232][T25021] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 824.124754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.215868][T25021] bond2: (slave wireguard0): making interface the new active one [ 824.215898][T25021] wireguard0: entered promiscuous mode [ 824.217616][T25021] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 824.448283][T25041] ip_tables: iptables: counters copy to user failed while replacing table [ 824.943424][T25059] __nla_validate_parse: 7 callbacks suppressed [ 824.943445][T25059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4492'. [ 825.014780][T25059] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4492'. [ 825.028894][T25058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4493'. [ 825.144365][T25065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4495'. [ 825.671121][T25086] ip_tables: iptables: counters copy to user failed while replacing table [ 826.493260][T25116] netlink: 'syz.2.4507': attribute type 16 has an invalid length. [ 826.493285][T25116] netlink: 'syz.2.4507': attribute type 17 has an invalid length. [ 826.494457][T25113] netlink: 'syz.2.4507': attribute type 16 has an invalid length. [ 826.494478][T25113] netlink: 'syz.2.4507': attribute type 17 has an invalid length. [ 826.613646][T25126] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4510'. [ 827.225501][T25116] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.225946][T25116] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.475175][T25116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.505219][T25116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.636788][T25116] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 827.669456][T25116] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 827.669487][T25116] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 827.698821][T25116] ip6erspan0: left allmulticast mode [ 827.699196][T25116] tipc: Resetting bearer [ 827.701155][T25116] syzkaller0: left promiscuous mode [ 827.701177][T25116] syzkaller0: left allmulticast mode [ 827.710650][T25116] ip6gre1: left promiscuous mode [ 827.710673][T25116] ip6gre1: left allmulticast mode [ 827.743227][ T60] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.743269][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.743302][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.746108][T10088] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.746147][T10088] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.746180][T10088] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.746228][T10088] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.746261][T10088] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.746293][T10088] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.746339][T10088] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.746371][T10088] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.746402][T10088] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.938686][T25151] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4513'. [ 827.949257][T25151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4513'. [ 828.132259][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 828.258113][T25159] netlink: 'syz.9.4517': attribute type 10 has an invalid length. [ 828.747127][T25181] netlink: 'syz.1.4524': attribute type 1 has an invalid length. [ 828.812109][T25181] 8021q: adding VLAN 0 to HW filter on device bond7 [ 829.312409][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 829.312652][T25212] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 829.343124][T25214] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 829.467629][T25212] 8021q: adding VLAN 0 to HW filter on device bond8 [ 829.513750][T25209] openvswitch: netlink: IP tunnel dst address not specified [ 829.513788][T25209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.737425][T25223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 829.778255][T25223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.643467][T25258] netlink: 'syz.1.4546': attribute type 6 has an invalid length. [ 830.643491][T25258] netlink: 'syz.1.4546': attribute type 7 has an invalid length. [ 831.511399][T25303] nftables ruleset with unbound set [ 831.680562][T25307] FAULT_INJECTION: forcing a failure. [ 831.680562][T25307] name failslab, interval 1, probability 0, space 0, times 0 [ 831.680600][T25307] CPU: 1 UID: 0 PID: 25307 Comm: syz.2.4561 Not tainted syzkaller #0 PREEMPT(full) [ 831.680629][T25307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 831.680652][T25307] Call Trace: [ 831.680661][T25307] [ 831.680671][T25307] dump_stack_lvl+0xe8/0x150 [ 831.680713][T25307] should_fail_ex+0x410/0x560 [ 831.680751][T25307] should_failslab+0xa8/0x100 [ 831.680781][T25307] __kmalloc_cache_noprof+0xa3/0x600 [ 831.680807][T25307] ? rtnl_newlink+0x147/0x1c30 [ 831.680835][T25307] ? rtnl_newlink+0x147/0x1c30 [ 831.680871][T25307] rtnl_newlink+0x147/0x1c30 [ 831.680903][T25307] ? rcu_is_watching+0x16/0xb0 [ 831.680932][T25307] ? trace_sched_exit_tp+0x3a/0x130 [ 831.680964][T25307] ? __pfx_rtnl_newlink+0x10/0x10 [ 831.680998][T25307] ? __lock_acquire+0x747/0x2de0 [ 831.681030][T25307] ? __lock_acquire+0x747/0x2de0 [ 831.681070][T25307] ? lock_acquire+0x115/0x350 [ 831.681102][T25307] ? lock_acquire+0x115/0x350 [ 831.681136][T25307] ? is_bpf_text_address+0x26/0x2b0 [ 831.681171][T25307] ? __lock_acquire+0x747/0x2de0 [ 831.681196][T25307] ? __kernel_text_address+0xd/0x30 [ 831.681217][T25307] ? unwind_get_return_address+0x4d/0x90 [ 831.681239][T25307] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.681257][T25307] ? arch_stack_walk+0xfb/0x150 [ 831.681288][T25307] ? lock_acquire+0x115/0x350 [ 831.681307][T25307] ? __pfx_rtnl_newlink+0x10/0x10 [ 831.681341][T25307] ? __pfx_rtnl_newlink+0x10/0x10 [ 831.681364][T25307] rtnetlink_rcv_msg+0x802/0xc00 [ 831.681387][T25307] ? netlink_sendmsg+0x5d4/0xb40 [ 831.681412][T25307] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 831.681434][T25307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.681459][T25307] ? __lock_acquire+0x747/0x2de0 [ 831.681490][T25307] netlink_rcv_skb+0x226/0x4a0 [ 831.681512][T25307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 831.681541][T25307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.681577][T25307] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.681600][T25307] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.681626][T25307] netlink_unicast+0x7bd/0x940 [ 831.681675][T25307] netlink_sendmsg+0x813/0xb40 [ 831.681702][T25307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.681729][T25307] ? apparmor_socket_sendmsg+0x98/0x360 [ 831.681755][T25307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.681774][T25307] sock_sendmsg_nosec+0x14e/0x190 [ 831.681797][T25307] ____sys_sendmsg+0x54e/0x850 [ 831.681827][T25307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.681860][T25307] ? import_iovec+0x73/0xa0 [ 831.681888][T25307] ___sys_sendmsg+0x2a5/0x360 [ 831.681912][T25307] ? __lock_acquire+0x747/0x2de0 [ 831.681935][T25307] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.681966][T25307] ? kstrtouint+0x6e/0xe0 [ 831.682009][T25307] ? __fget_files+0x2a/0x420 [ 831.682035][T25307] ? __fget_files+0x3a2/0x420 [ 831.682070][T25307] __sys_sendmmsg+0x273/0x4d0 [ 831.682101][T25307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 831.682136][T25307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 831.682181][T25307] ? ksys_write+0x242/0x270 [ 831.682212][T25307] ? __pfx_ksys_write+0x10/0x10 [ 831.682253][T25307] __x64_sys_sendmmsg+0xa0/0xc0 [ 831.682287][T25307] do_syscall_64+0x166/0x520 [ 831.682319][T25307] ? trace_irq_disable+0x3b/0x140 [ 831.682342][T25307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.682366][T25307] ? clear_bhb_loop+0x70/0xc0 [ 831.682394][T25307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.682417][T25307] RIP: 0033:0x7f69d959e159 [ 831.682438][T25307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.682459][T25307] RSP: 002b:00007f69da3bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 831.682484][T25307] RAX: ffffffffffffffda RBX: 00007f69d9825fa0 RCX: 00007f69d959e159 [ 831.682502][T25307] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 831.682517][T25307] RBP: 00007f69da3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 831.682531][T25307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.682546][T25307] R13: 00007f69d9826038 R14: 00007f69d9825fa0 R15: 00007ffe19bc4c38 [ 831.682582][T25307] [ 832.176910][T25271] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 832.378557][T25324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4566'. [ 832.577066][T25331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4568'. [ 832.610904][T25331] validate_nla: 2 callbacks suppressed [ 832.610926][T25331] netlink: 'syz.0.4568': attribute type 1 has an invalid length. [ 832.738103][T25341] netlink: 'syz.2.4573': attribute type 4 has an invalid length. [ 833.049273][T25358] bridge_slave_0: left allmulticast mode [ 833.049301][T25358] bridge_slave_0: left promiscuous mode [ 833.049521][T25358] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.083412][T25358] bridge_slave_1: left allmulticast mode [ 833.083439][T25358] bridge_slave_1: left promiscuous mode [ 833.083642][T25358] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.130156][T25358] bond1: (slave veth0_to_bond): Releasing active interface [ 833.144918][T25358] bond0: (slave bond_slave_0): Releasing backup interface [ 833.150441][T25358] bond0: (slave bond_slave_1): Releasing backup interface [ 833.173930][T25358] team0: Port device team_slave_0 removed [ 833.187039][T25358] team0: Port device team_slave_1 removed [ 833.193517][T25358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.198123][T25358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.207127][T25366] ip_tables: iptables: counters copy to user failed while replacing table [ 833.268314][T25365] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 833.390461][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4584'. [ 833.390505][T25381] netlink: 'syz.9.4584': attribute type 20 has an invalid length. [ 833.390628][T25381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4584'. [ 834.267451][T25415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4594'. [ 834.269728][T25415] FAULT_INJECTION: forcing a failure. [ 834.269728][T25415] name failslab, interval 1, probability 0, space 0, times 0 [ 834.269764][T25415] CPU: 0 UID: 0 PID: 25415 Comm: syz.2.4594 Not tainted syzkaller #0 PREEMPT(full) [ 834.269790][T25415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 834.269803][T25415] Call Trace: [ 834.269813][T25415] [ 834.269823][T25415] dump_stack_lvl+0xe8/0x150 [ 834.269861][T25415] should_fail_ex+0x410/0x560 [ 834.269893][T25415] ? __alloc_skb+0x1db/0x7a0 [ 834.269921][T25415] should_failslab+0xa8/0x100 [ 834.269952][T25415] ? __alloc_skb+0x1db/0x7a0 [ 834.269978][T25415] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 834.270016][T25415] ? __alloc_skb+0x18d/0x7a0 [ 834.270045][T25415] ? __alloc_skb+0x1db/0x7a0 [ 834.270080][T25415] __alloc_skb+0x1db/0x7a0 [ 834.270114][T25415] netlink_ack+0x136/0xb30 [ 834.270134][T25415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 834.270166][T25415] ? __lock_acquire+0x747/0x2de0 [ 834.270207][T25415] netlink_rcv_skb+0x2a4/0x4a0 [ 834.270233][T25415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 834.270266][T25415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.270306][T25415] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.270331][T25415] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.270362][T25415] netlink_unicast+0x7bd/0x940 [ 834.270416][T25415] netlink_sendmsg+0x813/0xb40 [ 834.270452][T25415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.270485][T25415] ? apparmor_socket_sendmsg+0x98/0x360 [ 834.270515][T25415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.270539][T25415] sock_sendmsg_nosec+0x14e/0x190 [ 834.270566][T25415] ____sys_sendmsg+0x54e/0x850 [ 834.270604][T25415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.270647][T25415] ? import_iovec+0x73/0xa0 [ 834.270680][T25415] ___sys_sendmsg+0x2a5/0x360 [ 834.270710][T25415] ? __lock_acquire+0x747/0x2de0 [ 834.270738][T25415] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.270776][T25415] ? kstrtouint+0x6e/0xe0 [ 834.270830][T25415] ? __fget_files+0x2a/0x420 [ 834.270860][T25415] ? __fget_files+0x3a2/0x420 [ 834.270904][T25415] __sys_sendmmsg+0x273/0x4d0 [ 834.270943][T25415] ? __pfx___sys_sendmmsg+0x10/0x10 [ 834.270986][T25415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 834.271037][T25415] ? ksys_write+0x242/0x270 [ 834.271073][T25415] ? __pfx_ksys_write+0x10/0x10 [ 834.271116][T25415] __x64_sys_sendmmsg+0xa0/0xc0 [ 834.271150][T25415] do_syscall_64+0x166/0x520 [ 834.271182][T25415] ? trace_irq_disable+0x3b/0x140 [ 834.271206][T25415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.271231][T25415] ? clear_bhb_loop+0x70/0xc0 [ 834.271259][T25415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.271283][T25415] RIP: 0033:0x7f69d959e159 [ 834.271304][T25415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.271324][T25415] RSP: 002b:00007f69da3bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 834.271349][T25415] RAX: ffffffffffffffda RBX: 00007f69d9825fa0 RCX: 00007f69d959e159 [ 834.271366][T25415] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 834.271388][T25415] RBP: 00007f69da3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 834.271403][T25415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.271418][T25415] R13: 00007f69d9826038 R14: 00007f69d9825fa0 R15: 00007ffe19bc4c38 [ 834.271455][T25415] [ 834.734199][T25418] netlink: 'syz.1.4595': attribute type 1 has an invalid length. [ 834.785177][ T1163] IPVS: starting estimator thread 0... [ 834.871907][T25426] IPVS: using max 32 ests per chain, 76800 per kthread [ 835.219869][T25452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4608'. [ 835.305485][T25433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.357935][T25462] netlink: 'syz.2.4609': attribute type 16 has an invalid length. [ 835.357961][T25462] netlink: 'syz.2.4609': attribute type 17 has an invalid length. [ 835.396544][T25464] netlink: 136 bytes leftover after parsing attributes in process `syz.9.4606'. [ 835.408970][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4606'. [ 835.655858][T25462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.666115][T25462] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.692895][T25462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.033611][T25462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.038784][T25462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.095885][T25462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 836.095914][T25462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.143638][T25462] veth1_vlan: left promiscuous mode [ 836.149818][T25462] veth0_vlan: left promiscuous mode [ 836.159062][T25462] veth0_vlan: entered promiscuous mode [ 836.170557][T25462] veth1_vlan: entered promiscuous mode [ 836.188063][T25462] veth1_macvtap: left promiscuous mode [ 836.191128][T25462] veth0_macvtap: left promiscuous mode [ 836.201713][T25462] veth0_macvtap: entered promiscuous mode [ 836.210424][T25462] veth1_macvtap: entered promiscuous mode [ 836.238072][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.239502][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.243546][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.256695][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.269766][ T12] wlan1: Selected IBSS BSSID ee:1c:cd:15:15:60 based on configured SSID [ 836.303957][T25462] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 836.307648][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.307761][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.310164][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.310278][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.418357][T25433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.537179][ T685] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.537219][ T685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.581663][ T685] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.581704][ T685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.586051][ T1172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.586087][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.624238][ T685] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.624881][ T685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.654403][T25497] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 836.654447][T25497] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 836.654490][T25497] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 836.815556][T25433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.990474][T25506] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4619'. [ 837.009434][T25433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.211866][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.211915][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.252259][ T1010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.266629][ T1010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.338721][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4624'. [ 837.370125][T25519] FAULT_INJECTION: forcing a failure. [ 837.370125][T25519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.370163][T25519] CPU: 1 UID: 0 PID: 25519 Comm: syz.3.4623 Not tainted syzkaller #0 PREEMPT(full) [ 837.370206][T25519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 837.370230][T25519] Call Trace: [ 837.370246][T25519] [ 837.370263][T25519] dump_stack_lvl+0xe8/0x150 [ 837.370303][T25519] should_fail_ex+0x410/0x560 [ 837.370336][T25519] _copy_to_user+0x31/0xb0 [ 837.370369][T25519] simple_read_from_buffer+0xe1/0x170 [ 837.370405][T25519] proc_fail_nth_read+0x1bb/0x230 [ 837.370425][T25519] ? common_file_perm+0x20e/0x2b0 [ 837.370455][T25519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.370485][T25519] ? rw_verify_area+0x24a/0x4c0 [ 837.370520][T25519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.370542][T25519] vfs_read+0x213/0xa80 [ 837.370579][T25519] ? __pfx___mutex_lock+0x10/0x10 [ 837.370613][T25519] ? __pfx_vfs_read+0x10/0x10 [ 837.370647][T25519] ? __fget_files+0x2a/0x420 [ 837.370680][T25519] ? __fget_files+0x3a2/0x420 [ 837.370710][T25519] ? __fget_files+0x2a/0x420 [ 837.370753][T25519] ksys_read+0x150/0x270 [ 837.370800][T25519] ? __pfx_ksys_read+0x10/0x10 [ 837.370848][T25519] do_syscall_64+0x166/0x520 [ 837.370880][T25519] ? trace_irq_disable+0x3b/0x140 [ 837.370904][T25519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.370928][T25519] ? clear_bhb_loop+0x70/0xc0 [ 837.370957][T25519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.370981][T25519] RIP: 0033:0x7f7c66b5e98e [ 837.371001][T25519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 837.371021][T25519] RSP: 002b:00007f7c679f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 837.371046][T25519] RAX: ffffffffffffffda RBX: 00007f7c679f56c0 RCX: 00007f7c66b5e98e [ 837.371064][T25519] RDX: 000000000000000f RSI: 00007f7c679f50a0 RDI: 0000000000000003 [ 837.371079][T25519] RBP: 00007f7c679f5090 R08: 0000000000000000 R09: 0000000000000000 [ 837.371094][T25519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.371108][T25519] R13: 00007f7c66e26038 R14: 00007f7c66e25fa0 R15: 00007ffdddd1a7b8 [ 837.371145][T25519] [ 838.656260][T25571] netlink: 'syz.9.4639': attribute type 21 has an invalid length. [ 838.656285][T25571] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4639'. [ 838.659037][T25571] netlink: 'syz.9.4639': attribute type 4 has an invalid length. [ 838.659057][T25571] netlink: 'syz.9.4639': attribute type 3 has an invalid length. [ 838.659072][T25571] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4639'. [ 838.685256][T25571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4639'. [ 838.921148][T25584] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 838.921174][T25584] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4640'. [ 838.921193][T25584] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 838.921209][T25584] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.4640'. [ 838.985035][T25572] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4638'. [ 839.392972][T25579] tipc: Resetting bearer [ 839.586659][T25605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4642'. [ 839.586688][T25605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4642'. [ 839.663952][T25575] tipc: Resetting bearer [ 839.667208][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4642'. [ 840.007107][T25613] netlink: 'syz.9.4645': attribute type 62 has an invalid length. [ 840.035589][T25621] syzkaller0: entered promiscuous mode [ 840.035613][T25621] syzkaller0: entered allmulticast mode [ 840.075549][T25615] tipc: Started in network mode [ 840.075583][T25615] tipc: Node identity ce82ba698f9d, cluster identity 4711 [ 840.075880][T25615] tipc: Enabled bearer , priority 0 [ 840.077924][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.078387][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.093466][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.104285][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.107092][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.112053][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 840.119954][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.120324][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.120785][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.154986][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.189230][T25615] tipc: Enabling of bearer rejected, already enabled [ 840.436112][T25632] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4649'. [ 840.624587][T25612] tipc: Resetting bearer [ 840.939696][T25612] tipc: Disabling bearer [ 842.543749][T25654] netlink: 'syz.3.4652': attribute type 5 has an invalid length. [ 842.548024][T25654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 842.597632][T25652] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 842.950824][T25676] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20003 [ 842.954785][T25676] netlink: 'syz.9.4662': attribute type 6 has an invalid length. [ 843.003382][T25678] netlink: 'syz.0.4663': attribute type 21 has an invalid length. [ 843.146322][T25684] netlink: 'syz.1.4665': attribute type 61 has an invalid length. [ 843.579093][T25698] bond5: entered promiscuous mode [ 843.579615][T25698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 843.643350][T25698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 843.647390][T25698] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 843.647420][T25698] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 843.685289][T25698] bond5: (slave ip6gre1): making interface the new active one [ 843.685317][T25698] ip6gre1: entered promiscuous mode [ 843.689243][T25698] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 843.730912][T25712] validate_nla: 1 callbacks suppressed [ 843.730936][T25712] netlink: 'syz.1.4675': attribute type 21 has an invalid length. [ 843.745766][T25712] __nla_validate_parse: 10 callbacks suppressed [ 843.745788][T25712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4675'. [ 844.269036][T25733] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 844.591063][T25741] FAULT_INJECTION: forcing a failure. [ 844.591063][T25741] name failslab, interval 1, probability 0, space 0, times 0 [ 844.591117][T25741] CPU: 0 UID: 0 PID: 25741 Comm: syz.0.4685 Not tainted syzkaller #0 PREEMPT(full) [ 844.591142][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 844.591156][T25741] Call Trace: [ 844.591166][T25741] [ 844.591175][T25741] dump_stack_lvl+0xe8/0x150 [ 844.591212][T25741] should_fail_ex+0x410/0x560 [ 844.591242][T25741] ? __alloc_skb+0x1db/0x7a0 [ 844.591269][T25741] should_failslab+0xa8/0x100 [ 844.591297][T25741] ? __alloc_skb+0x1db/0x7a0 [ 844.591321][T25741] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 844.591356][T25741] ? __alloc_skb+0x18d/0x7a0 [ 844.591383][T25741] ? __alloc_skb+0x1db/0x7a0 [ 844.591415][T25741] __alloc_skb+0x1db/0x7a0 [ 844.591447][T25741] netlink_ack+0x136/0xb30 [ 844.591466][T25741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 844.591503][T25741] ? __lock_acquire+0x747/0x2de0 [ 844.591558][T25741] netlink_rcv_skb+0x2a4/0x4a0 [ 844.591582][T25741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 844.591613][T25741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.591650][T25741] ? netlink_deliver_tap+0x2e/0x1b0 [ 844.591673][T25741] ? netlink_deliver_tap+0x2e/0x1b0 [ 844.591702][T25741] netlink_unicast+0x7bd/0x940 [ 844.591748][T25741] netlink_sendmsg+0x813/0xb40 [ 844.591782][T25741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.591815][T25741] ? apparmor_socket_sendmsg+0x18b/0x360 [ 844.591845][T25741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.591868][T25741] sock_sendmsg_nosec+0x14e/0x190 [ 844.591894][T25741] ____sys_sendmsg+0x54e/0x850 [ 844.591930][T25741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.591969][T25741] ? import_iovec+0x73/0xa0 [ 844.592003][T25741] ___sys_sendmsg+0x2a5/0x360 [ 844.592032][T25741] ? __lock_acquire+0x747/0x2de0 [ 844.592060][T25741] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.592128][T25741] ? __fget_files+0x2a/0x420 [ 844.592159][T25741] ? __fget_files+0x3a2/0x420 [ 844.592200][T25741] __x64_sys_sendmsg+0x1b1/0x290 [ 844.592234][T25741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.592287][T25741] do_syscall_64+0x166/0x520 [ 844.592317][T25741] ? trace_irq_disable+0x3b/0x140 [ 844.592339][T25741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.592363][T25741] ? clear_bhb_loop+0x70/0xc0 [ 844.592390][T25741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.592413][T25741] RIP: 0033:0x7fb4cd39e159 [ 844.592435][T25741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.592455][T25741] RSP: 002b:00007fb4cb5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.592488][T25741] RAX: ffffffffffffffda RBX: 00007fb4cd625fa0 RCX: 00007fb4cd39e159 [ 844.592505][T25741] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 844.592520][T25741] RBP: 00007fb4cb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 844.592536][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.592550][T25741] R13: 00007fb4cd626038 R14: 00007fb4cd625fa0 R15: 00007ffe515d9eb8 [ 844.592586][T25741] [ 845.063050][T25748] netlink: 'syz.0.4687': attribute type 21 has an invalid length. [ 845.063119][T25748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4687'. [ 845.289187][T25751] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4690'. [ 845.696959][T25771] FAULT_INJECTION: forcing a failure. [ 845.696959][T25771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.696994][T25771] CPU: 1 UID: 0 PID: 25771 Comm: syz.3.4696 Not tainted syzkaller #0 PREEMPT(full) [ 845.697019][T25771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 845.697033][T25771] Call Trace: [ 845.697043][T25771] [ 845.697052][T25771] dump_stack_lvl+0xe8/0x150 [ 845.697088][T25771] should_fail_ex+0x410/0x560 [ 845.697120][T25771] _copy_to_user+0x31/0xb0 [ 845.697152][T25771] simple_read_from_buffer+0xe1/0x170 [ 845.697191][T25771] proc_fail_nth_read+0x1bb/0x230 [ 845.697211][T25771] ? common_file_perm+0x20e/0x2b0 [ 845.697242][T25771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.697268][T25771] ? rw_verify_area+0x24a/0x4c0 [ 845.697299][T25771] ? tun_chr_write_iter+0x18a/0x200 [ 845.697413][T25771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.697434][T25771] vfs_read+0x213/0xa80 [ 845.697473][T25771] ? __pfx___mutex_lock+0x10/0x10 [ 845.697507][T25771] ? __pfx_vfs_read+0x10/0x10 [ 845.697541][T25771] ? __fget_files+0x2a/0x420 [ 845.697576][T25771] ? __fget_files+0x3a2/0x420 [ 845.697607][T25771] ? __fget_files+0x2a/0x420 [ 845.697648][T25771] ksys_read+0x150/0x270 [ 845.697686][T25771] ? __pfx_ksys_read+0x10/0x10 [ 845.697732][T25771] do_syscall_64+0x166/0x520 [ 845.697762][T25771] ? trace_irq_disable+0x3b/0x140 [ 845.697785][T25771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.697808][T25771] ? clear_bhb_loop+0x70/0xc0 [ 845.697835][T25771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.697858][T25771] RIP: 0033:0x7f7c66b5e98e [ 845.697895][T25771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 845.697914][T25771] RSP: 002b:00007f7c679f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.697938][T25771] RAX: ffffffffffffffda RBX: 00007f7c679f56c0 RCX: 00007f7c66b5e98e [ 845.697955][T25771] RDX: 000000000000000f RSI: 00007f7c679f50a0 RDI: 0000000000000006 [ 845.697970][T25771] RBP: 00007f7c679f5090 R08: 0000000000000000 R09: 0000000000000000 [ 845.697984][T25771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.697998][T25771] R13: 00007f7c66e26038 R14: 00007f7c66e25fa0 R15: 00007ffdddd1a7b8 [ 845.698035][T25771] [ 846.142093][T25779] netlink: 'syz.2.4699': attribute type 21 has an invalid length. [ 846.142268][T25779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4699'. [ 846.488933][T25791] netlink: 'syz.2.4704': attribute type 16 has an invalid length. [ 846.488961][T25791] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4704'. [ 846.578699][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4708'. [ 846.618366][T25810] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4706'. [ 846.622704][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 846.704626][T25801] veth3: entered allmulticast mode [ 846.776790][T25815] netlink: 2136 bytes leftover after parsing attributes in process `syz.3.4711'. [ 846.849650][T25802] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4707'. [ 846.907860][T25820] netlink: 'syz.2.4714': attribute type 21 has an invalid length. [ 847.089068][T25833] openvswitch: netlink: IPv4 tunnel dst address is zero [ 847.205621][T25845] netlink: 'syz.0.4720': attribute type 2 has an invalid length. [ 847.265950][T25838] netlink: 'syz.3.4718': attribute type 1 has an invalid length. [ 849.973895][T25825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.200770][T25871] __nla_validate_parse: 3 callbacks suppressed [ 850.200792][T25871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4725'. [ 850.287054][T25864] IPVS: Scheduler module ip_vs_mh not found [ 850.685572][T25897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4734'. [ 850.710257][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'. [ 851.029800][T25919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4740'. [ 851.155580][T25923] IPVS: nq: FWM 3 0x00000003 - no destination available [ 851.233048][T25923] nbd: nbd1 already in use [ 851.471425][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4746'. [ 851.516823][T25941] batman_adv: batadv0: Adding interface: syzkaller0 [ 851.516846][T25941] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.516883][T25941] batman_adv: batadv0: Interface activated: syzkaller0 [ 851.644633][T25938] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 851.734332][T25938] batman_adv: batadv0: Removing interface: syzkaller0 [ 852.055806][T25968] sctp: [Deprecated]: syz.0.4757 (pid 25968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.055806][T25968] Use struct sctp_sack_info instead [ 852.147906][T25975] 8021q: VLANs not supported on ip6gre0 [ 852.150433][T25975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4760'. [ 852.389829][T25983] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4762'. [ 852.390265][T25983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4762'. [ 852.663064][T26001] openvswitch: netlink: IP tunnel dst address not specified [ 853.764035][T26028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4775'. [ 853.815124][T26028] x_tables: duplicate underflow at hook 3 [ 854.123421][T26033] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.123596][T26033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.128620][T26033] team0: Port device bridge0 added [ 854.196411][ C0] Dead loop on virtual device lo (net 1128), fix it urgently! [ 854.441475][T26052] netlink: 120 bytes leftover after parsing attributes in process `syz.9.4782'. [ 854.717042][T26061] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 854.718291][T26057] netlink: 'syz.0.4785': attribute type 1 has an invalid length. [ 854.718312][T26057] netlink: 'syz.0.4785': attribute type 2 has an invalid length. [ 855.443693][T26103] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 855.927697][T26122] x_tables: duplicate underflow at hook 2 [ 857.727651][T26070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.981253][T26135] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 858.078781][T26135] 8021q: adding VLAN 0 to HW filter on device bond10 [ 858.110702][T26135] __nla_validate_parse: 3 callbacks suppressed [ 858.110725][T26135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4804'. [ 858.142263][T26134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4803'. [ 858.201274][T26139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 858.202045][T26139] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 858.215640][T26139] bond10: (slave gre1): Error -95 calling set_mac_address [ 858.258111][T26150] bond10 (unregistering): Released all slaves [ 858.377827][T26146] bond10 (unregistering): Released all slaves [ 858.608454][T26157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4810'. [ 858.691466][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4809'. [ 858.713513][T26160] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4809'. [ 859.198569][T26187] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4816'. [ 859.199444][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4816'. [ 859.263738][T26190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 859.492812][T26197] sctp: [Deprecated]: syz.1.4821 (pid 26197) Use of int in max_burst socket option. [ 859.492812][T26197] Use struct sctp_assoc_value instead [ 859.626060][T26202] lo: entered promiscuous mode [ 859.626481][T26202] tunl0: entered promiscuous mode [ 859.626869][T26202] gre0: entered promiscuous mode [ 859.652454][T26202] gretap0: entered promiscuous mode [ 859.677704][T26202] erspan0: entered promiscuous mode [ 859.678112][T26202] ip_vti0: entered promiscuous mode [ 859.678506][T26202] ip6_vti0: entered promiscuous mode [ 859.690866][T26202] sit0: entered promiscuous mode [ 859.692071][T26202] ip6tnl0: entered promiscuous mode [ 859.705662][T26202] ip6gre0: entered promiscuous mode [ 859.706180][T26202] syz_tun: entered promiscuous mode [ 859.722903][T26202] bridge0: entered promiscuous mode [ 859.723440][T26202] bond0: entered promiscuous mode [ 859.729114][T26202] team0: entered promiscuous mode [ 859.730069][T26202] dummy0: entered promiscuous mode [ 859.734011][T26202] nlmon0: entered promiscuous mode [ 859.746007][T26202] batadv0: entered promiscuous mode [ 859.748025][T26202] vxcan0: entered promiscuous mode [ 859.765188][T26202] vxcan1: entered promiscuous mode [ 859.765751][T26202] veth0: entered promiscuous mode [ 859.767930][T26202] veth1: entered promiscuous mode [ 859.787642][T26202] wg0: entered promiscuous mode [ 859.788070][T26202] wg1: entered promiscuous mode [ 859.788571][T26202] wg2: entered promiscuous mode [ 859.788983][T26202] veth0_to_bridge: entered promiscuous mode [ 859.789397][T26202] bridge_slave_0: entered promiscuous mode [ 859.789924][T26202] veth1_to_bridge: entered promiscuous mode [ 859.790360][T26202] bridge_slave_1: entered promiscuous mode [ 859.790891][T26202] veth0_to_bond: entered promiscuous mode [ 859.791331][T26202] bond_slave_0: entered promiscuous mode [ 859.847020][T26202] veth1_to_bond: entered promiscuous mode [ 859.847988][T26202] bond_slave_1: entered promiscuous mode [ 859.848407][T26202] veth0_to_team: entered promiscuous mode [ 859.848810][T26202] team_slave_0: entered promiscuous mode [ 859.849219][T26202] veth1_to_team: entered promiscuous mode [ 859.849626][T26202] team_slave_1: entered promiscuous mode [ 859.850038][T26202] veth0_to_batadv: entered promiscuous mode [ 859.850450][T26202] batadv_slave_0: entered promiscuous mode [ 859.850859][T26202] veth1_to_batadv: entered promiscuous mode [ 859.851271][T26202] batadv_slave_1: entered promiscuous mode [ 859.916179][T26202] xfrm0: entered promiscuous mode [ 859.918244][T26202] veth0_to_hsr: entered promiscuous mode [ 859.920972][T26202] hsr_slave_0: entered promiscuous mode [ 859.937853][T26202] veth1_to_hsr: entered promiscuous mode [ 859.938282][T26202] hsr_slave_1: entered promiscuous mode [ 859.940837][T26202] veth1_virt_wifi: entered promiscuous mode [ 859.951018][T26202] veth0_virt_wifi: entered promiscuous mode [ 860.001430][T26212] syzkaller0: entered promiscuous mode [ 860.001457][T26212] syzkaller0: entered allmulticast mode [ 860.026861][T26212] tipc: Enabling of bearer rejected, already enabled [ 860.124298][T26218] tipc: Enabling of bearer rejected, already enabled [ 860.247571][T26221] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4833'. [ 860.248061][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 860.306386][T26225] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4832'. [ 860.466602][T26238] sctp: [Deprecated]: syz.0.4837 (pid 26238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.466602][T26238] Use struct sctp_sack_info instead [ 860.467612][T26238] netlink: 'syz.0.4837': attribute type 2 has an invalid length. [ 860.471059][T26238] sctp: [Deprecated]: syz.0.4837 (pid 26238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.471059][T26238] Use struct sctp_sack_info instead [ 860.842826][T26260] pim6reg: entered allmulticast mode [ 861.061610][T26260] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 861.286707][T26287] netlink: 'syz.2.4856': attribute type 1 has an invalid length. [ 861.341379][T26287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.646903][T26257] pim6reg: left allmulticast mode [ 861.744852][T26311] ip6tnl3: entered allmulticast mode [ 861.750814][T26312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 862.104262][T26335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 862.170872][T26338] netlink: Unknown conntrack attr (0) [ 862.370720][T26337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 862.897299][T26360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.035993][T26367] pim6reg: entered allmulticast mode [ 863.076476][T26367] pim6reg: left allmulticast mode [ 863.120062][T26372] __nla_validate_parse: 8 callbacks suppressed [ 863.120084][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'. [ 863.520801][T26394] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4888'. [ 863.520842][T26394] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4888'. [ 863.540874][T26394] netlink: 'syz.9.4888': attribute type 1 has an invalid length. [ 863.540896][T26394] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4888'. [ 863.763690][T26402] lo: left promiscuous mode [ 863.764325][T26402] netlink: 'syz.1.4889': attribute type 2 has an invalid length. [ 863.768367][T26402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.977499][T26404] netlink: 'syz.2.4890': attribute type 2 has an invalid length. [ 864.014238][T26404] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 864.077494][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4890'. [ 864.350582][T26409] bond3: (slave geneve4): making interface the new active one [ 864.381431][T26409] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 864.395827][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 864.395892][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 864.395936][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 864.395976][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 865.219202][T26441] sctp: [Deprecated]: syz.2.4902 (pid 26441) Use of int in max_burst socket option deprecated. [ 865.219202][T26441] Use struct sctp_assoc_value instead [ 865.350612][T26441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4902'. [ 865.542116][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4905'. [ 865.544351][T26449] netlink: 136 bytes leftover after parsing attributes in process `syz.9.4904'. [ 865.544801][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4904'. [ 865.833479][T26457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 865.989204][T26464] netlink: 'syz.2.4911': attribute type 2 has an invalid length. [ 865.989526][T26464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.194086][T26451] 8021q: adding VLAN 0 to HW filter on device bond6 [ 866.331313][T26464] bond0: Error: Cannot enslave bond to itself. [ 867.494689][T26496] netlink: 'syz.9.4918': attribute type 2 has an invalid length. [ 867.494716][T26496] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4918'. [ 867.758838][T26507] syzkaller0: entered promiscuous mode [ 867.758862][T26507] syzkaller0: entered allmulticast mode [ 867.862616][T26507] ip_tables: iptables: counters copy to user failed while replacing table [ 868.302775][T26513] netlink: 'syz.3.4922': attribute type 3 has an invalid length. [ 870.192501][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 870.500396][T26518] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 870.550870][T26522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.569596][T26522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.591158][T26522] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 870.670459][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4929'. [ 870.671277][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 870.696268][T26522] bond0 (unregistering): Released all slaves [ 870.924700][T26541] openvswitch: netlink: Message has 8 unknown bytes. [ 871.543223][T26537] syzkaller0: left promiscuous mode [ 871.543254][T26537] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 872.392228][T26557] syzkaller0: entered promiscuous mode [ 872.392257][T26557] syzkaller0: entered allmulticast mode [ 872.566026][T26589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4936'. [ 872.879523][T26597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4938'. [ 872.978537][T26602] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4938'. [ 873.641111][T26597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.162567][T26620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4939'. [ 874.396802][T26624] netlink: 452 bytes leftover after parsing attributes in process `syz.3.4939'. [ 877.718623][T26620] team0: Port device team_slave_0 removed [ 877.787719][T26622] syzkaller1: entered promiscuous mode [ 877.787747][T26622] syzkaller1: entered allmulticast mode [ 877.922127][T26630] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4940'. [ 878.044040][T26635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4942'. [ 878.161368][T26635] batman_adv: batadv0: Adding interface: gretap1 [ 878.161391][T26635] batman_adv: batadv0: The MTU of interface gretap1 is too small (1466) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 878.175336][T26635] batman_adv: batadv0: Interface activated: gretap1 [ 878.836933][T26659] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4950'. [ 878.857255][T26659] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4950'. [ 879.496980][T26654] bridge0: port 3(wlan1) entered blocking state [ 879.497079][T26654] bridge0: port 3(wlan1) entered disabled state [ 879.497271][T26654] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 879.544066][T26654] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 879.546508][T26654] bridge0: port 3(wlan1) entered blocking state [ 879.546609][T26654] bridge0: port 3(wlan1) entered forwarding state [ 879.621193][T26655] bridge0: port 3(wlan1) entered disabled state [ 879.675386][T26655] mac80211_hwsim hwsim53 wlan1 (unregistering): left allmulticast mode [ 879.675422][T26655] mac80211_hwsim hwsim53 wlan1 (unregistering): left promiscuous mode [ 879.675666][T26655] bridge0: port 3(wlan1) entered disabled state [ 879.927125][T26649] Set syz0 is full, maxelem 0 reached [ 880.453654][T26686] netlink: 'syz.3.4954': attribute type 1 has an invalid length. [ 880.641803][T26685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4953'. [ 880.704709][T26686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.943904][T26692] bond0: (slave veth3): Enslaving as an active interface with a down link [ 881.020088][T26686] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 881.041167][T26686] bond0: (slave batadv1): making interface the new active one [ 881.056524][T26686] batadv1: entered promiscuous mode [ 881.058327][T26686] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 881.119591][T26704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4958'. [ 881.119752][T26704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4958'. [ 881.119773][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4958'. [ 881.186296][T26689] bond0 (unregistering): (slave veth3): Releasing active interface [ 881.205042][T26689] bond0 (unregistering): (slave batadv1): Releasing active interface [ 881.205076][T26689] batadv1: left promiscuous mode [ 881.249491][T26689] bond0 (unregistering): Released all slaves [ 881.372759][T26699] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4956'. [ 881.584637][T26697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.603404][T26697] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.889076][T26697] bond2: left promiscuous mode [ 881.909019][T26697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 882.010515][T26697] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 882.054692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.054830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.120987][T26719] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4962'. [ 882.496406][T26728] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 883.278968][T26750] netlink: 'syz.0.4975': attribute type 15 has an invalid length. [ 883.278993][T26750] __nla_validate_parse: 1 callbacks suppressed [ 883.279007][T26750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4975'. [ 883.682966][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'. [ 883.734262][T26763] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4978'. [ 883.783452][T26762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4979'. [ 883.821430][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.826098][T26767] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.110031][T26776] syzkaller0: entered promiscuous mode [ 884.110057][T26776] syzkaller0: entered allmulticast mode [ 884.240452][T26780] netlink: 136 bytes leftover after parsing attributes in process `syz.9.4983'. [ 884.269458][T26771] tipc: Started in network mode [ 884.269492][T26771] tipc: Node identity 5e750aca32d3, cluster identity 4711 [ 884.269759][T26771] tipc: Enabled bearer , priority 0 [ 884.293944][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4985'. [ 884.384090][T26770] tipc: Resetting bearer [ 884.578001][T26770] tipc: Disabling bearer [ 884.732722][T26789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4987'. [ 885.278427][T26813] syzkaller0: entered promiscuous mode [ 885.500214][T26820] netlink: 'syz.1.4993': attribute type 2 has an invalid length. [ 885.606685][T26822] netlink: 'syz.2.4994': attribute type 1 has an invalid length. [ 885.606712][T26822] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4994'. [ 886.003963][T26829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4996'. [ 886.050433][T26829] netlink: 'syz.2.4996': attribute type 1 has an invalid length. [ 886.103767][T26831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4996'. [ 886.449781][T26829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 888.310784][T26887] __nla_validate_parse: 5 callbacks suppressed [ 888.310809][T26887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5012'. [ 888.334816][T26887] netlink: 'syz.0.5012': attribute type 1 has an invalid length. [ 888.339131][T26887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5012'. [ 888.345691][T26890] netlink: 'syz.1.5010': attribute type 21 has an invalid length. [ 888.345715][T26890] IPv6: NLM_F_CREATE should be specified when creating new route [ 888.345977][T26890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.345989][T26890] IPv6: NLM_F_CREATE should be set when creating new route [ 888.346058][T26890] IPv6: NLM_F_CREATE should be set when creating new route [ 888.346083][T26890] IPv6: NLM_F_CREATE should be set when creating new route [ 888.356437][T26889] netlink: 'syz.1.5010': attribute type 21 has an invalid length. [ 888.356520][T26889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.616593][T26794] udevd[26794]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 889.071456][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5019'. [ 889.143111][T26911] bond10: entered promiscuous mode [ 889.148855][T26911] 8021q: adding VLAN 0 to HW filter on device bond10 [ 889.230592][T26920] vlan1: entered promiscuous mode [ 889.230629][T26920] bridge0: entered promiscuous mode [ 889.391449][T26924] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5021'. [ 889.398046][T26924] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5021'. [ 889.398072][T26924] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5021'. [ 889.399971][T26924] netlink: 'syz.9.5021': attribute type 1 has an invalid length. [ 889.639585][T26924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 889.913511][T26935] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 889.913549][T26935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.918700][T26935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5024'. [ 890.088695][T26938] tipc: Enabling of bearer rejected, failed to enable media [ 890.123846][T26938] syzkaller1: entered promiscuous mode [ 890.123873][T26938] syzkaller1: entered allmulticast mode [ 890.484192][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5028'. [ 890.705038][T26954] sctp: [Deprecated]: syz.2.5030 (pid 26954) Use of int in max_burst socket option. [ 890.705038][T26954] Use struct sctp_assoc_value instead [ 890.913233][T26954] netlink: 'syz.2.5030': attribute type 2 has an invalid length. [ 891.844747][T27000] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5041'. [ 891.845082][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5044'. [ 891.889086][T26997] veth1_macvtap: left promiscuous mode [ 891.991228][T27003] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 892.057342][T27002] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 892.057579][T27002] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 892.105352][T26999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 892.857747][T27026] ip6t_srh: unknown srh match flags 4000 [ 893.761216][T27068] __nla_validate_parse: 1 callbacks suppressed [ 893.761244][T27068] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5062'. [ 894.014263][T27075] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 894.014480][T27075] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 894.177866][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 894.260110][T27079] bond5: option lacp_active: invalid value (5) [ 894.280224][T27079] bond5 (unregistering): Released all slaves [ 894.528106][T27096] openvswitch: netlink: Invalid VLAN frame [ 894.546895][T27096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5069'. [ 894.768204][T27100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.842119][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'. [ 894.881445][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'. [ 895.538074][T27117] IPv6: addrconf: prefix option has invalid lifetime [ 896.014844][T27102] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 896.712408][T27142] netlink: 'syz.3.5081': attribute type 12 has an invalid length. [ 897.769871][T27162] tipc: Enabled bearer , priority 10 [ 899.020373][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 899.020400][T27193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5098'. [ 899.020428][T27193] netlink: 'syz.3.5098': attribute type 6 has an invalid length. [ 899.020443][T27193] netlink: 'syz.3.5098': attribute type 5 has an invalid length. [ 899.131812][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.131865][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.131905][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.141647][ T685] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.148830][T27192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5097'. [ 899.449122][T27205] tipc: Enabling of bearer rejected, already enabled [ 899.674863][T27218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 899.674892][T27218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 899.674911][T27218] netlink: 'syz.0.5103': attribute type 4 has an invalid length. [ 899.675198][T27215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 899.675219][T27215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 899.675235][T27215] netlink: 'syz.0.5103': attribute type 4 has an invalid length. [ 899.719663][T27219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'. [ 899.719765][T27218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'. [ 900.863836][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5115'. [ 900.889822][T27245] syzkaller1: entered promiscuous mode [ 900.889849][T27245] syzkaller1: entered allmulticast mode [ 901.053012][T27254] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 901.053561][T27254] netlink: 'syz.3.5118': attribute type 1 has an invalid length. [ 901.210243][T27256] tipc: Enabled bearer , priority 10 [ 901.268387][T27266] netlink: 'syz.2.5121': attribute type 11 has an invalid length. [ 901.369606][T27254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 901.536944][T27269] netlink: 'syz.9.5122': attribute type 1 has an invalid length. [ 902.321819][ T5733] tipc: Node number set to 1822821066 [ 902.385671][T27297] tipc: Enabling of bearer rejected, already enabled [ 902.536062][T27295] vlan3: entered allmulticast mode [ 902.536089][T27295] bridge3: entered allmulticast mode [ 902.934138][T27311] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 902.988502][T27311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 903.277106][T27325] netlink: 'syz.0.5142': attribute type 83 has an invalid length. [ 904.106767][T27353] x_tables: duplicate underflow at hook 1 [ 904.340452][T27345] tipc: Enabling of bearer rejected, already enabled [ 904.375658][T27353] sctp: [Deprecated]: syz.1.5148 (pid 27353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.375658][T27353] Use struct sctp_sack_info instead [ 904.739162][T27361] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 904.739193][T27361] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 904.821462][T27365] __nla_validate_parse: 4 callbacks suppressed [ 904.836152][T27365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5151'. [ 904.842199][T27369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5151'. [ 905.015775][T27366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 905.136662][T27367] macvlan3: entered promiscuous mode [ 905.136688][T27367] macvlan3: entered allmulticast mode [ 905.138164][T27367] bond12: entered promiscuous mode [ 905.140504][T27367] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 905.170476][T27367] bond12: left promiscuous mode [ 905.467139][T27384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5153'. [ 905.616932][T27391] ipt_ah: unknown flags FF [ 905.725568][T27396] tipc: Enabled bearer , priority 10 [ 905.979391][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5163'. [ 905.979421][T27410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.979442][T27410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.373640][T27410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.373666][T27410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.842171][ T7806] tipc: Node number set to 1092598377 [ 906.919045][T27428] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5167'. [ 906.963182][T27442] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 907.001879][T27442] bond13: entered promiscuous mode [ 907.002295][T27442] 8021q: adding VLAN 0 to HW filter on device bond13 [ 907.048644][T27442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5170'. [ 907.048968][T27442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5170'. [ 907.049003][T27442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5170'. [ 907.242628][T27446] bond13: (slave bridge4): making interface the new active one [ 907.242657][T27446] bridge4: entered promiscuous mode [ 907.250746][T27446] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 907.683735][T27459] tipc: Enabling of bearer rejected, already enabled [ 908.112291][T27474] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5180'. [ 908.144568][T27474] netlink: 'syz.3.5180': attribute type 1 has an invalid length. [ 908.208192][T27480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5180'. [ 908.242934][T27474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 908.405373][T27483] ip6gre1: entered promiscuous mode [ 908.407282][T27483] ip6gre1: entered allmulticast mode [ 908.639637][T27492] netlink: 'syz.0.5186': attribute type 10 has an invalid length. [ 908.655103][T27492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.660679][T27492] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 908.683582][T27492] team0: Port device netdevsim1 added [ 908.883866][T27492] netlink: 'syz.0.5186': attribute type 10 has an invalid length. [ 908.884392][T27492] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 908.929240][T27492] team0: Port device netdevsim1 removed [ 908.978140][T27492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.000900][T27492] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 909.018665][T27492] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 909.640772][T27511] tipc: Enabling of bearer rejected, already enabled [ 909.805777][T27518] tipc: Resetting bearer [ 909.995976][T27525] __nla_validate_parse: 1 callbacks suppressed [ 909.995998][T27525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5194'. [ 910.091856][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5194'. [ 910.091885][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5194'. [ 910.133054][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5194'. [ 910.696928][T27543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 910.739013][T27546] netlink: 'syz.3.5202': attribute type 9 has an invalid length. [ 910.835461][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5201'. [ 910.933923][T27561] netlink: 'syz.0.5204': attribute type 1 has an invalid length. [ 910.989883][T27568] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5204'. [ 910.990597][T27549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5201'. [ 911.087324][T27547] netlink: 360 bytes leftover after parsing attributes in process `syz.3.5202'. [ 911.116674][T27561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 911.146190][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f2f000: rx timeout, send abort [ 911.196501][T27571] netlink: 'syz.9.5205': attribute type 7 has an invalid length. [ 911.286875][T27571] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 911.640156][T27580] tipc: Enabling of bearer rejected, already enabled [ 911.646265][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f2f000: abort rx timeout. Force session deactivation [ 911.646697][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f2dc00: rx timeout, send abort [ 912.013033][T27586] netlink: 'syz.3.5209': attribute type 11 has an invalid length. [ 912.146780][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f2dc00: abort rx timeout. Force session deactivation [ 912.199207][T27586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5209'. [ 912.419204][T27587] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 913.035488][T27611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.201087][T27613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.633879][T27619] tipc: Enabling of bearer rejected, already enabled [ 913.880005][T27632] netlink: 'syz.3.5224': attribute type 1 has an invalid length. [ 913.936183][T27637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5224'. [ 913.989439][T27632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 914.268573][T27643] tipc: Resetting bearer [ 914.600184][T27655] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 914.630914][T27655] netlink: 'syz.2.5228': attribute type 12 has an invalid length. [ 914.630939][T27655] netlink: 'syz.2.5228': attribute type 29 has an invalid length. [ 914.654181][T27655] netlink: 'syz.2.5228': attribute type 4 has an invalid length. [ 915.258222][T27683] tipc: Enabling of bearer rejected, already enabled [ 915.375988][T27693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.738887][T27701] __nla_validate_parse: 6 callbacks suppressed [ 915.738913][T27701] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5240'. [ 916.272913][ C0] Dead loop on virtual device lo (net 1128), fix it urgently! [ 916.348115][T27695] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 917.991299][T27773] netlink: 'syz.3.5253': attribute type 58 has an invalid length. [ 917.991325][T27773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5253'. [ 919.196650][T27800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.374109][T27750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.634935][T27802] SET target dimension over the limit! [ 921.122273][T27821] netlink: 'syz.9.5265': attribute type 1 has an invalid length. [ 921.193013][T27825] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5265'. [ 921.223082][T27821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 921.705236][T27835] tun0: tun_chr_ioctl cmd 1074025675 [ 921.705264][T27835] tun0: persist enabled [ 921.726181][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726205][T27837] tun0: persist disabled [ 921.726376][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726392][T27837] tun0: persist disabled [ 921.726479][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726494][T27837] tun0: persist disabled [ 921.726580][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726595][T27837] tun0: persist disabled [ 921.726680][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726695][T27837] tun0: persist disabled [ 921.726820][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726836][T27837] tun0: persist disabled [ 921.726921][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.726936][T27837] tun0: persist disabled [ 921.727021][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.727037][T27837] tun0: persist disabled [ 921.727122][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.727137][T27837] tun0: persist disabled [ 921.727248][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.727263][T27837] tun0: persist disabled [ 921.885518][T27839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5269'. [ 921.904457][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.904477][T27837] tun0: persist disabled [ 921.966398][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966425][T27837] tun0: persist disabled [ 921.966536][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966553][T27837] tun0: persist disabled [ 921.966643][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966658][T27837] tun0: persist disabled [ 921.966754][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966769][T27837] tun0: persist disabled [ 921.966862][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966878][T27837] tun0: persist disabled [ 921.966965][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.966981][T27837] tun0: persist disabled [ 921.967069][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967085][T27837] tun0: persist disabled [ 921.967172][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967187][T27837] tun0: persist disabled [ 921.967275][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967291][T27837] tun0: persist disabled [ 921.967381][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967396][T27837] tun0: persist disabled [ 921.967528][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967544][T27837] tun0: persist disabled [ 921.967634][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967649][T27837] tun0: persist disabled [ 921.967776][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967792][T27837] tun0: persist disabled [ 921.967968][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.967984][T27837] tun0: persist disabled [ 921.968073][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968088][T27837] tun0: persist disabled [ 921.968176][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968191][T27837] tun0: persist disabled [ 921.968308][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968325][T27837] tun0: persist disabled [ 921.968413][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968428][T27837] tun0: persist disabled [ 921.968515][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968531][T27837] tun0: persist disabled [ 921.968644][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968660][T27837] tun0: persist disabled [ 921.968799][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968816][T27837] tun0: persist disabled [ 921.968905][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.968920][T27837] tun0: persist disabled [ 921.969000][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969015][T27837] tun0: persist disabled [ 921.969099][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969114][T27837] tun0: persist disabled [ 921.969224][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969238][T27837] tun0: persist disabled [ 921.969349][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969365][T27837] tun0: persist disabled [ 921.969452][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969467][T27837] tun0: persist disabled [ 921.969551][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969566][T27837] tun0: persist disabled [ 921.969680][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969695][T27837] tun0: persist disabled [ 921.969787][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969802][T27837] tun0: persist disabled [ 921.969887][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.969902][T27837] tun0: persist disabled [ 921.970220][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970235][T27837] tun0: persist disabled [ 921.970322][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970337][T27837] tun0: persist disabled [ 921.970421][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970436][T27837] tun0: persist disabled [ 921.970520][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970535][T27837] tun0: persist disabled [ 921.970626][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970641][T27837] tun0: persist disabled [ 921.970740][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970755][T27837] tun0: persist disabled [ 921.970849][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970863][T27837] tun0: persist disabled [ 921.970948][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.970963][T27837] tun0: persist disabled [ 921.971049][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.971064][T27837] tun0: persist disabled [ 921.971155][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.971170][T27837] tun0: persist disabled [ 921.971256][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.971271][T27837] tun0: persist disabled [ 921.971356][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 921.971370][T27837] tun0: persist disabled [ 921.971456][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.440414][T27837] tun0: persist disabled [ 922.440560][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.440624][T27837] tun0: persist disabled [ 922.440720][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.440736][T27837] tun0: persist disabled [ 922.440834][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.440850][T27837] tun0: persist disabled [ 922.440944][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.440960][T27837] tun0: persist disabled [ 922.441050][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.441066][T27837] tun0: persist disabled [ 922.441156][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.441172][T27837] tun0: persist disabled [ 922.441262][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.441277][T27837] tun0: persist disabled [ 922.441366][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.441380][T27837] tun0: persist disabled [ 922.605564][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.605589][T27837] tun0: persist disabled [ 922.605701][T27837] tun0: tun_chr_ioctl cmd 1074025675 [ 922.605717][T27837] tun0: persist disabled [ 922.632947][T27844] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5270'. [ 923.033900][T27856] tipc: Enabling of bearer rejected, already enabled [ 923.435734][T27863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.551258][T27868] tipc: Enabling of bearer rejected, failed to enable media [ 923.572652][T27868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5274'. [ 924.389673][T27899] tipc: Enabling of bearer rejected, already enabled [ 924.471055][T27897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5283'. [ 924.471087][T27897] block nbd2: Unsupported socket: should be TCP or UNIX. [ 925.138708][T27915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 925.166408][T27892] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 925.189376][T27921] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5291'. [ 925.594277][T27932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.449220][T27927] tipc: Resetting bearer [ 926.502320][T27927] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.502550][T27927] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.716939][T27931] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 928.744387][T27931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.748899][T27931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 928.782783][ T60] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.782820][ T60] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.133124][ T60] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.133170][ T60] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.138539][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5301'. [ 929.159319][T27778] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.159421][T27778] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.159651][T27778] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.182860][T27778] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.527299][T27974] netlink: 'syz.9.5306': attribute type 1 has an invalid length. [ 929.803706][T27974] 8021q: adding VLAN 0 to HW filter on device bond8 [ 929.882605][T27981] macvlan2: entered promiscuous mode [ 929.882815][T27981] macvlan2: entered allmulticast mode [ 929.915772][T27986] FAULT_INJECTION: forcing a failure. [ 929.915772][T27986] name failslab, interval 1, probability 0, space 0, times 0 [ 929.915809][T27986] CPU: 0 UID: 0 PID: 27986 Comm: syz.0.5309 Not tainted syzkaller #0 PREEMPT(full) [ 929.915836][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 929.915853][T27986] Call Trace: [ 929.915862][T27986] [ 929.915873][T27986] dump_stack_lvl+0xe8/0x150 [ 929.915920][T27986] should_fail_ex+0x410/0x560 [ 929.915955][T27986] should_failslab+0xa8/0x100 [ 929.915989][T27986] ? security_file_alloc+0x34/0x310 [ 929.916104][T27986] kmem_cache_alloc_noprof+0xa1/0x600 [ 929.916137][T27986] ? rcu_is_watching+0x16/0xb0 [ 929.916166][T27986] ? security_file_alloc+0x34/0x310 [ 929.916198][T27986] security_file_alloc+0x34/0x310 [ 929.916225][T27986] init_file+0x90/0x2b0 [ 929.916255][T27986] alloc_empty_file+0x74/0x1d0 [ 929.916285][T27986] alloc_file_pseudo+0x115/0x1e0 [ 929.916317][T27986] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 929.916345][T27986] ? security_inode_alloc+0xd5/0x310 [ 929.916407][T27986] ? inode_init_always_gfp+0x994/0xd30 [ 929.916444][T27986] sock_alloc_file+0xb8/0x2e0 [ 929.916472][T27986] do_accept+0x3a0/0x750 [ 929.916505][T27986] ? __pfx_do_accept+0x10/0x10 [ 929.916555][T27986] __sys_accept4+0x139/0x230 [ 929.916585][T27986] ? __pfx___sys_accept4+0x10/0x10 [ 929.916612][T27986] ? __pfx_ksys_write+0x10/0x10 [ 929.916656][T27986] __x64_sys_accept+0x7d/0x90 [ 929.916684][T27986] do_syscall_64+0x166/0x520 [ 929.916716][T27986] ? trace_irq_disable+0x3b/0x140 [ 929.916739][T27986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.916763][T27986] ? clear_bhb_loop+0x70/0xc0 [ 929.916791][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.916814][T27986] RIP: 0033:0x7fb4cd39e159 [ 929.916836][T27986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.916856][T27986] RSP: 002b:00007fb4cb5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 929.916880][T27986] RAX: ffffffffffffffda RBX: 00007fb4cd625fa0 RCX: 00007fb4cd39e159 [ 929.916897][T27986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 929.916917][T27986] RBP: 00007fb4cb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 929.916932][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.916945][T27986] R13: 00007fb4cd626038 R14: 00007fb4cd625fa0 R15: 00007ffe515d9eb8 [ 929.916982][T27986] [ 931.160137][T28015] FAULT_INJECTION: forcing a failure. [ 931.160137][T28015] name failslab, interval 1, probability 0, space 0, times 0 [ 931.160175][T28015] CPU: 0 UID: 0 PID: 28015 Comm: syz.9.5317 Not tainted syzkaller #0 PREEMPT(full) [ 931.160201][T28015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 931.160215][T28015] Call Trace: [ 931.160224][T28015] [ 931.160234][T28015] dump_stack_lvl+0xe8/0x150 [ 931.160270][T28015] should_fail_ex+0x410/0x560 [ 931.160300][T28015] should_failslab+0xa8/0x100 [ 931.160330][T28015] __kvmalloc_node_noprof+0x176/0x820 [ 931.160356][T28015] ? security_capable+0x7e/0x2c0 [ 931.160385][T28015] ? bpf_check+0x165e/0x2ef0 [ 931.160408][T28015] ? bpf_check+0x165e/0x2ef0 [ 931.160440][T28015] bpf_check+0x165e/0x2ef0 [ 931.160484][T28015] ? __pfx_bpf_check+0x10/0x10 [ 931.160512][T28015] ? bpf_obj_name_cpy+0x194/0x1e0 [ 931.160547][T28015] bpf_prog_load+0x14d6/0x1c20 [ 931.160585][T28015] ? __pfx_bpf_prog_load+0x10/0x10 [ 931.160637][T28015] __sys_bpf+0xd0d/0xd90 [ 931.160669][T28015] ? __pfx___sys_bpf+0x10/0x10 [ 931.160706][T28015] ? __fget_files+0x2a/0x420 [ 931.160756][T28015] ? ksys_write+0x242/0x270 [ 931.160804][T28015] ? __pfx_ksys_write+0x10/0x10 [ 931.160840][T28015] __x64_sys_bpf+0xba/0xd0 [ 931.160870][T28015] do_syscall_64+0x166/0x520 [ 931.160902][T28015] ? trace_irq_disable+0x3b/0x140 [ 931.160924][T28015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.160946][T28015] ? clear_bhb_loop+0x70/0xc0 [ 931.160972][T28015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.160998][T28015] RIP: 0033:0x7f753ad9e159 [ 931.161017][T28015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.161036][T28015] RSP: 002b:00007f753bca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 931.161058][T28015] RAX: ffffffffffffffda RBX: 00007f753b025fa0 RCX: 00007f753ad9e159 [ 931.161075][T28015] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 931.161090][T28015] RBP: 00007f753bca6090 R08: 0000000000000000 R09: 0000000000000000 [ 931.161103][T28015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.161116][T28015] R13: 00007f753b026038 R14: 00007f753b025fa0 R15: 00007ffea35ee6b8 [ 931.161150][T28015] [ 931.243643][T28007] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5310'. [ 931.243702][T28007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 932.117762][T28033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.183918][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5322'. [ 932.393017][T28048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.395895][T28046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.395915][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.395929][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.395949][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.396801][T28046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.396821][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.396836][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.396855][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.397277][T28046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5327'. [ 932.397309][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.397802][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.398651][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.399308][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.399772][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.400157][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 932.445534][T28046] netlink: 'syz.0.5327': attribute type 3 has an invalid length. [ 933.740364][T28075] veth3: left allmulticast mode [ 933.740852][T28075] ip6gre1: left promiscuous mode [ 933.740869][T28075] ip6gre1: left allmulticast mode [ 933.788939][T28075] netlink: zone id is out of range [ 933.788974][T28075] netlink: zone id is out of range [ 933.788984][T28075] netlink: zone id is out of range [ 933.788993][T28075] netlink: zone id is out of range [ 933.789003][T28075] netlink: zone id is out of range [ 933.789013][T28075] netlink: zone id is out of range [ 933.789026][T28075] netlink: zone id is out of range [ 933.789035][T28075] netlink: zone id is out of range [ 933.789045][T28075] netlink: zone id is out of range [ 933.789054][T28075] netlink: zone id is out of range [ 934.569667][T28094] validate_nla: 58 callbacks suppressed [ 934.569689][T28094] netlink: 'syz.1.5344': attribute type 16 has an invalid length. [ 934.621832][T28102] __nla_validate_parse: 189 callbacks suppressed [ 934.621853][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5345'. [ 934.707960][T28091] bond9: entered promiscuous mode [ 934.708465][T28091] 8021q: adding VLAN 0 to HW filter on device bond9 [ 934.771342][T28102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 934.788694][T28102] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 934.788721][T28102] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 934.851373][T28102] bond9: (slave wireguard0): making interface the new active one [ 934.851402][T28102] wireguard0: entered promiscuous mode [ 934.874432][T28102] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 934.976693][T28110] veth0_vlan: left promiscuous mode [ 935.040442][T28114] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5349'. [ 935.344955][T28117] netlink: 'syz.1.5350': attribute type 3 has an invalid length. [ 935.699507][T28134] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 936.306791][T28141] netlink: 660 bytes leftover after parsing attributes in process `syz.9.5356'. [ 936.307613][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5356'. [ 936.307673][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5356'. [ 936.754516][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.843738][T28143] vxcan2: entered allmulticast mode [ 937.056130][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5362'. [ 937.079261][T28166] netlink: 'syz.9.5363': attribute type 2 has an invalid length. [ 937.079285][T28166] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5363'. [ 937.968143][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5375'. [ 938.083875][T28195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 938.837776][ T4934] Bluetooth: hci7: command 0x0405 tx timeout [ 939.311063][T28223] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 939.361074][T28225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5385'. [ 939.384875][T28229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5387'. [ 939.458761][T28223] 8021q: adding VLAN 0 to HW filter on device bond10 [ 939.503971][T28225] net_ratelimit: 493 callbacks suppressed [ 939.503994][T28225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.540700][T28237] FAULT_INJECTION: forcing a failure. [ 939.540700][T28237] name failslab, interval 1, probability 0, space 0, times 0 [ 939.540736][T28237] CPU: 0 UID: 0 PID: 28237 Comm: syz.9.5390 Not tainted syzkaller #0 PREEMPT(full) [ 939.540764][T28237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 939.540779][T28237] Call Trace: [ 939.540789][T28237] [ 939.540800][T28237] dump_stack_lvl+0xe8/0x150 [ 939.540839][T28237] should_fail_ex+0x410/0x560 [ 939.540872][T28237] ? __alloc_skb+0x1db/0x7a0 [ 939.540902][T28237] should_failslab+0xa8/0x100 [ 939.540933][T28237] ? __alloc_skb+0x1db/0x7a0 [ 939.540959][T28237] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 939.540998][T28237] ? __alloc_skb+0x18d/0x7a0 [ 939.541025][T28237] ? __alloc_skb+0x1db/0x7a0 [ 939.541068][T28237] __alloc_skb+0x1db/0x7a0 [ 939.541103][T28237] netlink_sendmsg+0x5d4/0xb40 [ 939.541139][T28237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.541174][T28237] ? apparmor_socket_sendmsg+0x98/0x360 [ 939.541205][T28237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.541230][T28237] sock_sendmsg_nosec+0x14e/0x190 [ 939.541258][T28237] ____sys_sendmsg+0x54e/0x850 [ 939.541296][T28237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.541340][T28237] ? import_iovec+0x73/0xa0 [ 939.541375][T28237] ___sys_sendmsg+0x2a5/0x360 [ 939.541405][T28237] ? __lock_acquire+0x747/0x2de0 [ 939.541436][T28237] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.541509][T28237] ? __fget_files+0x2a/0x420 [ 939.541543][T28237] ? __fget_files+0x3a2/0x420 [ 939.541586][T28237] __x64_sys_sendmsg+0x1b1/0x290 [ 939.541622][T28237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.541675][T28237] do_syscall_64+0x166/0x520 [ 939.541707][T28237] ? trace_irq_disable+0x3b/0x140 [ 939.541731][T28237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.541754][T28237] ? clear_bhb_loop+0x70/0xc0 [ 939.541781][T28237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.541805][T28237] RIP: 0033:0x7f753ad9e159 [ 939.541827][T28237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.541848][T28237] RSP: 002b:00007f753bca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.541873][T28237] RAX: ffffffffffffffda RBX: 00007f753b025fa0 RCX: 00007f753ad9e159 [ 939.541891][T28237] RDX: 0000000004041080 RSI: 00002000000001c0 RDI: 0000000000000008 [ 939.541907][T28237] RBP: 00007f753bca6090 R08: 0000000000000000 R09: 0000000000000000 [ 939.541922][T28237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.541937][T28237] R13: 00007f753b026038 R14: 00007f753b025fa0 R15: 00007ffea35ee6b8 [ 939.541972][T28237] [ 939.819368][T28238] __nla_validate_parse: 1 callbacks suppressed [ 939.819391][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 939.819408][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 939.819436][T28238] netlink: 'syz.3.5389': attribute type 11 has an invalid length. [ 939.819453][T28238] netlink: 'syz.3.5389': attribute type 13 has an invalid length. [ 939.820981][T28238] ipt_REJECT: ECHOREPLY no longer supported. [ 940.761376][T28263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.814490][T28266] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 942.184650][T28288] netlink: 'syz.0.5402': attribute type 1 has an invalid length. [ 942.210001][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 943.013458][T28314] tipc: Enabled bearer , priority 0 [ 943.406352][T28327] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5416'. [ 943.531719][T28330] tipc: Can't bind to reserved service type 2 [ 943.627426][T28338] ip_tables: iptables: counters copy to user failed while replacing table [ 944.137788][T28354] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 944.140317][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 944.150062][T28354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 944.178566][T28358] netlink: 'syz.1.5422': attribute type 10 has an invalid length. [ 944.180295][T28358] dummy0: left promiscuous mode [ 944.230397][T28361] netlink: 'syz.1.5422': attribute type 10 has an invalid length. [ 944.355364][T28358] team0: Port device dummy0 added [ 944.399133][T28358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5422'. [ 944.478709][T28361] team0: Port device dummy0 removed [ 944.663880][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 945.549704][T28386] FAULT_INJECTION: forcing a failure. [ 945.549704][T28386] name failslab, interval 1, probability 0, space 0, times 0 [ 945.549742][T28386] CPU: 0 UID: 0 PID: 28386 Comm: syz.1.5433 Not tainted syzkaller #0 PREEMPT(full) [ 945.549768][T28386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.549783][T28386] Call Trace: [ 945.549793][T28386] [ 945.549803][T28386] dump_stack_lvl+0xe8/0x150 [ 945.549844][T28386] should_fail_ex+0x410/0x560 [ 945.549879][T28386] should_failslab+0xa8/0x100 [ 945.549909][T28386] ? skb_clone+0x212/0x3a0 [ 945.549942][T28386] kmem_cache_alloc_noprof+0xa1/0x600 [ 945.549982][T28386] ? skb_clone+0x212/0x3a0 [ 945.550021][T28386] skb_clone+0x212/0x3a0 [ 945.550060][T28386] __netlink_deliver_tap+0x355/0x6e0 [ 945.550098][T28386] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.550124][T28386] netlink_deliver_tap+0x19c/0x1b0 [ 945.550151][T28386] netlink_unicast+0x781/0x940 [ 945.550199][T28386] netlink_sendmsg+0x813/0xb40 [ 945.550235][T28386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.550269][T28386] ? apparmor_socket_sendmsg+0x98/0x360 [ 945.550302][T28386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.550325][T28386] sock_sendmsg_nosec+0x14e/0x190 [ 945.550354][T28386] ____sys_sendmsg+0x54e/0x850 [ 945.550393][T28386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.550436][T28386] ? import_iovec+0x73/0xa0 [ 945.550470][T28386] ___sys_sendmsg+0x2a5/0x360 [ 945.550501][T28386] ? __lock_acquire+0x747/0x2de0 [ 945.550531][T28386] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.550610][T28386] ? __fget_files+0x2a/0x420 [ 945.550642][T28386] ? __fget_files+0x3a2/0x420 [ 945.550687][T28386] __x64_sys_sendmsg+0x1b1/0x290 [ 945.550723][T28386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.550780][T28386] do_syscall_64+0x166/0x520 [ 945.550814][T28386] ? trace_irq_disable+0x3b/0x140 [ 945.550839][T28386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.550863][T28386] ? clear_bhb_loop+0x70/0xc0 [ 945.550893][T28386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.550917][T28386] RIP: 0033:0x7f6509d9e159 [ 945.550939][T28386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.550960][T28386] RSP: 002b:00007f650ac62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.550986][T28386] RAX: ffffffffffffffda RBX: 00007f650a026270 RCX: 00007f6509d9e159 [ 945.551003][T28386] RDX: 0000000004041080 RSI: 00002000000001c0 RDI: 0000000000000008 [ 945.551020][T28386] RBP: 00007f650ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 945.551035][T28386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.551050][T28386] R13: 00007f650a026308 R14: 00007f650a026270 R15: 00007ffeda196738 [ 945.551087][T28386] [ 948.505151][T28373] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 948.940865][T28402] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 949.186929][T28403] netlink: 'syz.0.5437': attribute type 9 has an invalid length. [ 949.186957][T28403] netlink: 'syz.0.5437': attribute type 6 has an invalid length. [ 949.186974][T28403] netlink: 'syz.0.5437': attribute type 7 has an invalid length. [ 949.186991][T28403] netlink: 'syz.0.5437': attribute type 8 has an invalid length. [ 949.337277][T28407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5438'. [ 949.942411][T28419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5443'. [ 951.971400][T28419] tipc: Resetting bearer [ 952.200400][T28431] netlink: 'syz.3.5445': attribute type 1 has an invalid length. [ 952.200429][T28431] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5445'. [ 953.115633][T28457] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5455'. [ 953.657653][T28461] bridge0: port 3(syz_tun) entered disabled state [ 953.896104][T28461] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.930800][T28461] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.223857][T28509] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5468'. [ 955.223886][T28509] nbd: illegal input index 65508 [ 955.428515][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5471'. [ 955.691438][T28517] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 956.048369][T28527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5472'. [ 956.301130][T28531] wg0: entered allmulticast mode [ 957.013944][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5478'. [ 957.057752][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5478'. [ 957.229128][T28553] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 957.229183][T28553] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 957.270145][T28553] tipc: Enabled bearer , priority 0 [ 957.542015][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5480'. [ 957.660974][T28570] xt_hashlimit: size too large, truncated to 1048576 [ 957.747958][T28564] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 957.827269][T28575] xt_hashlimit: size too large, truncated to 1048576 [ 957.856123][T28564] bond6 (unregistering): Released all slaves [ 958.096098][ T12] tipc: Resetting bearer [ 960.049167][T28643] netlink: 'syz.0.5503': attribute type 4 has an invalid length. [ 960.099350][T28641] netlink: 'syz.9.5504': attribute type 39 has an invalid length. [ 960.800024][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.181292][T28701] batadv_slave_1: entered promiscuous mode [ 961.235569][T28699] batadv_slave_1: left promiscuous mode [ 961.474355][T28710] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5519'. [ 961.573433][T28712] bond6: entered promiscuous mode [ 961.593531][T28712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 962.634605][T28755] x_tables: ip_tables: osf match: only valid for protocol 6 [ 963.139435][T28775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5540'. [ 963.190770][T28777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5540'. [ 963.190939][T28779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5540'. [ 964.160392][T28803] tipc: Resetting bearer [ 964.539691][T28820] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20002 [ 964.865790][T28841] ip_tables: iptables: counters copy to user failed while replacing table [ 965.118554][T28838] lo: entered allmulticast mode [ 965.148751][T28841] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5555'. [ 965.370534][T28836] lo: left allmulticast mode [ 965.725410][T28689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.725435][T28689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.953391][T28889] netlink: 'syz.1.5571': attribute type 11 has an invalid length. [ 968.132063][T28913] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 968.132948][T28915] FAULT_INJECTION: forcing a failure. [ 968.132948][T28915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.132983][T28915] CPU: 1 UID: 0 PID: 28915 Comm: syz.9.5580 Not tainted syzkaller #0 PREEMPT(full) [ 968.133022][T28915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 968.133037][T28915] Call Trace: [ 968.133047][T28915] [ 968.133057][T28915] dump_stack_lvl+0xe8/0x150 [ 968.133094][T28915] should_fail_ex+0x410/0x560 [ 968.133127][T28915] _copy_from_user+0x2d/0xb0 [ 968.133158][T28915] do_sock_getsockopt+0x1fa/0x640 [ 968.133196][T28915] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 968.133242][T28915] ? __fget_files+0x2a/0x420 [ 968.133272][T28915] ? __fget_files+0x3a2/0x420 [ 968.133302][T28915] ? __fget_files+0x2a/0x420 [ 968.133341][T28915] __x64_sys_getsockopt+0x1a4/0x240 [ 968.133380][T28915] do_syscall_64+0x166/0x520 [ 968.133413][T28915] ? trace_irq_disable+0x3b/0x140 [ 968.133437][T28915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.133460][T28915] ? clear_bhb_loop+0x70/0xc0 [ 968.133488][T28915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.133512][T28915] RIP: 0033:0x7f753ad9e159 [ 968.133541][T28915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.133561][T28915] RSP: 002b:00007f753bca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 968.133586][T28915] RAX: ffffffffffffffda RBX: 00007f753b025fa0 RCX: 00007f753ad9e159 [ 968.133603][T28915] RDX: 0000000000000026 RSI: 0000000000000001 RDI: 0000000000000004 [ 968.133618][T28915] RBP: 00007f753bca6090 R08: 0000200000000000 R09: 0000000000000000 [ 968.133634][T28915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.133648][T28915] R13: 00007f753b026038 R14: 00007f753b025fa0 R15: 00007ffea35ee6b8 [ 968.133684][T28915] [ 968.287211][ T4934] Bluetooth: hci7: command 0x0405 tx timeout [ 968.398925][T28919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5579'. [ 968.546402][T28913] 8021q: adding VLAN 0 to HW filter on device bond11 [ 970.083316][T28961] FAULT_INJECTION: forcing a failure. [ 970.083316][T28961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.083353][T28961] CPU: 1 UID: 0 PID: 28961 Comm: syz.3.5593 Not tainted syzkaller #0 PREEMPT(full) [ 970.083380][T28961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 970.083393][T28961] Call Trace: [ 970.083402][T28961] [ 970.083412][T28961] dump_stack_lvl+0xe8/0x150 [ 970.083449][T28961] should_fail_ex+0x410/0x560 [ 970.083482][T28961] _copy_from_user+0x2d/0xb0 [ 970.083513][T28961] sk_getsockopt+0x1d4/0x28b0 [ 970.083554][T28961] ? __pfx_sk_getsockopt+0x10/0x10 [ 970.083593][T28961] ? do_user_addr_fault+0xc4c/0x1340 [ 970.083636][T28961] ? irqentry_exit+0x218/0x910 [ 970.083670][T28961] ? lockdep_hardirqs_on+0x7b/0x110 [ 970.083702][T28961] ? irqentry_exit+0x218/0x910 [ 970.083734][T28961] ? trace_irq_disable+0x3b/0x140 [ 970.083785][T28961] ? rep_movs_alternative+0xf/0xa0 [ 970.083816][T28961] do_sock_getsockopt+0x2b7/0x640 [ 970.083864][T28961] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 970.083911][T28961] ? __fget_files+0x2a/0x420 [ 970.083942][T28961] ? __fget_files+0x3a2/0x420 [ 970.083973][T28961] ? __fget_files+0x2a/0x420 [ 970.084013][T28961] __x64_sys_getsockopt+0x1a4/0x240 [ 970.084055][T28961] do_syscall_64+0x166/0x520 [ 970.084087][T28961] ? trace_irq_disable+0x3b/0x140 [ 970.084109][T28961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.084134][T28961] ? clear_bhb_loop+0x70/0xc0 [ 970.084162][T28961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.084186][T28961] RIP: 0033:0x7f7c66b9e159 [ 970.084207][T28961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.084228][T28961] RSP: 002b:00007f7c679f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 970.084253][T28961] RAX: ffffffffffffffda RBX: 00007f7c66e25fa0 RCX: 00007f7c66b9e159 [ 970.084270][T28961] RDX: 0000000000000026 RSI: 0000000000000001 RDI: 0000000000000004 [ 970.084285][T28961] RBP: 00007f7c679f5090 R08: 0000200000000000 R09: 0000000000000000 [ 970.084301][T28961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.084315][T28961] R13: 00007f7c66e26038 R14: 00007f7c66e25fa0 R15: 00007ffdddd1a7b8 [ 970.084369][T28961] [ 970.695565][T28969] netlink: 'syz.2.5597': attribute type 1 has an invalid length. [ 970.749660][T28973] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5597'. [ 970.850231][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5598'. [ 970.918333][T28969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 971.495249][T28989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5600'. [ 972.263138][T29008] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5604'. [ 972.377915][T29014] netlink: 'syz.9.5609': attribute type 2 has an invalid length. [ 972.377943][T29014] netlink: 'syz.9.5609': attribute type 3 has an invalid length. [ 972.377959][T29014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5609'. [ 972.666912][T29025] netlink: 'syz.2.5611': attribute type 1 has an invalid length. [ 972.746957][T29025] 8021q: adding VLAN 0 to HW filter on device bond8 [ 972.865254][T29015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 972.930705][T29024] bond8: (slave veth7): Enslaving as an active interface with a down link [ 973.535473][T29046] FAULT_INJECTION: forcing a failure. [ 973.535473][T29046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.535509][T29046] CPU: 0 UID: 0 PID: 29046 Comm: syz.1.5616 Not tainted syzkaller #0 PREEMPT(full) [ 973.535535][T29046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 973.535550][T29046] Call Trace: [ 973.535559][T29046] [ 973.535569][T29046] dump_stack_lvl+0xe8/0x150 [ 973.535605][T29046] should_fail_ex+0x410/0x560 [ 973.535638][T29046] _copy_from_user+0x2d/0xb0 [ 973.535670][T29046] ___sys_sendmsg+0x1c6/0x360 [ 973.535709][T29046] ? __lock_acquire+0x747/0x2de0 [ 973.535738][T29046] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.535811][T29046] ? __fget_files+0x2a/0x420 [ 973.535843][T29046] ? __fget_files+0x3a2/0x420 [ 973.535885][T29046] __x64_sys_sendmsg+0x1b1/0x290 [ 973.535920][T29046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 973.535975][T29046] do_syscall_64+0x166/0x520 [ 973.536007][T29046] ? trace_irq_disable+0x3b/0x140 [ 973.536030][T29046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.536054][T29046] ? clear_bhb_loop+0x70/0xc0 [ 973.536082][T29046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.536106][T29046] RIP: 0033:0x7f6509d9e159 [ 973.536127][T29046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.536147][T29046] RSP: 002b:00007f650acc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.536171][T29046] RAX: ffffffffffffffda RBX: 00007f650a025fa0 RCX: 00007f6509d9e159 [ 973.536189][T29046] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 973.536204][T29046] RBP: 00007f650acc5090 R08: 0000000000000000 R09: 0000000000000000 [ 973.536219][T29046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.536233][T29046] R13: 00007f650a026038 R14: 00007f650a025fa0 R15: 00007ffeda196738 [ 973.536270][T29046] [ 974.121248][T29054] netlink: 'syz.1.5618': attribute type 1 has an invalid length. [ 974.175733][T29056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5618'. [ 974.307200][T29059] netlink: 268 bytes leftover after parsing attributes in process `syz.9.5620'. [ 974.307696][T29059] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.307807][T29059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.307820][T29059] IPv6: NLM_F_CREATE should be set when creating new route [ 974.307865][T29059] IPv6: NLM_F_CREATE should be set when creating new route [ 974.307892][T29059] IPv6: NLM_F_CREATE should be set when creating new route [ 974.310107][T29059] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.5620'. [ 974.479853][T29060] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5620'. [ 978.708760][T29041] ip6tnl1: entered promiscuous mode [ 978.708784][T29041] ip6tnl1: entered allmulticast mode [ 978.709731][T29054] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 978.906605][T29078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5624'. [ 978.950968][T29078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5624'. [ 979.228498][T29089] hsr0: entered promiscuous mode [ 979.249257][T29078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5624'. [ 979.543334][T29078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5624'. [ 979.568008][T29089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.607235][T29107] FAULT_INJECTION: forcing a failure. [ 979.607235][T29107] name failslab, interval 1, probability 0, space 0, times 0 [ 979.607273][T29107] CPU: 0 UID: 0 PID: 29107 Comm: syz.1.5628 Not tainted syzkaller #0 PREEMPT(full) [ 979.607299][T29107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 979.607314][T29107] Call Trace: [ 979.607323][T29107] [ 979.607334][T29107] dump_stack_lvl+0xe8/0x150 [ 979.607370][T29107] should_fail_ex+0x410/0x560 [ 979.607403][T29107] should_failslab+0xa8/0x100 [ 979.607433][T29107] __kvmalloc_node_noprof+0x176/0x820 [ 979.607462][T29107] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 979.607486][T29107] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 979.607519][T29107] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 979.607548][T29107] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 979.607579][T29107] ? __mutex_unlock_slowpath+0x731/0x900 [ 979.607620][T29107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 979.607659][T29107] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 979.607685][T29107] ? bpf_dispatcher_xdp+0x800/0x1000 [ 979.607759][T29107] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 979.607794][T29107] ? _copy_from_user+0x94/0xb0 [ 979.607825][T29107] ? bpf_test_init+0x113/0x150 [ 979.607846][T29107] ? xdp_convert_md_to_buff+0x5b/0x330 [ 979.607874][T29107] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 979.607916][T29107] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 979.607946][T29107] ? __fget_files+0x2a/0x420 [ 979.607983][T29107] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 979.608014][T29107] bpf_prog_test_run+0x2c5/0x340 [ 979.608054][T29107] __sys_bpf+0xa22/0xd90 [ 979.608089][T29107] ? __pfx___sys_bpf+0x10/0x10 [ 979.608129][T29107] ? __fget_files+0x2a/0x420 [ 979.608185][T29107] ? ksys_write+0x242/0x270 [ 979.608222][T29107] ? __pfx_ksys_write+0x10/0x10 [ 979.608262][T29107] __x64_sys_bpf+0xba/0xd0 [ 979.608289][T29107] do_syscall_64+0x166/0x520 [ 979.608322][T29107] ? trace_irq_disable+0x3b/0x140 [ 979.608345][T29107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.608369][T29107] ? clear_bhb_loop+0x70/0xc0 [ 979.608397][T29107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.608421][T29107] RIP: 0033:0x7f6509d9e159 [ 979.608442][T29107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.608462][T29107] RSP: 002b:00007f650acc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.608488][T29107] RAX: ffffffffffffffda RBX: 00007f650a025fa0 RCX: 00007f6509d9e159 [ 979.608505][T29107] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 979.608521][T29107] RBP: 00007f650acc5090 R08: 0000000000000000 R09: 0000000000000000 [ 979.608536][T29107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.608550][T29107] R13: 00007f650a026038 R14: 00007f650a025fa0 R15: 00007ffeda196738 [ 979.608586][T29107] [ 980.137391][T29089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.137419][T29089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.163936][T29089] veth1_vlan: left promiscuous mode [ 980.169400][T29089] veth0_vlan: left promiscuous mode [ 980.180199][T29089] veth0_vlan: entered promiscuous mode [ 980.194533][T29089] veth1_vlan: entered promiscuous mode [ 980.215267][T29089] veth1_macvtap: left promiscuous mode [ 980.216654][T29089] veth0_macvtap: left promiscuous mode [ 980.223040][T29089] veth0_macvtap: entered promiscuous mode [ 980.229501][T29089] veth1_macvtap: entered promiscuous mode [ 980.282167][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 980.286602][T29089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.290657][T29089] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 980.400697][T28691] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.400839][T28691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.417920][T28691] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.418042][T28691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.657902][T29110] ip6gretap0: entered allmulticast mode [ 980.661293][T29110] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 980.670558][T29110] batman_adv: batadv0: Adding interface: ip6gretap0 [ 980.670614][T29110] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 980.674605][T29110] batman_adv: batadv0: Interface activated: ip6gretap0 [ 980.755817][T29087] hsr0: left promiscuous mode [ 980.837631][T28689] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.849230][T28689] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.860143][T28691] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.419555][T29139] IPVS: set_ctl: invalid protocol: 103 172.20.20.28:20002 [ 981.430680][T29139] IPVS: set_ctl: invalid protocol: 47 172.30.1.10:20002 [ 981.439702][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5640'. [ 981.439736][T29139] bond0: Unable to set down delay as MII monitoring is disabled [ 981.678228][T29143] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 982.294736][T29168] FAULT_INJECTION: forcing a failure. [ 982.294736][T29168] name failslab, interval 1, probability 0, space 0, times 0 [ 982.294795][T29168] CPU: 0 UID: 0 PID: 29168 Comm: syz.2.5651 Not tainted syzkaller #0 PREEMPT(full) [ 982.294830][T29168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 982.294847][T29168] Call Trace: [ 982.294858][T29168] [ 982.294869][T29168] dump_stack_lvl+0xe8/0x150 [ 982.294912][T29168] should_fail_ex+0x410/0x560 [ 982.294951][T29168] should_failslab+0xa8/0x100 [ 982.294988][T29168] __kmalloc_noprof+0xfe/0x720 [ 982.295017][T29168] ? tomoyo_encode+0x2ad/0x570 [ 982.295161][T29168] ? tomoyo_encode+0x2ad/0x570 [ 982.295205][T29168] tomoyo_encode+0x2ad/0x570 [ 982.295249][T29168] tomoyo_realpath_from_path+0x5fa/0x640 [ 982.295295][T29168] ? tomoyo_path_number_perm+0x219/0x5f0 [ 982.295321][T29168] tomoyo_path_number_perm+0x246/0x5f0 [ 982.295357][T29168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 982.295386][T29168] ? __lock_acquire+0x747/0x2de0 [ 982.295434][T29168] ? hook_file_ioctl+0x1f2/0x600 [ 982.295528][T29168] ? __fget_files+0x2a/0x420 [ 982.295571][T29168] ? __fget_files+0x2a/0x420 [ 982.295605][T29168] ? __fget_files+0x3a2/0x420 [ 982.295641][T29168] ? __fget_files+0x2a/0x420 [ 982.295683][T29168] security_file_ioctl+0xc3/0x2a0 [ 982.295716][T29168] __se_sys_ioctl+0x47/0x170 [ 982.295749][T29168] do_syscall_64+0x166/0x520 [ 982.295798][T29168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.295826][T29168] ? clear_bhb_loop+0x70/0xc0 [ 982.295860][T29168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.295887][T29168] RIP: 0033:0x7f69d959e159 [ 982.295912][T29168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.295935][T29168] RSP: 002b:00007f69da3bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.295964][T29168] RAX: ffffffffffffffda RBX: 00007f69d9825fa0 RCX: 00007f69d959e159 [ 982.295985][T29168] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 982.296002][T29168] RBP: 00007f69da3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 982.296020][T29168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.296036][T29168] R13: 00007f69d9826038 R14: 00007f69d9825fa0 R15: 00007ffe19bc4c38 [ 982.296080][T29168] [ 982.301286][T29168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 982.420526][T29170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5652'. [ 983.148727][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5654'. [ 983.548950][T29193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5659'. [ 985.336959][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5680'. [ 988.998059][T29309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5711'. [ 989.441466][ C1] sched: DL replenish lagged too much [ 995.135424][T29381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.188795][T29383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5742'. [ 995.585567][T29389] nbd9: detected capacity change from 0 to 63 [ 995.616875][T29389] block nbd9: NBD_DISCONNECT [ 995.767531][T29389] block nbd9: Disconnected due to user request. [ 995.780033][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 995.780227][ T1696] Buffer I/O error on dev nbd9, logical block 0, async page read [ 995.780569][ T1696] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 995.780609][ T1696] Buffer I/O error on dev nbd9, logical block 1, async page read [ 995.780628][ T1696] Buffer I/O error on dev nbd9, logical block 2, async page read [ 995.780722][ T1696] Buffer I/O error on dev nbd9, logical block 3, async page read [ 995.848992][T29389] block nbd9: shutting down sockets [ 995.969626][T29398] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.5750'. [ 995.989041][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 995.989078][ T1696] Buffer I/O error on dev nbd9, logical block 0, async page read [ 995.989100][ T1696] Buffer I/O error on dev nbd9, logical block 1, async page read [ 995.989119][ T1696] Buffer I/O error on dev nbd9, logical block 2, async page read [ 995.989137][ T1696] Buffer I/O error on dev nbd9, logical block 3, async page read [ 996.002214][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.002252][ T1696] Buffer I/O error on dev nbd9, logical block 0, async page read [ 996.002274][ T1696] Buffer I/O error on dev nbd9, logical block 1, async page read [ 996.010782][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.020484][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.022338][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.030824][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.040221][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.051754][T29392] ldm_validate_partition_table(): Disk read failed. [ 996.051939][ T1696] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 996.090662][T29392] Dev nbd9: unable to read RDB block 0 [ 996.126482][T29392] nbd9: unable to read partition table [ 996.287294][T29392] ldm_validate_partition_table(): Disk read failed. [ 996.288065][T29392] Dev nbd9: unable to read RDB block 0 [ 996.309578][T29392] nbd9: unable to read partition table [ 999.430228][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'. [ 999.466252][T29456] tipc: Enabled bearer , priority 0 [ 1000.665363][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1000.693284][T29481] ip_tables: iptables: counters copy to user failed while replacing table [ 1001.460811][T29491] syzkaller0: left promiscuous mode [ 1001.460837][T29491] syzkaller0: left allmulticast mode [ 1001.868280][T29498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'. [ 1002.187609][T29500] vlan2: entered allmulticast mode [ 1002.187636][T29500] bond9: entered allmulticast mode [ 1002.212743][T29500] bond9: (slave vlan2): Opening slave failed [ 1002.817721][T29518] netlink: 79 bytes leftover after parsing attributes in process `syz.2.5795'. [ 1003.000056][T29520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5796'. [ 1005.183497][T29550] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 1005.183530][T29550] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 1005.536254][T29552] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1006.130208][T29573] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 1006.130235][T29573] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1006.130253][T29573] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 1006.130477][T29572] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 1006.130495][T29572] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1006.130512][T29572] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 1007.468190][T29582] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1009.976098][T29591] veth0_to_bridge: entered promiscuous mode [ 1009.976372][T29591] macvtap0: entered allmulticast mode [ 1009.976397][T29591] veth0_to_bridge: entered allmulticast mode [ 1010.243395][T29591] veth0_to_bridge: left allmulticast mode [ 1010.243499][T29591] veth0_to_bridge: left promiscuous mode [ 1010.582368][T29595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1016.348713][T18521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1016.374639][T18521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.416559][T18521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.420937][T18521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.463410][T18521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1016.559623][T18521] [ 1016.562011][T18521] ====================================================== [ 1016.569126][T18521] WARNING: possible circular locking dependency detected [ 1016.576191][T18521] syzkaller #0 Not tainted [ 1016.580630][T18521] ------------------------------------------------------ [ 1016.587740][T18521] kworker/u9:2/18521 is trying to acquire lock: [ 1016.594148][T18521] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1016.604733][T18521] [ 1016.604733][T18521] but task is already holding lock: [ 1016.612123][T18521] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1016.621572][T18521] [ 1016.621572][T18521] which lock already depends on the new lock. [ 1016.621572][T18521] [ 1016.632263][T18521] [ 1016.632263][T18521] the existing dependency chain (in reverse order) is: [ 1016.641330][T18521] [ 1016.641330][T18521] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1016.649497][T18521] down_write+0x96/0x200 [ 1016.654335][T18521] kernfs_add_one+0x41/0x6f0 [ 1016.659475][T18521] kernfs_create_dir_ns+0x1a1/0x230 [ 1016.665231][T18521] internal_create_group+0x440/0x1180 [ 1016.671156][T18521] cpuhp_invoke_callback+0x434/0x810 [ 1016.676999][T18521] cpuhp_issue_call+0x3f0/0x750 [ 1016.682413][T18521] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1016.689038][T18521] __cpuhp_setup_state+0x3f/0x60 [ 1016.694557][T18521] do_one_initcall+0x250/0x870 [ 1016.699881][T18521] do_initcall_level+0x10a/0x1a0 [ 1016.705488][T18521] do_initcalls+0x59/0xa0 [ 1016.710401][T18521] kernel_init_freeable+0x29d/0x3e0 [ 1016.716160][T18521] kernel_init+0x22/0x1d0 [ 1016.721068][T18521] ret_from_fork+0x514/0xb70 [ 1016.726307][T18521] ret_from_fork_asm+0x1a/0x30 [ 1016.731630][T18521] [ 1016.731630][T18521] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1016.739489][T18521] [ 1016.739489][T18521] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1016.747256][T18521] cpus_read_lock+0x42/0x160 [ 1016.752492][T18521] static_key_slow_inc+0x12/0x30 [ 1016.758010][T18521] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1016.764386][T18521] nbd_genl_foreach_sock+0x265/0x450 [ 1016.770223][T18521] nbd_genl_reconfigure+0xbbb/0x1040 [ 1016.776062][T18521] genl_family_rcv_msg_doit+0x233/0x340 [ 1016.782159][T18521] genl_rcv_msg+0x614/0x7a0 [ 1016.787233][T18521] netlink_rcv_skb+0x226/0x4a0 [ 1016.792628][T18521] genl_rcv+0x28/0x40 [ 1016.797157][T18521] netlink_unicast+0x7bd/0x940 [ 1016.802496][T18521] netlink_sendmsg+0x813/0xb40 [ 1016.807806][T18521] sock_sendmsg_nosec+0x14e/0x190 [ 1016.813370][T18521] ____sys_sendmsg+0x54e/0x850 [ 1016.818680][T18521] ___sys_sendmsg+0x2a5/0x360 [ 1016.823903][T18521] __x64_sys_sendmsg+0x1b1/0x290 [ 1016.829390][T18521] do_syscall_64+0x166/0x520 [ 1016.834616][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.841049][T18521] [ 1016.841049][T18521] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1016.848714][T18521] __mutex_lock+0x19d/0x1550 [ 1016.853857][T18521] nbd_queue_rq+0x373/0xff0 [ 1016.858898][T18521] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1016.865081][T18521] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1016.871997][T18521] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1016.878525][T18521] blk_mq_run_work_fn+0x16c/0x300 [ 1016.884098][T18521] process_scheduled_works+0xc3d/0x1630 [ 1016.890193][T18521] worker_thread+0xa47/0xfb0 [ 1016.895361][T18521] kthread+0x38b/0x480 [ 1016.899974][T18521] ret_from_fork+0x514/0xb70 [ 1016.905128][T18521] ret_from_fork_asm+0x1a/0x30 [ 1016.910460][T18521] [ 1016.910460][T18521] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1016.917707][T18521] __mutex_lock+0x19d/0x1550 [ 1016.922897][T18521] nbd_queue_rq+0xc1/0xff0 [ 1016.927857][T18521] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1016.933950][T18521] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1016.940825][T18521] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1016.947353][T18521] blk_mq_run_work_fn+0x16c/0x300 [ 1016.952932][T18521] process_scheduled_works+0xc3d/0x1630 [ 1016.959020][T18521] worker_thread+0xa47/0xfb0 [ 1016.964158][T18521] kthread+0x38b/0x480 [ 1016.968769][T18521] ret_from_fork+0x514/0xb70 [ 1016.973908][T18521] ret_from_fork_asm+0x1a/0x30 [ 1016.979255][T18521] [ 1016.979255][T18521] -> #4 (set->srcu){.+.+}-{0:0}: [ 1016.986475][T18521] __synchronize_srcu+0xc9/0x2f0 [ 1016.991969][T18521] elevator_switch+0x1e8/0x7b0 [ 1016.997340][T18521] elevator_change+0x2fa/0x480 [ 1017.002677][T18521] elevator_set_default+0x375/0x440 [ 1017.008437][T18521] blk_register_queue+0x3f3/0x4e0 [ 1017.014081][T18521] __add_disk+0x6b8/0xdb0 [ 1017.018979][T18521] add_disk_fwnode+0x100/0x3a0 [ 1017.024324][T18521] nbd_dev_add+0x733/0xb60 [ 1017.029311][T18521] nbd_init+0x168/0x1f0 [ 1017.034115][T18521] do_one_initcall+0x250/0x870 [ 1017.039432][T18521] do_initcall_level+0x10a/0x1a0 [ 1017.044924][T18521] do_initcalls+0x59/0xa0 [ 1017.049808][T18521] kernel_init_freeable+0x29d/0x3e0 [ 1017.055558][T18521] kernel_init+0x22/0x1d0 [ 1017.060452][T18521] ret_from_fork+0x514/0xb70 [ 1017.065616][T18521] ret_from_fork_asm+0x1a/0x30 [ 1017.070931][T18521] [ 1017.070931][T18521] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1017.078824][T18521] __mutex_lock+0x19d/0x1550 [ 1017.083975][T18521] elevator_change+0x1af/0x480 [ 1017.089304][T18521] elevator_set_none+0xb5/0x140 [ 1017.094706][T18521] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1017.101087][T18521] nbd_start_device+0x189/0xb30 [ 1017.106499][T18521] nbd_genl_connect+0x167d/0x1cd0 [ 1017.112092][T18521] genl_family_rcv_msg_doit+0x233/0x340 [ 1017.118197][T18521] genl_rcv_msg+0x614/0x7a0 [ 1017.123249][T18521] netlink_rcv_skb+0x226/0x4a0 [ 1017.128554][T18521] genl_rcv+0x28/0x40 [ 1017.133085][T18521] netlink_unicast+0x7bd/0x940 [ 1017.138396][T18521] netlink_sendmsg+0x813/0xb40 [ 1017.143721][T18521] sock_sendmsg_nosec+0x14e/0x190 [ 1017.149286][T18521] ____sys_sendmsg+0x54e/0x850 [ 1017.154678][T18521] ___sys_sendmsg+0x2a5/0x360 [ 1017.159921][T18521] __x64_sys_sendmsg+0x1b1/0x290 [ 1017.165403][T18521] do_syscall_64+0x166/0x520 [ 1017.170542][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.176979][T18521] [ 1017.176979][T18521] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1017.185695][T18521] blk_alloc_queue+0x544/0x690 [ 1017.191007][T18521] __blk_mq_alloc_disk+0x194/0x390 [ 1017.196662][T18521] nbd_dev_add+0x494/0xb60 [ 1017.201625][T18521] nbd_init+0x168/0x1f0 [ 1017.206326][T18521] do_one_initcall+0x250/0x870 [ 1017.211751][T18521] do_initcall_level+0x10a/0x1a0 [ 1017.217249][T18521] do_initcalls+0x59/0xa0 [ 1017.222133][T18521] kernel_init_freeable+0x29d/0x3e0 [ 1017.227898][T18521] kernel_init+0x22/0x1d0 [ 1017.232779][T18521] ret_from_fork+0x514/0xb70 [ 1017.238029][T18521] ret_from_fork_asm+0x1a/0x30 [ 1017.243346][T18521] [ 1017.243346][T18521] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1017.250589][T18521] fs_reclaim_acquire+0x71/0x100 [ 1017.256072][T18521] kmem_cache_alloc_noprof+0x5f/0x600 [ 1017.262001][T18521] __kernfs_iattrs+0xdd/0x380 [ 1017.267235][T18521] kernfs_iop_setattr+0xe6/0x3f0 [ 1017.272762][T18521] notify_change+0xbba/0xea0 [ 1017.277898][T18521] do_truncate+0x1c2/0x250 [ 1017.282862][T18521] path_openat+0x15b5/0x1d60 [ 1017.288057][T18521] do_file_open+0x23e/0x4a0 [ 1017.293218][T18521] do_sys_openat2+0x115/0x200 [ 1017.298443][T18521] __x64_sys_openat+0x138/0x170 [ 1017.303835][T18521] do_syscall_64+0x166/0x520 [ 1017.308979][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.315417][T18521] [ 1017.315417][T18521] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1017.323956][T18521] __lock_acquire+0x164c/0x2de0 [ 1017.329354][T18521] lock_acquire+0x115/0x350 [ 1017.334487][T18521] down_write+0x96/0x200 [ 1017.339279][T18521] kernfs_link_sibling+0x4c7/0x5a0 [ 1017.344936][T18521] kernfs_add_one+0x2db/0x6f0 [ 1017.350158][T18521] kernfs_create_dir_ns+0x1a1/0x230 [ 1017.355897][T18521] sysfs_create_dir_ns+0x12f/0x2a0 [ 1017.361559][T18521] kobject_add_internal+0x622/0xcd0 [ 1017.367376][T18521] kobject_add+0x163/0x240 [ 1017.372332][T18521] device_add+0x3fa/0xb80 [ 1017.377270][T18521] hci_conn_add_sysfs+0xd5/0x210 [ 1017.382783][T18521] hci_conn_complete_evt+0x8a8/0x1350 [ 1017.388732][T18521] hci_event_packet+0x6cd/0xf10 [ 1017.394128][T18521] hci_rx_work+0x3ee/0x1020 [ 1017.399219][T18521] process_scheduled_works+0xc3d/0x1630 [ 1017.405313][T18521] worker_thread+0xa47/0xfb0 [ 1017.410476][T18521] kthread+0x38b/0x480 [ 1017.415110][T18521] ret_from_fork+0x514/0xb70 [ 1017.420253][T18521] ret_from_fork_asm+0x1a/0x30 [ 1017.425567][T18521] [ 1017.425567][T18521] other info that might help us debug this: [ 1017.425567][T18521] [ 1017.435809][T18521] Chain exists of: [ 1017.435809][T18521] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1017.435809][T18521] [ 1017.450348][T18521] Possible unsafe locking scenario: [ 1017.450348][T18521] [ 1017.457831][T18521] CPU0 CPU1 [ 1017.463227][T18521] ---- ---- [ 1017.468613][T18521] lock(&root->kernfs_rwsem); [ 1017.473396][T18521] lock(cpuhp_state_mutex); [ 1017.480525][T18521] lock(&root->kernfs_rwsem); [ 1017.487829][T18521] lock(&root->kernfs_iattr_rwsem); [ 1017.493138][T18521] [ 1017.493138][T18521] *** DEADLOCK *** [ 1017.493138][T18521] [ 1017.501318][T18521] locks held by kworker/u9:2/18521: 4, last CPU#0: [ 1017.507913][T18521] #0: ffff88804583f140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1017.519066][T18521] #1: ffffc90004327c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1017.531110][T18521] #2: ffff888032d380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1017.540972][T18521] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1017.550918][T18521] [ 1017.550918][T18521] stack backtrace: [ 1017.556824][T18521] CPU: 0 UID: 0 PID: 18521 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1017.566387][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.576472][T18521] Workqueue: hci0 hci_rx_work [ 1017.581181][T18521] Call Trace: [ 1017.584484][T18521] [ 1017.587434][T18521] dump_stack_lvl+0xe8/0x150 [ 1017.592060][T18521] print_circular_bug+0x2e2/0x300 [ 1017.597119][T18521] check_noncircular+0x12f/0x150 [ 1017.602118][T18521] __lock_acquire+0x164c/0x2de0 [ 1017.606999][T18521] ? __lock_acquire+0x747/0x2de0 [ 1017.611962][T18521] lock_acquire+0x115/0x350 [ 1017.616494][T18521] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1017.621803][T18521] down_write+0x96/0x200 [ 1017.626076][T18521] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1017.631379][T18521] ? __pfx_down_write+0x10/0x10 [ 1017.636249][T18521] ? kernfs_root+0x1c/0x230 [ 1017.640762][T18521] ? kernfs_root+0x1c/0x230 [ 1017.645282][T18521] ? kernfs_root+0x1c/0x230 [ 1017.649797][T18521] ? kernfs_root+0x1ea/0x230 [ 1017.654409][T18521] kernfs_link_sibling+0x4c7/0x5a0 [ 1017.659542][T18521] kernfs_add_one+0x2db/0x6f0 [ 1017.664245][T18521] kernfs_create_dir_ns+0x1a1/0x230 [ 1017.669464][T18521] sysfs_create_dir_ns+0x12f/0x2a0 [ 1017.674600][T18521] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1017.680266][T18521] ? do_raw_spin_unlock+0xf5/0x200 [ 1017.685402][T18521] kobject_add_internal+0x622/0xcd0 [ 1017.690620][T18521] kobject_add+0x163/0x240 [ 1017.695056][T18521] ? __pfx_kobject_add+0x10/0x10 [ 1017.700020][T18521] ? get_device_parent+0x366/0x3a0 [ 1017.705157][T18521] device_add+0x3fa/0xb80 [ 1017.709517][T18521] hci_conn_add_sysfs+0xd5/0x210 [ 1017.714476][T18521] hci_conn_complete_evt+0x8a8/0x1350 [ 1017.719876][T18521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1017.725880][T18521] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1017.731714][T18521] ? skb_pull_data+0xf0/0x200 [ 1017.736425][T18521] hci_event_packet+0x6cd/0xf10 [ 1017.741386][T18521] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1017.747303][T18521] ? __pfx_hci_event_packet+0x10/0x10 [ 1017.752702][T18521] ? audit_filter_rules+0x36b0/0x5d10 [ 1017.758128][T18521] ? hci_send_to_monitor+0xe2/0x590 [ 1017.763461][T18521] hci_rx_work+0x3ee/0x1020 [ 1017.767994][T18521] ? process_scheduled_works+0x97a/0x1630 [ 1017.773743][T18521] process_scheduled_works+0xc3d/0x1630 [ 1017.779337][T18521] ? __pfx_process_scheduled_works+0x10/0x10 [ 1017.785354][T18521] ? assign_work+0x3cf/0x5d0 [ 1017.789985][T18521] worker_thread+0xa47/0xfb0 [ 1017.794639][T18521] ? __kthread_parkme+0x71/0x1f0 [ 1017.799645][T18521] kthread+0x38b/0x480 [ 1017.803765][T18521] ? __pfx_worker_thread+0x10/0x10 [ 1017.808905][T18521] ? __pfx_kthread+0x10/0x10 [ 1017.813518][T18521] ret_from_fork+0x514/0xb70 [ 1017.818139][T18521] ? __pfx_ret_from_fork+0x10/0x10 [ 1017.823283][T18521] ? __switch_to+0xc89/0x1420 [ 1017.827992][T18521] ? __pfx_kthread+0x10/0x10 [ 1017.832602][T18521] ret_from_fork_asm+0x1a/0x30 [ 1017.837424][T18521] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1018.591943][T18521] Bluetooth: hci0: command tx timeout [ 1019.176284][T20916] tipc: Resetting bearer [ 1019.364516][T20916] tipc: Disabling bearer [ 1020.676875][T18521] Bluetooth: hci0: command tx timeout [ 1021.848001][T29626] tipc: Resetting bearer [ 1021.878013][T29626] bridge0: port 3(syz_tun) entered disabled state [ 1021.908917][T29626] syz_tun (unregistering): left allmulticast mode [ 1021.908960][T29626] syz_tun (unregistering): left promiscuous mode [ 1021.909059][T29626] bridge0: port 3(syz_tun) entered disabled state [ 1021.956300][T29626] tipc: Disabling bearer [ 1022.509115][T29410] tipc: Resetting bearer [ 1022.699581][T29410] tipc: Disabling bearer