last executing test programs: 3m40.717533364s ago: executing program 3 (id=9748): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) (fail_nth: 2) 3m40.224811867s ago: executing program 3 (id=9754): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="01032c0080ffffffffffffff000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 3m37.138869279s ago: executing program 3 (id=9760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)) 3m36.230995247s ago: executing program 3 (id=9772): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) shutdown(0xffffffffffffffff, 0x1) 3m36.089006318s ago: executing program 3 (id=9774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x2, &(0x7f0000000080)=@raw=[@exit, @generic={0x6, 0x1, 0xd, 0x943, 0x1}], &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) close(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 3m35.945306729s ago: executing program 3 (id=9776): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) 3m20.860514507s ago: executing program 32 (id=9776): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) 2m17.483632602s ago: executing program 1 (id=10932): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) (async) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="7a0a0500230800003c0012800b000100697036746e6c00002c00028014000300ff0000000000000000000000000000001400020000000000000000000000ffff"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2000000052, 0xd}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d80)=ANY=[@ANYBLOB="04000000410600"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000138b655a4f00000080000000ef1d62ee7e923b0ad9cd8db28dd4753620a2f0271768a8284c18a4e2b5e44db18fd924df00000000000000012d42f1a78c97322f4ae4c8dc89cf2b14400000009e8bc5a2cf9b48cff5c5f25caeb3e4a5e50f9008b2334fa141b249b389d8f0911258bb5e608cfc1c6c3ffd328a9a59ebf0172e8a40b51647ec90dc1f74623daa5389a6f91a0deb84813ef3bde88bc6ee7500ed921526697a0dcef3db36a52c72bb932e81b2ebc91b25e41f8a4f3bf13894a1174a0ab9bbaf3da7bc6ab476e4e16638a76f85914632d4b6205503caa21d31bd4a9ed0ac4e88cc0777d19c4a986e49"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r8 = socket$rds(0x15, 0x5, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r9, r8, 0x0, 0x400000000000) unshare(0x20040600) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r4, 0x4000, r8}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5ae0009c9d1556b23ce86126f124ec6486a327f3087d262132c2f7302681ac782fb8ab6c259b60903b8522531098876bbdfc5a1bd52f6e5e58396cfbd5435bd0d74a465ca2a4c20369e32b3438e73f460e7051bfa97e76a3a374b4fa9822ddc14d6f50ee5a7bba20e33e9e1dfcdbbb406718659a32c2", @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r10, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xfda8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0x1a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xb1fd, 0x16, &(0x7f0000000480)=""/22, 0x41100, 0x42, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x10, 0x8, 0x3ff}, 0x10, r11, 0xffffffffffffffff, 0x3, &(0x7f0000000c40)=[r10, r4, r12, r4, r10], &(0x7f0000000c80)=[{0x0, 0x4, 0x2, 0x4}, {0x0, 0x3, 0xc, 0x5}, {0x4, 0x4, 0xd, 0x9}], 0x10, 0x80000000}, 0x94) 2m17.466832775s ago: executing program 1 (id=10933): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmmsg(r8, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xb4, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8c}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x874c8455725ed668}, 0x200488c8) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2m17.252683131s ago: executing program 1 (id=10936): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dvmrp0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) 2m16.998945471s ago: executing program 1 (id=10943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) 2m16.943917383s ago: executing program 1 (id=10944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x6000, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 2m16.72912727s ago: executing program 1 (id=10948): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000020400000000000055426fd3717b8e375402f94c87fb641e991edfdf9c6f23f4773057ee5d62ee4bd75015421388e59e8b9eef380256d6acbe282064f6ae70fba8ef78ad1ee3a358b5df08e09802771b48369e5f466b4e9865dacc8fbdf545d303655f6f401dc28bb6cc20cc7fd06e1b331821aeb3"], 0x0, 0x26, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) (async) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffdb8, 0x0, 0x0}}, 0xfffffffffffffd6b) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffdb8, 0x0, 0x0}}, 0xfffffffffffffd6b) tee(r0, r0, 0x10, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r4, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) sendmsg$nl_generic(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) 2m1.600033794s ago: executing program 33 (id=10948): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000020400000000000055426fd3717b8e375402f94c87fb641e991edfdf9c6f23f4773057ee5d62ee4bd75015421388e59e8b9eef380256d6acbe282064f6ae70fba8ef78ad1ee3a358b5df08e09802771b48369e5f466b4e9865dacc8fbdf545d303655f6f401dc28bb6cc20cc7fd06e1b331821aeb3"], 0x0, 0x26, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) (async) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffdb8, 0x0, 0x0}}, 0xfffffffffffffd6b) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffdb8, 0x0, 0x0}}, 0xfffffffffffffd6b) tee(r0, r0, 0x10, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r4, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) sendmsg$nl_generic(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) 2.413776846s ago: executing program 2 (id=12399): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@local, @dev, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x3}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r2, 0x3a, 0x1, 0x0, 0x20000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000f40)="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", 0x101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000085) 2.411682697s ago: executing program 4 (id=12401): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) 2.168862712s ago: executing program 5 (id=12412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r9}, 0x14) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=[@dstopts={{0x1120, 0x29, 0x37, {0x6, 0x221, '\x00', [@ra={0x5, 0x2, 0x40}, @generic={0x6e, 0x1000, "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"}, @hao={0xc9, 0x10, @private1}, @generic={0xb0, 0xee, "116fae0475d897c9c2b5a11eea9a486c35d9a2e784e8056749696e64d71987caa15c7a86363c6792bf52f16c8227bc5c67e7f9b4d413978f4070f5e48f02988ea3ec4e248adb2503c3ecb556c19c8211b47fe7cd7383f01442f4ee319171994a512044d5bb45508191eb5db38979eff834b10beeb0bbc06c4de1e397b9ecd74f4ba5f423b13c32db5f920e327177c570cc0b32e5322ad448712fb7c0ccf489ecf51ed92e5e9f7e8721f4a5ce04376cce638a429500faea311bed3d19f9618e550cdccdfb6d98e1be8196f572958e8664184f5982e1ce58aedc14ba2386d186c9535b98553b0c65e7335e8bf40c69"}]}}}], 0x1120}}], 0x1, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x2c, r4, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10a0}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 2.024300307s ago: executing program 6 (id=12413): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000007fffffff0000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.951004874s ago: executing program 0 (id=12414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001026e29b2714a6a5ec000000000000008ef931968055014ee4d8d6c68c3981b1caef1e9e65d4cbf2a29566289f49656c85951205cba6685b2a064d61425fdef10660b1b946adabcf7b53aaf72a9ed0aeb77838558bf8aef73faa018e0a59d5fc4d9a9cbd9ed980eb5a280df2b0fb4ac2a303add6b1b1ad6100fa3ef690743810497b1ae0c2bbeb2dbc5d6f59709c19aa1c97ec0568bfd0ade89fe10c87499d986d30970088c0b06e3b95bb0975e4", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRESHEX=r1, @ANYBLOB="08001f0004"], 0x44}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, r10}, 0x14) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r10, @ANYBLOB], 0x28}}], 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r13) splice(r6, 0x0, r13, 0x0, 0x10000000000066, 0xa) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r5, @ANYBLOB="2100d400000000000a000100003b"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000000100000000000000007b8af0ff00000000bfa100000000000007010000c84b2d2f1263e3870000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@random="3765f1d9f8e1", @empty, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x1, [{@remote, 0xcb7a}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x39}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xffffffff}]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.939849348s ago: executing program 5 (id=12415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x34}}, 0x30) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int]}, {0x0, [0x5f, 0x5f, 0x30, 0x2e, 0x61]}}, 0x0, 0x2f}, 0x28) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x17c, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x150, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xea, 0x2, "df4a7e093d41c5b82fa811212ddeddec48e3ff68096024a6badffa4145f5d8a7ee5c87f13bb169e844a2deec9b5797e7875a44a96757ef89baabd91e41a0bc28f7ba2f28e98e943d6a28a7c4c3cb3b2973bb8918515dd7a1654fe526d5f4a519aebf33d3b1b05f0d211693f7a9a683cadf73f29d10fa1980dc3f0c496cbc126c944d68d1d0cf7e47277cf90baae7482cfd4c8163e25a08f999d843515300feb994231f24aeaa26f0ecede00a9b40159c32d324199f5e098635ac007ec16fde410cdf8bbeddcfd6174c8f418a30a1bfb6ade844a47bbc8e63310ae3a5b3e991bdb81778967890"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x55, 0x1, "402107f946cbad4bbc523911ba05a865bce1b4028b087041d3673009d60880128af22a176e30854b0da741b455c35bb54e452134b4c0a93fbc195f99f571980178a415d1a67298c27d0a40e40bea99970e"}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x65478d42439581d0}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)={0x30, r11, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) 1.864111292s ago: executing program 6 (id=12416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4686}}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff7, 0x80000001, 0x9, 0x3, 0x4, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 1.824785518s ago: executing program 4 (id=12417): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^*,#$\x9c\'@\x00', 0x10800, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x317]}, {0xff, 0x7f, 0x9, 0x800}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x2c9}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r0}, r1, 0x10, @unused=[0x80000000, 0x3, 0x882, 0x2], @name="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"}) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000001380)="8319fa0c9ac6e7adea98fef467bc20e9677a6a469c0b7eb2b1c581ad2fe9006a66ea239426d4880ed8ef6e8242a3736f2991f5e0b0e8cfdd8a576e0c8f5c4b7c15ea8272c03169073b45488e7c12accd9951b7b36157c4f69288e8ec619122948f9afd3c5970a25f6aea4566c6f017f912735b21b8a9495b2c195ffa386cd2e6fa1fb4139d6ebf272e3f0190b30f842d6750939d84aadafd2e0175e141eb1450e264673cb2b3d5514abec13f521461f470cfdc8e373fd2564c3a1f971a1c57c0e4013da276f95637a10d03a74a05563644c28ae3f79d400dbbba33e4a0fee159c7", 0xe1}], 0x1, 0x6443, 0x6) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001600)={r0, &(0x7f0000001500)='^*,#$\x9c\'@\x00', 0x40482, &(0x7f0000001540)={@_ha_fsid={[0x4, 0x14]}, {0x401, 0x3420, 0x8}}, 0x7, &(0x7f0000001580), &(0x7f00000015c0)}) close(r2) sendto$phonet(0xffffffffffffffff, &(0x7f0000001640)="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", 0x1000, 0x800, &(0x7f0000002640)={0x23, 0x6, 0x9, 0x80}, 0x10) r4 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000002780)={r3, &(0x7f0000002680)='/proc/self\x00', 0x6254cb750fd32173, &(0x7f00000026c0)={@_ha_fsid={[0x6, 0x10]}, {0x6, 0x80, 0x7ff, 0x4}}, 0x6, &(0x7f0000002700)={@_ha_fsid}, &(0x7f0000002740)=0x4}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000027c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002800)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @sack_perm], 0x4) getsockname$netlink(0xffffffffffffffff, &(0x7f0000002840), &(0x7f0000002880)=0xc) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000028c0)=0x9001000) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_GETBMAP(r6, 0xc0205826, &(0x7f0000002900)={0x0, 0x2, 0x4, 0x0, 0x6}) r7 = socket(0xf, 0x8, 0x1) pwritev(r2, &(0x7f0000002a40)=[{&(0x7f0000002940)="5c888ee1abae1f59222645716b15d72babc3d3dae484e33b601b44799f5961dfb4b3471e16ee02faec58a07612b469bdb1ae023e3db4eec0944be262cd4df991ff8253cc9a4d6d9ee236f83f5d84ccee309575c50407edc1f012bf72407837de4bcf3374fd33090b1ecf68c3826fbe1c3f135b175602137003a6d8e7ea99ceb7c981351e21a0c2bb1cf407d8057ea132fd148c410894cdeaee7426400b0f9d80c80f0c27c2177afe36a743169aa05e556ce8b4aa08c0fe18141ba1ddda5376c0936e8455e1fc867f4bbcab", 0xcb}], 0x1, 0x0, 0x4) recvmsg(r3, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000002a80)=""/85, 0x55}, {&(0x7f0000002b00)=""/76, 0x4c}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x4, &(0x7f0000004bc0)=""/193, 0xc1}, 0x60) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xa, &(0x7f0000004d00)=0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004e40)=@o_path={&(0x7f0000004d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000, r7}, 0x18) pwritev(r7, &(0x7f0000005240)=[{&(0x7f0000004e80)="75d9aae171e6dfb93c6fb46813ecfd47931ba1968b0598f78af946958f0c04683bbae1bd5c86d9180f3825a4fdb0", 0x2e}, {&(0x7f0000004ec0)="14600a056021ab0efa0dfff65ee806ee93ba745696428d1309c4d467c955cfe34abdbb48fd40b33d5fe09fb98ec50dcec19b6889bc610f6d74f90cd20a998f783775aaa9edbab4ea16d256911219bee3b0813f07f65f7649dc98a8b131d7f00698183a16742f3c04271a0d58a62c6b3f16b7df7ff4375ae0573ec65e5a8454d8145ef0b0d2a0a0d81518fdf010ab19ce25035bcf9881b28f23c9bb7882d2bd678f4af0f3ee6fc34602c84d2d681cdeb2640686e9cfc083590dae0097c4122c12233cdee1674543ec1dddaf7c27a61604b70a6f985c94dd", 0xd7}, {&(0x7f0000004fc0)="9c080a49c7b968283f273c4268481d1a62876c0e238c0486b76db6b05bcb64ddcb78cb6d20acb4593b1e3c3a8d602e4e14a6f89d2bda4d271574c211cfae4d38c1edb6f333e85160076ee896c4e0dfa4114105ac8bc823a74288372ed5290364e78c7a7ed8cd410113a068073142e1712d15dd2868f83cbae468c52dcd10016dd56a0115c096cb9b1a0ebfc0e0ab68fd386a6d4eccf7df9d97db497244c84630aedb4394a0917f22c67cffbc4667071a55415c902c98", 0xb6}, {&(0x7f0000005080)="4e063f8955831ed8fc0825c6bbabff56d1902cf036e504c541f7cd8f68156773b77ee4d0a0e8300422044c3116b378cc1f6f262dca7d7683554b685e61b06172a3ff99954aae8dffc8dfa4b6d9bc313d9641b6ab98cd92398c1449ec3d619d1e61fa187094b28035107070f32061fc4e39c2fd45660085149dfe3c42330edb87f977631534999af15892ab597a2063a7641dcf2bdb3e3d7eb46de5680d9332d2ed4da2d2349548b7fd3f4d3fa66ab93348202fb8ce7098f4f490e3ba93affe5e997a80176968866edee717ff7d5846bf4489713cc81d006333520804535140f2b0504cd3e96f3c6502bf3d3116b59ae6941bfcb0a4a8e5e93da15163622d", 0xfe}, {&(0x7f0000005180)="de0f2aba6113ec5fdaeb09630d9958ec08ba2a9f28d9afea15c608773deb064d300675ccce8db6f618e8d427804f7de8e7bae9f8baf589ab4e6f8b47cd92f8c056ca06840843d4ddd9a04073c0a0114444a071ab63ab7d1074f973dbdc1701d618f446ce61880abc5ed1b17c8852900cd0be5f725cffad9d2d4e225726e8e51dfa46", 0x82}], 0x5, 0x1, 0x5) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f00000052c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000053c0)={'gretap0\x00', &(0x7f0000005300)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x6, 0x8, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x3f, 0x2, [{0x5, 0x2}, {0x5, 0xd, "f1021e1ad5cb2b0cfd44b1"}, {0x1, 0x6, "c60e11b1"}, {0x6, 0x12, "dfb3c5182bc75b2c83302869d1cd3fef"}, {0x0, 0x8, "9d310e9f5e84"}, {0x1, 0x4, "ee17"}, {0x7, 0x6, "85353bb5"}]}, @rr={0x7, 0x17, 0x97, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @local, @local, @broadcast]}, @lsrr={0x83, 0x7, 0xa0, [@dev={0xac, 0x14, 0x14, 0xf}]}, @noop, @timestamp={0x44, 0x14, 0x3f, 0x0, 0x8, [0x9, 0x200, 0x5, 0x80000000]}, @end]}}}}}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000005400)={r10, 0x1, 0x6, @remote}, 0x10) getsockopt$ax25_int(r7, 0x101, 0x0, &(0x7f0000005440), &(0x7f0000005480)=0x4) 1.782759243s ago: executing program 5 (id=12418): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305e4ffffff0000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.680289785s ago: executing program 2 (id=12419): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0xb, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x1ff, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x80800) (async) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x80800) connect$x25(r2, &(0x7f0000000180), 0x12) 1.668787748s ago: executing program 6 (id=12420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) 1.666841468s ago: executing program 4 (id=12421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r2, &(0x7f00000003c0)=""/132, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @mcast1, 0x9}}, [0xffffffffffff0000, 0x7fffffff, 0x3, 0x8001, 0x9, 0xb, 0x0, 0x3, 0x7fffffff, 0x1000, 0x2, 0xfffffffffffff801, 0x7, 0x7, 0x2]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r3, 0xab, "22796eb9939be8e9e135ddd59339b20f463bc077e4784921db106c41ef7f4313691d752fb5d216126853544e9b05a2991bd7846fdb2d6d23a844961e1b60b63e294ef6683e08f6503c60718ea6590922a52c0eb3697f6ff816b7d5f64fa8b562cfbb22e8a97a21f5106be55f0c2600825c958abd436a80cab2b2fa7330307fe3ee58f8378ce39ec8e8b9eb67ceb3888f53b1c5adfca1c4ee59ececa0f70fe28141210309e04b17f7318833"}, &(0x7f0000000080)=0xb3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.60604328s ago: executing program 0 (id=12422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x40d, 0x470bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046, 0x420c}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x10000}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0xcc}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 1.503968842s ago: executing program 6 (id=12423): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) write(r0, &(0x7f0000000080)="aa4a933db73d3b483f3aff142cfefaacad6d77b504af139ee36f2de275a5a76cb30e9606bbad461b2e5d3d06923c4af8a338f859", 0x34) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000000100)="ad41c0cb0867fddcdc6cdc5a000dfb7a", 0x10, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast2, 0x2}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f00000001c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)=0x0) connect$nfc_llcp(r2, &(0x7f0000000240)={0x27, r3, 0x1, 0x1, 0x5c, 0x3, "b3defc68286ddffc10eaa54cfb368c4d27abcfbd39802341f2d3ccad64c5fb6774f647db8b9b7170249d3cfab10cf0d792ce7c8ec8349a0b08365f90e20124", 0x1a}, 0x60) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) ioctl(r0, 0x10, &(0x7f0000000340)="77dea53e2fed1c478a2905f5d96363528ec0e3e177d3b6766c2d1b2b18b2ac57778fa597f2249954940c58a0d9e199aee0325a05f95c6cb540531f1c896b93670227ca9fed81ffa003f5ed78c38309") r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000400)=0x1e) connect$unix(r2, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000004c0)) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x12, 0x0, {0x7fff, @usage=0x1, 0x0, 0xcd9, 0x1, 0x1000, 0x7, 0x6, 0x400, @usage=0x5, 0x60a0, 0x197, [0xffffffff, 0x0, 0x4, 0x8, 0xf, 0xffffffff80000000]}, {0x10000, @usage=0x6, 0x0, 0x0, 0x2, 0x0, 0x7, 0x101, 0x0, @struct={0x5e, 0xd}, 0x8, 0xe00, [0x9, 0x6, 0x7f7, 0xff, 0xffffffff, 0x3ff]}, {0x0, @struct={0x8, 0x7ff}, 0x0, 0x80000001, 0xfffffffffffffff6, 0x6, 0x6, 0x6, 0xb, @usage=0xe3, 0x3, 0xff, [0x7ff, 0x4fa, 0x80, 0x2, 0x6, 0x20000]}, {0x8000000000000000, 0x7, 0x100000000}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000900)={0x4, 0x1, {0x0, @struct={0x7ff, 0x1}, 0x0, 0x6, 0x5, 0x2, 0x8, 0x2b, 0x40, @usage=0x100000000, 0x8, 0x10000, [0x78, 0x8, 0x4, 0x3, 0x7fff, 0x80000001]}, {0x5, @struct={0xcd, 0x1}, 0x0, 0x5, 0x7, 0x7, 0x512c0426, 0x0, 0x38, @struct={0xb, 0x8001}, 0x2, 0x35d37af3, [0x3, 0x5, 0x2, 0xac2, 0x66d6, 0x4d7b]}, {0x62963b0, @usage=0x9, 0x0, 0xfc89, 0x9f, 0xc42, 0x5, 0x1, 0x40, @struct={0x9, 0x5}, 0x7, 0xad8, [0x0, 0x0, 0x0, 0x9, 0x80000001, 0x80000001]}, {0x1, 0x5, 0x6}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000d00)={0xe, 0x4, {0xf, @usage=0x41, 0x0, 0x7fffffff, 0x7, 0x6, 0x4, 0xdd4, 0x420, @struct={0x1000, 0x4}, 0x8, 0x1, [0xc1, 0x3, 0x8, 0x8, 0xfffffffffffffbff, 0x4]}, {0x9, @usage=0x8, r5, 0x9cb, 0x9, 0x400, 0x9, 0x356c, 0x10, @struct={0x30, 0x800}, 0x9, 0x8, [0xa1e6, 0x8, 0xb2e, 0x9, 0x5, 0x54]}, {0xd2, @struct={0x10, 0x2}, r6, 0x2, 0x1, 0x9, 0x1, 0x4, 0x42, @usage=0xe5f8, 0x1, 0xf0d9, [0x7, 0x7, 0x8, 0x800, 0x8001, 0x1]}, {0x1, 0x5}}) pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000001140)=0x1) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000001180)={0x1, 'dummy0\x00', {}, 0x7}) sendto$l2tp6(r7, &(0x7f00000011c0)="b5bf6031b317f77c9c05e0de8e6018f6279d10a1443631c22df9bced08e3a1967a7585528cb0b4dc627a2ec1dc35882f3f6465bf1051d66e2eed00d62a4108dce9994df4aca2e3e5f6520866f1e92c9dd61e94f9c53f787c9919fa2e", 0x5c, 0x4000004, &(0x7f0000001240)={0xa, 0x0, 0x3, @empty, 0x10, 0x2}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r10, 0x207, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x34044000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001440)={'erspan0\x00', 0x0, 0x40, 0x700, 0x3, 0x5, {{0x1e, 0x4, 0x0, 0x6, 0x78, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@noop, @lsrr={0x83, 0xb, 0x6d, [@empty, @local]}, @cipso={0x86, 0x36, 0x0, [{0x1, 0xb, "c8ac737d904fed0b93"}, {0x2, 0x4, "5e7f"}, {0x1, 0x6, "d32ec792"}, {0x0, 0x9, "1661b2bd3365fb"}, {0x6, 0xf, "3b487acaeaa26b4aff48f9ecee"}, {0x5, 0x3, '`'}]}, @cipso={0x86, 0x20, 0x1, [{0x0, 0x4, "6b0e"}, {0x7, 0xd, "b6d89260be52487972bb10"}, {0x2, 0x9, "97fdaf4e9db5d6"}]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff, 0x8}, {0x2, 0x7}, {0xc, 0xfff3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc040000}, 0x4000) 1.502700951s ago: executing program 2 (id=12424): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0xfffffffffffffd00, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0xb, 0x0, &(0x7f0000000640)) (async) r2 = socket(0x2, 0x80805, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) socket(0x23, 0x6, 0x0) 1.426397898s ago: executing program 5 (id=12425): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}, @in={0x2, 0x4e21, @private=0xa010102}], 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) listen(r1, 0x7) close(0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001180)="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", 0x1d}, {&(0x7f0000000600)="b8199e008d332433864a93d6887dc53390db2ece2697e4926fb46e8fcd9f49b110e3eb8d28d9bd246bd0c779d0c534dabc"}, {&(0x7f0000000640)="fc3c592733c78fa251faddb57aae2e49f15191c45bb6b9b3456e0e925e2ca1a3f20f59a4004e6c0dd76c0bb7dcca0889ca966b005dfecb0a15140bc82d1d"}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f0000"], 0x40}, 0xfffe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) socket(0x6, 0xa, 0x1) socket$phonet(0x23, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.418323677s ago: executing program 4 (id=12426): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x3b, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.379789247s ago: executing program 2 (id=12427): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) 1.167820955s ago: executing program 6 (id=12428): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1be00000000000000028000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0xff000000], [0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x5, 0x4b}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x640, 0x81, 'snmp\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r6, 0x6, 0x18, 0x0, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xe, 0xfff1}, {0x0, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x911, 0x7, 0xb49}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000891) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 1.164907774s ago: executing program 0 (id=12429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (fail_nth: 65) 621.484531ms ago: executing program 0 (id=12430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080)=0x9, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x2e, 0xe32b8cec5ab8c040]}}, 0x0, 0x29}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080000000000050008000140006000000900010073797a30"], 0xa0}}, 0xc010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f00000002c0)=""/7, 0x33, 0x7, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 502.249868ms ago: executing program 0 (id=12431): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0xfd3c) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r1, 0x28, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/97, 0x61, 0x0, &(0x7f0000000140)=""/220, 0xdc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, r2}, 0x94) 444.314218ms ago: executing program 5 (id=12432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x4c015}, 0x44808) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r2, &(0x7f0000000700)=@nfc, &(0x7f0000000780)=0x80) sendmsg$sock(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="1e2539793a1828c281c3289f794b174daaa5ea16461b50aa29253b0a35162d9b2607dc488bfa35e5713e0a99138df3bbb49776555546eb06ab8cc6d23c1c386ea5e41af49334555ead251b77d88ba265d6a0f7c5396913835918ff", 0x5b}, {&(0x7f00000000c0)="f1cb23f96c0df52f2c2b70d0244cd9781203291937a57bba8a3c73267336f2d420df3da9d9a65435acebc7857824e291ceaee53755098fb3ca0b2073d3d62b501a59f0276ed4cb0a6e469db8412e12d17975ba0db2cacd3fec896446225af9e627994c8112f900179d9a1caeb5e6ac7d143cf62c7333b67d8b87cf9df3c243288cb90cf1df6f7d95bc7f8180d31966b5adfb94c67381b812784e3dc9535308afcd28ca45c5f06f7b36b071a0919a406cc37396abbbfd301eed2f1f299288a8abfd58eff4bac6e1dbdc", 0xc9}, {&(0x7f00000001c0)="f3ca4fdccfde525261fed3166b8e14036fb8a5a56350528fbeec0811d695754208a94536a87d7b095319c684775ad15569c58e337fb6215d8718a0b5c875b187b9770c7871f9b0d55e10bf215f504645cef76fc1f01cf9093bcad9b2dd23c192d9c85319ee67ffecbd18916101f77d22e42db05e3145e193d199d003dae2cac97a4a010eab26f859625cb889539ebfa5c87455", 0x93}, {&(0x7f0000000280)="ab7d54176ca22a63ff60e0ea02b1d2afce737eefc1151ef3aeec189ead385af1d3b4574ef358065146f8eafccb83b363b0beb510b280f97d9b914e9343a383b6e0c69411bfd292557b9d41b4656518df7a3f5dd0d3ca9aced9d38a3552b9b079e38340ce6521e27890d3370bd882a987844b75ee3b80c81625133e7c5daad854672473ed6f0083adb5a35330e82fdc480750df702d4f1915079f84f9a99d91c6a3b4838e32ee46f91dfaf5e211a580295c0c73cd33f160f19aec91ee8d3a1398018c1dea0af506d08f50dfe285637ca5b4705f9011c4b889b0876416e48b87934b19e0504ce7c0af1c9999bdb852", 0xee}, {&(0x7f0000000380)="d8580b02e38634facacece14f2d9cf1f6466588be4b4c46ee4f2a1ed670d2b08e323cfd2f6df9e8a7296d2be23901058a819d3256e00e6782710fb307ce6402929bde701be6427c41ace164ce6dda38a1f92801a21c69636ddc06064bc183ec393916250ac5bf69c9df73b9a8cff65618c385de87165b67c8fba36b266f5a6a657b7f74cf1a8b11583957b33643cb57963baf284f7004a96f92da4310aa66d1adaa62b00e84ec07709f65cdfb658a78dcd404feb63008ab69939c4656c1128725fb1b3ac201e6522b0829d8d0ffd701d16d354a910847e858db7e1cb5c1866ea638bf1017583", 0xe6}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="8ba4b1808a5e50fbf1842339bd282ff2b46430bb", 0x14}], 0x7, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0x60}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) 441.734151ms ago: executing program 2 (id=12433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty}}}}}}}, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="b20573", 0x3}], 0x1}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x894b, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x46) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4c, 0xffffffffffffffff, &(0x7f00000002c0)=0x5c) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 389.331453ms ago: executing program 4 (id=12434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000000000f8ffffffb702f8ff08000000b70300000000000085000000100000009500"/88], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async, rerun: 32) r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) (async, rerun: 32) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x95, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000081}, 0x20000880) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@bridge_newneigh={0x5c, 0x1c, 0x200, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x0, r9, 0x2, 0x20, 0xb}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x10000}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x1, 0x8, 0xc9}}, @NDA_VNI={0x8, 0x7, 0x60000000}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x80, 0x8, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000200)) 323.906438ms ago: executing program 0 (id=12435): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x1, 0x5, 0x2}) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff09, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 268.239911ms ago: executing program 5 (id=12436): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cff0000", @ANYRES16=r2, @ANYBLOB="01000000000000000000140000001800078008000200010400000c0003000000000000000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00c27a00000000000000001c0012800b000100697036746e6c0000040002800500090089"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd", 0x3d}], 0x1}}], 0x1, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007a00000000000000000000000085000000070000000200000020756c2504e55fee69ccee4e6e000000000020207b1af8ff00000000bfa1000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)="451b2f7c1d10ce48e36e3a004fddd1b23e6300a919b723fb13e91085d13e3f6733e2a5eba1320902674164dcbbd50ff4667f4cedc36a55971ef7777103f080531c2803cd4788dab60bdd5abf28b35ffe201c6d1cd832de336bc2df8d498e4a60533ce211c873de154c5d", 0x6a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}}, 0x841) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000eeecbfbf643a266287f6b2844e992c226036ae6a76bbe29d1943217e73961258d6fcca66f362daf17da716a437f7e70f6571e6d0496702fcdea455d8eb2f175454e70e2caaf898d39d88275ba7e5fe10d08ed14a2b2484583546000ed1bfb033e1271389af0524b8ec332769aba739e8203f5cd4ded636a84493d092545a3edc4e66155eafe84c8f88151e8665aab56f1606443dd2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)="32413998dc35c7b8926fb1058a41566d2f244a5618cc9405b8bf7b7ebc91e1c13d21a0e8230a3eb445b726a678a2130bc31b1064", 0x0, 0x3, r8}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000000000000000000955af3320b0283941ebc98a0c4b82f578503582ed0a90b02f862a8c5a2438ef4cb52074471c55e361936c488a9e2c7db13271e14"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x1, 0x0, &(0x7f00000002c0)="bddae3a9f5a7b11752ec62fb27a90ffd8103ee18cfadec8615eed97e9a69f810023301232e8a01fdffffffffffffff80", 0x0, 0xd01, 0x2000, 0x0, 0xffffff00, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) 210.088611ms ago: executing program 6 (id=12437): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x18) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r5}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r7, 0x311, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x54) 89.654739ms ago: executing program 2 (id=12438): r0 = socket(0x10, 0x80000, 0x80000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r6, 0x1, 0x29, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0x500}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) (async) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0x500}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r9], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r9], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0xb4, r7, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x85, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x9, 0x5d6}}, 0xa42, 0x1000, @broadcast, {0x0, 0x1c, @random="b37d60dca688f67fd6c2097fe80da2fe6f51029b9a6daebf9ed758a7"}, @val={0x1, 0x1, [{0x2, 0x1}]}, @val={0x2d, 0x1a, {0x8, 0x1, 0x2, 0x0, {0x6000000000000, 0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xd}}, [{0xdd, 0x20, "a6d05239ba3f8e3b72ae39a6ab1908efdec14f628e56d6622d4a62543d6a34e4"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0xb4}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0xb4, r7, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x85, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x9, 0x5d6}}, 0xa42, 0x1000, @broadcast, {0x0, 0x1c, @random="b37d60dca688f67fd6c2097fe80da2fe6f51029b9a6daebf9ed758a7"}, @val={0x1, 0x1, [{0x2, 0x1}]}, @val={0x2d, 0x1a, {0x8, 0x1, 0x2, 0x0, {0x6000000000000, 0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xd}}, [{0xdd, 0x20, "a6d05239ba3f8e3b72ae39a6ab1908efdec14f628e56d6622d4a62543d6a34e4"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0xb4}}, 0x20000000) 0s ago: executing program 4 (id=12439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c001000010500000000fbdbdf25000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c12590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) kernel console output (not intermixed with test programs): aller0>, priority 0 [ 888.938466][ T7621] syzkaller0: entered promiscuous mode [ 888.954225][ T7621] syzkaller0: entered allmulticast mode [ 888.985696][ T7616] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 889.053673][ T7614] tipc: Resetting bearer [ 889.100251][ T7614] tipc: Disabling bearer [ 889.252777][ T7647] FAULT_INJECTION: forcing a failure. [ 889.252777][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 889.266572][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.1.10756 Not tainted syzkaller #0 PREEMPT(full) [ 889.266596][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 889.266607][ T7647] Call Trace: [ 889.266614][ T7647] [ 889.266621][ T7647] dump_stack_lvl+0xe8/0x150 [ 889.266646][ T7647] should_fail_ex+0x412/0x560 [ 889.266672][ T7647] should_failslab+0xa8/0x100 [ 889.266696][ T7647] __kmalloc_noprof+0xe8/0x760 [ 889.266715][ T7647] ? bpf_test_init+0x9f/0x150 [ 889.266735][ T7647] bpf_test_init+0x9f/0x150 [ 889.266754][ T7647] bpf_prog_test_run_skb+0x36f/0x1c90 [ 889.266781][ T7647] ? __fget_files+0x2a/0x420 [ 889.266796][ T7647] ? __fget_files+0x3a0/0x420 [ 889.266811][ T7647] ? __fget_files+0x2a/0x420 [ 889.266831][ T7647] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 889.266848][ T7647] bpf_prog_test_run+0x2c7/0x340 [ 889.266873][ T7647] __sys_bpf+0x643/0x950 [ 889.266894][ T7647] ? __pfx___sys_bpf+0x10/0x10 [ 889.266929][ T7647] ? ksys_write+0x242/0x270 [ 889.266951][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 889.266976][ T7647] __x64_sys_bpf+0x7c/0x90 [ 889.266995][ T7647] do_syscall_64+0x14d/0xf80 [ 889.267015][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.267031][ T7647] ? trace_irq_disable+0x37/0x100 [ 889.267049][ T7647] ? clear_bhb_loop+0x40/0x90 [ 889.267068][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.267085][ T7647] RIP: 0033:0x7fcc2159bf79 [ 889.267101][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.267116][ T7647] RSP: 002b:00007fcc1f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 889.267135][ T7647] RAX: ffffffffffffffda RBX: 00007fcc21815fa0 RCX: 00007fcc2159bf79 [ 889.267149][ T7647] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 889.267160][ T7647] RBP: 00007fcc1f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.267172][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.267183][ T7647] R13: 00007fcc21816038 R14: 00007fcc21815fa0 R15: 00007ffe2545a138 [ 889.267212][ T7647] [ 889.891400][ T7678] __nla_validate_parse: 6 callbacks suppressed [ 889.891420][ T7678] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10765'. [ 889.968437][ T7681] netlink: 'syz.2.10764': attribute type 16 has an invalid length. [ 889.977804][ T7681] netlink: 'syz.2.10764': attribute type 17 has an invalid length. [ 890.004551][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10767'. [ 890.031059][ T7681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.536463][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.578377][ T7700] syzkaller1: entered promiscuous mode [ 890.583894][ T7700] syzkaller1: entered allmulticast mode [ 890.966280][ T7717] can: request_module (can-proto-0) failed. [ 891.364193][ T7752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 891.383031][ T7754] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 891.485997][ T7763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10792'. [ 891.511953][ T7765] netlink: 'syz.1.10793': attribute type 2 has an invalid length. [ 891.529457][ T7766] x_tables: duplicate underflow at hook 1 [ 891.583367][ T7769] netlink: 'syz.1.10793': attribute type 2 has an invalid length. [ 891.605786][ T7765] #{6c: entered promiscuous mode [ 891.611311][ T7772] netlink: 'syz.5.10795': attribute type 1 has an invalid length. [ 891.626971][ T7769] #{6c: left promiscuous mode [ 891.652834][ T7770] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10794'. [ 891.669037][ T7770] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10794'. [ 891.686449][ T7770] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 891.857456][ T7784] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 892.065044][ T7810] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10806'. [ 892.119040][ T7810] syzkaller1: entered promiscuous mode [ 892.127339][ T7810] syzkaller1: entered allmulticast mode [ 892.224640][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10809'. [ 892.250280][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10809'. [ 892.296092][ T7820] syzkaller1: entered promiscuous mode [ 892.300823][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10811'. [ 892.313697][ T7820] syzkaller1: entered allmulticast mode [ 892.599392][ T7841] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 892.606829][ T7841] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 892.769129][ T7847] macvtap1: entered promiscuous mode [ 892.776797][ T7847] macvtap1: entered allmulticast mode [ 892.786219][ T7847] veth1_vlan: entered allmulticast mode [ 892.793157][ T7851] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 892.825156][ T7854] macvtap2: entered promiscuous mode [ 892.830680][ T7854] macvtap2: entered allmulticast mode [ 892.940894][ T7860] : entered promiscuous mode [ 893.076016][ T7867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.097499][ T7867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 893.120491][ T7869] netlink: 'syz.2.10826': attribute type 1 has an invalid length. [ 893.129003][ T7869] nbd: error processing sock list [ 893.134425][ T7869] block nbd0: shutting down sockets [ 893.189956][ T7867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.205495][ T7867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 893.311721][ T7867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.328768][ T7867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 893.343528][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10829'. [ 893.500148][ T7540] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.509843][ T7540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 893.530715][ T7540] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.539200][ T7540] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 893.554160][ T7540] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.562762][ T7540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 893.580339][ T7540] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.588868][ T7540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 893.683464][ T7897] netlink: 'syz.0.10832': attribute type 4 has an invalid length. [ 893.795722][ T7904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 894.145809][ T7927] netlink: 'syz.0.10844': attribute type 10 has an invalid length. [ 894.173566][ T7927] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 895.097238][ T7937] __nla_validate_parse: 1 callbacks suppressed [ 895.097250][ T7937] netlink: 464 bytes leftover after parsing attributes in process `syz.0.10848'. [ 896.136006][ T7873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 896.263692][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10855'. [ 896.297878][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10855'. [ 896.344093][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.365093][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.422775][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.438815][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.447048][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.457424][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.469767][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.472491][ T7973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10860'. [ 896.493570][ T7966] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 896.523216][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10860'. [ 896.848806][ T8009] openvswitch: netlink: Missing valid actions attribute. [ 896.857221][ T8004] veth1_to_team: Caught tx_queue_len zero misconfig [ 896.865551][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.993619][ T8017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.021171][ T8021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.041191][ T8015] xt_bpf: check failed: parse error [ 897.228902][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10882'. [ 897.287244][ T8035] vlan1: entered promiscuous mode [ 897.292448][ T8035] bridge0: entered promiscuous mode [ 897.329608][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10885'. [ 897.560859][ T8054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.706762][ T8064] syzkaller0: entered promiscuous mode [ 897.712725][ T8064] syzkaller0: entered allmulticast mode [ 897.738129][ T1639] Bluetooth: hci1: command 0x0406 tx timeout [ 897.812799][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10893'. [ 898.109630][ T8092] ip6gre1: entered allmulticast mode [ 898.115021][ T8040] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 898.228444][ T8097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 898.280221][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10905'. [ 898.415687][ T8112] syzkaller1: entered promiscuous mode [ 898.425640][ T8112] syzkaller1: entered allmulticast mode [ 898.434726][ T7538] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6c [ 898.502667][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10911'. [ 898.773475][ T8133] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 899.039886][ T8150] validate_nla: 30 callbacks suppressed [ 899.039906][ T8150] netlink: 'syz.0.10924': attribute type 1 has an invalid length. [ 899.125338][ T8165] netlink: 'syz.4.10926': attribute type 29 has an invalid length. [ 899.192483][ T8165] netlink: 'syz.4.10926': attribute type 29 has an invalid length. [ 899.255863][ T8173] delete_channel: no stack [ 899.338120][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 899.422833][ T8181] netlink: 'syz.2.10931': attribute type 11 has an invalid length. [ 899.459852][ T8182] syzkaller1: entered promiscuous mode [ 899.465776][ T8182] syzkaller1: entered allmulticast mode [ 899.590844][ T8190] veth7: entered promiscuous mode [ 899.596021][ T8190] veth7: entered allmulticast mode [ 899.610511][ T8184] syzkaller1: entered promiscuous mode [ 899.616019][ T8184] syzkaller1: entered allmulticast mode [ 899.714875][ T8201] tipc: Resetting bearer [ 899.722719][ T8201] syzkaller0: left promiscuous mode [ 899.942773][ T8213] netlink: 'syz.2.10942': attribute type 39 has an invalid length. [ 900.217759][ T8223] syzkaller1: entered promiscuous mode [ 900.223838][ T8223] syzkaller1: entered allmulticast mode [ 900.714520][ T8259] netlink: 'syz.2.10959': attribute type 3 has an invalid length. [ 900.866388][ T8272] xt_l2tp: v2 sid > 0xffff: 1114112 [ 900.882812][ T8272] syzkaller1: entered promiscuous mode [ 900.893247][ T8272] syzkaller1: entered allmulticast mode [ 900.921373][ T8276] __nla_validate_parse: 10 callbacks suppressed [ 900.921391][ T8276] netlink: 5496 bytes leftover after parsing attributes in process `syz.5.10963'. [ 900.952571][ T8276] vxlan0: entered promiscuous mode [ 900.959027][ T8276] vxlan0: entered allmulticast mode [ 900.968714][ T7542] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.990146][ T7542] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.000287][ T7542] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.010068][ T7539] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.055051][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10965'. [ 901.067227][ T8280] netlink: 'syz.5.10965': attribute type 2 has an invalid length. [ 901.223119][ T8289] netlink: 'syz.4.10968': attribute type 1 has an invalid length. [ 901.242278][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10969'. [ 901.302000][ T8289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.316493][ T8291] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 901.448543][ T8292] bond2: (slave geneve2): making interface the new active one [ 901.457744][ T8292] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 901.499599][ T8296] syzkaller0: entered promiscuous mode [ 901.647211][ T8313] syzkaller1: entered promiscuous mode [ 901.668187][ T8313] syzkaller1: entered allmulticast mode [ 901.676582][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10976'. [ 901.713523][ T8313] hsr_slave_0 (unregistering): left promiscuous mode [ 902.036521][ T8342] FAULT_INJECTION: forcing a failure. [ 902.036521][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 902.049686][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.2.10984 Not tainted syzkaller #0 PREEMPT(full) [ 902.049711][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 902.049722][ T8342] Call Trace: [ 902.049730][ T8342] [ 902.049737][ T8342] dump_stack_lvl+0xe8/0x150 [ 902.049765][ T8342] should_fail_ex+0x412/0x560 [ 902.049793][ T8342] should_failslab+0xa8/0x100 [ 902.049816][ T8342] ? skb_clone+0x212/0x3a0 [ 902.049838][ T8342] kmem_cache_alloc_noprof+0x87/0x650 [ 902.049857][ T8342] ? __pfx_netif_rx_internal+0x10/0x10 [ 902.049876][ T8342] ? __bpf_redirect+0x80f/0x12a0 [ 902.049896][ T8342] skb_clone+0x212/0x3a0 [ 902.049920][ T8342] bpf_clone_redirect+0x16a/0x4b0 [ 902.049943][ T8342] ? bpf_test_run+0x1d1/0x830 [ 902.049960][ T8342] bpf_prog_dda02ae5dee86940+0x65/0x71 [ 902.049979][ T8342] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 902.049999][ T8342] ? arch_stack_walk+0xfb/0x150 [ 902.050027][ T8342] ? ktime_get+0x45/0x200 [ 902.050059][ T8342] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 902.050081][ T8342] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.050107][ T8342] ? ktime_get+0x45/0x200 [ 902.050124][ T8342] ? seqcount_lockdep_reader_access+0xea/0x100 [ 902.050147][ T8342] ? bpf_test_timer_continue+0x10c/0x320 [ 902.050167][ T8342] bpf_test_run+0x354/0x830 [ 902.050202][ T8342] ? __pfx_bpf_test_run+0x10/0x10 [ 902.050229][ T8342] ? rcu_is_watching+0x15/0xb0 [ 902.050247][ T8342] ? __kasan_krealloc+0xeb/0x110 [ 902.050267][ T8342] ? eth_type_trans+0x35e/0x6d0 [ 902.050294][ T8342] ? convert___skb_to_skb+0x3d/0x5b0 [ 902.050314][ T8342] bpf_prog_test_run_skb+0xd22/0x1c90 [ 902.050339][ T8342] ? __fget_files+0x2a/0x420 [ 902.050349][ T8342] ? __fget_files+0x3a0/0x420 [ 902.050358][ T8342] ? __fget_files+0x2a/0x420 [ 902.050369][ T8342] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 902.050379][ T8342] bpf_prog_test_run+0x2c7/0x340 [ 902.050394][ T8342] __sys_bpf+0x643/0x950 [ 902.050407][ T8342] ? __pfx___sys_bpf+0x10/0x10 [ 902.050426][ T8342] ? ksys_write+0x242/0x270 [ 902.050440][ T8342] ? __pfx_ksys_write+0x10/0x10 [ 902.050455][ T8342] __x64_sys_bpf+0x7c/0x90 [ 902.050466][ T8342] do_syscall_64+0x14d/0xf80 [ 902.050479][ T8342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.050488][ T8342] ? trace_irq_disable+0x37/0x100 [ 902.050499][ T8342] ? clear_bhb_loop+0x40/0x90 [ 902.050511][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.050520][ T8342] RIP: 0033:0x7f6a22d9bf79 [ 902.050531][ T8342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.050540][ T8342] RSP: 002b:00007f6a23b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.050551][ T8342] RAX: ffffffffffffffda RBX: 00007f6a23015fa0 RCX: 00007f6a22d9bf79 [ 902.050558][ T8342] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 902.050565][ T8342] RBP: 00007f6a23b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 902.050571][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.050577][ T8342] R13: 00007f6a23016038 R14: 00007f6a23015fa0 R15: 00007fff0693c108 [ 902.050592][ T8342] [ 902.545056][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10992'. [ 902.555032][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10992'. [ 902.623603][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10993'. [ 902.719305][ T8372] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 902.729207][ T8372] gretap2: entered promiscuous mode [ 902.734492][ T8372] gretap2: entered allmulticast mode [ 902.863739][ T1639] Bluetooth: hci5: command 0x041b tx timeout [ 902.943505][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11002'. [ 902.959745][ T8389] @0: renamed from bond_slave_1 [ 902.965133][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11001'. [ 903.039248][ T8395] netlink: 'syz.4.11004': attribute type 9 has an invalid length. [ 903.370588][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11010'. [ 903.783424][ T8423] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 904.362228][ T7539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.401532][ T7539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.643138][ T8478] tipc: Resetting bearer [ 904.745040][ T8488] xt_recent: Unsupported userspace flags (000000b1) [ 904.752717][ T8488] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 904.807705][ T8493] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 904.880663][ T8489] sctp: [Deprecated]: syz.0.11032 (pid 8489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.880663][ T8489] Use struct sctp_sack_info instead [ 904.924632][ T8497] netlink: 'syz.2.11035': attribute type 15 has an invalid length. [ 904.939956][ T8497] netlink: 'syz.2.11035': attribute type 15 has an invalid length. [ 904.939988][ T7541] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 904.959923][ T7541] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 904.969897][ T7541] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 904.979411][ T7541] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 905.144408][ T8506] team0: entered promiscuous mode [ 905.152743][ T8506] bond0: entered promiscuous mode [ 905.159360][ T8506] debugfs: 'hsr1' already exists in 'hsr' [ 905.165140][ T8506] Cannot create hsr debugfs directory [ 905.170851][ T8506] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 905.181274][ T8506] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 905.193015][ T8506] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 905.480127][ T8521] bridge3: entered promiscuous mode [ 905.485442][ T8521] bridge3: entered allmulticast mode [ 905.671605][ T8531] netlink: 'syz.4.11048': attribute type 1 has an invalid length. [ 905.724135][ T8531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 906.055652][ T8560] sock: sock_set_timeout: `syz.0.11059' (pid 8560) tries to set negative timeout [ 906.067203][ T8560] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 906.074885][ T8560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.096733][ T8561] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 906.124348][ T8561] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 906.164395][ T8561] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 906.167358][ T8559] netdevsim netdevsim2 : renamed from netdevsim0 [ 906.391933][ T8569] xt_hashlimit: size too large, truncated to 1048576 [ 907.128914][ T8581] xt_CT: No such helper "syz1" [ 908.911738][ T8605] syzkaller0: entered promiscuous mode [ 908.917257][ T8605] syzkaller0: entered allmulticast mode [ 909.022773][ T8617] __nla_validate_parse: 17 callbacks suppressed [ 909.022795][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11073'. [ 909.061935][ T8614] bond5: option resend_igmp: invalid value (32767) [ 909.069382][ T8614] bond5: option resend_igmp: allowed values 0 - 255 [ 909.083768][ T8614] bond5 (unregistering): Released all slaves [ 909.133800][ T8615] bond5: option resend_igmp: invalid value (32767) [ 909.140755][ T8615] bond5: option resend_igmp: allowed values 0 - 255 [ 909.164467][ T8615] bond5 (unregistering): Released all slaves [ 909.295231][ T8633] IPv6: addrconf: prefix option has invalid lifetime [ 909.302032][ T8633] IPv6: addrconf: prefix option has invalid lifetime [ 909.470178][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11085'. [ 909.481155][ T8646] netlink: 'syz.4.11085': attribute type 7 has an invalid length. [ 909.489885][ T8646] netlink: 'syz.4.11085': attribute type 8 has an invalid length. [ 909.497810][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11085'. [ 909.625210][ T8654] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 909.635349][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11087'. [ 909.679786][ T8656] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11090'. [ 909.910731][ T8678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11096'. [ 909.988779][ T8682] SET target dimension over the limit! [ 909.997114][ T8682] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11098'. [ 910.080458][ T8690] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 910.114981][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11099'. [ 910.132089][ T8692] veth0: Caught tx_queue_len zero misconfig [ 910.335551][ T8707] dvmrp6: entered allmulticast mode [ 910.413020][ T8709] syzkaller0: entered promiscuous mode [ 910.421246][ T8709] syzkaller0: entered allmulticast mode [ 911.227609][ T8938] lec:lec_start_xmit: lec0:No lecd attached [ 911.434847][ T8727] xt_hashlimit: size too large, truncated to 1048576 [ 911.544960][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11113'. [ 912.723525][ T8743] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 912.747456][ T8745] netlink: 'syz.4.11119': attribute type 1 has an invalid length. [ 912.800809][ T8745] bond4: entered promiscuous mode [ 912.806304][ T8745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 912.818394][ T8748] erspan0: entered promiscuous mode [ 912.841102][ T8751] bond4: (slave bridge5): making interface the new active one [ 912.848773][ T8751] bridge5: entered promiscuous mode [ 912.855281][ T8751] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 912.905874][ T8745] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 912.936420][ T8745] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 913.077376][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11124'. [ 913.089617][ T8766] netlink: 'syz.2.11124': attribute type 10 has an invalid length. [ 913.101337][ T1639] Bluetooth: hci3: command 0x0406 tx timeout [ 913.109767][ T8769] dvmrp0: entered allmulticast mode [ 913.480184][ T8796] netlink: 'syz.5.11132': attribute type 1 has an invalid length. [ 913.603487][ T8805] team0: entered promiscuous mode [ 913.608977][ T8805] team_slave_0: entered promiscuous mode [ 913.614748][ T8805] team_slave_1: entered promiscuous mode [ 913.622123][ T8805] bond0: entered promiscuous mode [ 913.627322][ T8805] bond_slave_0: entered promiscuous mode [ 913.633344][ T8805] bond_slave_1: entered promiscuous mode [ 913.639347][ T8805] bridge0: entered promiscuous mode [ 913.646270][ T8805] debugfs: 'hsr1' already exists in 'hsr' [ 913.653417][ T8805] Cannot create hsr debugfs directory [ 913.661745][ T8805] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 913.694501][ T8806] syzkaller0: mtu less than device minimum [ 913.851141][ T8824] tc_dump_action: action bad kind [ 914.035225][ T8835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.045620][ T8838] __nla_validate_parse: 10 callbacks suppressed [ 914.045640][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11150'. [ 914.127750][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11151'. [ 914.145086][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11151'. [ 914.164880][ T8844] bond4 (unregistering): Released all slaves [ 914.196702][ T8841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 914.205609][ T8848] netlink: 'syz.5.11152': attribute type 2 has an invalid length. [ 914.214793][ T8848] netlink: 'syz.5.11152': attribute type 3 has an invalid length. [ 914.224193][ T8843] tipc: Enabling of bearer rejected, already enabled [ 914.294240][ T8851] ipt_rpfilter: unknown options [ 914.299911][ T8851] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 914.510412][ T8857] netlink: 'syz.0.11157': attribute type 1 has an invalid length. [ 914.552198][ T8857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 914.595770][ T8857] bond5: (slave veth13): Enslaving as an active interface with a down link [ 914.615315][ T8857] bond1: (slave veth0_to_bond): Releasing active interface [ 914.628756][ T8857] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 914.661190][ T8857] bond5: (slave veth15): Enslaving as an active interface with a down link [ 914.670383][ T8857] netlink: 'syz.0.11157': attribute type 1 has an invalid length. [ 914.679585][ T8857] netlink: 'syz.0.11157': attribute type 2 has an invalid length. [ 914.715777][ T8857] netlink: 'syz.0.11157': attribute type 3 has an invalid length. [ 914.757616][ T8875] netlink: 'syz.0.11160': attribute type 1 has an invalid length. [ 914.791527][ T8875] bond6: (slave geneve3): making interface the new active one [ 914.799933][ T8875] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 914.808695][ T7538] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 914.817468][ T7538] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 914.827247][ T7538] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 914.835987][ T7538] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 914.855193][ T8878] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11159'. [ 914.966498][ T8887] ip6gre1: entered promiscuous mode [ 915.052366][ T8888] tipc: Resetting bearer [ 915.157145][ T7538] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.168075][ T7538] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 915.176557][ T7538] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 915.188656][ T7538] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.197042][ T7538] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 915.205987][ T7538] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 915.214865][ T7538] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.229239][ T7538] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 915.237812][ T7538] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 915.268077][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 915.268964][ T8774] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 915.306925][ T7538] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.316979][ T8774] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 915.332399][ T7538] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 915.382183][ T7538] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 915.431405][ T8898] xt_hashlimit: size too large, truncated to 1048576 [ 915.561777][ T8905] 9: entered promiscuous mode [ 915.660608][ T8910] netlink: 272 bytes leftover after parsing attributes in process `syz.0.11171'. [ 915.720222][ T8912] veth0_vlan: left promiscuous mode [ 915.737773][ T8912] veth0_vlan: entered promiscuous mode [ 915.762064][ T8912] team0: Device veth0_vlan failed to register rx_handler [ 915.820265][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11175'. [ 915.963523][ T8926] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11177'. [ 916.010007][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11179'. [ 916.021608][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11179'. [ 916.050080][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11180'. [ 916.215695][ T8774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 916.224350][ T8774] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 916.236337][ T8774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 916.242536][ T8774] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 916.253058][ T8774] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 916.260302][ T8774] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 916.343349][ T8774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 916.358763][ T8774] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 916.419482][ T8774] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 916.425431][ T8774] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 916.499427][ T8873] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 916.501664][ T8877] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 916.576520][ T1639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 916.596499][ T1639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 916.611913][ T1639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 916.629641][ T1639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 916.639453][ T1639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 916.680943][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 916.696084][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 916.706852][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 916.730439][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 916.749594][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 916.857939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 916.866022][ C0] lec:lec_tx_timeout: lec0 [ 916.952647][ T8894] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.279850][ T8992] xt_hashlimit: size too large, truncated to 1048576 [ 918.593567][ T8894] chnl_net:caif_netlink_parms(): no params data found [ 918.839690][ T9078] xt_hashlimit: size too large, truncated to 1048576 [ 918.860275][ T1639] Bluetooth: hci6: command tx timeout [ 918.899292][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.916619][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.927165][ T8894] bridge_slave_0: entered allmulticast mode [ 918.935251][ T8894] bridge_slave_0: entered promiscuous mode [ 918.945852][ T9077] syzkaller1: entered promiscuous mode [ 918.968445][ T9077] syzkaller1: entered allmulticast mode [ 918.980518][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.000729][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.023572][ T8894] bridge_slave_1: entered allmulticast mode [ 919.040791][ T8894] bridge_slave_1: entered promiscuous mode [ 919.255829][ T9092] __nla_validate_parse: 9 callbacks suppressed [ 919.255848][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11217'. [ 919.277435][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.293525][ T9101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.306744][ T9102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.325804][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.372102][ T8894] team0: Port device team_slave_0 added [ 919.381069][ T8894] team0: Port device team_slave_1 added [ 919.416285][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.428368][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.455112][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.487234][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.500672][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.588902][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.618336][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11224'. [ 919.654911][ T8894] hsr_slave_0: entered promiscuous mode [ 919.666961][ T8894] hsr_slave_1: entered promiscuous mode [ 920.011835][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.023033][ T9151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.938107][ T1639] Bluetooth: hci6: command tx timeout [ 922.437385][ T9113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.451639][ T8894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 922.549413][ T8894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 922.615103][ T8894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 922.646699][ T9167] validate_nla: 6 callbacks suppressed [ 922.646717][ T9167] netlink: 'syz.5.11235': attribute type 8 has an invalid length. [ 922.661987][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11235'. [ 922.694232][ T9165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.711858][ T8894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 922.741369][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11238'. [ 922.753162][ T9172] sctp: [Deprecated]: syz.0.11238 (pid 9172) Use of int in maxseg socket option. [ 922.753162][ T9172] Use struct sctp_assoc_value instead [ 922.857171][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11240'. [ 922.885822][ T9185] netlink: 'syz.2.11240': attribute type 10 has an invalid length. [ 922.956743][ T9185] team0: Device veth0_macvtap failed to register rx_handler [ 923.008766][ T9194] team0: No ports can be present during mode change [ 923.028117][ T1639] Bluetooth: hci6: command tx timeout [ 923.074641][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11246'. [ 923.145055][ T9201] bond4: Invalid ad_actor_system MAC address. [ 923.153586][ T9201] bond4: option ad_actor_system: invalid value (1) [ 923.165858][ T9201] bond4 (unregistering): Released all slaves [ 923.227812][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.296422][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.325130][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.332495][ T7535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.381910][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.389116][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.413238][ T9227] tipc: Resetting bearer [ 923.438590][ T9227] wlan1: mtu greater than device maximum [ 924.514413][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.893341][ T8894] veth0_vlan: entered promiscuous mode [ 924.910671][ T8894] veth1_vlan: entered promiscuous mode [ 924.943115][ T8894] veth0_macvtap: entered promiscuous mode [ 924.954758][ T8894] veth1_macvtap: entered promiscuous mode [ 924.971647][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.985349][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.000410][ T7537] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.012727][ T7537] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.027020][ T7537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.036634][ T7537] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.098145][ T1639] Bluetooth: hci6: command tx timeout [ 927.629099][ T9283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.732998][ T9308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11270'. [ 927.758213][ T7537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.766064][ T7537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.800273][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11270'. [ 927.828873][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11271'. [ 927.841421][ T7539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.853333][ T7539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.917405][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11273'. [ 927.956466][ T9316] ip6_vti0 speed is unknown, defaulting to 1000 [ 928.111691][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11166'. [ 928.126050][ T9329] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11166'. [ 928.373175][ T9341] IPv6: sit1: Disabled Multicast RS [ 928.575015][ T9349] netlink: 'syz.6.11286': attribute type 1 has an invalid length. [ 928.586023][ T9349] netlink: 228 bytes leftover after parsing attributes in process `syz.6.11286'. [ 928.597559][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11286'. [ 928.649210][ T9351] syzkaller0: entered promiscuous mode [ 928.654722][ T9351] syzkaller0: entered allmulticast mode [ 928.731736][ T9350] xt_hashlimit: size too large, truncated to 1048576 [ 929.279509][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11289'. [ 929.316868][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11289'. [ 929.694422][ T9398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.701753][ T9398] IPv6: NLM_F_CREATE should be set when creating new route [ 929.709066][ T9398] IPv6: NLM_F_CREATE should be set when creating new route [ 929.716319][ T9398] IPv6: NLM_F_CREATE should be set when creating new route [ 929.735130][ T9398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 930.214318][ T9429] !: renamed from dummy0 [ 930.644147][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 930.654927][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 930.663678][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 930.672955][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 930.682800][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 930.794160][ T9447] netlink: 'syz.2.11314': attribute type 1 has an invalid length. [ 930.814819][ T9451] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.986936][ T9462] netlink: 'syz.5.11317': attribute type 1 has an invalid length. [ 931.118989][ T9462] bond4: entered promiscuous mode [ 931.129042][ T9462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 931.191036][ T9464] bond4: (slave bridge2): making interface the new active one [ 931.200480][ T9464] bridge2: entered promiscuous mode [ 931.211866][ T9464] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 931.275188][ T9462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.509700][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 931.912662][ T9504] syzkaller0: entered promiscuous mode [ 931.930901][ T9506] netlink: 'syz.2.11330': attribute type 1 has an invalid length. [ 931.944319][ T9504] syzkaller0: entered allmulticast mode [ 932.027715][ T9506] bond6: entered promiscuous mode [ 932.034191][ T9506] 8021q: adding VLAN 0 to HW filter on device bond6 [ 932.035127][ T9509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.084222][ T9522] FAULT_INJECTION: forcing a failure. [ 932.084222][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.114299][ T9519] bond6: (slave bridge3): making interface the new active one [ 932.123608][ T9522] CPU: 1 UID: 0 PID: 9522 Comm: syz.4.11333 Not tainted syzkaller #0 PREEMPT(full) [ 932.123631][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 932.123641][ T9522] Call Trace: [ 932.123648][ T9522] [ 932.123656][ T9522] dump_stack_lvl+0xe8/0x150 [ 932.123682][ T9522] should_fail_ex+0x412/0x560 [ 932.123708][ T9522] _copy_from_user+0x2d/0xb0 [ 932.123727][ T9522] bpf_test_init+0xd8/0x150 [ 932.123745][ T9522] bpf_prog_test_run_xdp+0x529/0x1160 [ 932.123774][ T9522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 932.123796][ T9522] ? __fget_files+0x2a/0x420 [ 932.123819][ T9522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 932.123836][ T9522] bpf_prog_test_run+0x2c7/0x340 [ 932.123859][ T9522] __sys_bpf+0x643/0x950 [ 932.123880][ T9522] ? __pfx___sys_bpf+0x10/0x10 [ 932.123913][ T9522] ? ksys_write+0x242/0x270 [ 932.123951][ T9522] ? __pfx_ksys_write+0x10/0x10 [ 932.123979][ T9522] __x64_sys_bpf+0x7c/0x90 [ 932.123996][ T9522] do_syscall_64+0x14d/0xf80 [ 932.124017][ T9522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.124033][ T9522] ? trace_irq_disable+0x37/0x100 [ 932.124051][ T9522] ? clear_bhb_loop+0x40/0x90 [ 932.124071][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.124087][ T9522] RIP: 0033:0x7f40cdd9bf79 [ 932.124103][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.124118][ T9522] RSP: 002b:00007f40ceb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 932.124142][ T9522] RAX: ffffffffffffffda RBX: 00007f40ce015fa0 RCX: 00007f40cdd9bf79 [ 932.124156][ T9522] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 932.124167][ T9522] RBP: 00007f40ceb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 932.124178][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.124189][ T9522] R13: 00007f40ce016038 R14: 00007f40ce015fa0 R15: 00007fffadcf1318 [ 932.124216][ T9522] [ 932.129438][ T9519] bridge3: entered promiscuous mode [ 932.348019][ T9519] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 932.386449][ T9506] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 932.446663][ T9523] macvlan4: entered promiscuous mode [ 932.452244][ T9523] macvlan4: entered allmulticast mode [ 932.460123][ T9523] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 932.545778][ T7537] dummy0: left allmulticast mode [ 932.564045][ T7537] bridge0: port 3(dummy0) entered disabled state [ 932.680917][ T7537] bridge_slave_1: left allmulticast mode [ 932.694924][ T7537] bridge_slave_1: left promiscuous mode [ 932.702673][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.780119][ T5824] Bluetooth: hci7: command tx timeout [ 932.845891][ T7537] bridge_slave_0: left allmulticast mode [ 932.853086][ T7537] bridge_slave_0: left promiscuous mode [ 932.859545][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.964088][ T9551] __nla_validate_parse: 13 callbacks suppressed [ 932.964109][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11343'. [ 933.045977][ T7535] smc: removing ib device syz2 [ 933.159759][ T7537] tipc: Disabling bearer [ 933.231810][ T7537] bond3 (unregistering): (slave gretap1): Releasing active interface [ 933.341063][ T7537] bond6 (unregistering): (slave geneve3): Releasing active interface [ 933.562241][ T7537] tipc: Disabling bearer [ 933.829296][ T7537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.844313][ T7537] bond0 (unregistering): (slave c@0): Releasing backup interface [ 933.869317][ T7537] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 933.879169][ T7537] bond0 (unregistering): Released all slaves [ 933.895050][ T7537] bond1 (unregistering): (slave veth9): Releasing active interface [ 933.920722][ T7537] bond1 (unregistering): Released all slaves [ 933.946614][ T7537] bond2 (unregistering): (slave veth11): Releasing active interface [ 933.956832][ T7537] bond2 (unregistering): Released all slaves [ 934.017231][ T7537] bond3 (unregistering): Released all slaves [ 934.074254][ T7537] bond4 (unregistering): Released all slaves [ 934.118599][ T7537] bond5 (unregistering): (slave veth13): Releasing active interface [ 934.130736][ T7537] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 934.145865][ T7537] bond5 (unregistering): (slave veth15): Releasing active interface [ 934.160713][ T7537] bond5 (unregistering): Released all slaves [ 934.196450][ T7537] bond6 (unregistering): Released all slaves [ 934.239378][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11337'. [ 934.383633][ T9574] ip6gre1: entered allmulticast mode [ 934.543939][ T9564] syzkaller0: entered promiscuous mode [ 934.568433][ T9564] syzkaller0: entered allmulticast mode [ 934.615216][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 934.792213][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11348'. [ 934.858446][ T5824] Bluetooth: hci7: command tx timeout [ 936.866240][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 936.874667][ C0] lec:lec_tx_timeout: lec0 [ 936.941646][ T5824] Bluetooth: hci7: command tx timeout [ 937.043713][ T7542] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.111065][ T7542] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.143693][ T7542] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.238405][ T7542] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.350445][ T9603] netlink: 'syz.2.11353': attribute type 2 has an invalid length. [ 937.466373][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.506292][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.537370][ T9451] bridge_slave_0: entered allmulticast mode [ 937.546483][ T9451] bridge_slave_0: entered promiscuous mode [ 937.597617][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.612081][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.632081][ T9451] bridge_slave_1: entered allmulticast mode [ 937.648117][ T9451] bridge_slave_1: entered promiscuous mode [ 937.687956][ T7537] : left promiscuous mode [ 937.711006][ T9619] kthread_run failed with err -4 [ 937.794463][ T7537] tipc: Left network mode [ 937.797900][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.847681][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.885501][ T9451] team0: Port device team_slave_0 added [ 937.897226][ T9451] team0: Port device team_slave_1 added [ 938.044170][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.070382][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11363'. [ 938.077435][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.090506][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11363'. [ 938.108226][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.117178][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11364'. [ 938.128367][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.143871][ T9646] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11364'. [ 938.155251][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11364'. [ 938.155385][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.192568][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.505972][ T9451] hsr_slave_0: entered promiscuous mode [ 938.524984][ T9451] hsr_slave_1: entered promiscuous mode [ 938.552881][ T9451] debugfs: 'hsr0' already exists in 'hsr' [ 938.564906][ T9451] Cannot create hsr debugfs directory [ 939.018640][ T5824] Bluetooth: hci7: command tx timeout [ 939.542118][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.062854][ T9733] netlink: 'syz.6.11388': attribute type 13 has an invalid length. [ 940.098891][ T9733] netlink: 'syz.6.11388': attribute type 58 has an invalid length. [ 940.106851][ T9733] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11388'. [ 940.145237][ T9739] netlink: 'syz.6.11388': attribute type 1 has an invalid length. [ 940.161946][ T9739] netlink: 'syz.6.11388': attribute type 1 has an invalid length. [ 940.329543][ T9738] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 940.374697][ T9738] bond5 (unregistering): Released all slaves [ 940.442555][ T9757] IPVS: set_ctl: invalid protocol: 2 172.20.20.28:20001 [ 940.469970][ T9757] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 940.563880][ T7537] IPVS: stop unused estimator thread 0... [ 941.374259][ T7537] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 941.384106][ T7537] bridge4 (unregistering): left promiscuous mode [ 941.512034][ T7537] bond0 (unregistering): Released all slaves [ 941.522278][ T7537] bond1 (unregistering): Released all slaves [ 941.534986][ T7537] bond2 (unregistering): Released all slaves [ 941.547535][ T7537] bond3 (unregistering): Released all slaves [ 941.566473][ T7537] bond4 (unregistering): Released all slaves [ 941.579517][ T7537] bond5 (unregistering): Released all slaves [ 941.596342][ T7537] bond6 (unregistering): Released all slaves [ 941.609350][ T7537] bond7 (unregistering): Released all slaves [ 941.623040][ T7537] bond8 (unregistering): Released all slaves [ 941.660663][ T9772] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 941.838289][ T7537] tipc: Left network mode [ 942.018135][ T9812] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11407'. [ 942.153099][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11410'. [ 942.203646][ T9451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 942.222948][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11410'. [ 942.286872][ T9451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 942.328665][ T9827] netlink: 288 bytes leftover after parsing attributes in process `syz.2.11410'. [ 942.401004][ T9451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 942.527228][ T9451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 943.081911][ T7537] veth1_vlan: left allmulticast mode [ 943.884249][ T9876] syzkaller0: entered promiscuous mode [ 943.908327][ T9876] syzkaller0: entered allmulticast mode [ 946.116639][ T9891] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 946.126411][ T9891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 946.136245][ T9891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 946.277819][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.318454][ T9910] __nla_validate_parse: 4 callbacks suppressed [ 946.318472][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11423'. [ 946.355137][ T9912] sctp: [Deprecated]: syz.5.11424 (pid 9912) Use of int in max_burst socket option. [ 946.355137][ T9912] Use struct sctp_assoc_value instead [ 946.359974][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.429297][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.436485][ T7535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.491404][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.498609][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.603569][ T9926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11428'. [ 946.617764][ T9926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11428'. [ 946.696518][ T9932] tipc: Enabled bearer , priority 2 [ 946.723221][ T7537] IPVS: stop unused estimator thread 0... [ 947.021037][ T9955] syzkaller0: entered promiscuous mode [ 947.031062][ T9955] syzkaller0: entered allmulticast mode [ 947.116570][ T9959] sit1: entered promiscuous mode [ 947.121908][ T9959] sit1: entered allmulticast mode [ 947.225293][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.294440][ T9451] veth0_vlan: entered promiscuous mode [ 947.332314][ T9451] veth1_vlan: entered promiscuous mode [ 947.351364][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11440'. [ 947.384686][ T9451] veth0_macvtap: entered promiscuous mode [ 947.407609][ T9451] veth1_macvtap: entered promiscuous mode [ 947.490057][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.511785][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11442'. [ 947.523385][ T9979] SET target dimension over the limit! [ 947.546764][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.595133][ T7515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.625548][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11444'. [ 947.641541][ T7542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.667819][ T7542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.676872][ T9981] netlink: 'syz.4.11444': attribute type 5 has an invalid length. [ 947.684283][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11443'. [ 947.685643][ T7542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.704732][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11444'. [ 947.734442][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11443'. [ 947.805179][ T9983] team0: entered promiscuous mode [ 947.812362][ T9983] team_slave_0: entered promiscuous mode [ 947.820665][ T9983] team_slave_1: entered promiscuous mode [ 947.833152][ T9983] bond0: entered promiscuous mode [ 947.842429][ T9983] bond_slave_0: entered promiscuous mode [ 947.855200][ T9983] bond_slave_1: entered promiscuous mode [ 947.862928][ T9983] debugfs: 'hsr1' already exists in 'hsr' [ 947.869179][ T9983] Cannot create hsr debugfs directory [ 947.883481][ T9983] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 947.890696][ T9992] netlink: 'syz.5.11447': attribute type 1 has an invalid length. [ 947.900087][ T9992] netlink: 16179 bytes leftover after parsing attributes in process `syz.5.11447'. [ 947.904018][ T7515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.913587][ T9988] x_tables: duplicate underflow at hook 1 [ 947.931657][ T7515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.014437][ T7515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.057787][ T7515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.167239][T10005] syzkaller0: entered promiscuous mode [ 948.175742][T10005] syzkaller0: entered allmulticast mode [ 948.437441][T10025] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 948.536613][T10031] xt_hashlimit: size too large, truncated to 1048576 [ 948.628884][T10040] syzkaller0: entered promiscuous mode [ 948.644157][T10040] syzkaller0: entered allmulticast mode [ 949.046614][T10061] syzkaller0: entered promiscuous mode [ 949.059380][T10061] syzkaller0: entered allmulticast mode [ 949.103748][T10070] netlink: 'syz.0.11473': attribute type 1 has an invalid length. [ 949.213203][T10073] pim6reg527: entered allmulticast mode [ 949.281546][T10078] team0: entered promiscuous mode [ 949.290302][T10078] team_slave_0: entered promiscuous mode [ 949.316204][T10078] team_slave_1: entered promiscuous mode [ 949.354323][T10078] bond0: entered promiscuous mode [ 949.376167][T10078] bond_slave_0: entered promiscuous mode [ 949.432540][T10078] bond_slave_1: entered promiscuous mode [ 949.451183][T10078] debugfs: 'hsr1' already exists in 'hsr' [ 949.456962][T10078] Cannot create hsr debugfs directory [ 949.473324][T10078] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 949.760981][T10119] vlan3: entered promiscuous mode [ 949.915774][T10128] syzkaller0: entered promiscuous mode [ 949.934923][T10128] syzkaller0: entered allmulticast mode [ 949.945722][T10127] syzkaller0: entered promiscuous mode [ 949.951662][T10127] syzkaller0: entered allmulticast mode [ 950.000427][T10131] syzkaller0: entered promiscuous mode [ 950.006049][T10131] syzkaller0: entered allmulticast mode [ 950.179837][T10142] netlink: 'syz.6.11494': attribute type 10 has an invalid length. [ 950.225707][T10142] team0 (unregistering): left promiscuous mode [ 950.235652][T10142] team_slave_0: left promiscuous mode [ 950.247272][T10142] team_slave_1: left promiscuous mode [ 950.270217][T10142] team0 (unregistering): Port device team_slave_0 removed [ 950.302148][T10142] team0 (unregistering): Port device team_slave_1 removed [ 950.785377][T10183] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 951.272117][T10209] xt_HMARK: proto mask must be zero with L3 mode [ 951.284604][T10209] syzkaller1: entered promiscuous mode [ 951.295596][T10209] syzkaller1: entered allmulticast mode [ 951.527630][T10217] __nla_validate_parse: 14 callbacks suppressed [ 951.527650][T10217] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11516'. [ 951.640723][T10217] 8021q: VLANs not supported on ip6tnl0 [ 951.868620][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11523'. [ 951.957456][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11524'. [ 951.992844][T10243] netlink: 'syz.0.11524': attribute type 7 has an invalid length. [ 952.020770][T10243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11524'. [ 952.063217][T10243] erspan0: entered promiscuous mode [ 952.070645][T10243] gretap0: entered promiscuous mode [ 952.223814][T10262] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11532'. [ 952.255561][T10262] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 952.303401][T10267] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 952.372761][T10272] netlink: 100 bytes leftover after parsing attributes in process `syz.6.11536'. [ 952.420973][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11534'. [ 952.485180][T10286] netlink: 'syz.4.11537': attribute type 10 has an invalid length. [ 955.009207][T10247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 955.027237][T10279] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11537'. [ 955.060009][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11537'. [ 955.133537][T10292] netlink: 496 bytes leftover after parsing attributes in process `syz.0.11539'. [ 955.246875][T10297] netlink: 'syz.2.11542': attribute type 2 has an invalid length. [ 955.269651][T10297] netlink: 'syz.2.11542': attribute type 4 has an invalid length. [ 956.444401][T10369] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 956.549987][T10376] __nla_validate_parse: 7 callbacks suppressed [ 956.550005][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11566'. [ 956.601056][T10382] tipc: Enabling of bearer rejected, failed to enable media [ 956.911159][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11575'. [ 956.929808][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11577'. [ 956.930364][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11575'. [ 957.001995][T10407] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11578'. [ 957.077576][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11580'. [ 957.087006][T10412] syzkaller0: entered promiscuous mode [ 957.087029][T10412] syzkaller0: entered allmulticast mode [ 957.165668][T10407] syzkaller0: entered promiscuous mode [ 957.172371][T10407] syzkaller0: entered allmulticast mode [ 957.183124][T10407] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11578'. [ 957.851267][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11593'. [ 958.618952][ T1639] Bluetooth: hci7: command 0x0405 tx timeout [ 959.725828][T10463] syzkaller0: entered promiscuous mode [ 959.739440][T10463] syzkaller0: entered allmulticast mode [ 959.848766][T10476] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.11602'. [ 959.881151][T10476] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.11602'. [ 960.094752][T10499] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 960.219290][T10507] netlink: 'syz.6.11608': attribute type 33 has an invalid length. [ 960.287041][T10508] tipc: Started in network mode [ 960.294576][T10508] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 960.310603][T10508] tipc: Enabled bearer , priority 10 [ 960.657565][T10533] xt_hashlimit: size too large, truncated to 1048576 [ 961.139333][T10545] tipc: Started in network mode [ 961.144249][T10545] tipc: Node identity 0273ad702afa, cluster identity 4711 [ 961.152511][T10545] tipc: Enabled bearer , priority 0 [ 961.281722][T10555] netlink: 'syz.0.11628': attribute type 21 has an invalid length. [ 961.314203][T10545] syzkaller0: entered promiscuous mode [ 961.329237][T10545] syzkaller0: entered allmulticast mode [ 961.335702][T10545] tipc: Resetting bearer [ 961.354871][T10567] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 961.414894][T10545] tipc: Resetting bearer [ 961.541166][T10555] netlink: 'syz.0.11628': attribute type 13 has an invalid length. [ 961.705684][T10591] xt_hashlimit: size too large, truncated to 1048576 [ 963.955527][T10545] tipc: Disabling bearer [ 963.965023][ T5879] tipc: Node number set to 4269801492 [ 963.971823][T10584] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 964.106266][T24757] tipc: Node number set to 680111472 [ 964.497207][T10621] __nla_validate_parse: 8 callbacks suppressed [ 964.497228][T10621] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11644'. [ 964.773304][T10634] syzkaller0: entered promiscuous mode [ 964.779554][T10634] syzkaller0: entered allmulticast mode [ 965.166909][T10659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.276041][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11658'. [ 965.287589][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11658'. [ 965.317180][T10666] netlink: 'syz.4.11659': attribute type 39 has an invalid length. [ 965.655427][T10679] netlink: 'syz.0.11665': attribute type 13 has an invalid length. [ 965.686799][T10679] netlink: 'syz.0.11665': attribute type 58 has an invalid length. [ 965.695200][T10679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11665'. [ 965.731480][T10683] netdevsim netdevsim5 : renamed from netdevsim0 [ 965.766838][T10690] sctp: [Deprecated]: syz.2.11667 (pid 10690) Use of int in maxseg socket option. [ 965.766838][T10690] Use struct sctp_assoc_value instead [ 965.768864][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11668'. [ 965.915435][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11669'. [ 965.934752][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11669'. [ 965.965449][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11672'. [ 965.972644][T10702] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11673'. [ 965.977174][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11672'. [ 966.055975][T10704] syzkaller0: entered promiscuous mode [ 966.066904][T10704] syzkaller0: entered allmulticast mode [ 966.128128][T10706] netlink: 'syz.0.11675': attribute type 1 has an invalid length. [ 966.173187][T10706] bond1: entered promiscuous mode [ 966.179786][T10706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 966.205657][T10706] bond1: (slave bridge1): making interface the new active one [ 966.213480][T10706] bridge1: entered promiscuous mode [ 966.220973][T10706] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 966.245683][T10706] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 966.311571][T10706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 966.930596][T10750] netlink: 'syz.4.11691': attribute type 1 has an invalid length. [ 967.042139][T10750] bond5: entered promiscuous mode [ 967.047851][T10750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 967.091773][T10762] bond5: (slave bridge7): making interface the new active one [ 967.112789][T10762] bridge7: entered promiscuous mode [ 967.128759][T10762] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 967.167193][T10750] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 967.208718][T10759] netlink: 'syz.5.11694': attribute type 1 has an invalid length. [ 967.236995][T10764] syzkaller0: entered promiscuous mode [ 967.247180][T10764] syzkaller0: entered allmulticast mode [ 967.369604][T10779] netlink: 'syz.2.11700': attribute type 12 has an invalid length. [ 967.690163][T10782] netlink: 'syz.0.11701': attribute type 1 has an invalid length. [ 968.224942][T10785] netlink: 'syz.4.11702': attribute type 1 has an invalid length. [ 968.234358][T10785] netlink: 'syz.4.11702': attribute type 2 has an invalid length. [ 968.242530][T10785] netlink: 'syz.4.11702': attribute type 1 has an invalid length. [ 970.194240][T10779] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 970.205478][T10782] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 970.226207][T10783] erspan1: entered allmulticast mode [ 970.506975][T10811] __nla_validate_parse: 8 callbacks suppressed [ 970.506993][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11711'. [ 970.524415][T10806] bond8: entered promiscuous mode [ 970.533809][T10808] syzkaller0: entered promiscuous mode [ 970.541057][T10808] syzkaller0: entered allmulticast mode [ 970.546362][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11711'. [ 970.575450][T10806] macvlan4: entered promiscuous mode [ 970.583021][T10806] macvlan4: entered allmulticast mode [ 970.589992][T10806] bond8: (slave macvlan4): Opening slave failed [ 970.893708][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11717'. [ 971.065210][T10842] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 971.206166][T10853] syzkaller0: entered promiscuous mode [ 971.211905][T10853] syzkaller0: entered allmulticast mode [ 971.362334][T10858] nbd: must specify at least one socket [ 971.374600][T10860] netlink: 'syz.4.11728': attribute type 1 has an invalid length. [ 971.477670][T10860] bond6: entered promiscuous mode [ 971.486752][T10860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 971.515817][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11731'. [ 971.545229][T10866] bond6: (slave bridge8): making interface the new active one [ 971.553499][T10866] bridge8: entered promiscuous mode [ 971.572317][T10866] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 971.617088][T10878] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 971.696551][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11734'. [ 971.720618][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11735'. [ 971.735694][T10885] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.11734'. [ 971.776525][T10887] netlink: 'syz.6.11735': attribute type 7 has an invalid length. [ 971.934206][T24767] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x1 [ 971.942294][T10899] netlink: 'syz.6.11739': attribute type 10 has an invalid length. [ 971.962835][T24767] hid-generic 0005:0C49:1012.0003: ignoring exceeding usage max [ 971.975063][T24767] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x4 [ 971.992515][T24767] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x5 [ 972.001089][T24767] hid-generic 0005:0C49:1012.0003: reserved main item tag 0xd [ 972.009397][T24767] hid-generic 0005:0C49:1012.0003: item fetching failed at offset 31/106 [ 972.019644][T24767] hid-generic 0005:0C49:1012.0003: probe with driver hid-generic failed with error -22 [ 972.073908][T10909] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11738'. [ 972.345771][T10914] bond9: (slave veth9): Enslaving as an active interface with a down link [ 972.371123][T10927] netlink: 116 bytes leftover after parsing attributes in process `syz.5.11746'. [ 972.391713][T10932] netlink: 'syz.6.11747': attribute type 1 has an invalid length. [ 972.409036][T10924] bond9: (slave veth11): Enslaving as an active interface with a down link [ 972.461846][T10932] bond1: entered promiscuous mode [ 972.467413][T10932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.511460][T10936] bond1: (slave bridge2): making interface the new active one [ 972.519753][T10936] bridge2: entered promiscuous mode [ 972.526596][T10936] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 972.576727][T10932] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 972.618234][T10936] macvlan2: entered promiscuous mode [ 972.631636][T10936] macvlan2: entered allmulticast mode [ 972.643225][T10936] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 972.667499][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11753'. [ 972.692314][ T7538] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.726701][ T7538] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.826082][T10952] bond5: entered promiscuous mode [ 972.831833][ T7538] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.841306][ T7535] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.862226][T10955] macvlan2: entered promiscuous mode [ 972.867690][T10955] macvlan2: entered allmulticast mode [ 972.875218][T10955] bond5: (slave macvlan2): Opening slave failed [ 973.032189][T10960] syzkaller0: entered promiscuous mode [ 973.037772][T10960] syzkaller0: entered allmulticast mode [ 973.434523][T10997] netlink: zone id is out of range [ 973.454412][T10997] netlink: zone id is out of range [ 973.464557][T10997] netlink: zone id is out of range [ 973.490820][T10997] netlink: zone id is out of range [ 973.506169][T10997] netlink: zone id is out of range [ 973.513574][T10997] netlink: zone id is out of range [ 973.520233][T10997] netlink: zone id is out of range [ 973.525459][T10997] netlink: zone id is out of range [ 973.553965][T10997] netlink: zone id is out of range [ 973.579824][T10997] netlink: zone id is out of range [ 974.474919][ T8938] lec:lec_start_xmit: lec0:No lecd attached [ 975.603178][T11013] netlink: 'syz.6.11767': attribute type 1 has an invalid length. [ 975.691160][T11013] bond2: entered promiscuous mode [ 975.707848][T11013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.727341][T11022] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 975.792434][T11018] bond2: (slave bridge3): making interface the new active one [ 975.826042][T11033] __nla_validate_parse: 4 callbacks suppressed [ 975.826060][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11771'. [ 975.829976][T11018] bridge3: entered promiscuous mode [ 975.848451][T11018] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 975.902780][T11027] macvlan2: entered promiscuous mode [ 975.914580][T11027] macvlan2: entered allmulticast mode [ 975.925461][T11027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 976.000503][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11774'. [ 976.342599][T11054] netlink: 216 bytes leftover after parsing attributes in process `syz.6.11776'. [ 976.480985][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11777'. [ 976.723359][T11070] sit0: entered promiscuous mode [ 976.755859][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11779'. [ 977.055040][T11091] netlink: 'syz.0.11785': attribute type 1 has an invalid length. [ 977.240833][T11091] bond2: entered promiscuous mode [ 977.246302][T11091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 977.299929][T11107] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11789'. [ 977.312065][T11096] bond2: (slave bridge2): making interface the new active one [ 977.324893][T11096] bridge2: entered promiscuous mode [ 977.333607][T11096] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 977.369486][T11113] netlink: 'syz.5.11791': attribute type 1 has an invalid length. [ 977.379245][T11091] macvlan2: entered promiscuous mode [ 977.385093][T11091] macvlan2: entered allmulticast mode [ 977.394163][T11091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 977.455702][T11113] bond7: entered promiscuous mode [ 977.462758][T11113] bond7: entered allmulticast mode [ 977.468739][T11113] 8021q: adding VLAN 0 to HW filter on device bond7 [ 977.645669][T11129] netlink: 'syz.0.11797': attribute type 21 has an invalid length. [ 977.673237][T11129] netlink: 'syz.0.11797': attribute type 6 has an invalid length. [ 977.687635][T11129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11797'. [ 977.742800][T11132] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11795'. [ 977.778376][T11132] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11795'. [ 977.796460][T11132] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11795'. [ 977.891316][T11144] syzkaller0: entered promiscuous mode [ 977.896987][T11144] syzkaller0: entered allmulticast mode [ 978.027709][T11152] netlink: 'syz.5.11803': attribute type 1 has an invalid length. [ 978.093710][T11152] bond8: entered promiscuous mode [ 978.143460][T11152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 978.185067][T11158] bond8: (slave bridge3): making interface the new active one [ 978.204238][T11158] bridge3: entered promiscuous mode [ 978.217650][T11158] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 978.286645][T11171] xt_TCPMSS: Only works on TCP SYN packets [ 978.297316][T11152] macvlan2: entered promiscuous mode [ 978.314067][T11152] macvlan2: entered allmulticast mode [ 978.324588][T11152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 979.105563][T11225] xt_hashlimit: invalid rate [ 979.117169][T11223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 979.818201][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 979.834377][ C0] lec:lec_tx_timeout: lec0 [ 979.866003][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.874678][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.205279][T11292] syzkaller0: entered promiscuous mode [ 980.233771][T11292] syzkaller0: entered allmulticast mode [ 980.284990][T11299] netlink: 'syz.0.11847': attribute type 1 has an invalid length. [ 980.317448][T11299] netlink: 'syz.0.11847': attribute type 2 has an invalid length. [ 980.333033][T11299] netlink: 'syz.0.11847': attribute type 2 has an invalid length. [ 980.361598][T11299] netlink: 'syz.0.11847': attribute type 2 has an invalid length. [ 980.724681][T11324] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 980.782115][T11324] netlink: 'syz.0.11853': attribute type 9 has an invalid length. [ 980.810789][T11328] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 980.822919][T11328] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 980.851726][T11328] gretap4: entered promiscuous mode [ 980.859375][T11328] gretap4: entered allmulticast mode [ 981.008815][T11339] FAULT_INJECTION: forcing a failure. [ 981.008815][T11339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.022644][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.5.11860 Not tainted syzkaller #0 PREEMPT(full) [ 981.022669][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 981.022681][T11339] Call Trace: [ 981.022688][T11339] [ 981.022697][T11339] dump_stack_lvl+0xe8/0x150 [ 981.022724][T11339] should_fail_ex+0x412/0x560 [ 981.022751][T11339] _copy_from_user+0x2d/0xb0 [ 981.022771][T11339] __sys_connect+0x156/0x450 [ 981.022793][T11339] ? __pfx___sys_connect+0x10/0x10 [ 981.022823][T11339] ? __pfx_ksys_write+0x10/0x10 [ 981.022851][T11339] __x64_sys_connect+0x7a/0x90 [ 981.022868][T11339] do_syscall_64+0x14d/0xf80 [ 981.022889][T11339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.022906][T11339] ? trace_irq_disable+0x37/0x100 [ 981.022924][T11339] ? clear_bhb_loop+0x40/0x90 [ 981.022945][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.022961][T11339] RIP: 0033:0x7fb34939bf79 [ 981.022978][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.022993][T11339] RSP: 002b:00007fb34a257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 981.023012][T11339] RAX: ffffffffffffffda RBX: 00007fb349615fa0 RCX: 00007fb34939bf79 [ 981.023025][T11339] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 981.023036][T11339] RBP: 00007fb34a257090 R08: 0000000000000000 R09: 0000000000000000 [ 981.023047][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.023057][T11339] R13: 00007fb349616038 R14: 00007fb349615fa0 R15: 00007ffe392e5ec8 [ 981.023086][T11339] [ 981.414143][T11353] bond9: entered promiscuous mode [ 981.419985][T11353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 981.454574][T11353] bond9: (slave bridge4): making interface the new active one [ 981.462314][T11353] bridge4: entered promiscuous mode [ 981.468746][T11353] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 981.486958][T11353] macvlan2: entered promiscuous mode [ 981.493559][T11353] macvlan2: entered allmulticast mode [ 981.501053][T11353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 981.749614][T11375] __nla_validate_parse: 13 callbacks suppressed [ 981.749695][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11875'. [ 981.766091][T11372] FAULT_INJECTION: forcing a failure. [ 981.766091][T11372] name failslab, interval 1, probability 0, space 0, times 0 [ 981.780177][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.5.11873 Not tainted syzkaller #0 PREEMPT(full) [ 981.780202][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 981.780212][T11372] Call Trace: [ 981.780218][T11372] [ 981.780226][T11372] dump_stack_lvl+0xe8/0x150 [ 981.780252][T11372] should_fail_ex+0x412/0x560 [ 981.780280][T11372] should_failslab+0xa8/0x100 [ 981.780302][T11372] ? dst_alloc+0x105/0x170 [ 981.780324][T11372] kmem_cache_alloc_noprof+0x87/0x650 [ 981.780354][T11372] dst_alloc+0x105/0x170 [ 981.780380][T11372] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 981.780401][T11372] ? ip_route_output_key_hash_rcu+0x1ca1/0x25d0 [ 981.780429][T11372] ? ip_route_output_key_hash+0xd8/0x2a0 [ 981.780452][T11372] ip_route_output_key_hash+0x18d/0x2a0 [ 981.780472][T11372] ? vsnprintf+0xe1a/0xee0 [ 981.780498][T11372] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 981.780516][T11372] ? tomoyo_write_log2+0x250/0x910 [ 981.780556][T11372] tcp_v4_connect+0x716/0x1a90 [ 981.780605][T11372] ? __pfx_tcp_v4_connect+0x10/0x10 [ 981.780628][T11372] ? aa_label_sk_perm+0x529/0x6d0 [ 981.780649][T11372] ? tcp_v6_connect+0x62d/0x1b20 [ 981.780672][T11372] tcp_v6_connect+0xbbb/0x1b20 [ 981.780690][T11372] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 981.780719][T11372] ? __lock_acquire+0x6b5/0x2cf0 [ 981.780740][T11372] ? __pfx_tcp_v6_connect+0x10/0x10 [ 981.780771][T11372] __inet_stream_connect+0x25a/0xdd0 [ 981.780801][T11372] ? do_raw_spin_lock+0x12b/0x2f0 [ 981.780822][T11372] ? lock_sock_nested+0x6a/0x100 [ 981.780840][T11372] ? __pfx___inet_stream_connect+0x10/0x10 [ 981.780871][T11372] ? __local_bh_enable_ip+0xd0/0x130 [ 981.780896][T11372] inet_stream_connect+0x66/0xa0 [ 981.780919][T11372] __sys_connect+0x312/0x450 [ 981.780942][T11372] ? __pfx___sys_connect+0x10/0x10 [ 981.780971][T11372] ? __pfx_ksys_write+0x10/0x10 [ 981.781000][T11372] __x64_sys_connect+0x7a/0x90 [ 981.781020][T11372] do_syscall_64+0x14d/0xf80 [ 981.781041][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.781057][T11372] ? trace_irq_disable+0x37/0x100 [ 981.781074][T11372] ? clear_bhb_loop+0x40/0x90 [ 981.781095][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.781112][T11372] RIP: 0033:0x7fb34939bf79 [ 981.781128][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.781142][T11372] RSP: 002b:00007fb34a257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 981.781160][T11372] RAX: ffffffffffffffda RBX: 00007fb349615fa0 RCX: 00007fb34939bf79 [ 981.781177][T11372] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 981.781188][T11372] RBP: 00007fb34a257090 R08: 0000000000000000 R09: 0000000000000000 [ 981.781200][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.781210][T11372] R13: 00007fb349616038 R14: 00007fb349615fa0 R15: 00007ffe392e5ec8 [ 981.781237][T11372] [ 982.230916][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11877'. [ 982.236047][T11380] validate_nla: 2 callbacks suppressed [ 982.236066][T11380] netlink: 'syz.0.11878': attribute type 1 has an invalid length. [ 982.257352][T11380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11878'. [ 982.284188][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11877'. [ 982.356494][T11384] veth1_vlan (unregistering): left allmulticast mode [ 982.359531][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11881'. [ 982.392694][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11876'. [ 982.537712][T11392] 8021q: VLANs not supported on ip_vti0 [ 982.562461][T11393] 8021q: VLANs not supported on ip_vti0 [ 982.852434][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11888'. [ 982.886294][T11421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11887'. [ 982.928000][T11421] IPVS: Unknown mcast interface: vcan0 [ 982.936781][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11888'. [ 982.964230][T11426] netlink: 'syz.5.11891': attribute type 1 has an invalid length. [ 983.020221][T11426] netlink: 'syz.5.11891': attribute type 1 has an invalid length. [ 983.164570][T11438] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.11892'. [ 983.174411][T11438] net_ratelimit: 14 callbacks suppressed [ 983.174431][T11438] openvswitch: netlink: Flow key attr not present in new flow. [ 983.211591][T11444] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 983.447642][T11457] netlink: 'syz.5.11903': attribute type 28 has an invalid length. [ 983.465950][T11457] netlink: 'syz.5.11903': attribute type 3 has an invalid length. [ 983.858542][T11484] bridge0: Caught tx_queue_len zero misconfig [ 984.048450][T11496] netlink: 'syz.6.11920': attribute type 1 has an invalid length. [ 984.106908][T11496] bond3: entered promiscuous mode [ 984.122383][T11496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 984.148684][T11496] bond3: (slave bridge7): making interface the new active one [ 984.156659][T11496] bridge7: entered promiscuous mode [ 984.164325][T11496] bridge7: left promiscuous mode [ 984.366736][T11513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.647827][T11528] netlink: 'syz.5.11930': attribute type 1 has an invalid length. [ 984.892929][T11561] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 984.954051][T11566] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 985.592504][T11577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 985.604235][T11577] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 985.612664][T11577] gretap3: entered promiscuous mode [ 985.618273][T11577] gretap3: entered allmulticast mode [ 985.626158][T11579] netlink: 'syz.0.11944': attribute type 4 has an invalid length. [ 985.920841][T11597] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 987.685494][T11535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.876618][T11607] sch_fq: defrate 10 ignored. [ 988.100588][T11621] syzkaller0: entered promiscuous mode [ 988.106114][T11621] syzkaller0: entered allmulticast mode [ 988.218556][T11630] __nla_validate_parse: 12 callbacks suppressed [ 988.218577][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11961'. [ 988.543957][T11645] syzkaller0: entered promiscuous mode [ 988.552202][T11645] syzkaller0: entered allmulticast mode [ 988.618977][T11657] syzkaller0: entered promiscuous mode [ 988.625695][T11657] syzkaller0: entered allmulticast mode [ 991.326864][T11637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 991.508544][T11680] netlink: 'syz.5.11973': attribute type 1 has an invalid length. [ 992.041181][T11697] xt_hashlimit: size too large, truncated to 1048576 [ 992.154928][T11688] syzkaller0: entered promiscuous mode [ 992.160663][T11688] syzkaller0: entered allmulticast mode [ 992.304117][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11980'. [ 992.319867][T11712] netlink: 'syz.2.11980': attribute type 5 has an invalid length. [ 992.327850][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11980'. [ 992.948125][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 994.847233][T11711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11980'. [ 994.894920][T11726] geneve3: entered promiscuous mode [ 995.104421][T11727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.121751][T11727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.168590][ T7540] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60361 - 0 [ 995.192769][T11731] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 995.232910][ T7540] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60361 - 0 [ 995.261072][ T7540] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60361 - 0 [ 995.335196][T11755] xt_hashlimit: size too large, truncated to 1048576 [ 995.367404][T11742] syzkaller0: entered promiscuous mode [ 995.374738][T11742] syzkaller0: entered allmulticast mode [ 995.463264][T11756] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 995.537153][T11761] gretap0: entered promiscuous mode [ 995.620020][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11995'. [ 995.836788][T11772] xt_hashlimit: size too large, truncated to 1048576 [ 995.884929][T11777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11998'. [ 995.896339][T11777] netlink: 'syz.5.11998': attribute type 7 has an invalid length. [ 995.904440][T11777] netlink: 'syz.5.11998': attribute type 8 has an invalid length. [ 995.912896][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11998'. [ 995.954018][T11781] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11999'. [ 995.966150][T11779] openvswitch: netlink: IP tunnel TTL not specified. [ 997.950175][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.958238][ C0] lec:lec_tx_timeout: lec0 [ 998.703276][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12003'. [ 998.717687][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12005'. [ 998.727508][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12005'. [ 999.081889][T11816] tipc: Enabled bearer , priority 0 [ 999.162079][T11727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.184237][T11727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.206029][T11727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60361 - 0 [ 999.244108][T11816] +: renamed from syzkaller0 [ 999.261674][T11816] tipc: Disabling bearer [ 999.344949][T11727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.355789][T11727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.367136][T11727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60361 - 0 [ 999.522368][T11727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.569074][T11727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.584474][T11727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60361 - 0 [ 999.713747][T11840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 999.858497][T11840] syzkaller0: entered promiscuous mode [ 999.864127][T11840] syzkaller0: entered allmulticast mode [ 999.880554][ T7515] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.921750][ T7515] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 60361 - 0 [ 999.931263][T11847] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12018'. [ 999.941358][ T7515] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1000.034436][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12020'. [ 1000.046914][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12020'. [ 1002.174496][ T7540] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.188469][ T7540] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 60361 - 0 [ 1002.196758][ T7540] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1002.255542][ T7540] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.289075][ T7540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 60361 - 0 [ 1002.310189][ T7540] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1002.340298][T11862] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1002.355794][ T7515] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.356243][T11859] sctp: [Deprecated]: syz.5.12021 (pid 11859) Use of int in max_burst socket option deprecated. [ 1002.356243][T11859] Use struct sctp_assoc_value instead [ 1002.365300][ T7515] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 60361 - 0 [ 1002.435980][ T7515] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1002.559543][T11876] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.12026'. [ 1002.783318][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12033'. [ 1002.797165][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12033'. [ 1003.096030][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12040'. [ 1003.280975][T11928] xt_hashlimit: size too large, truncated to 1048576 [ 1003.500521][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12049'. [ 1003.509934][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12049'. [ 1003.544080][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12050'. [ 1003.779717][T11952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.819436][T11958] syzkaller0: entered promiscuous mode [ 1003.854453][T11958] syzkaller0: entered allmulticast mode [ 1004.056714][T11972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.093503][T11972] netlink: 'syz.0.12057': attribute type 1 has an invalid length. [ 1004.486932][T12000] netlink: 'syz.0.12065': attribute type 1 has an invalid length. [ 1004.500833][T11999] netlink: 'syz.4.12066': attribute type 1 has an invalid length. [ 1004.590810][T11999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1005.009583][T12027] syzkaller0: entered promiscuous mode [ 1005.020505][T12027] syzkaller0: entered allmulticast mode [ 1005.466904][T12065] netlink: 'syz.0.12088': attribute type 1 has an invalid length. [ 1005.467812][T12063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.501489][T12065] bond3: entered promiscuous mode [ 1005.506825][T12065] bond3: entered allmulticast mode [ 1005.513064][T12065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.591874][T12070] __nla_validate_parse: 40 callbacks suppressed [ 1005.591889][T12070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12090'. [ 1005.699548][T12077] netlink: 'syz.0.12093': attribute type 4 has an invalid length. [ 1005.709686][T12077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12093'. [ 1006.023100][T12095] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1006.133149][T12101] syzkaller0: entered promiscuous mode [ 1006.142944][T12101] syzkaller0: entered allmulticast mode [ 1006.350596][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1006.407589][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1006.419366][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1006.423503][T12112] syzkaller0: entered promiscuous mode [ 1006.434818][T12112] syzkaller0: entered allmulticast mode [ 1006.534657][T12117] syzkaller0: entered promiscuous mode [ 1006.553716][T12117] syzkaller0: entered allmulticast mode [ 1006.786854][T12131] netlink: 'syz.2.12113': attribute type 1 has an invalid length. [ 1006.831255][T12131] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1006.860600][T12139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1006.868776][T12139] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1006.883464][T12139] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1006.923464][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12112'. [ 1006.941403][T12131] vlan2: entered allmulticast mode [ 1006.961739][T12131] bond10: entered allmulticast mode [ 1007.097267][T12146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.251211][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1007.292382][T12160] vlan2: entered promiscuous mode [ 1007.310530][T12160] bridge0: entered promiscuous mode [ 1007.355441][T12165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.563577][T12178] syzkaller0: entered promiscuous mode [ 1007.578393][T12178] syzkaller0: entered allmulticast mode [ 1007.835268][T12193] netlink: 'syz.4.12129': attribute type 1 has an invalid length. [ 1007.849270][T12184] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12127'. [ 1007.861488][T12189] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12127'. [ 1007.923585][T12193] bond9: entered promiscuous mode [ 1007.924864][T12201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1007.930903][T12193] bond9: entered allmulticast mode [ 1007.944408][T12193] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1007.978416][T12192] erspan1: entered allmulticast mode [ 1008.318362][ T4481] NFSD: Failed to start, no listeners configured. [ 1008.547218][T12232] netlink: 'syz.4.12145': attribute type 1 has an invalid length. [ 1008.612940][T12236] netlink: 'syz.6.12143': attribute type 1 has an invalid length. [ 1008.662816][T12235] syzkaller0: entered promiscuous mode [ 1008.669852][T12235] syzkaller0: entered allmulticast mode [ 1008.734961][T12243] Unsupported ieee802154 address type: 0 [ 1008.745732][T12246] Unsupported ieee802154 address type: 0 [ 1008.780526][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1008.792036][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1008.801644][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1008.818415][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1008.829848][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1008.884840][T12250] openvswitch: netlink: Duplicate key (type 32). [ 1009.512654][ T7533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.527108][ T7533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1009.539431][ T7533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.779908][ T7533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.791045][ T7533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1009.801635][ T7533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.999725][ T7533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.024839][ T7533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1010.058512][ T7533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.204035][ T7533] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.224820][ T7533] netdevsim netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1010.240737][ T7533] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.288634][T12309] xt_hashlimit: size too large, truncated to 1048576 [ 1010.484631][T12244] chnl_net:caif_netlink_parms(): no params data found [ 1010.639460][T12325] mac80211_hwsim hwsim91 : renamed from wlan1 [ 1010.810948][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.848075][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.855399][T12244] bridge_slave_0: entered allmulticast mode [ 1010.885818][T12244] bridge_slave_0: entered promiscuous mode [ 1010.938979][ T5824] Bluetooth: hci2: command tx timeout [ 1010.955507][T12350] __nla_validate_parse: 9 callbacks suppressed [ 1010.955530][T12350] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12176'. [ 1011.158178][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.172264][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.188378][T12244] bridge_slave_1: entered allmulticast mode [ 1011.203160][T12244] bridge_slave_1: entered promiscuous mode [ 1011.410070][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12179'. [ 1011.563239][T12369] netlink: 'syz.4.12181': attribute type 1 has an invalid length. [ 1011.640505][ T7533] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1011.676369][ T7533] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 1011.832544][ T7533] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1011.841004][ T7533] bridge3 (unregistering): left promiscuous mode [ 1011.974376][ T7533] bond0 (unregistering): left promiscuous mode [ 1011.981877][ T7533] bond0 (unregistering): Released all slaves [ 1011.993078][ T7533] bond1 (unregistering): Released all slaves [ 1012.005852][ T7533] bond2 (unregistering): Released all slaves [ 1012.027381][ T7533] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1012.037693][ T7533] bond3 (unregistering): Released all slaves [ 1012.051284][ T7533] bond4 (unregistering): Released all slaves [ 1012.065417][ T7533] bond5 (unregistering): Released all slaves [ 1012.078386][ T7533] bond6 (unregistering): Released all slaves [ 1012.094560][ T7533] bond7 (unregistering): Released all slaves [ 1012.119439][ T7533] bond8 (unregistering): Released all slaves [ 1012.132971][ T7533] bond9 (unregistering): (slave veth9): Releasing active interface [ 1012.143439][ T7533] bond9 (unregistering): (slave veth11): Releasing active interface [ 1012.153139][ T7533] bond9 (unregistering): Released all slaves [ 1012.167446][ T7533] bond10 (unregistering): Released all slaves [ 1012.217872][T12359] pimreg3: entered allmulticast mode [ 1012.264256][T12369] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1012.290110][T12376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12182'. [ 1012.316473][T12378] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.12182'. [ 1012.318754][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.364712][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.409577][ T7533] 9: left promiscuous mode [ 1012.455134][T12380] tipc: Enabling of bearer rejected, failed to enable media [ 1012.529776][ T7533] tipc: Disabling bearer [ 1012.558155][ T7533] tipc: Disabling bearer [ 1012.591926][ T7533] tipc: Left network mode [ 1012.604185][T12244] team0: Port device team_slave_0 added [ 1012.629648][T12244] team0: Port device team_slave_1 added [ 1012.743126][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12187'. [ 1012.756666][T12391] netlink: 'syz.0.12187': attribute type 10 has an invalid length. [ 1012.772504][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.799400][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.879000][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.916748][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.929046][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.009384][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.020087][ T5824] Bluetooth: hci2: command tx timeout [ 1013.242354][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12193'. [ 1013.311872][T12424] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12192'. [ 1013.361735][T12422] geneve2: entered promiscuous mode [ 1013.367031][T12422] geneve2: entered allmulticast mode [ 1013.463618][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12192'. [ 1013.496494][T12244] hsr_slave_0: entered promiscuous mode [ 1013.503902][T12244] hsr_slave_1: entered promiscuous mode [ 1013.511390][T12244] debugfs: 'hsr0' already exists in 'hsr' [ 1013.517296][T12244] Cannot create hsr debugfs directory [ 1013.942439][T12433] syzkaller0: entered promiscuous mode [ 1013.948563][T12433] syzkaller0: entered allmulticast mode [ 1014.130623][ T7533] team0: left promiscuous mode [ 1014.149855][ T7533] hsr_slave_0: left promiscuous mode [ 1014.152274][T12448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12198'. [ 1014.164695][ T7533] hsr_slave_1: left promiscuous mode [ 1014.172894][ T7533] veth1_vlan: left allmulticast mode [ 1014.178805][ T7533] veth1_macvtap: left promiscuous mode [ 1014.184437][ T7533] veth1_vlan: left promiscuous mode [ 1014.246242][ T7533] pim6reg527 (unregistering): left allmulticast mode [ 1014.726997][T12452] geneve1: Caught tx_queue_len zero misconfig [ 1015.101815][ T5824] Bluetooth: hci2: command tx timeout [ 1015.116271][T12479] xt_hashlimit: size too large, truncated to 1048576 [ 1015.162736][T12486] FAULT_INJECTION: forcing a failure. [ 1015.162736][T12486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.212489][T12486] CPU: 1 UID: 0 PID: 12486 Comm: syz.0.12204 Not tainted syzkaller #0 PREEMPT(full) [ 1015.212514][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1015.212526][T12486] Call Trace: [ 1015.212534][T12486] [ 1015.212541][T12486] dump_stack_lvl+0xe8/0x150 [ 1015.212569][T12486] should_fail_ex+0x412/0x560 [ 1015.212596][T12486] _copy_from_user+0x2d/0xb0 [ 1015.212614][T12486] ___sys_sendmsg+0x1c6/0x360 [ 1015.212635][T12486] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.212655][T12486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.212705][T12486] ? __fget_files+0x2a/0x420 [ 1015.212722][T12486] ? __fget_files+0x3a0/0x420 [ 1015.212747][T12486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1015.212771][T12486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1015.212798][T12486] ? __pfx_ksys_write+0x10/0x10 [ 1015.212827][T12486] do_syscall_64+0x14d/0xf80 [ 1015.212846][T12486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.212862][T12486] ? trace_irq_disable+0x37/0x100 [ 1015.212880][T12486] ? clear_bhb_loop+0x40/0x90 [ 1015.212899][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.212915][T12486] RIP: 0033:0x7f78dc19bf79 [ 1015.212929][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.212942][T12486] RSP: 002b:00007f78dd0c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.212959][T12486] RAX: ffffffffffffffda RBX: 00007f78dc416090 RCX: 00007f78dc19bf79 [ 1015.212971][T12486] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1015.212981][T12486] RBP: 00007f78dd0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.212990][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.212999][T12486] R13: 00007f78dc416128 R14: 00007f78dc416090 R15: 00007ffd4df19fd8 [ 1015.213027][T12486] [ 1015.433645][T12491] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12206'. [ 1015.873638][T12516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1016.256955][T12522] syzkaller0: entered promiscuous mode [ 1016.262651][T12522] syzkaller0: entered allmulticast mode [ 1016.350303][T12542] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12218'. [ 1016.376721][T12541] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12218'. [ 1016.865051][T12549] xt_ecn: cannot match TCP bits for non-tcp packets [ 1017.193829][ T5824] Bluetooth: hci2: command tx timeout [ 1018.890504][T12556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.897764][T12556] IPv6: NLM_F_CREATE should be set when creating new route [ 1018.905055][T12556] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.137802][T12244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1019.163374][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12225'. [ 1019.214365][T12244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1019.339890][T12244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1019.382344][T12244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1019.714071][T12244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.863827][T12620] bond4: entered promiscuous mode [ 1019.884480][T12620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.932701][T12244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.944832][T12626] bridge_slave_0: invalid flags given to default FDB implementation [ 1019.969097][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.976249][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.037110][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.044433][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.090288][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12239'. [ 1020.109728][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12239'. [ 1020.372115][T12244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1020.477765][T12662] netlink: 404 bytes leftover after parsing attributes in process `syz.0.12243'. [ 1020.509429][T12661] xt_hashlimit: size too large, truncated to 1048576 [ 1020.995948][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.046049][T12688] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12248'. [ 1021.143685][T12694] Bluetooth: hci1: too big key_count value 32778 [ 1021.147155][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12248'. [ 1021.177191][T12697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1021.222446][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12250'. [ 1021.235052][T12244] veth0_vlan: entered promiscuous mode [ 1021.294674][T12244] veth1_vlan: entered promiscuous mode [ 1021.420586][T12244] veth0_macvtap: entered promiscuous mode [ 1021.444856][T12244] veth1_macvtap: entered promiscuous mode [ 1021.516941][T12244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.522177][T12710] netlink: 'syz.0.12253': attribute type 1 has an invalid length. [ 1021.562970][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.582272][T12244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.725635][ T7542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.756529][ T7542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.833781][ T7542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.867020][ T7542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.433592][T12722] lo: Caught tx_queue_len zero misconfig [ 1022.468835][T12727] team_slave_1: Caught tx_queue_len zero misconfig [ 1022.664370][ T7542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.684405][ T7542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.821340][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12262'. [ 1022.900009][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12262'. [ 1022.916784][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12262'. [ 1022.939860][ T7535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.956384][ T7535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.964979][T12758] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1022.975406][T12752] 8021q: VLANs not supported on ip_vti0 [ 1022.997584][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12263'. [ 1023.140944][T12767] delete_channel: no stack [ 1023.778588][T12803] xt_hashlimit: size too large, truncated to 1048576 [ 1023.839624][T12800] syzkaller0: entered promiscuous mode [ 1023.846773][T12800] syzkaller0: entered allmulticast mode [ 1024.065012][T12816] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1026.469010][T12822] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1026.661521][T12832] netlink: 'syz.4.12288': attribute type 39 has an invalid length. [ 1026.690113][T12844] netlink: 'syz.2.12291': attribute type 29 has an invalid length. [ 1026.702808][T12844] netlink: 'syz.2.12291': attribute type 29 has an invalid length. [ 1026.908645][T12849] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12293'. [ 1027.011273][T24758] IPVS: starting estimator thread 0... [ 1027.031375][T12859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1027.041068][T12859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1027.057189][T12859] team0: entered promiscuous mode [ 1027.065139][T12859] team_slave_0: entered promiscuous mode [ 1027.071513][T12859] team_slave_1: entered promiscuous mode [ 1027.080819][T12859] bond0: entered promiscuous mode [ 1027.086036][T12859] bond_slave_0: entered promiscuous mode [ 1027.092212][T12859] bond_slave_1: entered promiscuous mode [ 1027.112231][T12860] IPVS: using max 39 ests per chain, 93600 per kthread [ 1027.120912][T12859] debugfs: 'hsr1' already exists in 'hsr' [ 1027.140143][T12859] Cannot create hsr debugfs directory [ 1027.140666][T12862] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1027.146289][T12859] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1027.209695][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12299'. [ 1027.220703][T12864] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1027.271632][T12864] team1: entered promiscuous mode [ 1027.280408][T12864] team1: entered allmulticast mode [ 1027.399042][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12303'. [ 1027.412844][T12878] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1027.434833][T12876] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 1027.559616][T12882] netlink: 'syz.2.12308': attribute type 4 has an invalid length. [ 1027.597309][T12885] netlink: 'syz.2.12308': attribute type 4 has an invalid length. [ 1027.798377][T12902] openvswitch: netlink: Unknown key attributes 2 [ 1027.836856][T12906] netlink: 'syz.0.12315': attribute type 11 has an invalid length. [ 1027.840848][T12909] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1027.855609][T12906] __nla_validate_parse: 2 callbacks suppressed [ 1027.855628][T12906] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12315'. [ 1028.060310][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12322'. [ 1028.180593][T12921] xt_hashlimit: size too large, truncated to 1048576 [ 1028.702602][T12960] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12335'. [ 1028.861711][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12340'. [ 1028.909683][T12972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.920344][T12979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.935632][T12978] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1028.954981][T12983] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12341'. [ 1029.011523][T12985] netlink: 260 bytes leftover after parsing attributes in process `syz.6.12337'. [ 1029.225052][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12348'. [ 1029.332413][T12949] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1029.560715][T13024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.594855][T13027] geneve3: entered promiscuous mode [ 1029.604189][ T7515] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 37476 - 0 [ 1029.621890][ T7515] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 37476 - 0 [ 1029.634468][ T7515] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 37476 - 0 [ 1029.657402][ T7515] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 37476 - 0 [ 1029.680999][T13032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.056408][T13040] netlink: 'syz.2.12356': attribute type 30 has an invalid length. [ 1030.084619][T13040] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1030.096400][T13040] bond1 (unregistering): Released all slaves [ 1032.327231][T13003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1032.533369][T13046] bond1: entered promiscuous mode [ 1032.539890][T13046] bond1: entered allmulticast mode [ 1032.545610][T13046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.577491][T13047] syzkaller0: entered promiscuous mode [ 1032.627214][T13047] syzkaller0: entered allmulticast mode [ 1032.889339][T13077] tc_dump_action: action bad kind [ 1032.936116][T13083] netlink: 'syz.6.12370': attribute type 6 has an invalid length. [ 1032.999494][T13087] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12372'. [ 1033.035961][T13087] syzkaller1: entered promiscuous mode [ 1033.068434][T13087] syzkaller1: entered allmulticast mode [ 1033.233360][T13103] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12376'. [ 1033.284723][T13106] netlink: 'syz.5.12377': attribute type 10 has an invalid length. [ 1033.386693][T13114] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12379'. [ 1033.407595][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12379'. [ 1033.461482][T13121] netlink: 'syz.4.12382': attribute type 12 has an invalid length. [ 1033.592773][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12385'. [ 1033.610575][T13131] netlink: 'syz.5.12385': attribute type 7 has an invalid length. [ 1033.621902][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12385'. [ 1033.640971][T13131] erspan0: entered promiscuous mode [ 1033.650151][T13131] debugfs: 'hsr2' already exists in 'hsr' [ 1033.657541][T13131] Cannot create hsr debugfs directory [ 1034.007366][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12396'. [ 1034.043742][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1034.071381][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1034.126578][T13168] openvswitch: netlink: IP tunnel dst address not specified [ 1034.159063][T13168] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12400'. [ 1034.186024][T13171] "syz.2.12399" (13171) uses obsolete ecb(arc4) skcipher [ 1034.241649][T13171] netlink: 'syz.2.12399': attribute type 4 has an invalid length. [ 1034.246320][T13173] netlink: 'syz.0.12402': attribute type 7 has an invalid length. [ 1034.384233][T13177] netlink: 'syz.6.12404': attribute type 2 has an invalid length. [ 1034.409801][T13178] netlink: 'syz.6.12404': attribute type 2 has an invalid length. [ 1034.697036][T13197] x_tables: duplicate underflow at hook 3 [ 1035.006872][T13218] tipc: Enabled bearer , priority 0 [ 1035.091826][T13218] tipc: Resetting bearer [ 1035.122818][T13225] netlink: 'syz.5.12418': attribute type 7 has an invalid length. [ 1035.396219][T13234] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1035.430604][T13234] bond4 (unregistering): Released all slaves [ 1035.522785][T13240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.699290][ T7542] tipc: Resetting bearer [ 1035.731055][T13263] FAULT_INJECTION: forcing a failure. [ 1035.731055][T13263] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.743797][T13263] CPU: 1 UID: 0 PID: 13263 Comm: syz.0.12429 Not tainted syzkaller #0 PREEMPT(full) [ 1035.743822][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1035.743834][T13263] Call Trace: [ 1035.743842][T13263] [ 1035.743850][T13263] dump_stack_lvl+0xe8/0x150 [ 1035.743884][T13263] should_fail_ex+0x412/0x560 [ 1035.743912][T13263] should_failslab+0xa8/0x100 [ 1035.743935][T13263] ? skb_clone+0x212/0x3a0 [ 1035.743956][T13263] kmem_cache_alloc_noprof+0x87/0x650 [ 1035.743976][T13263] ? __pfx_netif_rx_internal+0x10/0x10 [ 1035.743994][T13263] ? __bpf_redirect+0x80f/0x12a0 [ 1035.744016][T13263] skb_clone+0x212/0x3a0 [ 1035.744040][T13263] bpf_clone_redirect+0x16a/0x4b0 [ 1035.744066][T13263] ? bpf_test_run+0x1d1/0x830 [ 1035.744084][T13263] bpf_prog_dda02ae5dee86940+0x65/0x71 [ 1035.744104][T13263] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1035.744128][T13263] ? arch_stack_walk+0xfb/0x150 [ 1035.744159][T13263] ? ktime_get+0x45/0x200 [ 1035.744192][T13263] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1035.744214][T13263] ? lockdep_hardirqs_on+0x7a/0x110 [ 1035.744236][T13263] ? ktime_get+0x45/0x200 [ 1035.744253][T13263] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1035.744281][T13263] ? bpf_test_timer_continue+0x10c/0x320 [ 1035.744302][T13263] bpf_test_run+0x354/0x830 [ 1035.744339][T13263] ? __pfx_bpf_test_run+0x10/0x10 [ 1035.744366][T13263] ? rcu_is_watching+0x15/0xb0 [ 1035.744386][T13263] ? __kasan_krealloc+0xeb/0x110 [ 1035.744409][T13263] ? eth_type_trans+0x35e/0x6d0 [ 1035.744437][T13263] ? convert___skb_to_skb+0x3d/0x5b0 [ 1035.744464][T13263] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1035.744498][T13263] ? __fget_files+0x2a/0x420 [ 1035.744515][T13263] ? __fget_files+0x3a0/0x420 [ 1035.744531][T13263] ? __fget_files+0x2a/0x420 [ 1035.744552][T13263] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1035.744570][T13263] bpf_prog_test_run+0x2c7/0x340 [ 1035.744603][T13263] __sys_bpf+0x643/0x950 [ 1035.744625][T13263] ? __pfx___sys_bpf+0x10/0x10 [ 1035.744659][T13263] ? ksys_write+0x242/0x270 [ 1035.744680][T13263] ? __pfx_ksys_write+0x10/0x10 [ 1035.744710][T13263] __x64_sys_bpf+0x7c/0x90 [ 1035.744729][T13263] do_syscall_64+0x14d/0xf80 [ 1035.744749][T13263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.744765][T13263] ? trace_irq_disable+0x37/0x100 [ 1035.744783][T13263] ? clear_bhb_loop+0x40/0x90 [ 1035.744804][T13263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.744820][T13263] RIP: 0033:0x7f78dc19bf79 [ 1035.744837][T13263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.744851][T13263] RSP: 002b:00007f78dd0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1035.744870][T13263] RAX: ffffffffffffffda RBX: 00007f78dc415fa0 RCX: 00007f78dc19bf79 [ 1035.744889][T13263] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1035.744900][T13263] RBP: 00007f78dd0ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.744920][T13263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.744930][T13263] R13: 00007f78dc416038 R14: 00007f78dc415fa0 R15: 00007ffd4df19fd8 [ 1035.744967][T13263] [ 1036.383724][T13271] netlink: 'syz.5.12432': attribute type 1 has an invalid length. [ 1037.435294][T13328] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1037.809426][ T8938] lec:lec_start_xmit: lec0:No lecd attached [ 1041.098297][ T1639] Bluetooth: hci6: command 0x0406 tx timeout [ 1042.858725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1042.866921][ C0] lec:lec_tx_timeout: lec0 [ 1047.338864][ T30] INFO: task syz.1.10948:8229 blocked for more than 143 seconds. [ 1047.346633][ T30] Not tainted syzkaller #0 [ 1047.351704][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.360599][ T30] task:syz.1.10948 state:D stack:26608 pid:8229 tgid:8228 ppid:1691 task_flags:0x400140 flags:0x00080002 [ 1047.372656][ T30] Call Trace: [ 1047.375941][ T30] [ 1047.378943][ T30] __schedule+0x1568/0x5290 [ 1047.383477][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1047.389025][ T30] ? schedule+0x90/0x360 [ 1047.393876][ T30] schedule+0x164/0x360 [ 1047.398146][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.403720][ T30] __mutex_lock+0x7fe/0x1300 [ 1047.408546][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1047.413350][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1047.419901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.424971][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1047.429541][ T30] ? genlmsg_put+0x137/0x2e0 [ 1047.434175][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1047.439886][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 1047.446236][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1047.452166][ T30] ? __asan_memcpy+0x40/0x70 [ 1047.456785][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1047.462969][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.467979][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1047.472511][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.477556][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1047.484043][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1047.489446][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.494511][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.499955][ T30] ? genl_rcv+0x19/0x40 [ 1047.504223][ T30] ? down_read+0x272/0x2e0 [ 1047.508968][ T30] ? genl_rcv+0xd/0x40 [ 1047.513067][ T30] genl_rcv+0x28/0x40 [ 1047.517062][ T30] netlink_unicast+0x80f/0x9b0 [ 1047.521930][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1047.527413][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1047.532511][ T30] ? skb_put+0x11b/0x210 [ 1047.536780][ T30] netlink_sendmsg+0x813/0xb40 [ 1047.541870][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.547186][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1047.552203][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1047.557513][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.562902][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1047.567709][ T30] ? __might_fault+0xaf/0x130 [ 1047.573158][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1047.585180][ T30] ? import_iovec+0x73/0xa0 [ 1047.590804][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1047.595532][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.601178][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1047.606411][ T30] ? futex_wake+0x4ac/0x580 [ 1047.611405][ T30] ? __fget_files+0x2a/0x420 [ 1047.616018][ T30] ? __fget_files+0x3a0/0x420 [ 1047.621133][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1047.626106][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1047.649154][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.653986][ T30] do_syscall_64+0x14d/0xf80 [ 1047.692478][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.699649][ T30] ? trace_irq_disable+0x37/0x100 [ 1047.704740][ T30] ? clear_bhb_loop+0x40/0x90 [ 1047.710143][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.716070][ T30] RIP: 0033:0x7fcc2159bf79 [ 1047.732511][ T30] RSP: 002b:00007fcc1f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.768252][ T30] RAX: ffffffffffffffda RBX: 00007fcc21815fa0 RCX: 00007fcc2159bf79 [ 1047.776281][ T30] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000007 [ 1047.793396][ T30] RBP: 00007fcc216327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.802223][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.810624][ T30] R13: 00007fcc21816038 R14: 00007fcc21815fa0 R15: 00007ffe2545a138 [ 1047.824369][ T30] [ 1047.827601][ T30] INFO: task syz.1.10948:8230 blocked for more than 143 seconds. [ 1047.836059][ T30] Not tainted syzkaller #0 [ 1047.851078][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.866286][ T30] task:syz.1.10948 state:D stack:27512 pid:8230 tgid:8228 ppid:1691 task_flags:0x400040 flags:0x00080002 [ 1047.879242][ T30] Call Trace: [ 1047.882552][ T30] [ 1047.885489][ T30] __schedule+0x1568/0x5290 [ 1047.891064][ T30] ? __pfx___schedule+0x10/0x10 [ 1047.896170][ T30] ? schedule+0x90/0x360 [ 1047.901721][ T30] schedule+0x164/0x360 [ 1047.906015][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.912807][ T30] __mutex_lock+0x7fe/0x1300 [ 1047.917443][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1047.922949][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1047.929116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.934171][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1047.939143][ T30] ? genlmsg_put+0x137/0x2e0 [ 1047.943767][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1047.950114][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 1047.956484][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1047.965754][ T30] ? __asan_memcpy+0x40/0x70 [ 1047.971134][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1047.980122][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.986067][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1047.991228][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.996277][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1048.003067][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1048.007845][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.013180][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.018596][ T30] ? genl_rcv+0x19/0x40 [ 1048.022773][ T30] ? down_read+0x272/0x2e0 [ 1048.027368][ T30] ? genl_rcv+0xd/0x40 [ 1048.031548][ T30] genl_rcv+0x28/0x40 [ 1048.035543][ T30] netlink_unicast+0x80f/0x9b0 [ 1048.040619][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.045919][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1048.050958][ T30] ? skb_put+0x11b/0x210 [ 1048.055297][ T30] netlink_sendmsg+0x813/0xb40 [ 1048.060296][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.065608][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1048.070880][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.076174][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.081528][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1048.086390][ T30] ? __might_fault+0xaf/0x130 [ 1048.091294][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.097041][ T30] ? import_iovec+0x73/0xa0 [ 1048.102059][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1048.106785][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1048.112090][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.117327][ T30] ? futex_wait+0x29a/0x380 [ 1048.121971][ T30] ? __fget_files+0x2a/0x420 [ 1048.126564][ T30] ? __fget_files+0x3a0/0x420 [ 1048.131544][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1048.136487][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.142351][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.147149][ T30] do_syscall_64+0x14d/0xf80 [ 1048.151871][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.158286][ T30] ? trace_irq_disable+0x37/0x100 [ 1048.163328][ T30] ? clear_bhb_loop+0x40/0x90 [ 1048.168123][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.174036][ T30] RIP: 0033:0x7fcc2159bf79 [ 1048.178542][ T30] RSP: 002b:00007fcc1f7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.187103][ T30] RAX: ffffffffffffffda RBX: 00007fcc21816090 RCX: 00007fcc2159bf79 [ 1048.195393][ T30] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000007 [ 1048.203641][ T30] RBP: 00007fcc216327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1048.211724][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.220221][ T30] R13: 00007fcc21816128 R14: 00007fcc21816090 R15: 00007ffe2545a138 [ 1048.228298][ T30] [ 1048.251402][ T30] [ 1048.251402][ T30] Showing all locks held in the system: [ 1048.287282][ T30] 1 lock held by pool_workqueue_/3: [ 1048.313412][ T30] #0: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1048.348027][ T30] 1 lock held by khungtaskd/30: [ 1048.353100][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1048.398293][ T30] 4 locks held by kworker/0:2/794: [ 1048.403482][ T30] 2 locks held by getty/5575: [ 1048.428293][ T30] #0: ffff888031fa10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1048.468020][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1048.498010][ T30] 2 locks held by kworker/0:4/5899: [ 1048.503247][ T30] #0: ffff88813fe03548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1048.541023][ T30] #1: ffffc90004f0fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1048.578285][ T30] 2 locks held by syz.3.9776/4481: [ 1048.583531][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1048.618262][ T30] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1048.668294][ T30] 5 locks held by kworker/u8:22/7515: [ 1048.673725][ T30] #0: ffff88801b6ce948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1048.748001][ T30] #1: ffffc9000e4bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1048.778207][ T30] #2: ffffffff8fbaffb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1048.801083][ T30] #3: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 1048.811128][ T30] #4: ffff88806865d528 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x200 [ 1048.822045][ T30] 3 locks held by kworker/u8:37/7535: [ 1048.827446][ T30] #0: ffff88813fe44148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1048.840074][ T30] #1: ffffc9000e5a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1048.851589][ T30] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1048.862259][ T30] 2 locks held by syz.1.10948/8229: [ 1048.867494][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1048.878982][ T30] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1048.889808][ T30] 2 locks held by syz.1.10948/8230: [ 1048.895013][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1048.903334][ T30] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1048.913790][ T30] 3 locks held by syz-executor/8894: [ 1048.919175][ T30] #0: ffff888089fccec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1048.931356][ T30] #1: ffff888089fcc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1048.941747][ T30] #2: ffffffff8fd4ad28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1048.952524][ T30] 3 locks held by syz-executor/9451: [ 1048.957806][ T30] #0: ffff888047c00ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1048.967845][ T30] #1: ffff888047c000c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1048.977785][ T30] #2: ffffffff8fd4ad28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1048.989086][ T30] 5 locks held by syz-executor/12244: [ 1048.994497][ T30] #0: ffff888036f5cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1049.004510][ T30] #1: ffff888036f5c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1049.014659][ T30] #2: ffffffff8fd4ad28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1049.025805][ T30] #3: ffff88805a2842f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1049.035944][ T30] #4: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1049.047164][ T30] [ 1049.051719][ T30] ============================================= [ 1049.051719][ T30] [ 1049.060516][ T30] NMI backtrace for cpu 0 [ 1049.060533][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1049.060557][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.060568][ T30] Call Trace: [ 1049.060574][ T30] [ 1049.060581][ T30] dump_stack_lvl+0xe8/0x150 [ 1049.060604][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1049.060619][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1049.060636][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1049.060652][ T30] sys_info+0x135/0x170 [ 1049.060668][ T30] watchdog+0xf90/0xfe0 [ 1049.060686][ T30] ? watchdog+0x209/0xfe0 [ 1049.060706][ T30] kthread+0x388/0x470 [ 1049.060722][ T30] ? __pfx_watchdog+0x10/0x10 [ 1049.060735][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.060752][ T30] ret_from_fork+0x51e/0xb90 [ 1049.060768][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1049.060781][ T30] ? __switch_to+0xc7d/0x1400 [ 1049.060797][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.060813][ T30] ret_from_fork_asm+0x1a/0x30 [ 1049.060841][ T30] [ 1049.060846][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1049.171877][ C1] NMI backtrace for cpu 1 [ 1049.171895][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1049.171913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.171922][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1049.171946][ C1] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1049.171959][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1049.171973][ C1] RAX: 000000000040a94b RBX: ffffffff8199661d RCX: 0000000080000001 [ 1049.171984][ C1] RDX: 0000000000000001 RSI: ffffffff8dee250a RDI: ffffffff8c276500 [ 1049.171995][ C1] RBP: ffffc90000197f10 R08: ffff8880b873375b R09: 1ffff110170e66eb [ 1049.172006][ C1] R10: dffffc0000000000 R11: ffffed10170e66ec R12: ffffffff90109070 [ 1049.172018][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 0000000000000001 [ 1049.172028][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1049.172040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1049.172051][ C1] CR2: 00007ffed71ec318 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 1049.172065][ C1] Call Trace: [ 1049.172071][ C1] [ 1049.172077][ C1] default_idle+0x9/0x20 [ 1049.172095][ C1] default_idle_call+0x72/0xb0 [ 1049.172115][ C1] do_idle+0x1bd/0x500 [ 1049.172131][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1049.172150][ C1] ? __pfx_do_idle+0x10/0x10 [ 1049.172170][ C1] cpu_startup_entry+0x43/0x60 [ 1049.172186][ C1] start_secondary+0x101/0x110 [ 1049.172201][ C1] common_startup_64+0x13e/0x147 [ 1049.172227][ C1] [ 1049.342389][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1049.349254][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1049.358373][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1049.368421][ T30] Call Trace: [ 1049.371700][ T30] [ 1049.374619][ T30] vpanic+0x1e0/0x670 [ 1049.378603][ T30] panic+0xc5/0xd0 [ 1049.382311][ T30] ? __pfx_panic+0x10/0x10 [ 1049.386790][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1049.392171][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1049.398327][ T30] watchdog+0xfda/0xfe0 [ 1049.402509][ T30] ? watchdog+0x209/0xfe0 [ 1049.406849][ T30] kthread+0x388/0x470 [ 1049.411085][ T30] ? __pfx_watchdog+0x10/0x10 [ 1049.415762][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.420360][ T30] ret_from_fork+0x51e/0xb90 [ 1049.425039][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1049.430130][ T30] ? __switch_to+0xc7d/0x1400 [ 1049.434793][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.439412][ T30] ret_from_fork_asm+0x1a/0x30 [ 1049.444172][ T30] [ 1049.447578][ T30] Kernel Offset: disabled [ 1049.451891][ T30] Rebooting in 86400 seconds..