last executing test programs: 2m51.769474668s ago: executing program 0 (id=6366): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, r0, 0x100000000) 2m51.546220172s ago: executing program 0 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0xa7, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r2, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200000c4, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) shutdown(r3, 0x1) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2c, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2m51.414594116s ago: executing program 0 (id=6371): r0 = socket$inet6(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m51.277432824s ago: executing program 0 (id=6373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000140)=0x2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x5}, 0x8) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m50.567231843s ago: executing program 0 (id=6378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x6, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x8000}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'geneve1\x00'}) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x3a1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) (rerun: 32) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x10}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@broadcast, @private, 0x0}, &(0x7f0000000600)=0xc) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0x20, &(0x7f00000017c0)={&(0x7f00000006c0)=""/4096, 0x1000, 0x0, &(0x7f00000016c0)=""/219, 0xdb}}, 0x10) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x4, 0x10, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfb}, {}, {}, [@generic={0x4, 0x3, 0x7, 0xf000, 0x8e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x7f, &(0x7f0000001900)=""/127, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x2, 0x2, 0xa15, 0xcc9e}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a00)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) (async, rerun: 64) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@o_path={&(0x7f0000001b00)='./file0\x00', 0x0, 0xc018, r0}, 0x18) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x19, 0x9, 0xfffffffe, 0x9, 0x80, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x1f, 0x9, 0x5, 0x2, 0x2052, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001cc0)={0xffffffffffffffff, 0xfff, 0x10}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x42}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000540)='GPL\x00', 0xffffffff, 0x3b, &(0x7f0000000580)=""/59, 0x41100, 0x53, '\x00', r4, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x1, 0xffff, 0x4}, 0x10, r5, r6, 0x6, &(0x7f0000001d00)=[r7, r8, r9, r10, r11], &(0x7f0000001d40)=[{0x4, 0x1, 0x10, 0x9}, {0x3, 0x3, 0x2, 0xb}, {0x5, 0x2, 0x4, 0x6}, {0x4, 0x5, 0xa, 0x1}, {0x5, 0x3, 0x8}, {0x4, 0x3, 0x1, 0x9}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r9}, &(0x7f0000001e80), &(0x7f0000001ec0)=r12}, 0x20) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000001f40)={@private1, 0x0}, &(0x7f0000001f80)=0x14) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r15, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)=@newqdisc={0x98, 0x24, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x4, 0x10}, {0x8, 0x7}, {0x2, 0x10}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc64190614e965bee}, 0x4000000) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000022c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0xc, 0xb, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000021c0)='GPL\x00', 0x4, 0xa8, &(0x7f0000002200)=""/168, 0x41100, 0x4, '\x00', 0x0, @fallback=0xf, r16, 0x8, &(0x7f0000002300)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x2, &(0x7f0000002340)=[r9], &(0x7f0000002380)=[{0x4, 0x4, 0x7, 0x5}, {0x5, 0x5, 0x2, 0x3}], 0x10, 0x1}, 0x94) (async) getsockopt(r14, 0xb, 0x232e, &(0x7f0000002480)=""/92, &(0x7f0000002500)=0x5c) (async) getsockopt$inet_udp_int(r8, 0x11, 0x65, &(0x7f0000002540), &(0x7f0000002580)=0x4) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000025c0), r17) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000026c0)={0x0, 0x8}, 0x8) 2m50.412491562s ago: executing program 0 (id=6381): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000000000e700000000000022000000004350417449"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008010}, 0x8001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1840deffffffae00181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m34.876806566s ago: executing program 32 (id=6381): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000000000e700000000000022000000004350417449"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008010}, 0x8001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1840deffffffae00181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.674766347s ago: executing program 3 (id=6625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000000000000000000200000a00008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d07350004100000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x37, 0x0, &(0x7f0000000280)="c1dfb0bcd40000000000008886ddfc30d80ce5ed88f6183f6786f444ac505655be741e17d613fe24c2021a9700000040000000000000a0", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000000000000000000200000a00008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d07350004100000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x37, 0x0, &(0x7f0000000280)="c1dfb0bcd40000000000008886ddfc30d80ce5ed88f6183f6786f444ac505655be741e17d613fe24c2021a9700000040000000000000a0", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async) 2m28.469250714s ago: executing program 3 (id=6630): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4000080) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) listen(r0, 0xf5f) accept(r0, 0x0, 0x0) close(r2) 2m27.324647012s ago: executing program 3 (id=6649): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @empty, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0x6}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9df}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xca}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4b}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc07c}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4001) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r0, &(0x7f0000000080)=""/38, 0x26) 2m27.287726577s ago: executing program 3 (id=6655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xfffd, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xdd}]}}]}, 0x38}}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000280)={0x8, 0x7, 0x80, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000200)=[{0x0, 0x1ff, 0x8}, {0x12, 0x101}, {0xe, 0xfe, 0x2}, {0x5b43223cad57754d, 0x101, 0xc1}, {0x19, 0xfe, 0x802}, {0x0, 0x101, 0x9}]}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0xcc6, 0x20}, &(0x7f0000000080)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x9, 0x1, 0x3, 0x0, 0xfffc, 0xff}, 0x20) 2m27.017473261s ago: executing program 3 (id=6661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000020000103000000000000000002000002000000071f0002000500160011000000080001006401010108000b004900000008000200ac14141e0c0018"], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000000040)=0x40, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private0, @in=@multicast1}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) 2m26.885372054s ago: executing program 3 (id=6663): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/264, 0x27, 0x108, 0x0, 0x80000000}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m11.751687354s ago: executing program 33 (id=6663): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/264, 0x27, 0x108, 0x0, 0x80000000}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 55.517063366s ago: executing program 2 (id=8045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) (async) getsockname(r2, &(0x7f0000000140)=@ieee802154, &(0x7f00000001c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.066654202s ago: executing program 2 (id=8056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x6, 0x0, 0x6, 0x100, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x5cbeaa1e9a9eed00, 0x66f, 0x200}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, 0x0, 0x9cb73b83a8d87629}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1f, 0x1000, 0x1, 0x7ff, 0x680, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd3, &(0x7f00000003c0)=""/211, 0x41000, 0x2e, '\x00', r3, @fallback=0x6, r4, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0x6, 0x6e}, 0x10, 0x0, r0, 0x3, &(0x7f00000006c0)=[r5, r6], &(0x7f0000000700)=[{0x2, 0x1, 0x1, 0x1}, {0x3, 0x2, 0xa, 0x3}, {0x5, 0x3, 0xe, 0x8}], 0x10, 0xa1}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 54.847081579s ago: executing program 2 (id=8062): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2c, @loopback, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r3, 0x601}, 0x14}}, 0x4000) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020026bd7000fcdbdd25150000001400018008000300000000000800030001800000140003800800010007000000080001000600000004000680"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x9, 0x8, 0x0, 0x1, [@generic="fbbe6a6166"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_xfrm(0x10, 0x3, 0x6) 54.717481316s ago: executing program 2 (id=8065): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) (async) bind$llc(r1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 54.713249102s ago: executing program 2 (id=8067): syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f00000000c0)={{0x2, 0x5, 0xffffffff, 0xb57, 0x70}, &(0x7f0000000000)=[{}]}) 54.673075626s ago: executing program 2 (id=8070): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7db", 0x0, 0xa1b, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) (async) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001040)={0x460, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_FRAME={0x337, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_a, @device_b, @random="ee7ddeb4b0e3", {0x6, 0xb}}, @void, @val={0x1, 0x2, [{0x18}, {0x30}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0xe, "959f1046685b751a46b3762dc638"}, {0xdd, 0xf0, "bcd41462f4c6aab94020c062ff6a36abba4b1425b8f0f200d19562ad00bc55963950fb147758e768bc9f78dda41d3709c30800a3b4364507e5fc527f3e89af4adcc5c204557f11954418f116bc3ba5724911e0d1b11a24757a7e4adba6eaab00965923c7c884dc61e128689da507a4ae00b164934d2841f5fb3078ee148a5f35c12ce0bad77ab92652d8f7e9aff80007fa5fd44a872c2fc946a149dfb9c3456c1bcbce98b0aedbe6afaaf026ed4747d8cb995589976053d627be7cd3af87a56305323bf7979e9d16467d7a3c571dfa797e3f0f623a0bb20dab66cd3f4e49257ab913a38c56dfce5c8591f3ba0df4da86"}, {0xdd, 0x31, "e44d26a74dfaf775f9e41d59c283238954c200785c23381dd54b1ac6c957f2f3727007a3fa1a4a5fb132e4a57ed01e3b89"}, {0xdd, 0x42, "4f8658807bcd91d95a2e91de4a15d25c42cb20287cd0578088e20ec1ac6779b980d33f209f12d4d281e9cd396ede9ce7d5f92f996681a634039017c90031e05d8efc"}, {0xdd, 0x7f, "dfa7765d8d02fdbda45113f5551a337f9dffcee9d75e637440637e9098ec803847c08e2211e9a3efc69cc185e2439983963b41a4ddb901415124b5ef035caa6c26d48dc8380cb0b910ac6252a218318de0304682e2a80d03200d4b11d8a6c7bc52f5333acc850abeee60fa9aaf8c97a96ff4ea0b7dd7b404b706cc7b43e8be"}, {0xdd, 0x56, "e501789277e0c08be1284741924ef3e39bf227bacee0979842e7d935e65ca14b97813542b448a1bc5de54aa016d2862e34d5be81233a944f02fad15bdfd7b4374a5eaf5e7424dc7253685ab786122cbde9978f7369cf"}, {0xdd, 0x87, "ed5d205bed89c7ec209828761d2282bf6df601055919d47e8e56fe2f2e34895527f5ba9299d0b852ee4fa53c82f023e12f235e433960343db0ae891774158cb9cf94cdf8d79cd40892f2d70118aa856a638cea6bbfc2f60b6be8d4edf96ed832059ed35956bf3bad8ab5bd8ab35b76992f6d4e375057d2d423225bd4783dec0d447b0bb6d79585"}, {0xdd, 0x32, "463c5b2b610346415195db46b22af466ac40e238a7864c72a77647a26ffbe56b51213c30e7d0121d8dc878d67bae01cd472b"}]}}, @NL80211_ATTR_FRAME={0xfd, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6d6c}, @device_b, @device_a, @initial, {0x6, 0x8}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2002, 0xc, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x1, 0x0, {0xffffffff, 0x1fff, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xd, 0x3}}, [{0xdd, 0xad, "6c418dd32c4772ce85efbc49c92f1c5ceaa0b384699164053ea2ad8a7d939478f5392242cc9556ad2c34383adbfdf33f3ea17fbebb94b90495c6a7f216f7cd306126201978c951e2625fae8a53d6646eb5a497bb7cbeaaf29b32c18adc9cd5d53cdd099c077ff92d688f0b2b0c82e314d99f6c937360e5d6d46ec7faee4c6343e70e7d003bd4f1ee14a905c648afdcbd9e0f988063738cfb47106d125b8a17817b23be3028ade1d88230f96e4b"}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x1000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000780)=0x6e) recvmsg$unix(r6, &(0x7f0000000f40)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/93, 0x5d}, {&(0x7f00000009c0)=""/172, 0xac}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/80, 0x50}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/219, 0xdb}, {&(0x7f0000000d40)=""/14, 0xe}, {&(0x7f0000000d80)=""/70, 0x46}], 0x9, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xd, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000ad9f590e085d37c2ed7c00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000ad9f590e085d37c2ed7c00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) 39.651300401s ago: executing program 34 (id=8070): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7db", 0x0, 0xa1b, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) (async) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001040)={0x460, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_FRAME={0x337, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_a, @device_b, @random="ee7ddeb4b0e3", {0x6, 0xb}}, @void, @val={0x1, 0x2, [{0x18}, {0x30}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0xe, "959f1046685b751a46b3762dc638"}, {0xdd, 0xf0, "bcd41462f4c6aab94020c062ff6a36abba4b1425b8f0f200d19562ad00bc55963950fb147758e768bc9f78dda41d3709c30800a3b4364507e5fc527f3e89af4adcc5c204557f11954418f116bc3ba5724911e0d1b11a24757a7e4adba6eaab00965923c7c884dc61e128689da507a4ae00b164934d2841f5fb3078ee148a5f35c12ce0bad77ab92652d8f7e9aff80007fa5fd44a872c2fc946a149dfb9c3456c1bcbce98b0aedbe6afaaf026ed4747d8cb995589976053d627be7cd3af87a56305323bf7979e9d16467d7a3c571dfa797e3f0f623a0bb20dab66cd3f4e49257ab913a38c56dfce5c8591f3ba0df4da86"}, {0xdd, 0x31, "e44d26a74dfaf775f9e41d59c283238954c200785c23381dd54b1ac6c957f2f3727007a3fa1a4a5fb132e4a57ed01e3b89"}, {0xdd, 0x42, "4f8658807bcd91d95a2e91de4a15d25c42cb20287cd0578088e20ec1ac6779b980d33f209f12d4d281e9cd396ede9ce7d5f92f996681a634039017c90031e05d8efc"}, {0xdd, 0x7f, "dfa7765d8d02fdbda45113f5551a337f9dffcee9d75e637440637e9098ec803847c08e2211e9a3efc69cc185e2439983963b41a4ddb901415124b5ef035caa6c26d48dc8380cb0b910ac6252a218318de0304682e2a80d03200d4b11d8a6c7bc52f5333acc850abeee60fa9aaf8c97a96ff4ea0b7dd7b404b706cc7b43e8be"}, {0xdd, 0x56, "e501789277e0c08be1284741924ef3e39bf227bacee0979842e7d935e65ca14b97813542b448a1bc5de54aa016d2862e34d5be81233a944f02fad15bdfd7b4374a5eaf5e7424dc7253685ab786122cbde9978f7369cf"}, {0xdd, 0x87, "ed5d205bed89c7ec209828761d2282bf6df601055919d47e8e56fe2f2e34895527f5ba9299d0b852ee4fa53c82f023e12f235e433960343db0ae891774158cb9cf94cdf8d79cd40892f2d70118aa856a638cea6bbfc2f60b6be8d4edf96ed832059ed35956bf3bad8ab5bd8ab35b76992f6d4e375057d2d423225bd4783dec0d447b0bb6d79585"}, {0xdd, 0x32, "463c5b2b610346415195db46b22af466ac40e238a7864c72a77647a26ffbe56b51213c30e7d0121d8dc878d67bae01cd472b"}]}}, @NL80211_ATTR_FRAME={0xfd, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6d6c}, @device_b, @device_a, @initial, {0x6, 0x8}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2002, 0xc, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x1, 0x0, {0xffffffff, 0x1fff, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xd, 0x3}}, [{0xdd, 0xad, "6c418dd32c4772ce85efbc49c92f1c5ceaa0b384699164053ea2ad8a7d939478f5392242cc9556ad2c34383adbfdf33f3ea17fbebb94b90495c6a7f216f7cd306126201978c951e2625fae8a53d6646eb5a497bb7cbeaaf29b32c18adc9cd5d53cdd099c077ff92d688f0b2b0c82e314d99f6c937360e5d6d46ec7faee4c6343e70e7d003bd4f1ee14a905c648afdcbd9e0f988063738cfb47106d125b8a17817b23be3028ade1d88230f96e4b"}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x1000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000780)=0x6e) recvmsg$unix(r6, &(0x7f0000000f40)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/93, 0x5d}, {&(0x7f00000009c0)=""/172, 0xac}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/80, 0x50}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/219, 0xdb}, {&(0x7f0000000d40)=""/14, 0xe}, {&(0x7f0000000d80)=""/70, 0x46}], 0x9, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xd, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000ad9f590e085d37c2ed7c00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000ad9f590e085d37c2ed7c00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) 8.369741705s ago: executing program 6 (id=8791): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d72", 0x8f}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.279571115s ago: executing program 6 (id=8796): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3d364ca41ffff45244746bd4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b39f3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x2, 0x4, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r1, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000080)=0x9, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'bond_slave_0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 7.593177056s ago: executing program 4 (id=8803): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000780)={0x24, r3, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x18c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f64024d3020eab2f02c6fecb7c0307ba"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7d46c244eb232cb275fab131edbf75fb5aebc9ae16a02fbb3ddf87e320de2d38"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "85a988ed00c89b3b665b74ebeedac23014ab767806b4237a9fbcc3592710ea98"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2952df8d3d268269164fd21e41d5570d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a95e63af4cdfc493aecc3dca906d86c0"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "549626d328940b613f59265e2a032677488e6d23da64dbab65703de9de74193d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "97abd1ef82d946216926615feebbe418"}]}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xda}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bfc16e8c6d82ed43eda7fd4546379a57c7c5ca1e1f42a5f7aa4cac5ee7b0609b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "320fdbe7a8019146678ed985964761ec904d9fe004102851cf81d4e5cd141021"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) r8 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) (async) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000780)={0x24, r3, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x18c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f64024d3020eab2f02c6fecb7c0307ba"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7d46c244eb232cb275fab131edbf75fb5aebc9ae16a02fbb3ddf87e320de2d38"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "85a988ed00c89b3b665b74ebeedac23014ab767806b4237a9fbcc3592710ea98"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2952df8d3d268269164fd21e41d5570d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a95e63af4cdfc493aecc3dca906d86c0"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "549626d328940b613f59265e2a032677488e6d23da64dbab65703de9de74193d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "97abd1ef82d946216926615feebbe418"}]}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xda}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bfc16e8c6d82ed43eda7fd4546379a57c7c5ca1e1f42a5f7aa4cac5ee7b0609b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "320fdbe7a8019146678ed985964761ec904d9fe004102851cf81d4e5cd141021"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) (async) 7.249024075s ago: executing program 4 (id=8808): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8ea32860fd4ff81c, 0x2, 0x4, 0x9, 0x11000, r1, 0x3, '\x00', r2, r1, 0x4, 0x0, 0x1, 0x0, @void, @value, @value=r1}, 0x50) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x730, 0x308, 0x100, 0x420, 0x420, 0x100, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, &(0x7f0000000200), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffffff], 'veth0_to_batadv\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0x7, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x63e000, 0x1, 0x7880}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@broadcast, 0x23, 0x29, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x400, 'syz0\x00', {0x8}}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff], [0xff, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'vcan0\x00', {}, {0xff}, 0x11, 0x4, 0x1, 0x28}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@empty, 0x8, 0xb, 0x6}}}, {{@uncond, 0x0, 0x118, 0x240, 0x0, {}, [@common=@ipv6header={{0x28}, {0x9c, 0x22, 0x1}}, @common=@hbh={{0x48}, {0x10000, 0x3, 0x0, [0xca5, 0x7, 0xfd6, 0xfffd, 0x10, 0x7, 0x100, 0x8, 0x1, 0x40, 0x3, 0x1, 0x9, 0x3, 0x2, 0x8], 0xf}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x60ed, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000a40)={'veth0_to_batadv\x00', 0x40000}) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000a80)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000ec0)={{r1, &(0x7f0000000ac0)=']\'+-(\\\xe2\x00', 0x753900, &(0x7f0000000b00)={@_ha_fsid={[0x6, 0xff]}, {0x7880, 0x9, 0x4, 0x8}}, 0x9, &(0x7f0000000b40), &(0x7f0000000b80)=0x6}, 0x3, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000bc0)='rpfilter\x00', &(0x7f0000000c00)="f5a3b9e05e6321e2d394615ab00f4ad7c99bb115a8ac6e3fcbbfd607513c4af3cb5767dcbcc79ecf71ef51c29d5113c2e8daa32336ec67634d9a6e113c80a95a5bdecc25190867ef18db6d4dc1c5266953fbbccf4b7d8aba5d3d85b729acb29f8cd58aa30b7cbd9c5ba1093b4312cb980820053330925aa15b32429a4dcabc813b350cccaf6035fd9b22e1dfc0164856079b01e13b4e3113a1d4bcc74b", 0x9d, 0x10}, {0x2, 0x59c, &(0x7f0000000cc0)='&{1+&*\x00', &(0x7f0000000d00)="b382fa00710f6e137c2c3ceea51fd6c8dbdf64a1ff6f77bae9760fff2f26297b0c4e41bcb2c570473bffb4179af2028caed45cfb8dcc51b38e7b56d80a4edde1b7c8120ff631a932416348d79e965b5ed0993dfba7ebf8658ef3f9ed39402b48c826b3d5bc318ecaf4d8fa8ea3a9d9183b3866418e2daac84997a05c58a398fdcc035acdf512bcd53ac9d1454c5e81271c7936dc5214ba05023f43d64a20625fc0c3", 0xa2, 0x48}, {0x1, 0x93c1, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00)="6a3004a6c538fa", 0x7, 0x8}]}) recvfrom$l2tp(r4, &(0x7f0000000f40)=""/13, 0xd, 0x20, &(0x7f0000000f80)={0x2, 0x0, @dev}, 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0}, &(0x7f0000001040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001080)={{{@in6=@private1, @in=@loopback, 0x4e20, 0xfffe, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x88, r2, r6}, {0x628, 0x3c, 0x1, 0xfffffffffffffff8, 0x8, 0xb2, 0x10000, 0x7fffffffffffffff}, {0xbb72, 0x1, 0xfffffffffffffffb, 0x2}, 0x7, 0x6e6bbe, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4d6, 0x3c}, 0xa, @in6=@private0, 0x3500, 0x1, 0x1, 0x8, 0x10001, 0x8, 0x5}}, 0xe8) (async, rerun: 64) write$nci(0xffffffffffffffff, &(0x7f0000001180)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x4) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@dev, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private2}}, &(0x7f00000012c0)=0xe8) (async) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001300)=0xe3a9, 0x4) (async, rerun: 64) ioctl$sock_proto_private(r3, 0x89e6, &(0x7f0000001340)="75f91673fa98e9c9124a97c1ae3bad2225f3d1b84d9fbff53de04fa565f36272afabac26431c7bacafb6") (async, rerun: 64) sendto$inet6(r1, &(0x7f0000001380)="f857b396dae9d94936f3b273c318b0f606e400c936ca8127e279bec680d53edddc5469fc5b54d7ecde8217cb6df3f21ad35c4ce81c8f5a471801e71e8373aaffe1f731381f1343116544aa49b5f99df41bff39035264de55f4971fc1dfc3a3bf29d07d1a5e43452734d87933bcb22df7e39d335b403a3bb1541f73f6a5999008b7ab4dcc1c0f6537a0691d86327347686cb5996de9c7ce437c", 0x99, 0x4000, &(0x7f0000001440)={0xa, 0x4e20, 0x0, @private1, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect$x25(r1, &(0x7f0000001480), 0x12) (async, rerun: 64) r7 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001500)={'bond_slave_1\x00', @remote}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001540), 0x2c0f00, 0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0xc5) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x18, 0x1407, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f00000017c0)={0x0, 0x3, [0xffff, 0x2, 0x800, 0x3ff, 0xffffffffffffffff, 0x4c1c]}) 7.088775233s ago: executing program 6 (id=8810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '4'}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd084cb5d5891bb70e0000080001000800000008000300", @ANYRES32=r4, @ANYBLOB="080005000a0000001400040070696d72656700"/28], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r17) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r19], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r9, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20009081}, 0x10) 7.038200217s ago: executing program 4 (id=8812): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0", 0x8}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.027731044s ago: executing program 6 (id=8818): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x4048804) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={r0, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x8, 0x9, 0x6, 0x157, 0x4, 0x8, 0x4}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) syz_emit_ethernet(0xe, &(0x7f00000018c0)={@random="a581e4cba1fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@generic={0x88f7}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @timestamp, @mss={0x2, 0xfffffff7}], 0x3) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "673da4944307b0000f6beabe0df14dbd5b3f32050ecba942a2c026b2cf722ab4", "34589ed9c0dbf80c9c02c2364e18a7c7b9f1b2a7cda5410d6410c6cdca1dc6d5179c4a4a9bc3ab3dda6e9f970e771d17", "fdc204cb6dde391e48b6950c6de39e4b8f3c6810a0dce2412fc17937", {"aef84fba106944929d7574af82d09c69", "afe7f4d0d1473570f45ab669b488d43c"}}}}}}}}, 0xc2) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000240)={&(0x7f0000000080)='syer\x00\x00\x00\x00\x00\x00', &(0x7f00000000c0)='syzkaller\x00'}) 4.015878158s ago: executing program 5 (id=8820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.969821182s ago: executing program 4 (id=8821): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019", @ANYRES32=0x0], 0x24}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000100), 0x0, 0x4000005) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_delroute={0x24, 0x19, 0x300, 0x70bd26, 0x25dfdbff, {0xa, 0x20, 0x14, 0x7f, 0x0, 0x1, 0xff, 0x8, 0x300}, [@RTA_EXPIRES={0x8, 0x17, 0xe0000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x41) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @local}}) 3.968917757s ago: executing program 1 (id=8822): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd964, 0x2}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRES16=r1, @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.870938697s ago: executing program 4 (id=8823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delnexthop={0x40, 0x69, 0x0, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x7, 'wlan1\x00', {0x3}, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.809097398s ago: executing program 5 (id=8824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000a1fc9c174c8500b143f58d24e43f0d0fd8236a2500000000000000005fd4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r2, 0x2b, 0x0, 0x80000001, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 3.653137919s ago: executing program 4 (id=8826): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 3.649667425s ago: executing program 6 (id=8827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2502000000090001007b"], 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x42ee771a}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x20004040) 3.577776836s ago: executing program 5 (id=8828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf2701000000080002000200000008000100000000000800020002000000758763b703000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000180)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b73dd78ec1c4184c1bb0d1ef945700000085000000860000009500000000000000420ed9705fde2d0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf2701000000080002000200000008000100000000000800020002000000758763b703000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) (async) pipe(&(0x7f00000002c0)) (async) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b73dd78ec1c4184c1bb0d1ef945700000085000000860000009500000000000000420ed9705fde2d0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3.508824018s ago: executing program 1 (id=8829): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d72", 0x8f}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.433587058s ago: executing program 5 (id=8831): r0 = socket$kcm(0x10, 0x2, 0x10) pselect6(0x7e, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000000140)={0x5, 0x53a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) socket$kcm(0x10, 0x2, 0x10) (async) pselect6(0x7e, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000000140)={0x5, 0x53a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) (async) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) (async) 2.949393377s ago: executing program 7 (id=8836): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x207}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt(r4, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 2.88112217s ago: executing program 7 (id=8837): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x48301, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000140)="31fa0610668d31a11902", 0xa}, {&(0x7f0000000240)="a49200214c2b3f2bc72b7242", 0xc}], 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="100000000000000007000000701a4b28b5aa7f00058bc94e6b7b04dcdd3d3e", @ANYRES32=r0, @ANYBLOB="0000000077d34e37997a5ac103000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185300000000000000000000000000006302f4ff00000000"], &(0x7f0000000140)='syzkaller\x00', 0x81, 0x54, &(0x7f0000000180)=""/84, 0x41100, 0x5d, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x8, 0x75}, 0x10, 0xd5e3, r4, 0x3, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0xa, 0xa}, {0x3, 0x4, 0x7}, {0x1, 0x3, 0x5, 0xb}], 0x10, 0x80}, 0x94) 2.677547612s ago: executing program 7 (id=8838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_stats}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES8=r0, @ANYBLOB="0a00274f7b1c0303030300004400238006001b0000000000050006000200000008"], 0x6c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="3ea0380f2ed2250b09f6d74b2c133cfe8fb1c537cecce6a67ca7be74", 0x1c}, {&(0x7f0000000100)="2d940b5efb25f07908e8dec0f73f02e1fc7b2f7fb94a194076ba79b0606cc3ffc19e1bb7a4fe7fec662c0d", 0x2b}, {&(0x7f0000000200)="3d07fd48dfc887e566b9c914d3cf2a782c18a5a38d4f0d7e25b39b550003a9044261d0bbb6dbc468f395be22a5e624959b0b03d7dffca8adc16546c736fba0662c385080c09928827f19ac467f0f4ddabb38b4d81b3e19b8e9075be42777b3250f7c2f6ef46fa9c434baddad1a5272a449", 0x71}], 0x3}, 0x20000050) 514.452814ms ago: executing program 5 (id=8839): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async, rerun: 32) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) (async, rerun: 32) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_to_batadv\x00', 0x10) 510.981735ms ago: executing program 6 (id=8840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'pimreg0\x00', 0x3, 0x4}) sendmsg$inet6(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="78974b7cf764d1", 0x7}], 0x1}, 0x2400c81d) 484.615084ms ago: executing program 1 (id=8841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffb}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 433.696254ms ago: executing program 7 (id=8842): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000200)=@framed={{}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000001c000000090a0104000000000000000007000000080005290000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010400000000000000001140000001000010000000000000000000084000a"], 0x90}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000019580)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x0, 0x110, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0xff000000, 0xff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x2, 'veth0_vlan\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @loopback, 0xf, 0x1}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="757930b1b98a", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0xffff, 0x4, 0x21, 0x5, 0x2, 'ip_vti0\x00', 'pim6reg1\x00', {0xff}, {0x7f}, 0x0, 0x26c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast2, @broadcast, 0xffffff00, 0x0, 0xc, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="23fc13b910db", {[0x0, 0xff]}}, 0xfb3, 0x1, 0x2, 0x9, 0x5, 0x3, 'geneve0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0xbdffa750df69ccdb}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x110, 0x7, 0x0, 0x0) close(r2) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/time_for_children\x00') write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) 375.878435ms ago: executing program 5 (id=8843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xb, 0x0, &(0x7f0000000640)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000300), 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRESDEC=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r5, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000001500)=""/4110, &(0x7f0000000000)=0x100e) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x2000000, r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000200000ffffffffffffffff00"/28], 0x50) 332.159337ms ago: executing program 7 (id=8844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 232.114856ms ago: executing program 1 (id=8845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3c8, 0xffffffff, 0xf0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, [0x47e128f2bce82ddb, 0xff, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x5, 0x1, 0x53}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'batadv_slave_0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x7, 0x2, 0x2a4, 0x0, 0x9, 0x2, 0x1]}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0x0, 0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wlan1\x00', {}, {}, 0x8, 0xb, 0x6, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x25, 0x80}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 79.152767ms ago: executing program 1 (id=8846): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)="6a3576aa3a5a3fb4202569ab2d5f3aa1e9d4a80d", 0x14}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="4c1f295247c6dac38c6de4869bf539cbf5434332a6b8a180bfc1ef0f91da434db6088a0148e4a2", 0x27}, {&(0x7f0000001700)="3a85a4b8ad9e4fa29eb34b9c6a9be1082b14", 0x12}, {&(0x7f0000001740)="df04168ad81a554a8afb67de9a960b6ccb9111b19dcc0aabc363faef51ca2d1224b07b1323351754d48a00ae55c316368c0e7d6aef083406721c2e000974a652ff9ba333a7e005c5f907952e938d3442f85ccd2f5120408bc3b1e3e3915c1f555520cb6a8137e868d35fe670b5313aea2cb576b91ecfbc58bcefd4c4f2017d326192a41ba3850a73605bb62bebfddbb5d582dadc5ee9bfc60491d4d509e6cff616731b09450c21f3dccd1493adec487cb03ab59d10e3e7d02baef5ffe4a1c372868d5ddecce4b26403eb7671946d57c3a9234c129d6bb0798dc56198747228982a6d5b7841e692ee7a8a4c4519d3af28", 0xf0}], 0x5, &(0x7f00000018c0)}, 0x800) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x1000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 46.616076ms ago: executing program 1 (id=8847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x138, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x2}, {0x0, 0x2, 0x5}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x20000082, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x30}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000340)={r11, 0xf9c}, &(0x7f00000003c0)=0x8) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) close(r12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) 0s ago: executing program 7 (id=8848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xffff}, {0x7, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) write(r9, &(0x7f0000003400)="d3", 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r12, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x110, r10, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x4a}}}}, [@NL80211_ATTR_VENDOR_DATA={0xed, 0xc5, "d2f2786ddb1a8a83879948d4a2c71ef4cebd661cb027619528d766e655f889313a76cb2645b7802f2f2c95a5d9a0a2cdd25ef75b6723967e4b8ada6c722cf628d69da99d843d1171b8b002d6dd559858bc921c8b771835ace8cca49cfdcee7985c1430ae03980bdb8f016bb7083b28087a922febf7571e451b253d2f07f2f4108204d5a00c6e31f931d2bef05aa92338e7aa619e84f4ed5c3e9f92443b6bc32e39b0a102347bf1f1519d523f110186c2e7c077d030816bdcd2b2ae4cbd109a1a67e4107486258409ef5919517ba561279d5539f54ffc523c2e73bb297d852101442a4772a27c81c0a6"}]}, 0x110}, 0x1, 0x0, 0x0, 0x48025}, 0x4840) r13 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r13, 0x2}, 0x20) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r6, 0x111, 0x6, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 12 bytes leftover after parsing attributes in process `syz.1.7145'. [ 648.286073][T31126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7145'. [ 648.303855][T31129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7144'. [ 648.345291][T31125] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 648.360790][T31125] bond2 (unregistering): Released all slaves [ 648.579798][T31141] netlink: 'syz.2.7147': attribute type 3 has an invalid length. [ 648.603854][T31141] netlink: 'syz.2.7147': attribute type 1 has an invalid length. [ 648.620472][T31141] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7147'. [ 648.701926][T31150] netlink: 'syz.2.7151': attribute type 17 has an invalid length. [ 649.505446][T31192] FAULT_INJECTION: forcing a failure. [ 649.505446][T31192] name failslab, interval 1, probability 0, space 0, times 0 [ 649.518185][T31192] CPU: 0 UID: 0 PID: 31192 Comm: syz.6.7163 Not tainted syzkaller #0 PREEMPT(full) [ 649.518215][T31192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.518228][T31192] Call Trace: [ 649.518237][T31192] [ 649.518246][T31192] dump_stack_lvl+0xe8/0x150 [ 649.518274][T31192] should_fail_ex+0x40c/0x560 [ 649.518300][T31192] should_failslab+0xa8/0x100 [ 649.518332][T31192] ? skb_clone+0x212/0x3a0 [ 649.518352][T31192] kmem_cache_alloc_noprof+0x87/0x650 [ 649.518385][T31192] skb_clone+0x212/0x3a0 [ 649.518405][T31192] bpf_clone_redirect+0x170/0x4b0 [ 649.518435][T31192] ? bpf_test_run+0x1d1/0x830 [ 649.518474][T31192] bpf_prog_c23103f528d5a825+0x22/0x2a [ 649.518494][T31192] bpf_test_run+0x354/0x830 [ 649.518537][T31192] ? __pfx_bpf_test_run+0x10/0x10 [ 649.518574][T31192] ? trace_kmem_cache_alloc+0x29/0xe0 [ 649.518599][T31192] ? csum_partial+0x239/0x2c0 [ 649.518633][T31192] ? skb_dst_set+0x72/0x140 [ 649.518665][T31192] bpf_prog_test_run_skb+0xe35/0x2230 [ 649.518707][T31192] ? __fget_files+0x3a2/0x420 [ 649.518730][T31192] ? __fget_files+0x2a/0x420 [ 649.518755][T31192] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 649.518787][T31192] bpf_prog_test_run+0x2c5/0x340 [ 649.518821][T31192] __sys_bpf+0x643/0x950 [ 649.518849][T31192] ? __pfx___sys_bpf+0x10/0x10 [ 649.518886][T31192] ? ksys_write+0x242/0x270 [ 649.518916][T31192] ? __pfx_ksys_write+0x10/0x10 [ 649.518946][T31192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.518969][T31192] __x64_sys_bpf+0x7c/0x90 [ 649.518995][T31192] do_syscall_64+0x174/0x580 [ 649.519022][T31192] ? trace_irq_disable+0x3b/0x140 [ 649.519049][T31192] ? clear_bhb_loop+0x40/0x90 [ 649.519073][T31192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.519094][T31192] RIP: 0033:0x7fc9cc19ce59 [ 649.519113][T31192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.519131][T31192] RSP: 002b:00007fc9cd0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.519155][T31192] RAX: ffffffffffffffda RBX: 00007fc9cc415fa0 RCX: 00007fc9cc19ce59 [ 649.519171][T31192] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 649.519186][T31192] RBP: 00007fc9cd0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 649.519200][T31192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.519212][T31192] R13: 00007fc9cc416038 R14: 00007fc9cc415fa0 R15: 00007ffd19fcae18 [ 649.519237][T31192] [ 650.208815][T31211] bond0: Caught tx_queue_len zero misconfig [ 650.329974][T31224] pim6reg1: entered promiscuous mode [ 650.354155][T31224] pim6reg1: entered allmulticast mode [ 650.423697][T31233] xt_l2tp: invalid flags combination: 0 [ 650.804633][T31252] netlink: 'syz.2.7180': attribute type 1 has an invalid length. [ 650.920096][T31262] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 651.071093][T31252] veth5: entered promiscuous mode [ 651.129192][T31252] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 651.229768][T31289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.244527][T31292] netlink: 'syz.1.7190': attribute type 1 has an invalid length. [ 651.296704][T31296] __nla_validate_parse: 14 callbacks suppressed [ 651.296725][T31296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7190'. [ 651.400619][T31292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7190'. [ 651.495508][T31296] bond11: (slave bridge4): making interface the new active one [ 651.514933][T31296] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 651.548885][T31308] veth1_to_bond: entered allmulticast mode [ 651.558050][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7192'. [ 651.581268][T31308] veth1_to_bond (unregistering): left allmulticast mode [ 651.732994][T31316] netlink: 'syz.4.7196': attribute type 1 has an invalid length. [ 651.880468][T31316] 8021q: adding VLAN 0 to HW filter on device bond9 [ 651.899112][T31324] veth0_macvtap: Device is already in use. [ 651.934078][T31316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7196'. [ 652.326865][T31344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7202'. [ 652.342603][T31366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7206'. [ 652.351832][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7202'. [ 652.432875][ T6302] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.433183][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7202'. [ 652.495694][T31344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7202'. [ 652.508818][ T6302] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.543417][ T6302] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.569794][T31377] netlink: 'syz.1.7208': attribute type 83 has an invalid length. [ 652.582207][ T6302] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.664636][ T5282] veth0_vlan: left promiscuous mode [ 652.707219][ T5282] veth0_vlan: entered promiscuous mode [ 652.719503][T31384] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7209'. [ 652.945277][T31398] netlink: 'syz.6.7216': attribute type 33 has an invalid length. [ 652.994499][T31398] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 653.025857][T31398] bond2 (unregistering): Released all slaves [ 653.564694][T31445] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20002 [ 653.602641][T31447] netlink: 'syz.1.7227': attribute type 16 has an invalid length. [ 653.635369][T31447] veth0_macvtap: entered allmulticast mode [ 653.761828][T31451] syzkaller0: entered promiscuous mode [ 653.780148][T31451] syzkaller0: entered allmulticast mode [ 653.832208][T31451] tipc: Started in network mode [ 653.857031][T31451] tipc: Node identity 9e1ecc012707, cluster identity 4711 [ 653.885589][T31451] tipc: Enabled bearer , priority 0 [ 653.953983][T31450] tipc: Resetting bearer [ 653.979474][T31450] tipc: Disabling bearer [ 654.041008][T31470] netlink: 'syz.5.7233': attribute type 26 has an invalid length. [ 654.214952][T31486] netlink: 'syz.4.7236': attribute type 4 has an invalid length. [ 654.241899][T31486] netlink: 'syz.4.7236': attribute type 27 has an invalid length. [ 654.271633][T31486] IPv6: NLM_F_CREATE should be specified when creating new route [ 654.317991][T31493] netlink: 'syz.2.7239': attribute type 5 has an invalid length. [ 654.592441][ T7504] IPVS: starting estimator thread 0... [ 654.697380][T31515] IPVS: using max 41 ests per chain, 98400 per kthread [ 654.722354][T31523] : renamed from dummy0 [ 654.783633][T31528] lo: entered allmulticast mode [ 654.804781][T31528] lo: left allmulticast mode [ 654.862455][T31540] netlink: 'syz.2.7254': attribute type 1 has an invalid length. [ 654.874395][T31534] netlink: 'syz.6.7253': attribute type 13 has an invalid length. [ 654.938853][T31540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 654.997736][T31540] bond9: (slave gretap1): making interface the new active one [ 655.006121][T31540] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 655.082022][T31544] syzkaller0: entered promiscuous mode [ 655.089764][T31544] syzkaller0: entered allmulticast mode [ 655.690545][T31575] bond2: Removing last arp target with arp_interval on [ 655.704602][T31577] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 656.252175][T31612] bridge5: entered promiscuous mode [ 656.258724][T31612] bridge5: entered allmulticast mode [ 656.280050][T31618] x_tables: duplicate entry at hook 2 [ 656.373250][T31615] bridge6: entered promiscuous mode [ 656.390909][T31615] bridge6: entered allmulticast mode [ 656.469213][ T7504] IPVS: starting estimator thread 0... [ 656.475906][T31622] IPVS: sh: FWM 3 0x00000003 - no destination available [ 656.579326][T31629] IPVS: using max 36 ests per chain, 86400 per kthread [ 656.597870][T31636] __nla_validate_parse: 18 callbacks suppressed [ 656.597893][T31636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7281'. [ 656.625279][T31636] netlink: 'syz.1.7281': attribute type 1 has an invalid length. [ 656.633708][T31636] netlink: 'syz.1.7281': attribute type 1 has an invalid length. [ 656.642917][T31636] netlink: 'syz.1.7281': attribute type 2 has an invalid length. [ 656.652925][T31636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7281'. [ 656.742726][T31644] 8021q: VLANs not supported on xfrm0 [ 657.065378][T31663] syzkaller0: entered promiscuous mode [ 657.078710][T31663] syzkaller0: entered allmulticast mode [ 657.330997][T31687] block nbd1: Unsupported socket: should be TCP or UNIX. [ 657.377063][T31691] syzkaller0: entered promiscuous mode [ 657.386631][T31691] syzkaller0: entered allmulticast mode [ 657.402529][T31687] nbd: couldn't find a device at index 0 [ 657.610574][T31704] 8021q: adding VLAN 0 to HW filter on device bond12 [ 657.669885][T31704] vlan4: entered promiscuous mode [ 657.675007][T31704] bond12: entered promiscuous mode [ 657.681318][T31704] vlan4: entered allmulticast mode [ 657.686501][T31704] bond12: entered allmulticast mode [ 657.719692][T31704] bond12: (slave bridge7): making interface the new active one [ 657.728428][T31704] bridge7: entered promiscuous mode [ 657.733855][T31704] bridge7: entered allmulticast mode [ 657.741562][T31704] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 657.773486][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7306'. [ 658.113742][T31751] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7314'. [ 658.137172][T31749] ±ÿ: renamed from lo (while UP) [ 658.241232][T31758] ip6t_srh: unknown srh match flags 4000 [ 658.336537][T31770] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7320'. [ 658.419383][ T7490] IPVS: starting estimator thread 0... [ 658.472554][T31774] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:19999 [ 658.519393][T31775] IPVS: using max 41 ests per chain, 98400 per kthread [ 658.572753][T31783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7324'. [ 658.702692][T31790] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7327'. [ 658.979063][T31805] validate_nla: 4 callbacks suppressed [ 658.979081][T31805] netlink: 'syz.1.7333': attribute type 7 has an invalid length. [ 658.992360][T31805] netlink: 'syz.1.7333': attribute type 8 has an invalid length. [ 659.061205][T31808] lo: Caught tx_queue_len zero misconfig [ 659.084959][T31821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7336'. [ 659.095135][T31821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7336'. [ 659.105996][T31821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7336'. [ 659.140428][ T808] hid-generic 0005:15C2:0440.0005: item fetching failed at offset 2/3 [ 659.159578][ T808] hid-generic 0005:15C2:0440.0005: probe with driver hid-generic failed with error -22 [ 659.282158][T31836] netlink: 'syz.6.7340': attribute type 10 has an invalid length. [ 659.335104][T31836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.365463][T31836] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 659.384604][T31846] lo: Caught tx_queue_len zero misconfig [ 659.413025][T31843] nbd: couldn't find a device at index 0 [ 659.813016][T31864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.900778][T31884] netlink: 'syz.1.7351': attribute type 1 has an invalid length. [ 659.925055][T31884] netlink: 'syz.1.7351': attribute type 7 has an invalid length. [ 660.277567][T31919] syzkaller0: entered promiscuous mode [ 660.283104][T31919] syzkaller0: entered allmulticast mode [ 660.291421][T31917] tipc: Enabled bearer , priority 0 [ 660.298406][T31919] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 660.308656][T31919] tipc: Resetting bearer [ 660.315315][T31916] tipc: Resetting bearer [ 660.325538][T31916] tipc: Disabling bearer [ 660.332610][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 660.825084][T31946] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 660.972711][T31956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 661.404825][T31975] smc: net device veth1_to_team erased user defined pnetid S [ 661.631817][T31982] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 661.661388][T31989] netlink: 'syz.5.7379': attribute type 1 has an invalid length. [ 661.681556][T31989] __nla_validate_parse: 12 callbacks suppressed [ 661.681576][T31989] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7379'. [ 662.003309][T31982] bond13 (unregistering): Released all slaves [ 662.239195][T32004] netlink: 'syz.1.7384': attribute type 17 has an invalid length. [ 662.256869][T32007] FAULT_INJECTION: forcing a failure. [ 662.256869][T32007] name failslab, interval 1, probability 0, space 0, times 0 [ 662.269629][T32007] CPU: 0 UID: 0 PID: 32007 Comm: syz.6.7387 Not tainted syzkaller #0 PREEMPT(full) [ 662.269657][T32007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.269671][T32007] Call Trace: [ 662.269680][T32007] [ 662.269689][T32007] dump_stack_lvl+0xe8/0x150 [ 662.269716][T32007] should_fail_ex+0x40c/0x560 [ 662.269741][T32007] should_failslab+0xa8/0x100 [ 662.269777][T32007] ? skb_clone+0x212/0x3a0 [ 662.269796][T32007] kmem_cache_alloc_noprof+0x87/0x650 [ 662.269828][T32007] skb_clone+0x212/0x3a0 [ 662.269848][T32007] bpf_clone_redirect+0x170/0x4b0 [ 662.269877][T32007] ? bpf_test_run+0x1d1/0x830 [ 662.269913][T32007] bpf_prog_c23103f528d5a825+0x22/0x2a [ 662.269938][T32007] bpf_test_run+0x354/0x830 [ 662.269981][T32007] ? __pfx_bpf_test_run+0x10/0x10 [ 662.270017][T32007] ? trace_kmem_cache_alloc+0x29/0xe0 [ 662.270050][T32007] ? csum_partial+0x239/0x2c0 [ 662.270085][T32007] ? skb_dst_set+0x72/0x140 [ 662.270116][T32007] bpf_prog_test_run_skb+0xe35/0x2230 [ 662.270158][T32007] ? __fget_files+0x3a2/0x420 [ 662.270180][T32007] ? __fget_files+0x2a/0x420 [ 662.270207][T32007] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 662.270238][T32007] bpf_prog_test_run+0x2c5/0x340 [ 662.270272][T32007] __sys_bpf+0x643/0x950 [ 662.270305][T32007] ? __pfx___sys_bpf+0x10/0x10 [ 662.270343][T32007] ? ksys_write+0x242/0x270 [ 662.270372][T32007] ? __pfx_ksys_write+0x10/0x10 [ 662.270402][T32007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.270429][T32007] __x64_sys_bpf+0x7c/0x90 [ 662.270454][T32007] do_syscall_64+0x174/0x580 [ 662.270481][T32007] ? trace_irq_disable+0x3b/0x140 [ 662.270508][T32007] ? clear_bhb_loop+0x40/0x90 [ 662.270532][T32007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.270554][T32007] RIP: 0033:0x7fc9cc19ce59 [ 662.270573][T32007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.270592][T32007] RSP: 002b:00007fc9cd0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.270615][T32007] RAX: ffffffffffffffda RBX: 00007fc9cc415fa0 RCX: 00007fc9cc19ce59 [ 662.270637][T32007] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 662.270652][T32007] RBP: 00007fc9cd0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.270666][T32007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.270679][T32007] R13: 00007fc9cc416038 R14: 00007fc9cc415fa0 R15: 00007ffd19fcae18 [ 662.270706][T32007] [ 662.273828][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7384'. [ 662.590343][T32004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7384'. [ 662.637909][T32011] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 662.646530][T32004] gretap0: entered promiscuous mode [ 662.654289][T32004] gretap0: left promiscuous mode [ 662.812457][T32027] bond13: option min_links: invalid value (18446744073709551614) [ 662.820430][T32027] bond13: option min_links: allowed values 0 - 2147483647 [ 662.829524][T32027] bond13 (unregistering): Released all slaves [ 663.213656][T32050] netlink: 'syz.5.7399': attribute type 3 has an invalid length. [ 663.290793][T32055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7401'. [ 663.300308][T32057] pim6reg: entered allmulticast mode [ 663.319201][T32053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7401'. [ 663.382307][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 663.393256][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 663.405836][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 663.416364][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 663.431690][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7403'. [ 663.622865][T32073] netlink: 'syz.5.7406': attribute type 33 has an invalid length. [ 663.633467][T32075] netlink: 'syz.4.7407': attribute type 1 has an invalid length. [ 663.722015][T32073] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 663.769541][T32073] bond6 (unregistering): Released all slaves [ 663.812997][T32072] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 663.825978][T32072] bond6 (unregistering): Released all slaves [ 664.405445][T32130] syzkaller0: entered promiscuous mode [ 664.433134][T32130] syzkaller0: entered allmulticast mode [ 664.452727][T32128] simple: basic_1 [ 664.456452][T32128] simple: basic_2 [ 664.460174][T32128] simple: basic_3 [ 664.463847][T32128] simple: basic_4 [ 664.467522][T32128] simple: basic_5 [ 664.471173][T32128] simple: basic_6 [ 664.474824][T32128] simple: basic_7 [ 664.478501][T32128] simple: basic_8 [ 664.482154][T32128] simple: basic_9 [ 664.485883][T32128] simple: basic_10 [ 664.489650][T32128] simple: basic_11 [ 664.493389][T32128] simple: basic_12 [ 664.497182][T32128] simple: basic_13 [ 664.500919][T32128] simple: basic_14 [ 664.504683][T32128] simple: basic_15 [ 664.508477][T32128] simple: basic_16 [ 664.512222][T32128] simple: basic_17 [ 664.515958][T32128] 0: reclassify loop, rule prio 0, protocol 800 [ 664.564672][T32136] validate_nla: 2 callbacks suppressed [ 664.564693][T32136] netlink: 'syz.2.7421': attribute type 8 has an invalid length. [ 665.323930][T32190] syzkaller1: entered promiscuous mode [ 665.347442][T32190] syzkaller1: entered allmulticast mode [ 665.393364][T32190] netlink: 'syz.1.7433': attribute type 2 has an invalid length. [ 665.982228][T32239] netlink: 'syz.5.7444': attribute type 1 has an invalid length. [ 666.059346][T32226] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.067241][T32226] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.226778][T32226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.240374][T32226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.336040][T32239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.366479][ T6294] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.375483][ T6294] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.387116][ T6294] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.396191][ T6294] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.054381][T32292] __nla_validate_parse: 42 callbacks suppressed [ 667.054401][T32292] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7451'. [ 667.126745][T32299] Cannot find add_set index 0 as target [ 667.246687][T32303] syzkaller1: entered promiscuous mode [ 667.263606][T32303] syzkaller1: entered allmulticast mode [ 667.463327][T32317] netlink: 'syz.6.7458': attribute type 1 has an invalid length. [ 667.484713][T32317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.593028][T32325] netlink: 'syz.1.7460': attribute type 11 has an invalid length. [ 667.625583][T32330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7462'. [ 667.634816][T32330] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 667.649159][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7462'. [ 667.865055][T32347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7467'. [ 667.874159][T32347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7467'. [ 667.884045][T32347] vlan0: entered promiscuous mode [ 667.917594][T32346] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7468'. [ 668.260527][T32347] netlink: 'syz.4.7467': attribute type 4 has an invalid length. [ 668.428732][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7473'. [ 668.586720][T32381] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7476'. [ 668.619322][T32383] ip6gretap0: entered promiscuous mode [ 668.655895][T32384] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 668.671438][T32384] syzkaller1: Linktype set failed because interface is up [ 668.764905][T32389] mac80211_hwsim hwsim80 syzkaller0: left promiscuous mode [ 668.772217][T32389] mac80211_hwsim hwsim80 syzkaller0: left allmulticast mode [ 668.797140][T32389] tipc: Resetting bearer [ 668.833852][T32391] netlink: 'syz.5.7481': attribute type 10 has an invalid length. [ 668.842904][T32391] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7481'. [ 668.857995][T32392] netlink: 'syz.5.7481': attribute type 10 has an invalid length. [ 668.872162][T32392] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7481'. [ 668.939024][T32396] geneve3: entered promiscuous mode [ 668.959655][T32398] ip6tnl0: Caught tx_queue_len zero misconfig [ 669.418081][T32425] bond7: option resend_igmp: invalid value (32767) [ 669.424827][T32425] bond7: option resend_igmp: allowed values 0 - 255 [ 669.436914][T32425] bond7 (unregistering): Released all slaves [ 669.493195][T32429] bond7: option xmit_hash_policy: invalid value (64) [ 669.507039][T32429] bond7 (unregistering): Released all slaves [ 669.536268][ T9025] tipc: Resetting bearer [ 669.824540][T32455] x_tables: unsorted entry at hook 1 [ 669.843643][T32455] IPVS: Error connecting to the multicast addr [ 670.033995][T32462] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 670.136615][T32473] team0: left promiscuous mode [ 670.141840][T32473] team_slave_0: left promiscuous mode [ 670.148234][T32473] team_slave_1: left promiscuous mode [ 670.154063][T32473] bridge0: port 3(team0) entered disabled state [ 670.175526][T32473] bridge_slave_0: left allmulticast mode [ 670.186577][T32473] bridge_slave_0: left promiscuous mode [ 670.200899][T32473] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.226011][T32473] bridge_slave_1: left allmulticast mode [ 670.235984][T32473] bridge_slave_1: left promiscuous mode [ 670.241797][T32473] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.256094][T32473] bond0: (slave bond_slave_0): Releasing backup interface [ 670.274514][T32473] bond0: (slave bond_slave_1): Releasing backup interface [ 670.285577][T32473] team_slave_0: left allmulticast mode [ 670.300699][T32473] team0: Port device team_slave_0 removed [ 670.327789][T32473] team_slave_1: left allmulticast mode [ 670.347552][T32473] team0: Port device team_slave_1 removed [ 670.354219][T32473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.361706][T32473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.371188][T32473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.378884][T32473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.387928][T32473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.411937][T32481] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 670.431980][T32481] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 670.441785][T32481] gretap2: entered promiscuous mode [ 670.458339][T32481] gretap2: entered allmulticast mode [ 670.490911][T32485] netlink: 'syz.1.7511': attribute type 1 has an invalid length. [ 670.592513][T32485] 8021q: adding VLAN 0 to HW filter on device bond14 [ 670.612325][T32485] bond13: (slave bond14): making interface the new active one [ 670.625302][T32485] bond13: (slave bond14): Enslaving as an active interface with an up link [ 670.662593][T32492] vlan3: entered allmulticast mode [ 670.697055][T32494] macvlan0: entered promiscuous mode [ 670.740101][T32495] bond13: (slave gretap2): Enslaving as a backup interface with an up link [ 670.789037][T32504] bridge1: entered promiscuous mode [ 670.808252][T32504] bridge1: entered allmulticast mode [ 670.835725][T32504] bond0: Caught tx_queue_len zero misconfig [ 671.093558][T32527] syzkaller1: entered promiscuous mode [ 671.109827][T32527] syzkaller1: entered allmulticast mode [ 671.215644][T32542] bridge_slave_0: left allmulticast mode [ 671.221612][T32542] bridge_slave_0: left promiscuous mode [ 671.228606][T32542] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.246239][T32542] bridge_slave_1: left allmulticast mode [ 671.259258][T32542] bridge_slave_1: left promiscuous mode [ 671.265078][T32542] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.291631][T32542] bond0: (slave bond_slave_0): Releasing backup interface [ 671.313246][T32542] bond_slave_0: left promiscuous mode [ 671.363864][T32542] bond0: (slave bond_slave_1): Releasing backup interface [ 671.372261][T32542] bond_slave_1: left promiscuous mode [ 671.385448][T32542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.392851][T32542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.401147][T32542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.408532][T32542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.420786][T32556] netlink: 'syz.5.7534': attribute type 10 has an invalid length. [ 671.429125][T32542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.491692][T32556] team0: Port device  added [ 671.927056][T32589] bond7: entered promiscuous mode [ 671.957010][T32589] bond7: entered allmulticast mode [ 672.001238][T32589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 672.144143][T32603] __nla_validate_parse: 14 callbacks suppressed [ 672.144165][T32603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7549'. [ 672.150129][T32600] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7547'. [ 672.291559][T32610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7550'. [ 672.301114][T32610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7550'. [ 672.311059][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7550'. [ 672.371857][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7553'. [ 672.470789][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7553'. [ 672.564541][T32631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7557'. [ 672.683039][T32638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7558'. [ 672.806571][T32646] netlink: 'syz.2.7561': attribute type 83 has an invalid length. [ 672.831384][T32644] netlink: 'syz.2.7561': attribute type 83 has an invalid length. [ 672.932381][T32651] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 673.013962][T32658] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7566'. [ 673.059360][T32662] netlink: 'syz.1.7568': attribute type 1 has an invalid length. [ 673.115275][T32662] 8021q: adding VLAN 0 to HW filter on device bond15 [ 673.156464][T32663] bond15: (slave gretap3): making interface the new active one [ 673.166307][T32663] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 673.178100][T32666] netlink: 'syz.5.7569': attribute type 13 has an invalid length. [ 673.246102][T32673] lo speed is unknown, defaulting to 1000 [ 673.323641][T32669] netlink: 'syz.6.7571': attribute type 27 has an invalid length. [ 673.331542][T32669] netlink: 'syz.6.7571': attribute type 4 has an invalid length. [ 673.439144][T32681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.465233][T32681] netlink: 'syz.1.7575': attribute type 21 has an invalid length. [ 673.502021][T32681] netlink: 'syz.1.7575': attribute type 21 has an invalid length. [ 673.521224][T32684] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 673.545905][T32673] xfrm0 speed is unknown, defaulting to 1000 [ 673.561014][T32673] lo speed is unknown, defaulting to 1000 [ 673.574526][T32691] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 673.592190][T32687] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 673.603167][T32687] bond8 (unregistering): Released all slaves [ 673.951624][T32702] syzkaller1: entered promiscuous mode [ 673.962622][T32702] syzkaller1: entered allmulticast mode [ 674.846955][T32765] syzkaller0: entered promiscuous mode [ 674.869372][T32765] syzkaller0: entered allmulticast mode [ 674.904046][T32765] openvswitch: netlink: Multiple metadata blocks provided [ 674.993079][ T303] 8021q: VLANs not supported on ip6gre0 [ 675.544878][ T338] Bluetooth: MGMT ver 1.23 [ 675.627793][ T350] vlan2: entered allmulticast mode [ 675.632991][ T350] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 675.730457][ T360] xt_hashlimit: invalid rate [ 675.750104][ T363] x_tables: duplicate underflow at hook 2 [ 676.034843][ T390] team0: Device xfrm0 is of different type [ 676.176278][ T395] syzkaller0: entered promiscuous mode [ 676.193151][ T395] syzkaller0: entered allmulticast mode [ 676.493454][ T419] validate_nla: 1 callbacks suppressed [ 676.493501][ T419] netlink: 'syz.2.7645': attribute type 6 has an invalid length. [ 676.524021][ T418] netlink: 'syz.2.7645': attribute type 6 has an invalid length. [ 676.639197][ T433] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 676.712898][ T438] netlink: 'syz.6.7653': attribute type 1 has an invalid length. [ 676.776875][ T442] netlink: 'syz.4.7654': attribute type 3 has an invalid length. [ 676.896245][ T445] veth5: entered promiscuous mode [ 677.093639][ T453] sctp: [Deprecated]: syz.1.7658 (pid 453) Use of int in max_burst socket option. [ 677.093639][ T453] Use struct sctp_assoc_value instead [ 677.142310][ T452] syzkaller0: entered promiscuous mode [ 677.148723][ T452] syzkaller0: entered allmulticast mode [ 677.508844][ T456] __nla_validate_parse: 22 callbacks suppressed [ 677.508866][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7659'. [ 677.564297][ T463] netlink: 'syz.5.7661': attribute type 2 has an invalid length. [ 677.574774][ T463] netlink: 'syz.5.7661': attribute type 2 has an invalid length. [ 677.643565][ T468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.679518][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7663'. [ 677.708192][ T470] Cannot find add_set index 2 as target [ 677.780341][ T470] syzkaller1: entered promiscuous mode [ 677.785882][ T470] syzkaller1: entered allmulticast mode [ 677.796111][ T482] FAULT_INJECTION: forcing a failure. [ 677.796111][ T482] name failslab, interval 1, probability 0, space 0, times 0 [ 677.808760][ T482] CPU: 1 UID: 0 PID: 482 Comm: syz.6.7667 Not tainted syzkaller #0 PREEMPT(full) [ 677.808789][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.808802][ T482] Call Trace: [ 677.808811][ T482] [ 677.808820][ T482] dump_stack_lvl+0xe8/0x150 [ 677.808849][ T482] should_fail_ex+0x40c/0x560 [ 677.808874][ T482] should_failslab+0xa8/0x100 [ 677.808904][ T482] ? skb_clone+0x212/0x3a0 [ 677.808922][ T482] kmem_cache_alloc_noprof+0x87/0x650 [ 677.808959][ T482] skb_clone+0x212/0x3a0 [ 677.808978][ T482] bpf_clone_redirect+0x170/0x4b0 [ 677.809007][ T482] ? bpf_test_run+0x1d1/0x830 [ 677.809037][ T482] bpf_prog_c23103f528d5a825+0x22/0x2a [ 677.809057][ T482] bpf_test_run+0x354/0x830 [ 677.809096][ T482] ? __pfx_bpf_test_run+0x10/0x10 [ 677.809132][ T482] ? trace_kmem_cache_alloc+0x29/0xe0 [ 677.809156][ T482] ? csum_partial+0x239/0x2c0 [ 677.809189][ T482] ? skb_dst_set+0x72/0x140 [ 677.809218][ T482] bpf_prog_test_run_skb+0xe35/0x2230 [ 677.809260][ T482] ? __fget_files+0x3a2/0x420 [ 677.809283][ T482] ? __fget_files+0x2a/0x420 [ 677.809308][ T482] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 677.809338][ T482] bpf_prog_test_run+0x2c5/0x340 [ 677.809371][ T482] __sys_bpf+0x643/0x950 [ 677.809400][ T482] ? __pfx___sys_bpf+0x10/0x10 [ 677.809434][ T482] ? ksys_write+0x242/0x270 [ 677.809463][ T482] ? __pfx_ksys_write+0x10/0x10 [ 677.809493][ T482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.809515][ T482] __x64_sys_bpf+0x7c/0x90 [ 677.809540][ T482] do_syscall_64+0x174/0x580 [ 677.809567][ T482] ? trace_irq_disable+0x3b/0x140 [ 677.809595][ T482] ? clear_bhb_loop+0x40/0x90 [ 677.809619][ T482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.809639][ T482] RIP: 0033:0x7fc9cc19ce59 [ 677.809659][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.809677][ T482] RSP: 002b:00007fc9cd0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 677.809700][ T482] RAX: ffffffffffffffda RBX: 00007fc9cc415fa0 RCX: 00007fc9cc19ce59 [ 677.809717][ T482] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 677.809730][ T482] RBP: 00007fc9cd0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.809744][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.809757][ T482] R13: 00007fc9cc416038 R14: 00007fc9cc415fa0 R15: 00007ffd19fcae18 [ 677.809783][ T482] [ 678.130336][ T470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.148925][ T488] xt_cgroup: xt_cgroup: no path or classid specified [ 678.242252][ T490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7666'. [ 678.273881][ T490] ip6tnl0: Caught tx_queue_len zero misconfig [ 678.382607][ T499] netlink: 'syz.1.7672': attribute type 1 has an invalid length. [ 678.404604][ T499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7672'. [ 678.507029][ T508] netlink: 'syz.6.7677': attribute type 1 has an invalid length. [ 678.571723][ T508] 8021q: adding VLAN 0 to HW filter on device bond7 [ 678.607372][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7678'. [ 678.674753][ T521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7679'. [ 678.819123][ T528] netlink: 'syz.1.7682': attribute type 22 has an invalid length. [ 678.841315][ T526] syzkaller0: entered promiscuous mode [ 678.846960][ T528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7682'. [ 678.870528][ T526] syzkaller0: entered allmulticast mode [ 678.886011][ T528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7682'. [ 679.018005][ T533] syzkaller0: entered promiscuous mode [ 679.031608][ T533] syzkaller0: entered allmulticast mode [ 679.041239][ T538] netlink: 45 bytes leftover after parsing attributes in process `syz.5.7684'. [ 679.124179][ T533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7683'. [ 679.240472][ T7510] IPVS: starting estimator thread 0... [ 679.325181][ T562] IPVS: sh: FWM 3 0x00000003 - no destination available [ 679.328434][ T555] IPVS: using max 42 ests per chain, 100800 per kthread [ 679.349449][ T563] IPv6: NLM_F_CREATE should be specified when creating new route [ 679.470563][ T569] 8021q: adding VLAN 0 to HW filter on device bond10 [ 679.622262][ T583] lo: Caught tx_queue_len zero misconfig [ 680.109205][ T30] audit: type=1804 audit(1782436010.803:14): pid=617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7699" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2352 res=1 errno=0 [ 680.137963][ T616] Cannot find set identified by id 65534 to match [ 680.195053][ T30] audit: type=1800 audit(1782436010.833:15): pid=617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7699" name="cgroup.controllers" dev="tmpfs" ino=2352 res=0 errno=0 [ 680.332074][ T626] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 680.602221][ T651] 8021q: adding VLAN 0 to HW filter on device bond11 [ 680.994315][ T691] FAULT_INJECTION: forcing a failure. [ 680.994315][ T691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.009290][ T692] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 681.016209][ T691] CPU: 0 UID: 0 PID: 691 Comm: syz.2.7718 Not tainted syzkaller #0 PREEMPT(full) [ 681.016288][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.016321][ T691] Call Trace: [ 681.016343][ T691] [ 681.016374][ T691] dump_stack_lvl+0xe8/0x150 [ 681.016474][ T691] should_fail_ex+0x40c/0x560 [ 681.016557][ T691] _copy_from_user+0x2d/0xb0 [ 681.016635][ T691] ___sys_sendmsg+0x1c6/0x360 [ 681.016722][ T691] ? rcu_is_watching+0x15/0xb0 [ 681.016778][ T691] ? get_pid_task+0x20/0x1f0 [ 681.016833][ T691] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.016922][ T691] ? rcu_is_watching+0x15/0xb0 [ 681.017021][ T691] ? __fget_files+0x2a/0x420 [ 681.017078][ T691] ? __fget_files+0x3a2/0x420 [ 681.017163][ T691] __x64_sys_sendmsg+0x1b1/0x290 [ 681.017251][ T691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.017350][ T691] ? rcu_is_watching+0x15/0xb0 [ 681.017408][ T691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.017471][ T691] do_syscall_64+0x174/0x580 [ 681.017547][ T691] ? trace_irq_disable+0x3b/0x140 [ 681.017624][ T691] ? clear_bhb_loop+0x40/0x90 [ 681.017689][ T691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.017744][ T691] RIP: 0033:0x7f3b3c39ce59 [ 681.017813][ T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.017881][ T691] RSP: 002b:00007f3b3d2fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.017945][ T691] RAX: ffffffffffffffda RBX: 00007f3b3c615fa0 RCX: 00007f3b3c39ce59 [ 681.017989][ T691] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 681.018031][ T691] RBP: 00007f3b3d2fc090 R08: 0000000000000000 R09: 0000000000000000 [ 681.018066][ T691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.018103][ T691] R13: 00007f3b3c616038 R14: 00007f3b3c615fa0 R15: 00007ffe5c406498 [ 681.018171][ T691] [ 681.372891][ T702] 8021q: adding VLAN 0 to HW filter on device bond8 [ 681.408971][ T702] gretap0: entered promiscuous mode [ 681.417517][ T702] bond8: (slave gretap0): making interface the new active one [ 681.429944][ T702] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 681.482197][ T702] macvlan2: entered promiscuous mode [ 681.498157][ T702] macvlan2: entered allmulticast mode [ 681.510592][ T702] bond8: entered promiscuous mode [ 681.519318][ T702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 681.527089][ T702] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 681.543287][ T702] bond8: left promiscuous mode [ 681.561484][ T718] validate_nla: 7 callbacks suppressed [ 681.561506][ T718] netlink: 'syz.2.7726': attribute type 1 has an invalid length. [ 681.596706][ T718] 8021q: adding VLAN 0 to HW filter on device bond12 [ 681.808280][ T728] syzkaller1: entered promiscuous mode [ 681.814311][ T728] syzkaller1: entered allmulticast mode [ 681.908055][ T731] netlink: 'syz.6.7729': attribute type 12 has an invalid length. [ 681.938771][ T736] FAULT_INJECTION: forcing a failure. [ 681.938771][ T736] name failslab, interval 1, probability 0, space 0, times 0 [ 681.970517][ T736] CPU: 1 UID: 0 PID: 736 Comm: syz.1.7731 Not tainted syzkaller #0 PREEMPT(full) [ 681.970550][ T736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.970563][ T736] Call Trace: [ 681.970571][ T736] [ 681.970581][ T736] dump_stack_lvl+0xe8/0x150 [ 681.970609][ T736] should_fail_ex+0x40c/0x560 [ 681.970633][ T736] should_failslab+0xa8/0x100 [ 681.970666][ T736] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 681.970693][ T736] ? rcu_is_watching+0x15/0xb0 [ 681.970716][ T736] ? __alloc_skb+0x1d7/0x7a0 [ 681.970742][ T736] ? trace_irq_enable+0x3b/0x140 [ 681.970773][ T736] __alloc_skb+0x1d7/0x7a0 [ 681.970801][ T736] netlink_sendmsg+0x5d4/0xb40 [ 681.970826][ T736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.970846][ T736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 681.970867][ T736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.970893][ T736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.970912][ T736] ____sys_sendmsg+0x9b9/0xa20 [ 681.970947][ T736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.970978][ T736] ? lock_release+0x4b/0x3c0 [ 681.971020][ T736] ? import_iovec+0x73/0xa0 [ 681.971048][ T736] ___sys_sendmsg+0x2a5/0x360 [ 681.971076][ T736] ? rcu_is_watching+0x15/0xb0 [ 681.971096][ T736] ? get_pid_task+0x20/0x1f0 [ 681.971116][ T736] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.971147][ T736] ? rcu_is_watching+0x15/0xb0 [ 681.971182][ T736] ? __fget_files+0x2a/0x420 [ 681.971205][ T736] ? __fget_files+0x3a2/0x420 [ 681.971233][ T736] __x64_sys_sendmsg+0x1b1/0x290 [ 681.971266][ T736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.971304][ T736] ? rcu_is_watching+0x15/0xb0 [ 681.971325][ T736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.971346][ T736] do_syscall_64+0x174/0x580 [ 681.971373][ T736] ? trace_irq_disable+0x3b/0x140 [ 681.971401][ T736] ? clear_bhb_loop+0x40/0x90 [ 681.971425][ T736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.971445][ T736] RIP: 0033:0x7fa9b679ce59 [ 681.971464][ T736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.971482][ T736] RSP: 002b:00007fa9b766c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.971504][ T736] RAX: ffffffffffffffda RBX: 00007fa9b6a15fa0 RCX: 00007fa9b679ce59 [ 681.971521][ T736] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 681.971534][ T736] RBP: 00007fa9b766c090 R08: 0000000000000000 R09: 0000000000000000 [ 681.971548][ T736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.971560][ T736] R13: 00007fa9b6a16038 R14: 00007fa9b6a15fa0 R15: 00007ffc76ff4748 [ 681.971585][ T736] [ 682.254305][ T741] netlink: 'syz.6.7729': attribute type 11 has an invalid length. [ 682.263259][ T741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.398482][ T745] geneve2: entered promiscuous mode [ 682.414463][ T9025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 58857 - 0 [ 682.428162][ T9025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 58857 - 0 [ 682.446036][ T753] ip6gre0: Caught tx_queue_len zero misconfig [ 682.454028][ T753] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 682.513845][ T767] netlink: 'syz.6.7740': attribute type 1 has an invalid length. [ 682.522958][ T9025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 58857 - 0 [ 682.532542][ T9025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 58857 - 0 [ 682.545037][ T764] batadv0: Caught tx_queue_len zero misconfig [ 682.599349][ T767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 682.624994][ T753] __nla_validate_parse: 15 callbacks suppressed [ 682.625018][ T753] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7735'. [ 682.771284][ T781] netlink: 'syz.4.7745': attribute type 1 has an invalid length. [ 682.830881][ T789] FAULT_INJECTION: forcing a failure. [ 682.830881][ T789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.851048][ T789] CPU: 1 UID: 0 PID: 789 Comm: syz.2.7747 Not tainted syzkaller #0 PREEMPT(full) [ 682.851079][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.851093][ T789] Call Trace: [ 682.851100][ T789] [ 682.851109][ T789] dump_stack_lvl+0xe8/0x150 [ 682.851137][ T789] should_fail_ex+0x40c/0x560 [ 682.851163][ T789] _copy_from_iter+0x1d3/0x1660 [ 682.851190][ T789] ? rcu_is_watching+0x15/0xb0 [ 682.851215][ T789] ? __pfx__copy_from_iter+0x10/0x10 [ 682.851238][ T789] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 682.851270][ T789] ? netlink_sendmsg+0x650/0xb40 [ 682.851290][ T789] ? skb_put+0x112/0x210 [ 682.851319][ T789] netlink_sendmsg+0x6c0/0xb40 [ 682.851343][ T789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.851364][ T789] ? aa_sock_msg_perm+0xf1/0x1b0 [ 682.851386][ T789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.851412][ T789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.851432][ T789] ____sys_sendmsg+0x9b9/0xa20 [ 682.851467][ T789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.851498][ T789] ? lock_release+0x4b/0x3c0 [ 682.851531][ T789] ? import_iovec+0x73/0xa0 [ 682.851560][ T789] ___sys_sendmsg+0x2a5/0x360 [ 682.851590][ T789] ? rcu_is_watching+0x15/0xb0 [ 682.851610][ T789] ? get_pid_task+0x20/0x1f0 [ 682.851631][ T789] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.851662][ T789] ? rcu_is_watching+0x15/0xb0 [ 682.851696][ T789] ? __fget_files+0x2a/0x420 [ 682.851719][ T789] ? __fget_files+0x3a2/0x420 [ 682.851747][ T789] __x64_sys_sendmsg+0x1b1/0x290 [ 682.851780][ T789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.851817][ T789] ? rcu_is_watching+0x15/0xb0 [ 682.851839][ T789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.851861][ T789] do_syscall_64+0x174/0x580 [ 682.851907][ T789] ? trace_irq_disable+0x3b/0x140 [ 682.851950][ T789] ? clear_bhb_loop+0x40/0x90 [ 682.851974][ T789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.851995][ T789] RIP: 0033:0x7f3b3c39ce59 [ 682.852015][ T789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.852033][ T789] RSP: 002b:00007f3b3d2fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.852058][ T789] RAX: ffffffffffffffda RBX: 00007f3b3c615fa0 RCX: 00007f3b3c39ce59 [ 682.852074][ T789] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 682.852088][ T789] RBP: 00007f3b3d2fc090 R08: 0000000000000000 R09: 0000000000000000 [ 682.852101][ T789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.852114][ T789] R13: 00007f3b3c616038 R14: 00007f3b3c615fa0 R15: 00007ffe5c406498 [ 682.852140][ T789] [ 683.402823][ T815] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7757'. [ 683.633794][ T825] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.7762'. [ 683.677871][ T829] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode [ 683.685566][ T829] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode [ 683.695448][ T829] tipc: Resetting bearer [ 683.819878][ T839] netlink: 'syz.6.7763': attribute type 10 has an invalid length. [ 683.862966][ T839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.882751][ T839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 684.484020][ T838] Set syz1 is full, maxelem 65536 reached [ 684.742738][ T873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7772'. [ 684.855788][ T878] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 685.566311][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7774'. [ 685.575701][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7774'. [ 685.928365][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 686.656552][ T831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.824991][ T904] bond0: (slave gre0): refused to change device type [ 686.849923][ T905] team_slave_1: Caught tx_queue_len zero misconfig [ 686.863708][ T901] syzkaller0: entered promiscuous mode [ 686.872621][ T901] syzkaller0: entered allmulticast mode [ 686.898872][ T909] bond0: (slave bond_slave_1): Releasing backup interface [ 687.286944][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7790'. [ 687.340825][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7792'. [ 687.353021][ T953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7792'. [ 687.425556][ T966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.437719][ T966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.591584][ T982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7798'. [ 687.628805][ T982] veth5: entered promiscuous mode [ 687.703855][ T989] tipc: Started in network mode [ 687.709906][ T989] tipc: Node identity 62c83931f665, cluster identity 4711 [ 687.718332][ T989] tipc: Enabled bearer , priority 0 [ 687.726757][ T989] syzkaller0: entered promiscuous mode [ 687.733500][ T989] syzkaller0: entered allmulticast mode [ 687.749027][ T989] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 687.773599][ T989] tipc: Resetting bearer [ 687.780405][ T990] __nla_validate_parse: 1 callbacks suppressed [ 687.780425][ T990] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7800'. [ 687.796220][ T989] netlink: 'syz.5.7799': attribute type 1 has an invalid length. [ 687.830516][ T989] bond9: entered promiscuous mode [ 687.835939][ T989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.863012][ T989] x_tables: duplicate entry at hook 2 [ 687.870829][ T987] tipc: Resetting bearer [ 687.877666][ T998] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 687.886267][ T998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7802'. [ 687.886293][ T987] tipc: Disabling bearer [ 687.975477][ T1004] FAULT_INJECTION: forcing a failure. [ 687.975477][ T1004] name failslab, interval 1, probability 0, space 0, times 0 [ 687.988224][ T1004] CPU: 0 UID: 0 PID: 1004 Comm: syz.4.7804 Not tainted syzkaller #0 PREEMPT(full) [ 687.988249][ T1004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.988262][ T1004] Call Trace: [ 687.988272][ T1004] [ 687.988282][ T1004] dump_stack_lvl+0xe8/0x150 [ 687.988308][ T1004] should_fail_ex+0x40c/0x560 [ 687.988336][ T1004] should_failslab+0xa8/0x100 [ 687.988358][ T1004] ? skb_clone+0x212/0x3a0 [ 687.988371][ T1004] kmem_cache_alloc_noprof+0x87/0x650 [ 687.988394][ T1004] skb_clone+0x212/0x3a0 [ 687.988408][ T1004] bpf_clone_redirect+0x170/0x4b0 [ 687.988430][ T1004] ? bpf_test_run+0x1d1/0x830 [ 687.988451][ T1004] bpf_prog_c23103f528d5a825+0x22/0x2a [ 687.988465][ T1004] bpf_test_run+0x354/0x830 [ 687.988497][ T1004] ? __pfx_bpf_test_run+0x10/0x10 [ 687.988523][ T1004] ? trace_kmem_cache_alloc+0x29/0xe0 [ 687.988540][ T1004] ? csum_partial+0x239/0x2c0 [ 687.988565][ T1004] ? skb_dst_set+0x72/0x140 [ 687.988587][ T1004] bpf_prog_test_run_skb+0xe35/0x2230 [ 687.988617][ T1004] ? __fget_files+0x3a2/0x420 [ 687.988633][ T1004] ? __fget_files+0x2a/0x420 [ 687.988651][ T1004] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 687.988673][ T1004] bpf_prog_test_run+0x2c5/0x340 [ 687.988697][ T1004] __sys_bpf+0x643/0x950 [ 687.988718][ T1004] ? __pfx___sys_bpf+0x10/0x10 [ 687.988744][ T1004] ? ksys_write+0x242/0x270 [ 687.988764][ T1004] ? __pfx_ksys_write+0x10/0x10 [ 687.988786][ T1004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.988801][ T1004] __x64_sys_bpf+0x7c/0x90 [ 687.988819][ T1004] do_syscall_64+0x174/0x580 [ 687.988839][ T1004] ? trace_irq_disable+0x3b/0x140 [ 687.988859][ T1004] ? clear_bhb_loop+0x40/0x90 [ 687.988875][ T1004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.988890][ T1004] RIP: 0033:0x7ffad6f9ce59 [ 687.988903][ T1004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.988916][ T1004] RSP: 002b:00007ffad7ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.988932][ T1004] RAX: ffffffffffffffda RBX: 00007ffad7215fa0 RCX: 00007ffad6f9ce59 [ 687.988943][ T1004] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 687.988952][ T1004] RBP: 00007ffad7ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 687.988962][ T1004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.988978][ T1004] R13: 00007ffad7216038 R14: 00007ffad7215fa0 R15: 00007ffdb858fd18 [ 687.988997][ T1004] [ 688.656116][ T1030] syzkaller0: entered promiscuous mode [ 688.673105][ T1030] syzkaller0: entered allmulticast mode [ 688.693196][ T1038] netlink: 'syz.6.7814': attribute type 1 has an invalid length. [ 688.748099][ T1038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.779518][ T1045] nbd: couldn't find a device at index 1048580 [ 688.786886][ T1045] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 688.793935][ T1047] FAULT_INJECTION: forcing a failure. [ 688.793935][ T1047] name failslab, interval 1, probability 0, space 0, times 0 [ 688.806671][ T1047] CPU: 1 UID: 0 PID: 1047 Comm: syz.1.7816 Not tainted syzkaller #0 PREEMPT(full) [ 688.806698][ T1047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.806710][ T1047] Call Trace: [ 688.806720][ T1047] [ 688.806728][ T1047] dump_stack_lvl+0xe8/0x150 [ 688.806757][ T1047] should_fail_ex+0x40c/0x560 [ 688.806789][ T1047] should_failslab+0xa8/0x100 [ 688.806820][ T1047] ? skb_clone+0x212/0x3a0 [ 688.806839][ T1047] kmem_cache_alloc_noprof+0x87/0x650 [ 688.806870][ T1047] skb_clone+0x212/0x3a0 [ 688.806890][ T1047] bpf_clone_redirect+0x170/0x4b0 [ 688.806918][ T1047] ? bpf_test_run+0x1d1/0x830 [ 688.806948][ T1047] bpf_prog_c23103f528d5a825+0x22/0x2a [ 688.806967][ T1047] bpf_test_run+0x354/0x830 [ 688.807008][ T1047] ? __pfx_bpf_test_run+0x10/0x10 [ 688.807045][ T1047] ? trace_kmem_cache_alloc+0x29/0xe0 [ 688.807069][ T1047] ? csum_partial+0x239/0x2c0 [ 688.807104][ T1047] ? skb_dst_set+0x72/0x140 [ 688.807133][ T1047] bpf_prog_test_run_skb+0xe35/0x2230 [ 688.807173][ T1047] ? __fget_files+0x3a2/0x420 [ 688.807195][ T1047] ? __fget_files+0x2a/0x420 [ 688.807220][ T1047] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 688.807251][ T1047] bpf_prog_test_run+0x2c5/0x340 [ 688.807284][ T1047] __sys_bpf+0x643/0x950 [ 688.807312][ T1047] ? __pfx___sys_bpf+0x10/0x10 [ 688.807348][ T1047] ? ksys_write+0x242/0x270 [ 688.807378][ T1047] ? __pfx_ksys_write+0x10/0x10 [ 688.807407][ T1047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.807429][ T1047] __x64_sys_bpf+0x7c/0x90 [ 688.807455][ T1047] do_syscall_64+0x174/0x580 [ 688.807482][ T1047] ? trace_irq_disable+0x3b/0x140 [ 688.807510][ T1047] ? clear_bhb_loop+0x40/0x90 [ 688.807533][ T1047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.807554][ T1047] RIP: 0033:0x7fa9b679ce59 [ 688.807573][ T1047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.807591][ T1047] RSP: 002b:00007fa9b766c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 688.807615][ T1047] RAX: ffffffffffffffda RBX: 00007fa9b6a15fa0 RCX: 00007fa9b679ce59 [ 688.807631][ T1047] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 688.807645][ T1047] RBP: 00007fa9b766c090 R08: 0000000000000000 R09: 0000000000000000 [ 688.807659][ T1047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.807672][ T1047] R13: 00007fa9b6a16038 R14: 00007fa9b6a15fa0 R15: 00007ffc76ff4748 [ 688.807697][ T1047] [ 689.152668][ T1053] netlink: 'syz.4.7817': attribute type 3 has an invalid length. [ 689.163130][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7817'. [ 689.492660][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7824'. [ 689.526550][ T1083] netlink: 'syz.1.7821': attribute type 23 has an invalid length. [ 689.620619][ T1098] syzkaller0: entered promiscuous mode [ 689.626973][ T1098] syzkaller0: entered allmulticast mode [ 690.063174][ T1126] bond0: (slave bond_slave_1): Releasing backup interface [ 690.244475][ T1136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7843'. [ 690.286231][ T1136] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7843'. [ 690.704236][ T1152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7848'. [ 690.924667][ T1160] sctp: [Deprecated]: syz.5.7853 (pid 1160) Use of int in max_burst socket option deprecated. [ 690.924667][ T1160] Use struct sctp_assoc_value instead [ 690.981646][ T30] audit: type=1800 audit(1782436021.673:16): pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7855" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1764 res=0 errno=0 [ 691.022931][ T1171] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 691.032850][ T1171] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 691.217351][ T1183] netlink: 'syz.6.7859': attribute type 62 has an invalid length. [ 691.302403][ T1189] FAULT_INJECTION: forcing a failure. [ 691.302403][ T1189] name failslab, interval 1, probability 0, space 0, times 0 [ 691.316036][ T1189] CPU: 1 UID: 0 PID: 1189 Comm: syz.2.7860 Not tainted syzkaller #0 PREEMPT(full) [ 691.316068][ T1189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.316082][ T1189] Call Trace: [ 691.316090][ T1189] [ 691.316100][ T1189] dump_stack_lvl+0xe8/0x150 [ 691.316128][ T1189] should_fail_ex+0x40c/0x560 [ 691.316154][ T1189] should_failslab+0xa8/0x100 [ 691.316185][ T1189] ? skb_clone+0x212/0x3a0 [ 691.316203][ T1189] kmem_cache_alloc_noprof+0x87/0x650 [ 691.316235][ T1189] skb_clone+0x212/0x3a0 [ 691.316255][ T1189] bpf_clone_redirect+0x170/0x4b0 [ 691.316285][ T1189] ? bpf_test_run+0x1d1/0x830 [ 691.316315][ T1189] bpf_prog_c23103f528d5a825+0x22/0x2a [ 691.316334][ T1189] bpf_test_run+0x354/0x830 [ 691.316367][ T1189] ? trace_irq_enable+0x3b/0x140 [ 691.316403][ T1189] ? __pfx_bpf_test_run+0x10/0x10 [ 691.316440][ T1189] ? csum_partial+0x239/0x2c0 [ 691.316476][ T1189] ? skb_dst_set+0x72/0x140 [ 691.316508][ T1189] bpf_prog_test_run_skb+0xe35/0x2230 [ 691.316558][ T1189] ? __fget_files+0x3a2/0x420 [ 691.316580][ T1189] ? __fget_files+0x2a/0x420 [ 691.316606][ T1189] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 691.316637][ T1189] bpf_prog_test_run+0x2c5/0x340 [ 691.316670][ T1189] __sys_bpf+0x643/0x950 [ 691.316699][ T1189] ? __pfx___sys_bpf+0x10/0x10 [ 691.316735][ T1189] ? ksys_write+0x242/0x270 [ 691.316765][ T1189] ? __pfx_ksys_write+0x10/0x10 [ 691.316790][ T1189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.316814][ T1189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.316836][ T1189] __x64_sys_bpf+0x7c/0x90 [ 691.316861][ T1189] do_syscall_64+0x174/0x580 [ 691.316890][ T1189] ? clear_bhb_loop+0x40/0x90 [ 691.316914][ T1189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.316935][ T1189] RIP: 0033:0x7f3b3c39ce59 [ 691.316954][ T1189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.316973][ T1189] RSP: 002b:00007f3b3d2fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.316995][ T1189] RAX: ffffffffffffffda RBX: 00007f3b3c615fa0 RCX: 00007f3b3c39ce59 [ 691.317011][ T1189] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 691.317026][ T1189] RBP: 00007f3b3d2fc090 R08: 0000000000000000 R09: 0000000000000000 [ 691.317039][ T1189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.317052][ T1189] R13: 00007f3b3c616038 R14: 00007f3b3c615fa0 R15: 00007ffe5c406498 [ 691.317079][ T1189] [ 691.862099][ T1211] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7868'. [ 692.051435][ T1210] netlink: 'syz.6.7867': attribute type 7 has an invalid length. [ 692.076283][ T1222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7872'. [ 692.161476][ T1224] netlink: 'syz.5.7869': attribute type 11 has an invalid length. [ 692.426288][ T1244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7876'. [ 692.670700][ T1257] vlan1: entered allmulticast mode [ 692.676319][ T1257] veth1_virt_wifi: entered allmulticast mode [ 692.714739][ T1261] IPv6: addrconf: prefix option has invalid lifetime [ 692.801503][ T1269] __nla_validate_parse: 1 callbacks suppressed [ 692.801523][ T1269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7880'. [ 692.831082][ T1268] syzkaller1: entered promiscuous mode [ 692.847186][ T1268] syzkaller1: entered allmulticast mode [ 692.898628][ T1273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7885'. [ 692.910514][ T1273] syzkaller0: entered promiscuous mode [ 692.918364][ T1277] netlink: 'syz.1.7887': attribute type 7 has an invalid length. [ 692.918389][ T1277] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7887'. [ 692.921317][ T1278] netlink: 'syz.1.7887': attribute type 7 has an invalid length. [ 692.921340][ T1278] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7887'. [ 692.957441][ T1273] syzkaller0: entered allmulticast mode [ 692.987860][ T1275] bond13: option all_slaves_active: invalid value (222) [ 692.998119][ T1275] bond13 (unregistering): Released all slaves [ 693.127910][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 693.201470][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.208891][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.856165][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.878367][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.391401][ T9024] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.425875][ T9024] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.465911][ T9024] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.477036][ T9024] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.492319][ T9024] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.511788][ T9024] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.528871][ T9024] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.541830][ T9024] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.794921][ T1356] netlink: 'syz.6.7906': attribute type 11 has an invalid length. [ 694.814878][ T1356] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7906'. [ 694.835453][ T1357] tipc: Enabling of bearer rejected, already enabled [ 694.887460][ T1353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7905'. [ 694.965996][ T1363] netlink: 'syz.5.7908': attribute type 1 has an invalid length. [ 695.001498][ T1363] 8021q: adding VLAN 0 to HW filter on device bond10 [ 695.039286][ T1378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7913'. [ 695.052072][ T1363] bond10: (slave gretap1): making interface the new active one [ 695.068860][ T1363] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 695.196421][ T1385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7916'. [ 695.222194][ T1390] sock: sock_set_timeout: `syz.2.7918' (pid 1390) tries to set negative timeout [ 695.271340][ T1393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7920'. [ 695.294220][ T1393] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 695.480061][ T1411] syzkaller0: entered promiscuous mode [ 695.485743][ T1411] syzkaller0: entered allmulticast mode [ 695.494819][ T1411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7923'. [ 695.849665][ T1437] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 695.857472][ T1437] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 695.981881][ T1445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.002801][ T1445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.032255][ T1445] tipc: Resetting bearer [ 696.103406][ T1444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.421324][ T1475] netlink: 'syz.6.7940': attribute type 29 has an invalid length. [ 696.441340][ T1475] netlink: 'syz.6.7940': attribute type 29 has an invalid length. [ 696.453486][ T1477] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 696.469821][ T1481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.547082][ T1486] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 696.605080][ T1488] can: request_module (can-proto-0) failed. [ 696.633633][ T1494] netlink: 'syz.1.7947': attribute type 1 has an invalid length. [ 696.646319][ T1494] netlink: 'syz.1.7947': attribute type 2 has an invalid length. [ 696.658878][ T1494] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 696.740615][ T1500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.819761][ T1503] sctp: [Deprecated]: syz.5.7950 (pid 1503) Use of int in max_burst socket option deprecated. [ 696.819761][ T1503] Use struct sctp_assoc_value instead [ 697.103072][ T1520] veth0: entered promiscuous mode [ 697.175319][ T1519] veth0: left promiscuous mode [ 697.354883][ T1538] syzkaller0: entered promiscuous mode [ 697.373080][ T1538] syzkaller0: entered allmulticast mode [ 697.415717][ T1542] 8021q: adding VLAN 0 to HW filter on device bond13 [ 697.423753][ T1542] bond0: (slave bond13): Enslaving as an active interface with an up link [ 697.652501][ T1555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.785832][ T1567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.913844][ T1573] __nla_validate_parse: 10 callbacks suppressed [ 697.913880][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7974'. [ 697.938602][ T1573] netlink: 'syz.4.7974': attribute type 1 has an invalid length. [ 697.946387][ T1573] netlink: 'syz.4.7974': attribute type 1 has an invalid length. [ 697.954143][ T1573] netlink: 'syz.4.7974': attribute type 2 has an invalid length. [ 697.961946][ T1573] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7974'. [ 698.039041][ T1587] netlink: 'syz.5.7976': attribute type 11 has an invalid length. [ 698.055776][ T1587] netlink: 'syz.5.7976': attribute type 4 has an invalid length. [ 698.065881][ T1587] netlink: 'syz.5.7976': attribute type 6 has an invalid length. [ 698.074680][ T1587] netlink: 199556 bytes leftover after parsing attributes in process `syz.5.7976'. [ 698.085121][ T1591] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 698.158259][ T5624] Bluetooth: hci6: link tx timeout [ 698.163447][ T5624] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 698.173136][ T5631] Bluetooth: hci6: link tx timeout [ 698.179717][ T5631] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 698.321001][ T1612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7986'. [ 698.394060][ T1615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7987'. [ 698.484803][ T1620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7988'. [ 698.559061][ T1629] netlink: 'syz.4.7990': attribute type 1 has an invalid length. [ 698.612945][ T1629] 8021q: adding VLAN 0 to HW filter on device bond13 [ 698.637730][ T1629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7990'. [ 698.733258][ T1642] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7993'. [ 698.751887][ T1643] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 698.945113][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7996'. [ 699.367652][ T1692] netlink: 'syz.2.8004': attribute type 1 has an invalid length. [ 699.398105][ T1692] 8021q: adding VLAN 0 to HW filter on device bond14 [ 699.409171][ T1690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8003'. [ 699.799799][ T1724] tipc: Enabling of bearer rejected, failed to enable media [ 700.248329][ T5631] Bluetooth: hci6: command 0x0406 tx timeout [ 700.532899][ T1778] lo speed is unknown, defaulting to 1000 [ 700.727032][ T1778] xfrm0 speed is unknown, defaulting to 1000 [ 700.744721][ T1778] lo speed is unknown, defaulting to 1000 [ 700.826654][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.894804][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.953675][ T1805] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 700.974281][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.021324][ T1805] tipc: Enabled bearer , priority 10 [ 701.051553][ T1817] batadv0: Caught tx_queue_len zero misconfig [ 701.523274][ T1838] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 702.162969][ T1893] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 702.356090][ T1917] netlink: 'syz.5.8071': attribute type 10 has an invalid length. [ 702.466527][ T1922] netlink: 'syz.4.8073': attribute type 1 has an invalid length. [ 702.475073][ T1922] netlink: 'syz.4.8073': attribute type 2 has an invalid length. [ 702.935981][ T1961] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 702.959137][ T1961] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 703.011291][ T1966] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 703.022362][ T1966] __nla_validate_parse: 11 callbacks suppressed [ 703.022381][ T1966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8086'. [ 703.085923][ T1970] syzkaller0: entered promiscuous mode [ 703.092708][ T1970] syzkaller0: entered allmulticast mode [ 703.102751][ T1974] geneve2: entered promiscuous mode [ 703.144057][ T1977] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8088'. [ 703.353338][ T1983] openvswitch: netlink: IPv4 tun info is not correct [ 703.360598][ T1983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8092'. [ 703.373586][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 704.088150][ T5631] Bluetooth: hci6: command 0x0406 tx timeout [ 704.433825][ T2047] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 704.635422][ T2065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 704.662046][ T2053] bridge3: entered promiscuous mode [ 704.667886][ T2053] bridge3: entered allmulticast mode [ 704.886243][ T2079] validate_nla: 2 callbacks suppressed [ 704.886265][ T2079] netlink: 'syz.6.8116': attribute type 1 has an invalid length. [ 704.928417][ T2079] 8021q: adding VLAN 0 to HW filter on device bond11 [ 704.938706][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8116'. [ 704.961002][ T2084] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8115'. [ 704.979250][ T2084] netlink: 'syz.5.8115': attribute type 2 has an invalid length. [ 704.988794][ T2084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8115'. [ 705.092191][ T2092] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8118'. [ 705.195146][ T2088] gtp0: entered allmulticast mode [ 705.244601][ T2103] netlink: 'syz.4.8122': attribute type 1 has an invalid length. [ 705.254851][ T2103] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8122'. [ 705.555222][ T2129] syzkaller0: entered promiscuous mode [ 705.560926][ T2129] syzkaller0: entered allmulticast mode [ 705.922140][ T2146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.514569][ T2155] netlink: 'syz.6.8136': attribute type 1 has an invalid length. [ 707.551012][ T2155] 8021q: adding VLAN 0 to HW filter on device bond12 [ 707.601993][ T2155] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 707.621742][ T2155] macvlan2: entered promiscuous mode [ 707.627099][ T2155] macvlan2: entered allmulticast mode [ 707.631644][ T2167] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8138'. [ 707.637784][ T2155] bond12: entered promiscuous mode [ 707.646613][ T2155] veth0_to_bond: entered promiscuous mode [ 707.652379][ T2169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8139'. [ 707.654470][ T2155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 707.668952][ T2155] bond12: left promiscuous mode [ 707.673852][ T2155] veth0_to_bond: left promiscuous mode [ 707.890361][ T2186] netlink: 'syz.1.8146': attribute type 3 has an invalid length. [ 707.914899][ T2187] netlink: 'syz.1.8146': attribute type 3 has an invalid length. [ 708.165987][ T2208] __nla_validate_parse: 4 callbacks suppressed [ 708.166021][ T2208] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8151'. [ 708.196716][ T2208] syzkaller1: entered promiscuous mode [ 708.203359][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8152'. [ 708.206406][ T2208] syzkaller1: entered allmulticast mode [ 708.219143][ T2212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8152'. [ 708.228115][ T2212] netlink: 'syz.5.8152': attribute type 14 has an invalid length. [ 708.235970][ T2212] netlink: 'syz.5.8152': attribute type 13 has an invalid length. [ 708.285250][ T2215] sit0: Caught tx_queue_len zero misconfig [ 708.518996][ T1595] Bluetooth: hci2: command 0x0406 tx timeout [ 708.520070][ T2147] Bluetooth: hci3: command 0x0406 tx timeout [ 708.598050][ T2229] pimreg: entered allmulticast mode [ 708.796223][ T2243] bond15: entered promiscuous mode [ 708.816865][ T2243] macvlan2: entered promiscuous mode [ 708.826562][ T2243] macvlan2: entered allmulticast mode [ 708.835089][ T2243] bond15: (slave macvlan2): Opening slave failed [ 708.970133][ T2258] netlink: 'syz.4.8165': attribute type 1 has an invalid length. [ 708.980033][ T2258] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8165'. [ 709.039288][ T2263] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8166'. [ 709.164054][ T2272] netlink: 'syz.5.8169': attribute type 1 has an invalid length. [ 709.478503][ T2294] syzkaller0: entered promiscuous mode [ 709.485777][ T2294] syzkaller0: entered allmulticast mode [ 709.515485][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8178'. [ 709.524516][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8178'. [ 709.614912][ T2299] 8021q: adding VLAN 0 to HW filter on device bond11 [ 709.636806][ T2306] bond11: (slave geneve4): making interface the new active one [ 709.647546][ T2306] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 709.662852][ T2311] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8179'. [ 709.675473][ T9034] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.685442][ T9034] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.712874][ T9034] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.733258][ T9034] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.836043][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8180'. [ 709.922606][ T2321] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20000 [ 709.971156][ T2326] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 710.083687][ T2338] openvswitch: netlink: IP tunnel dst address not specified [ 710.160668][ T2341] tipc: Enabling of bearer rejected, media not registered [ 710.226976][ T2349] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 710.238429][ T2349] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 710.275362][ T2346] gre0: entered promiscuous mode [ 710.289806][ T2346] gre0: entered allmulticast mode [ 710.301400][ T2358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8195'. [ 710.439235][ T2355] lo speed is unknown, defaulting to 1000 [ 710.600904][ T2368] validate_nla: 3 callbacks suppressed [ 710.600925][ T2368] netlink: 'syz.5.8198': attribute type 1 has an invalid length. [ 710.654429][ T2368] 8021q: adding VLAN 0 to HW filter on device bond12 [ 710.670474][ T2355] xfrm0 speed is unknown, defaulting to 1000 [ 710.682086][ T2355] lo speed is unknown, defaulting to 1000 [ 710.813253][ T2375] netlink: 'syz.5.8200': attribute type 1 has an invalid length. [ 710.886634][ T2380] C: renamed from lo [ 710.907468][ T2380] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 711.079957][ T2384] 8021q: adding VLAN 0 to HW filter on device bond13 [ 711.095859][ T2387] netlink: 'syz.5.8203': attribute type 1 has an invalid length. [ 711.185398][ T2385] sit3: entered promiscuous mode [ 711.205867][ T2385] sit3: entered allmulticast mode [ 711.573697][ T808] C speed is unknown, defaulting to 1000 [ 711.582841][ T2412] ip6t_rpfilter: unknown options [ 712.283834][ T2472] veth1_macvtap: left promiscuous mode [ 712.293410][ T2472] macsec0: entered promiscuous mode [ 712.299133][ T2472] macsec0: entered allmulticast mode [ 712.314783][ T2472] veth1_macvtap: entered promiscuous mode [ 712.320755][ T2472] veth1_macvtap: entered allmulticast mode [ 712.338400][ T2472] macsec0: left promiscuous mode [ 712.344936][ T2472] macsec0: left allmulticast mode [ 712.353779][ T2472] veth1_macvtap: left allmulticast mode [ 712.367028][ T2477] netlink: 'syz.6.8231': attribute type 23 has an invalid length. [ 712.425307][ T2485] openvswitch: netlink: Missing key (keys=40, expected=80) [ 712.477943][ T2487] syzkaller0: entered promiscuous mode [ 712.484398][ T2487] syzkaller0: entered allmulticast mode [ 712.501365][ T2490] netlink: 'syz.1.8234': attribute type 1 has an invalid length. [ 712.537167][ T2493] ip6erspan0: entered allmulticast mode [ 713.084277][ T2547] batadv_slave_0: Caught tx_queue_len zero misconfig [ 713.159137][ T2552] syzkaller0: entered promiscuous mode [ 713.164785][ T2552] syzkaller0: entered allmulticast mode [ 713.178461][ T2552] tipc: Started in network mode [ 713.183435][ T2552] tipc: Node identity beb3891a927e, cluster identity 4711 [ 713.191993][ T2552] tipc: Enabled bearer , priority 0 [ 713.201022][ T2550] tipc: Resetting bearer [ 713.214788][ T2550] tipc: Disabling bearer [ 713.305489][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.305489][ T2565] Use struct sctp_assoc_value instead [ 713.331742][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.331742][ T2565] Use struct sctp_assoc_value instead [ 713.346328][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.346328][ T2565] Use struct sctp_assoc_value instead [ 713.375544][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.375544][ T2565] Use struct sctp_assoc_value instead [ 713.393687][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.393687][ T2565] Use struct sctp_assoc_value instead [ 713.412392][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.412392][ T2565] Use struct sctp_assoc_value instead [ 713.412562][ T2569] __nla_validate_parse: 8 callbacks suppressed [ 713.412596][ T2569] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8255'. [ 713.431467][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.431467][ T2565] Use struct sctp_assoc_value instead [ 713.459989][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.459989][ T2565] Use struct sctp_assoc_value instead [ 713.473032][ T2569] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8255'. [ 713.480070][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.480070][ T2565] Use struct sctp_assoc_value instead [ 713.499570][ T2565] sctp: [Deprecated]: syz.1.8254 (pid 2565) Use of int in maxseg socket option. [ 713.499570][ T2565] Use struct sctp_assoc_value instead [ 713.520177][ T2572] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 713.528699][ T2572] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 713.555192][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880843ca800: rx timeout, send abort [ 713.673212][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8256'. [ 713.683233][ T2586] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8256'. [ 713.789742][ T2596] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.8262'. [ 713.896836][ T2603] netlink: 'syz.4.8264': attribute type 10 has an invalid length. [ 713.905603][ T2603] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8264'. [ 713.978716][ T2615] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 714.055299][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880843c9c00: rx timeout, send abort [ 714.063822][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880843ca800: abort rx timeout. Force session deactivation [ 714.132334][ T2619] netlink: zone id is out of range [ 714.138563][ T2619] netlink: zone id is out of range [ 714.143755][ T2619] netlink: zone id is out of range [ 714.149263][ T2619] netlink: zone id is out of range [ 714.154445][ T2619] netlink: zone id is out of range [ 714.192298][ T2619] netlink: zone id is out of range [ 714.198971][ T2619] netlink: zone id is out of range [ 714.267971][ T2639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8272'. [ 714.276983][ T2639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8272'. [ 714.337773][ T2646] netlink: 'syz.5.8273': attribute type 1 has an invalid length. [ 714.354697][ T2648] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8274'. [ 714.416909][ T2659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8273'. [ 714.442212][ T2659] syzkaller0: entered promiscuous mode [ 714.447740][ T2659] syzkaller0: entered allmulticast mode [ 714.563730][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880843c9c00: abort rx timeout. Force session deactivation [ 714.782989][ T2694] netlink: 'syz.1.8286': attribute type 1 has an invalid length. [ 714.829436][ T2694] 8021q: adding VLAN 0 to HW filter on device bond16 [ 714.872861][ T2693] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 714.892208][ T2693] macvlan2: entered promiscuous mode [ 714.899257][ T2693] macvlan2: entered allmulticast mode [ 714.905434][ T2693] bond16: entered promiscuous mode [ 714.912784][ T2693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 714.920982][ T2693] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 714.944772][ T2693] bond16: left promiscuous mode [ 715.026339][ T2717] netlink: 'syz.5.8290': attribute type 1 has an invalid length. [ 715.053476][ T2717] 8021q: adding VLAN 0 to HW filter on device bond13 [ 715.250360][ T2728] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 715.261066][ T2727] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 716.202362][ T2779] xt_hashlimit: size too large, truncated to 1048576 [ 717.046793][ T2826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.085450][ T2838] ip6gre0: Master is either lo or non-ether device [ 717.094095][ T2838] netlink: 'syz.1.8318': attribute type 4 has an invalid length. [ 717.340270][ T2845] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 717.348069][ T2845] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 717.430666][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.437976][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 717.445217][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 717.456710][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 717.464164][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 717.475790][ T2847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.775719][ T2896] net_ratelimit: 47 callbacks suppressed [ 717.775742][ T2896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.120345][ T2859] lo speed is unknown, defaulting to 1000 [ 718.152922][ T2918] x_tables: duplicate underflow at hook 2 [ 718.215098][ T2921] batadv_slave_0: Caught tx_queue_len zero misconfig [ 718.475777][ T2930] __nla_validate_parse: 16 callbacks suppressed [ 718.475798][ T2930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8339'. [ 718.501613][ T2859] xfrm0 speed is unknown, defaulting to 1000 [ 718.506369][ T2932] netlink: 'syz.6.8340': attribute type 8 has an invalid length. [ 718.536186][ T2859] C speed is unknown, defaulting to 1000 [ 718.644502][ T2942] macsec0: entered promiscuous mode [ 718.658147][ T2942] macsec0: entered allmulticast mode [ 718.855926][ T2958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8346'. [ 718.879755][ T2956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8347'. [ 718.900808][ T2958] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8346'. [ 719.228686][ T2859] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.251100][ T2859] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.296453][ T2859] bridge_slave_0: entered allmulticast mode [ 719.306904][ T2859] bridge_slave_0: entered promiscuous mode [ 719.320837][ T2859] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.330183][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.338310][ T2859] bridge_slave_1: entered allmulticast mode [ 719.347375][ T2859] bridge_slave_1: entered promiscuous mode [ 719.394449][ T2859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.421382][ T2859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.492584][ T2859] team0: Port device team_slave_0 added [ 719.503008][ T2859] team0: Port device team_slave_1 added [ 719.528287][ T5624] Bluetooth: hci7: command tx timeout [ 719.552912][ T2991] netlink: 'syz.1.8356': attribute type 21 has an invalid length. [ 719.608687][ T2991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8356'. [ 719.643126][ T2859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.680584][ T2859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.727090][ T2859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.758123][ T2991] netlink: 'syz.1.8356': attribute type 5 has an invalid length. [ 719.773831][ T2991] netlink: 'syz.1.8356': attribute type 6 has an invalid length. [ 719.792462][ T2991] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8356'. [ 719.805414][ T2859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.838503][ T2859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.865223][ T2859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.907043][ T2859] hsr_slave_0: entered promiscuous mode [ 719.913725][ T2859] hsr_slave_1: entered promiscuous mode [ 719.953231][ T2859] debugfs: 'hsr0' already exists in 'hsr' [ 719.959024][ T2859] Cannot create hsr debugfs directory [ 720.034884][ T3012] pimreg: left allmulticast mode [ 720.145290][ T2859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.163628][ T2859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.172513][ T2859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 720.182688][ T2859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.190825][ T2859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 720.200169][ T2859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.208303][ T2859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 720.217998][ T2859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.244055][ T2859] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.251281][ T2859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.258746][ T2859] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.265900][ T2859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.290715][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.349447][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.350444][ T3018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8363'. [ 720.454433][ T3033] netlink: 'syz.6.8366': attribute type 1 has an invalid length. [ 720.575633][ T2859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.601028][ T3041] set match dimension is over the limit! [ 720.644577][ T2859] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.679445][ T3043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8369'. [ 720.722804][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.730000][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.765784][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.772994][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.832945][ T3049] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8371'. [ 720.875077][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8371'. [ 721.145644][ T3072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.596492][ T3102] veth0_vlan: left promiscuous mode [ 721.608923][ T5631] Bluetooth: hci7: command tx timeout [ 721.653972][ T3102] veth1_vlan: left promiscuous mode [ 721.796465][ T137] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.806809][ T137] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.818620][ T137] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 721.829176][ T3108] pimreg: left allmulticast mode [ 721.840927][ T3115] can: request_module (can-proto-0) failed. [ 721.849989][ T3107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.861025][ T3107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.871427][ T3107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 721.891122][ T137] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.900122][ T137] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.909422][ T137] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 721.919660][T30271] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.929981][T30271] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.938937][T30271] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 721.951162][ T2859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.130952][ T2859] veth0_vlan: entered promiscuous mode [ 722.145743][ T2859] veth1_vlan: entered promiscuous mode [ 722.172972][ T3129] sctp: [Deprecated]: syz.4.8393 (pid 3129) Use of int in max_burst socket option. [ 722.172972][ T3129] Use struct sctp_assoc_value instead [ 722.196612][ T2859] veth0_macvtap: entered promiscuous mode [ 722.218309][ T2859] veth1_macvtap: entered promiscuous mode [ 722.251969][ T2859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.268331][ T3131] syzkaller0: entered promiscuous mode [ 722.273859][ T3131] syzkaller0: entered allmulticast mode [ 722.286664][ T2859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.317502][ T9024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.331727][ T9024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.374528][ T9024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.383331][ T9024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.484025][ T9024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.491911][ T9024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.567449][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 722.621941][ T9024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.643198][ T9024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.817076][ T3158] netlink: 'syz.1.8400': attribute type 1 has an invalid length. [ 722.904538][ T3164] Bluetooth: MGMT ver 1.23 [ 722.946033][ T3164] macvlan2: entered promiscuous mode [ 722.952918][ T3164] macvlan2: entered allmulticast mode [ 722.961444][ T3164] bond17: entered promiscuous mode [ 722.968356][ T3164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 722.985497][ T3164] bond17: left promiscuous mode [ 723.535737][ T3201] __nla_validate_parse: 6 callbacks suppressed [ 723.535757][ T3201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8413'. [ 723.576856][ T2147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 723.586283][ T2147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 723.595653][ T2147] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 723.611731][ T2147] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 723.620627][ T2147] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 723.688990][ T2147] Bluetooth: hci7: command 0x040f tx timeout [ 724.266250][ T3249] veth0_macvtap: Caught tx_queue_len zero misconfig [ 724.309558][ T3249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.350545][ T3256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.363427][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8424'. [ 724.399648][ T3204] lo speed is unknown, defaulting to 1000 [ 724.435057][ T3256] syzkaller0: entered promiscuous mode [ 724.451237][ T3256] syzkaller0: entered allmulticast mode [ 724.549089][ T3204] xfrm0 speed is unknown, defaulting to 1000 [ 724.556440][ T3204] C speed is unknown, defaulting to 1000 [ 724.636075][ T3271] netlink: 'syz.7.8429': attribute type 1 has an invalid length. [ 724.643899][ T3271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.651134][ T3271] IPv6: NLM_F_CREATE should be set when creating new route [ 724.703750][ T3275] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8430'. [ 724.898806][ T3204] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.906799][ T3204] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.915488][ T3204] bridge_slave_0: entered allmulticast mode [ 724.936750][ T3204] bridge_slave_0: entered promiscuous mode [ 724.949849][ T3204] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.957515][ T3204] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.964879][ T3204] bridge_slave_1: entered allmulticast mode [ 724.980777][ T3204] bridge_slave_1: entered promiscuous mode [ 725.000065][ T3290] gre1: entered promiscuous mode [ 725.083046][ T3204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.103253][ T3204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.165966][ T3204] team0: Port device team_slave_0 added [ 725.180287][ T3204] team0: Port device team_slave_1 added [ 725.226731][ T3204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.235207][ T3204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.266680][ T3204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.301411][ T3204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.325894][ T3204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.392445][ T3204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.471525][ T3317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8441'. [ 725.485964][ T3317] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8441'. [ 725.539317][ T3320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8442'. [ 725.551731][ T3204] hsr_slave_0: entered promiscuous mode [ 725.562387][ T3204] hsr_slave_1: entered promiscuous mode [ 725.570344][ T3204] debugfs: 'hsr0' already exists in 'hsr' [ 725.576638][ T3204] Cannot create hsr debugfs directory [ 725.688366][ T5624] Bluetooth: hci8: command tx timeout [ 725.732411][ T3204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.762264][ T3204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.772823][ T5624] Bluetooth: hci7: command 0x040f tx timeout [ 725.856058][ T3204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.888159][ T3204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.920150][ T3341] bridge3: entered promiscuous mode [ 725.925441][ T3341] bridge3: entered allmulticast mode [ 725.933678][ T3341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.025209][ T3204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.053296][ T3204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.150772][ T3204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.166176][ T3204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.303194][ T3361] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 726.312404][ T3361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.394033][ T3204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.413533][ T3204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.428688][ T3204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.445500][ T3204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.465820][ T3204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.479885][ T3204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.490438][ T3204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 726.506094][ T3204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.653644][ T3414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 726.743217][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.763029][ T3435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8458'. [ 726.797900][ T3204] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.805918][ T3406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8458'. [ 726.830906][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.838090][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.862135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.869326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.767799][ T2147] Bluetooth: hci8: command tx timeout [ 727.848413][ T2147] Bluetooth: hci7: command 0x040f tx timeout [ 728.003278][ T3599] sctp: [Deprecated]: syz.7.8469 (pid 3599) Use of int in maxseg socket option. [ 728.003278][ T3599] Use struct sctp_assoc_value instead [ 728.031224][ T3373] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_rx_wq": -EINTR [ 728.104034][ T3204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.125663][ T3599] sctp: [Deprecated]: syz.7.8469 (pid 3599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 728.125663][ T3599] Use struct sctp_sack_info instead [ 728.365452][ T3204] veth0_vlan: entered promiscuous mode [ 728.403018][ T3204] veth1_vlan: entered promiscuous mode [ 728.520622][ T3204] veth0_macvtap: entered promiscuous mode [ 728.555287][ T3204] veth1_macvtap: entered promiscuous mode [ 728.604195][ T3623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8474'. [ 728.643914][ T3204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.671981][ T3204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.691749][ T9024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.712078][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8476'. [ 728.733854][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.756042][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.764830][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.819219][ T3631] openvswitch: netlink: IP tunnel dst address not specified [ 728.831840][ T3637] can: request_module (can-proto-0) failed. [ 728.895706][ T3646] netlink: 'syz.7.8479': attribute type 4 has an invalid length. [ 728.920460][ T3649] netlink: 'syz.4.8480': attribute type 1 has an invalid length. [ 728.953507][ T3649] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 728.967791][ T2147] Bluetooth: hci1: command 0x0406 tx timeout [ 729.046409][ T6306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.103136][ T6306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.176668][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.205531][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.379410][ T3666] lo speed is unknown, defaulting to 1000 [ 729.507709][ T3696] netlink: 'syz.7.8492': attribute type 1 has an invalid length. [ 729.540929][ T3695] netlink: 'syz.7.8492': attribute type 1 has an invalid length. [ 729.559182][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8409'. [ 729.794976][ T3666] xfrm0 speed is unknown, defaulting to 1000 [ 729.811245][ T3714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8496'. [ 729.849581][ T5624] Bluetooth: hci8: command tx timeout [ 729.856429][ T3666] C speed is unknown, defaulting to 1000 [ 729.872947][ T3713] syzkaller0: entered promiscuous mode [ 729.884135][ T3713] syzkaller0: entered allmulticast mode [ 730.601049][ T3751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8503'. [ 730.715541][ T3758] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 730.758122][ T3760] syzkaller0: entered promiscuous mode [ 730.773503][ T3760] syzkaller0: entered allmulticast mode [ 731.499013][ T3790] netlink: 'syz.4.8512': attribute type 2 has an invalid length. [ 731.616759][ T3796] x_tables: duplicate underflow at hook 1 [ 731.928725][ T5624] Bluetooth: hci8: command tx timeout [ 733.816156][ T3764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.120516][ T3811] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8517'. [ 734.138494][ T3806] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8516'. [ 734.184620][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8521'. [ 734.281179][ T3827] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8523'. [ 734.370970][ T3839] syzkaller0: entered promiscuous mode [ 734.378676][ T3839] syzkaller0: entered allmulticast mode [ 734.391291][ T3841] netlink: 388 bytes leftover after parsing attributes in process `syz.6.8528'. [ 734.437918][ T3846] syzkaller1: entered promiscuous mode [ 734.443450][ T3846] syzkaller1: entered allmulticast mode [ 734.734275][ T3864] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8534'. [ 734.760153][ T3864] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8534'. [ 734.891380][ T3877] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8538'. [ 734.932268][ T3877] netlink: 13 bytes leftover after parsing attributes in process `syz.6.8538'. [ 734.971333][ T3877] veth7: entered promiscuous mode [ 735.049757][ T3887] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8540'. [ 735.086969][ T3887] netlink: 'syz.6.8540': attribute type 39 has an invalid length. [ 735.162118][ T3898] netlink: 'syz.7.8545': attribute type 1 has an invalid length. [ 735.335688][ T3898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.344266][ T3898] bond1: (slave bond2): making interface the new active one [ 735.352268][ T3898] bond1: (slave bond2): Enslaving as an active interface with an up link [ 735.384292][ T3911] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 735.417456][ T3901] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 735.446588][ T3913] macvlan2: entered promiscuous mode [ 735.456428][ T3913] macvlan2: entered allmulticast mode [ 735.467970][ T3913] bond14: (slave macvlan2): Error -98 calling set_mac_address [ 735.484991][ T3898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.800820][ T3940] xt_hashlimit: invalid rate [ 735.870492][ T3940] netlink: 'syz.7.8554': attribute type 83 has an invalid length. [ 736.444998][ T3981] sctp: [Deprecated]: syz.6.8564 (pid 3981) Use of int in maxseg socket option. [ 736.444998][ T3981] Use struct sctp_assoc_value instead [ 736.638467][ T3988] netlink: 'syz.4.8565': attribute type 12 has an invalid length. [ 736.696998][ T3990] team1: entered promiscuous mode [ 736.704396][ T3990] team1: entered allmulticast mode [ 736.725367][ T3992] netlink: 'syz.7.8567': attribute type 10 has an invalid length. [ 736.761213][ T3992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.794245][ T3992] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 736.854105][ T3992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.891108][ T3992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.913623][ T3992] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 736.941156][ T3992] bond0 (unregistering): Released all slaves [ 737.106291][ T4015] syzkaller1: entered promiscuous mode [ 737.129621][ T4015] syzkaller1: entered allmulticast mode [ 737.293750][ T4028] veth1_to_bond: entered allmulticast mode [ 737.345685][ T4037] sock: sock_set_timeout: `syz.7.8579' (pid 4037) tries to set negative timeout [ 737.412393][ T4031] veth1_to_bond: left allmulticast mode [ 737.895217][ T4069] syzkaller0: entered promiscuous mode [ 737.902438][ T4069] syzkaller0: entered allmulticast mode [ 738.416348][ T4096] C: entered promiscuous mode [ 738.434134][ T4096] tunl0: entered promiscuous mode [ 738.486819][ T4096] gre0: left allmulticast mode [ 738.530594][ T4096] gretap0: entered promiscuous mode [ 738.541411][ T4096] erspan0: entered promiscuous mode [ 738.550630][ T4096] ip_vti0: entered promiscuous mode [ 738.628622][ T4109] nbd: couldn't find a device at index 0 [ 738.695230][ T4120] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 738.804978][ T4142] netlink: 'syz.5.8610': attribute type 2 has an invalid length. [ 738.821243][ T4141] netlink: 'syz.5.8610': attribute type 2 has an invalid length. [ 738.996649][ T4149] netlink: 'syz.5.8612': attribute type 1 has an invalid length. [ 739.050134][ T4149] netlink: 'syz.5.8612': attribute type 2 has an invalid length. [ 739.302464][ T4160] lo speed is unknown, defaulting to 1000 [ 739.326800][ T4162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 739.381206][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.400232][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.574255][ T4164] netlink: 'syz.1.8616': attribute type 16 has an invalid length. [ 739.649950][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.663901][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.701203][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.708378][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.798471][ T4201] __nla_validate_parse: 19 callbacks suppressed [ 739.798496][ T4201] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8626'. [ 739.826314][ T4160] xfrm0 speed is unknown, defaulting to 1000 [ 739.853588][ T4160] C speed is unknown, defaulting to 1000 [ 739.905153][ T4205] tipc: Can't bind to reserved service type 1 [ 740.118825][ T4223] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 740.137570][ T4224] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 740.162929][ T4226] : entered promiscuous mode [ 740.366814][ T4239] validate_nla: 2 callbacks suppressed [ 740.366835][ T4239] netlink: 'syz.1.8641': attribute type 1 has an invalid length. [ 740.410837][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8640'. [ 740.422728][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8640'. [ 740.426312][ T4239] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8641'. [ 740.441904][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8640'. [ 740.460707][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8641'. [ 740.491527][ T4248] sctp_getsockopt_maxseg: 88 callbacks suppressed [ 740.491549][ T4248] sctp: [Deprecated]: syz.4.8644 (pid 4248) Use of int in maxseg socket option. [ 740.491549][ T4248] Use struct sctp_assoc_value instead [ 740.520443][ T4239] syzkaller1: entered promiscuous mode [ 740.525959][ T4239] syzkaller1: entered allmulticast mode [ 740.549839][ T4239] geneve2: entered promiscuous mode [ 740.555213][ T4239] geneve2: entered allmulticast mode [ 740.979274][ T4270] xt_hashlimit: size too large, truncated to 1048576 [ 740.991406][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8647'. [ 741.176657][ T4284] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8655'. [ 741.405629][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8659'. [ 741.421444][ T4298] xfrm1: entered promiscuous mode [ 741.426542][ T4298] xfrm1: entered allmulticast mode [ 741.433357][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8659'. [ 741.503122][ T4304] 8021q: VLANs not supported on lo [ 741.702661][ T4329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.793938][ T4337] bond15: Unable to set peer notification delay as MII monitoring is disabled [ 741.803905][ T4337] bond15 (unregistering): Released all slaves [ 742.036275][ T4355] sctp: [Deprecated]: syz.4.8678 (pid 4355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.036275][ T4355] Use struct sctp_sack_info instead [ 742.247759][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 742.369560][ T4378] tipc: Enabling of bearer rejected, already enabled [ 742.643284][ T4393] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 742.678005][ T4398] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 742.809173][ T4413] bond0: Caught tx_queue_len zero misconfig [ 742.851861][ T4411] sctp: [Deprecated]: syz.4.8698 (pid 4411) Use of int in max_burst socket option deprecated. [ 742.851861][ T4411] Use struct sctp_assoc_value instead [ 742.950773][ T4421] team0 (unregistering): Port device  removed [ 742.974074][ T4426] netlink: 'syz.4.8704': attribute type 9 has an invalid length. [ 742.991200][ T4428] netlink: 'syz.4.8704': attribute type 9 has an invalid length. [ 743.362002][ T4452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.651774][ T4472] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 743.923271][ T4494] sctp: [Deprecated]: syz.6.8720 (pid 4494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 743.923271][ T4494] Use struct sctp_sack_info instead [ 744.017668][ T4494] sctp: [Deprecated]: syz.6.8720 (pid 4494) Use of int in maxseg socket option. [ 744.017668][ T4494] Use struct sctp_assoc_value instead [ 744.259932][ T4520] syzkaller0: entered promiscuous mode [ 744.295076][ T4520] syzkaller0: entered allmulticast mode [ 744.344586][ T4524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.381537][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.388979][ T4518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.401571][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.409015][ T4518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.443074][ T4524] syzkaller0: entered promiscuous mode [ 744.457140][ T4524] syzkaller0: entered allmulticast mode [ 745.265725][ T4565] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 745.976577][ T2147] block nbd1: Receive control failed (result -107) [ 746.008507][ T4607] nbd1: detected capacity change from 0 to 63 [ 746.096568][ T4626] sock: sock_timestamping_bind_phc: sock not bind to device [ 746.107910][ T4628] __nla_validate_parse: 19 callbacks suppressed [ 746.107932][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8753'. [ 746.126137][ T4628] netlink: 'syz.5.8753': attribute type 1 has an invalid length. [ 746.136678][ T4628] netlink: 'syz.5.8753': attribute type 1 has an invalid length. [ 746.144653][ T4628] netlink: 'syz.5.8753': attribute type 2 has an invalid length. [ 746.152736][ T4628] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8753'. [ 746.255445][ T4602] infiniband syz0: set down [ 746.266687][ T4602] infiniband syz0: added ipvlan0 [ 746.282757][ T4602] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 746.297989][ T4602] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 746.315267][ T4602] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 746.368953][ T4602] RDS/IB: syz0: added [ 746.384482][ T4602] smc: adding ib device syz0 with port count 1 [ 746.394969][ T4602] smc: ib device syz0 port 1 has no pnetid [ 746.695185][ T5624] block nbd1: Receive control failed (result -104) [ 746.725853][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8763'. [ 746.773120][ T4664] bond14: Invalid ad_actor_system MAC address. [ 746.781075][ T4664] bond14: option ad_actor_system: invalid value (1) [ 746.799714][ T4664] bond14 (unregistering): Released all slaves [ 746.825526][ T4669] netlink: 'syz.1.8766': attribute type 1 has an invalid length. [ 746.835516][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8766'. [ 747.011576][ T4674] macvlan0: entered promiscuous mode [ 747.120585][ T808] tipc: Resetting bearer [ 747.130531][ T4679] block nbd6: not configured, cannot reconfigure [ 747.316266][ T4690] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8773'. [ 747.342021][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8773'. [ 747.370117][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8773'. [ 747.815682][ T4723] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8784'. [ 747.825131][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8784'. [ 747.856723][ T4724] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8781'. [ 748.072908][ T4735] pim6reg: entered allmulticast mode [ 748.095585][ T4735] pim6reg: left allmulticast mode [ 748.229815][ T4742] sch_tbf: burst 0 is lower than device bond0 mtu (1514) ! [ 748.891825][ T4768] bond15: entered promiscuous mode [ 748.918729][ T4768] bond15: entered allmulticast mode [ 748.937869][ T4768] 8021q: adding VLAN 0 to HW filter on device bond15 [ 749.006024][ T4774] bond16: entered promiscuous mode [ 749.019167][ T4774] bond16: entered allmulticast mode [ 749.024833][ T4774] 8021q: adding VLAN 0 to HW filter on device bond16 [ 749.096036][ T4780] netlink: 'syz.4.8799': attribute type 58 has an invalid length. [ 749.442084][ T4794] netlink: 'syz.1.8804': attribute type 1 has an invalid length. [ 749.855621][ T4818] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 750.044915][ T4840] netlink: 'syz.1.8813': attribute type 3 has an invalid length. [ 752.880507][ T4821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.068209][ T4868] __nla_validate_parse: 14 callbacks suppressed [ 753.068231][ T4868] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8820'. [ 753.121519][ T4875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8823'. [ 753.419416][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8826'. [ 753.430035][ T4891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8827'. [ 753.511690][ T4899] netlink: 212304 bytes leftover after parsing attributes in process `syz.5.8831'. [ 753.521872][ T4899] openvswitch: netlink: Message has 6 unknown bytes. [ 753.670288][ T2147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.678163][ T2147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.685517][ T2147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.694364][ T2147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.702328][ T2147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.887891][T27615] syz_tun (unregistering): left allmulticast mode [ 754.130084][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8837'. [ 754.311273][ T4909] lo speed is unknown, defaulting to 1000 [ 754.383337][ T4909] xfrm0 speed is unknown, defaulting to 1000 [ 754.390790][ T4909] C speed is unknown, defaulting to 1000 [ 754.607050][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.614331][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.621771][ T4909] bridge_slave_0: entered allmulticast mode [ 754.630212][ T4909] bridge_slave_0: entered promiscuous mode [ 754.638392][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.645566][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.653771][ T4909] bridge_slave_1: entered allmulticast mode [ 754.660878][ T4909] bridge_slave_1: entered promiscuous mode [ 754.685943][ T4909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.697951][ T4909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.723730][ T4909] team0: Port device team_slave_0 added [ 754.731436][ T4909] team0: Port device team_slave_1 added [ 754.759048][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.766371][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.793660][ T4909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.805796][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.813323][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.840726][ T4909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.899433][ T4909] hsr_slave_0: entered promiscuous mode [ 754.906673][ T4909] hsr_slave_1: entered promiscuous mode [ 754.914096][ T4909] debugfs: 'hsr0' already exists in 'hsr' [ 754.920544][ T4909] Cannot create hsr debugfs directory [ 755.030663][ T4909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.041286][ T4909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.129185][ T4909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.141672][ T4909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.199342][ T4909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.211895][ T4909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.286120][ T4909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.304363][ T4909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.767327][ T2147] Bluetooth: hci0: command tx timeout [ 756.394629][ T4891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.412032][ T4909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.466634][ T4909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.499355][ T4909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.550856][ T4909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.583764][ T4909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.607522][ T4909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.651012][ T4909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.697936][ T4909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.738758][ T4966] bridge0: port 3(ipvlan2) entered blocking state [ 756.746564][ T4966] bridge0: port 3(ipvlan2) entered disabled state [ 756.754785][ T4966] ipvlan2: entered allmulticast mode [ 756.762133][ T4966] bridge0: entered allmulticast mode [ 756.781985][ T4966] ipvlan2: left allmulticast mode [ 756.805192][ T4977] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 756.815255][ T4966] bridge0: left allmulticast mode [ 756.879472][ T4973] ip6gre0: Master is either lo or non-ether device [ 756.973181][ T31] INFO: task syz.3.6663:29418 blocked for more than 143 seconds. [ 757.002834][ T4990] Cannot find add_set index 3 as target SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.021091][ T31] Not tainted syzkaller #0 [ 757.026101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.042697][ T31] task:syz.3.6663 state:D stack:27568 pid:29418 tgid:29417 ppid:28243 task_flags:0x400140 flags:0x00080002 [ 757.054696][ T31] Call Trace: [ 757.058028][ T31] [ 757.061085][ T31] __schedule+0x17d9/0x56c0 [ 757.065761][ T31] ? stack_trace_save+0xa9/0x100 [ 757.070756][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 757.077404][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 757.082395][ T31] ? genl_rcv+0x28/0x40 [ 757.086616][ T31] ? __pfx___schedule+0x10/0x10 [ 757.091515][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.096348][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.105480][ T31] ? lock_release+0x4b/0x3c0 [ 757.118444][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8848'. [ 757.118478][ T4992] netlink: 'syz.7.8848': attribute type 29 has an invalid length. [ 757.118492][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8848'. [ 757.163879][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.169179][ T31] schedule+0x164/0x360 [ 757.173471][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.178985][ T31] __mutex_lock+0x7bf/0x1550 [ 757.183628][ T31] ? __mutex_lock+0x5d4/0x1550 [ 757.188449][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 757.194219][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.209837][ T4990] syzkaller0: entered promiscuous mode [ 757.215371][ T4990] syzkaller0: entered allmulticast mode [ 757.256127][ T31] ? __nlmsg_put+0xef/0x1b0 [ 757.260720][ T31] ? genlmsg_put+0x137/0x2e0 [ 757.265355][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 757.273220][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8848'. [ 757.300120][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8848'. [ 757.319641][ T31] ? __nla_parse+0x40/0x60 [ 757.324152][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 757.349157][ T4992] netlink: 'syz.7.8848': attribute type 29 has an invalid length. [ 757.381323][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 757.387738][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 757.394119][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 757.399711][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 757.405832][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 757.411077][ T31] genl_rcv_msg+0x614/0x7a0 [ 757.415622][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.420683][ T31] ? ref_tracker_free+0x689/0x830 [ 757.425880][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 757.473565][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 757.480876][ T31] netlink_rcv_skb+0x226/0x4a0 [ 757.486083][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.492766][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.499322][ T31] ? down_read+0x2be/0x330 [ 757.504183][ T31] genl_rcv+0x28/0x40 [ 757.509892][ T31] netlink_unicast+0x7bb/0x940 [ 757.515060][ T31] netlink_sendmsg+0x813/0xb40 [ 757.520990][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.526798][ T31] ? futex_unqueue+0x22/0x240 [ 757.537446][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.542848][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.550292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.556059][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 757.561958][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.568365][ T31] ? lock_release+0x4b/0x3c0 [ 757.573350][ T31] ? import_iovec+0x73/0xa0 [ 757.579867][ T31] ___sys_sendmsg+0x2a5/0x360 [ 757.584991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.592167][ T31] ? futex_wait+0x2a2/0x390 [ 757.597286][ T31] ? __fget_files+0x2a/0x420 [ 757.601924][ T31] ? __fget_files+0x3a2/0x420 [ 757.606646][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 757.611637][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.618428][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.623249][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.629356][ T31] do_syscall_64+0x174/0x580 [ 757.633985][ T31] ? trace_irq_disable+0x3b/0x140 [ 757.639057][ T31] ? clear_bhb_loop+0x40/0x90 [ 757.643768][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.649702][ T31] RIP: 0033:0x7f68bf99ce59 [ 757.654152][ T31] RSP: 002b:00007f68c089d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.662600][ T31] RAX: ffffffffffffffda RBX: 00007f68bfc15fa0 RCX: 00007f68bf99ce59 [ 757.670692][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 757.678694][ T31] RBP: 00007f68bfa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 757.686702][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.694709][ T31] R13: 00007f68bfc16038 R14: 00007f68bfc15fa0 R15: 00007ffe5778acb8 [ 757.731674][ T31] [ 757.739063][ T31] INFO: lockdep is turned off. [ 757.770982][ T31] NMI backtrace for cpu 1 [ 757.771007][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 757.771038][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.771051][ T31] Call Trace: [ 757.771059][ T31] [ 757.771068][ T31] dump_stack_lvl+0xe8/0x150 [ 757.771094][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 757.771117][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.771152][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 757.771176][ T31] sys_info+0x135/0x170 [ 757.771195][ T31] watchdog+0xfd7/0x1030 [ 757.771227][ T31] ? watchdog+0x1c7/0x1030 [ 757.771257][ T31] kthread+0x388/0x470 [ 757.771275][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.771300][ T31] ? __pfx_kthread+0x10/0x10 [ 757.771320][ T31] ret_from_fork+0x514/0xb70 [ 757.771341][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.771361][ T31] ? __switch_to+0xc89/0x1420 [ 757.771390][ T31] ? __pfx_kthread+0x10/0x10 [ 757.771409][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.771441][ T31] [ 757.771497][ T31] Sending NMI from CPU 1 to CPUs 0: [ 757.847352][ T2147] Bluetooth: hci0: command tx timeout [ 757.900205][ C0] NMI backtrace for cpu 0 [ 757.900224][ C0] CPU: 0 UID: 0 PID: 4909 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 757.900250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.900262][ C0] RIP: 0010:unwind_next_frame+0x2bb/0x2550 [ 757.900292][ C0] Code: d5 4c 39 e2 0f 86 22 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 49 bc 00 00 00 00 00 fc ff df 8c 01 00 00 31 ed e9 e8 18 00 00 48 81 fd 00 60 9c 91 0f 92 c0 [ 757.900309][ C0] RSP: 0018:ffffc90006fb75a0 EFLAGS: 00000246 [ 757.900327][ C0] RAX: 0000000000000000 RBX: ffffffff9052754c RCX: ffffffff90527550 [ 757.900342][ C0] RDX: ffffffff90d259fa RSI: ffffffff90d259fa RDI: ffffffff8c2910c0 [ 757.900356][ C0] RBP: ffffffff821fd40c R08: 0000000000000019 R09: 0000000000000000 [ 757.900369][ C0] R10: ffffc90006fb7698 R11: ffffffff81b10630 R12: dffffc0000000000 [ 757.900384][ C0] R13: 0000000000000000 R14: ffffc90006fb7648 R15: ffffffff9052754c [ 757.900397][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 757.900414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.900427][ C0] CR2: 00007f3265c16d58 CR3: 000000007ee64000 CR4: 00000000003526f0 [ 757.900446][ C0] Call Trace: [ 757.900452][ C0] [ 757.900462][ C0] ? vfree+0x1fd/0x330 [ 757.900486][ C0] ? unwind_next_frame+0x8f/0x2550 [ 757.900517][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 757.900546][ C0] arch_stack_walk+0x11b/0x150 [ 757.900571][ C0] ? vfree+0x1fd/0x330 [ 757.900594][ C0] stack_trace_save+0xa9/0x100 [ 757.900620][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 757.900647][ C0] ? stack_depot_save_flags+0x33/0x800 [ 757.900671][ C0] save_stack+0x122/0x230 [ 757.900696][ C0] ? __pfx_save_stack+0x10/0x10 [ 757.900719][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 757.900745][ C0] ? vfree+0x1fd/0x330 [ 757.900772][ C0] ? lock_release+0x4b/0x3c0 [ 757.900799][ C0] ? page_ext_get+0x22/0x2e0 [ 757.900826][ C0] __reset_page_owner+0x71/0x1f0 [ 757.900852][ C0] __free_frozen_pages+0xc0d/0xd20 [ 757.900879][ C0] ? ___free_pages+0x9a/0x1b0 [ 757.900907][ C0] vfree+0x1fd/0x330 [ 757.900930][ C0] ? __pfx_kcov_close+0x10/0x10 [ 757.900954][ C0] kcov_close+0x28/0x50 [ 757.900977][ C0] __fput+0x418/0xa50 [ 757.901002][ C0] task_work_run+0x1d9/0x270 [ 757.901024][ C0] ? __pfx_task_work_run+0x10/0x10 [ 757.901044][ C0] ? do_exit+0x735/0x2360 [ 757.901061][ C0] ? kmem_cache_free+0x182/0x650 [ 757.901085][ C0] ? put_net+0x191/0x260 [ 757.901112][ C0] do_exit+0x73a/0x2360 [ 757.901133][ C0] ? cgroup1_freezing+0x20/0x350 [ 757.901152][ C0] ? rcu_is_watching+0x15/0xb0 [ 757.901172][ C0] ? __pfx_do_exit+0x10/0x10 [ 757.901191][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 757.901215][ C0] ? rcu_is_watching+0x15/0xb0 [ 757.901238][ C0] do_group_exit+0x22d/0x2f0 [ 757.901255][ C0] ? trace_irq_enable+0x3b/0x140 [ 757.901282][ C0] get_signal+0x121b/0x12c0 [ 757.901316][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 757.901346][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.901373][ C0] ? kmem_cache_free+0x462/0x650 [ 757.901405][ C0] ? rcu_is_watching+0x15/0xb0 [ 757.901427][ C0] exit_to_user_mode_loop+0x104/0x730 [ 757.901453][ C0] ? rcu_is_watching+0x15/0xb0 [ 757.901472][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.901492][ C0] do_syscall_64+0x353/0x580 [ 757.901526][ C0] ? clear_bhb_loop+0x40/0x90 [ 757.901546][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.901565][ C0] RIP: 0033:0x7f8f18f5d68e [ 757.901581][ C0] Code: Unable to access opcode bytes at 0x7f8f18f5d664. [ 757.901592][ C0] RSP: 002b:00007ffc6f868268 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 757.901610][ C0] RAX: 0000000000000028 RBX: 000055555fe93500 RCX: 00007f8f18f5d68e [ 757.901625][ C0] RDX: 0000000000000028 RSI: 00007f8f19d44670 RDI: 0000000000000003 [ 757.901636][ C0] RBP: 0000000000000001 R08: 00007ffc6f8682e4 R09: 000000000000000c [ 757.901649][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 757.901661][ C0] R13: 0000000000000000 R14: 00007f8f19d44670 R15: 0000000000000000 [ 757.901682][ C0] [ 758.405105][T30271] pim6reg: left allmulticast mode [ 758.416296][T30271] dvmrp6: left allmulticast mode [ 758.676562][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 758.683497][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 758.692649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.702745][ T31] Call Trace: [ 758.706053][ T31] [ 758.709011][ T31] vpanic+0x56c/0xa60 [ 758.713033][ T31] ? __pfx___schedule+0x10/0x10 [ 758.717918][ T31] ? __pfx_vpanic+0x10/0x10 [ 758.722463][ T31] ? __down_trylock_console_sem+0xad/0x110 [ 758.728311][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 758.734508][ T31] panic+0xc5/0xd0 [ 758.738269][ T31] ? __pfx_panic+0x10/0x10 [ 758.742723][ T31] ? preempt_schedule_common+0x82/0xd0 [ 758.748227][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 758.753643][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 758.759834][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 758.766029][ T31] watchdog+0x1030/0x1030 [ 758.770412][ T31] ? watchdog+0x1c7/0x1030 [ 758.774867][ T31] kthread+0x388/0x470 [ 758.778964][ T31] ? __pfx_watchdog+0x10/0x10 [ 758.783667][ T31] ? __pfx_kthread+0x10/0x10 [ 758.788275][ T31] ret_from_fork+0x514/0xb70 [ 758.792899][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 758.798024][ T31] ? __switch_to+0xc89/0x1420 [ 758.802725][ T31] ? __pfx_kthread+0x10/0x10 [ 758.807337][ T31] ret_from_fork_asm+0x1a/0x30 [ 758.812164][ T31] [ 758.815379][ T31] Kernel Offset: disabled [ 758.819726][ T31] Rebooting in 86400 seconds..