last executing test programs: 2m38.414028849s ago: executing program 3 (id=668): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 2m37.950074661s ago: executing program 3 (id=671): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe93}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) (async) sendmsg(r0, &(0x7f0000002700)={&(0x7f0000000000)=@nfc={0x27, r4, 0x0, 0x2}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)="d37e1cc864f271af5b601f9b5daa4ff500681be73a622297d1", 0x19}, {&(0x7f0000000140)="1b36f993b389fc3783bee5fefcaf30216884824389e0abdb0c33c41bf4bc0171e80b11d32d2b84bc2a3390a36d6ac152a6b73cea2356783f816103da31983f92e1b5b35e80781814aa02c6969d3f64236b2270cc96ebb4b3fac378b3a3dc661833c260b5a33a2aec88f0e979379809336ffed5155a826f04e609e31fe06e93e08d4f174cd7124c160a807ddfb375ccffc112030569852d7e7a5c1a1b6c", 0x9d}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6ce918246a0c997e2debfc4f279176485f9fea4a2767dfd7a5f41b38c812988e152aa914c91f9ae7836e838797a7c55cc7daac62bda8ddd21c0883ea9c29d20f67c1b0ca234773db05027846177c44714ef73751314eb53c34d5429d628dbe3de646be6a7f20ab4f8eb356b9a8d2b1a71a68a64e1d60feeb50ea6c15d641252202ad4501bb5cc42f1383087a20d3b03be09b", 0x92}, {&(0x7f00000012c0)="90f6d5237aa64a37947465a21843b34a409858622abecba9012a7542e531458e6304dbc0b3043f527dd61126c08b7368adc0a19c9c7d3fdb475836107e2234a3048fcc566d0dc2b33cf1ec1a41a0478d6166fa3f97eaf7e5c9f660d127d7ea14dd9e673d922fa1d3d2d088a435081f0a429f115290106ffa104f833064671ea6239cf1fac5b6e085f16c1b23ca8f161cbf4db8dfffb673e8fe8713e5df4d539167715cfd69833b4c104a5b16d7e8c7f33dccc828a3570e0e25ef063a3098850434ba4c5976ebff559e2c7ec9126e9a27519cb890d657a0646937de7dbf13484aa1b476c1f9480c1991dfe57bc7575461312d", 0xf2}, {&(0x7f00000013c0)="763c1dec115ffea2dd7ee017d5bf2d75f738ca7459583980ee7e051d4fde495c1fb922d36c9b2cbef0a0627b1619e57b2bf04c2d1a97f0dec59dbdd95ca260487623799a84dfee3b8733a1ecea9665dc7cc3421a377053298c75211b271525313094eaaaf5230fd7c172efb51992ff6a3542e01f554446030e133e057467c7847899b8e8103ae70b8984dade820bdeab45e7719bec7a31b6f20a3603b994a4382f968921375c89baced3387d063e644807d83ccea9c820da9ad34aa3926a0a789544984b9969586784196c0778", 0xcd}], 0x6, &(0x7f0000001540)=[{0xb0, 0x108, 0x8001, "b2e73756c51291cce78b1db35c9501072841acac0e20b3fdf74d0827d3dd67e48838e44580e0b4dfeea6bf272915fc3e034aa0b9b71365f0fb7821af6d00c554f2dac2a5bb0eb40ee5a85070d11fcdbb5983b48cf98247e01153e1eb2870c00ecba4cc3b34d3c2fdd435ff972de3fdbbc4ac8dcd5d4d649ebd878d343c4290651cfe1a6d569d96f256180bad1e7f0617f14a8fcc7b68285e10973b528a0b"}, {0x1010, 0x0, 0x6, "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"}, {0xe8, 0x112, 0x0, "51a5612fe716c7affe3948ff2dbc5799544f077fe42a9df576f1c081a1f749aa103a29c3eb26776d42863cbb26f688e2822ae1b98f5ae749f2fa2c7e1abad0d8b73c6c5f679107ec47c5500713c5ae1be6b8134618c2b6c52e4f8d40642dd24e5d8dd7cc9e1cb85e9865f1d73b4f28d6c186f9f0a1e29b695bfb99f10585b5900654884811125d0209414824442d9c43f12b72087e3a2b271abb9aa6f1c41e7661e985a4c453d911296d4efa223437c5887755e00c617419b6dcebd8c65493de1f9b4fcc8b73d4a05766d56bbcde0107a58482e7"}], 0x11a8}, 0x4) 2m37.638966643s ago: executing program 3 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x7, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x8001, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) 2m37.467231498s ago: executing program 3 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r1, 0x101, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa0100fd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x40810) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) 2m37.286617669s ago: executing program 3 (id=682): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) 2m36.957210618s ago: executing program 3 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) 2m27.423411634s ago: executing program 2 (id=822): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x601, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x6, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x29c, r2, 0xc6b1394558c22708, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7db36f4e61e5e3abbc1635ed3fd71851890cb2db1959e0"}}]}, @TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9ad64f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe81e}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40011}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0xfffffffd, 0xa, 0x8001, 0xfdb1, 0x5, 0x201, 0x80000001}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @local, 0x4}, 0x1c) 2m26.375963397s ago: executing program 2 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x12, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c7050804000000000200000001001504"}}, 0x2e) 2m26.154069077s ago: executing program 2 (id=849): r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m25.917504683s ago: executing program 2 (id=853): epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc884}, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) listen(r1, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x3ff, 0x9, 0x2, 0xd110}, {0x1, 0xb, 0x7, 0x3}]}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = syz_init_net_socket$llc(0x1a, 0x9d0c3944b856d22f, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x5437, 0x1, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)={0x56c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x565820a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa783}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff0ff}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x7074adf1}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private2, 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff6, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @local, 0xe}}}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x600b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x53c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x600}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @private0={0xfc, 0x0, '\x00', 0xc}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @remote, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, 'k\n'}, @TIPC_NLA_NODE_ID={0x19, 0x3, "43e700f4678b524a4d3c704f59bbdc0727bb1d5509"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c3c367c7002ab0e3729ffa79704c5050803341f0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "daafa283a34a8f12ef71de8931bf72483e20eaba75908fcd8a9aa12659c0985c2e8ff130afdbd3669ba510af5fe050f8e64151494d52b4006223e66c3f7d5317db2a4cadea775eb0a0d71eeafd8f51886194fbc04c0df3dfbd9caecdcf7e3b97ce8c46d01bed07"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000940)=0xffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd0, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa1d}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8001}, 0x18801) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000c00)={'pimreg\x00', @ifru_map={0x1, 0x9, 0x1000, 0x0, 0x5, 0x7}}) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xd0, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x79, 0xa9, @random="9c9933807dcb463e5f3310e725a9f66f71544d4ea4cf34b2580365530fd8adb45d6a58ffb899045f070eeb9df43b1f8f8d8d7655c60063c3700b4301da9109ee6e376f58f26963ecb1c2f0043a2f51cfaa9362a58a2ee33ba9b036304f6325d8a45b0dd65eb1cf9f47b04a8a1cede223624513051a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x200}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x90) write(r8, &(0x7f0000000e00)="d753babb9cbb964182774fb3408f3a3d307babf2bcf9b6cbc5a920bd30fdebde6d6b184f18367f6ff9b46ab5ab6add10a804f1161a97baa2aabfc6cb58d80cfeaeb3e3faa3da3e6f8cf5e3a1ed15581a51b723502ede17008101c71a4afe9ccd3de930", 0x63) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000000e80)={0x1, 0x1, 0xa49, 0x0, 0xd, 0x9}) sendmmsg$inet(r5, &(0x7f0000002000)=[{{&(0x7f0000000ec0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000f00)="8f95a9aaff6ce3f44bd9481f5b4eb273d16db467d5559becebbd68b0aa22dc787c2dde83ba59b976be15e31579c15431020f3e80d2839652327ddb8a3d875dc412ef2bfee964dc8b9e9b223cebf1512f0bf16ec49c44bb2ba11b02ed932060afc03533cefd64edfc45634f167c95f989e933d9b77b84112163793c82", 0x7c}, {&(0x7f0000000f80)="f7fc3087fa31bb7c0b9bd075dc9ccea24de3d5790e79859eea61a518caa900a5483066d1390107c97980a7e6cc6436dea2771cde37e0e685d76e392a25858970a57e350e7e007e9c2f69e1370b3e4012ab2dfa7c848bf2ed1a3594a64bb8450d058fe53df868b1253687411323e8ab308c717266c8d9fb25641ad493d8ba7ba2c5cb26271ee23ac359e1fe8fdbb36cbc7da2388b181b54b932991b0efb785eb30582a91b69c43fae9aa585c1c8b8b80d796db84c6e1047d00f3cbe78a7858504560c93192dee09f3ee459be1c73cff7761ff4140faa97cc78216cc7e5ee69b28827f6e174769f851928953eba234446aeaccae1756314377f317ad943431d532afbd6e6ee86f4c9a7c61bd2714ccf69b59d5c8d48ed24afe26502f0031620a273329ad3f9504c9fbf6f4b8a1567aec767afce7ad351055c285153b3d284fdc8592e306561b675b91779467f0f5eb2eaa2dd57b21edec6c97ec47a060a604f3abc75698d88c2c8fe40335cd4f49f5780cd95e68f13ba71b9420d9618083afde8ed17986ca801a901e7692f8eb9459bb42bd10c9c3f55bcc6a0abad0a60b0af018bca840ab027e576ffbc25eb70ad2915013e371443f5ea8047088e86ae2ec35847bc6bc162cde729b629ebb208d9dfd4993c5b4dab9bdc76c2538e2ef1a73d27c07f7a8eb40678d71125c5fecd9ac980ef9f034d5ec9c05e43d50f20395c510bde617ab32d2b0eaba3609fac20ef5860635bffbee406c069fccfa3c48649b2abbae4800c7bdf3afd69dc1726ceb23b43a32249772dbd9c0f49c12f7a53476da9c37b030b5ab99fe5107e96552babe49666fc5bdbdd2a0797df5f1d0eafafa6325a65e5d7652a8687732bdbd7cfc75a7418e9dcfa65212ca7a46a94e97f9499ac13c3f30a1f243719415c7c02ee5b98e8005ee58beaa679f688cb0bd1e711dc960c0f21e48c474f8fbd3ebf2dce44c1c9b45b725c436f56b71a48f69a96f50df96e0f9216aadf084de8bb29c0b528e1cc1f5ed2c85ef2704d7b5363193da0940c315b9edd2bcf381214d24c7bda287304f1e3f82c1079420bf0a2d6a5a65385f9e91a30c9d992c4aa08ac212bbbb4dd28a2a9f6419431a80f9f7f582a14893fadc12c9d828dc495ff4e568db048463128cbaef89fb703aba31ec693fd152874b36b9a03bdfdcd32a527eeffd9ad978e0c569e5c887e7ee11f168b57d9a838ff0f823dd33a52d1f3af6deb318e4b7f096bdfb6e33ec499da68ec762bdeedf079dda6a3cdc65ab1b0dc16efe4aa412e5bf15bd24ed65b14706f7aa5005e87dc13f20640c45742506f917fcf4a0b2099fc7f7363c140b34300be442744b99e0d7f7e4f2dd8fb1f1c6d96fa672deb29fe85cb8f448ea5d12c885a5b8ed321fbb311cee3b7cb8ad9f80457b6aae22c5ec964bfdd4de7de22e885d8bdb1ecbd3c7929fecf75feb84405e031b8268e4742cf688738103e84bfb4130ba28722cf4a7f0d24d50e7b590f8b5b5e398b2160f3e45dd8da1c7a391e5a4b6852dc757f67856e0198363dbc962fdabcd8d4c56197deb964527ed75277be1b867a271f3925fea36c7dd14179a37d2a948fb63788c90099625b81ecb741133bf06f01bfc7c7fe1ab4405fb36f0dff87344503acea9129342cfff01aeb83e6b10aad365a37f1aec82f7c5eeda98ffaf990de010a3bfa7c627aee621c917159f84ef08ccdf9aad6cc56e5693b266b49da73da100f0480f88188581c284e1c4bc401f18f509d7fc39a999f825eadca0835d9a6c791b18d949b222dd943a63143ee8d22b27cc94e3b6f60cf0f326415626833176cefaaf1fe42ee4a31c242279acd0a8abec1254c40c8c686ca36d953c8020bc6dc47e7f82c4b2c73b7d6ca5b7fc8d6a1ac946f1187e09f2478e9a5f8566c503a9f484fa7ea8a6ff590624e25d82bdb5fbf8a6bb51dd8928e8338b0f53c681422ab52caee031756066412e5ab4b7cca03e7d04c0208ae5a9ef9047a8bd7028a46ecc2081e0926d66348ff6a62b9a2a60ae8f0b21315ecafb6f3be08a8b69be8f9ad1ff7df8fbb1ebdc8e75c18711a102c35eaa264f97bf4a8b1ac6f6374f9562a220b1968b4329c0dd897ffb045b2c6ea05feecf50ac6383c15e272ffcd27eaf1d63991bbdbc4f67bde68a9c24a77a07eb726299d9186a162e220860690d56e4c6ccdad534abae2c4904ff5b71610ac6a6c267db8716c921c233ce15e9531b761a899eb13d21c481b157007f5dc225d9a9a0e439b09fb3ed44f32a0b25fd77f8193d8f3387647cddd1c471c8e7e3f2a12274c84c8d1d959e5e458b6541619e401ee06cd3b1d9510b2bd07f87518481a9b556a9d49fb27fc5471cd12610699a6452548d4306fd17877092222d4c73f6556bc6c398d8c0acf1c90f5958a4d668b7ad04a9890dc8a3f1e9e5625c6b44d161008d635e682ec38f00f428ac9331599c653bea3b30e5bd7769568ed82af656867e9f9d317836882fbc137a5ff4789f7ca86f090163927b62847016669b0d7c5215c1e3b4083fb31555977f8a4bbeb45b188e32096001c65037f8391effeefc5eb1a6668742fa1904c0fc6ab3f8189facc6970a7763a09c4be4461493d22a72346b24619aebe6babda69b34a103bb5d9253c5b8bd8362c291817e563e4a0ecfa31fe5d173e97e716cd1f805c7ef6b1569701c24e731bb0239bb8268051111094a2c303431df3e42beae9965bc077241ee6e34d62c99517aba42b3c189229ed4b42d9945a6c20ff05f150af1a8941277a04af0c041417ebf06f7eef2b6db628c63af54c0fa6696f18b2474f5b622ed87fc162d3c4390dd8f2ad02e4fdc635fd1971a6afc0ac6158eac08b0ff4c49529ac5529e207dc4e69cbcbfb3b9a5fa1ed94d0cb4903b5f2d8eeb9d65faa2d05a9c1723153edbb0ba2b90a3ca58069bedc078b9c3b581a11f4c526bfeef716e94509f7f623cf1cb6cbaf68e40f86f0f24873f0cb5675b23c6235da90b76116551d98f9805401e573a4e77a3313758487ec24804b55e92d5ee78f1b38adec04ca0f3966ffabb051e98aabb70d0537728fa32bb2bd8f7acfefaddc56c8a9851582c8824d4cae17152a4bff315af19c37e2c4bea8e536d86cc4d3fbead6dbfe7869a96edf1bdcccd0b3eedc12387d3d98b86b49914123d4d5fd71c1d4c825333187aa2aa431c2771d4b8a21c5ca4fb463ba4973c53c002dcf50fa3d646a2546046fec324eba7ae0208de9dff3e2add4cbf3fa7068c1637f83e71d766cc180b5e7c62d68652b53d9e03021e77d100c266e6a2bb9da58673a70973492b85cb77ec37f48a26b3a3fee5675e97b5a9f9d61967c51ace3e1c94b528539b7709089fece7afa130af15b6caed9f28a8cdbf72111ee2a3ee517bb9485e0a50a40f22bb8316fdd9dbd736bfbe949c3fb0eaeda8ddae48ffa43cd681feff389c6bb7db844b90c8a6f852364f5a4c9a45c10b811d6b7bca61f4483565cc580c61668e49501d7edbbe9eaf4610f1e98fdec03c04ac09f5553eb6d3c330b64b7caabfb9294ec244a0ef24b639fa6e096110d7a0b487644522c4ceda784d07af167651b6c26003b87c92067029ed9c2e70c9e68a082b77fe1bb3f1bd314e7012f83db30a30d2715f37dff1f74d577876fd77cf54becfe6c008c685db12b0a435f48e43ecc6b7e4546d9ed2cbe2ca0484989e1a59d4a8db4c098ba590afaec4fbf50a9f66a845206b028b6d6d5f99589bc50f5a2ac3ae9a0ac0fdade4405016f77b8bc60ec862436bbbf9c7038f566903899af36f68295671d775939e8cb760dee0eeaaafd95e1672ffe77e0779c84c6aba2e2aabaf4a94701708b3aeb991732170f8eecd829282bc545af9f98854bc07a7840597c6a2999b4124c2540ed9e6df6180914b1ac5f8aae8ecaeb08fc84f4ef6371b900da077bc775c1bfcade5f868e6277d613805e091cd469899bcea9fac6f0a8c00d086df2f04672159deafb9ea6d2e77534aefb2129409a5af89fe59ae00ba603ade095ef813d0f403349ab650931bc451a7f2e76162b20aa20284845dd711eae7e80df389ebaaf192cebec013276fe4bcae35eed9102d774d3eb2b6a298f549ca44f4055f12091784a457d8c9732bdb7336222afce0474f6222de541816f35dc6d02f48e527589e4e773660dd4cb420bfe654614bfbfd29369c711ebe769697a485f3c6dc8dce269b9b2ef19f063138334a9b32431147b7c865837e134918c6ae4093b1646043ab74b3d1b2c7574b93275349b996751cfbf913cc6d821f126a7ff4f87340a98d2885318dc887eb61eff61458303f6370ae514c083293ada833fe7fa380abf3c18fcefe8843ac0ed598d551ed04baeea2176869d09949c82e6a7cff53e508504bdc68e0404ad659bf748a88a04efee738862dfea2a418606bbb78d90c370925318d82ef0a349bd329c8ad47ebc66f1bf11b1b7f6aed30dd0dfaede826330a8d01eba99baec4afdf4bff799cb5543c3e040064db1dced541427f9a421de233c366226213c71349a659df237eb583b684f92381187bbbf97b660ef468c1a16ad7a08dd8e4616d14c916fd40e9a55fc867fb3b8535f4cab6af615cfce2e4a6f340bf2cf7197b7bfa9e10268e1083ff6c5d27463bcb1dd43c624bbafc51a9ba910c08ba87b073ab4d71c9c144dd0b6a73282894a14d7df782b6150c9f41a9c94847161e68e3bf29a28b9c75b5910160d505ecbb1822bb90ea31136d5f78ea8946dfb1f7254150b0fbc95a7a8541f8fecef4fffb6c312f8e400e754f812aff5dc55b02353413f60a8b3fddcdf47dba9e0550bdca496d8fb6a3a55f299833261bcad73d4af9cb39545b5e546144dd9b38c81332b175a8f45dc4694085dd83faad670d330734ff926d62f10594278d297e45e6cd0825e69724ea5b9141c831713e6f60768bf13fd88fe2686023bd2a569bb1984eedcc8b9b03050a13e04135ef0571d27e7fe0dc0dbe3de28ad4921e0ce1873b90224fd66e9391edfbd6f7be596926c5fc75be722bfa21f1820aa051b2f4b68e353f57f9cf3221e4096d4737a3e7f8414ec330d03e1dfdb4ef49573a74ecdb90ffdf83ec62d273bb514bb5494266c018b1616ee9d583e736c53bc0a83281fe63daaa0af2aed3cf0d34d96e7db538a75b1c842cf9f9b779a2fd6c64da5b3fc0360a54813d468ab83372dc4c98fe6591c6df8cc9d2b13cc4793e357b8637e1096deea5b4ca64821d8ac9d06198c2a38913ef9a91b5f2cab784ddca0e7ed2f995a0946005d6a3abcecdad7d6e34c533a3777350f8301b33f814233e89b3f7e15a607c910b5c2d096cf0634e0ce35d6128b383f8897b4f4ae3510a8c7df6892b4376d2e25afdabe3ff80622516af0140a4ed5df23517e9b83aebcd1f55ac420fed1fe87d8d3a2e247687ff777262f21dcb571c0e24b966e4fc37e14957ed966c4ef37cd4f8259bf5cc5f11eb2b3ce1672d9abcf7f9ff675c7183e2e05b3948afc4e75fed2c8bbe12e532f0c18c6963c38d071e625b7e9dfc4498cf78b779e82861d0f0bed2aaf17c6e8fae9cad0da3a487d75472374066e91654a9286d4df8d36b7d81f8af84629b6dd7e69dae660f7ec0bb6414e6047a5f4c78044e1259969198880f5cccc14333d82cd45ff50edb985498d5c974fce12eebab9aa2fb28d2ca836141bdbe88e6bfd9583ebc71b0cec1b897aa765c45b18868c051a72ba71c26745a64f8a07ed914b424d7e71078a4f139777d06e2ed6b0dd4041489b2402d472672f683d9cd3bd413cc2d9550c6eab17063abdabd66c9118dd7abbd", 0x1000}], 0x2, &(0x7f0000001fc0)}}], 0x1, 0x20000000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xa3c, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) splice(r10, &(0x7f00000020c0)=0x1ff, r3, &(0x7f0000002100), 0x8, 0x8) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@generic={&(0x7f0000002140)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x20, &(0x7f0000002280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe123, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x1, 0xa, 0x8, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x3, 0x1, 0x0, r11}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20}, @tail_call, @jmp={0x5, 0x0, 0x9, 0x8, 0xa, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x6, 0x6, 0xa, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0xf2a7c8a045c5743b, 0x0, 0x50, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002380)='GPL\x00', 0x3, 0x46, &(0x7f00000023c0)=""/70, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002640)={0x2, 0x4, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002700)=[r10, r10, r10, r6, 0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000002740)=[{0x1, 0x4, 0xf, 0xb}, {0x0, 0x1, 0x2, 0x5}, {0x3, 0x3, 0x10, 0x6}, {0x3, 0x2, 0x8, 0x7}, {0x4, 0x2, 0x7, 0x7}], 0x10, 0x6}, 0x94) 2m25.660365076s ago: executing program 2 (id=858): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x2034}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "c87b656e285d281181111413f0081ddc21c51ffc7e9526ed8503c2aa9a5e0a96d01a3ad6c30d6baa1bdf0f6c4db0f4286fccba8944cee7e579a8dc8b3cde07b51c0a437334c8c52b2cc9301fdc5a473aaf13fbd5536aa0c719f9e37963f8e40ae29ee94ccd6deef4750b5d9d6e8dc3967a4a5190ce4bc0dc8fac276a4270ec73d98334dbb9a2c0797698e4386e2c1872d2a04e6904ccd29d2a7b59082689da3602b982a9a619fa91f33a33723f92930f8a430d10ca1d979db27615a77556811503f3e6f300770b42f29d54f7f5f2fbe93144d1ee8a63e74d5f84c61acf20e8931d09f7c29048edbaff2ea4b29242fd9eec8082002947c4fa12d0fbffe2c4befd", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x2c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000000)='$]]P-\x00', 0x101c00, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x401]}, {0x82, 0x7, 0x0, 0x6}}, 0xc5c, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095", @ANYRES32=0x0, @ANYRES64=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800010003200000043fde183a00020001000000100008800c0007800800050009f4e04e"], 0x38}}, 0x0) 2m25.528583908s ago: executing program 2 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x200008c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000003f00)={0x0, 0x1, 0x5, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x2, 0x4000, 0x0, {{}, {0x0, 0x4000}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x20048080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x32600) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800c00"/28], 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2505"], 0x14}}, 0x4000080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000de03050000003d7ac453009e0000000100000010010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f0000000300)={r6, &(0x7f0000000000)='\\\x00', 0x214041, &(0x7f0000000340)={@_ha_fsid={[0x5, 0xa000]}, {0x8, 0xfe, 0x7, 0x14e3}}, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4e389}) 2m21.909177978s ago: executing program 32 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4000080) 2m10.47532228s ago: executing program 33 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x200008c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000003f00)={0x0, 0x1, 0x5, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x2, 0x4000, 0x0, {{}, {0x0, 0x4000}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x20048080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x32600) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800c00"/28], 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2505"], 0x14}}, 0x4000080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000de03050000003d7ac453009e0000000100000010010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f0000000300)={r6, &(0x7f0000000000)='\\\x00', 0x214041, &(0x7f0000000340)={@_ha_fsid={[0x5, 0xa000]}, {0x8, 0xfe, 0x7, 0x14e3}}, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4e389}) 2m7.749449049s ago: executing program 5 (id=1123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}}, 0xc048) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m7.557872315s ago: executing program 5 (id=1127): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) (async) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001400), &(0x7f0000001440)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a01000080000000000073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="fe29e6d127410cf9567d8205c576498643c0adcf20edf42eae98cc2f50a57c77c1e3f35d1755bba1ad90281a", 0x2c}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x45}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @remote}}}], 0x38}, 0xa4) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000340)="799edaf725709288fa5ffea9e57530bd2959d2081ae0ee9fe24ec24d5901ba4712dea45f1c7f8a493b478a60cf6378ef9f8fc512f468c958f17bf7e4c3ebca069c6e4a8831c9460016f4f3ef94c3a2601bc8b17aa9753f31edf017f49548d4c20a3fb6b716a4543ec493cae94afc69d7bf9140d45655de21a979e92b029f6bc782d812b689f871c1f65ddcccd64db0ee98702cfb03743de85a95523aa0eed83bc7c37f7150ed2301c8b8817131fa307c6c22b74a315a7ecce79a98b914133e59d67f9d0d63fc05e60b2af54c077661a342005434b55e313f2ea8bc5e66599cb010ee03b75682ae0d1ce056c332c372bceab6284af75af9810402671dd21658ad424639342f0a9c283a34b06088c61bbab22936039b1780727d9d2d8ea74c52a996ce27319155af920068233e29557abe55d643277d8cd7c10961c33e718633c64edb474c16165e2b8531ed5656df51ab558ed8f087fbdd10b741bf98132879ca5a7f947098e9a9ae162aa078cf826bd5f30c2214559fc5f8b6872acd0a73f1f8b5f73264cb72a3f19fa95afcbb535de5b822be7afa2323eb47f33b06adab98713bc1a5b0f72c5d6ee600ac7f365ade4a5023bd768334c728e55e84e61d8c85ddb5ada52b9448dd6f980171e0a530ecf03f3f446af1fd29040ff1fb1d8e136fb720c4051aabffe57500dc78dc4b5b874a48dd1e535dd3f970f00f3d6e18ed651f4d13d05d1a2bad7a4773ba4f0b687e260bc0a7c743d0659e19f5b9109850c35c8b46d76daad76eb8906c2f687757bb5ada87e1ee71f406a1a488d8fa540e899dd55fe5ee7409bc9ffe2f9709ba1063e4b683e4630f5a94d553e863ccf720d2ca4a3086fe611a84d86fb5eba50e44e5a2232d87ae5087898cfcd878fa7a89c97eb4986c3e94e0e9004041e7fa31826290877a0a27cc94cb956d978d1de88659f95303abf043402439e03ae2d0c94f0bb43aec3c4f26365d4b5ffdf442c80a1de98907dad31ad8728bbbaf47cfe28763446ef682fb80726987e8812c747f10f76ec951f6cd6262bf1f61ecbdd26b3f0108284dc0098fe9e73f0a521719cb23964f0ec84f6f4081d4c12872816f69496ad142045d01b799f79415df2dce634ac155a6a8cd0bc348b770c80f42c086f9f3055ce07b8dcbdc179d614cca96c11307cb49dd3e387020012381fb4c0bbec6ca7453fea9dd486e8ac1a2664c692013bea62befb7146eac83ce0a0349eb9212db85f480342115e28c02759d4492f161ed7b714b5f1904001989f52017a14ff5471f55f7c0eaca6ba2f261037f59806449b06bcfc6203d2bc050c65aede4fd3a31af882cf433ec2150db7aa0d3f6f8421a6633cf5dd438cfe57476ff76c4c434e010f6ab1c3073dfd02812e67d5242d37f193ca15a4e6e24640930437ee7c7dcf6af9188ccf0f1854e06129df26b7d03b13dc9cdfdb736ed57ce40b7d14d73aa6ee773cb3ed2a308a9ba20ad589efbee261f7fe72ff14a9509909587bfd3fe4f3a0194ea13bf09ec4cc762c42cd0d3f6b114ca62fa278db151177ad92915f1495e50a967319c0b6a90f232bf6965f824e61787235bc309f5e8d1355cb558d29f3aca66d2b6fae5d34a9dc3c313e13b566e67cbcceedef9839a1d6ea406bbeaacbbc7025239d10e0ba1bd12cd1b6cb0d8921d7e3be534f3870ba021f80c3969e349ff345033d67bd10013392927e405cf047be00e2a554d70f9c0916545e13adee53d94bb7dae5bc25ce14ceefaf14d8eb294a962eab0115cdf1069fae0aed5a564079346c827e33ab9d1a0be60676d21d64ab33d780f3115bf2e40f56ebcbb89b7eb29051d23ed9438b6cc35f99a589094f7ee4e9f59aa16946569687c3b265f33941502e3b064b31cf211c2fb3fe4f5be04538ab87522c80caeb31f96970fd5ffda618a6c8a1074f15c6991f2f53987996c18f8d6711de02cb864b42ed2ae62f5291ce425135d008afeb1622b18a293f4e07333dd7a439c4413ac05839adb2f5ccb474759b9ba1121fc6a393ac8cff17704a5418aaaf10f2e23b85ed8da327b4ce61b28182ea37e49ad066e622c4d288a74eeeb64a282fe9f0a178215baf6e054f8fc14303f37da726e5ed5f83642275a5689f3d582ae754c5102639049e795ad078b694db41bb34e4114e95361131e56cfd65a660653a38b802c8ea35ea19fd15f76a770643082f13ace13ec66ffd5f0ebba87da56f3d208afb643f9bece38a18ba30b7e12387b3ea64ce7babf0fa5786f36705052d4c9bd4d3590a9c31bdaa5508c1f7baafb70ce1f4ca68b149bc113c9a75e42a277674331133bde669fa76f0c3757cb797ac79a4c65bd532ac1d48275114bd66fa86691208571352a68dd9588ca86f3e7679063a6d8d8d657918d43272d426ee76b0c289bd6944f2b122d42216cd6de9515820161e322c4d1fe1993d30976eb22248b4f7e0abcc734cb87f2f047a5e54975cd9b63ce2a635111654820c4eaf329c3d2f7e1136591e2e2feef5ca9c3c4e38d50335e1f1dcf40217ab22c42719e403c2654703a2123bd455d1d8a1f0a30e2d853b7c4aa5472a82da61ab16ea0fcbdd52a4382a013f42645e51384a7383536184fb4549db034464c80cc4aee8ebb8f6f188ba8a12d958f6573ac0cb6fe98338c8e9a5e0c95f817e4f224598d052eadbfba9e0e15bb63469e52ac3ccfc4822f36af1e0f660dd636f6349f5e5ad7b075900e2c04b5e2f9798af4699877f4fc3b23c458a3e281b0192026e2e81383fc15af743f17c66f70e62d9067a5b199cc7e5b5c68922cc98989b3ab995a194248fb76413a661512f57234f443afb82f8a4922ae8901e136d569c8c0676624252029e5bae0476952c53e806d3090671ea4ad3be4ce611b4e2d61d45a03949e336eb6f2bc74ecbdf7f702bb6e60cd545ba041bf85d45ade9c4e70e5cfd10c7684acb2e0785ecf46bf0e6989829f17c69ee034984899a1589849374e9f3c9c787cbae4ab64a0b6b82df91bdcfa8858b43b43d742be59a092f58ea9aebb4383661d05ebd7170ec7ecaff399b6b5519b00fe6a5f2fb1f56d210121621b8e3e66c4a91b75023e5ed4525fcba46f98bf4369d8eae9f0ceb579eb6fa1081e02649f09c847d004e0118d338b44ccf4c6766f078f2df7867e948cbd51830ca740590e03f43c43e69e8d7cce0b2f293123b7d1b2e5bcc2c2108ea024683cb647b76954fb8f9e32afb3ce0f7217603d475d4832ec170c87b94961b92040a956cbc3945ed2d5050fba6480a5f56a7a3f8e167b706b7cc98338f41d570e82c9f51c4f416a44407dc5cd0e03df17a5d11af7d8bf19b25ccd227f7bdc2cf9aa101fcfd1a26302b9c8a3068f29ac06e97b2c363efce5603c604834dfc3c0d4886e1b958e26cbca537c7ffe962e94c1b5b2d306cb46638e96ffdd3f8fdbb81b5f572140d167bf3bfdbc3f8972339580162867472e13e69ef9e033c4b793fc8586a618253be3add1246859017c7757a680ff067ccb0e1a9ea1fbd35e9f3e1d232ba329be191f0474363cedb1248ca9472198225f537d29d3852472f304aef48aa442265dd08111a9625b4cd0ef1443831de1c7abb04fe148f7cac1f70856b1902230806429455cb5e82cbcfbf86028289126d7e6336846f89f53616c23f6ac6e7ff32eea287195b2b3783fc5725b336903f4fdea5ffefa99ce89a0735710e415ec0f99da5f3fe33ed285b3dd60c2457ebfe8908cff610a82a6670388d5f145fb344b508739d39a19cef25305a9cb81b7cb8a2a89f65c7a266b943b04d2f10c30102598a2d8d8bce73a49df559e5e227829c8e0a3dfe82d5e1c31548723148c2eca4e770683cb8b6359de8b98656d4b2a7ea28212ad9497e814fbab175b1d094c342aadc2c04f7537a48dd3ea6d662bcd17c559df10b41f02de956b9ea791aeab6983b3b19dba41d2effb26b152d800545649b1be1c14eaea934b4c1b8668ffb3242600c90f5058a98fc7cea209958a3cd5ee2546da984debe3e0b23a90841e7aac9dce1740426c3a34e33a00f9a0c5b79da82551a2fa237b6f753b505313809ba6ba3bb453b3f98937013954426682fb752957f723922cfa4b5a3efc3e19e3862815b454215e34df88b62167087ae7af7573da6602aa3e17e2512a482300da0380c1a779cb60a1bba430614a08b209b2022a1d7161f18a18b55dc85a32ca58cc894998b14643eae626c038e3b1cf1b75aaf785b602692bc8c3a2126b5b2541d3999a381139785fea6494f94246efdebfff0730790823dd0c3681cd63c626828a2438062a46cff01cbe1e1fded23c12c5d4d0cbe2c583593bb322bfdd444f5e87fa6e6feda2c9e50f53ed4dc893dd0f80b32ba3ccd829effaa563266ee027b9b6dffead3e66df0d8328d091d7c639cb3f12cefc22956915f25ea7d73eaeee2a6af9c305f5d3b3a386d6bc462b6497969d7d6d65ec0335fcf053f9f841abf4f7a42cf68e813d7f4815270756375d674274adfffce7bd6756d333ea23455eb5e866a3a45e02d8985cf19022169da4566addf87eab0778c5f96f4444a3b85aedc7f5c29b047db045305d9d693a291d774917b51ad6971350c6914d2a480dd5f6cb4fc1fa7ebf899d82f9bb16a7bb36dddd0d5ec3232e6db49fca7fa098cc345220efe598aa0852c50b185515d76bc1e89eac5304dce512732e0c4e12a542f25e6bdd144bd74fad51e7b3193eba254b8f79dc297d811d813ab2fa0bfe05a9e69d2943aa60ed631b4e609388794e93d40cf4d07c39debdf385e1eb19936f386975e435c3c58099dcd73c04ed85582917af4280b4ab82220abd9e37d122d8cc94644abbc47e37743d5cde8cb8229b01d63531cd93523d691a8b6b2bf5da41e6bc7be1ee117b173d292aa18bb66deb1de5246d860fc8f500fdfb13cc67cb726ab124f211983332ffba724f31707d99e61fdce93d1f1993270fdd3f7bb7dc66794300fe722d696ef7f647304e486f925188bca641c39b618069c7b5644be65fcabc10e05ece053def8f0e6f43fae1eaa17e3d05221902090bfadcdec1751e7009351ab528f5ebb62328fd5954cd86f657120dd415d49901d9b8d819aa552caa164b8d631376618fbb96e125178e04414b98c55c284bdbdaf686f85a971555dc14ba579618098263248de3a29f0a397241757c3bb8058ea7451d3612ef27ad639c7975363def239824ecefcdf2241feb6ca9a3e5fde6674a109e2c5783f0df917c2890eb11cc4091a348270f93fc86b2081f88bbf3bd0e9dada73f1c00328dac9a0b0f8e674915bec9b4a181e989aef6d70148c16f7ffe203634b763a32a69be44da17811634ad9ad0a757f267830d14c3e08575ab722a512c5e4c1a64396bb4f007702349e5219e3919c6b945876284032127eed8dd7a0db6b4887eb4889e9a458f4633c7be1d80ba502a3a7c2ab0478e817f326a42cb83c974ee8fa77f1593cb4dde5d951052588b773ad2d5c1fde8e0f3299ac1d79a90fc6f35aba4b727d1769eb9b442c1f5e32cbc9210b0adecc09efd5903ea1de5677697bbf0f0b2af7c65a0e1594f04dcde559604e92c2ee2d3af2cf3525fbb70401a5e9fead8f12ac8d109d3e6905ed4ca655efebfdffc3e7366881c60684aaafd8429291329276bbf1b7e04bd7eb93ea87a84e4440a868ab7c3494e904212cc37c88653d8530b627b8a3c4b0386edb6725d9313441bc6c56b95790be414697117b45c1282e741c5f3d13fc174872689677b5600d7d1d22588991474f73212da229b352d922111facc35271338870c1079c82804ba", 0x1000}, {&(0x7f0000001340)="85b921788353e151458f9790a6f158902a8a8e7ff15fd3b1c27911a53dd7161167", 0x21}], 0x2}, 0x4000000) 2m7.323621625s ago: executing program 5 (id=1130): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x2, 0xfff1}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r4, 0x3f}, 0x80, &(0x7f00000001c0)}, 0xc005) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r9, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m6.535817535s ago: executing program 5 (id=1140): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x7, 0x3, 0x6, 0x0, 0x0, [{{r0}, 0xfffffffffffffff0}, {{r0}, 0x3}, {{r2}, 0x6}, {{r0}, 0x3}, {{r0}, 0xc99}, {{r0}, 0x4}]}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x89, @remote, 0x4e21, 0x1, 'fo\x00', 0x23, 0xd, 0x47}, 0x2c) 2m6.264120191s ago: executing program 5 (id=1145): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000fb5600000000000001000000000000711245ba8926ed11565abcbfa7740702b786d80000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) recvfrom$unix(r1, &(0x7f0000001340)=""/4096, 0x1000, 0x2002, &(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000fb5600000000000001000000000000711245ba8926ed11565abcbfa7740702b786d80000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) recvfrom$unix(r1, &(0x7f0000001340)=""/4096, 0x1000, 0x2002, &(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 2m5.872906885s ago: executing program 5 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x28}}, 0x4000800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pi6 \x00'}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c80)={r0, &(0x7f0000000b80)=',\x00', 0x400040, &(0x7f0000000bc0)={@_ha_fsid={[0x9833, 0x5]}, {0x9, 0x1ff, 0xfffffff8, 0x1000}}, 0x0, &(0x7f0000000c00)={@_ha_fsid}, &(0x7f0000000c40)=0x31}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000700)=@raw=[@alu={0x0, 0x1, 0x3, 0x7, 0x2, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x7}, @generic={0x2, 0x5, 0xe, 0x8, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe02f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000007c0)='GPL\x00', 0x6, 0xac, &(0x7f0000000800)=""/172, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xa, 0xfffffffe, 0x1ff}, 0x10, 0x1f3d0, r4, 0x2, &(0x7f0000000cc0)=[r0, r13, r0, r0, r0, r14, r0], &(0x7f0000000d00)=[{0x3, 0x1, 0x6, 0x4}, {0x0, 0x5, 0xb, 0xc}], 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m50.825309795s ago: executing program 34 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x28}}, 0x4000800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pi6 \x00'}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c80)={r0, &(0x7f0000000b80)=',\x00', 0x400040, &(0x7f0000000bc0)={@_ha_fsid={[0x9833, 0x5]}, {0x9, 0x1ff, 0xfffffff8, 0x1000}}, 0x0, &(0x7f0000000c00)={@_ha_fsid}, &(0x7f0000000c40)=0x31}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000700)=@raw=[@alu={0x0, 0x1, 0x3, 0x7, 0x2, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x7}, @generic={0x2, 0x5, 0xe, 0x8, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe02f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000007c0)='GPL\x00', 0x6, 0xac, &(0x7f0000000800)=""/172, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xa, 0xfffffffe, 0x1ff}, 0x10, 0x1f3d0, r4, 0x2, &(0x7f0000000cc0)=[r0, r13, r0, r0, r0, r14, r0], &(0x7f0000000d00)=[{0x3, 0x1, 0x6, 0x4}, {0x0, 0x5, 0xb, 0xc}], 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 11.23913549s ago: executing program 7 (id=2554): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 11.104638964s ago: executing program 7 (id=2558): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) accept4$llc(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 10.549920342s ago: executing program 7 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x28, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0x0, {0x7}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1d, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000001c0)={0x4, 0x9}) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xff7f}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvfrom(r0, &(0x7f0000000080)=""/105, 0x69, 0x40000102, &(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) 9.828300964s ago: executing program 7 (id=2568): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4004884) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xc028}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2bd9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10000880}, 0x40) 9.649200032s ago: executing program 7 (id=2571): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x280, 0x0, 0x370, 0x280, 0x370, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xfdff], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 9.582330688s ago: executing program 7 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x80000001, 0x1, 0x7, 0x1}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa, 0x0, 0x2000000000000000}, {0x0, 0x0, 0x4, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0xfffffffc, 0x3c}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) sendto$inet6(r3, 0x0, 0x0, 0x20048001, &(0x7f00000006c0)={0xa, 0x4e22, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, 0x400}, 0x1c) 5.156958157s ago: executing program 0 (id=2622): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x14, 0x5e, 0x1, 0x1, 0xffffffff, "", [@nested={0x4, 0xff}]}, 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x2000c014) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0xe6, @mcast2, 0x102000}, @in6={0xa, 0x4e20, 0xffff, @loopback}, @in6={0xa, 0x4e24, 0x80000001, @mcast2, 0x10000}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0xef8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}, @in6={0xa, 0x4e22, 0x8, @empty, 0x4d6b}], 0xbc) 4.953974297s ago: executing program 0 (id=2624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) 4.705302178s ago: executing program 0 (id=2626): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0xf, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800d689d1d448414c07ae91a537000004000002000bb10843601ab47c52c23726ca7d2f0c9756abce71bddb7c5404714616130f8839b2db0578b51878465253af19966b066f801673ad4395264e99e136518fe2f49cf0c483098dfd70260acbe4fe62756b9547d3b61025bd18c95fc197c983d31c62c36dbe6f25992ff1e23a79a8c09d2c98c88b57bb95", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x40000) 4.602493091s ago: executing program 0 (id=2627): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000003f001001000001"], 0x18}, 0x4c080) 4.580542619s ago: executing program 0 (id=2628): r0 = socket(0xa, 0x6, 0xffbffffd) socket$inet(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffff7242f15d7900f79e2203db480faaaaaaaaaa027662080008004500fdd640000000032f907800001f"], 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_tcp_int(r8, 0x6, 0x1b, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x1b, &(0x7f0000000000)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0xdc, 0x2, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_TUPLE={0xac, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xdc}}, 0x4044000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300fa000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100730073797a32000000001400000011000100000000000000000000783534a110cb087b8464045d441981903337ea2f46d27e5152aacc5a24679fdc317afa2de0316dc4f1e123d3635f182738bfbfef7c073ba19af9888872aed788facc7f4d"], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0xd]}, 0x6) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$netlink(0x10, 0x3, 0x12) (async) socket$netlink(0x10, 0x3, 0x12) 4.221792309s ago: executing program 0 (id=2629): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$inet6(0xa, 0x3, 0x80) getsockopt$sock_buf(r2, 0x1, 0x2b, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x5, 0x6f3c) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000380)={[{0x2d, 'net_prio'}]}, 0xa) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r14 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r12, &(0x7f00000002c0)={0x2c, 0x8, r13, 0x8, r14}, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$tun(r11, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x356) 1.556569495s ago: executing program 6 (id=2660): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10003, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="420200800000008cf9c9b60bb459bdc89e92a83a8ec762a308c982e204a707e8a7833db5fa97ae3514886fc23ffd686ccc6228b3e76c2c269bca3d55d59033bbcc9cf5afaab6b98138ee1407f1c2ad7cd9523fdc1a73d87f826097db4f09385eca7fe7b361011bf41a34cd4c6610aed8189fcd248212eb3f0d45d15daa6211b959c5e3b39e69e518672fc89be2ec3953da730b06f959f0e4095aa136af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$FIONCLEX(r2, 0x5450) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x2fc, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x405}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}]}]}], {0x14}}, 0x34c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00', 0x6100}) 1.533271897s ago: executing program 4 (id=2661): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x40, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xe) sendmmsg$inet(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="1ef488120e000a6e7fc5b07f1b24899a7d2bda61c709b619001e7f3909776e8a5bde61d19dcc956ccb0dc71673332185b8ad73539777395c2730aa8d38562551e159da83c0e0", 0x46}, {&(0x7f0000000240)="a3f5cc12090287302c26b20dfda0ad3d45b65f8bd59bd9045ae0b4463ff8e47d20b3d5ee8cca444dd0538e237120323c83922a15098978dd43bd538951281dbe5f6feb05fb8f0996d1656ef5e1372321eab5a9c8d772e7d3f4421432845003bd642ac9385bc3bfc6060cb602a2cee70836a46daecbeddc01f639", 0x7a}, {&(0x7f0000000580)="4a15934f2081a953c42cc7c08dafa2f7d176ea51cf957a0d5411ae04fa20e98686d745cf96b0d9b1b19df0b2c54ce3563fad7068cbd7a4cbf795ca6ca02d1d49e70a2cad65fafb98e641adf6889f4f551dfec521b299959840f797ad919bab191596817ca8536f8f10d2013516c7b91a360fc27193ec3e4f403bed9c653139b7b588be92ca8238717c02385e6d0673cc3a2979a5dd5808501d186585a49bac3f7a01f409bb391a021dca16a336dd2658dc57452cb227f7b356ad5321935aa604abd0d9dff02bf142f28b04b26b1cc0f410ae3f4283ef8ff4fde422b2d199acd0b0c9319f64d4", 0xe6}, {&(0x7f0000000680)="4334fbb2f880230ca3b702d3962271e1ff4af440242593f7e66a2c7eb9d70520c6240a7810774e90239cab0f92f17eae521055154da27fd512640e8592de1e9771184e80a1e91ef8a175683e02380b36632517fba29a8266310c9e10e0a57b5eb16b4dab34012026b962a2b8f202d6bec017806d4ee337d456cca8f3", 0x7c}, {&(0x7f0000000700)="b747c857e7f3b09ebc2f2a5cc3d5856ec4194789589d69c6ba33f6df1a0dab602a9a70f42c3cc13a6d2c0cbc5f5531b6b89af7c0717c067e3bb9ef2925f87c91eb9a443fe76ca562587a207443c4b0888c78a97874d3a9bbc4a8650d42255b19380e5ac7752bd1df60d300846c28821694d3e5df362cfd2a0d8b51340e96f8", 0x7f}], 0x5}}], 0x1, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x20}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1.478569852s ago: executing program 6 (id=2663): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=@srh={0x32, 0xa, 0x4, 0x5, 0x79, 0x28, 0x6, [@remote, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, @mcast1, @local]}, 0x58) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback}, 0x1c) 1.418029018s ago: executing program 6 (id=2664): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x24, 0x2, 0x1, 0x2, 0x200, 0x7ff}, {0x5, 0x0, 0xf, 0x7ff}, 0x6, 0x1aec, 0xf39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x9}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x85}], 0x1, 0x1022, 0x0) 926.98497ms ago: executing program 1 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900011873797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 926.483714ms ago: executing program 1 (id=2669): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_FLOW={0x8, 0xb, 0xfffffffe}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) pread64(r7, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/29, 0x1d}], 0x3, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x2140) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 867.098174ms ago: executing program 1 (id=2670): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 783.795046ms ago: executing program 1 (id=2671): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a71327322c2a4f35", "082c916ce9c137da4f0a5db31947ceb83780d6809721dbffa4425a120ac816f2", "fcda065e", "1f2eecec96d17b44"}, 0x38) setsockopt$inet6_tcp_int(r4, 0x11a, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0x62f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r5 = socket(0x23, 0x5, 0x0) getsockopt(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000040)=0xfffffb6c, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0xffffffffffffff42}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r9}, 0x38) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="7000000000000000000000000a0000051800170000000007000000080000000c0000000e000000010800074040357ad00c0018800800024000000001200017000000000400008dd000000401080008400000000106001240000300"/108], 0x70}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) 394.994623ms ago: executing program 6 (id=2672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r0], 0x38}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 394.666851ms ago: executing program 4 (id=2673): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 339.203515ms ago: executing program 1 (id=2674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000180)={0xfffffffd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) 325.79224ms ago: executing program 4 (id=2675): r0 = socket$key(0xf, 0x3, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 170.238391ms ago: executing program 4 (id=2676): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf250000000008000000", @ANYRES32=0x0, @ANYBLOB="080008000ef8694aeba6e224c96ce52348cd45d4f1915fbba584e0c1710918d94d79c56c38131387cfa5e0d4cb2d0895e1c3165daa2b08a0feecaae96b164ed35347e4c15bc102ede4bedd5c51b90ebac3", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x8000000}, 0x0) r2 = socket(0xf, 0x80000, 0x9) sendto(r2, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20004050, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4107, 0x100b}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000008c0)=""/257, 0x101}, {&(0x7f0000001040)=""/108, 0x6c}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/70, 0x46}], 0xa}, 0x3}], 0x1, 0x2040, 0x0) 169.720624ms ago: executing program 6 (id=2677): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/66, 0x42}, {&(0x7f00000012c0)=""/232, 0xe8}], 0x3) connect$bt_l2cap(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) shutdown(r0, 0x1) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/66, 0x42}, {&(0x7f00000012c0)=""/232, 0xe8}], 0x3) (async) connect$bt_l2cap(r0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) (async) 130.865701ms ago: executing program 1 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900011b73797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 107.328847ms ago: executing program 4 (id=2679): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a000000041000701fefffffffeffffff017c00002562973ad14b8bfe62b948d0280de2c6923badcb3ac84485f46f57ceb98598ff1756278b148bec763ddb9c84b9c9978b664732c8d92fa320069aadc123f3f07d45de71f2929855cd941b55ba439099a791f51db4ca3bcb4e97dec27e9c745c3c044536ca701c25a6925566b363e223c2440800018006000600800a000009000280040014807d000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 269.597µs ago: executing program 6 (id=2680): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) (async) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404401d}, 0x0) 0s ago: executing program 4 (id=2681): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) (async) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0x10}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.4.770'. [ 152.144765][ T8565] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.770'. [ 152.610496][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 152.637036][ T8594] team0: Port device team_slave_0 removed [ 152.673135][ T8597] netlink: 84 bytes leftover after parsing attributes in process `syz.1.782'. [ 152.711788][ T8602] syz_tun: entered promiscuous mode [ 152.721389][ T8599] 8021q: VLANs not supported on ip6tnl0 [ 152.727387][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 152.738912][ T8599] netlink: 'syz.2.783': attribute type 3 has an invalid length. [ 152.756479][ T8602] syz_tun (unregistering): left promiscuous mode [ 152.763841][ T8599] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 152.862255][ T8609] netlink: 'syz.2.787': attribute type 32 has an invalid length. [ 152.870506][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 152.913042][ T8609] bond3: Setting coupled_control to off (0) [ 153.049390][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 153.063381][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 153.635010][ T8665] netlink: 'syz.4.804': attribute type 11 has an invalid length. [ 153.856411][ T8682] syzkaller0: entered promiscuous mode [ 153.877881][ T8682] syzkaller0: entered allmulticast mode [ 153.904545][ T8685] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 154.031474][ T8694] macvlan3: entered promiscuous mode [ 154.044587][ T8694] macvlan3: entered allmulticast mode [ 154.051591][ T8694] bond5: (slave macvlan3): Opening slave failed [ 154.106030][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.207031][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.285685][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.313045][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.473065][ T8724] dummy0: entered allmulticast mode [ 154.957474][ T8761] netlink: 'syz.4.832': attribute type 4 has an invalid length. [ 155.060476][ T8775] netlink: 'syz.1.835': attribute type 7 has an invalid length. [ 155.132220][ T8779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.307491][ T8789] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 155.422196][ T8795] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 155.436873][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.457541][ T8795] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.543631][ T8799] syzkaller0: entered promiscuous mode [ 155.550837][ T8799] syzkaller0: entered allmulticast mode [ 155.581345][ T8801] netlink: 'syz.4.843': attribute type 2 has an invalid length. [ 155.609741][ T8805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.690710][ T8807] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 156.184809][ T8842] vlan2: entered promiscuous mode [ 156.192925][ T8842] geneve1: entered promiscuous mode [ 156.199229][ T8842] vlan2: entered allmulticast mode [ 156.204573][ T8842] geneve1: entered allmulticast mode [ 156.360480][ T8851] veth3: entered allmulticast mode [ 156.501138][ T8861] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 156.674486][ T8868] __nla_validate_parse: 12 callbacks suppressed [ 156.674499][ T8868] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.867'. [ 156.781882][ T8871] netlink: set zone limit has 4 unknown bytes [ 156.853974][ T8867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.220751][ T8887] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.874'. [ 157.268710][ T8889] netlink: 240 bytes leftover after parsing attributes in process `syz.0.875'. [ 157.837229][ T8918] validate_nla: 2 callbacks suppressed [ 157.837247][ T8918] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 157.875779][ T8920] vcan0: entered allmulticast mode [ 157.885416][ T8920] macvlan0: entered promiscuous mode [ 158.028089][ T8927] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 158.040624][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 158.093308][ T8925] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 158.114272][ T8925] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 158.124136][ T8925] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 158.336319][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 158.347805][ T8947] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.355585][ T8947] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.438762][ T5358] IPVS: starting estimator thread 0... [ 158.542776][ T8960] netlink: 'syz.1.898': attribute type 12 has an invalid length. [ 158.550654][ T8954] IPVS: using max 36 ests per chain, 86400 per kthread [ 158.558750][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.898'. [ 158.641758][ T8965] sit0: Caught tx_queue_len zero misconfig [ 158.930061][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 158.964178][ T8987] bond6 (unregistering): Released all slaves [ 159.059531][ T8994] syzkaller1: entered promiscuous mode [ 159.072905][ T8994] syzkaller1: entered allmulticast mode [ 159.138900][ T8999] netlink: 'syz.0.909': attribute type 16 has an invalid length. [ 159.154095][ T8999] netlink: 'syz.0.909': attribute type 3 has an invalid length. [ 159.164795][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 159.179844][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'. [ 159.188894][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'. [ 159.563256][ T9026] xt_bpf: check failed: parse error [ 159.662363][ T9032] veth0: entered promiscuous mode [ 159.674041][ T9029] veth0: left promiscuous mode [ 159.734532][ T9038] dummy0: Caught tx_queue_len zero misconfig [ 160.231988][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.247154][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.258241][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.269636][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.279088][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.302546][ T9064] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 160.312347][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.321819][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.330749][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.348406][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.358495][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.800557][ T5644] block nbd0: Receive control failed (result -32) [ 161.174092][ T9117] netlink: 'syz.4.939': attribute type 8 has an invalid length. [ 161.466753][ T9135] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 161.484868][ T9135] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 161.504204][ T9135] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 161.644737][ T9146] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 162.355657][ T995] IPVS: starting estimator thread 0... [ 162.370041][ T9183] __nla_validate_parse: 7 callbacks suppressed [ 162.370058][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 162.399406][ T5644] Bluetooth: hci5: command tx timeout [ 162.404894][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.412662][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.421477][ T9058] bridge_slave_0: entered allmulticast mode [ 162.429849][ T9058] bridge_slave_0: entered promiscuous mode [ 162.445598][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.452981][ T9186] IPVS: using max 35 ests per chain, 84000 per kthread [ 162.460282][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.469251][ T9058] bridge_slave_1: entered allmulticast mode [ 162.476365][ T9058] bridge_slave_1: entered promiscuous mode [ 162.499187][ T9191] netlink: 'syz.1.957': attribute type 7 has an invalid length. [ 162.535734][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.539474][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.957'. [ 162.550554][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.626013][ T9058] team0: Port device team_slave_0 added [ 162.642948][ T9058] team0: Port device team_slave_1 added [ 162.650058][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 162.689415][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.701308][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.745780][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.767872][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.775706][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.802828][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.822802][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 162.840517][ T9199] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.961'. [ 162.888481][ T9058] hsr_slave_0: entered promiscuous mode [ 162.910138][ T9058] hsr_slave_1: entered promiscuous mode [ 162.917097][ T9058] debugfs: 'hsr0' already exists in 'hsr' [ 162.938919][ T9058] Cannot create hsr debugfs directory [ 163.145785][ T9213] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 163.173476][ T9213] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 163.206274][ T9214] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 163.255787][ T9218] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 163.423112][ T9058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.435938][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.444502][ T9058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.455714][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.465159][ T9058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.486466][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.504451][ T9058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.519254][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.645851][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.671900][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 163.672282][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.709894][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.717147][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.736201][ T9238] gretap1: entered promiscuous mode [ 163.742841][ T9238] batman_adv: batadv0: Adding interface: gretap1 [ 163.751667][ T9238] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 163.771819][ T9238] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 163.792139][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.799353][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.353377][ T9265] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 164.356152][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.478605][ T5644] Bluetooth: hci5: command tx timeout [ 164.616160][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 164.627254][ T9277] netlink: 'syz.0.980': attribute type 16 has an invalid length. [ 164.635453][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 164.769776][ T9058] veth0_vlan: entered promiscuous mode [ 164.785193][ T9058] veth1_vlan: entered promiscuous mode [ 164.847644][ T9058] veth0_macvtap: entered promiscuous mode [ 164.868329][ T9058] veth1_macvtap: entered promiscuous mode [ 164.921865][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.986444][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.007278][ T9291] netlink: 236 bytes leftover after parsing attributes in process `syz.4.983'. [ 165.017462][ T9291] netlink: 236 bytes leftover after parsing attributes in process `syz.4.983'. [ 165.027245][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.036780][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.064772][ T9288] netlink: 'syz.4.983': attribute type 3 has an invalid length. [ 165.073165][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.088792][ T9288] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 165.089428][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.206645][ T9295] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.244173][ T9295] netlink: 'syz.1.986': attribute type 2 has an invalid length. [ 165.257365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.272614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.319540][ T9295] : entered promiscuous mode [ 165.366144][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.402273][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.470774][ T9306] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.510710][ T9306] openvswitch: netlink: Flow key attr not present in new flow. [ 165.915395][ T9327] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 165.933319][ T9327] netlink: 'syz.5.924': attribute type 2 has an invalid length. [ 165.950681][ T9326] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 165.975667][ T9326] netlink: 'syz.5.924': attribute type 2 has an invalid length. [ 166.283012][ T9350] netlink: 'syz.1.998': attribute type 11 has an invalid length. [ 166.563887][ T5644] Bluetooth: hci5: command tx timeout [ 166.841900][ T9367] NCSI netlink: No device for ifindex 813332851 [ 166.978374][ T171] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76 [ 167.397972][ T9387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.780740][ T171] bond0: (slave ŖŖŖŖŖŖ): link status definitely down, disabling slave [ 167.796317][ T9412] __nla_validate_parse: 7 callbacks suppressed [ 167.796337][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 167.905251][ T9418] syzkaller0: entered promiscuous mode [ 167.911484][ T9418] syzkaller0: entered allmulticast mode [ 168.029386][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 168.281825][ T9443] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1029'. [ 168.291616][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1029'. [ 168.336658][ T9446] xt_addrtype: ipv6 does not support BROADCAST matching [ 168.339073][ T9443] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ē–½mŌ%AÆśĘ’AZųZ“”ąIĘŗŸŻ™„ž [ 168.637809][ T5644] Bluetooth: hci5: command tx timeout [ 168.722360][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 168.735410][ T9468] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1037'. [ 168.745055][ T9468] validate_nla: 4 callbacks suppressed [ 168.745069][ T9468] netlink: 'syz.4.1037': attribute type 5 has an invalid length. [ 168.762332][ T9468] netlink: 'syz.4.1037': attribute type 18 has an invalid length. [ 168.778094][ T9468] netlink: 'syz.4.1037': attribute type 18 has an invalid length. [ 168.786038][ T8318] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.795708][ T8318] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.808556][ T8318] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.829697][ T8318] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.982982][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 169.002498][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 169.012306][ T9481] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 169.109766][ T9483] netlink: 'syz.0.1042': attribute type 12 has an invalid length. [ 169.146822][ T9483] netlink: 'syz.0.1042': attribute type 29 has an invalid length. [ 169.172487][ T9483] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1042'. [ 169.196283][ T9483] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 169.226097][ T9483] netlink: 'syz.0.1042': attribute type 2 has an invalid length. [ 169.249660][ T9483] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1042'. [ 169.401061][ T9503] sctp: [Deprecated]: syz.4.1047 (pid 9503) Use of int in max_burst socket option. [ 169.401061][ T9503] Use struct sctp_assoc_value instead [ 169.449041][ T9513] sctp: [Deprecated]: syz.4.1047 (pid 9513) Use of int in max_burst socket option. [ 169.449041][ T9513] Use struct sctp_assoc_value instead [ 169.845455][ T9537] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 169.921688][ T9547] syz_tun: refused to change device tx_queue_len [ 170.369804][ T9572] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 170.380218][ T9572] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 170.403083][ T9572] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 170.876974][ T9602] x_tables: duplicate underflow at hook 3 [ 170.944370][ T9611] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 171.019678][ T9602] bond2: entered promiscuous mode [ 171.029647][ T9602] bond2: entered allmulticast mode [ 171.140053][ T9622] netlink: 'syz.5.1080': attribute type 21 has an invalid length. [ 171.574743][ T9645] netlink: 'syz.5.1090': attribute type 2 has an invalid length. [ 171.654113][ T9653] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 171.779374][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.792101][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.800595][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.808854][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.820073][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.876356][ T9663] vxcan1: entered promiscuous mode [ 171.887349][ T9663] vxcan1: entered allmulticast mode [ 172.370789][ T9692] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 172.860173][ T9719] __nla_validate_parse: 11 callbacks suppressed [ 172.860192][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 173.138414][ T9730] FAULT_INJECTION: forcing a failure. [ 173.138414][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.156308][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.5.1115 Not tainted syzkaller #0 PREEMPT(full) [ 173.156332][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.156342][ T9730] Call Trace: [ 173.156349][ T9730] [ 173.156356][ T9730] dump_stack_lvl+0xe8/0x150 [ 173.156388][ T9730] should_fail_ex+0x40c/0x560 [ 173.156412][ T9730] _copy_from_user+0x2d/0xb0 [ 173.156439][ T9730] ___sys_sendmsg+0x1c6/0x360 [ 173.156464][ T9730] ? __lock_acquire+0x683/0x2cf0 [ 173.156494][ T9730] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.156554][ T9730] ? __fget_files+0x2a/0x420 [ 173.156585][ T9730] ? __fget_files+0x3a2/0x420 [ 173.156617][ T9730] __x64_sys_sendmsg+0x1b1/0x290 [ 173.156662][ T9730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.156707][ T9730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.156727][ T9730] do_syscall_64+0x174/0x580 [ 173.156751][ T9730] ? trace_irq_disable+0x3b/0x140 [ 173.156774][ T9730] ? clear_bhb_loop+0x40/0x90 [ 173.156797][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.156816][ T9730] RIP: 0033:0x7fe241b9de59 [ 173.156834][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.156849][ T9730] RSP: 002b:00007fe24299a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.156869][ T9730] RAX: ffffffffffffffda RBX: 00007fe241e25fa0 RCX: 00007fe241b9de59 [ 173.156882][ T9730] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 000000000000000b [ 173.156894][ T9730] RBP: 00007fe24299a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.156905][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.156916][ T9730] R13: 00007fe241e26038 R14: 00007fe241e25fa0 R15: 00007ffe572d90a8 [ 173.156946][ T9730] [ 173.469122][ T9744] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.636627][ T9748] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1117'. [ 173.671527][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 173.694710][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 173.886566][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.896186][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.903702][ T9657] bridge_slave_0: entered allmulticast mode [ 173.910911][ T9657] bridge_slave_0: entered promiscuous mode [ 173.919441][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.919521][ T5644] Bluetooth: hci6: command tx timeout [ 173.926569][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.926771][ T9657] bridge_slave_1: entered allmulticast mode [ 173.948118][ T9657] bridge_slave_1: entered promiscuous mode [ 173.987995][ T9766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.994593][ T9766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.002899][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 174.026761][ T9767] hsr_slave_0: left promiscuous mode [ 174.033869][ T9767] hsr_slave_1: left promiscuous mode [ 174.065011][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.085297][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.155470][ T9657] team0: Port device team_slave_0 added [ 174.188297][ T9657] team0: Port device team_slave_1 added [ 174.264802][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.281441][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.337352][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.405230][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.430219][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.465902][ T9787] FAULT_INJECTION: forcing a failure. [ 174.465902][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 174.484160][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.505080][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.4.1128 Not tainted syzkaller #0 PREEMPT(full) [ 174.505105][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.505115][ T9787] Call Trace: [ 174.505123][ T9787] [ 174.505131][ T9787] dump_stack_lvl+0xe8/0x150 [ 174.505162][ T9787] should_fail_ex+0x40c/0x560 [ 174.505187][ T9787] should_failslab+0xa8/0x100 [ 174.505214][ T9787] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 174.505236][ T9787] ? local_lock_release+0x9c/0x160 [ 174.505262][ T9787] ? __alloc_skb+0x1d7/0x7a0 [ 174.505283][ T9787] ? __alloc_skb+0x1d7/0x7a0 [ 174.505312][ T9787] __alloc_skb+0x1d7/0x7a0 [ 174.505358][ T9787] netlink_sendmsg+0x5d4/0xb40 [ 174.505396][ T9787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.505428][ T9787] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.505452][ T9787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.505479][ T9787] sock_sendmsg_nosec+0x13a/0x180 [ 174.505503][ T9787] ____sys_sendmsg+0x54e/0x850 [ 174.505535][ T9787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.505571][ T9787] ? import_iovec+0x73/0xa0 [ 174.505600][ T9787] ___sys_sendmsg+0x2a5/0x360 [ 174.505625][ T9787] ? __lock_acquire+0x683/0x2cf0 [ 174.505654][ T9787] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.505714][ T9787] ? __fget_files+0x2a/0x420 [ 174.505737][ T9787] ? __fget_files+0x3a2/0x420 [ 174.505771][ T9787] __x64_sys_sendmsg+0x1b1/0x290 [ 174.505800][ T9787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.505842][ T9787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.505863][ T9787] do_syscall_64+0x174/0x580 [ 174.505887][ T9787] ? trace_irq_disable+0x3b/0x140 [ 174.505909][ T9787] ? clear_bhb_loop+0x40/0x90 [ 174.505932][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.505950][ T9787] RIP: 0033:0x7f470fd9de59 [ 174.505968][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.505983][ T9787] RSP: 002b:00007f4710d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.506003][ T9787] RAX: ffffffffffffffda RBX: 00007f4710025fa0 RCX: 00007f470fd9de59 [ 174.506017][ T9787] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 174.506029][ T9787] RBP: 00007f4710d06090 R08: 0000000000000000 R09: 0000000000000000 [ 174.506040][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.506051][ T9787] R13: 00007f4710026038 R14: 00007f4710025fa0 R15: 00007ffece5e9428 [ 174.506080][ T9787] [ 174.512014][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 174.581216][ T9791] syzkaller0: entered promiscuous mode [ 174.743213][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 174.752340][ T9791] syzkaller0: entered allmulticast mode [ 175.001814][ T9657] hsr_slave_0: entered promiscuous mode [ 175.011367][ T9657] hsr_slave_1: entered promiscuous mode [ 175.019636][ T9657] debugfs: 'hsr0' already exists in 'hsr' [ 175.025497][ T9657] Cannot create hsr debugfs directory [ 175.501702][ T9828] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 175.748740][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1145'. [ 175.792640][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1147'. [ 175.928584][ T9854] x_tables: duplicate underflow at hook 1 [ 176.001592][ T5644] Bluetooth: hci6: command tx timeout [ 176.207422][ T9657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.254329][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.263179][ T9657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.285199][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.298620][ T9657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.313802][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.324447][ T9657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.336842][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.347028][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 176.494351][ T9895] bond3: option fail_over_mac: invalid value (16) [ 176.502555][ T9895] bond3 (unregistering): Released all slaves [ 176.533466][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.566593][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.581257][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.588499][ T8325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.604419][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.611643][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.191626][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.087770][ T5644] Bluetooth: hci6: command tx timeout [ 178.330866][ T9936] __nla_validate_parse: 1 callbacks suppressed [ 178.330909][ T9936] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1164'. [ 178.366862][ T9937] validate_nla: 1 callbacks suppressed [ 178.366878][ T9937] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 178.377479][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1165'. [ 178.464201][ T9657] veth0_vlan: entered promiscuous mode [ 178.484574][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 178.504631][ T9657] veth1_vlan: entered promiscuous mode [ 178.604902][ T9657] veth0_macvtap: entered promiscuous mode [ 178.612998][ T9952] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 178.627458][ T9951] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 178.637518][ T9657] veth1_macvtap: entered promiscuous mode [ 178.650650][ T9951] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.678039][ T32] bond0: (slave ŖŖŖŖŖŖ): link status definitely up, 10000 Mbps full duplex [ 178.713007][ T9956] tunl0: entered promiscuous mode [ 178.740921][ T9956] netlink: 'syz.4.1169': attribute type 4 has an invalid length. [ 178.752371][ T9958] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 178.771968][ T9956] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1169'. [ 178.792788][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.822703][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.864198][ T1020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.889034][ T9963] syzkaller0: entered promiscuous mode [ 178.895689][ T9963] syzkaller0: entered allmulticast mode [ 178.912110][ T1020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.917455][ T9965] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 178.922186][ T1020] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.974208][ T1020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.112517][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.132221][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.190009][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.199230][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.313082][ T9976] netlink: 'syz.6.1088': attribute type 2 has an invalid length. [ 179.809880][T10002] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 179.891111][T10002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.951923][T10002] bond0: (slave dummy0): Releasing backup interface [ 179.984248][T10008] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 180.018767][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1184'. [ 180.070273][T10002] bond3: (slave dummy0): making interface the new active one [ 180.086285][T10002] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 180.109806][T10008] dummy0: entered promiscuous mode [ 180.137666][T10008] bond3: (slave dummy0): Releasing active interface [ 180.167856][ T5644] Bluetooth: hci6: command tx timeout [ 180.234629][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 180.537242][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 180.577406][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 180.734852][T10042] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1195'. [ 180.745981][T10046] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1197'. [ 180.767294][T10044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 180.967288][T10053] tipc: Failed to remove unknown binding: 66,1,1/0:1571030509/1571030511 [ 181.158263][T10063] netlink: 'syz.6.1201': attribute type 14 has an invalid length. [ 181.181800][T10063] netlink: 'syz.6.1201': attribute type 14 has an invalid length. [ 181.181826][ T8325] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.206703][ T8325] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.216486][ T8325] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.228909][ T8325] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.380269][T10070] netlink: 'syz.6.1204': attribute type 1 has an invalid length. [ 181.400955][T10070] netlink: 'syz.6.1204': attribute type 3 has an invalid length. [ 181.922170][T10101] syzkaller0: entered promiscuous mode [ 181.937897][T10101] syzkaller0: entered allmulticast mode [ 182.041216][T10109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.059941][T10109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.176655][T10120] vcan1: entered promiscuous mode [ 182.182095][T10120] vcan1: entered allmulticast mode [ 182.200030][T10121] vcan1: entered promiscuous mode [ 182.205126][T10121] vcan1: entered allmulticast mode [ 182.307297][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.314817][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.477159][T10129] macsec1: entered promiscuous mode [ 184.842463][T10101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.369842][T10161] __nla_validate_parse: 8 callbacks suppressed [ 185.369860][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1229'. [ 185.393260][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 185.470290][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 185.613137][T10179] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.619650][T10179] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.627544][T10183] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 185.803439][T10186] sctp: [Deprecated]: syz.6.1237 (pid 10186) Use of int in max_burst socket option deprecated. [ 185.803439][T10186] Use struct sctp_assoc_value instead [ 185.843786][T10192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1240'. [ 185.931359][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 185.949920][T10197] ip6tnl0: Caught tx_queue_len zero misconfig [ 185.972810][T10197] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1241'. [ 185.977347][T10196] validate_nla: 1 callbacks suppressed [ 185.977365][T10196] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 186.006033][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1243'. [ 186.015745][T10203] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 186.037966][T10200] netlink: 'syz.6.1242': attribute type 1 has an invalid length. [ 186.217491][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 186.636655][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 186.689483][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 186.715154][T10239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.753063][T10239] netlink: 'syz.0.1253': attribute type 3 has an invalid length. [ 186.851963][T10247] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.305628][T10266] syz.6.1264 (10266) used greatest stack depth: 18312 bytes left [ 187.459774][T10274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.529460][T10277] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 188.063039][T10306] block nbd1: Unsupported socket: should be TCP or UNIX. [ 188.240882][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.602958][T10315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.383899][T10341] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 191.063674][T10349] syzkaller0: entered promiscuous mode [ 191.085141][T10349] syzkaller0: entered allmulticast mode [ 191.237751][T10358] __nla_validate_parse: 10 callbacks suppressed [ 191.237769][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1292'. [ 191.260843][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1291'. [ 191.274462][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 191.367010][T10360] netlink: 'syz.4.1291': attribute type 8 has an invalid length. [ 191.395135][ T5647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.410119][ T5647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.424457][ T5647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.435550][ T5647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.445384][ T5647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.647426][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 191.743152][T10381] FAULT_INJECTION: forcing a failure. [ 191.743152][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.767386][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.6.1300 Not tainted syzkaller #0 PREEMPT(full) [ 191.767412][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.767423][T10381] Call Trace: [ 191.767431][T10381] [ 191.767438][T10381] dump_stack_lvl+0xe8/0x150 [ 191.767472][T10381] should_fail_ex+0x40c/0x560 [ 191.767498][T10381] _copy_to_user+0x31/0xb0 [ 191.767527][T10381] simple_read_from_buffer+0xe1/0x170 [ 191.767557][T10381] proc_fail_nth_read+0x1bb/0x230 [ 191.767583][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.767610][T10381] ? rw_verify_area+0x24a/0x4c0 [ 191.767635][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.767657][T10381] vfs_read+0x213/0xa80 [ 191.767686][T10381] ? __pfx___mutex_lock+0x10/0x10 [ 191.767710][T10381] ? __pfx_vfs_read+0x10/0x10 [ 191.767738][T10381] ? __fget_files+0x2a/0x420 [ 191.767764][T10381] ? __fget_files+0x3a2/0x420 [ 191.767782][T10381] ? __fget_files+0x2a/0x420 [ 191.767809][T10381] ksys_read+0x150/0x270 [ 191.767837][T10381] ? __pfx_ksys_read+0x10/0x10 [ 191.767868][T10381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.767886][T10381] do_syscall_64+0x174/0x580 [ 191.767907][T10381] ? trace_irq_disable+0x3b/0x140 [ 191.767929][T10381] ? clear_bhb_loop+0x40/0x90 [ 191.767950][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.767970][T10381] RIP: 0033:0x7efc5b55e68e [ 191.767989][T10381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.768005][T10381] RSP: 002b:00007efc5c387fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.768024][T10381] RAX: ffffffffffffffda RBX: 00007efc5c3886c0 RCX: 00007efc5b55e68e [ 191.768037][T10381] RDX: 000000000000000f RSI: 00007efc5c3880a0 RDI: 0000000000000006 [ 191.768049][T10381] RBP: 00007efc5c388090 R08: 0000000000000000 R09: 0000000000000000 [ 191.768060][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.768071][T10381] R13: 00007efc5b826038 R14: 00007efc5b825fa0 R15: 00007ffdc14504b8 [ 191.768100][T10381] [ 191.789575][T10385] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 191.827226][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1301'. [ 192.142012][T10397] netlink: 1044 bytes leftover after parsing attributes in process `syz.6.1302'. [ 192.413526][T10410] Cannot find set identified by id 1 to match [ 192.450554][T10412] SET target dimension over the limit! [ 192.508123][T10414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1307'. [ 192.555127][T10414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1307'. [ 192.885917][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1314'. [ 193.223418][T10453] Bluetooth: MGMT ver 1.23 [ 193.518770][ T5647] Bluetooth: hci7: command tx timeout [ 193.656629][T10478] netlink: 'syz.1.1328': attribute type 11 has an invalid length. [ 193.791632][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1331'. [ 193.803622][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.811087][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.822946][T10359] bridge_slave_0: entered allmulticast mode [ 193.842795][T10359] bridge_slave_0: entered promiscuous mode [ 193.897139][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.905316][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.920305][T10359] bridge_slave_1: entered allmulticast mode [ 193.940416][T10359] bridge_slave_1: entered promiscuous mode [ 194.172822][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.204335][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.236383][T10496] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 194.324479][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332572][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.343360][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 194.374871][T10359] team0: Port device team_slave_0 added [ 194.435636][T10359] team0: Port device team_slave_1 added [ 194.581370][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.590030][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.617480][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.634202][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.641780][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.669668][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.836807][T10359] hsr_slave_0: entered promiscuous mode [ 194.859977][T10359] hsr_slave_1: entered promiscuous mode [ 194.889083][T10359] debugfs: 'hsr0' already exists in 'hsr' [ 194.906900][T10359] Cannot create hsr debugfs directory [ 194.929227][T10533] C: renamed from lo [ 194.950181][T10533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.983559][T10537] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20003 [ 195.158543][T10548] xt_hashlimit: max too large, truncated to 1048576 [ 195.199691][T10552] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 195.234159][T10552] bond3: entered promiscuous mode [ 195.240827][T10552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.256759][T10548] No such timeout policy "syz1" [ 195.446254][T10559] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 195.599478][ T5647] Bluetooth: hci7: command tx timeout [ 195.715601][T10576] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 195.729322][T10576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.754613][T10563] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 195.833689][T10563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.319413][T10562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.329961][T10579] netlink: 'syz.4.1361': attribute type 2 has an invalid length. [ 196.341396][T10359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.373322][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.405425][T10359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.431695][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.454317][T10359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.501909][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.577117][T10359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.622220][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.623570][T10609] netlink: 'syz.6.1369': attribute type 1 has an invalid length. [ 196.733696][T10622] __nla_validate_parse: 10 callbacks suppressed [ 196.733713][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 196.750204][T10609] bond1: entered promiscuous mode [ 196.755868][T10609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.876857][T10609] macvtap1: entered allmulticast mode [ 196.897091][T10617] macvtap2: entered allmulticast mode [ 196.951886][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 196.983409][T10624] bond1: (slave bridge1): making interface the new active one [ 197.015038][T10624] bridge1: entered promiscuous mode [ 197.041562][T10624] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 197.333159][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.361553][T10656] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1380'. [ 197.373765][T10641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.412904][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.439481][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.446972][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.488517][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.495757][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.634450][T10664] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1382'. [ 197.678415][ T5647] Bluetooth: hci7: command tx timeout [ 197.715548][T10668] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 197.724109][T10668] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.782921][T10675] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 197.939243][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 198.053844][T10686] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1385'. [ 198.269821][T10692] netlink: 'syz.1.1389': attribute type 21 has an invalid length. [ 198.616508][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.636570][ T29] audit: type=1107 audit(1783446034.905:4): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^űHć#0ˆś [ 198.636570][ T29] Ņ…ų7bėĄKM“qŪbEJ ņŒuˆ;ĄRćü[te’µ“Nˆ°ĆaāµŚÅ߯[¤2ū+' [ 198.695666][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 198.724986][T10716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.736457][T10716] bond0: (slave bond4): Enslaving as an active interface with an up link [ 198.760184][T10721] team0: entered promiscuous mode [ 198.765370][T10721] team_slave_1: entered promiscuous mode [ 199.110712][T10359] veth0_vlan: entered promiscuous mode [ 199.136850][T10359] veth1_vlan: entered promiscuous mode [ 199.189786][T10359] veth0_macvtap: entered promiscuous mode [ 199.213053][T10359] veth1_macvtap: entered promiscuous mode [ 199.243781][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.268303][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.309213][ T32] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.339223][ T32] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.374204][ T32] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.406191][ T32] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.625634][T10757] macsec1: entered promiscuous mode [ 199.651284][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.651860][T10755] syzkaller0: entered promiscuous mode [ 199.667812][T10755] syzkaller0: entered allmulticast mode [ 199.676116][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.758063][ T5647] Bluetooth: hci7: command tx timeout [ 199.877423][ T8318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.898811][ T8318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.944562][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1412'. [ 200.210772][T10785] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 200.418095][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 200.435150][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1423'. [ 200.541493][T10797] team0: Port device team_slave_0 removed [ 200.656423][T10805] netlink: 'syz.6.1425': attribute type 1 has an invalid length. [ 201.014591][T10824] syzkaller0: entered promiscuous mode [ 201.022876][T10824] syzkaller0: entered allmulticast mode [ 201.029674][T10822] netlink: 'syz.7.1430': attribute type 1 has an invalid length. [ 201.746170][T10856] __nla_validate_parse: 3 callbacks suppressed [ 201.746188][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'. [ 202.012758][T10873] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 202.436992][T10902] xt_TCPMSS: Only works on TCP SYN packets [ 202.714910][T10903] bridge0: left promiscuous mode [ 202.723460][T10903] bridge0: left allmulticast mode [ 202.869865][T10903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.903863][T10903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.937129][T10923] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1458'. [ 203.029686][T10925] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 203.107996][T10903] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 203.151754][T10903] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 203.159116][T10903] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 203.173624][ T62] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.198172][ T62] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.221153][ T62] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.240020][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.306018][ T62] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.329551][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.346157][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 203.362307][ T62] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.394787][ T62] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.422945][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 203.472527][T10943] netlink: 'syz.4.1464': attribute type 30 has an invalid length. [ 203.509909][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 203.583742][T10948] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 203.600025][T10948] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 203.728772][T10953] netlink: 'syz.0.1467': attribute type 1 has an invalid length. [ 203.732965][T10957] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 203.737156][T10956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.780629][T10952] syzkaller0: entered promiscuous mode [ 203.797065][T10952] syzkaller0: entered allmulticast mode [ 204.196314][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 204.211153][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 204.290128][T10980] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1477'. [ 204.422864][T10986] sctp: [Deprecated]: syz.0.1479 (pid 10986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.422864][T10986] Use struct sctp_sack_info instead [ 204.452250][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 204.453631][T10989] netlink: 'syz.7.1481': attribute type 3 has an invalid length. [ 204.556094][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.616030][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.630900][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.650065][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.662280][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 204.942719][T11022] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 205.066058][T11022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.160283][T11024] bond7: (slave veth5): Enslaving as an active interface with a down link [ 207.988932][T11056] __nla_validate_parse: 2 callbacks suppressed [ 207.988951][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1497'. [ 208.028668][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1498'. [ 208.040530][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1497'. [ 208.049487][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1498'. [ 208.090434][T11064] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 208.676463][T11102] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1510'. [ 208.784396][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 208.822485][T11108] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 209.012418][T11109] netlink: 'syz.4.1511': attribute type 29 has an invalid length. [ 209.028616][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 209.142435][T11123] bond2: option lp_interval: invalid value (0) [ 209.174703][T11123] bond2: option lp_interval: allowed values 1 - 2147483647 [ 209.254490][T11123] bond2 (unregistering): Released all slaves [ 209.328397][T11146] netlink: 808 bytes leftover after parsing attributes in process `syz.7.1523'. [ 209.612844][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 209.649883][T11151] netlink: 'syz.4.1526': attribute type 24 has an invalid length. [ 209.658877][T11157] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 209.665229][T11155] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1528'. [ 210.046380][T11173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.553604][T11198] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 210.618926][T11203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.689204][T11205] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 211.290542][T11243] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 211.429577][T11249] openvswitch: netlink: IP tunnel dst address not specified [ 211.706627][T11255] bond1: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 211.719267][T11255] bond1: (slave ip6_vti0): Error -95 calling set_mac_address [ 211.740040][T11255] bridge_slave_0: left allmulticast mode [ 211.750321][T11255] bridge_slave_0: left promiscuous mode [ 211.759226][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.778180][T11255] bridge_slave_1: left allmulticast mode [ 211.783982][T11255] bridge_slave_1: left promiscuous mode [ 211.794894][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.853321][T11255] bond0: (slave bond_slave_0): Releasing backup interface [ 211.902415][T11255] bond0: (slave bond_slave_1): Releasing backup interface [ 211.921586][T11255] team0: Port device team_slave_1 removed [ 211.931460][T11255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.043070][T11269] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 212.229101][T11281] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 212.551306][T11301] openvswitch: netlink: Multiple metadata blocks provided [ 213.318693][T11350] batadv0: entered promiscuous mode [ 213.329328][T11350] macsec1: entered promiscuous mode [ 213.336277][T11350] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 213.348654][T11350] batadv0: left promiscuous mode [ 213.398435][T11354] __nla_validate_parse: 13 callbacks suppressed [ 213.398454][T11354] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1590'. [ 213.435141][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1590'. [ 213.809870][T11376] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 213.830507][T11376] dummy0: left promiscuous mode [ 213.851571][T11376] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 213.914378][T11378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1597'. [ 213.973086][T11380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1599'. [ 214.018387][T11380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1599'. [ 214.057166][T11388] IPVS: ip_vs_edit_dest(): server weight less than zero [ 214.391793][T11409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.401146][T11409] bond0: (slave bond5): Enslaving as an active interface with an up link [ 214.601988][T11423] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1610'. [ 214.706355][T11426] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 214.978845][T11428] bond8: (slave veth7): Enslaving as an active interface with a down link [ 215.005600][T11433] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.074983][T11436] netlink: 'syz.4.1615': attribute type 2 has an invalid length. [ 215.108913][T11436] netlink: 'syz.4.1615': attribute type 2 has an invalid length. [ 215.117253][T11436] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1615'. [ 215.136356][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1615'. [ 215.169881][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 215.351381][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 215.858207][T11468] netlink: 'syz.1.1623': attribute type 10 has an invalid length. [ 215.950211][T11470] netlink: 'syz.1.1623': attribute type 2 has an invalid length. [ 215.966900][T11468] team0: Port device geneve1 added [ 215.986970][T11473] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 216.011511][T11473] batman_adv: batadv0: Adding interface: netdevsim0 [ 216.026710][T11473] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.061545][T11473] batman_adv: batadv0: Interface activated: netdevsim0 [ 216.183597][T11482] lo speed is unknown, defaulting to 1000 [ 216.190915][T11480] netlink: 'syz.6.1630': attribute type 16 has an invalid length. [ 216.199465][T11482] lo speed is unknown, defaulting to 1000 [ 216.218444][T11482] lo speed is unknown, defaulting to 1000 [ 216.229384][T11482] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 216.315124][T11482] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 216.340542][T11482] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 216.366700][T11482] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.431761][T11482] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.510835][T11482] lo speed is unknown, defaulting to 1000 [ 216.536071][T11482] lo speed is unknown, defaulting to 1000 [ 216.544137][T11482] lo speed is unknown, defaulting to 1000 [ 216.555094][T11482] lo speed is unknown, defaulting to 1000 [ 216.566272][T11482] lo speed is unknown, defaulting to 1000 [ 216.582821][T11482] lo speed is unknown, defaulting to 1000 [ 216.606111][T11482] lo speed is unknown, defaulting to 1000 [ 216.644113][T11482] lo speed is unknown, defaulting to 1000 [ 217.084537][T11533] netlink: 'syz.6.1645': attribute type 1 has an invalid length. [ 217.095100][T11533] netlink: 'syz.6.1645': attribute type 1 has an invalid length. [ 217.150364][T11531] bond0: ARP target 8.4.0.0 is already present [ 217.173531][T11531] bond0: option arp_ip_target: invalid value (1032) [ 217.209827][T11538] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.238007][T11537] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.329342][T11547] syzkaller0: entered promiscuous mode [ 217.370951][T11547] syzkaller0: entered allmulticast mode [ 217.756544][T11574] bridge0: port 1(bridge_slave_0) entered listening state [ 217.789997][T11576] tipc: Started in network mode [ 217.798478][T11576] tipc: Node identity 42172647dd67, cluster identity 4711 [ 217.818856][T11576] tipc: Enabled bearer , priority 0 [ 217.915854][T11576] syzkaller0: entered promiscuous mode [ 217.922282][T11576] syzkaller0: entered allmulticast mode [ 217.928946][T11576] tipc: Resetting bearer [ 217.968282][T11575] tipc: Resetting bearer [ 220.453170][T11575] tipc: Disabling bearer [ 220.497208][T11590] bridge_slave_1: mtu less than device minimum [ 220.594026][ T5630] tipc: Node number set to 2674927175 [ 220.614527][T11593] __nla_validate_parse: 15 callbacks suppressed [ 220.614548][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1660'. [ 220.841372][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1664'. [ 221.148939][T11622] bridge6: entered promiscuous mode [ 221.173176][T11622] bridge6: entered allmulticast mode [ 221.221211][T11622] team0: Port device bridge6 added [ 221.254366][T11624] bridge0: port 3(team0) entered blocking state [ 221.268488][T11624] bridge0: port 3(team0) entered disabled state [ 221.277874][T11624] team0: entered allmulticast mode [ 221.283188][T11624] team_slave_0: entered allmulticast mode [ 221.292612][T11624] team_slave_1: entered allmulticast mode [ 221.304704][T11624] team0: entered promiscuous mode [ 221.310769][T11624] team_slave_0: entered promiscuous mode [ 221.316814][T11624] team_slave_1: entered promiscuous mode [ 221.324769][T11624] bridge0: port 3(team0) entered blocking state [ 221.333507][T11624] bridge0: port 3(team0) entered forwarding state [ 221.379959][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1673'. [ 221.632633][T11651] netlink: 'syz.0.1679': attribute type 62 has an invalid length. [ 221.989653][T11666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 222.034851][T11666] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 222.056183][T11666] gretap1: entered promiscuous mode [ 222.072297][T11666] gretap1: entered allmulticast mode [ 222.302561][T11690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1692'. [ 222.382735][T11692] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1692'. [ 222.416175][T11696] sctp: [Deprecated]: syz.6.1694 (pid 11696) Use of int in max_burst socket option deprecated. [ 222.416175][T11696] Use struct sctp_assoc_value instead [ 222.491394][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 222.524305][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 222.671880][T11710] syzkaller0: entered promiscuous mode [ 222.692091][T11710] syzkaller0: entered allmulticast mode [ 222.852561][T11723] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 222.895750][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 223.079593][T11738] netlink: 'syz.4.1704': attribute type 11 has an invalid length. [ 223.281256][T11745] syzkaller0: entered promiscuous mode [ 223.294743][T11745] syzkaller0: entered allmulticast mode [ 223.324697][T11749] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1706'. [ 223.324877][T11753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1707'. [ 223.365378][T11753] netlink: 'syz.0.1707': attribute type 2 has an invalid length. [ 224.124482][T11793] siw: device registration error -23 [ 224.335992][T11795] syzkaller0: entered promiscuous mode [ 224.341788][T11795] syzkaller0: entered allmulticast mode [ 224.816738][T11837] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 227.944834][T11878] netlink: 'syz.6.1741': attribute type 14 has an invalid length. [ 227.957526][T11878] __nla_validate_parse: 7 callbacks suppressed [ 227.957546][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1741'. [ 227.990466][T11878] netlink: 'syz.6.1741': attribute type 14 has an invalid length. [ 228.005071][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1741'. [ 228.059255][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 228.069205][T11886] xt_CONNSECMARK: invalid mode: 0 [ 228.085354][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1741'. [ 228.107346][T11886] xt_CONNSECMARK: invalid mode: 0 [ 228.182517][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 228.206765][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1741'. [ 228.336369][T11904] bond0: (slave ip6gre0): Error: Device type is different from other slaves [ 228.414759][T11908] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.305553][T11954] bond1: entered allmulticast mode [ 229.326566][T11954] bridge1: entered allmulticast mode [ 229.356953][T11954] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 229.374066][T11954] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 229.499072][T11975] netlink: set zone limit has 4 unknown bytes [ 229.605697][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1767'. [ 230.096610][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 230.125046][T12003] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1770'. [ 230.293761][T12008] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 230.554556][T12015] netlink: 'syz.0.1773': attribute type 61 has an invalid length. [ 230.605705][T12016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1773'. [ 233.091140][T12025] netlink: 'syz.1.1779': attribute type 21 has an invalid length. [ 233.102471][T12025] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.253405][T12032] __nla_validate_parse: 4 callbacks suppressed [ 233.253427][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 233.286264][T12032] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1782'. [ 233.411861][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'. [ 233.460030][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 233.477098][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 233.726188][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 233.744166][T12059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.757442][T12057] veth0_macvtap: left promiscuous mode [ 233.772358][T12059] netlink: 'syz.7.1790': attribute type 1 has an invalid length. [ 233.822193][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 233.852722][T12059] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 234.063121][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 234.093428][T12079] tipc: Enabling of bearer rejected, failed to enable media [ 234.104132][T12080] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1795'. [ 234.142869][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1796'. [ 234.317067][T12094] netlink: 'syz.0.1799': attribute type 2 has an invalid length. [ 234.351743][T12096] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.484743][T12104] netlink: 'syz.7.1802': attribute type 8 has an invalid length. [ 234.749715][T12104] bond2 (unregistering): Released all slaves [ 235.016684][T12133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.625047][T12170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 235.647870][T12174] team0: Caught tx_queue_len zero misconfig [ 235.709241][T12179] 8021q: VLANs not supported on syzkaller1 [ 235.735272][T12179] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.943185][T12189] tap0: tun_chr_ioctl cmd 1074025672 [ 235.955877][T12189] tap0: ignored: set checksum disabled [ 235.967070][T12191] netlink: 'syz.1.1829': attribute type 44 has an invalid length. [ 235.983963][T12194] netlink: 'syz.1.1829': attribute type 44 has an invalid length. [ 236.094729][T12201] netlink: 'syz.1.1832': attribute type 21 has an invalid length. [ 236.104893][T12201] netlink: 'syz.1.1832': attribute type 22 has an invalid length. [ 236.114156][T12201] netlink: 'syz.1.1832': attribute type 23 has an invalid length. [ 236.125871][T12201] netlink: 'syz.1.1832': attribute type 25 has an invalid length. [ 236.204584][T12204] sctp: [Deprecated]: syz.7.1833 (pid 12204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.204584][T12204] Use struct sctp_sack_info instead [ 236.875536][T12249] bond0: (slave bond_slave_1): Releasing backup interface [ 237.120711][T12256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.339137][T12278] IPVS: length: 127 != 8 [ 237.712098][T12302] xt_hashlimit: size too large, truncated to 1048576 [ 237.870948][T12310] pim6reg: entered allmulticast mode [ 237.974158][T12322] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.997278][T12322] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 238.142898][T12334] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 238.500389][T12354] validate_nla: 1 callbacks suppressed [ 238.500404][T12354] netlink: 'syz.1.1877': attribute type 3 has an invalid length. [ 238.529061][T12354] __nla_validate_parse: 17 callbacks suppressed [ 238.529076][T12354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1877'. [ 238.580810][T12357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1879'. [ 238.895797][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 238.945537][T12384] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 238.972013][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 239.533380][T12417] netlink: 'syz.7.1899': attribute type 1 has an invalid length. [ 239.569172][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 239.570362][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 239.590765][T12417] bond2 (unregistering): Released all slaves [ 239.713073][T12419] 8021q: adding VLAN 0 to HW filter on device bond10 [ 240.132724][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'. [ 240.136471][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 240.275082][T12470] team0: Device ipvlan3 failed to register rx_handler [ 240.662952][T12502] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1917'. [ 240.691188][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1919'. [ 240.817171][T12509] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 240.826527][T12509] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 240.972338][T12518] netlink: 'syz.1.1925': attribute type 2 has an invalid length. [ 241.125823][T12525] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.500160][T12549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.053448][T12580] netlink: 'syz.7.1947': attribute type 11 has an invalid length. [ 242.560776][T12612] xt_hashlimit: size too large, truncated to 1048576 [ 242.634900][T12613] nftables ruleset with unbound set [ 242.712889][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.793900][T12618] bridge_slave_0 (unregistering): left allmulticast mode [ 242.836431][T12618] bridge_slave_0 (unregistering): left promiscuous mode [ 242.858794][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.939284][T12622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.093175][T12627] syzkaller1: entered promiscuous mode [ 243.119086][T12627] syzkaller1: entered allmulticast mode [ 243.243059][T12639] netlink: 'syz.6.1964': attribute type 1 has an invalid length. [ 243.462987][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 243.474521][T12654] netlink: 'syz.4.1969': attribute type 5 has an invalid length. [ 243.735430][T12672] __nla_validate_parse: 10 callbacks suppressed [ 243.735442][T12672] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1971'. [ 243.843327][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 243.973652][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 244.220976][T12643] syz.0.1965 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 244.267131][T12643] CPU: 0 UID: 0 PID: 12643 Comm: syz.0.1965 Not tainted syzkaller #0 PREEMPT(full) [ 244.267172][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.267196][T12643] Call Trace: [ 244.267202][T12643] [ 244.267210][T12643] dump_stack_lvl+0xe8/0x150 [ 244.267243][T12643] dump_header+0xd3/0x4b0 [ 244.267268][T12643] oom_kill_process+0x3ab/0x970 [ 244.267290][T12643] out_of_memory+0x1064/0x1480 [ 244.267307][T12643] ? try_charge_memcg+0xbca/0x1590 [ 244.267343][T12643] ? __pfx_out_of_memory+0x10/0x10 [ 244.267358][T12643] ? do_raw_spin_unlock+0xf5/0x210 [ 244.267388][T12643] try_charge_memcg+0xc74/0x1590 [ 244.267429][T12643] ? __pfx_try_charge_memcg+0x10/0x10 [ 244.267452][T12643] ? percpu_ref_tryget+0x15/0x180 [ 244.267497][T12643] ? charge_memcg+0x20/0x2b0 [ 244.267533][T12643] charge_memcg+0x19c/0x2b0 [ 244.267558][T12643] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 244.267584][T12643] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 244.267609][T12643] swap_cache_alloc_folio+0x4de/0x990 [ 244.267644][T12643] swap_cache_read_folio+0x44/0x120 [ 244.267668][T12643] swap_cluster_readahead+0x3a0/0x640 [ 244.267696][T12643] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 244.267731][T12643] ? get_vma_policy+0x27b/0x3c0 [ 244.267761][T12643] swapin_readahead+0x19a/0xc10 [ 244.267786][T12643] ? swap_table_get+0x1e/0x260 [ 244.267806][T12643] ? swap_table_get+0x1e/0x260 [ 244.267826][T12643] ? __pfx_swapin_readahead+0x10/0x10 [ 244.267849][T12643] ? swap_table_get+0x1e/0x260 [ 244.267867][T12643] ? swap_table_get+0x1e/0x260 [ 244.267882][T12643] ? swap_table_get+0x1e/0x260 [ 244.267902][T12643] ? swap_table_get+0x216/0x260 [ 244.267923][T12643] ? swap_cache_get_folio+0x2e7/0x2f0 [ 244.267949][T12643] do_swap_page+0x455/0x5060 [ 244.267993][T12643] ? __pte_offset_map+0x29/0x240 [ 244.268019][T12643] ? __lock_acquire+0x683/0x2cf0 [ 244.268064][T12643] ? do_swap_page+0x124/0x5060 [ 244.268093][T12643] ? __pfx_do_swap_page+0x10/0x10 [ 244.268119][T12643] ? __pte_offset_map+0x1ae/0x240 [ 244.268141][T12643] ? pte_offset_map_rw_nolock+0xea/0x160 [ 244.268163][T12643] handle_mm_fault+0x124c/0x3080 [ 244.268194][T12643] ? handle_mm_fault+0xec/0x3080 [ 244.268221][T12643] ? __pfx_handle_mm_fault+0x10/0x10 [ 244.268239][T12643] ? lock_vma_under_rcu+0x45a/0x500 [ 244.268286][T12643] do_user_addr_fault+0xa4d/0x1340 [ 244.268323][T12643] ? trace_page_fault_user+0x84/0x1e0 [ 244.268352][T12643] exc_page_fault+0x6a/0xc0 [ 244.268377][T12643] asm_exc_page_fault+0x26/0x30 [ 244.268395][T12643] RIP: 0033:0x7f9e6bc517bf [ 244.268414][T12643] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 244.268430][T12643] RSP: 002b:00007ffd0978e278 EFLAGS: 00010202 [ 244.268446][T12643] RAX: 0000000081d8c8fd RBX: ffffffff81d8c8fd RCX: 0000000000000004 [ 244.268458][T12643] RDX: 00000000000008fd RSI: ffffffff81d8c8fd RDI: 0000000000000000 [ 244.268469][T12643] RBP: 0000000000000000 R08: 00007f9e6c010000 R09: 00007f9e6c012000 [ 244.268480][T12643] R10: 0000000081d8c901 R11: 0000000000000000 R12: 00007f9e6c026038 [ 244.268491][T12643] R13: 0000000000000017 R14: ffffffff81d8c8fd R15: 00007f9e6cb55720 [ 244.268503][T12643] ? map_create+0x9d/0x1b90 [ 244.268535][T12643] ? map_create+0x9d/0x1b90 [ 244.268560][T12643] ? map_create+0x9d/0x1b90 [ 244.268585][T12643] [ 244.614347][T12643] memory: usage 307200kB, limit 307200kB, failcnt 630 [ 244.621631][T12643] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 244.630775][T12643] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 244.638540][T12643] Memory cgroup stats for /syz0: [ 244.638837][T12643] cache 0 [ 244.648731][T12643] rss 0 [ 244.651518][T12643] rss_huge 0 [ 244.655158][T12643] shmem 0 [ 244.658414][T12643] mapped_file 0 [ 244.662103][T12643] dirty 0 [ 244.665054][T12643] writeback 0 [ 244.668395][T12643] workingset_refault_anon 18 [ 244.674646][T12643] workingset_refault_file 2 [ 244.681068][T12643] swap 176128 [ 244.684426][T12643] swapcached 282624 [ 244.688536][T12643] pgpgin 30172 [ 244.691923][T12643] pgpgout 30164 [ 244.695394][T12643] pgfault 68715 [ 244.699207][T12643] pgmajfault 8 [ 244.704765][T12643] inactive_anon 12288 [ 244.709482][T12643] active_anon 20480 [ 244.713315][T12643] inactive_file 0 [ 244.716964][T12643] active_file 0 [ 244.721206][T12643] unevictable 0 [ 244.724702][T12643] hierarchical_memory_limit 314572800 [ 244.730702][T12643] hierarchical_memsw_limit 9223372036854771712 [ 244.737077][T12643] total_cache 0 [ 244.740750][T12643] total_rss 0 [ 244.744041][T12643] total_rss_huge 0 [ 244.748099][T12643] total_shmem 0 [ 244.751572][T12643] total_mapped_file 0 [ 244.755561][T12643] total_dirty 0 [ 244.759542][T12643] total_writeback 0 [ 244.763368][T12643] total_workingset_refault_anon 18 [ 244.768555][T12643] total_workingset_refault_file 2 [ 244.775174][T12643] total_swap 176128 [ 244.779310][T12643] total_swapcached 282624 [ 244.783846][T12643] total_pgpgin 30172 [ 244.788054][T12643] total_pgpgout 30164 [ 244.793289][T12643] total_pgfault 68715 [ 244.797287][T12643] total_pgmajfault 8 [ 244.801620][T12643] total_inactive_anon 12288 [ 244.806140][T12643] total_active_anon 20480 [ 244.810588][T12643] total_inactive_file 0 [ 244.814948][T12643] total_active_file 0 [ 244.819253][T12643] total_unevictable 0 [ 244.823249][T12643] anon_cost 0 [ 244.847648][T12643] file_cost 0 [ 244.860985][T12643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1965,pid=12643,uid=0 [ 244.910316][T12643] Memory cgroup out of memory: Killed process 12643 (syz.0.1965) total-vm:102304kB, anon-rss:1248kB, file-rss:23128kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 245.290686][T12701] syzkaller1: entered promiscuous mode [ 245.296339][T12701] syzkaller1: entered allmulticast mode [ 245.304946][T12701] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 245.339311][T12701] bond11: entered promiscuous mode [ 245.345210][T12701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 245.377288][T12701] bond11: (slave bridge8): making interface the new active one [ 245.389883][T12701] bridge8: entered promiscuous mode [ 245.396791][T12701] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 245.415014][T12701] netlink: 'syz.0.1977': attribute type 9 has an invalid length. [ 246.121161][T12647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.326548][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1983'. [ 246.341913][T12721] ip6t_REJECT: ECHOREPLY is not supported [ 246.351764][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1982'. [ 246.511535][T12731] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1987'. [ 246.559911][T12731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1987'. [ 246.694774][T12738] syzkaller0: entered promiscuous mode [ 246.714533][T12738] syzkaller0: entered allmulticast mode [ 246.942915][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 246.985624][T12753] Cannot find map_set index 135 as target [ 247.011947][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 247.300863][T12772] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 247.387537][T12777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2000'. [ 247.528351][T12772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.563733][T12784] ip6tnl1: entered allmulticast mode [ 247.896095][T12795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 248.048249][T12809] netlink: 'syz.6.2011': attribute type 1 has an invalid length. [ 248.079384][ T8325] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 248.121399][T12809] bond3: entered promiscuous mode [ 248.127081][T12809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.484751][T12829] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 248.511822][T12830] bond6: option miimon: invalid value (18446744073709551365) [ 248.519790][T12830] bond6: option miimon: allowed values 0 - 2147483647 [ 248.528097][T12830] bond6 (unregistering): Released all slaves [ 250.865327][T12801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.109634][T12829] ieee80211 phy33: Failed to add default virtual iface [ 251.145071][T12840] dvmrp1: entered allmulticast mode [ 251.170147][T12837] __nla_validate_parse: 4 callbacks suppressed [ 251.170165][T12837] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2018'. [ 251.205377][T12840] ipt_REJECT: TCP_RESET invalid for non-tcp [ 251.240845][T12840] netlink: 'syz.7.2019': attribute type 21 has an invalid length. [ 251.253865][T12848] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 251.284621][T12840] netlink: 'syz.7.2019': attribute type 22 has an invalid length. [ 251.306956][T12840] netlink: 'syz.7.2019': attribute type 23 has an invalid length. [ 251.340466][T12840] netlink: 'syz.7.2019': attribute type 25 has an invalid length. [ 251.354743][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 251.387964][T12840] netlink: 'syz.7.2019': attribute type 26 has an invalid length. [ 251.414172][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2019'. [ 251.456073][T12855] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 252.171551][T12908] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 252.191863][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 252.210239][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2031'. [ 252.272792][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2031'. [ 252.316347][T12915] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 252.410012][T12924] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2035'. [ 252.503119][T12905] bridge_slave_1: entered allmulticast mode [ 252.613432][T12929] bridge0: port 3(team0) entered disabled state [ 252.652414][T12929] team0 (unregistering): left allmulticast mode [ 252.660778][T12929] team_slave_0: left allmulticast mode [ 252.666558][T12929] team_slave_1: left allmulticast mode [ 252.673074][T12929] team0 (unregistering): left promiscuous mode [ 252.680672][T12929] team_slave_0: left promiscuous mode [ 252.686545][T12929] team_slave_1: left promiscuous mode [ 252.693496][T12929] bridge0: port 3(team0) entered disabled state [ 252.729753][T12929] team0 (unregistering): Port device team_slave_0 removed [ 252.775561][T12929] team0 (unregistering): Port device team_slave_1 removed [ 252.809920][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2038'. [ 252.852265][T12929] team0 (unregistering): Port device geneve1 removed [ 252.878895][T12929] team0 (unregistering): Port device bridge6 removed [ 255.290777][T12916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.568693][T12973] syzkaller0: entered promiscuous mode [ 255.584465][T12973] syzkaller0: entered allmulticast mode [ 255.735339][T12983] netlink: 'syz.6.2050': attribute type 21 has an invalid length. [ 255.751140][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'. [ 255.769593][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776213][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.785743][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 255.792486][T12983] netlink: 'syz.6.2050': attribute type 21 has an invalid length. [ 255.812064][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'. [ 256.343077][T13023] openvswitch: netlink: IP tunnel dst address not specified [ 256.371391][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2059'. [ 256.528379][T13029] netlink: 'syz.6.2061': attribute type 1 has an invalid length. [ 256.571570][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2061'. [ 256.929298][T13054] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 257.280458][T13067] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 257.327520][ T42] lo speed is unknown, defaulting to 1000 [ 258.906391][T12991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.116427][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2075'. [ 259.430456][T13108] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2080'. [ 259.471686][T13108] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2080'. [ 259.679681][T13125] xfrm1: entered allmulticast mode [ 259.933080][T13139] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2086'. [ 259.961546][T13139] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 260.072746][T13146] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 260.142469][T13155] bond8: entered promiscuous mode [ 260.148140][T13155] bond8: entered allmulticast mode [ 260.171224][T13157] bond9: entered promiscuous mode [ 260.176320][T13157] bond9: entered allmulticast mode [ 260.184986][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 260.206449][T13159] macvlan0: left promiscuous mode [ 260.256120][T13159] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 260.302486][T13159] netlink: 'syz.1.2090': attribute type 2 has an invalid length. [ 260.313601][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 262.817171][T13134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.023428][T13171] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2098'. [ 263.108990][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'. [ 263.168356][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'. [ 264.096200][T13239] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2115'. [ 264.296563][T13252] No such timeout policy "syz0" [ 264.413936][T13256] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2120'. [ 264.438317][T13256] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2120'. [ 264.595611][T13267] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2122'. [ 264.655266][T13271] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2122'. [ 264.772309][T13275] netlink: 'syz.7.2125': attribute type 14 has an invalid length. [ 264.783379][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 264.793953][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2125'. [ 264.832023][T13276] sit1: entered promiscuous mode [ 264.837022][T13276] sit1: entered allmulticast mode [ 264.863047][T12880] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.883058][T12880] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.912535][T12880] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.950071][T12880] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.273081][T13294] ip6gre1: entered allmulticast mode [ 265.287515][T12880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.355262][T13322] netlink: 'syz.0.2135': attribute type 3 has an invalid length. [ 265.756723][T13342] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 265.782789][T13342] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 265.790819][T13342] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 266.473450][T13381] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 266.481234][T13380] IPVS: length: 34 != 24 [ 266.508847][T13381] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 266.531169][T13381] netlink: 'syz.1.2159': attribute type 2 has an invalid length. [ 267.115677][T13422] netlink: 'syz.1.2171': attribute type 11 has an invalid length. [ 267.171492][T13422] netlink: 'syz.1.2171': attribute type 11 has an invalid length. [ 267.248817][T13429] netlink: 'syz.6.2174': attribute type 1 has an invalid length. [ 267.266633][T13429] netlink: 'syz.6.2174': attribute type 1 has an invalid length. [ 268.113977][T13482] __nla_validate_parse: 31 callbacks suppressed [ 268.113998][T13482] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2192'. [ 268.173363][T13478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2191'. [ 268.314714][T13491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.474130][T13502] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2199'. [ 268.605478][T13509] tunl0: entered promiscuous mode [ 268.614126][T13509] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2202'. [ 268.629966][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2201'. [ 268.960792][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 269.011965][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 269.041356][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 269.336263][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 269.396298][T13545] netlink: 576 bytes leftover after parsing attributes in process `syz.7.2210'. [ 269.423745][T13543] vlan2: entered allmulticast mode [ 269.455686][T13543] bridge4: entered allmulticast mode [ 269.687869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.102227][T13584] validate_nla: 6 callbacks suppressed [ 270.102247][T13584] netlink: 'syz.6.2220': attribute type 63 has an invalid length. [ 270.480018][T13606] openvswitch: netlink: Missing valid actions attribute. [ 270.492098][T13606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.953474][T13633] netlink: zone id is out of range [ 270.986507][T13633] netlink: zone id is out of range [ 271.005977][T13633] netlink: zone id is out of range [ 271.037191][T13643] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 271.037191][T13643] Please contact the netfilter-devel mailing list or update your nftables rules. [ 271.321633][T13659] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 271.553519][T13672] FAULT_INJECTION: forcing a failure. [ 271.553519][T13672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.575909][T13659] 8021q: adding VLAN 0 to HW filter on device bond15 [ 271.589869][T13672] CPU: 1 UID: 0 PID: 13672 Comm: syz.4.2246 Not tainted syzkaller #0 PREEMPT(full) [ 271.589897][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.589907][T13672] Call Trace: [ 271.589915][T13672] [ 271.589922][T13672] dump_stack_lvl+0xe8/0x150 [ 271.589956][T13672] should_fail_ex+0x40c/0x560 [ 271.589982][T13672] _copy_to_user+0x31/0xb0 [ 271.590013][T13672] simple_read_from_buffer+0xe1/0x170 [ 271.590042][T13672] proc_fail_nth_read+0x1bb/0x230 [ 271.590070][T13672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.590098][T13672] ? rw_verify_area+0x24a/0x4c0 [ 271.590127][T13672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.590151][T13672] vfs_read+0x213/0xa80 [ 271.590183][T13672] ? __pfx___mutex_lock+0x10/0x10 [ 271.590209][T13672] ? __pfx_vfs_read+0x10/0x10 [ 271.590237][T13672] ? __fget_files+0x2a/0x420 [ 271.590266][T13672] ? __fget_files+0x3a2/0x420 [ 271.590288][T13672] ? __fget_files+0x2a/0x420 [ 271.590320][T13672] ksys_read+0x150/0x270 [ 271.590350][T13672] ? __pfx_ksys_read+0x10/0x10 [ 271.590386][T13672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.590415][T13672] do_syscall_64+0x174/0x580 [ 271.590439][T13672] ? trace_irq_disable+0x3b/0x140 [ 271.590462][T13672] ? clear_bhb_loop+0x40/0x90 [ 271.590485][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.590504][T13672] RIP: 0033:0x7f470fd5e68e [ 271.590522][T13672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.590536][T13672] RSP: 002b:00007f4710d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.590556][T13672] RAX: ffffffffffffffda RBX: 00007f4710d066c0 RCX: 00007f470fd5e68e [ 271.590569][T13672] RDX: 000000000000000f RSI: 00007f4710d060a0 RDI: 0000000000000004 [ 271.590580][T13672] RBP: 00007f4710d06090 R08: 0000000000000000 R09: 0000000000000000 [ 271.590591][T13672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.590602][T13672] R13: 00007f4710026038 R14: 00007f4710025fa0 R15: 00007ffece5e9428 [ 271.590633][T13672] [ 271.682462][T13664] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 271.710764][T13675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.821597][T13675] IPv6: NLM_F_CREATE should be set when creating new route [ 271.828878][T13675] IPv6: NLM_F_CREATE should be set when creating new route [ 271.871381][T13664] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 272.211061][ T11] IPVS: starting estimator thread 0... [ 272.218842][T13697] netlink: 'syz.6.2255': attribute type 2 has an invalid length. [ 272.286062][T13708] x_tables: duplicate underflow at hook 1 [ 272.320769][T13701] IPVS: using max 37 ests per chain, 88800 per kthread [ 273.331816][T13776] __nla_validate_parse: 7 callbacks suppressed [ 273.331835][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 273.348697][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 273.362692][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2273'. [ 273.377251][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 273.428961][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 273.545549][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2276'. [ 273.890697][T13796] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2280'. [ 273.926872][T13800] bridge0: port 1(wlan0) entered blocking state [ 273.937169][T13800] bridge0: port 1(wlan0) entered disabled state [ 273.959604][T13800] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 273.985403][T13800] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 274.048544][T13805] ip6tnl2: entered allmulticast mode [ 274.100353][T13781] netlink: 'syz.6.2275': attribute type 1 has an invalid length. [ 274.279795][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2286'. [ 274.316278][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 274.355323][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 274.730546][T13852] ipt_rpfilter: unknown options [ 275.023421][T13871] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 275.101668][T13871] bond16: entered promiscuous mode [ 275.107223][T13871] 8021q: adding VLAN 0 to HW filter on device bond16 [ 275.189104][T13878] bond16: (slave bridge9): making interface the new active one [ 275.221449][T13878] bridge9: entered promiscuous mode [ 275.257423][T13878] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 276.157049][T13943] xt_TCPMSS: Only works on TCP SYN packets [ 276.180628][T13941] veth0_macvtap: Caught tx_queue_len zero misconfig [ 276.274206][T13949] netlink: 'syz.7.2317': attribute type 4 has an invalid length. [ 276.317834][ T5647] Bluetooth: hci7: command tx timeout [ 276.445186][ T5756] lo speed is unknown, defaulting to 1000 [ 276.463342][T13960] veth0_to_bond: entered allmulticast mode [ 276.471667][ T5756] syś2: Port: 1 Link DOWN [ 276.616490][T13972] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.627009][T13972] netlink: 'syz.7.2321': attribute type 1 has an invalid length. [ 276.921413][T13982] netlink: 'syz.6.2324': attribute type 1 has an invalid length. [ 276.931289][T13982] netlink: 'syz.6.2324': attribute type 1 has an invalid length. [ 276.940760][T13982] netlink: 'syz.6.2324': attribute type 2 has an invalid length. [ 277.204086][T13992] tc_dump_action: action bad kind [ 277.240203][T13993] syzkaller1: entered promiscuous mode [ 277.250209][T13993] syzkaller1: entered allmulticast mode [ 278.217208][T14051] netlink: 'syz.6.2336': attribute type 75 has an invalid length. [ 278.279035][T14059] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 278.300018][T14060] netlink: 'syz.4.2339': attribute type 11 has an invalid length. [ 278.670043][T14074] __nla_validate_parse: 16 callbacks suppressed [ 278.670063][T14074] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2343'. [ 278.798344][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.333545][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'. [ 279.508700][T14111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'. [ 279.572212][T14111] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2352'. [ 279.734306][T14111] veth5: entered promiscuous mode [ 279.855078][T14132] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2358'. [ 280.041120][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 280.074261][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 280.112751][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 280.132299][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 280.153361][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 280.198899][T14118] lo speed is unknown, defaulting to 1000 [ 280.914372][T14187] openvswitch: netlink: Key type 153 is out of range max 32 [ 281.282199][T14207] netlink: 'syz.7.2381': attribute type 4 has an invalid length. [ 281.305350][T14200] syzkaller0: entered promiscuous mode [ 281.309189][T14202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.311078][T14204] syz.1.2379 (14204) used obsolete PPPIOCDETACH ioctl [ 281.313019][T14200] syzkaller0: entered allmulticast mode [ 281.341913][T14207] netlink: 'syz.7.2381': attribute type 4 has an invalid length. [ 281.400021][ T5742] lo speed is unknown, defaulting to 1000 [ 281.426640][ T5742] syś2: Port: 1 Link ACTIVE [ 281.578813][T14218] x_tables: duplicate underflow at hook 2 [ 281.824030][T14234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.827064][T14227] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 281.846760][T14228] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 281.862514][T14227] bond6 (unregistering): Released all slaves [ 281.920848][T14224] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 282.020306][T14246] openvswitch: netlink: Missing valid actions attribute. [ 282.045069][T14246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.079107][T14243] block nbd3: server does not support multiple connections per device. [ 282.096735][T14243] block nbd3: shutting down sockets [ 282.222578][T14256] netlink: 'syz.6.2395': attribute type 4 has an invalid length. [ 282.250494][T14258] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 282.261303][T14258] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 282.274042][T14260] netlink: 'syz.6.2395': attribute type 4 has an invalid length. [ 282.295596][T14258] netlink: 'syz.1.2396': attribute type 2 has an invalid length. [ 282.491122][T14265] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.511596][T14271] netlink: 'syz.4.2402': attribute type 1 has an invalid length. [ 282.615771][T14271] bond10: entered promiscuous mode [ 282.646562][T14271] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.683381][T14278] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.692997][T14278] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 282.704770][T14278] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 282.734933][T14278] bond10: (slave ip6gre2): making interface the new active one [ 282.742883][T14278] ip6gre2: entered promiscuous mode [ 282.752004][T14278] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 282.922541][T14290] netlink: 'syz.6.2409': attribute type 4 has an invalid length. [ 282.932650][T14287] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.958325][T14290] netlink: 'syz.6.2409': attribute type 4 has an invalid length. [ 283.199807][T14299] bond11: (slave veth7): Enslaving as an active interface with a down link [ 283.242617][T14293] 8021q: adding VLAN 0 to HW filter on device bond11 [ 283.295459][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.441322][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 283.756308][T14337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 283.774022][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.786594][T14331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.800540][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.809729][T14331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.818476][T14331] batman_adv: batadv0: Removing interface: gretap1 [ 283.860184][T14331] bond0: (slave batadv0): Releasing backup interface [ 284.139307][T14357] __nla_validate_parse: 41 callbacks suppressed [ 284.139327][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 284.143066][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 284.162552][T14357] vlan3: entered allmulticast mode [ 284.169801][T14357] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 284.342986][T14348] bond18: entered promiscuous mode [ 284.383942][T14348] 8021q: adding VLAN 0 to HW filter on device bond18 [ 284.431228][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2426'. [ 284.454634][T14372] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2432'. [ 284.548375][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 284.581063][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2434'. [ 284.789040][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 284.956986][T14390] xt_cgroup: path and classid specified [ 284.972105][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 285.063639][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 285.252570][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 285.287941][T14411] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 285.743431][T14436] 8021q: VLANs not supported on vcan0 [ 285.947884][T14447] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 286.295100][T14475] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 286.326120][T14475] xt_hashlimit: invalid interval [ 286.508939][T14487] syzkaller1: entered promiscuous mode [ 286.563809][T14487] syzkaller1: entered allmulticast mode [ 286.894961][T14512] validate_nla: 6 callbacks suppressed [ 286.894977][T14512] netlink: 'syz.6.2477': attribute type 1 has an invalid length. [ 286.946958][T14516] openvswitch: netlink: Message has 512 unknown bytes. [ 287.381156][T14545] netlink: 'syz.0.2490': attribute type 3 has an invalid length. [ 287.389477][T14545] netlink: 'syz.0.2490': attribute type 3 has an invalid length. [ 287.452347][T14548] xt_ipcomp: unknown flags 1D [ 287.592702][T14558] team0: entered promiscuous mode [ 287.607058][T14558] gretap0: entered promiscuous mode [ 287.621937][T14558] debugfs: 'hsr1' already exists in 'hsr' [ 287.639185][T14558] Cannot create hsr debugfs directory [ 287.650895][T14564] tipc: Started in network mode [ 287.665285][T14564] tipc: Node identity ac14140f, cluster identity 4711 [ 287.683375][T14564] tipc: New replicast peer: 255.255.255.255 [ 287.696157][T14564] tipc: Enabled bearer , priority 10 [ 288.241845][T14599] netlink: 'syz.4.2507': attribute type 2 has an invalid length. [ 288.312545][T14605] openvswitch: netlink: Actions may not be safe on all matching packets [ 288.322417][T14604] syzkaller0: entered promiscuous mode [ 288.335798][T14604] syzkaller0: entered allmulticast mode [ 288.422496][T14609] syzkaller0: entered promiscuous mode [ 288.428546][T14609] syzkaller0: entered allmulticast mode [ 288.818461][ T5756] tipc: Node number set to 2886997007 [ 289.057293][T14653] batadv0: Caught tx_queue_len zero misconfig [ 289.089869][T14655] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 289.243113][T14664] __nla_validate_parse: 25 callbacks suppressed [ 289.243133][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2525'. [ 289.375006][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2529'. [ 289.463829][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'. [ 289.639469][T14688] netlink: 'syz.0.2534': attribute type 12 has an invalid length. [ 289.653378][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.692579][T14692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.005721][T14708] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.024958][T14711] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2542'. [ 290.084290][T14714] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2543'. [ 290.172086][T14720] geneve3: entered promiscuous mode [ 290.185536][T14720] geneve3: entered allmulticast mode [ 290.214201][ T62] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.238740][ T62] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.280751][ T62] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.304674][ T62] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.406563][T14738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2550'. [ 290.551800][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 291.072233][T14774] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2559'. [ 291.104845][T14776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.330860][ T5644] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 291.347054][ T5644] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 291.357110][ T5644] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 291.369231][ T5644] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 291.378464][ T5644] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 291.524262][T14793] bond0: Error: Cannot enslave bond to itself. [ 291.572578][T14792] syzkaller0: entered promiscuous mode [ 291.614914][T14792] syzkaller0: entered allmulticast mode [ 291.669357][T14792] netlink: 'syz.4.2563': attribute type 4 has an invalid length. [ 292.250593][T14828] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 292.471718][T14837] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 292.670902][T14837] veth9: entered promiscuous mode [ 292.683890][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 292.791459][T14850] netlink: 'syz.6.2576': attribute type 5 has an invalid length. [ 292.815370][T14852] netlink: 'syz.4.2577': attribute type 21 has an invalid length. [ 292.834892][T14852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2577'. [ 292.852003][T14852] netlink: 'syz.4.2577': attribute type 4 has an invalid length. [ 292.864112][T14852] netlink: 'syz.4.2577': attribute type 5 has an invalid length. [ 292.875093][T14854] netlink: 'syz.4.2577': attribute type 21 has an invalid length. [ 292.893160][T14854] netlink: 'syz.4.2577': attribute type 4 has an invalid length. [ 292.903593][T14854] netlink: 'syz.4.2577': attribute type 5 has an invalid length. [ 292.975399][T14782] lo speed is unknown, defaulting to 1000 [ 293.093819][T14864] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 293.450533][ T5647] Bluetooth: hci8: command tx timeout [ 293.652540][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.662316][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.671242][T14782] bridge_slave_0: entered allmulticast mode [ 293.689160][T14782] bridge_slave_0: entered promiscuous mode [ 293.710039][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.717380][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.726144][T14782] bridge_slave_1: entered allmulticast mode [ 293.735209][T14782] bridge_slave_1: entered promiscuous mode [ 293.836880][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.882050][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.008735][T14782] team0: Port device team_slave_0 added [ 294.043276][T14782] team0: Port device team_slave_1 added [ 294.063651][T14912] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 294.128568][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.146153][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.194843][T14915] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 294.204882][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.219114][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.226116][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.254107][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.347198][T14915] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 294.380665][T14915] veth5: entered promiscuous mode [ 294.390645][T14915] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 294.428826][T14919] syzkaller0: entered promiscuous mode [ 294.434504][T14919] syzkaller0: entered allmulticast mode [ 294.463591][T14782] hsr_slave_0: entered promiscuous mode [ 294.473412][T14782] hsr_slave_1: entered promiscuous mode [ 294.480906][T14782] debugfs: 'hsr0' already exists in 'hsr' [ 294.486699][T14782] Cannot create hsr debugfs directory [ 295.045591][T14782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.276105][T14782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.334857][T14963] __nla_validate_parse: 5 callbacks suppressed [ 295.334876][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 295.453113][T14782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.518129][ T5647] Bluetooth: hci8: command tx timeout [ 295.570782][T14782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.819361][T14782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.831465][T14782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.845511][T14782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.875278][T14782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.893591][T14782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.925650][T14782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.941379][T14782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.955554][T14782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.074676][T14782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.082200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.114403][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 296.116323][T14782] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.138386][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.145619][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.162532][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.169842][ T8325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.599307][T15009] openvswitch: netlink: Key type 153 is out of range max 32 [ 296.600100][T15008] openvswitch: netlink: Key type 153 is out of range max 32 [ 296.631537][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 296.641817][T15007] openvswitch: netlink: Flow key attr not present in new flow. [ 296.932143][T15025] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 296.944285][T15027] netlink: 'syz.0.2624': attribute type 20 has an invalid length. [ 296.986021][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 297.002107][T14782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.017144][T15032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.026470][T15032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.104370][T14782] veth0_vlan: entered promiscuous mode [ 297.116908][T14782] veth1_vlan: entered promiscuous mode [ 297.168570][T14782] veth0_macvtap: entered promiscuous mode [ 297.182369][T14782] veth1_macvtap: entered promiscuous mode [ 297.222218][T14782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.243320][T14782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.263326][ T8325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.282611][ T8325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.292969][ T8325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.308251][ T8325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.345217][T15041] bond0: Caught tx_queue_len zero misconfig [ 297.496816][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.506823][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.524034][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2628'. [ 297.576647][ T8328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.585180][ T8328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.599737][ T5647] Bluetooth: hci8: command tx timeout [ 298.004882][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 298.018797][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.043816][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.054586][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.065609][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.068843][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2634'. [ 298.094093][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.110955][T15067] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2633'. [ 298.203098][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2633'. [ 298.269844][T15074] validate_nla: 2 callbacks suppressed [ 298.269863][T15074] netlink: 'syz.4.2634': attribute type 13 has an invalid length. [ 298.331965][T15074] macsec0: entered allmulticast mode [ 298.472845][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 298.985430][T15104] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 299.030162][T15104] bond14: entered promiscuous mode [ 299.035890][T15104] 8021q: adding VLAN 0 to HW filter on device bond14 [ 299.077324][T15104] 8021q: adding VLAN 0 to HW filter on device bond14 [ 299.084760][T15104] bond14: (slave vti0): The slave device specified does not support setting the MAC address [ 299.095460][T15104] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 299.109100][T15104] bond14: (slave vti0): making interface the new active one [ 299.119146][T15104] vti0: entered promiscuous mode [ 299.131615][T15104] vti0: left promiscuous mode [ 299.257479][T15060] lo speed is unknown, defaulting to 1000 [ 299.589927][T15127] netlink: 'syz.6.2649': attribute type 178 has an invalid length. [ 299.680925][ T5644] Bluetooth: hci8: command tx timeout [ 299.794340][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.801796][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.809777][T15060] bridge_slave_0: entered allmulticast mode [ 299.820749][T15060] bridge_slave_0: entered promiscuous mode [ 299.833247][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.840940][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.848752][T15060] bridge_slave_1: entered allmulticast mode [ 299.856686][T15060] bridge_slave_1: entered promiscuous mode [ 299.904339][T15060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.917386][T15060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.988013][T15060] team0: Port device team_slave_0 added [ 300.000031][T15060] team0: Port device team_slave_1 added [ 300.047318][T15060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.054911][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.083462][T15060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.098063][T15060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.105152][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.132234][T15060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.147265][T15154] xt_l2tp: missing protocol rule (udp|l2tpip) [ 300.158500][ T5644] Bluetooth: hci1: command tx timeout [ 300.308861][T15060] hsr_slave_0: entered promiscuous mode [ 300.315962][T15060] hsr_slave_1: entered promiscuous mode [ 300.353665][T15060] debugfs: 'hsr0' already exists in 'hsr' [ 300.394980][T15060] Cannot create hsr debugfs directory [ 300.461156][T15174] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 301.129514][T15195] __nla_validate_parse: 2 callbacks suppressed [ 301.129532][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 301.141022][T15060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.165902][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.191213][T15060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.286943][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.377149][T15060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.427508][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.453913][T15060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.496374][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.551086][T15199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2672'. [ 301.587064][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 301.598354][ T8324] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.599117][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 301.622345][ T8324] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.627907][ T5742] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.829895][T15060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.852177][ T30] INFO: task syz.2.862:8856 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.878605][ T30] Not tainted syzkaller #0 [ 301.891832][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.903460][ T30] task:syz.2.862 state:D stack:25664 pid:8856 tgid:8855 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 301.924461][ T30] Call Trace: [ 301.928068][T15060] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.929951][ T30] [ 301.938132][ T30] __schedule+0x17d9/0x56c0 [ 301.942697][ T30] ? __lock_acquire+0x683/0x2cf0 [ 301.948887][ T30] ? __lock_acquire+0x683/0x2cf0 [ 301.953927][ T30] ? __pfx___schedule+0x10/0x10 [ 301.965977][ T30] ? schedule+0x90/0x2b0 [ 301.970613][ T30] schedule+0x164/0x2b0 [ 301.975500][ T30] schedule_preempt_disabled+0x13/0x30 [ 301.981585][ T30] __mutex_lock+0x7bf/0x1550 [ 301.986335][ T30] ? __mutex_lock+0x5d4/0x1550 [ 301.991587][ T30] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 302.008113][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 302.021222][ T30] ? __nlmsg_put+0xef/0x1b0 [ 302.040900][ T30] ? genlmsg_put+0x137/0x2e0 [ 302.064477][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.071743][ T8324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.087442][ T30] nfsd_nl_version_get_doit+0x17c/0xd20 [ 302.106733][ T30] ? __nla_parse+0x40/0x60 [ 302.115663][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 302.137337][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 302.149861][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 302.167628][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 302.187944][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.194307][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 302.203527][ T30] genl_rcv_msg+0x614/0x7a0 [ 302.208985][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.214071][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 302.221622][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 302.227087][ T30] netlink_rcv_skb+0x226/0x4a0 [ 302.232909][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.238562][ T5647] Bluetooth: hci1: command tx timeout [ 302.246051][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.252208][ T30] ? down_read+0x2be/0x330 [ 302.256663][ T30] genl_rcv+0x28/0x40 [ 302.260847][ T30] netlink_unicast+0x7bb/0x940 [ 302.265665][ T30] netlink_sendmsg+0x813/0xb40 [ 302.270666][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.276096][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.281956][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.287293][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 302.293003][ T30] ____sys_sendmsg+0x54e/0x850 [ 302.298664][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.304014][ T30] ? import_iovec+0x73/0xa0 [ 302.309469][ T30] ___sys_sendmsg+0x2a5/0x360 [ 302.314228][ T30] ? __lock_acquire+0x683/0x2cf0 [ 302.320314][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.326007][ T30] ? futex_wake+0x51b/0x5f0 [ 302.331211][ T30] ? __fget_files+0x2a/0x420 [ 302.335831][ T30] ? __fget_files+0x3a2/0x420 [ 302.341214][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 302.346194][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.352283][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.358737][ T30] do_syscall_64+0x174/0x580 [ 302.363366][ T30] ? trace_irq_disable+0x3b/0x140 [ 302.369264][ T30] ? clear_bhb_loop+0x40/0x90 [ 302.374025][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.380261][ T30] RIP: 0033:0x7f17a699de59 [ 302.384700][ T30] RSP: 002b:00007f17a77c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.393817][ T30] RAX: ffffffffffffffda RBX: 00007f17a6c25fa0 RCX: 00007f17a699de59 [ 302.398493][ T5734] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.403105][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 000000000000000a [ 302.417306][ T30] RBP: 00007f17a6a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 302.426991][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.435448][ T30] R13: 00007f17a6c26038 R14: 00007f17a6c25fa0 R15: 00007ffe98b039d8 [ 302.443983][ T30] [ 302.447288][ T30] [ 302.447288][ T30] Showing all locks held in the system: [ 302.456921][ T30] 1 lock held by khungtaskd/30: [ 302.462233][ T30] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 302.473714][ T30] 3 locks held by kworker/1:1/42: [ 302.482559][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.491366][ T5630] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.508673][ T30] #1: ffffc90000b27c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.524713][ T30] #2: ffff888058eaf250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 302.546582][ T30] 2 locks held by getty/5387: [ 302.552512][ T30] #0: ffff88803644f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 302.565151][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 302.576789][ T30] 3 locks held by kworker/1:3/5630: [ 302.583402][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.595337][ T30] #1: ffffc90003a6fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.606196][ T30] #2: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 302.628140][ T30] 3 locks held by kworker/u9:6/5644: [ 302.639108][ T30] #0: ffff888057083140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.667755][ T30] #1: ffffc90003b1fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 302.697999][ T30] #2: ffff88804f850ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 302.708857][ T30] 2 locks held by syz.3.684/8279: [ 302.713978][ T30] #0: ffffffff9009c3a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 302.724046][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 302.737136][ T30] 2 locks held by syz.2.862/8856: [ 302.742363][ T30] #0: ffffffff9009c3a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 302.752677][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 302.765904][ T30] 2 locks held by syz.5.1151/9865: [ 302.787748][ T30] #0: ffffffff9009c3a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 302.799138][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 302.834126][ T30] 2 locks held by syz.7.2572/14832: [ 302.841009][ T30] #0: ffffffff9009c3a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 302.849669][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 302.860278][ T30] 1 lock held by syz.4.2681/15224: [ 302.865434][ T30] #0: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 302.877068][ T30] 1 lock held by syz.6.2680/15230: [ 302.885102][ T30] #0: ffff88805389cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 302.895539][ T30] [ 302.898132][ T30] ============================================= [ 302.898132][ T30] [ 302.906592][ T30] NMI backtrace for cpu 0 [ 302.906611][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.906632][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.906643][ T30] Call Trace: [ 302.906651][ T30] [ 302.906659][ T30] dump_stack_lvl+0xe8/0x150 [ 302.906692][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 302.906713][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.906743][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 302.906766][ T30] sys_info+0x135/0x170 [ 302.906783][ T30] watchdog+0xfd7/0x1030 [ 302.906811][ T30] ? watchdog+0x1c7/0x1030 [ 302.906840][ T30] kthread+0x388/0x470 [ 302.906865][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.906885][ T30] ? __pfx_kthread+0x10/0x10 [ 302.906911][ T30] ret_from_fork+0x514/0xb70 [ 302.906940][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 302.906973][ T30] ? __switch_to+0xc89/0x1420 [ 302.906998][ T30] ? __pfx_kthread+0x10/0x10 [ 302.907024][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.907057][ T30] [ 302.907064][ T30] Sending NMI from CPU 0 to CPUs 1: [ 303.022944][ C1] NMI backtrace for cpu 1 [ 303.022963][ C1] CPU: 1 UID: 0 PID: 15224 Comm: syz.4.2681 Not tainted syzkaller #0 PREEMPT(full) [ 303.022982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.022994][ C1] RIP: 0010:unwind_next_frame+0x46e/0x2550 [ 303.023019][ C1] Code: d1 48 89 15 04 bc fb 11 48 85 d2 0f 84 2e 02 00 00 48 8d 5a 04 48 89 54 24 18 4c 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 [ 303.023034][ C1] RSP: 0018:ffffc9000c83f520 EFLAGS: 00000a07 [ 303.023049][ C1] RAX: 0000000000000000 RBX: ffffffff9198c7ae RCX: ffffffff90e2378c [ 303.023062][ C1] RDX: ffffffff9198c7aa RSI: ffffffff9198c7aa RDI: ffffffff8c4bd220 [ 303.023075][ C1] RBP: ffffffff8bcdd402 R08: 0000000000000001 R09: 0000000000000000 [ 303.023086][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: dffffc0000000000 [ 303.023097][ C1] R13: ffffffff9198c7af R14: ffffc9000c83f5c8 R15: ffffffff90e2378c [ 303.023110][ C1] FS: 0000000000000000(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 303.023124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.023136][ C1] CR2: 00007fdd8e3a5e9c CR3: 000000000e946000 CR4: 00000000003526f0 [ 303.023151][ C1] Call Trace: [ 303.023157][ C1] [ 303.023167][ C1] ? do_syscall_64+0x353/0x580 [ 303.023190][ C1] ? unwind_next_frame+0x8f/0x2550 [ 303.023208][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.023229][ C1] arch_stack_walk+0x11b/0x150 [ 303.023248][ C1] ? do_syscall_64+0x353/0x580 [ 303.023271][ C1] stack_trace_save+0xa9/0x100 [ 303.023291][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 303.023311][ C1] ? stack_depot_save_flags+0x33/0x800 [ 303.023334][ C1] save_stack+0x122/0x230 [ 303.023356][ C1] ? __pfx_save_stack+0x10/0x10 [ 303.023374][ C1] ? page_ext_get+0x22/0x2e0 [ 303.023393][ C1] ? free_pages_prepare+0x960/0xa60 [ 303.023410][ C1] ? __free_contig_range_common+0x174/0x340 [ 303.023440][ C1] ? free_pages_bulk+0x48/0x120 [ 303.023461][ C1] ? vfree+0x224/0x4a0 [ 303.023476][ C1] ? kcov_close+0x28/0x50 [ 303.023494][ C1] ? __fput+0x418/0xa50 [ 303.023512][ C1] ? task_work_run+0x1d9/0x270 [ 303.023536][ C1] ? do_exit+0x73a/0x2360 [ 303.023557][ C1] ? do_group_exit+0x22d/0x2f0 [ 303.023580][ C1] ? get_signal+0x121b/0x12c0 [ 303.023596][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 303.023616][ C1] ? exit_to_user_mode_loop+0x104/0x730 [ 303.023637][ C1] ? do_syscall_64+0x353/0x580 [ 303.023661][ C1] ? page_ext_put+0x97/0xc0 [ 303.023684][ C1] __reset_page_owner+0x71/0x1f0 [ 303.023706][ C1] free_pages_prepare+0x960/0xa60 [ 303.023727][ C1] __free_contig_range_common+0x174/0x340 [ 303.023756][ C1] free_pages_bulk+0x48/0x120 [ 303.023779][ C1] vfree+0x224/0x4a0 [ 303.023796][ C1] ? __pfx_kcov_close+0x10/0x10 [ 303.023815][ C1] kcov_close+0x28/0x50 [ 303.023832][ C1] __fput+0x418/0xa50 [ 303.023856][ C1] task_work_run+0x1d9/0x270 [ 303.023881][ C1] ? __pfx_task_work_run+0x10/0x10 [ 303.023905][ C1] ? do_exit+0x735/0x2360 [ 303.023926][ C1] ? kmem_cache_free+0x182/0x650 [ 303.023946][ C1] ? put_net+0x191/0x260 [ 303.023965][ C1] do_exit+0x73a/0x2360 [ 303.023993][ C1] ? __pfx_do_exit+0x10/0x10 [ 303.024017][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.024040][ C1] do_group_exit+0x22d/0x2f0 [ 303.024063][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.024084][ C1] get_signal+0x121b/0x12c0 [ 303.024112][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 303.024135][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 303.024167][ C1] exit_to_user_mode_loop+0x104/0x730 [ 303.024187][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.024213][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.024231][ C1] do_syscall_64+0x353/0x580 [ 303.024252][ C1] ? trace_irq_disable+0x3b/0x140 [ 303.024273][ C1] ? clear_bhb_loop+0x40/0x90 [ 303.024292][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.024308][ C1] RIP: 0033:0x7f470fd9de59 [ 303.024322][ C1] Code: Unable to access opcode bytes at 0x7f470fd9de2f. [ 303.024331][ C1] RSP: 002b:00007ffece5e9588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 303.024347][ C1] RAX: 0000000000000000 RBX: 00007f4710027da0 RCX: 00007f470fd9de59 [ 303.024359][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 303.024369][ C1] RBP: 00007f4710027da0 R08: 00007f4710026038 R09: 0000000000000000 [ 303.024380][ C1] R10: 000000000003fd84 R11: 0000000000000246 R12: 0000000000049e53 [ 303.024391][ C1] R13: 00007f471002609c R14: 0000000000049b48 R15: 00007f4710026090 [ 303.024412][ C1] [ 303.492786][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 303.499687][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 303.508922][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.519058][ T30] Call Trace: [ 303.522328][ T30] [ 303.525243][ T30] vpanic+0x56c/0xa60 [ 303.529235][ T30] ? __pfx___schedule+0x10/0x10 [ 303.534100][ T30] ? __pfx_vpanic+0x10/0x10 [ 303.538594][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 303.544758][ T30] panic+0xc5/0xd0 [ 303.548476][ T30] ? __pfx_panic+0x10/0x10 [ 303.552912][ T30] ? preempt_schedule_common+0x82/0xd0 [ 303.558376][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 303.563752][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 303.569926][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 303.576079][ T30] watchdog+0x1030/0x1030 [ 303.580414][ T30] ? watchdog+0x1c7/0x1030 [ 303.584850][ T30] kthread+0x388/0x470 [ 303.588917][ T30] ? __pfx_watchdog+0x10/0x10 [ 303.593596][ T30] ? __pfx_kthread+0x10/0x10 [ 303.598275][ T30] ret_from_fork+0x514/0xb70 [ 303.602966][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 303.608082][ T30] ? __switch_to+0xc89/0x1420 [ 303.612759][ T30] ? __pfx_kthread+0x10/0x10 [ 303.617351][ T30] ret_from_fork_asm+0x1a/0x30 [ 303.622135][ T30] [ 303.625309][ T30] Kernel Offset: disabled [ 303.629622][ T30] Rebooting in 86400 seconds..