last executing test programs: 14m33.062793758s ago: executing program 4 (id=6277): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='&\\\x00', 0x400, &(0x7f0000000080)={@align=0x9, {0x0, 0xe1a7, 0x8, 0x7fffffff}}, 0xfffffeff, &(0x7f00000000c0), &(0x7f0000000100)=0x8}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000280)={0x7, 'veth0_to_team\x00', {0x1}, 0x610d}) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000002c0)={0x80}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000480)={@empty, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x7800, 0x8, 0x1, 0xfffffff1, {{0x17, 0x4, 0x1, 0x39, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x14, 0x65, 0x0, 0xd, [0x2c5a39fb, 0x1ff, 0x8, 0x0]}, @ssrr={0x89, 0x27, 0xe5, [@remote, @broadcast, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @empty]}, @rr={0x7, 0xb, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x1, 0x8, {{0x36, 0x4, 0x3, 0x35, 0xd8, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x1f, 0x9e, [@local, @loopback, @remote, @remote, @local, @private=0xa010101, @broadcast]}, @rr={0x7, 0x2b, 0x1b, [@broadcast, @multicast2, @multicast2, @multicast1, @multicast1, @multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0x5c, 0x1, 0x4, [{@loopback, 0x7}, {@rand_addr=0x64010100, 0xc476}, {@empty, 0x7}, {@loopback, 0x22f}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x446f}, {@multicast2, 0x100}, {@broadcast, 0x6c}, {@private=0xa010100, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x7d, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x1}]}, @generic={0x88, 0x6, "078b96c0"}, @ssrr={0x89, 0x7, 0xb1, [@local]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf0, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x8) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r0}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x0, 0x3, 0x6, 0x6, 0xfffffffffffffffa, 0x9, 0x4, 0x4, 0x4, 0x38b7, 0x10000, 0xfd, 0x7, 0xad, 0x6]}, &(0x7f00000009c0)=0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000a00)={r10, 0xad}, 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000a40)={0x7, 0x3, 0xfff9, 0xf, 0x5, 0x0, 0x91}, 0xc) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf7}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0x83, 0xba, &(0x7f0000000c00)="22601a11f41cac9e141938dc1e3f4c26839f23a5571c29483a4a5f5ce79ea1a6e604e98602ddc7ecfbb7632c5d65c80d5aa818d7ddf540f36ae1f49b9adbb57072ab46e36d6cace7da4ad57035a308907688debfcb166c1aae09fa9c0550492af42d198be8cfd69f04f7ab97c5fa1a5ffffb91938c5f1abbbe67fc584591288a778e48", &(0x7f0000000cc0)=""/186, 0x8, 0x0, 0xaf, 0x4a, &(0x7f0000000d80)="cbf19d8b7cf29c5a36ea60dfcfc2df59dc3f79a1711247bda12174020e110518372e6a0b199fcbdcd83c17abe5c60407341a7c323d751ae6b3c25768c9604fa8240725fb809a74d94db8c2bad5b7230d228bacd0c9b876e0961f00a0da83910717cf29d7eac0ae8ca38748dccd4a6ad5cfcad8f90392380b7bb4a8164de11096fe031b1946771d299541b140bf50a70bb76b3937e41a3240d19c1f7f2ea1ad4eea4504b3f6387495b595b6ee5ba22d", &(0x7f0000000e40)="e931a276c02a735d26821bde6a4b88600246f79b01f51826295c7956e9e9336465e4931b512a833d821b98082d78bd7076a1ed8534ce8f55c5d67f755c3d4a75859049e10f3e63bce97f", 0x5, 0x0, 0x7}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), r9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x14c, r13, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000011c0)={0x0, 0x100}, 0x8) close(r3) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r12, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, r14, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x8, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x81) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r16, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r14, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x55) 14m32.924180282s ago: executing program 4 (id=6279): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32, @ANYBLOB="9b060000003800001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee0000080009000000000008000a00afc3000008000a000000000008000a0000000000080009"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x10) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000280), 0x4) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000006c0)="3b000300010006", 0x7) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f20ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r9, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x24, r9, 0x5, 0x100, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4056}, 0x0) 14m32.768511382s ago: executing program 4 (id=6282): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (fail_nth: 1) 14m32.489892267s ago: executing program 4 (id=6283): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4005) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14m32.317403379s ago: executing program 2 (id=6286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="600000006a00200027bd7000fbdbdf0000080001000100000004000900080500382b1e33113b8dea628e9fb1f36f480a0aaf9a405bb601a4edac3293e696f0000000000000000000b44b5e67180779721beb72e675fd648360b7", @ANYRES32=r6, @ANYBLOB="08000a00ffffffff080001000000000008000a0002000000080001000000000008000a000100000004000900"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000b70000001007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x9, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000440)="259a536511f0cb88a80000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000000000000010000000800000010500200", @ANYRES32=0x1, @ANYBLOB="e8000000040008004000"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000d00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14m31.51512544s ago: executing program 4 (id=6290): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r4) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x28, 0x8}}) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r5, @ANYRES32=r2, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket(0x10, 0x3, 0x0) 14m31.159102696s ago: executing program 2 (id=6291): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0xffffffffffffff18, &(0x7f0000000340)='\x00', 0xb, 0x1, 0x4c4a, 0x4155, 0x9, 0x1, 0x1, 'syz0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x3}, 0x1c) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r7) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r6, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) 14m29.998897031s ago: executing program 0 (id=6294): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0200000021000000000000000000000001000005fa0d00000000"], 0x0, 0x3a, 0x0, 0xa, 0x1}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00"/13], 0x48) (async, rerun: 64) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, 0xfffffff9, 0xda0, 0x6, 0xfffffff8, 0x4, 0x1, 0x2}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x44, 0xe, 0x7fff, 0x2, 0x2, 0x1000, 0x81, {r8, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0xe}}, 0x6, 0x0, 0x9, 0xc, 0x7}}, &(0x7f0000000740)=0xb0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414009877b990b1d4c7d73741b440a8020ed57d81"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) 14m24.677093386s ago: executing program 3 (id=6295): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000008003a000000000400000085000000bc0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x8, @void}, 0x10) 14m24.243231887s ago: executing program 0 (id=6296): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540", @ANYRESHEX=r5, @ANYRESOCT, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESDEC, @ANYRES32, @ANYBLOB="1a82961851dbedb96ac82bd8e4431eac03572832cf02d3108b2c"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x4, 0xfffffffd) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) 14m24.146705569s ago: executing program 3 (id=6297): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 14m23.949931629s ago: executing program 0 (id=6298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x93, "6574fc47eaac71d60457cadd698695919d4f07f103298b313bdb6535ebc935573fa47b2c937f467c1db1353ee2434a14ab9768c2fa222e7fcc336d08093bfda1e322ae82bd8f801db7b5a767afce97b66086e7dfd1a4f085024e6344f0e6108b31c29711425703e2fdf0edaac560e613587a7ccb7841bf6722c824a989fb672d773f531a202994573e3e77a5f2e2efd8039a76"}, &(0x7f0000000480)=0x9b) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r1, 0x2}, 0x8) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x24, 0x3d, 0x0, 0x1, [@nested={0x20, 0x167, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @uid}, @typed={0x8, 0x14c, 0x0, 0x0, @fd=r4}, @typed={0x9, 0x61, 0x0, 0x0, @binary="c85e28e2d1"}]}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x48}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c094}, 0x814) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x2c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x100000, 0x310, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x80ff, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bc27, 0x0, {0x0, 0x0, 0x0, r8, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r8, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 14m23.875686624s ago: executing program 3 (id=6299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00c74253a55a00", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000000)=0x600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x80, 0x0, 0x7c821e36e0c31a69, 0x4, 0x7}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r5, &(0x7f0000000500)="0802110000010802110000000800", 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES8=r7], 0x68}}, 0x0) 14m23.467781829s ago: executing program 0 (id=6300): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0xb005}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) bind$tipc(r2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x24000080) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14m23.256687313s ago: executing program 0 (id=6301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x4, 0x9, 'kmp\x00', "8720b47ff1417a3bff3c9fb7cb7997b7514931bd2f540a0169229b60036088bc4b070ddf15ad01f5487588c1ed8d19aeeffe74207d6c3fbc5c8908dfd46a2d73e34d3682f1902e6fe9931f5c46655ac763857fb1f199f35e4b6bd971c28e3406ee0818032d78766642778cb5355db37c410a656d9819fc9d0d4593b98a6d48f4", 0x33, 0x6, {0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0x52e6, 0x18, 0x8}, {0x7800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x10, 0x5], 0x0, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x11, "b6a7"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/35, 0x23}, 0x6}], 0x1, 0x40000100, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6tnl0\x00'}}, 0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1226, [{0xa00, 0x800000000000000}, {0x800000000, 0x100000000000000}]}, 0xa50) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'lblc\x00', 0x0, 0x9, 0x39}, 0x2c) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4c880) 14m23.105467343s ago: executing program 3 (id=6302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x27, 0x5, 0x7) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='a', 0x1}], 0x1}, 0x4000) sendmmsg$inet6(r5, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r5, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) unshare(0x28000600) ioctl$FICLONE(r4, 0x40049409, r3) sendmsg$kcm(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10100000000000000000000003000000cbf168a902c3f008209748addbc59c202c7bf7ca825d7df9c3d29ce1e68ebb10618f9fea53f903c804261f153bf1b6d40cfea626dc1c1a725f8ab3ae0b8e08d8fdff26e4df72bd11479815b18a301fdcb5f8794dee1741b88fea52816783eeca1207c227932fc11642c9d01b70f348c6161cecf698bba1dfe5f0745aef67841511eab826d513c842e54e76f9d9f7101fa1d4193c3b27f5f549a2f94e3dbf0e3c61c471d6412d91cf1cf4030170fa3455a853e33609ed4a69cf166e9e11b72b67ff7304c0d6c5b868f4881fc8cf1d70a03408fae6df014734103517e73807f4f20842af3000b4faa673ed72879737fb4ffa8f612ddaaaf23c4c587c53d9f5b7961512ee07076983eeee25f17d3ea177a5750e3ae2335454d9b2ec3e7151a94aec7291324e2ded18922029c78693db8866e21577d6baa6d2d8b63ea610bec45a0323e9f0e27240481c4ce5765c5f665d4ad4c9871e0082622e9bb8acec72ac3b46dc6e7bfcf662a63ecea8bc1590095f660978ce8d1ba4a4d625cdc192ac118ebd732371796f26164385376088d4d2cc869ab2a102380ec9b82634e5ba6a9dfc29e2df4763085f6d70b62f4a302aa1fcfd03561abd852159396b0bc5acd0f2b91f78386788a8a38858304bd19b553b3f9a1542fc30411d85de2d11c5049f0c1da6bb34f72bcf54aa3e10c31909ae7cdd7885f40e26c92d10fee74a3be263df03097255cc7592c0055bc641d0d661635256b336eef4bb9d754a7c130dd661499dbddb4921329f7be8205cf6b7c4a05114443d711386885390c7d2fceff1fc2fb72ce709bdc44717aeac5956de4c3edaf5d8af56c8725a9818347b641bbcfd9c06283b3d7289e1f18b82c5e36688b10ecd68c2d338fd59745b69106b8aa3a34c1ac1f5a86222871f6ca8fc44e2fd8463e69bbc1a494d958a9875ce38e56c16dcabc986c1978074f61f10503ce570ea8979b1215b2c367a4918fd5b09b0b2b3196c0f04c57eaded47379c033b26359f18b9cf3b652eff4349826d48a4a6c103da505085ce68d243095f6b2da30a9ffcaf2bbe7ad4713253c449f3e0091156c8bdb93f3df7ca4f535afd2cf2eb4cabdc9835ac5c558bd563dc29d57134e0e18e8cca52cab8f6c5ba730569d29cdbddf3d1e9d1c6d62f0034e7aff85574deefcb94431d86eda2143a83fa03b445848629f77fb2bb4936976e3a53fb04d6a9b841f6700bea9e5dcfdcde87075a6ce1595e75417c37751fa5de35ca3d6f0354b732fcfb3ffaf42266eb71077b92d8f21d7e2cb3fdd76d7e1cc95af723e6a354a0c2df660a84acfcbc8ddea6e45b449444d374267f930ddf9703d725bac9fd28571c26d056209c5723992187e7a6181f41bb13807587d3539a52911d5c69c5ced3472ed62df3adde9e255a8d08a4a82d7a93cf61eb0326d1a1e00dc1859f125e753cf8d90d9ec1377992c135ff222b3a3cf8c5babc9658b55070ad946837b8971c9e95b7ade5c4dd3378eb345a2043d0361ccd27e094c7e837e23f52337a98a17be91177a406bd01ff54de25c0bb6e7d8c6ca90dc91195136c414a81e24ef027e7662d00f10887bec8587495193cd5ad0a1b944c2441d992186d5128031a674343a3fb321dc558a8be21c756273426c8f408464038b10d7baaba7c39da7881caee4d36589a069431c53378075179c5ef937ab7b716604c1f5755a6122249760192e1da9c62bd0697c1898e59eb9e2f85da65ea8f9229599ab098f48a985330bbc38dd6d5761deaf5dbb9be391aa04cc352362ec993473dfa7428bed05b408a1544573f99e7ac9ba74697ff1d12c1848249ffb6aafa68caf8b2c2abbe9109d3ddee5664d4be821406a297a84a98a45ded37355865f31313c3217dfb587cfec604d3116d1eacaffd992c4141ab7fd784379d2b14d0f27977f054c49ed206cacdc5454a26e84ac1dce566c63e7674cd9a9b03809bda5d47945d21a48249074e1db63b97e6e717dc389e4d8c73bafba0f64436148ccdf8f4f559dca6d0c0ac9b121693884c64c7255421b52db480ee1ffc08f3e6cce913e43c2ca00087730b27237d3189ebc2a2b4bd1cfc35dcad6c8f2bd05f072357d3d8dcac75f754ccc8eff2e7b8d6612989864cbf86229f701c71464e39ef40d3ace49b07bf36b0e120bdf4ed85329d384d4044f98852cfa32ba0d5cfe9b87ebf2cf58c33aa1dbcbae70feadc9f70cf0cca97c0ee91d34a9265a928149901d6d95c91d6af5833b404b45e723035650b8558a0f2b1e97c0b03fd252c4198a3725921d3809e793902c74a9235f9749604226eb3b1f08216f99df5310409bd0a04e27fa3762c55145ba7ae2c65b739993749bf2125c7d50cd8dc694a1f53d309bec67cdec46f808ddea6359341712d488c31d4b5f5f4adbbcb917b1b189f833d9516755c38c06300af97cede47e46e21e6bef19ba204841495a1b0e1d42e98c6d60f047c47d58a4d5ee0c8d4d26e0500000000000000cd3c4e7b00efb7e6effe1799da9702f679025c79e99e3b359c6f47dbd94116613b373d015be5ad87683ce9b498995f9b4e2e65f1eca2a168b0c354e17c328c4ebc3977a7591795c44189ff613623327186865ee3e69664eba170d74df74687b168166dcfa40021c567632f9fcd959b66daa74c6644873b7098d83c5a06bd7ac63679571550cf147ef82a41ff8b39ac64b32ed58aa7c80ff26022dfc36494a918c3fe5ef34b0b199cec92fe2b5cd3e54745d16555db304ff36441276a767977f0b0c2385d7dbacadf9c42187eab4ba64ab84b8dd15b49e05ee9a925e0d751419f86a277236469794a6409fb440685f8c3a9065d9cf0cd9710c57fadedec3c1a9461fd085980be1809830028323512855e419efcfa1613064b6f3c62debf2eb9b7242e824a99e5a62f1b69585bbf166db661c2aa49297e63de1053ff8c6856b65bd12adcd2801772006fd31a28b958de014510053f974bfe4d9ba3b389e882e3b89325f77a542ce49edae2448431934e46e719f88d8d99eea6f8059c7cdf118e23b9a94b78061a5624291697694f92f025e4f2343e2473abb3efc7370b964b273e37fec03a34cfdda9f436fc3b553b43014c78021251be3c4f02f81757cb4e84cec350d5637a0772e897d79a493ef618f12ab38a82efb3b33f76a16586325c3c2861b2e982035f539e68ee8ba5834d7d97b4e249254fc921b3e49c53ba652b4dced081e3c70900216a19844529ccb0ac9b2140a43eecc22f46510f32fce82b0633190d2f78152eb289880552d83af8ef1cb7d4c55128e0ca155002284af6611bf2cbf7635b2afdadfca4e7630408b02b40a9300ba5a65385e65ba91537553bf4ab3d938b062f4e32ee4cb23c8d21ea795dbaf09fe0199061810e22bd1dc548f5897d251b54733a2156e2e2b934163faddd521e9b371aa88307e77df7139bdbe1ac5f5b9a8d55b938ec3dee296e2fc9bcadc496e1a7d098bb7e1acb84f382ddecac18b947a7137284a4b23198e4ec66b55f7610b71aebb5780ac0d432a006b8bd4e6a81c813510432ac6ab7a0f0c0dfc0f056363d914b1351b3c148b1f0392d66419512d5953169660d45e2c7af8d4a72929f36d6bef8360386ac40efbca343a15d5d5a9e22f8b7a2cc89698edd478e76bf7fa7df8ac1f68d9c33aee62a297b9776bf2ff72abba22b2f1f4b462ecfef25c4f928935429c10d737b52d4504023458d3db2898c63bf5c08e683db4a49da9935493a8ea21a3599a12aaf90fcbcdaa19e8c3d3a38c6c0bf7deaff7d7c3433ff564c286e44d3d61931aae26e228bcc9a7f082ff01c4f8ca8f2db02a6b16c7add26bd649b31d85307d390f07811f1128150d3bc1036d4b53795605e50b686d023d4c61147d44101197ca94eae77f67b8a6e08c188bd3542d9a121583d8133f7dea2419ebfed87fcb82174a1c3373ce71df8ee1770716028bd45eabd83072c7c2fb3b9982527536eb869065d3993fe121936e3759951c66a1e9b5d468a2db2bb34cb10e7dc8ed5abf6196eeef0c13984b7d7716929e2e91595f58abf536a78a7134c58085447f3dc560fcb7205ac5a1cbdf646dcf07a634b2c27f7c17ca100ecbe67cde1f0754e9306ad18187fc376500db24279b2a4d0ccbf21a77d87cbf4abf75973518e631891d50f7f12b074dd4f25ca4eb084994280d3be190de677d2b70d44af13d4976fd573039bf039fbed60261bba496bca800b425385cc7e99fb6b703b40729d2ac7353645b81e7c15fe7b59a1fae165ba0e6257fc5e6383c4b6a458dc8ca4f8a365b849c11f196bd95d14a43dfddc2c15a7bfe9f5109d10f200f895e18ed0bf400a1ba7d7116eb005e41928476c003f399ad7126b9b9e4226fab3718f469a9084063e75df6f8fe691e6700a9f4cd9fb2e92085861d00fdfb0a0fa740d0daefa75f63bc9573e3caf8c97dee8a85e2e9d85b15aea9bf2932293f6cdaf5d2c1d9ae9b067d1d868e67d1fe4a2491cc16c04e82df1608f17a7f6c751ed0f8c5a2103749b5e69f2cf8da7b1468c21b6886a7b490643c0f45ac541806303131ef3e104ad5b50f34e10ee5d279a18444af6389f3856cbde5986773b83d68696705549eb850019ac6c0316c93b749d09fc787bab63ea86b321ab359ab049fdd2a5ca68263891289401decd860f915123600c7dc048300eab24c3c5cbd8543a3b6196edf21ee5d699d1e689af01058249699e9f0693f641b10835612436d608edee59b4d5803ab354bcba4a1638a2"], 0x10f0}, 0x1) r7 = socket(0x2000000015, 0x80005, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xf4}}, 0x1c) 14m22.971674088s ago: executing program 4 (id=6303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9f000000000c0000000cfa0000080000000000bc7471a2000000000000006161612e5f7e0094e781e0cc773bfb1a1a6d2adc498d1358a84d8fcc7929ce95357671cf4e38ef5ebb40c9fee22bd16f875733405f7ef20977e5c38747acc87145aade2cb0dbbf2bfa892b0c32430b7d3689b594e471b951138164caa65b3991211f58abbe414225ad8943cadc961bc379fdd8683c95d234c4991ddc119c2b173339501adfa9c9e785b8e02acefd83757872b28dcf59ebdf2700001980dacb68c3ce09a22a609520fabf28f2dea34a1303789db7ea9c854c929cfbcb"], 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022ebcf90fc88d287358685527eaaded261de0b339544df6a6d0dd926dbe14ec1314dc0e6e0d3e0377a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000567708004100736977001400330077673200000000000001010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x0, 0x30, 0x1, 0x7}, &(0x7f0000000280)=0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a0102049a0ccf9458949b010000000900010073797a30000000006c000000160a0101000b020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f00000000000000f6ffffffffffff07000200"/155], 0xb4}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64df4a2b8995fee0}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/93, 0x5d}], 0x1}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 14m22.31111748s ago: executing program 0 (id=6304): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x98d8, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf4, 0xc}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 14m22.013376659s ago: executing program 2 (id=6305): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket(0x2c, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = socket$inet6(0xa, 0x2, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x4, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}, @RTA_NH_ID={0x8, 0x1e, 0x80000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 14m21.87304136s ago: executing program 3 (id=6306): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x18, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 14m21.804229284s ago: executing program 3 (id=6307): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0xffffffffffffffab, &(0x7f0000000400)=[{&(0x7f00000000c0)="92", 0x1}], 0x1}}], 0x1, 0x9200000000000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x400, 0x8, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @end, @cipso={0x86, 0x48, 0x3, [{0x0, 0x12, "74abbeb8909d0f70fc59304e10d8dc32"}, {0x4, 0x12, "aa797de000f600000000008000000000"}, {0x1, 0x3, 'G'}, {0x2, 0x8, "14eddc2603ab"}, {0x2, 0xc, "939759d3397c4933961f"}, {0x5, 0x7, "19e3259ffe"}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x4d, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x4}, {@multicast1, 0x9}, {@private=0xa010101, 0x8}, {@remote, 0x7}]}, @lsrr={0x83, 0xb, 0x1b, [@local, @loopback]}, @lsrr={0x83, 0x7, 0x4b, [@loopback]}, @rr={0x7, 0xb, 0x3b, [@empty, @multicast1]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x1e, 0x6, 0xc000, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x7, 0x7df}}) getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x20c0000, 0x80000000, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x53, 0x2b, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x2, [{@broadcast, 0x95e}]}, @timestamp={0x44, 0x20, 0xea, 0x0, 0x3, [0xfffffff9, 0x9, 0xb5f, 0x7, 0xff, 0x0, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 14m21.435177185s ago: executing program 2 (id=6308): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 14m21.19631467s ago: executing program 2 (id=6309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xcc}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)=ANY=[@ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4008041) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24040044}, 0x28040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x10002, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 14m20.149803511s ago: executing program 2 (id=6310): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0xb005}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140800003a0000042fbd7000fbdbdf250a0000007973b1e91a2c785ea4e18909ee684af573816b63e6648f8269b74432e76d3a97531a14af059b28c2f369472fbe66e636d0978b9a309636968ab66e41636ae81ff3589ed7c3c5538cdae3e39b8c616d13509b17b58342bbec47204d522c53d3f411a42bcb7393dbed3c57f5fcb108f5bf67e9913095f7e4851ad84fd5159127d675bd4c4bae7616b9bc53418ce8cce8fefe62125e043ad22b62f1d2de29bfe6e7e275466f0700d80752e105d3211ccc20151917750600002b9eb9ff829eb9df6d2bb58e6c9d24447da1b548387b603952efda8dd9a7e85df86464ee7d2bcb904387d8d477c4e325e7f620a879ae461ab39959d7ce3c4f11c2780b0000000000001be4effa54c6b7e961f98d237f7121a75b3437ec7f56a14149bf6996117504b9c406f774bfe641bba58719cbcafeb074251340bfb7672e3fd53387375333633a0d6d36ebd07ca3a243158ce0eb707295c61fe0751c000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) bind$tipc(r2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x24000080) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14m7.225149672s ago: executing program 32 (id=6304): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x98d8, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf4, 0xc}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 14m7.173200837s ago: executing program 33 (id=6303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9f000000000c0000000cfa0000080000000000bc7471a2000000000000006161612e5f7e0094e781e0cc773bfb1a1a6d2adc498d1358a84d8fcc7929ce95357671cf4e38ef5ebb40c9fee22bd16f875733405f7ef20977e5c38747acc87145aade2cb0dbbf2bfa892b0c32430b7d3689b594e471b951138164caa65b3991211f58abbe414225ad8943cadc961bc379fdd8683c95d234c4991ddc119c2b173339501adfa9c9e785b8e02acefd83757872b28dcf59ebdf2700001980dacb68c3ce09a22a609520fabf28f2dea34a1303789db7ea9c854c929cfbcb"], 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022ebcf90fc88d287358685527eaaded261de0b339544df6a6d0dd926dbe14ec1314dc0e6e0d3e0377a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000567708004100736977001400330077673200000000000001010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x0, 0x30, 0x1, 0x7}, &(0x7f0000000280)=0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a0102049a0ccf9458949b010000000900010073797a30000000006c000000160a0101000b020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f00000000000000f6ffffffffffff07000200"/155], 0xb4}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64df4a2b8995fee0}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/93, 0x5d}], 0x1}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 14m6.660627315s ago: executing program 34 (id=6307): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0xffffffffffffffab, &(0x7f0000000400)=[{&(0x7f00000000c0)="92", 0x1}], 0x1}}], 0x1, 0x9200000000000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x400, 0x8, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @end, @cipso={0x86, 0x48, 0x3, [{0x0, 0x12, "74abbeb8909d0f70fc59304e10d8dc32"}, {0x4, 0x12, "aa797de000f600000000008000000000"}, {0x1, 0x3, 'G'}, {0x2, 0x8, "14eddc2603ab"}, {0x2, 0xc, "939759d3397c4933961f"}, {0x5, 0x7, "19e3259ffe"}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x4d, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x4}, {@multicast1, 0x9}, {@private=0xa010101, 0x8}, {@remote, 0x7}]}, @lsrr={0x83, 0xb, 0x1b, [@local, @loopback]}, @lsrr={0x83, 0x7, 0x4b, [@loopback]}, @rr={0x7, 0xb, 0x3b, [@empty, @multicast1]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x1e, 0x6, 0xc000, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x7, 0x7df}}) getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x20c0000, 0x80000000, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x53, 0x2b, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x2, [{@broadcast, 0x95e}]}, @timestamp={0x44, 0x20, 0xea, 0x0, 0x3, [0xfffffff9, 0x9, 0xb5f, 0x7, 0xff, 0x0, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 14m4.724664909s ago: executing program 35 (id=6310): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0xb005}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140800003a0000042fbd7000fbdbdf250a0000007973b1e91a2c785ea4e18909ee684af573816b63e6648f8269b74432e76d3a97531a14af059b28c2f369472fbe66e636d0978b9a309636968ab66e41636ae81ff3589ed7c3c5538cdae3e39b8c616d13509b17b58342bbec47204d522c53d3f411a42bcb7393dbed3c57f5fcb108f5bf67e9913095f7e4851ad84fd5159127d675bd4c4bae7616b9bc53418ce8cce8fefe62125e043ad22b62f1d2de29bfe6e7e275466f0700d80752e105d3211ccc20151917750600002b9eb9ff829eb9df6d2bb58e6c9d24447da1b548387b603952efda8dd9a7e85df86464ee7d2bcb904387d8d477c4e325e7f620a879ae461ab39959d7ce3c4f11c2780b0000000000001be4effa54c6b7e961f98d237f7121a75b3437ec7f56a14149bf6996117504b9c406f774bfe641bba58719cbcafeb074251340bfb7672e3fd53387375333633a0d6d36ebd07ca3a243158ce0eb707295c61fe0751c000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) bind$tipc(r2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x24000080) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.20630825s ago: executing program 1 (id=11658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x5, 0x0, 0x31be898a84b48a50, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) (async) unshare(0x26020480) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x0, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r9, 0x25, 0x0, @void}, 0x10) 2.212351498s ago: executing program 8 (id=11670): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x9034, 0xa2, &(0x7f00000002c0)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x7, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x4, 0x6, 0xe}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2c, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e24, 0x9, @mcast1, 0x55}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x22, 0xa, 0x4) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="002800000000df01e8f412800c000100876163766c616e00c940e70dba1e", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r10) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r9, @ANYRES16=r11, @ANYBLOB="010028bd7100fcdbdf25020000000b0001005c5b3a57"], 0x20}}, 0x4c880) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000001340)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="30040000", @ANYRES16=r12, @ANYBLOB="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"/1086], 0x430}}, 0x4081) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000120001032cb97000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a743400000d0000000000"], 0x30}}, 0x24000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c6014780", @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r15], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0xc045) 1.890527079s ago: executing program 8 (id=11673): socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x400000005}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd27, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100000000000000, 0xaa3, 0xfffffffffffffff8, 0x0, 0x400000000}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.71886669s ago: executing program 1 (id=11675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/267, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 1.644063868s ago: executing program 7 (id=11676): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1d7, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4008000) 1.551054727s ago: executing program 8 (id=11679): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93", 0x2}], 0x1}}], 0x1, 0x60cd894) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@gettaction={0x11c, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4b}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x6e, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x66b1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_MAP={0x24, 0xe, {0x500, 0x4, 0x5c00000000000000, 0x9, 0x2, 0xf4}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x4, 0xfffffffd, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1.55094082s ago: executing program 1 (id=11680): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="560000002a00000000000000140101000100"/49, 0x30) 1.448331185s ago: executing program 7 (id=11682): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f00000004c0)="ab34", &(0x7f00000005c0)=@tcp}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x700000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000ad8800000000000008600000", @ANYRES32=r1, @ANYBLOB="02000000018dffd2bf000000a1afa600ec3f0000000000c6cf5c9c15ff160e148747d1bf79c06c218a1d18c35e6a9b763c15a98081f0b174ad172438a239107c24e711e648e36e5bae640fa6be1b3e6589defd311ae382c2d9f1947122e40d748d11b578fbfabf5c53cc8ac250a981411c3a059e", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000000000000200"/28], 0x50) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="6dc834312197c24b55d1209c02177d2318aea6ac1156a1c6b7a573041e6661642452faa6d50398b43afda0140cb936f6cac535bf35bebd3b39f11ba42e874217c0a95ff479d183b3a842fc6d61209d519867880f0be2d5da64223c9d337ac0605f434c846bd001c3784e5a25d5520082558b63bdfea152bf41777e2ca6a326efe64fde760c1928c82b2c93d52b0cfc69569d1765ca182c1fc9887981bfb2617b1e304539413a603aa578f81a26f2dc021ed9cb091901a167f07be5ff8f5fa8417d64e54ee9590fa3a3cc", 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0x0, 'team_slave_1\x00', 'veth1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x52ffe4dd04836947}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000080)=0x4) 1.39558229s ago: executing program 1 (id=11683): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007d0800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x6, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "271de34fd4ce5addd9335cbdb6ce5e2d"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/220, 0xdc}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/214, 0xd6}], 0x4, &(0x7f00000004c0)=""/174, 0xae}, 0x10020) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007d0800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x6, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "271de34fd4ce5addd9335cbdb6ce5e2d"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/220, 0xdc}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/214, 0xd6}], 0x4, &(0x7f00000004c0)=""/174, 0xae}, 0x10020) (async) 1.330393989s ago: executing program 5 (id=11684): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newchain={0x150, 0x64, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xf}, {0xc, 0xc}, {0x4, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_ACT={0xac, 0x2, [@m_skbedit={0xa8, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x71, 0x6, "4904e15e446d3f2dfdb3d215060a74f229a0753e539badd3ceaf7a456ac7d41aa868d54e05170109eb8eebc725f7f78b70cbe3516f71d8c7ea379d912da15421b45a5caa11bb1f107c73cd1f5e3c86f6cd780e9bb1bb45447f2188966a2e19c5cbaf924d2c8bcb4e30486fc87b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff3}}]}}, @TCA_CHAIN={0x8, 0xb, 0xdf06}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xbb}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x40, 0x10}}]}, 0x150}}, 0x4006000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000aa84c5222e385d49dac9cbe32d09128f9eac5f57222b0121ca4e9866cc27aef247b4b2edaf77d889536d9aca48a59c42449b19a50180a6674cdbcd6e6facec5faf11128afaf0689561f8dbddaa725a20e86ef2ada4d7bad4a07df9e79793207bcc64814f2d9dc6a101f874c95f40a920a0c627dfe667ffc32ee35b649108c3f7d5", @ANYRES16=r8, @ANYBLOB="080028bd7000fddbdf25080000001c00038008000200a8e3000008000100040000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) getsockname(r9, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000300)=0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000c00160007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53, 0x700}, 0x20) 1.23641879s ago: executing program 7 (id=11685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x9, 0x1, '(}.:\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '&++\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000003f80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003f40)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x301, 0x0, 0x0, {0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELSETELEM={0x3a7c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3a68, 0x3, 0x0, 0x1, [{0x1298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x1268, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb8, 0x1, "aa63c0f9fab4b6ea53d0edd3d03d89af9615f2fdf208875f307b0293f7264b86999ba4fe6f272da549164e0d6434cfdce60c06f79b973ce69b563e886f25bc880ac976ca4949e41718c6690abb39cb906ad0ef1774eaa434477811e9abbe6a438f1f6fca3f319585e90dcd77835b68969e231e53c9178ae3b19d60ae3f9bd5b7ff6a563a99c8827ced3bf905e8566c24c79611b1602ba81cbe5bd63ddc0857b086ef0e4ee29c41cffdadae53c94604326936f267"}, @NFTA_DATA_VALUE={0xaf, 0x1, "ac48d9f76e111af1708ddf01b8e23f99b1a811d709e25352fcba715fbbe78b9e394ae77ac9b3297278c092ce5aa677f0df319fbf7a09dad2360bfbd32385bb3d6995ce30d1ec46cef0d0b8a6c0975e81b2e430a3d41204ad8e198faadc4f8643110e21b716b03b77bb04b0a953c963430d37080317c3fc0e54f4330c71153621fadb7a78c980af6966e183ddcdc4bb71d49ac3bc7ec3a511a13560b4ae6930b16a5cec8b6b6e3a5ab4abff"}, @NFTA_DATA_VALUE={0xa3, 0x1, "c4921237cd24983f5da60fd2538630571907453b77e101ebf16c7b6b309fe4ed8ef73997040386faafe7c62460f40e0a6d7941ed4c458cea6237f2c496c6f94c22f40fa1b81eff271194b824f87cc0945f5e0cac7c06958947bf437f31030151a7fc9bbc5d12bfa0dad629201ac4a84ff00e6dbcb38a51ae85beb8cc9dd6842dafc0a158b4ed03700a7ed814917c28f0757996ab3d6b4e41f74993d6a8be6e"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x12fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x19c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x39ec0eef}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "d43ebc4ed6212284e7f98689a9620686de6d5cb4b4c1a1ce795144f8ccde3d265d19c6a745d2581d35a35e4cdc260c0ed8e3f8e15f5231d78dca66432a3d0d064a3717bbc6a24b9f24e9525e492730cf64b09042d153bbc769fa39a258a50e55bdad38477b9284499b02"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "d987528d3eec31a43be04d412f9af4d1f92896dc5cc7579ba941e47f81e27ece8f7464c7ba6b6f765184a40744379dafe575d6b57f9945c66626454b2da6f3b0267679403108500750e55d39223d9b03a194debdbdc9bbf6e9ea3d64b0b9341757"}]}, @NFTA_SET_ELEM_KEY_END={0x1138, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x37, 0x1, "6dbfdb0061c22ceb7983090ef9e9a51363a908abbd30d24d812c2124d54d2815801ca6cc9885db9b99f2647500ead5ca39a7fc"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xab, 0x1, "651a6585ddf0906dc4c29df9e4cdffab06e40d2d454266ce7bd3cebe4609087040e1d942712a718a61fb7f309d14c395ad4369a03bf940d0895c46d89439032d60f8b76cf6e062151f705c2dbf5c3cf6a54febfa0124d7dab58d0ad7beebe281e43bb4feabde1868719b392595505999570fac58c3c7b0eeefb7dfdff0fe5c41031cbac6f30735c83dcf1d982d37d447869b97c5be2d1497e552c5ba7381e716cc1f0f48b1d991"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, {0x14d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa2, 0x6, 0x1, 0x0, "05950049706997107e219e63881cf14f69fa1feddedd33daa6c1f73592d829eca7d96087b84c060d89cdad36cfdc6fc5fac110489190918d3bb1af2db7633b56cd107c90f4e122d421b2fac950b5b326cb53542b84e3cceb64fc7205ef06e2c7b6ae7956105ab248f5802d0f7a1524f09081523096909ecef9db8102180dfafeadd002607028aa385e45d0b8348b15cfedf7c3452a13aa9e6a051278826c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x1218, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x77, 0x1, "d4e47a68a3f34a85e1651027c0a0fd8d89af6e9420aa1b1d95662d56eb418e9e0d541973a7e9790ba655ac8068aad5f45f80b3f1239cfeee8b2e222812d3292ef89476b1889122aed17c8bccdd97896f876ce1590847f4438cb10defa0b0c25658f278a1bc4f989f577a20cd82eb5c515d9161"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "d7db49bb01950a165ef9efcec6e782a4b1d5740db583e16d79b29ba8f559a11b398dd82f14bf437846240e7b41538791037631cef066448ad4b88a1ce0f7c98684e170c37856e4d375b763127d734aa1d3c813d35e8ad9fdaa2685c5b2c4deb339fad554f27f0d1bcacd329cbf585ea1c3e7790f18652035154fdd9184c32c6a60afa66e3fc8a4395b5b0fdc53fa6187cffbf24d800597a6c72a2dfe75f91dba7a8717430c6e8611e21a9694b34fc28e306fcb4aa51a4d1e42b08f5ecbc78901e1c1fe277c0411afe0c0d2f2"}, @NFTA_DATA_VALUE={0x6a, 0x1, "0843cd561f26c77e10c5c275ae3315f52acd92096abe0a8a64603bb4046f26a319ee608ee37c62455b8b34f1eb48b45a94431d6284b2036a4d38554f740569c0adc5db862d83a91033a5b1aec37840b2562089680c6748db1886a7fa3817ea64a96033e1e48f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "d02acccc92ed14df96a686"}]}, @NFTA_SET_ELEM_USERDATA={0xf, 0x6, 0x1, 0x0, "20f5b87066ba40a952279d"}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "63ad354332146a6eea797c7106715c07957bd77ac81ddafe1080363e03f47c8c94eb6cafdedd4aeca02bba66a224f50c330153670cca9de086b884c03b5c7607f1f1893eac04e8b9093a167deb00b3bd7affc886e6a3d9e4ad2c9a29a162fcb405b47f44006aee10b9a2df7d12a796e1daaa39996e678ad169ca5bb47ea0ffc1f28a1eaf2e27634ec7e227983876431d5823592dead67d3a056d761592f11eb2a5cf650c0cb1427ce20082"}]}, @NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0xf04, 0x0, 0x0, {0x14, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3bb0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.115420037s ago: executing program 8 (id=11686): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @local}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2e0}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000540)=""/29, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0xad}, 0x94) 1.023054618s ago: executing program 7 (id=11687): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c5100000200000000000000040000000000000010200000000000000b0000000500000000003eff9205a4f68f8b16e3dad3fe002900a7fb96c66374dc11bda2cfe7ca3658120420ff02a63366777170622978c4efa5b028ac3c405d8c515324591eae3595254db96bc4c223c7e051ee2122fa5b9077be2d5031da01d8917e3b5c4cf4980ef7504381490eaabc598cb0fd0cfbf9a970fcaa5cd60b9057"], 0x0, 0x46, 0x0, 0x9}, 0x28) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x4000880}, 0x881) accept$nfc_llcp(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000180)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x11}, 0xa) 1.022704947s ago: executing program 8 (id=11688): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x800) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) (async) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) (async, rerun: 32) listen(r6, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x102, @remote, 0xe3}}, 0x0, 0x0, 0x26, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYBLOB="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", @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="cc040000ff01000000000000000000000000000186dd"], 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x30, r10, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3ff, 0xa87be27d8b709af6}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) 990.775418ms ago: executing program 5 (id=11689): socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x400000005}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd27, 0x0, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x200000000000000, 0xaa3, 0xfffffffffffffff8, 0x0, 0x400000000}, {0x0, 0x8}}}, 0xb8}}, 0x0) 982.851323ms ago: executing program 6 (id=11690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f00000002c0)='-[+\x00', 0x40001, &(0x7f0000000440)={@align=0x2, {0x6, 0x0, 0xe3, 0x10000}}, 0xff, &(0x7f0000000480), &(0x7f0000000500)=0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r1, 0x0, 0xad, 0x1000, &(0x7f0000000740)="430d645ff0b9e5be75ca571a6ed802ab52a0a356dc6be5d566ccafaffe82b746317c9319bf3e386a1b1b5f6888323115533b8ad8600b20fd26819cc0c3a95c46b89f93d2842218a5fe77d7cdf7f22a9bbfdeab489ab2d02919545e9c4e8ae96c0739cfd35c0164110fa5b3a05748a55acd01818bbafdf18d395b73032f1d1f209d4d7f08a91b84facb208ca4f64961c37c7d3033ef69a7325f16f738729e84717478659b8a49d31a2bb119123e", &(0x7f0000000900)=""/4096, 0x2, 0x0, 0x75, 0xa, &(0x7f0000001900)="4a83b76cf4e20f3c25c14a4147a2b4c557e1beca6372bf57d880d33226bc52870be4deb1d7a38de90d57c741a248bd5f0e48289a584b27a822322e4b37d495039045bb8911dda2014b7b8d86d32433e38b4b6573ca053c553d1243a57913fcf6ac1e86bb89a247426731388553df62fa3fd0d43191", &(0x7f0000001980)="479484ff23eb656c6fd1", 0x1, 0x0, 0x9}, 0x50) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f00000004c0)="1353e3068204", 0x6) getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000001b80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x64, r4, 0x731, 0x70bd2b, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x2}, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r6], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="020027bd7000fbdbdf250100000014000200697036677265746170090000000000000900030073797a32000000001400020076657468305f746f5f627269646765000900010073797a31000000000900010073797a30000000000900010073797a30000000000900010073797a3100000000140002006970766c616e300000000000000000000900010073797a3100000000"], 0x98}, 0x1, 0x0, 0x0, 0x40000001}, 0x41) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000030000008500000013000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r9, 0x0, 0x12, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r10, 0x3) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0) 790.151262ms ago: executing program 8 (id=11691): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(r0) 682.984907ms ago: executing program 5 (id=11692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xd1}}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x2080010, r0, 0x8934a000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="c3c19831ed1cf37aadf6c27030ee46e4b055d02e15838f46830d0eba70832f65455d47154f5b6f56349d9ba4795a165d10ac2488542891624acb1b4dc60aa12e3177dd0aa59b24a293ec8a7a218687f6f0462f4e8c0741d707828c4c02d48170c5fdb13c4238cc39decf4e73f186ceacc046019af2477d1ab5dc9a9c5f213a86e679b42d4c18970582d34a60abf06feee785a1b0c0c2c6b30c", 0x99) 673.522422ms ago: executing program 7 (id=11693): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0x74, 0x30, 0xb, 0x9, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x4, 0xffffffffffffffff, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0)=0x28, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x2a0, 0x2a0, 0x148, 0x208, 0xa8, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x1}, {0xffffffffffffffff, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x4}, 0x1, 0x7}}}, {{@ip={@empty, @local, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5e, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x3, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 633.115685ms ago: executing program 6 (id=11694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000f9ff00009500000000000000e5000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8916, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 612.818048ms ago: executing program 5 (id=11695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0188000063180300240004800b00010069703667726500001404028006000300ff0f040006000200f52900da"], 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0188000063180300240004800b00010069703667726500001404028006000300ff0f040006000200f52900da"], 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) 551.911466ms ago: executing program 7 (id=11696): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c00078008000840000000af11000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x9}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e, 0x61, 0x2e, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/4, 0x2e, 0x4, 0x1, 0xfffffff8}, 0x1f) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) r3 = socket(0x40000000015, 0x805, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000280)={0x2, 0x4, 0x1}) (async) getsockopt(r3, 0x2c5de000, 0x5, 0x0, &(0x7f0000000540)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) (async, rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000380)={0xb0000001}) (async) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001000000600"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x24000000) (rerun: 32) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0xff, 0x8000, 0xfffffff8, 0xfffffffc, r9}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYBLOB="01006200aab5dfd72708863bd15270f01f33994fdd389ae7c3ec355d762331db8dc8f2b6b01a69ca755cf2d073469a79d9abbb6bc5fca257e67138c47e490a1dff51ba29348f98d84bd16385b23f18e57f5a5d2ce1703875ae65f16ede1df056cc6f95901f0c"], 0x6a) (async) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x40400c4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000002c0)=0xffffffff, 0x4) (async, rerun: 64) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x4d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffff, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {0xffff}, {}, {}, {0x2, 0xb8}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {0x3, 0x0, 0x0, 0x1}, {}, {0x2000}]}}, @common=@mh={{0x28}, {"e4bd"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 504.707128ms ago: executing program 5 (id=11697): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1, 0x5d2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 477.964479ms ago: executing program 1 (id=11698): socket$kcm(0xa, 0x2, 0x73) pipe(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) sendto$inet6(r0, &(0x7f0000000000)='P', 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7, @loopback, 0xfffffffe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603caac36dcf889000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 431.393531ms ago: executing program 6 (id=11699): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800080000000000000000000000000061129800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b26b8538cd", @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080004007f0000010f000700756e636f6e66696e6564000008000500ac1414bb"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005100000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x260, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xffef}, {0xc, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x230, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x108, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1ff}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd6}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x493fbccf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5a83}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x39eb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x768}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r2, &(0x7f0000000440)="46799c36fe11e95322a4491da8d20f905a80c1c4c9fb6821ee1a5ab80c7463834edec396fccd72c51e7a7d956138833d298c253970c02fc6aaa9a244503d61acf5ce7fedef29b7d5390ccf9b8d0cc0cc56f08413c1405978abbbc196c808f6ea7bfc1c34632f7e03b706916b6cd0d45cf6380c7a9ef41e68c5f7eb97d048bb6047d50264b0293ac4ff5202", &(0x7f0000000800)=@buf="071c54c99ee0b552792aa581ca1199a75e813ec211bae004667dbe01037d3746aa365f7f266fbef83ba30c14063f94c613391cf1189a54f284c14a3ac3a7bd0c200013e2c45dc7ad6c02f1fd583693367064ed342916d6327c4bf763cad6d5c4dcdfb1d8eb1bfbe48144a75c33eed5ef01e45a76ddecca17322ef7fa255565755a5fe3c774567b19b0c82d4ca296e7a9ab78873738b7339efb450a96aaaa1df300654900cc613e36c663d9da0e4ac4577d6387e3824cccc6", 0x1}, 0x20) 315.496714ms ago: executing program 5 (id=11700): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 307.114559ms ago: executing program 1 (id=11701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, &(0x7f00000000c0)=""/140, 0x8c}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3ddf}, "b4"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 214.885835ms ago: executing program 6 (id=11702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="50d58d7b1c000100040900000000000007000000", @ANYRES32=r1, @ANYBLOB="8000c6040a000200aaaaaaaaaa250000"], 0x28}, 0x1, 0x1000000}, 0xc12cbdf9045b9055) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000008dd52656ab020601080000000000000000010000080c0007800800124000000005050004000200000005000400000000000900020073797a300000000010000300686173683a6970"], 0x4c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000003000008000000040001801c00028004002100140003800c000180080001000000000004000180"], 0x34}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x3f) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYRES8=0x0], 0x3c}}, 0x40010) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010001ffffbfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428050009000700000008001f000900000008000a00", @ANYRES32=r7, @ANYBLOB="8e8024cfb434cf9967db7b8f8de66ca8590499aa4a1788cc8bdf07722e0abf5c8007b5cba0ec460121a69dfb650fb47e8aa89920c999b27a917afcedd189c9c54474a48f204ae1d2c5b31b4b94"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000900)={&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x7, @mcast1, 0xc}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000400)="2b734c6a1768d16c0eca2356e0b009be4dcb4439eefeaa42123450ae9089ec41ac686a54c623258cc462cf68ea2e04bda1a49d60b46d32d1fa42ed1a2088924f93f5937dbc8fe22dbd25525f1d55f0b583cabb2dbd85a8fc281f3a0d9ed293420c374761cb806e69c1ed1a72e66ea75574ea53b20e3169e68bc8bcbdf5802ccb3496ea4fd2446b3b0ac99fa3710c7d77b53f49c90ee34ee6385af4ce58154f241a357125ba54bf1c345b9cab58cc1d3c195d4b41ccb084ffa81b957a6dacef878e35b4a95b6dc611f7c6c6fc8142c4d4126004e9fca833125e4c8a8c5c2b6493a4", 0xe1}, {&(0x7f00000007c0)="812cd43e07e40d02ed9e198a3977ea7312cea6f755bacb9586fc97e25a3239052b612e7baff8257efc28989c929deb75b79204d4d7cfec7641120f3fdf6ff5ef3b2e3d2fd2a5b7acc7e5b326cc6e0fab3fbb13e3c47d40d77008d68ba52016349712e27c4b5f8630ffe5c41994a707c8a5", 0x71}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="300000000000000084000000010002000080090018000000040000000900000005000000accd000006000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000000000000ff0100001800000000000000840000000500000030000000030000002000000000000000840000000200000006000400000000009b5f2306", @ANYRES32=0x0], 0x80, 0x1}, 0x4) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {0x4}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0xc, 0xd, 0x348e, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @private0, 0x7, 0x20, 0x6e5d, 0x2}}) r13 = socket(0x28, 0x2, 0x18000) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002600)={0x0, @in6={{0xa, 0x4e20, 0x8, @local}}}, &(0x7f00000026c0)=0x84) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x81, 0xff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, 0x0}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001a40)=ANY=[@ANYBLOB="ac040000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004005d9000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="840102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004000010000000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB="400001002400040071756575655f69640000000000000000000000000000000000000000200000000500030001000000080004000500000008000600", @ANYRES32, @ANYBLOB="4000010098fe01006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="0002028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r15, @ANYBLOB], 0x4ac}, 0x1, 0x0, 0x0, 0x48444}, 0x800) 130.443555ms ago: executing program 6 (id=11703): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB="0000000100000000000000000000000077d900001900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x13, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x32, @local, 0x0, 0x0, 'lblcr\x00', 0x3a, 0x5, 0x4}, 0x2c) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r6, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000005000000050000000800000010040000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 6 (id=11704): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="560000002a00000000000000140101000100"/49, 0x30) kernel console output (not intermixed with test programs): er_hwframe+0x77/0x7f [ 1803.386114][T15467] RIP: 0033:0x7f7b67d9e159 [ 1803.386132][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.386149][T15467] RSP: 002b:00007f7b68b80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1803.386173][T15467] RAX: ffffffffffffffda RBX: 00007f7b68025fa0 RCX: 00007f7b67d9e159 [ 1803.386189][T15467] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1803.386202][T15467] RBP: 00007f7b68b80090 R08: 0000200000000040 R09: 0000000000000000 [ 1803.386215][T15467] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1803.386228][T15467] R13: 00007f7b68026038 R14: 00007f7b68025fa0 R15: 00007fffa6760d58 [ 1803.386262][T15467] [ 1803.398443][T15467] netlink: 'syz.7.10651': attribute type 16 has an invalid length. [ 1803.398465][T15467] netlink: 'syz.7.10651': attribute type 17 has an invalid length. [ 1804.166247][T15492] syzkaller1: entered promiscuous mode [ 1804.166270][T15492] syzkaller1: entered allmulticast mode [ 1805.014514][T15550] __nla_validate_parse: 19 callbacks suppressed [ 1805.014535][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10677'. [ 1805.014553][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10677'. [ 1805.014570][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10677'. [ 1805.025310][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10677'. [ 1805.103343][T15553] syzkaller0: entered promiscuous mode [ 1805.103362][T15553] syzkaller0: entered allmulticast mode [ 1805.356579][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10680'. [ 1805.897611][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1810.296691][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10693'. [ 1810.353126][T15616] veth0: entered promiscuous mode [ 1810.358731][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10695'. [ 1810.456416][T15622] ip_tables: iptables: counters copy to user failed while replacing table [ 1810.460547][T15622] veth0: left promiscuous mode [ 1810.833498][T15640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1811.126364][T15627] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1811.385792][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10706'. [ 1811.386388][T15659] validate_nla: 6 callbacks suppressed [ 1811.386405][T15659] netlink: 'syz.7.10708': attribute type 10 has an invalid length. [ 1811.423606][T15655] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10707'. [ 1811.443751][T15659] netlink: 'syz.7.10708': attribute type 10 has an invalid length. [ 1811.444056][T15659] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1811.445993][T15659] team0: Port device netdevsim1 removed [ 1811.478100][T15659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.499588][T15659] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1812.848562][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10723'. [ 1813.020488][T15724] syzkaller1: entered promiscuous mode [ 1813.020513][T15724] syzkaller1: entered allmulticast mode [ 1813.038961][T15738] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 1813.045360][T15738] tipc: Enabling of bearer rejected, failed to enable media [ 1813.051411][T11332] batadv0: left promiscuous mode [ 1813.210033][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10726'. [ 1813.409406][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1813.427427][T15754] syzkaller1: entered promiscuous mode [ 1813.428325][T15754] syzkaller1: entered allmulticast mode [ 1813.834942][T15770] netlink: 8183 bytes leftover after parsing attributes in process `syz.1.10732'. [ 1814.050594][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1814.180281][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10735'. [ 1814.302180][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10738'. [ 1815.066790][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10750'. [ 1815.068952][T15841] netlink: 'syz.6.10750': attribute type 23 has an invalid length. [ 1815.305492][T15850] __nla_validate_parse: 1 callbacks suppressed [ 1815.305514][T15850] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.10754'. [ 1815.376487][T15850] batadv1: entered promiscuous mode [ 1815.376511][T15850] batadv1: entered allmulticast mode [ 1815.673471][T15869] lo: entered promiscuous mode [ 1815.673648][T15869] tunl0: entered promiscuous mode [ 1815.673803][T15869] gre0: entered promiscuous mode [ 1815.673931][T15869] gretap0: entered promiscuous mode [ 1815.674145][T15869] ip_vti0: entered promiscuous mode [ 1815.674290][T15869] ip6_vti0: entered promiscuous mode [ 1815.674411][T15869] sit0: entered promiscuous mode [ 1815.674525][T15869] ip6tnl0: entered promiscuous mode [ 1815.674637][T15869] ip6gre0: entered promiscuous mode [ 1815.674750][T15869] syz_tun: entered promiscuous mode [ 1815.677079][T15869] ip6gretap0: entered promiscuous mode [ 1815.677219][T15869] bridge0: entered promiscuous mode [ 1815.677359][T15869] vcan0: entered promiscuous mode [ 1815.677508][T15869] bond0: entered promiscuous mode [ 1815.677524][T15869] bond_slave_0: entered promiscuous mode [ 1815.677695][T15869] : entered promiscuous mode [ 1815.677866][T15869] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1815.738859][T15874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10760'. [ 1815.739551][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10760'. [ 1815.793422][T15869] nlmon0: entered promiscuous mode [ 1815.793576][T15869] batadv0: entered promiscuous mode [ 1815.793725][T15869] vxcan0: entered promiscuous mode [ 1815.793865][T15869] vxcan1: entered promiscuous mode [ 1815.794002][T15869] veth0: entered promiscuous mode [ 1815.794153][T15869] veth1: entered promiscuous mode [ 1815.794306][T15869] wg0: entered promiscuous mode [ 1815.794461][T15869] wg1: entered promiscuous mode [ 1815.801480][T15869] wg2: entered promiscuous mode [ 1815.801680][T15869] veth0_to_bridge: entered promiscuous mode [ 1815.801952][T15869] veth1_to_bridge: entered promiscuous mode [ 1815.802236][T15869] veth0_to_bond: entered promiscuous mode [ 1815.802579][T15869] veth1_to_bond: entered promiscuous mode [ 1815.802864][T15869] veth0_to_team: entered promiscuous mode [ 1815.803246][T15869] veth1_to_team: entered promiscuous mode [ 1815.804268][T15869] veth0_to_batadv: entered promiscuous mode [ 1815.804430][T15869] batadv_slave_0: entered promiscuous mode [ 1815.804577][T15869] xfrm0: entered promiscuous mode [ 1815.805980][T15869] veth0_to_hsr: entered promiscuous mode [ 1815.806274][T15869] veth1_to_hsr: entered promiscuous mode [ 1815.982260][T15887] ip_tables: iptables: counters copy to user failed while replacing table [ 1816.019956][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10759'. [ 1816.027132][T15888] netlink: 'syz.5.10759': attribute type 16 has an invalid length. [ 1816.027155][T15888] netlink: 'syz.5.10759': attribute type 17 has an invalid length. [ 1816.036806][T15890] netlink: 'syz.1.10764': attribute type 10 has an invalid length. [ 1816.083544][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10766'. [ 1816.088600][T15888] macsec1: left allmulticast mode [ 1816.095697][T15896] netlink: 'syz.1.10764': attribute type 10 has an invalid length. [ 1816.132032][T15896] team0: Port device netdevsim1 removed [ 1816.138874][T15896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1816.143784][T15896] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1816.255709][T15905] syz_tun: entered allmulticast mode [ 1816.330883][T15910] netlink: 244 bytes leftover after parsing attributes in process `syz.7.10770'. [ 1816.331115][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10770'. [ 1816.391271][T15911] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1816.627241][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10772'. [ 1816.720958][T15917] bond8 (unregistering): Released all slaves [ 1817.066058][T15929] netlink: 'syz.5.10775': attribute type 5 has an invalid length. [ 1817.202424][T15939] netlink: 'syz.5.10778': attribute type 10 has an invalid length. [ 1817.204956][T15939] netlink: 'syz.5.10778': attribute type 10 has an invalid length. [ 1817.313842][T15939] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1817.315845][T15939] team0: Port device netdevsim1 removed [ 1817.318919][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.344366][T15939] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1817.345336][T15939] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1817.495314][T15947] openvswitch: netlink: Multiple metadata blocks provided [ 1817.708991][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10782'. [ 1817.709565][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10782'. [ 1818.023407][T15976] netlink: 'syz.6.10787': attribute type 7 has an invalid length. [ 1818.023431][T15976] netlink: 'syz.6.10787': attribute type 5 has an invalid length. [ 1818.251736][T15983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1818.255115][T15981] FAULT_INJECTION: forcing a failure. [ 1818.255115][T15981] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.255146][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.6.10790 Not tainted syzkaller #0 PREEMPT(full) [ 1818.255166][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1818.255178][T15981] Call Trace: [ 1818.255185][T15981] [ 1818.255194][T15981] dump_stack_lvl+0xe8/0x150 [ 1818.255230][T15981] should_fail_ex+0x410/0x560 [ 1818.255260][T15981] should_failslab+0xa8/0x100 [ 1818.255285][T15981] ? security_file_alloc+0x34/0x310 [ 1818.255307][T15981] kmem_cache_alloc_noprof+0xa1/0x600 [ 1818.255337][T15981] ? rcu_is_watching+0x16/0xb0 [ 1818.255362][T15981] ? security_file_alloc+0x34/0x310 [ 1818.255390][T15981] security_file_alloc+0x34/0x310 [ 1818.255413][T15981] init_file+0x90/0x2b0 [ 1818.255439][T15981] alloc_empty_file+0x74/0x1d0 [ 1818.255464][T15981] alloc_file_pseudo+0x115/0x1e0 [ 1818.255490][T15981] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1818.255516][T15981] ? _raw_spin_unlock+0x28/0x50 [ 1818.255540][T15981] ? alloc_fd+0x651/0x6c0 [ 1818.255570][T15981] sock_alloc_file+0xb8/0x2e0 [ 1818.255589][T15981] ? sctp_getsockopt_peeloff_common+0x525/0x7e0 [ 1818.255617][T15981] sctp_getsockopt_peeloff_common+0x536/0x7e0 [ 1818.255649][T15981] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 1818.255683][T15981] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 1818.255705][T15981] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 1818.255724][T15981] ? sctp_getsockopt+0x12f/0xb90 [ 1818.255747][T15981] ? __local_bh_enable_ip+0xd6/0x140 [ 1818.255772][T15981] sctp_getsockopt+0x3a5/0xb90 [ 1818.255792][T15981] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1818.255812][T15981] do_sock_getsockopt+0x4aa/0x640 [ 1818.255841][T15981] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1818.255880][T15981] ? __fget_files+0x2a/0x420 [ 1818.255906][T15981] ? __fget_files+0x3a2/0x420 [ 1818.255939][T15981] ? __fget_files+0x2a/0x420 [ 1818.255970][T15981] __x64_sys_getsockopt+0x1a4/0x240 [ 1818.256002][T15981] do_syscall_64+0x166/0x520 [ 1818.256028][T15981] ? trace_irq_disable+0x3b/0x140 [ 1818.256048][T15981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.256068][T15981] ? clear_bhb_loop+0x70/0xc0 [ 1818.256092][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.256111][T15981] RIP: 0033:0x7f996ad9e159 [ 1818.256131][T15981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.256148][T15981] RSP: 002b:00007f996bc05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1818.256170][T15981] RAX: ffffffffffffffda RBX: 00007f996b025fa0 RCX: 00007f996ad9e159 [ 1818.256185][T15981] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1818.256198][T15981] RBP: 00007f996bc05090 R08: 0000200000000040 R09: 0000000000000000 [ 1818.256212][T15981] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000002 [ 1818.256226][T15981] R13: 00007f996b026038 R14: 00007f996b025fa0 R15: 00007fff2a9bf768 [ 1818.256260][T15981] [ 1818.299729][T15981] netlink: 'syz.6.10790': attribute type 16 has an invalid length. [ 1818.299750][T15981] netlink: 'syz.6.10790': attribute type 17 has an invalid length. [ 1818.615591][T10170] Bluetooth: hci1: unexpected event 0x04 length: 19 > 10 [ 1818.615611][T10170] Bluetooth: unknown link type 128 [ 1818.693372][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.309196][T11332] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.309255][T11332] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.309294][T11332] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.309376][T11332] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.309412][T11332] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.309455][T11332] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.309485][T11332] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1819.309508][T11332] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.628769][T16019] nbd: must specify at least one socket [ 1819.811475][T16030] netlink: 'syz.1.10795': attribute type 8 has an invalid length. [ 1819.889818][T16030] veth3: entered allmulticast mode [ 1820.628652][T16059] syzkaller0: entered promiscuous mode [ 1820.628676][T16059] syzkaller0: entered allmulticast mode [ 1820.651275][T16059] __nla_validate_parse: 40 callbacks suppressed [ 1820.651296][T16059] netlink: 2724 bytes leftover after parsing attributes in process `syz.6.10803'. [ 1820.651444][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10803'. [ 1820.651464][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10803'. [ 1820.652492][T16059] TC_ACT_REPEAT abuse ? [ 1820.694633][T10170] Bluetooth: hci1: command 0x0406 tx timeout [ 1820.760263][T16064] bond5: entered allmulticast mode [ 1820.794002][T16064] macvlan2: entered promiscuous mode [ 1820.794097][T16064] macvlan2: entered allmulticast mode [ 1820.794991][T16064] bond5: (slave macvlan2): Opening slave failed [ 1820.952367][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.952528][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.952664][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.952794][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.952923][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.953054][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1820.955680][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1821.743478][T16118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1821.868678][T16105] netlink: 'syz.8.10815': attribute type 7 has an invalid length. [ 1822.310102][T16131] Bluetooth: MGMT ver 1.23 [ 1822.318509][T16134] ip_tables: iptables: counters copy to user failed while replacing table [ 1822.361742][T16136] sctp: [Deprecated]: syz.5.10825 (pid 16136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1822.361742][T16136] Use struct sctp_sack_info instead [ 1822.362402][T16136] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1822.363101][T16136] netlink: 'syz.5.10825': attribute type 15 has an invalid length. [ 1822.847255][T16154] x_tables: unsorted entry at hook 3 [ 1822.964231][T16160] x_tables: duplicate underflow at hook 2 [ 1823.101294][T16171] netlink: 'syz.1.10835': attribute type 19 has an invalid length. [ 1823.101318][T16171] netlink: 'syz.1.10835': attribute type 20 has an invalid length. [ 1823.160448][ T7970] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.160494][ T7970] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.160529][ T7970] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.160643][ T7970] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1823.164709][T16172] netlink: 'syz.1.10835': attribute type 19 has an invalid length. [ 1823.164730][T16172] netlink: 'syz.1.10835': attribute type 20 has an invalid length. [ 1824.141187][T16195] netlink: 'syz.6.10844': attribute type 39 has an invalid length. [ 1828.038062][T16206] __nla_validate_parse: 39 callbacks suppressed [ 1828.038085][T16206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10845'. [ 1828.068036][T16209] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10846'. [ 1828.068490][T16209] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10846'. [ 1828.079360][T16210] netlink: 108 bytes leftover after parsing attributes in process `syz.7.10847'. [ 1828.105372][T16210] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10847'. [ 1828.260847][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10850'. [ 1828.625348][T16239] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1828.908649][T16254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10862'. [ 1828.926845][T16254] ip_tables: iptables: counters copy to user failed while replacing table [ 1828.937565][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10863'. [ 1828.971046][T16258] ip_tables: iptables: counters copy to user failed while replacing table [ 1829.096859][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10866'. [ 1829.217941][T16286] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10868'. [ 1829.520802][T16306] netlink: 'syz.6.10876': attribute type 10 has an invalid length. [ 1829.554440][T16307] syzkaller0: entered promiscuous mode [ 1829.554457][T16307] syzkaller0: entered allmulticast mode [ 1829.558745][T16307] FAULT_INJECTION: forcing a failure. [ 1829.558745][T16307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.558776][T16307] CPU: 0 UID: 0 PID: 16307 Comm: syz.1.10875 Not tainted syzkaller #0 PREEMPT(full) [ 1829.558796][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1829.558808][T16307] Call Trace: [ 1829.558816][T16307] [ 1829.558828][T16307] dump_stack_lvl+0xe8/0x150 [ 1829.558860][T16307] should_fail_ex+0x410/0x560 [ 1829.558888][T16307] _copy_from_user+0x2d/0xb0 [ 1829.558916][T16307] __copy_msghdr+0x390/0x590 [ 1829.558944][T16307] ___sys_sendmsg+0x213/0x360 [ 1829.558967][T16307] ? __lock_acquire+0x747/0x2de0 [ 1829.558990][T16307] ? __pfx____sys_sendmsg+0x10/0x10 [ 1829.559043][T16307] ? __fget_files+0x2a/0x420 [ 1829.559068][T16307] ? __fget_files+0x3a2/0x420 [ 1829.559102][T16307] __x64_sys_sendmsg+0x1b1/0x290 [ 1829.559130][T16307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1829.559178][T16307] do_syscall_64+0x166/0x520 [ 1829.559206][T16307] ? trace_irq_disable+0x3b/0x140 [ 1829.559226][T16307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.559246][T16307] ? clear_bhb_loop+0x70/0xc0 [ 1829.559271][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.559300][T16307] RIP: 0033:0x7f4ce139e159 [ 1829.559318][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.559333][T16307] RSP: 002b:00007f4ce2307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1829.559350][T16307] RAX: ffffffffffffffda RBX: 00007f4ce1625fa0 RCX: 00007f4ce139e159 [ 1829.559362][T16307] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1829.559374][T16307] RBP: 00007f4ce2307090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.559385][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.559397][T16307] R13: 00007f4ce1626038 R14: 00007f4ce1625fa0 R15: 00007ffd0ca9d1a8 [ 1829.559429][T16307] [ 1829.560785][T16306] netlink: 'syz.6.10876': attribute type 10 has an invalid length. [ 1829.571982][T16306] team0: Port device netdevsim1 removed [ 1829.575578][T16306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1829.578373][T16306] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1829.771617][T16257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1829.988123][T16321] nbd: must specify a device to reconfigure [ 1830.481472][T16344] netlink: 'syz.6.10888': attribute type 10 has an invalid length. [ 1830.570457][T16345] netlink: 'syz.6.10888': attribute type 10 has an invalid length. [ 1834.868671][T16344] bond0: (slave netdevsim1): Releasing backup interface [ 1834.882335][T16344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1834.885648][T16344] team0: Port device netdevsim1 added [ 1834.908459][T16342] batman_adv: batadv0: Adding interface: syzkaller0 [ 1834.908480][T16342] batman_adv: batadv0: Interface activated: syzkaller0 [ 1834.941024][T16345] team0: Port device netdevsim1 removed [ 1834.946586][T16345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1834.950162][T16345] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1835.053969][T16346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.055877][T16346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.063506][T16346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.093439][T16360] ip6t_srh: unknown srh match flags 4000 [ 1835.164094][T16346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.168557][T16346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.188463][T16346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1835.188490][T16346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.218861][T16346] veth1_vlan: left promiscuous mode [ 1835.226410][T16346] veth0_vlan: left promiscuous mode [ 1835.226726][T16363] netlink: 'syz.8.10891': attribute type 3 has an invalid length. [ 1835.229405][T16346] veth0_vlan: entered promiscuous mode [ 1835.232137][T16346] veth1_vlan: entered promiscuous mode [ 1835.247893][T16346] veth1_macvtap: left promiscuous mode [ 1835.255338][T16346] veth0_macvtap: left promiscuous mode [ 1835.256854][T16346] veth0_macvtap: entered promiscuous mode [ 1835.267158][T16346] veth1_macvtap: entered promiscuous mode [ 1835.280114][T16346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1835.281782][T16346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1835.282887][T16346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1835.286479][T16346] batman_adv: batadv0: Interface activated: gretap1 [ 1835.300903][T16346] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1835.303050][T16346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1835.354123][T16346] ip6gretap0: entered promiscuous mode [ 1835.355334][T16346] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1835.355696][T16346] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1835.358546][T16346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1835.418121][T16355] __nla_validate_parse: 5 callbacks suppressed [ 1835.418150][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10890'. [ 1835.425148][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.425270][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.433288][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.433391][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.638897][T16375] netlink: 'syz.7.10896': attribute type 1 has an invalid length. [ 1835.723964][ T6240] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.723998][ T6240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.724031][ T6240] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.724053][ T6240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.724084][ T6240] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.724109][ T6240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.724141][ T6240] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1835.724165][ T6240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.746806][T16385] ip_tables: iptables: counters copy to user failed while replacing table [ 1835.804537][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10896'. [ 1835.815784][T16375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1835.873940][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1836.033944][T16389] syz_tun: entered allmulticast mode [ 1836.037012][T16387] syz_tun: left allmulticast mode [ 1836.207242][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1836.207933][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10904'. [ 1836.320867][T16405] xt_IDLETIMER: label is empty or not nul-terminated [ 1836.525157][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10908'. [ 1836.648944][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10909'. [ 1836.720624][T16367] udevd[16367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1836.922542][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1836.941821][T16448] netlink: 660 bytes leftover after parsing attributes in process `syz.6.10917'. [ 1837.127455][T16464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10921'. [ 1837.160380][T16465] sctp: [Deprecated]: syz.5.10922 (pid 16465) Use of int in max_burst socket option deprecated. [ 1837.160380][T16465] Use struct sctp_assoc_value instead [ 1837.213474][T16467] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10923'. [ 1837.243683][T16469] netlink: 'syz.1.10924': attribute type 1 has an invalid length. [ 1837.277886][T16469] bond8: entered promiscuous mode [ 1837.277951][T16469] bond8: entered allmulticast mode [ 1837.278535][T16469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1837.308787][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1837.459602][T16476] tipc: Enabled bearer , priority 0 [ 1837.550465][T16476] syzkaller0: entered promiscuous mode [ 1837.550493][T16476] syzkaller0: entered allmulticast mode [ 1837.550980][T16476] tipc: Resetting bearer [ 1837.588348][T16483] bond1: option mode: unable to set because the bond device is up [ 1839.489256][T10170] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1840.445970][T16483] bond1 (unregistering): Released all slaves [ 1840.779873][T16508] netlink: 'syz.1.10933': attribute type 10 has an invalid length. [ 1840.898400][T16520] __nla_validate_parse: 1 callbacks suppressed [ 1840.898422][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10935'. [ 1840.927986][T11333] tipc: Resetting bearer [ 1841.068572][T16508] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1841.079821][T16474] tipc: Resetting bearer [ 1841.187271][T16527] netlink: 'syz.8.10937': attribute type 4 has an invalid length. [ 1841.200721][T16529] netlink: 'syz.8.10937': attribute type 4 has an invalid length. [ 1841.349850][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10938'. [ 1841.352549][T16533] netlink: 284 bytes leftover after parsing attributes in process `syz.8.10938'. [ 1841.784401][T16539] netlink: 'syz.6.10939': attribute type 10 has an invalid length. [ 1842.237855][T16545] netlink: 'syz.1.10940': attribute type 11 has an invalid length. [ 1844.769615][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1846.259806][T16474] tipc: Disabling bearer [ 1846.267522][T16522] veth1_to_team: entered promiscuous mode [ 1846.281024][T16522] veth1_to_team: left promiscuous mode [ 1846.297310][T16535] tap0: tun_chr_ioctl cmd 2147767520 [ 1846.331825][T16544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1846.561855][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10944'. [ 1846.578740][T16567] mac80211_hwsim hwsim155 wlan0: entered promiscuous mode [ 1846.603037][T16567] team0: entered promiscuous mode [ 1846.618970][T16567] debugfs: 'hsr1' already exists in 'hsr' [ 1846.626081][T16567] Cannot create hsr debugfs directory [ 1846.626454][T16568] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10945'. [ 1846.656040][T16574] netlink: 'syz.8.10947': attribute type 10 has an invalid length. [ 1846.667510][T16574] netlink: 'syz.8.10947': attribute type 10 has an invalid length. [ 1846.685254][T16574] team0: Port device netdevsim1 removed [ 1846.710480][T16574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1846.712855][T16574] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1846.914745][T16592] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10952'. [ 1846.916911][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10951'. [ 1846.944706][T16584] veth0_macvtap: mtu less than device minimum [ 1847.033481][T16595] tipc: Resetting bearer [ 1847.071425][T16598] Bluetooth: hci0: unsupported parameter 5135 [ 1847.071447][T16598] Bluetooth: hci0: unsupported parameter 8192 [ 1847.071460][T16598] Bluetooth: hci0: unsupported parameter 5135 [ 1847.071473][T16598] Bluetooth: hci0: unsupported parameter 8192 [ 1847.192959][T16607] ip6t_srh: unknown srh match flags 4000 [ 1847.245134][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10960'. [ 1847.246142][T16608] netlink: 'syz.8.10960': attribute type 16 has an invalid length. [ 1847.246160][T16608] netlink: 'syz.8.10960': attribute type 17 has an invalid length. [ 1847.326786][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10961'. [ 1847.494764][T16622] netlink: 'syz.7.10965': attribute type 10 has an invalid length. [ 1847.548174][T16625] netlink: 'syz.7.10965': attribute type 10 has an invalid length. [ 1848.171634][T16622] bond0: (slave netdevsim1): Releasing backup interface [ 1848.203043][T16622] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1848.207601][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1848.216326][T16622] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1848.218812][T16622] team0: Port device netdevsim1 added [ 1848.223476][T16625] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1848.276421][T16625] team0: Port device netdevsim1 removed [ 1848.292896][T16625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1848.298851][T16625] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1848.300973][T16625] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1848.353715][T16638] tipc: Enabled bearer , priority 0 [ 1848.353786][T16639] syzkaller0: entered promiscuous mode [ 1848.353805][T16639] syzkaller0: entered allmulticast mode [ 1848.765340][T16661] xt_hashlimit: max too large, truncated to 1048576 [ 1848.765374][T16661] xt_hashlimit: overflow, try lower: 0/0 [ 1848.851480][T16668] openvswitch: netlink: Key 4 has unexpected len 218 expected 12 [ 1849.450366][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10984'. [ 1849.463687][T16701] TC_ACT_REPEAT abuse ? [ 1849.508016][T16707] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10989'. [ 1849.716143][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10992'. [ 1850.122455][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10996'. [ 1851.124943][T16757] syzkaller0: entered promiscuous mode [ 1851.124966][T16757] syzkaller0: entered allmulticast mode [ 1851.125137][T16754] netlink: 'syz.8.10999': attribute type 4 has an invalid length. [ 1851.125272][T16754] netlink: 'syz.8.10999': attribute type 4 has an invalid length. [ 1851.125437][T16754] netlink: 'syz.8.10999': attribute type 4 has an invalid length. [ 1851.125530][T16754] netlink: 'syz.8.10999': attribute type 4 has an invalid length. [ 1852.229669][T16768] __nla_validate_parse: 29 callbacks suppressed [ 1852.229684][T16768] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11002'. [ 1852.324923][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11004'. [ 1852.324941][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11004'. [ 1852.452184][T16707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1852.953350][T16791] Cannot find map_set index 2 as target [ 1853.122399][T16810] validate_nla: 22 callbacks suppressed [ 1853.122423][T16810] netlink: 'syz.1.11014': attribute type 10 has an invalid length. [ 1853.167780][T16810] bond0: (slave netdevsim1): Releasing backup interface [ 1853.167809][T16810] bond0: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1853.182619][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.194179][T16810] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1853.195363][T16810] team0: Port device netdevsim1 added [ 1853.251484][T16810] netlink: 'syz.1.11014': attribute type 10 has an invalid length. [ 1853.251813][T16810] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1853.280994][T16810] team0: Port device netdevsim1 removed [ 1853.294724][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.306951][T16810] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1853.468143][T16818] No such timeout policy "s" [ 1853.468167][T16818] netlink: Failed to associated timeout policy 's' [ 1853.531942][T10170] Bluetooth: hci1: unexpected event 0x04 length: 19 > 10 [ 1853.531972][T10170] Bluetooth: unknown link type 128 [ 1853.776059][T16820] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11019'. [ 1853.776088][T16820] netlink: 43 bytes leftover after parsing attributes in process `syz.8.11019'. [ 1853.776103][T16820] netlink: 'syz.8.11019': attribute type 6 has an invalid length. [ 1853.776117][T16820] netlink: 'syz.8.11019': attribute type 5 has an invalid length. [ 1853.776129][T16820] netlink: 43 bytes leftover after parsing attributes in process `syz.8.11019'. [ 1853.877007][T16820] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11019'. [ 1853.988739][T16843] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1854.306736][T16863] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11027'. [ 1854.324373][T16864] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11027'. [ 1854.357530][T16863] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11027'. [ 1854.422713][T16868] netlink: 'syz.5.11029': attribute type 10 has an invalid length. [ 1854.447347][T16868] bond0: (slave netdevsim1): Releasing backup interface [ 1854.460069][T16868] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1854.487918][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1854.488887][T16868] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1854.553375][T16868] team0: Port device netdevsim1 added [ 1854.593074][T16868] netlink: 'syz.5.11029': attribute type 10 has an invalid length. [ 1854.593387][T16868] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1854.629964][T16868] team0: Port device netdevsim1 removed [ 1854.632406][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1854.633598][T16868] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1854.634683][T16868] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1855.057726][T16889] syzkaller0: entered promiscuous mode [ 1855.057759][T16889] syzkaller0: entered allmulticast mode [ 1855.444155][T16894] netlink: 'syz.8.11037': attribute type 1 has an invalid length. [ 1855.571732][T10170] Bluetooth: hci1: command 0x0406 tx timeout [ 1855.834932][T16905] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1856.164840][T16916] syzkaller0: left promiscuous mode [ 1856.164892][T16916] syzkaller0: left allmulticast mode [ 1856.188322][T16925] syz_tun: entered allmulticast mode [ 1856.322896][T16931] netlink: 'syz.7.11046': attribute type 1 has an invalid length. [ 1860.714499][T16918] syz_tun: left allmulticast mode [ 1860.857939][T16936] __nla_validate_parse: 14 callbacks suppressed [ 1860.857962][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11048'. [ 1861.269456][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11051'. [ 1861.355319][T16962] ip6gre1: entered promiscuous mode [ 1861.355347][T16962] ip6gre1: entered allmulticast mode [ 1861.376646][T11335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1861.376881][T11335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1861.399803][ T4872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1861.404671][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11051'. [ 1861.960093][ T4872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1861.963926][T16987] xt_hashlimit: max too large, truncated to 1048576 [ 1861.963946][T16987] xt_hashlimit: overflow, try lower: 0/0 [ 1862.069266][T16985] syzkaller0: entered promiscuous mode [ 1862.069293][T16985] syzkaller0: entered allmulticast mode [ 1862.369860][T13976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1865.729206][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1867.995610][T17014] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1868.165526][T17050] FAULT_INJECTION: forcing a failure. [ 1868.165526][T17050] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.165560][T17050] CPU: 1 UID: 0 PID: 17050 Comm: syz.6.11078 Not tainted syzkaller #0 PREEMPT(full) [ 1868.165583][T17050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1868.165600][T17050] Call Trace: [ 1868.165609][T17050] [ 1868.165617][T17050] dump_stack_lvl+0xe8/0x150 [ 1868.165650][T17050] should_fail_ex+0x410/0x560 [ 1868.165678][T17050] ? __alloc_skb+0x1db/0x7a0 [ 1868.165702][T17050] should_failslab+0xa8/0x100 [ 1868.165730][T17050] ? __alloc_skb+0x1db/0x7a0 [ 1868.165751][T17050] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1868.165783][T17050] ? __alloc_skb+0x18d/0x7a0 [ 1868.165807][T17050] ? __alloc_skb+0x1db/0x7a0 [ 1868.165838][T17050] __alloc_skb+0x1db/0x7a0 [ 1868.165874][T17050] alloc_skb_with_frags+0xc6/0x760 [ 1868.165907][T17050] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1868.165936][T17050] sock_alloc_send_pskb+0x878/0x990 [ 1868.165986][T17050] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1868.166020][T17050] ? aa_file_perm+0x18b/0x15f0 [ 1868.166052][T17050] ? aa_sk_perm+0x713/0x900 [ 1868.166080][T17050] hci_sock_sendmsg+0x20b/0xfb0 [ 1868.166111][T17050] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1868.166137][T17050] ? apparmor_socket_sendmsg+0x98/0x360 [ 1868.166158][T17050] ? lock_acquire+0x115/0x350 [ 1868.166180][T17050] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1868.166199][T17050] sock_sendmsg_nosec+0x14e/0x190 [ 1868.166223][T17050] sock_write_iter+0x2de/0x3e0 [ 1868.166257][T17050] ? __pfx_sock_write_iter+0x10/0x10 [ 1868.166294][T17050] ? bpf_lsm_file_permission+0x9/0x20 [ 1868.166322][T17050] ? security_file_permission+0x75/0x260 [ 1868.166350][T17050] vfs_write+0x612/0xba0 [ 1868.166387][T17050] ? __pfx_vfs_write+0x10/0x10 [ 1868.166426][T17050] ? __fget_files+0x2a/0x420 [ 1868.166462][T17050] ksys_write+0x150/0x270 [ 1868.166495][T17050] ? __pfx_ksys_write+0x10/0x10 [ 1868.166537][T17050] do_syscall_64+0x166/0x520 [ 1868.166565][T17050] ? trace_irq_disable+0x3b/0x140 [ 1868.166585][T17050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.166606][T17050] ? clear_bhb_loop+0x70/0xc0 [ 1868.166631][T17050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.166654][T17050] RIP: 0033:0x7f996ad9e159 [ 1868.166673][T17050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.166692][T17050] RSP: 002b:00007f996bc05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1868.166714][T17050] RAX: ffffffffffffffda RBX: 00007f996b025fa0 RCX: 00007f996ad9e159 [ 1868.166730][T17050] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000004 [ 1868.166743][T17050] RBP: 00007f996bc05090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.166757][T17050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.166770][T17050] R13: 00007f996b026038 R14: 00007f996b025fa0 R15: 00007fff2a9bf768 [ 1868.166803][T17050] [ 1868.213328][T17047] wg0: Caught tx_queue_len zero misconfig [ 1868.247411][T17051] RDS: rds_bind could not find a transport for ::ffff:172.30.0.9, load rds_tcp or rds_rdma? [ 1868.310714][T17047] tipc: Enabling not permitted [ 1868.310745][T17047] tipc: Enabling of bearer rejected, failed to enable media [ 1868.594707][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11081'. [ 1868.904503][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11084'. [ 1868.938765][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11083'. [ 1868.966969][T17080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11084'. [ 1869.256328][T11336] bond2: left allmulticast mode [ 1869.256358][T11336] bond2: left promiscuous mode [ 1869.256591][T11336] bridge0: port 4(bond2) entered disabled state [ 1869.424446][T11336] bond1: left allmulticast mode [ 1869.424474][T11336] bond1: left promiscuous mode [ 1869.424690][T11336] bridge0: port 3(bond1) entered disabled state [ 1869.450485][T11336] bridge_slave_1: left promiscuous mode [ 1869.450705][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.773610][T11336] pim6reg: left allmulticast mode [ 1870.410779][T11336] erspan0 (unregistering): left promiscuous mode [ 1871.930786][T11336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1871.961107][T11336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1871.988838][T11336] bond0 (unregistering): Released all slaves [ 1871.996675][T11336] bond1 (unregistering): Released all slaves [ 1872.026412][T11336] bond2 (unregistering): Released all slaves [ 1872.043456][T11336] bond3 (unregistering): Released all slaves [ 1872.076654][T11336] bond4 (unregistering): Released all slaves [ 1872.089605][T11336] bond5 (unregistering): Released all slaves [ 1872.123079][T11336] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1872.174384][T11336] bond6 (unregistering): Released all slaves [ 1872.205372][T11336] bond7 (unregistering): Released all slaves [ 1872.783712][T17272] syzkaller0: entered promiscuous mode [ 1872.783735][T17272] syzkaller0: entered allmulticast mode [ 1872.787792][T11336] : left promiscuous mode [ 1873.322199][T17289] netlink: 'syz.1.11091': attribute type 10 has an invalid length. [ 1873.468519][T17291] netlink: 'syz.1.11091': attribute type 10 has an invalid length. [ 1873.613184][T11336] tipc: Disabling bearer [ 1873.613378][T11336] tipc: Left network mode [ 1873.657667][T17289] bond0: (slave netdevsim1): Releasing backup interface [ 1873.657693][T17289] bond0: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1873.665429][T17289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1873.666242][T17289] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1873.667966][T17289] team0: Port device netdevsim1 added [ 1873.687251][T17291] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1873.726580][T17291] team0: Port device netdevsim1 removed [ 1873.728402][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1873.755618][T17291] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1874.106064][T17287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1874.360110][T17313] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11096'. [ 1874.388688][T17310] tipc: Enabled bearer , priority 0 [ 1874.391309][T17310] syzkaller0: entered promiscuous mode [ 1874.391330][T17310] syzkaller0: entered allmulticast mode [ 1874.694636][T17310] tipc: Resetting bearer [ 1874.783793][T17309] tipc: Resetting bearer [ 1874.850373][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1874.912122][T17309] tipc: Disabling bearer [ 1875.165586][T17333] lo: entered promiscuous mode [ 1875.168160][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11101'. [ 1875.171922][T17333] tunl0: entered promiscuous mode [ 1875.172277][T17333] gre0: entered promiscuous mode [ 1875.172573][T17333] gretap0: entered promiscuous mode [ 1875.178659][T17333] ip_vti0: entered promiscuous mode [ 1875.183837][T17333] ip6_vti0: entered promiscuous mode [ 1875.184259][T17333] sit0: entered promiscuous mode [ 1875.184567][T17333] ip6tnl0: entered promiscuous mode [ 1875.184896][T17333] ip6gre0: entered promiscuous mode [ 1875.185236][T17333] syz_tun: entered promiscuous mode [ 1875.188972][T17333] ip6gretap0: entered promiscuous mode [ 1875.192336][T17333] bridge0: entered promiscuous mode [ 1875.194459][T17333] vcan0: entered promiscuous mode [ 1875.195700][T17333] bond0: entered promiscuous mode [ 1875.195721][T17333] bond_slave_0: entered promiscuous mode [ 1875.209517][T17333] ¬0Ù: entered promiscuous mode [ 1875.209708][T17333] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 1875.210738][T17333] team0: entered promiscuous mode [ 1875.210754][T17333] team_slave_0: entered promiscuous mode [ 1875.218475][T17333] team_slave_1: entered promiscuous mode [ 1875.221683][T17333] nlmon0: entered promiscuous mode [ 1875.222074][T17333] batadv0: entered promiscuous mode [ 1875.227196][T17333] veth0: entered promiscuous mode [ 1875.227607][T17333] veth1: entered promiscuous mode [ 1875.227960][T17333] wg0: entered promiscuous mode [ 1875.228327][T17333] wg2: entered promiscuous mode [ 1875.237429][T17333] veth0_to_bridge: entered promiscuous mode [ 1875.253403][T17333] veth1_to_bridge: entered promiscuous mode [ 1875.256525][T17333] veth0_to_bond: entered promiscuous mode [ 1875.257028][T17333] veth1_to_bond: entered promiscuous mode [ 1875.262949][T17333] veth0_to_team: entered promiscuous mode [ 1875.265279][T17333] veth1_to_team: entered promiscuous mode [ 1875.265762][T17333] veth0_to_batadv: entered promiscuous mode [ 1875.271839][T17333] batadv_slave_0: entered promiscuous mode [ 1875.272332][T17333] veth1_to_batadv: entered promiscuous mode [ 1875.272684][T17333] batadv_slave_1: entered promiscuous mode [ 1875.276472][T17333] xfrm0: entered promiscuous mode [ 1875.278039][T17333] veth0_to_hsr: entered promiscuous mode [ 1875.282720][T17333] veth1_to_hsr: entered promiscuous mode [ 1875.663282][T17334] tipc: Resetting bearer [ 1875.783506][T17354] ip6t_srh: unknown srh match flags 4000 [ 1875.858327][T13959] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1876.220107][T13955] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1876.280267][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11107'. [ 1876.436193][T17361] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1876.454949][T17361] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1876.722405][T17376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1877.012615][T17400] netlink: 'syz.1.11117': attribute type 62 has an invalid length. [ 1877.031491][T17387] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1877.032721][T17387] bond8 (unregistering): Released all slaves [ 1877.374781][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11121'. [ 1877.422584][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11121'. [ 1877.442816][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11120'. [ 1877.534320][T17394] syzkaller0: entered promiscuous mode [ 1877.534349][T17394] syzkaller0: entered allmulticast mode [ 1877.805222][T17439] netlink: 'syz.1.11123': attribute type 178 has an invalid length. [ 1877.905656][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11124'. [ 1883.802756][T11336] hsr_slave_0: left promiscuous mode [ 1883.803547][T11336] hsr_slave_1: left promiscuous mode [ 1883.804414][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.807523][T11336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1884.113353][T17474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11127'. [ 1884.150764][T11336] team0 (unregistering): Port device team_slave_1 removed [ 1884.166642][T11336] team0 (unregistering): Port device team_slave_0 removed [ 1884.338990][T17473] macvtap0: entered allmulticast mode [ 1884.697302][T17494] veth4: entered allmulticast mode [ 1884.783422][T17498] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11137'. [ 1884.875966][T17502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11139'. [ 1885.003052][T17509] netlink: 'syz.6.11140': attribute type 1 has an invalid length. [ 1885.036316][T11336] IPVS: stop unused estimator thread 0... [ 1885.049568][T17509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1885.111129][T17509] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1885.138691][T17509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1885.153445][T17509] bond6: (slave batadv1): making interface the new active one [ 1885.155467][T17509] batadv1: entered promiscuous mode [ 1885.155890][T17509] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1885.371273][T17509] bond6 (unregistering): (slave veth5): Releasing active interface [ 1885.401982][T17509] bond6 (unregistering): (slave batadv1): Releasing active interface [ 1885.402014][T17509] batadv1: left promiscuous mode [ 1885.431332][T17509] bond6 (unregistering): Released all slaves [ 1885.817098][T17535] netlink: 'syz.5.11145': attribute type 4 has an invalid length. [ 1885.817490][T17535] netlink: 'syz.5.11145': attribute type 4 has an invalid length. [ 1885.817812][T17535] netlink: 'syz.5.11145': attribute type 4 has an invalid length. [ 1885.818125][T17535] netlink: 'syz.5.11145': attribute type 4 has an invalid length. [ 1885.818423][T17535] netlink: 'syz.5.11145': attribute type 4 has an invalid length. [ 1885.833957][T17534] veth0_to_bond: left promiscuous mode [ 1886.075830][T17535] syzkaller0: Caught tx_queue_len zero misconfig [ 1886.248857][T17557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11148'. [ 1886.401631][T17564] syzkaller1: entered promiscuous mode [ 1886.401657][T17564] syzkaller1: entered allmulticast mode [ 1886.505807][T17567] netlink: 'syz.8.11152': attribute type 1 has an invalid length. [ 1886.505831][T17567] netlink: 236 bytes leftover after parsing attributes in process `syz.8.11152'. [ 1886.525722][T17567] netlink: 2 bytes leftover after parsing attributes in process `syz.8.11152'. [ 1886.856279][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11154'. [ 1886.906710][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11156'. [ 1887.025460][T17584] syzkaller0: entered promiscuous mode [ 1887.025527][T17584] syzkaller0: entered allmulticast mode [ 1887.065328][T17593] FAULT_INJECTION: forcing a failure. [ 1887.065328][T17593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.065362][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.7.11159 Not tainted syzkaller #0 PREEMPT(full) [ 1887.065385][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1887.065397][T17593] Call Trace: [ 1887.065405][T17593] [ 1887.065414][T17593] dump_stack_lvl+0xe8/0x150 [ 1887.065446][T17593] should_fail_ex+0x410/0x560 [ 1887.065476][T17593] _copy_to_user+0x31/0xb0 [ 1887.065504][T17593] simple_read_from_buffer+0xe1/0x170 [ 1887.065535][T17593] proc_fail_nth_read+0x1bb/0x230 [ 1887.065553][T17593] ? common_file_perm+0x20e/0x2b0 [ 1887.065580][T17593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1887.065603][T17593] ? rw_verify_area+0x24a/0x4c0 [ 1887.065633][T17593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1887.065652][T17593] vfs_read+0x213/0xa80 [ 1887.065686][T17593] ? __pfx___mutex_lock+0x10/0x10 [ 1887.065717][T17593] ? __pfx_vfs_read+0x10/0x10 [ 1887.065754][T17593] ? __fget_files+0x2a/0x420 [ 1887.065785][T17593] ? __fget_files+0x3a2/0x420 [ 1887.065811][T17593] ? __fget_files+0x2a/0x420 [ 1887.065848][T17593] ksys_read+0x150/0x270 [ 1887.065879][T17593] ? __pfx_ksys_read+0x10/0x10 [ 1887.065920][T17593] do_syscall_64+0x166/0x520 [ 1887.065948][T17593] ? trace_irq_disable+0x3b/0x140 [ 1887.065969][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.065989][T17593] ? clear_bhb_loop+0x70/0xc0 [ 1887.066022][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.066043][T17593] RIP: 0033:0x7f7b67d5e98e [ 1887.066062][T17593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1887.066080][T17593] RSP: 002b:00007f7b68b7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1887.066103][T17593] RAX: ffffffffffffffda RBX: 00007f7b68b806c0 RCX: 00007f7b67d5e98e [ 1887.066117][T17593] RDX: 000000000000000f RSI: 00007f7b68b800a0 RDI: 0000000000000004 [ 1887.066130][T17593] RBP: 00007f7b68b80090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.066143][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.066156][T17593] R13: 00007f7b68026038 R14: 00007f7b68025fa0 R15: 00007fffa6760d58 [ 1887.066189][T17593] [ 1887.246601][T10170] block nbd10: Receive control failed (result -32) [ 1887.251034][ T9896] block nbd10: Receive control failed (result -32) [ 1887.355795][T17598] FAULT_INJECTION: forcing a failure. [ 1887.355795][T17598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.355830][T17598] CPU: 1 UID: 0 PID: 17598 Comm: syz.5.11160 Not tainted syzkaller #0 PREEMPT(full) [ 1887.355852][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1887.355864][T17598] Call Trace: [ 1887.355872][T17598] [ 1887.355890][T17598] dump_stack_lvl+0xe8/0x150 [ 1887.355921][T17598] should_fail_ex+0x410/0x560 [ 1887.355948][T17598] _copy_from_iter+0x1d3/0x1660 [ 1887.355970][T17598] ? __alloc_skb+0x27a/0x7a0 [ 1887.355995][T17598] ? __alloc_skb+0x27a/0x7a0 [ 1887.356020][T17598] ? __alloc_skb+0x27a/0x7a0 [ 1887.356043][T17598] ? __pfx__copy_from_iter+0x10/0x10 [ 1887.356061][T17598] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1887.356090][T17598] ? __alloc_skb+0x27a/0x7a0 [ 1887.356111][T17598] ? __alloc_skb+0x27a/0x7a0 [ 1887.356140][T17598] ? netlink_sendmsg+0x650/0xb40 [ 1887.356158][T17598] ? skb_put+0x112/0x210 [ 1887.356182][T17598] netlink_sendmsg+0x6c0/0xb40 [ 1887.356212][T17598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1887.356239][T17598] ? apparmor_socket_sendmsg+0x98/0x360 [ 1887.356264][T17598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1887.356281][T17598] sock_sendmsg_nosec+0x14e/0x190 [ 1887.356303][T17598] ____sys_sendmsg+0x54e/0x850 [ 1887.356334][T17598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1887.356368][T17598] ? import_iovec+0x73/0xa0 [ 1887.356397][T17598] ___sys_sendmsg+0x2a5/0x360 [ 1887.356421][T17598] ? __lock_acquire+0x747/0x2de0 [ 1887.356446][T17598] ? __pfx____sys_sendmsg+0x10/0x10 [ 1887.356500][T17598] ? __fget_files+0x2a/0x420 [ 1887.356525][T17598] ? __fget_files+0x3a2/0x420 [ 1887.356561][T17598] __x64_sys_sendmsg+0x1b1/0x290 [ 1887.356587][T17598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1887.356633][T17598] do_syscall_64+0x166/0x520 [ 1887.356659][T17598] ? trace_irq_disable+0x3b/0x140 [ 1887.356679][T17598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.356699][T17598] ? clear_bhb_loop+0x70/0xc0 [ 1887.356723][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.356742][T17598] RIP: 0033:0x7faf69b9e159 [ 1887.356761][T17598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.356778][T17598] RSP: 002b:00007faf6a984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1887.356800][T17598] RAX: ffffffffffffffda RBX: 00007faf69e25fa0 RCX: 00007faf69b9e159 [ 1887.356815][T17598] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1887.356828][T17598] RBP: 00007faf6a984090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.356840][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.356853][T17598] R13: 00007faf69e26038 R14: 00007faf69e25fa0 R15: 00007ffd92e2ff08 [ 1887.356893][T17598] [ 1887.599478][T17604] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1887.773495][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11166'. [ 1887.773519][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11166'. [ 1887.935413][T17628] netlink: 'syz.6.11166': attribute type 2 has an invalid length. [ 1888.598645][T17605] tipc: Resetting bearer [ 1888.665949][T17637] netlink: 'syz.5.11171': attribute type 7 has an invalid length. [ 1888.703395][T17618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1888.725445][T17624] bond1 (unregistering): Released all slaves [ 1888.751664][ T4872] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1888.791885][T17645] netlink: 'syz.8.11172': attribute type 1 has an invalid length. [ 1888.893527][T17650] FAULT_INJECTION: forcing a failure. [ 1888.893527][T17650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1888.893560][T17650] CPU: 0 UID: 0 PID: 17650 Comm: syz.8.11174 Not tainted syzkaller #0 PREEMPT(full) [ 1888.893582][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1888.893595][T17650] Call Trace: [ 1888.893603][T17650] [ 1888.893612][T17650] dump_stack_lvl+0xe8/0x150 [ 1888.893645][T17650] should_fail_ex+0x410/0x560 [ 1888.893675][T17650] _copy_to_user+0x31/0xb0 [ 1888.893708][T17650] simple_read_from_buffer+0xe1/0x170 [ 1888.893739][T17650] proc_fail_nth_read+0x1bb/0x230 [ 1888.893757][T17650] ? common_file_perm+0x20e/0x2b0 [ 1888.893784][T17650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1888.893808][T17650] ? rw_verify_area+0x24a/0x4c0 [ 1888.893840][T17650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1888.893860][T17650] vfs_read+0x213/0xa80 [ 1888.893895][T17650] ? __pfx___mutex_lock+0x10/0x10 [ 1888.893927][T17650] ? __pfx_vfs_read+0x10/0x10 [ 1888.893958][T17650] ? __fget_files+0x2a/0x420 [ 1888.893989][T17650] ? __fget_files+0x3a2/0x420 [ 1888.894014][T17650] ? __fget_files+0x2a/0x420 [ 1888.894051][T17650] ksys_read+0x150/0x270 [ 1888.894082][T17650] ? __pfx_ksys_read+0x10/0x10 [ 1888.894118][T17650] do_syscall_64+0x166/0x520 [ 1888.894146][T17650] ? trace_irq_disable+0x3b/0x140 [ 1888.894167][T17650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.894188][T17650] ? clear_bhb_loop+0x70/0xc0 [ 1888.894220][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.894241][T17650] RIP: 0033:0x7f3b16b5e98e [ 1888.894259][T17650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1888.894276][T17650] RSP: 002b:00007f3b17a62fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1888.894297][T17650] RAX: ffffffffffffffda RBX: 00007f3b17a636c0 RCX: 00007f3b16b5e98e [ 1888.894312][T17650] RDX: 000000000000000f RSI: 00007f3b17a630a0 RDI: 0000000000000006 [ 1888.894326][T17650] RBP: 00007f3b17a63090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.894339][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.894352][T17650] R13: 00007f3b16e26038 R14: 00007f3b16e25fa0 R15: 00007ffe0875b4b8 [ 1888.894386][T17650] [ 1889.251113][T17658] bond1 (unregistering): Released all slaves [ 1889.322347][T17664] __nla_validate_parse: 7 callbacks suppressed [ 1889.322369][T17664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11180'. [ 1889.491451][T15014] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1889.510188][T17674] ip6t_srh: unknown srh match flags 4000 [ 1889.539622][T17670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11181'. [ 1889.576243][T17670] hsr2: entered promiscuous mode [ 1889.584177][T17677] ip6t_srh: unknown srh match flags 4000 [ 1889.617929][T17679] ip6t_srh: unknown srh match flags 4000 [ 1889.693939][T17681] netlink: 9 bytes leftover after parsing attributes in process `syz.8.11186'. [ 1889.693964][T17681] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11186'. [ 1889.693984][T17681] netlink: 9 bytes leftover after parsing attributes in process `syz.8.11186'. [ 1889.803276][ T31] audit: type=1800 audit(1791029616.149:147): pid=17681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11186" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1923 res=0 errno=0 [ 1889.869840][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11189'. [ 1890.418435][T17707] bond9: Unable to set up delay as MII monitoring is disabled [ 1890.434493][T17707] bond9 (unregistering): Released all slaves [ 1890.634875][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11194'. [ 1890.697855][T17689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1890.792179][T17719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1890.885677][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11197'. [ 1890.902479][T17727] ip6t_srh: unknown srh match flags 4000 [ 1891.352810][T17743] syzkaller1: entered promiscuous mode [ 1891.352836][T17743] syzkaller1: entered allmulticast mode [ 1891.354883][T17737] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 1891.521462][T17747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11204'. [ 1891.544428][T10170] Bluetooth: hci2: link tx timeout [ 1891.544448][T10170] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1892.018654][T17786] netlink: 'syz.5.11213': attribute type 2 has an invalid length. [ 1892.059660][T17785] syzkaller0: entered promiscuous mode [ 1892.059684][T17785] syzkaller0: entered allmulticast mode [ 1892.072752][T17785] 0: reclassify loop, rule prio 0, protocol 800 [ 1892.129387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1892.250164][T17788] syz_tun: entered allmulticast mode [ 1892.265819][T17787] syz_tun: left allmulticast mode [ 1893.569266][T10170] Bluetooth: hci2: command 0x0405 tx timeout [ 1904.289323][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1917.170959][T17806] netlink: 'syz.6.11224': attribute type 2 has an invalid length. [ 1917.170981][T17806] __nla_validate_parse: 1 callbacks suppressed [ 1917.170993][T17806] netlink: 228 bytes leftover after parsing attributes in process `syz.6.11224'. [ 1917.178325][T17806] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11224'. [ 1917.178355][T17806] netlink: 'syz.6.11224': attribute type 2 has an invalid length. [ 1917.178370][T17806] netlink: 'syz.6.11224': attribute type 1 has an invalid length. [ 1917.178385][T17806] netlink: 116 bytes leftover after parsing attributes in process `syz.6.11224'. [ 1917.178804][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11224'. [ 1917.349667][T17820] netlink: 'syz.7.11223': attribute type 1 has an invalid length. [ 1917.483401][T17820] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1917.498665][T17820] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11223'. [ 1917.511407][T17824] bond9: (slave geneve4): making interface the new active one [ 1917.512828][T17824] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 1917.520247][ T1796] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.522293][T11336] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.527501][T11334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.527755][T11334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.763125][T17826] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11227'. [ 1917.766451][T17826] netlink: 'syz.1.11227': attribute type 16 has an invalid length. [ 1917.766473][T17826] netlink: 'syz.1.11227': attribute type 17 has an invalid length. [ 1917.918905][T17826] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1918.088527][T17839] netlink: 'syz.6.11230': attribute type 1 has an invalid length. [ 1918.227898][T17839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1918.348858][T17845] nbd11: detected capacity change from 0 to 63 [ 1918.440739][ T9896] block nbd11: Receive control failed (result -104) [ 1919.228596][T17883] ip6t_srh: unknown srh match flags 4000 [ 1919.944351][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11246'. [ 1920.040776][T17905] C: renamed from veth1_to_team (while UP) [ 1920.051080][T17905] netlink: 'syz.1.11245': attribute type 1 has an invalid length. [ 1920.051102][T17905] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11245'. [ 1920.051494][T17905] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1920.061865][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11247'. [ 1920.126185][T17886] netlink: 'syz.7.11240': attribute type 10 has an invalid length. [ 1920.138380][T17886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1920.829588][T17938] netlink: 'syz.6.11259': attribute type 1 has an invalid length. [ 1920.972678][T17946] block nbd12: server does not support multiple connections per device. [ 1920.990859][T17946] block nbd12: shutting down sockets [ 1921.039972][T17954] IPv6: Can't replace route, no match found [ 1921.040189][T17954] IPv6: Can't replace route, no match found [ 1921.215410][T17963] ip6t_srh: unknown srh match flags 4000 [ 1921.252381][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11264'. [ 1921.883662][T17947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1921.883686][T17947] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1921.966792][T17947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1921.966809][T17947] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1922.072425][T17947] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1922.072449][T17947] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1922.160552][T17985] xt_HMARK: spi-set and port-set can't be combined [ 1922.290375][T17947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1922.290400][T17947] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1922.409948][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11275'. [ 1922.537170][T18007] ip6t_srh: unknown srh match flags 4000 [ 1922.706359][T18010] syzkaller0: entered promiscuous mode [ 1922.706381][T18010] syzkaller0: entered allmulticast mode [ 1922.753711][T18012] tipc: Enabled bearer , priority 0 [ 1922.814447][T18021] FAULT_INJECTION: forcing a failure. [ 1922.814447][T18021] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.814481][T18021] CPU: 1 UID: 0 PID: 18021 Comm: syz.7.11279 Not tainted syzkaller #0 PREEMPT(full) [ 1922.814505][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1922.814517][T18021] Call Trace: [ 1922.814524][T18021] [ 1922.814534][T18021] dump_stack_lvl+0xe8/0x150 [ 1922.814566][T18021] should_fail_ex+0x410/0x560 [ 1922.814596][T18021] should_failslab+0xa8/0x100 [ 1922.814624][T18021] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1922.814647][T18021] ? __css_rstat_updated+0x237/0x540 [ 1922.814667][T18021] ? __get_vm_area_node+0x155/0x2f0 [ 1922.814694][T18021] ? __get_vm_area_node+0x155/0x2f0 [ 1922.814729][T18021] __get_vm_area_node+0x155/0x2f0 [ 1922.814762][T18021] __vmalloc_node_range_noprof+0x343/0x1540 [ 1922.814793][T18021] ? bpf_check+0x115d/0x2ef0 [ 1922.814828][T18021] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1922.814857][T18021] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1922.814895][T18021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1922.814926][T18021] ? apparmor_capable+0x126/0x170 [ 1922.814959][T18021] ? bpf_lsm_capable+0x9/0x20 [ 1922.814978][T18021] ? security_capable+0x7e/0x2c0 [ 1922.815005][T18021] ? bpf_check+0x115d/0x2ef0 [ 1922.815025][T18021] __vmalloc_noprof+0xd2/0x120 [ 1922.815055][T18021] ? bpf_check+0x115d/0x2ef0 [ 1922.815080][T18021] bpf_check+0x115d/0x2ef0 [ 1922.815118][T18021] ? __pfx_bpf_check+0x10/0x10 [ 1922.815141][T18021] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1922.815180][T18021] bpf_prog_load+0x14d6/0x1c20 [ 1922.815216][T18021] ? __pfx_bpf_prog_load+0x10/0x10 [ 1922.815262][T18021] __sys_bpf+0xd0d/0xd90 [ 1922.815294][T18021] ? __pfx___sys_bpf+0x10/0x10 [ 1922.815329][T18021] ? __fget_files+0x2a/0x420 [ 1922.815375][T18021] ? ksys_write+0x242/0x270 [ 1922.815408][T18021] ? __pfx_ksys_write+0x10/0x10 [ 1922.815444][T18021] __x64_sys_bpf+0xba/0xd0 [ 1922.815468][T18021] do_syscall_64+0x166/0x520 [ 1922.815497][T18021] ? trace_irq_disable+0x3b/0x140 [ 1922.815517][T18021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.815538][T18021] ? clear_bhb_loop+0x70/0xc0 [ 1922.815571][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.815592][T18021] RIP: 0033:0x7f7b67d9e159 [ 1922.815611][T18021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.815629][T18021] RSP: 002b:00007f7b65ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.815651][T18021] RAX: ffffffffffffffda RBX: 00007f7b68026090 RCX: 00007f7b67d9e159 [ 1922.815665][T18021] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1922.815679][T18021] RBP: 00007f7b65ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.815692][T18021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.815705][T18021] R13: 00007f7b68026128 R14: 00007f7b68026090 R15: 00007fffa6760d58 [ 1922.815739][T18021] [ 1922.815770][T18021] syz.7.11279: vmalloc error: size 2992, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1922.815831][T18021] CPU: 1 UID: 0 PID: 18021 Comm: syz.7.11279 Not tainted syzkaller #0 PREEMPT(full) [ 1922.815852][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1922.815864][T18021] Call Trace: [ 1922.815870][T18021] [ 1922.815878][T18021] dump_stack_lvl+0xe8/0x150 [ 1922.815905][T18021] warn_alloc+0x24d/0x270 [ 1922.815925][T18021] ? __kasan_kmalloc+0x22/0xb0 [ 1922.815952][T18021] ? __pfx_warn_alloc+0x10/0x10 [ 1922.815970][T18021] ? __css_rstat_updated+0x237/0x540 [ 1922.815992][T18021] ? __get_vm_area_node+0x155/0x2f0 [ 1922.816026][T18021] ? __get_vm_area_node+0x2a9/0x2f0 [ 1922.816063][T18021] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1922.816107][T18021] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1922.816140][T18021] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1922.816188][T18021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1922.816223][T18021] ? apparmor_capable+0x126/0x170 [ 1922.816256][T18021] ? bpf_lsm_capable+0x9/0x20 [ 1922.816273][T18021] ? security_capable+0x7e/0x2c0 [ 1922.816299][T18021] ? bpf_check+0x115d/0x2ef0 [ 1922.816319][T18021] __vmalloc_noprof+0xd2/0x120 [ 1922.816400][T18021] ? bpf_check+0x115d/0x2ef0 [ 1922.816423][T18021] bpf_check+0x115d/0x2ef0 [ 1922.816462][T18021] ? __pfx_bpf_check+0x10/0x10 [ 1922.816487][T18021] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1922.816520][T18021] bpf_prog_load+0x14d6/0x1c20 [ 1922.816555][T18021] ? __pfx_bpf_prog_load+0x10/0x10 [ 1922.816606][T18021] __sys_bpf+0xd0d/0xd90 [ 1922.816637][T18021] ? __pfx___sys_bpf+0x10/0x10 [ 1922.816783][T18021] ? __fget_files+0x2a/0x420 [ 1922.816835][T18021] ? ksys_write+0x242/0x270 [ 1922.816869][T18021] ? __pfx_ksys_write+0x10/0x10 [ 1922.816902][T18021] __x64_sys_bpf+0xba/0xd0 [ 1922.816935][T18021] do_syscall_64+0x166/0x520 [ 1922.816964][T18021] ? trace_irq_disable+0x3b/0x140 [ 1922.816984][T18021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.817005][T18021] ? clear_bhb_loop+0x70/0xc0 [ 1922.817030][T18021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.817050][T18021] RIP: 0033:0x7f7b67d9e159 [ 1922.817070][T18021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.817087][T18021] RSP: 002b:00007f7b65ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.817109][T18021] RAX: ffffffffffffffda RBX: 00007f7b68026090 RCX: 00007f7b67d9e159 [ 1922.817125][T18021] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1922.817139][T18021] RBP: 00007f7b65ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.817152][T18021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.817166][T18021] R13: 00007f7b68026128 R14: 00007f7b68026090 R15: 00007fffa6760d58 [ 1922.817200][T18021] [ 1922.817234][T18021] Mem-Info: [ 1922.817243][T18021] active_anon:15353 inactive_anon:0 isolated_anon:0 [ 1922.817243][T18021] active_file:2 inactive_file:44570 isolated_file:0 [ 1922.817243][T18021] unevictable:0 dirty:161 writeback:0 [ 1922.817243][T18021] slab_reclaimable:13659 slab_unreclaimable:144777 [ 1922.817243][T18021] mapped:30109 shmem:544 pagetables:1934 [ 1922.817243][T18021] sec_pagetables:0 bounce:0 [ 1922.817243][T18021] kernel_misc_reclaimable:0 [ 1922.817243][T18021] free:1251266 free_pcp:11617 free_cma:0 [ 1922.817304][T18021] Node 0 active_anon:61412kB inactive_anon:0kB active_file:8kB inactive_file:178076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120436kB dirty:644kB writeback:0kB shmem:2176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18816kB pagetables:7588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1922.817362][T18021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1922.817417][T18021] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.817477][T18021] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1922.817516][T18021] Node 0 DMA32 free:1046552kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:61412kB inactive_anon:0kB active_file:8kB inactive_file:178076kB unevictable:0kB writepending:644kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:42692kB local_pcp:21748kB free_cma:0kB [ 1922.817578][T18021] lowmem_reserve[]: 0 0 0 0 0 [ 1922.817615][T18021] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.817671][T18021] lowmem_reserve[]: 0 0 0 0 0 [ 1922.817715][T18021] Node 1 Normal free:3943152kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:0kB free_cma:0kB [ 1922.817776][T18021] lowmem_reserve[]: 0 0 0 0 0 [ 1922.817810][T18021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1922.817917][T18021] Node 0 DMA32: 2624*4kB (UME) 1931*8kB (UM) 894*16kB (UME) 1010*32kB (UME) 824*64kB (UME) 426*128kB (UME) 86*256kB (UME) 32*512kB (UME) 15*1024kB (UME) 11*2048kB (UME) 193*4096kB (UM) = 1046648kB [ 1922.818089][T18021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1922.818183][T18021] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 6*32kB (UM) 13*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3943204kB [ 1922.818359][T18021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.818376][T18021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1922.818392][T18021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.818409][T18021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1922.818424][T18021] 45112 total pagecache pages [ 1922.818431][T18021] 0 pages in swap cache [ 1922.818439][T18021] Free swap = 124996kB [ 1922.818446][T18021] Total swap = 124996kB [ 1922.818455][T18021] 2097051 pages RAM [ 1922.818463][T18021] 0 pages HighMem/MovableOnly [ 1922.818471][T18021] 428661 pages reserved [ 1922.818478][T18021] 0 pages cma reserved [ 1922.846487][T18008] tipc: Resetting bearer [ 1923.065146][T18008] tipc: Disabling bearer [ 1923.536459][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11284'. [ 1923.861860][T18050] netlink: 'syz.7.11286': attribute type 10 has an invalid length. [ 1923.882655][T18050] bond0: (slave netdevsim1): Releasing backup interface [ 1923.883197][T18050] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1923.888036][T18050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1923.904805][T18050] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1923.923452][T18050] team0: Port device netdevsim1 added [ 1923.927647][T18034] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1923.948481][T18050] netlink: 14 bytes leftover after parsing attributes in process `syz.7.11286'. [ 1923.995299][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11288'. [ 1924.020510][T18058] ip6t_srh: unknown srh match flags 4000 [ 1924.151995][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11294'. [ 1924.261610][T18078] bond6: option tlb_dynamic_lb: invalid value (128) [ 1924.262719][T18078] bond6 (unregistering): Released all slaves [ 1924.706175][T18097] netlink: 216 bytes leftover after parsing attributes in process `syz.6.11299'. [ 1924.725408][T18097] bond5: (slave batadv0): Releasing active interface [ 1924.726124][T18097] bond5: (slave veth3): making interface the new active one [ 1924.817443][T18109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1924.886271][T18115] ip6t_srh: unknown srh match flags 4000 [ 1925.090446][T18118] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11303'. [ 1925.211610][T18128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1925.513739][T18155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11315'. [ 1925.655091][T18161] erspan0: left allmulticast mode [ 1925.655369][T18161] bridge5: port 1(erspan0) entered disabled state [ 1925.687950][T18161] bridge_slave_0: left allmulticast mode [ 1925.688185][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.731154][T18161] bridge_slave_1: left allmulticast mode [ 1925.731475][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.746015][T18161] bond0: (slave bond_slave_0): Releasing backup interface [ 1925.748070][T18161] bond0: (slave 5¬0Ù): Releasing backup interface [ 1925.764178][T18161] team0: Port device team_slave_0 removed [ 1925.765872][T18161] team0: Port device team_slave_1 removed [ 1925.766077][T18161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1925.766694][T18161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1925.767315][T18161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1925.767374][T18160] netlink: 4516 bytes leftover after parsing attributes in process `syz.5.11315'. [ 1925.797606][T18163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1926.088752][T18177] syzkaller0: entered promiscuous mode [ 1926.088777][T18177] syzkaller0: entered allmulticast mode [ 1926.184290][T18182] netlink: 'syz.5.11322': attribute type 4 has an invalid length. [ 1926.216314][T18182] netlink: 'syz.5.11322': attribute type 4 has an invalid length. [ 1926.314653][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11327'. [ 1926.370313][T18189] ipvlan0: entered allmulticast mode [ 1926.370336][T18189] syz_tun: entered allmulticast mode [ 1926.689242][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1926.732761][T18205] netlink: 'syz.1.11330': attribute type 11 has an invalid length. [ 1927.339628][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.339870][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.340086][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.340300][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.340507][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.340735][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.340964][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.392556][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.448666][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.456679][T18229] xt_policy: output policy not valid in PREROUTING and INPUT [ 1927.516586][T18240] netlink: 'syz.5.11341': attribute type 10 has an invalid length. [ 1927.544920][T18240] bond0: (slave netdevsim1): Releasing backup interface [ 1927.546847][T18240] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1927.558307][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1927.560400][T18240] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1927.563699][T18240] team0: Port device netdevsim1 added [ 1927.588967][T18240] netlink: 'syz.5.11341': attribute type 10 has an invalid length. [ 1927.750544][T18240] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1927.769885][T18240] team0: Port device netdevsim1 removed [ 1927.991673][T18256] nbd: must specify a size in bytes for the device [ 1928.024507][T18256] team0: Port device bridge2 added [ 1928.065152][T18261] dvmrp1: entered allmulticast mode [ 1928.237584][T18272] tipc: Started in network mode [ 1928.237619][T18272] tipc: Node identity aebe37d6e7e3, cluster identity 4711 [ 1928.237767][T18272] tipc: Enabled bearer , priority 0 [ 1928.283142][T18279] tipc: Resetting bearer [ 1928.548681][T18273] tipc: Disabling bearer [ 1928.734911][T18294] netlink: 'syz.7.11356': attribute type 1 has an invalid length. [ 1928.757075][T18294] bond10: option mode: invalid value (9) [ 1928.758909][T18294] bond10 (unregistering): Released all slaves [ 1928.947624][T18307] ip_tables: iptables: counters copy to user failed while replacing table [ 1928.986700][T18304] s: renamed from veth0 (while UP) [ 1929.007403][T18296] __nla_validate_parse: 3 callbacks suppressed [ 1929.007425][T18296] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11355'. [ 1929.102700][T18310] ip6t_srh: unknown srh match flags 4000 [ 1929.504788][T18337] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1930.003178][T18360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11374'. [ 1930.010291][T18360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11374'. [ 1930.058112][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.286405][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.286439][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.307699][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.307730][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.316550][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.316581][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1930.386398][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.386880][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.504761][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1930.520146][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1930.550638][T18394] sch_tbf: burst 7 is lower than device bridge0 mtu (1294) ! [ 1930.557905][T18394] sch_tbf: peakrate 896 is lower than or equals to rate 3850 ! [ 1930.571606][T18393] syzkaller0: entered promiscuous mode [ 1930.571628][T18393] syzkaller0: entered allmulticast mode [ 1930.904564][T18412] netlink: 'syz.7.11390': attribute type 14 has an invalid length. [ 1931.074264][T18419] batman_adv: batadv0: Adding interface: gretap2 [ 1931.100672][T18419] batman_adv: batadv0: Interface activated: gretap2 [ 1931.141060][T18419] netlink: 'syz.1.11393': attribute type 2 has an invalid length. [ 1931.841568][T18462] No such timeout policy "syz1" [ 1931.847636][T18457] netlink: 'syz.5.11404': attribute type 1 has an invalid length. [ 1932.213350][T18475] tipc: Resetting bearer [ 1932.316677][T18475] tipc: Disabling bearer [ 1932.441094][T18491] netlink: 'syz.6.11412': attribute type 21 has an invalid length. [ 1932.658591][T18501] syzkaller0: entered promiscuous mode [ 1932.658615][T18501] syzkaller0: entered allmulticast mode [ 1932.665753][T18501] tipc: Enabled bearer , priority 0 [ 1932.936391][T18499] tipc: Resetting bearer [ 1933.017923][T18499] tipc: Disabling bearer [ 1933.048477][T18520] tipc: New replicast peer: 255.255.255.255 [ 1933.054223][T18520] tipc: Enabled bearer , priority 10 [ 1933.115637][T18520] netlink: 'syz.8.11418': attribute type 1 has an invalid length. [ 1933.219190][T18520] bond4: entered promiscuous mode [ 1933.219663][T18520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1933.294904][T18532] vlan2: entered promiscuous mode [ 1933.294926][T18532] bridge0: entered promiscuous mode [ 1933.462404][T18542] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1933.470156][T18542] netlink: 'syz.8.11423': attribute type 4 has an invalid length. [ 1934.153102][T18586] Bluetooth: hci0: unsupported parameter 5134 [ 1934.153126][T18586] Bluetooth: hci0: unsupported parameter 8192 [ 1934.153140][T18586] Bluetooth: hci0: unsupported parameter 5134 [ 1934.153154][T18586] Bluetooth: hci0: unsupported parameter 8192 [ 1934.204421][T13945] tipc: Node number set to 2354219842 [ 1934.366861][T18599] netlink: Unknown conntrack attr (type=246, max=9) [ 1934.502553][T18609] __nla_validate_parse: 189 callbacks suppressed [ 1934.502574][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11441'. [ 1934.918856][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11442'. [ 1935.007318][T18622] tc_dump_action: action bad kind [ 1935.240085][T18637] tipc: Enabling of bearer rejected, already enabled [ 1935.240489][T18637] syzkaller0: entered promiscuous mode [ 1935.240506][T18637] syzkaller0: entered allmulticast mode [ 1935.242380][T18638] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1935.361737][T18640] FAULT_INJECTION: forcing a failure. [ 1935.361737][T18640] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.361779][T18640] CPU: 1 UID: 0 PID: 18640 Comm: syz.7.11449 Not tainted syzkaller #0 PREEMPT(full) [ 1935.361803][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1935.361822][T18640] Call Trace: [ 1935.361831][T18640] [ 1935.361840][T18640] dump_stack_lvl+0xe8/0x150 [ 1935.361872][T18640] should_fail_ex+0x410/0x560 [ 1935.361906][T18640] should_failslab+0xa8/0x100 [ 1935.361934][T18640] __kvmalloc_node_noprof+0x176/0x820 [ 1935.361956][T18640] ? security_capable+0x7e/0x2c0 [ 1935.361982][T18640] ? bpf_check+0x165e/0x2ef0 [ 1935.362001][T18640] ? bpf_check+0x165e/0x2ef0 [ 1935.362027][T18640] bpf_check+0x165e/0x2ef0 [ 1935.362066][T18640] ? __pfx_bpf_check+0x10/0x10 [ 1935.362091][T18640] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1935.362122][T18640] bpf_prog_load+0x14d6/0x1c20 [ 1935.362158][T18640] ? __pfx_bpf_prog_load+0x10/0x10 [ 1935.362209][T18640] __sys_bpf+0xd0d/0xd90 [ 1935.362239][T18640] ? __pfx___sys_bpf+0x10/0x10 [ 1935.362272][T18640] ? __fget_files+0x2a/0x420 [ 1935.362315][T18640] ? ksys_write+0x242/0x270 [ 1935.362347][T18640] ? __pfx_ksys_write+0x10/0x10 [ 1935.362385][T18640] __x64_sys_bpf+0xba/0xd0 [ 1935.362409][T18640] do_syscall_64+0x166/0x520 [ 1935.362437][T18640] ? trace_irq_disable+0x3b/0x140 [ 1935.362458][T18640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.362479][T18640] ? clear_bhb_loop+0x70/0xc0 [ 1935.362504][T18640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.362525][T18640] RIP: 0033:0x7f7b67d9e159 [ 1935.362544][T18640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1935.362562][T18640] RSP: 002b:00007f7b68b80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1935.362583][T18640] RAX: ffffffffffffffda RBX: 00007f7b68025fa0 RCX: 00007f7b67d9e159 [ 1935.362598][T18640] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1935.362616][T18640] RBP: 00007f7b68b80090 R08: 0000000000000000 R09: 0000000000000000 [ 1935.362630][T18640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.362643][T18640] R13: 00007f7b68026038 R14: 00007f7b68025fa0 R15: 00007fffa6760d58 [ 1935.362676][T18640] [ 1935.480919][T18641] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1935.482983][T18638] tipc: Resetting bearer [ 1935.798871][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11451'. [ 1935.798894][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11451'. [ 1935.798919][T18654] netlink: 'syz.8.11451': attribute type 18 has an invalid length. [ 1936.143143][T18681] netlink: 'syz.7.11457': attribute type 10 has an invalid length. [ 1936.208947][T18683] netlink: 'syz.7.11457': attribute type 10 has an invalid length. [ 1936.270642][ T1796] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1936.276138][ T7970] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1936.276206][T11336] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1936.276270][T11336] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1936.277280][T18664] syzkaller1: entered promiscuous mode [ 1936.277299][T18664] syzkaller1: entered allmulticast mode [ 1936.334810][T18683] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1936.338265][T18683] team0: Port device netdevsim1 removed [ 1936.349148][T18683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1936.353038][T18683] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1936.354607][T18683] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1936.506463][T18694] netlink: 'syz.8.11461': attribute type 7 has an invalid length. [ 1936.506486][T18694] netlink: 'syz.8.11461': attribute type 3 has an invalid length. [ 1936.506500][T18694] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11461'. [ 1936.663007][T18709] FAULT_INJECTION: forcing a failure. [ 1936.663007][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.663040][T18709] CPU: 0 UID: 0 PID: 18709 Comm: syz.5.11464 Not tainted syzkaller #0 PREEMPT(full) [ 1936.663062][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1936.663075][T18709] Call Trace: [ 1936.663083][T18709] [ 1936.663092][T18709] dump_stack_lvl+0xe8/0x150 [ 1936.663123][T18709] should_fail_ex+0x410/0x560 [ 1936.663149][T18709] should_failslab+0xa8/0x100 [ 1936.663176][T18709] __kvmalloc_node_noprof+0x176/0x820 [ 1936.663199][T18709] ? security_capable+0x7e/0x2c0 [ 1936.663222][T18709] ? bpf_check+0x165e/0x2ef0 [ 1936.663242][T18709] ? bpf_check+0x165e/0x2ef0 [ 1936.663268][T18709] bpf_check+0x165e/0x2ef0 [ 1936.663305][T18709] ? __pfx_bpf_check+0x10/0x10 [ 1936.663330][T18709] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1936.663362][T18709] bpf_prog_load+0x14d6/0x1c20 [ 1936.663395][T18709] ? __pfx_bpf_prog_load+0x10/0x10 [ 1936.663441][T18709] __sys_bpf+0xd0d/0xd90 [ 1936.663474][T18709] ? __pfx___sys_bpf+0x10/0x10 [ 1936.663506][T18709] ? __fget_files+0x2a/0x420 [ 1936.663550][T18709] ? ksys_write+0x242/0x270 [ 1936.663583][T18709] ? __pfx_ksys_write+0x10/0x10 [ 1936.663616][T18709] __x64_sys_bpf+0xba/0xd0 [ 1936.663640][T18709] do_syscall_64+0x166/0x520 [ 1936.663668][T18709] ? trace_irq_disable+0x3b/0x140 [ 1936.663700][T18709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.663722][T18709] ? clear_bhb_loop+0x70/0xc0 [ 1936.663746][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.663766][T18709] RIP: 0033:0x7faf69b9e159 [ 1936.663785][T18709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.663803][T18709] RSP: 002b:00007faf67df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1936.663826][T18709] RAX: ffffffffffffffda RBX: 00007faf69e26090 RCX: 00007faf69b9e159 [ 1936.663841][T18709] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1936.663854][T18709] RBP: 00007faf67df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.663867][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.663879][T18709] R13: 00007faf69e26128 R14: 00007faf69e26090 R15: 00007ffd92e2ff08 [ 1936.663912][T18709] [ 1937.348098][T18721] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1937.387719][T18721] bond5 (unregistering): Released all slaves [ 1938.285252][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11477'. [ 1938.573904][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.573928][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11478'. [ 1938.574038][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.574052][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11478'. [ 1938.574165][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.574178][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11478'. [ 1938.574309][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.574322][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11478'. [ 1938.574432][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.574537][T18777] netlink: 'syz.6.11478': attribute type 1 has an invalid length. [ 1938.994675][T18807] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1939.043523][T18808] lo: left promiscuous mode [ 1939.046261][T18808] tunl0: left promiscuous mode [ 1939.047612][T18808] gre0: left promiscuous mode [ 1939.054789][T18808] gretap0: left promiscuous mode [ 1939.056485][T18808] erspan0: left promiscuous mode [ 1939.060697][T18808] ip_vti0: left promiscuous mode [ 1939.061956][T18808] ip6_vti0: left promiscuous mode [ 1939.063717][T18808] sit0: left promiscuous mode [ 1939.070638][T18808] ip6tnl0: left promiscuous mode [ 1939.072964][T18808] ip6gre0: left promiscuous mode [ 1939.074848][T18808] syz_tun: left promiscuous mode [ 1939.076937][T18808] ip6gretap0: left promiscuous mode [ 1939.080481][T18808] bridge0: left promiscuous mode [ 1939.081660][T18808] vcan0: left promiscuous mode [ 1939.082838][T18808] bond0: left promiscuous mode [ 1939.082859][T18808] netdevsim netdevsim8 netdevsim1: left promiscuous mode [ 1939.084594][T18808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1939.085622][T18808] team0: left promiscuous mode [ 1939.086422][T18808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1939.087336][T18808] nlmon0: left promiscuous mode [ 1939.088453][T18808] batadv0: left promiscuous mode [ 1939.091204][T18808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1939.092128][T18808] veth0: left promiscuous mode [ 1939.094876][T18808] veth1: left promiscuous mode [ 1939.103959][T18808] wg0: left promiscuous mode [ 1939.113349][T18808] wg2: left promiscuous mode [ 1939.120248][T18808] veth0_to_bridge: left promiscuous mode [ 1939.125210][T18808] bridge_slave_0: left promiscuous mode [ 1939.127776][T18808] veth1_to_bridge: left promiscuous mode [ 1939.133441][T18808] bridge_slave_1: left promiscuous mode [ 1939.138454][T18808] bond_slave_0: left promiscuous mode [ 1939.147590][T18808] ¬0Ù: left promiscuous mode [ 1939.148358][T18808] veth0_to_team: left promiscuous mode [ 1939.155931][T18808] team_slave_0: left promiscuous mode [ 1939.158959][T18808] veth1_to_team: left promiscuous mode [ 1939.167422][T18808] team_slave_1: left promiscuous mode [ 1939.170353][T18808] veth0_to_batadv: left promiscuous mode [ 1939.177583][T18808] batadv_slave_0: left promiscuous mode [ 1939.182277][T18808] veth1_to_batadv: left promiscuous mode [ 1939.192214][T18808] batadv_slave_1: left promiscuous mode [ 1939.195017][T18808] xfrm0: left promiscuous mode [ 1939.198668][T18808] veth0_to_hsr: left promiscuous mode [ 1939.213431][T18808] veth1_to_hsr: left promiscuous mode [ 1939.216859][T18808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1939.216883][T18808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1939.226722][T18808] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1939.360996][T18807] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1939.561083][T18824] syzkaller1: entered promiscuous mode [ 1939.561099][T18824] syzkaller1: entered allmulticast mode [ 1939.565518][T18826] syzkaller0: entered promiscuous mode [ 1939.565532][T18826] syzkaller0: entered allmulticast mode [ 1940.253124][T18842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1940.253161][T18842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.437900][T18864] __nla_validate_parse: 50 callbacks suppressed [ 1940.437920][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11496'. [ 1940.733055][T18874] bond4: option resend_igmp: invalid value (2878) [ 1940.733084][T18874] bond4: option resend_igmp: allowed values 0 - 255 [ 1940.740994][T18874] bond4 (unregistering): Released all slaves [ 1941.088323][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11501'. [ 1941.146517][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11501'. [ 1945.434332][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11500'. [ 1945.627897][T18911] x_tables: duplicate underflow at hook 1 [ 1945.627984][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628052][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628120][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628187][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628262][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628333][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628402][T18911] x_tables: duplicate underflow at hook 1 [ 1945.628470][T18911] x_tables: duplicate underflow at hook 1 [ 1945.636526][T18911] x_tables: duplicate underflow at hook 1 [ 1945.711523][T18842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1945.711561][T18842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.826097][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11504'. [ 1945.912581][T18842] bond0: (slave netdevsim1): Releasing backup interface [ 1945.912613][T18842] bond0: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1945.947850][T18842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1945.947889][T18842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.983142][T18921] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11506'. [ 1946.087669][T18842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.087709][T18842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.205056][T18932] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11510'. [ 1946.253455][T11333] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1946.253495][T11333] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.268848][T18934] validate_nla: 46 callbacks suppressed [ 1946.268867][T18934] netlink: 'syz.7.11511': attribute type 5 has an invalid length. [ 1946.308062][T11336] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1946.308094][T11336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.310683][T11336] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1946.310713][T11336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.406587][T11333] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1946.406621][T11333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.502831][T18942] netlink: 164 bytes leftover after parsing attributes in process `syz.8.11510'. [ 1946.505083][T18942] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11510'. [ 1946.570706][T18950] netlink: 'syz.6.11514': attribute type 1 has an invalid length. [ 1946.643009][T18950] bond6: entered promiscuous mode [ 1946.643605][T18950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1946.720945][T18953] ipvlan3: entered allmulticast mode [ 1946.720968][T18953] bond6: entered allmulticast mode [ 1946.775331][T18950] ipvlan4: entered allmulticast mode [ 1946.840346][T18950] bond6: (slave bridge5): making interface the new active one [ 1946.840375][T18950] bridge5: entered promiscuous mode [ 1946.840571][T18950] bridge5: entered allmulticast mode [ 1946.843614][T18950] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1947.380750][T18983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11520'. [ 1947.553380][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11523'. [ 1947.615298][T18997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1948.125453][T19022] netlink: 156 bytes leftover after parsing attributes in process `syz.8.11533'. [ 1948.190280][T19026] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1948.318105][T19036] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11539'. [ 1948.458789][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 30 seconds [ 1948.474135][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 30 seconds [ 1948.474174][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 30 seconds [ 1948.474198][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 30 seconds [ 1948.522767][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11541'. [ 1949.146818][T19068] veth0_to_bridge: entered promiscuous mode [ 1949.147097][T19068] macvtap1: entered allmulticast mode [ 1949.147114][T19068] veth0_to_bridge: entered allmulticast mode [ 1949.189770][T19068] veth0_to_bridge: left allmulticast mode [ 1949.189799][T19068] veth0_to_bridge: left promiscuous mode [ 1949.713877][T19101] syzkaller1: entered promiscuous mode [ 1949.713899][T19101] syzkaller1: entered allmulticast mode [ 1950.300543][T19129] sctp: [Deprecated]: syz.6.11567 (pid 19129) Use of int in max_burst socket option deprecated. [ 1950.300543][T19129] Use struct sctp_assoc_value instead [ 1950.343168][T19131] netlink: 'syz.7.11570': attribute type 10 has an invalid length. [ 1950.346998][T19131] bond0: (slave netdevsim1): Releasing backup interface [ 1950.347654][T19131] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1950.357345][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1950.358347][T19131] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1950.362784][T19131] team0: Port device netdevsim1 added [ 1950.366430][T19131] netlink: 'syz.7.11570': attribute type 10 has an invalid length. [ 1950.366903][T19131] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1950.429743][T19131] team0: Port device netdevsim1 removed [ 1950.713396][T19141] netlink: 'syz.1.11573': attribute type 14 has an invalid length. [ 1951.415812][T19157] netlink: 'syz.5.11577': attribute type 10 has an invalid length. [ 1951.435374][T19157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1951.436551][T19157] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1951.439474][T19157] team0: Port device netdevsim1 added [ 1951.439624][T19155] __nla_validate_parse: 12 callbacks suppressed [ 1951.439639][T19155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11578'. [ 1951.458221][T19157] netlink: 'syz.5.11577': attribute type 10 has an invalid length. [ 1951.458881][T19157] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1951.517728][T19157] team0: Port device netdevsim1 removed [ 1951.683319][T19169] netlink: 'syz.5.11582': attribute type 10 has an invalid length. [ 1951.713977][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1951.715105][T19169] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1951.716433][T19169] team0: Port device netdevsim1 added [ 1951.742350][T19169] netlink: 'syz.5.11582': attribute type 10 has an invalid length. [ 1951.742787][T19169] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1951.769118][T19169] team0: Port device netdevsim1 removed [ 1951.903681][T19187] netlink: 552 bytes leftover after parsing attributes in process `syz.8.11588'. [ 1951.903707][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11588'. [ 1951.995243][T19196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1952.013280][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11589'. [ 1952.330253][T19208] netlink: 'syz.5.11592': attribute type 1 has an invalid length. [ 1952.330278][T19208] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11592'. [ 1952.414950][T19208] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1952.416307][T19208] batman_adv: batadv0: Adding interface: gretap3 [ 1952.416329][T19208] batman_adv: batadv0: Interface activated: gretap3 [ 1952.876476][T19234] netlink: 'syz.7.11598': attribute type 10 has an invalid length. [ 1952.878134][T19234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1952.879545][T19234] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1952.880557][T19234] team0: Port device netdevsim1 added [ 1952.883597][T19234] netlink: 'syz.7.11598': attribute type 10 has an invalid length. [ 1952.884004][T19234] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 1952.924605][T19234] team0: Port device netdevsim1 removed [ 1953.183167][T19248] FAULT_INJECTION: forcing a failure. [ 1953.183167][T19248] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.183199][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.7.11601 Not tainted syzkaller #0 PREEMPT(full) [ 1953.183232][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1953.183244][T19248] Call Trace: [ 1953.183252][T19248] [ 1953.183260][T19248] dump_stack_lvl+0xe8/0x150 [ 1953.183293][T19248] should_fail_ex+0x410/0x560 [ 1953.183321][T19248] should_failslab+0xa8/0x100 [ 1953.183345][T19248] __kvmalloc_node_noprof+0x176/0x820 [ 1953.183367][T19248] ? __kvmalloc_node_noprof+0x345/0x820 [ 1953.183386][T19248] ? sort_subprogs_topo+0xf5/0xf20 [ 1953.183406][T19248] ? sort_subprogs_topo+0xf5/0xf20 [ 1953.183433][T19248] sort_subprogs_topo+0xf5/0xf20 [ 1953.183454][T19248] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1953.183492][T19248] bpf_check+0x26fa/0x2ef0 [ 1953.183527][T19248] ? __pfx_bpf_check+0x10/0x10 [ 1953.183547][T19248] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1953.183575][T19248] bpf_prog_load+0x14d6/0x1c20 [ 1953.183609][T19248] ? __pfx_bpf_prog_load+0x10/0x10 [ 1953.183658][T19248] __sys_bpf+0xd0d/0xd90 [ 1953.183689][T19248] ? __pfx___sys_bpf+0x10/0x10 [ 1953.183724][T19248] ? __fget_files+0x2a/0x420 [ 1953.183770][T19248] ? ksys_write+0x242/0x270 [ 1953.183803][T19248] ? __pfx_ksys_write+0x10/0x10 [ 1953.183838][T19248] __x64_sys_bpf+0xba/0xd0 [ 1953.183862][T19248] do_syscall_64+0x166/0x520 [ 1953.183891][T19248] ? trace_irq_disable+0x3b/0x140 [ 1953.183920][T19248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.183941][T19248] ? clear_bhb_loop+0x70/0xc0 [ 1953.183966][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.183987][T19248] RIP: 0033:0x7f7b67d9e159 [ 1953.184007][T19248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.184024][T19248] RSP: 002b:00007f7b65ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1953.184044][T19248] RAX: ffffffffffffffda RBX: 00007f7b68026090 RCX: 00007f7b67d9e159 [ 1953.184058][T19248] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1953.184072][T19248] RBP: 00007f7b65ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1953.184085][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1953.184096][T19248] R13: 00007f7b68026128 R14: 00007f7b68026090 R15: 00007fffa6760d58 [ 1953.184129][T19248] [ 1953.627963][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11603'. [ 1953.827397][T19270] netlink: 552 bytes leftover after parsing attributes in process `syz.1.11609'. [ 1953.827421][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11609'. [ 1954.068294][T19281] ip6t_srh: unknown srh match flags 4000 [ 1954.297385][T19286] netlink: 'syz.6.11612': attribute type 10 has an invalid length. [ 1954.330082][T19286] bond0: (slave netdevsim1): Releasing backup interface [ 1954.338376][T19286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1954.343129][T19286] team0: Port device netdevsim1 added [ 1954.355598][T19286] netlink: 'syz.6.11612': attribute type 10 has an invalid length. [ 1954.385078][T19286] team0: Port device netdevsim1 removed [ 1954.570442][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11614'. [ 1955.014812][T19317] ip6t_srh: unknown srh match flags 4000 [ 1955.196471][T19318] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1955.242766][T19321] pimreg9: entered allmulticast mode [ 1955.812932][T19339] netlink: 'syz.1.11626': attribute type 10 has an invalid length. [ 1956.459617][T19366] FAULT_INJECTION: forcing a failure. [ 1956.459617][T19366] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.460380][T19366] CPU: 1 UID: 0 PID: 19366 Comm: syz.8.11632 Not tainted syzkaller #0 PREEMPT(full) [ 1956.460406][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1956.460419][T19366] Call Trace: [ 1956.460428][T19366] [ 1956.460437][T19366] dump_stack_lvl+0xe8/0x150 [ 1956.460469][T19366] should_fail_ex+0x410/0x560 [ 1956.460499][T19366] should_failslab+0xa8/0x100 [ 1956.460527][T19366] __kvmalloc_node_noprof+0x176/0x820 [ 1956.460552][T19366] ? __kvmalloc_node_noprof+0x345/0x820 [ 1956.460574][T19366] ? bpf_compute_scc+0xec/0xb10 [ 1956.460593][T19366] ? bpf_compute_scc+0xec/0xb10 [ 1956.460620][T19366] bpf_compute_scc+0xec/0xb10 [ 1956.460661][T19366] bpf_check+0x2720/0x2ef0 [ 1956.460703][T19366] ? __pfx_bpf_check+0x10/0x10 [ 1956.460729][T19366] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1956.460761][T19366] bpf_prog_load+0x14d6/0x1c20 [ 1956.460807][T19366] ? __pfx_bpf_prog_load+0x10/0x10 [ 1956.460857][T19366] __sys_bpf+0xd0d/0xd90 [ 1956.460889][T19366] ? __pfx___sys_bpf+0x10/0x10 [ 1956.460923][T19366] ? __fget_files+0x2a/0x420 [ 1956.460961][T19366] ? ksys_write+0x242/0x270 [ 1956.460993][T19366] ? __pfx_ksys_write+0x10/0x10 [ 1956.461029][T19366] __x64_sys_bpf+0xba/0xd0 [ 1956.461054][T19366] do_syscall_64+0x166/0x520 [ 1956.461083][T19366] ? trace_irq_disable+0x3b/0x140 [ 1956.461104][T19366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.461126][T19366] ? clear_bhb_loop+0x70/0xc0 [ 1956.461152][T19366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.461172][T19366] RIP: 0033:0x7f3b16b9e159 [ 1956.461192][T19366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.461212][T19366] RSP: 002b:00007f3b17a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1956.461234][T19366] RAX: ffffffffffffffda RBX: 00007f3b16e26090 RCX: 00007f3b16b9e159 [ 1956.461250][T19366] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1956.461263][T19366] RBP: 00007f3b17a42090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.461277][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1956.461289][T19366] R13: 00007f3b16e26128 R14: 00007f3b16e26090 R15: 00007ffe0875b4b8 [ 1956.461323][T19366] [ 1957.398243][T19385] __nla_validate_parse: 1 callbacks suppressed [ 1957.398266][T19385] netlink: 552 bytes leftover after parsing attributes in process `syz.8.11636'. [ 1957.398283][T19385] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11636'. [ 1958.703443][T19400] validate_nla: 1 callbacks suppressed [ 1958.703463][T19400] netlink: 'syz.6.11638': attribute type 10 has an invalid length. [ 1958.764667][T19400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1958.785761][T19400] team0: Port device netdevsim1 added [ 1958.785926][T19406] netlink: 'syz.6.11638': attribute type 10 has an invalid length. [ 1958.814121][T19406] team0: Port device netdevsim1 removed [ 1959.045799][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11644'. [ 1959.133480][T19411] netlink: 80 bytes leftover after parsing attributes in process `syz.7.11643'. [ 1959.257926][T19411] xt_CT: No such helper "syz0" [ 1959.429587][T19439] syzkaller0: entered promiscuous mode [ 1959.429612][T19439] syzkaller0: entered allmulticast mode [ 1959.435328][T19438] tipc: Enabled bearer , priority 0 [ 1959.478093][T19439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11649'. [ 1959.565112][T19437] tipc: Resetting bearer [ 1959.632881][T19437] tipc: Disabling bearer [ 1959.868175][T19465] netlink: 'syz.5.11657': attribute type 10 has an invalid length. [ 1959.884894][T19465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1959.886817][T19465] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1959.888764][T19465] team0: Port device netdevsim1 added [ 1959.899480][T19465] netlink: 'syz.5.11657': attribute type 10 has an invalid length. [ 1959.899897][T19465] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1959.936312][T19465] team0: Port device netdevsim1 removed [ 1960.120698][T19471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1960.161248][T19478] netlink: 'syz.1.11658': attribute type 4 has an invalid length. [ 1960.161272][T19478] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1960.333244][T19487] tipc: Enabling of bearer rejected, failed to enable media [ 1960.473470][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11663'. [ 1960.840611][T19508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11666'. [ 1960.840668][T19508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11666'. [ 1961.187051][T19523] netlink: 'syz.7.11672': attribute type 1 has an invalid length. [ 1961.276549][T19523] bond10: entered promiscuous mode [ 1961.286502][T19523] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1961.382007][T19531] tipc: Enabling of bearer rejected, failed to enable media [ 1961.647603][T19548] netlink: 'syz.8.11679': attribute type 1 has an invalid length. [ 1961.751822][T19554] xt_TCPMSS: Only works on TCP SYN packets [ 1961.754883][T19553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1961.798376][T19542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.876970][T19542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1961.877000][T19542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1961.901844][T19542] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1961.926799][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.926918][T11332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.936002][T19562] netlink: 'syz.5.11684': attribute type 1 has an invalid length. [ 1961.965275][T19563] nft_compat: unsupported protocol 1 [ 1962.441585][T19595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1962.506733][T19602] netlink: 'syz.5.11695': attribute type 4 has an invalid length. [ 1962.508055][T19603] netlink: 'syz.5.11695': attribute type 4 has an invalid length. [ 1962.534152][T19604] __nla_validate_parse: 10 callbacks suppressed [ 1962.534174][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11696'. [ 1962.693617][T19604] xt_bpf: check failed: parse error [ 1962.697338][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11699'. [ 1962.710131][T19616] netlink: 200 bytes leftover after parsing attributes in process `syz.6.11699'. [ 1963.036800][T19629] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 1963.536466][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11709'. [ 1963.940777][T19682] netlink: zone id is out of range [ 1963.940795][T19682] netlink: zone id is out of range [ 1963.940804][T19682] netlink: zone id is out of range [ 1963.940812][T19682] netlink: zone id is out of range [ 1963.940819][T19682] netlink: zone id is out of range [ 1963.940827][T19682] netlink: zone id is out of range [ 1963.940860][T19682] netlink: zone id is out of range [ 1963.940868][T19682] netlink: zone id is out of range [ 1964.640612][T19677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.787943][T19677] macvtap0: left allmulticast mode [ 1964.814276][T19677] bond6: left promiscuous mode [ 1964.814303][T19677] bridge5: left promiscuous mode [ 1964.816658][T19677] ipvlan3: left allmulticast mode [ 1964.816828][T19677] ipvlan4: left allmulticast mode [ 1964.816843][T19677] bond6: left allmulticast mode [ 1964.816856][T19677] bridge5: left allmulticast mode [ 1978.369329][ T4983] udevd[4983]: worker [17818] /devices/virtual/block/nbd11 is taking a long time [ 1978.530418][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 60 seconds [ 1978.530447][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 60 seconds [ 1978.530462][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 60 seconds [ 1978.530476][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 60 seconds [ 1996.449239][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2008.613410][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 90 seconds [ 2008.613442][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 90 seconds [ 2008.613457][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 90 seconds [ 2008.613471][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 90 seconds [ 2022.060373][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.690989][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 120 seconds [ 2038.691041][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 120 seconds [ 2038.691070][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 120 seconds [ 2038.691097][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 120 seconds [ 2068.770274][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 150 seconds [ 2068.770304][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 150 seconds [ 2068.770319][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 150 seconds [ 2068.770333][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 150 seconds [ 2098.480727][ T4983] udevd[4983]: worker [17818] /devices/virtual/block/nbd11 timeout; kill it [ 2098.480812][ T4983] udevd[4983]: seq 58217 '/devices/virtual/block/nbd11' killed [ 2098.855271][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 180 seconds [ 2098.855315][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 180 seconds [ 2098.855344][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 180 seconds [ 2098.855370][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 180 seconds [ 2128.931910][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 210 seconds [ 2128.931955][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 210 seconds [ 2128.931982][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 210 seconds [ 2128.932009][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 210 seconds [ 2129.569286][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2159.012159][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 240 seconds [ 2159.012188][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 240 seconds [ 2159.012221][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 240 seconds [ 2159.012235][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 240 seconds [ 2189.091008][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 270 seconds [ 2189.091039][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 270 seconds [ 2189.091054][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 270 seconds [ 2189.091068][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 270 seconds [ 2219.169815][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 300 seconds [ 2219.169859][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 300 seconds [ 2219.169885][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 300 seconds [ 2219.169910][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 300 seconds [ 2249.250069][ T26] block nbd11: Possible stuck request ffff8880282e7000: control (read@0,1024B). Runtime 330 seconds [ 2249.250105][ T26] block nbd11: Possible stuck request ffff8880282e71c0: control (read@1024,1024B). Runtime 330 seconds [ 2249.250120][ T26] block nbd11: Possible stuck request ffff8880282e7380: control (read@2048,1024B). Runtime 330 seconds [ 2249.250134][ T26] block nbd11: Possible stuck request ffff8880282e7540: control (read@3072,1024B). Runtime 330 seconds [ 2256.289792][ T32] INFO: task udevd:17818 blocked in I/O wait for more than 143 seconds. [ 2256.289820][ T32] Not tainted syzkaller #0 [ 2256.289830][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2256.289839][ T32] task:udevd state:D stack:26408 pid:17818 tgid:17818 ppid:4983 task_flags:0x400140 flags:0x00080002 [ 2256.289891][ T32] Call Trace: [ 2256.289899][ T32] [ 2256.289912][ T32] __schedule+0x17db/0x58f0 [ 2256.289959][ T32] ? __lock_acquire+0x747/0x2de0 [ 2256.289990][ T32] ? __pfx___schedule+0x10/0x10 [ 2256.290023][ T32] ? schedule+0x90/0x2b0 [ 2256.290052][ T32] schedule+0x164/0x2b0 [ 2256.290080][ T32] io_schedule+0x7f/0xd0 [ 2256.290107][ T32] folio_wait_bit_common+0x836/0xbc0 [ 2256.290131][ T32] ? filemap_get_entry+0xcd/0x3f0 [ 2256.290167][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2256.290191][ T32] ? filemap_read_folio+0x234/0x3a0 [ 2256.290246][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 2256.290278][ T32] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 2256.290314][ T32] do_read_cache_folio+0x1ac/0x590 [ 2256.290345][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2256.290375][ T32] read_part_sector+0xb6/0x2b0 [ 2256.290400][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 2256.290433][ T32] ? rcu_is_watching+0x16/0xb0 [ 2256.290459][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 2256.290482][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 2256.290507][ T32] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2256.290525][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 2256.290546][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 2256.290576][ T32] bdev_disk_changed+0x851/0x17a0 [ 2256.290621][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 2256.290653][ T32] blkdev_get_whole+0x372/0x510 [ 2256.290680][ T32] bdev_open+0x324/0xd70 [ 2256.290714][ T32] blkdev_open+0x461/0x600 [ 2256.290742][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 2256.290765][ T32] do_dentry_open+0x816/0x1380 [ 2256.290801][ T32] vfs_open+0x3b/0x340 [ 2256.290824][ T32] ? path_openat+0x1428/0x1d60 [ 2256.290848][ T32] path_openat+0x1443/0x1d60 [ 2256.290890][ T32] do_file_open+0x23e/0x4a0 [ 2256.290916][ T32] ? __pfx_do_file_open+0x10/0x10 [ 2256.290954][ T32] ? _raw_spin_unlock+0x28/0x50 [ 2256.290977][ T32] ? alloc_fd+0x651/0x6c0 [ 2256.291311][ T32] do_sys_openat2+0x115/0x200 [ 2256.291343][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 2256.291371][ T32] ? exc_page_fault+0x6a/0xc0 [ 2256.291404][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 2256.291452][ T32] __x64_sys_openat+0x138/0x170 [ 2256.291484][ T32] do_syscall_64+0x166/0x520 [ 2256.291517][ T32] ? trace_irq_disable+0x3b/0x140 [ 2256.291538][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.291564][ T32] ? clear_bhb_loop+0x70/0xc0 [ 2256.291590][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.291610][ T32] RIP: 0033:0x7f4399aa7407 [ 2256.291628][ T32] RSP: 002b:00007ffd3e6e7810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2256.291649][ T32] RAX: ffffffffffffffda RBX: 00007f439a2a8880 RCX: 00007f4399aa7407 [ 2256.291664][ T32] RDX: 00000000000a0800 RSI: 0000556caf4fda30 RDI: ffffffffffffff9c [ 2256.291678][ T32] RBP: 0000556caf4dd910 R08: 0000000000000000 R09: 0000000000000000 [ 2256.291689][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556caf4f0ad0 [ 2256.291702][ T32] R13: 0000556caf4eb190 R14: 0000000000000000 R15: 0000556caf4f0ad0 [ 2256.291734][ T32] [ 2256.291761][ T32] [ 2256.291761][ T32] Showing all locks held in the system: [ 2256.291773][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 2256.291788][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2256.291882][ T32] locks held by getty/5371: 2, on CPU#0: [ 2256.291897][ T32] #0: ffff8880363330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2256.291955][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2256.292021][ T32] locks held by kworker/u8:8/3266: 3, last CPU#0: [ 2256.292036][ T32] #0: ffff888031b5d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2256.292090][ T32] #1: ffffc90004a37c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2256.292141][ T32] #2: ffff8880299c4f50 (&bat_priv->forw_bat_list_lock){+...}-{3:3}, at: unwind_next_frame+0x8f/0x2550 [ 2256.292225][ T32] locks held by udevd/17818: 1, on CPU#1: [ 2256.292283][ T32] #0: ffff888028153350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 2256.292344][ T32] [ 2256.292347][ T32] ============================================= [ 2256.292347][ T32] [ 2256.292363][ T32] NMI backtrace for cpu 1 [ 2256.292372][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2256.292384][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2256.292391][ T32] Call Trace: [ 2256.292397][ T32] [ 2256.292405][ T32] dump_stack_lvl+0xe8/0x150 [ 2256.292454][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 2256.292477][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2256.292496][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2256.292510][ T32] sys_info+0x135/0x170 [ 2256.292521][ T32] watchdog+0xfd7/0x1030 [ 2256.292537][ T32] ? watchdog+0x1c7/0x1030 [ 2256.292550][ T32] kthread+0x38b/0x480 [ 2256.292561][ T32] ? __pfx_watchdog+0x10/0x10 [ 2256.292571][ T32] ? __pfx_kthread+0x10/0x10 [ 2256.292581][ T32] ret_from_fork+0x514/0xb70 [ 2256.292599][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2256.292614][ T32] ? __switch_to+0xc89/0x1420 [ 2256.292629][ T32] ? __pfx_kthread+0x10/0x10 [ 2256.292640][ T32] ret_from_fork_asm+0x1a/0x30 [ 2256.292663][ T32] [ 2256.292667][ T32] Sending NMI from CPU 1 to CPUs 0: [ 2256.292704][ C0] NMI backtrace for cpu 0 [ 2256.292718][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2256.292739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2256.292750][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2256.292780][ C0] Code: 6b 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 a1 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2256.292797][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242 [ 2256.292813][ C0] RAX: 0000000000761501 RBX: ffffffff819bcc20 RCX: 8000000000000001 [ 2256.292829][ C0] RDX: 0000000000000001 RSI: ffffffff8e4049bd RDI: ffffffff8c6dad80 [ 2256.292842][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 2256.292857][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 2256.292871][ C0] R13: 1ffffffff1d51e00 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 2256.292885][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 2256.292901][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2256.292915][ C0] CR2: 00005601a724a660 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 2256.292939][ C0] Call Trace: [ 2256.292947][ C0] [ 2256.292954][ C0] default_idle+0x9/0x20 [ 2256.292972][ C0] default_idle_call+0x72/0xb0 [ 2256.292991][ C0] do_idle+0x2e0/0x540 [ 2256.293011][ C0] ? __pfx_do_idle+0x10/0x10 [ 2256.293033][ C0] cpu_startup_entry+0x43/0x60 [ 2256.293051][ C0] rest_init+0x378/0x3a0 [ 2256.293070][ C0] ? __pfx_rest_init+0x10/0x10 [ 2256.293094][ C0] ? __pfx_kernel_init+0x10/0x10 [ 2256.293115][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 2256.293143][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 2256.293165][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 2256.293189][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 2256.293298][ C0] start_kernel+0x392/0x3e0 [ 2256.293378][ C0] x86_64_start_reservations+0x24/0x30 [ 2256.293424][ C0] x86_64_start_kernel+0x137/0x1b0 [ 2256.293443][ C0] common_startup_64+0x13e/0x157 [ 2256.293475][ C0] [ 2256.293703][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2257.055227][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2257.064430][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2257.074508][ T32] Call Trace: [ 2257.077777][ T32] [ 2257.080692][ T32] vpanic+0x56d/0xa60 [ 2257.084666][ T32] ? __pfx___schedule+0x10/0x10 [ 2257.089530][ T32] ? __pfx_vpanic+0x10/0x10 [ 2257.094058][ T32] panic+0xc5/0xd0 [ 2257.097799][ T32] ? __pfx_panic+0x10/0x10 [ 2257.102250][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 2257.107702][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 2257.113077][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2257.119218][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2257.125359][ T32] watchdog+0x1030/0x1030 [ 2257.129692][ T32] ? watchdog+0x1c7/0x1030 [ 2257.134108][ T32] kthread+0x38b/0x480 [ 2257.138178][ T32] ? __pfx_watchdog+0x10/0x10 [ 2257.142872][ T32] ? __pfx_kthread+0x10/0x10 [ 2257.147463][ T32] ret_from_fork+0x514/0xb70 [ 2257.152056][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2257.157165][ T32] ? __switch_to+0xc89/0x1420 [ 2257.161831][ T32] ? __pfx_kthread+0x10/0x10 [ 2257.166413][ T32] ret_from_fork_asm+0x1a/0x30 [ 2257.171182][ T32] [ 2257.174473][ T32] Kernel Offset: disabled [ 2257.178794][ T32] Rebooting in 86400 seconds..