last executing test programs: 7.688740002s ago: executing program 4 (id=2724): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x73, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8000, 0x2, 0x2}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d412000000000000002900000003001e003203", 0x32) ioctl$sock_inet_udp_SIOCINQ(r1, 0x5760, 0x0) 7.553294863s ago: executing program 4 (id=2727): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) close(0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) close(r2) 7.35984812s ago: executing program 4 (id=2728): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r5, &(0x7f00000000c0)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xff7, &(0x7f00000014c0)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000ffdbdf250101f2800c00180008ac0f000000000014000a0000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7b20db122cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e58420bd48fe3fa370d47eb640dc5061dc35817c8a66c29be82"], 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000062554014"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000053c0)=@newtfilter={0x438, 0x2c, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff2, 0xf}, {0xc, 0xfff6}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x162, 0x4, 0x7, 0x3, 0x7, 0x4f25fa8f, 0x7fffffff, 0x3, 0x6, 0xb, 0x7, 0x6, 0x0, 0x2, 0x7fa00000, 0x0, 0xf, 0x10000, 0x8, 0x5, 0x2, 0x6, 0x24, 0x6, 0x8001, 0x10001, 0x6, 0x6, 0xd548, 0x2, 0xe, 0x2, 0x2f41, 0x40, 0x9, 0x4, 0x6, 0x6, 0x7ff, 0x7272, 0x8876, 0x9f, 0x4, 0xfffffff8, 0x2, 0x101, 0xab1, 0x7, 0x6, 0xfb9a, 0x4, 0x9, 0x4, 0x3cc0d587, 0x7, 0xffffffff, 0x800, 0x4, 0x5, 0x10001, 0x0, 0x3, 0x8, 0x3, 0x1, 0x401, 0x5, 0x8, 0x1, 0x9, 0xf, 0x400, 0x0, 0x6, 0x6, 0x4, 0x4, 0xe5, 0x7f, 0x8, 0x8, 0x1, 0x3, 0x5, 0x4, 0x3, 0x80, 0x9, 0x7fd, 0x7fffffff, 0x8, 0x8, 0x1, 0x5, 0x0, 0xffffff7f, 0xabd, 0xfffffffc, 0xffffffff, 0x5, 0x1, 0x401, 0x9, 0x8, 0xff, 0x3, 0xaa19, 0x0, 0xdfdb, 0x7, 0x4, 0x1000, 0x400, 0x1, 0xfffffff8, 0x5, 0x8, 0x9, 0x6, 0x1, 0x5, 0xffffff54, 0xc312, 0x5, 0xde5, 0x40, 0x6, 0x2, 0xc000000, 0x8, 0x4, 0x5, 0xb, 0x8, 0x40, 0x2, 0x8, 0x1, 0x7, 0x5, 0xad, 0x7f, 0x7, 0xfffffffd, 0x4, 0x11, 0x6, 0x0, 0x2, 0x2, 0x800, 0x0, 0x3, 0x7, 0x7, 0x0, 0x1, 0x3, 0x3c, 0x1, 0x4, 0xf7, 0x71, 0x4, 0xfffffffc, 0x9, 0x2, 0x5, 0x0, 0xa, 0xfffffff8, 0xb, 0x3e9c, 0xf, 0x81, 0x1, 0x9, 0x193, 0x809e, 0x6bdc7eaf, 0x400, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x261, 0x7, 0x0, 0x7, 0x5, 0x6, 0xffff, 0x0, 0x9, 0x285, 0x2d3, 0xaa, 0x8, 0x2, 0x3, 0xfffffffa, 0x3, 0x0, 0x88, 0x40, 0x80000, 0xffffffff, 0x0, 0x2, 0x8, 0x2, 0x10001, 0x0, 0x3, 0x7b2, 0x401, 0x0, 0x6, 0x8, 0x9e3a, 0xce7e, 0x2842, 0x3, 0xfffffff3, 0x7f, 0x9, 0x7, 0xf98, 0xfffffffb, 0xf, 0x6, 0x6, 0xe, 0xfffffff0, 0x1, 0xfffffb07, 0x0, 0x9, 0x8000, 0x6, 0x4, 0xe286, 0x7, 0x5, 0x8, 0xfffffff8, 0x5, 0x0, 0x79, 0x1, 0x9, 0xffffff87, 0xe5]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xb}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x9b, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) 7.020616899s ago: executing program 4 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x150, 0x24, 0x400, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1e, 0xb, 0x13, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x37}]}}]}, 0x150}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) 6.918411788s ago: executing program 4 (id=2733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 6.799276153s ago: executing program 4 (id=2736): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0xa, 0x3, 0xff, 0x5200, 0x20000000000003, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000080)=0x6, 0x4) 3.496113554s ago: executing program 2 (id=2766): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="280600004552bf58ed5f1a09f359e7aa3af2244436c3ff22f8f4150f75aadb9a0f29", @ANYRES16=r3, @ANYBLOB="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"], 0x628}, 0x1, 0x0, 0x0, 0xa080}, 0x4000014) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) close(r1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601a1c97bb73d035c2300000000000900020073797a3100000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.020276763s ago: executing program 0 (id=2770): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1, 0x47b7, 0x4) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.810117378s ago: executing program 0 (id=2772): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb0200020000000000000600000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c000000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x25, 0x401}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2b}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x0, 0x15, 0x5}, @fwd={0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/159, 0x7f, 0x9f, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0xffffffff, 0x6, 0x9, 0x100, r3, 0xe15, '\x00', 0x0, r4, 0x0, 0x3, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x6}, 0x5}], 0x2, 0x40018020, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x480, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x8, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4fa0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r6) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0xfffffe75) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600002200028008000a00", @ANYRES32=0x0, @ANYBLOB="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"/356], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2.760941384s ago: executing program 1 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000480), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x104}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1c, @broadcast}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0x5}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b80)=@newtfilter={0x1884, 0x2c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xffe0, 0x3}, {0x1, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc7c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}, @TCA_U32_ACT={0x198, 0x7, [@m_csum={0x194, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xbc, 0x8, 0x1, 0x9, 0x8001}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xa, 0x6, 0x4, 0xfff}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x6, 0x3, 0xc}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdbd, 0x4, 0x8, 0x2, 0x9}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x8, 0x3, 0x101}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf0cf, 0xf28, 0x2, 0x7fffffff, 0xe61e}, 0xe51}}]}, {0xc0, 0x6, "4aeeb70bf97d1d210bafe767f731fe6637d83e676cdcb21c909e20d18b3596443b92c52d48868eb5b96bc02bd3e7886441b55e585baa335b062a8cbfacd251ddc38188040f5f278b79b864e17e26055f2774bd59ae3644a35e73d415d2e85525f6514c60238a43de107245abc2c64ab9ef1dda8fbaeaa3ff1e5c6c540618618c3fd19f97416630621494a309920c2e470e2bca89543f02acfa47c9b53f5c8485f8509122184f0fd5757b9d4f6a3fd2fbb046fd637738a7d490e6a63d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x5}}, @TCA_U32_POLICE={0x430, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x73, 0x2, 0x10, 0x5, 0x9, 0x89, 0x101, 0x401, 0x0, 0x40, 0x3, 0x2, 0x6, 0x2, 0x2, 0x7, 0x2, 0x2, 0x0, 0x4, 0xffffffff, 0x8, 0x10, 0xc404, 0x0, 0x4, 0xfffff571, 0x0, 0x5, 0x8, 0x3, 0x9, 0x9, 0x0, 0x4, 0xc3, 0x3, 0x2, 0x9, 0x60, 0xe, 0xb, 0xffffff39, 0x14000, 0x0, 0x40, 0x8, 0x53b42162, 0x2, 0x5c, 0x6, 0xc, 0x40, 0x5, 0x40, 0xa, 0xffffffff, 0x9d3, 0xb, 0x5, 0x80000001, 0x0, 0x401, 0x100, 0x2, 0x6, 0x100, 0x7f, 0x7, 0x3, 0xa, 0xfffff800, 0x47f, 0xfffffff7, 0x5, 0x44c5, 0x5, 0x5, 0x5, 0x2, 0xff, 0x3, 0x15, 0x3ff, 0x7f, 0x1, 0x400, 0x0, 0x57, 0x8b, 0x7, 0x3, 0x20, 0x1, 0x3ff, 0x6, 0x4, 0xfffffff7, 0x2, 0x9, 0x7b, 0x6, 0xb5, 0x6, 0xf2, 0x80000001, 0x400, 0x5, 0x4, 0x1, 0x6, 0xf0d, 0xffffb169, 0x273, 0x3, 0x2, 0x6, 0x9973, 0x80, 0xd8c4, 0xff, 0x6, 0x0, 0x7, 0xc18c, 0x400, 0xffffff43, 0x80, 0x6, 0x9, 0x4, 0xe70c, 0x6, 0xfd, 0xe, 0x2, 0xfffffffb, 0xffffffff, 0x0, 0xb5e, 0x52e, 0xfffff345, 0x461, 0x7, 0x200, 0x4, 0x3, 0x0, 0x85, 0xbd, 0x8, 0x933b, 0x1, 0x10000, 0xc66, 0x3, 0xa56, 0x7, 0x1, 0x40000000, 0x6, 0x4, 0x7, 0x2, 0x1, 0x0, 0x2, 0x9b0, 0xa, 0x2, 0x3, 0x8, 0xfffffffe, 0x6, 0x4, 0x4, 0x0, 0x1, 0x7c00, 0x54bd05fb, 0xffffffff, 0xbe, 0x5, 0x6, 0xa1d6, 0x5, 0x7, 0x3000, 0x667, 0x8, 0x8000, 0x5, 0x3ff, 0x2, 0xd, 0x80000001, 0x3, 0x9, 0x0, 0x8, 0x7, 0x2, 0xffff, 0x4, 0xf, 0x6, 0x1, 0xaa15, 0x56, 0xffffffff, 0x0, 0x2, 0x1, 0x100, 0x3af72848, 0x5, 0xf, 0xfffffff8, 0x6, 0x4, 0x10, 0x0, 0xfff, 0xa115, 0x6, 0x563, 0x1, 0x5, 0x48e, 0x71, 0x7, 0x1, 0x1, 0x0, 0xffff, 0x5d8e8650, 0x7fffffff, 0x0, 0x6, 0x2, 0x1c6d, 0x5, 0x4, 0x4, 0xf, 0x2, 0x8001, 0x7c, 0xa5, 0x1, 0x4, 0x9, 0x3ff, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_U32_ACT={0x88, 0x7, [@m_bpf={0x84, 0xa, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x40, 0x8, 0xdf32}, {0x0, 0xef, 0x6, 0x200}, {0x0, 0xc, 0x40, 0x4}, {0x485b, 0xc1, 0xff, 0x7}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3bf, 0xb, 0x10000000, 0xfffffffd, 0x4}}]}, {0xd, 0x6, "57caf4fab8e93761c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_SEL={0x5e4, 0x5, {0xd, 0x9, 0xea, 0x5f69, 0x1000, 0xf000, 0xa73, 0x8, [{0x8, 0x2, 0x7, 0xffff48ac}, {0x1, 0x1, 0x4, 0x8f4}, {0x5, 0xbec, 0x9, 0x2}, {0x2, 0x5, 0x918, 0x5d4}, {0xdc1f, 0xd1, 0x7, 0x7fffffff}, {0x6739, 0xc5, 0x7, 0x9}, {0xf, 0x7, 0x9, 0x9}, {0x4, 0x8, 0x8, 0x3}, {0xd, 0x54, 0x100, 0x7}, {0x7780, 0x6, 0x5, 0x8}, {0x1, 0x10, 0xee72, 0x7}, {0x9, 0x10, 0x1ff, 0xd}, {0xf1, 0x6, 0x7, 0x8d60}, {0x0, 0x40000000, 0x6, 0xb}, {0x6bc, 0xb50c, 0x8, 0xa1}, {0x8, 0xc, 0x6000000, 0x7ff}, {0x7, 0x1, 0x9, 0x7}, {0xa, 0x8c, 0x8, 0x6651}, {0x2, 0x1, 0x7fffffff, 0x5}, {0x1, 0x3, 0x330d9e9c, 0x7}, {0xfffffffd, 0x8, 0xe, 0x9}, {0x57ed8a1a, 0x6, 0x6f000000, 0x4}, {0xc, 0x81, 0x8000, 0x200}, {0xfffffff9, 0x33, 0x185ac2de, 0x80}, {0x8, 0x1, 0x8, 0x8}, {0x3, 0x782, 0x3, 0x10}, {0x6, 0x6, 0x200, 0xb6}, {0xe, 0x9, 0xd23, 0x22}, {0x6, 0x2, 0xeb39, 0x6}, {0x6, 0x1, 0x9, 0x8}, {0x6, 0xa, 0xb04, 0x6}, {0x95, 0x3ff, 0xa, 0x7}, {0x4, 0x7fffffff, 0x3, 0xe}, {0x401, 0x1, 0x0, 0x9}, {0x4, 0x8d, 0x354, 0x5df}, {0x6, 0x1, 0x10, 0x783}, {0x5, 0x3, 0xffffff5b, 0x3}, {0x6, 0x80000000, 0x2, 0x10000}, {0x8, 0x2, 0x544e, 0xd}, {0x1, 0x8000, 0xffffffff, 0x2}, {0x5, 0x6, 0x7fffffff, 0x6}, {0x101, 0x1, 0x8, 0x3}, {0xdc1, 0xe, 0x2, 0x101}, {0x5, 0xd2a, 0x9, 0xfffffffb}, {0xfffffffd, 0x0, 0x2, 0xd9}, {0x1ff, 0x3, 0x6, 0xfffff874}, {0x40, 0x7f03e51d, 0x51d, 0x5}, {0xffff8001, 0x9, 0x7ff, 0x62}, {0x4, 0xb786, 0x964e, 0xfe}, {0x98, 0x9, 0xfffff800, 0x9}, {0x7, 0xfffffffc, 0x3ff, 0xfff}, {0x2, 0x4, 0x6fc, 0x7}, {0x1c000000, 0x81, 0x1000, 0x81}, {0x2, 0x7fff, 0x8, 0x8}, {0x5, 0x3, 0x8, 0x3}, {0x1, 0x3, 0x0, 0xfffffffb}, {0x9, 0x7ff, 0x7, 0x73b}, {0x2400000, 0x8, 0xb, 0x8000}, {0x3ff, 0x2c0, 0x7, 0x9}, {0x3, 0x7, 0x9, 0x72728778}, {0x3ff, 0xffffffff, 0xfffffffd, 0x5}, {0x5dadc1d5, 0xc, 0x9, 0x3}, {0xffff6091, 0x2, 0x0, 0x3}, {0x80, 0x0, 0x81, 0x8}, {0x0, 0x68fd, 0x3, 0x2}, {0xfffffff7, 0x703, 0x4, 0x7fff}, {0x4, 0x6, 0x4, 0x1}, {0xe, 0x4, 0x4, 0x3}, {0x8, 0x34000000, 0xdb1, 0xce8b}, {0x28000000, 0xe84, 0x8, 0x5}, {0x64, 0xfffffffe, 0x9, 0x7}, {0x4, 0xaba8, 0x101, 0x9}, {0x9, 0x6, 0x4, 0x2}, {0x8, 0x6, 0x2, 0x8}, {0x7, 0x2, 0x80000001, 0x6}, {0xe, 0x81, 0x2, 0x19}, {0x7, 0x4, 0xeb48, 0x60000000}, {0x5, 0x8, 0xfffffff9, 0x9}, {0x0, 0x19f, 0xea, 0x1}, {0x1000, 0x9, 0x40, 0x5}, {0x9, 0x3, 0x5, 0xff}, {0x7, 0xf0ec, 0x870c, 0x7}, {0xe0, 0x3, 0x0, 0x4}, {0x4, 0x4, 0x54d9, 0xe}, {0x8, 0x3, 0xcb, 0x7e}, {0x9a, 0x400, 0x6, 0x8}, {0xd, 0x0, 0x6, 0x3}, {0x0, 0x80000000, 0x76, 0x85}, {0x8, 0x8000, 0xfffff715}, {0x3, 0xffffff6b, 0xa062, 0xc}, {0xc11, 0x0, 0x1fc, 0xf}, {0xfffff530, 0x6, 0x94, 0xff}, {0x7, 0x3, 0xe, 0x57c}]}}, @TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x9}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffc01}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1da7}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x69, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_basic={{0xa}, {0x2e8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_ACT={0x2dc, 0x3, [@m_ife={0x164, 0xa, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x2, 0x9, 0x7fff}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x4, 0x9a, 0x80000001}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x10000000, 0xffff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0xc3, 0x6, "43af936791fad99d06b4440b78ea3923a4b4aab946ae8538abacd0d45665fcc7b41362203380736636c2677ed76354ccf8a006cd3887f3abdcb281aaebe0241fdba3e0dfdc596dd47fa4b1706c60fc58d6b3b166b46a0f2a406d5cffd5dd820be96b823274b589e16bd3967e4593360fa828dc6874530e3dd283ce39a02a36ecf8c724fcb459518c95074c48c4e140b051f3a97ef8f6df7eccaeec8fcc0b43f325ef04f2bf60da0546bc28b571788a603020cf0c4086466255fe242cc4d3be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x110, 0x1d, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x89}]}, {0xdb, 0x6, "1f9b1345c42eb41babf658532bf5d96dc89f4c75267eb27a8f8c77da346cab627589cbe6ff710f59a5eee272e106f0ce2af6ee9ca6656d429e397366298fd34cfcc4b59b190db9d5eb09005d0b955b0d1b09bfffb8c4d76bcd1cdd343078681da897dde22443b32a99af4f5a384598b53212de882ef92254f154af566c30582c30e8f3333cdadcc70336945a6389c9adca2075598af4a0b4aae3b229e1500bd959682a9def3a8e02ef4375239e6cff5142c3dba21175159d0513ae05b5902531eba32ce40005acff7cf04bff6b2b9679eff3b6081ca466"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x64, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffffe}]}, {0x1e, 0x6, "d42cfeea901285732d1392720ffd418b565716d6850a1ecc11ad"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x8ac, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x14aa9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x401, 0x4, 0x771}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR=':', @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x2}, "228933ad97722056084bacad3c8a6e29e333"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13614}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7fffffff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_POLICE={0x820, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6faf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdafd, 0x9, 0x9, 0x1, 0xc6, 0x100, 0x10, 0x94, 0x100000, 0x6, 0x8, 0xa, 0x498d1f03, 0xe, 0x3, 0x8, 0x3, 0x0, 0x200, 0x9, 0xef59, 0x8, 0x6, 0xe, 0x2, 0x6, 0x9, 0x2, 0x7fffffff, 0x0, 0xae47, 0x8c2, 0xfffffff7, 0xe, 0xe2d, 0x7, 0x1000, 0x4, 0x5, 0xffff, 0xffffdb26, 0x0, 0x6, 0x101, 0x8, 0xe30d, 0x4350, 0xfffffff1, 0x8, 0x1, 0xac, 0xe, 0x0, 0x9, 0x400, 0x1, 0x7, 0xe6a6, 0x8, 0x7f, 0x27d0000, 0xd, 0x80000001, 0x5, 0xffffffff, 0x9, 0x7, 0x8000, 0xff, 0xe, 0xfffffffd, 0x69, 0x400, 0xf683, 0x3, 0x4547bfa5, 0x2, 0x9f, 0x8, 0x1000, 0x81, 0x3, 0x6d4f, 0x8, 0x80000000, 0x7f, 0x7, 0x3, 0xebb, 0x7a2, 0x5, 0xffff, 0x537, 0x3621, 0xe47, 0xff, 0xf, 0xfffffff9, 0xfff, 0x8, 0x8b1, 0x9, 0x0, 0x2, 0x401, 0x1ff, 0x1, 0x8000, 0x80, 0x1, 0x985, 0x80, 0x9, 0x8acd, 0x9, 0x0, 0x1, 0x1, 0x9, 0x2, 0x0, 0xe, 0x8, 0xd707, 0x6, 0x3, 0xfffffffb, 0x4797, 0x9, 0x0, 0x3, 0x401, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x9, 0x29, 0x1, 0x5, 0x5, 0x5, 0x2c, 0x10000, 0x4f, 0x8, 0x8, 0x7, 0x254, 0xd60, 0x4, 0x7f, 0x6, 0x9, 0x9, 0x3f91, 0xfffffffa, 0xfffeffff, 0xc2, 0x7f, 0x2, 0x2, 0xb, 0x85, 0x35, 0xe617, 0x6, 0x7fffffff, 0x2800000, 0x6, 0x0, 0xffff, 0x9, 0x7, 0x80000001, 0x6, 0x3, 0x9, 0x80000000, 0x6a36, 0x32, 0x1, 0x8000, 0x7, 0x6, 0x81, 0x1, 0x8, 0x27, 0xf, 0xa563, 0x24, 0x28a, 0x6, 0x7fff, 0x4, 0x1000, 0x8, 0x2, 0x7fffffff, 0x5, 0x8, 0xffffffff, 0x0, 0x8, 0x4, 0x8, 0x5, 0x3, 0x7ff, 0xb, 0x4, 0x98b, 0x1, 0x0, 0x7, 0x1, 0x9, 0x7, 0x7, 0x3ff, 0x6, 0x5625, 0x200, 0x3f, 0x7, 0x9, 0x639, 0x14a, 0x1, 0x4, 0x7, 0x7ff, 0x5, 0xddf1, 0x9, 0x8038, 0x2, 0x7, 0x4, 0x0, 0x0, 0x2, 0x3, 0x8, 0x100, 0xffffffff, 0x40, 0x22, 0xae, 0xfffffeff, 0x162, 0x6, 0x7, 0x81]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xa2, 0x41, 0x1d, 0x5, 0x0, 0xb55, 0xa, 0x4, 0xff, 0x2, 0x6, 0xffffffff, 0x5, 0xf, 0x40, 0x0, 0x7, 0x8, 0xfffffff9, 0x9, 0xffffff08, 0xfff, 0x2, 0x5, 0x400, 0x1, 0x3ff, 0x5, 0x3, 0x0, 0x7fff, 0xb, 0x7f, 0x4, 0x8, 0xa80, 0x10, 0x4, 0x0, 0x4, 0x8, 0x2, 0xa, 0x1, 0x0, 0xd32f, 0x4, 0x10, 0x3, 0x5, 0x6, 0x3ff, 0x6, 0x7, 0x4, 0x8742, 0x4, 0x401, 0x4, 0xffff, 0xd, 0x7, 0x5, 0x5, 0x3d142c66, 0xdfd3, 0x7, 0x9, 0xffffffff, 0x10, 0x77169fbe, 0x7, 0x1000, 0xf, 0x80000000, 0xf, 0xf35, 0x0, 0x2, 0xfffff801, 0x1, 0xd, 0xb46, 0x0, 0x0, 0x80000000, 0x2, 0x7fff, 0x7, 0xb, 0x3ff, 0x1, 0x3, 0xffff, 0x3, 0x0, 0xfffffca5, 0xf, 0xffffffff, 0x0, 0x40, 0xa, 0xe30, 0x1, 0x7, 0x400, 0x4, 0x3, 0xffffff80, 0x7, 0xcc4, 0x6, 0x9, 0xd, 0x4, 0x1, 0x4, 0x633, 0xfffffffb, 0xd47, 0x7, 0x8b34, 0xd5, 0xfa, 0x9ab, 0x101, 0x1, 0x8, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x7, 0xee7a, 0x401, 0x101, 0x3, 0x8, 0x9, 0x9, 0x0, 0x9, 0x3, 0x2, 0xffffffff, 0xc, 0x5d, 0x1, 0x2e1, 0x8, 0xa, 0x2, 0x7, 0x4, 0x59, 0xd0, 0x2, 0x7ff, 0x0, 0x6, 0x4, 0x5, 0x9, 0x9, 0x7c13f94, 0x3, 0x8, 0x3, 0x7, 0xfff, 0x8, 0xc, 0x1, 0x3, 0xf, 0x2, 0x5, 0xfffffffa, 0x0, 0x2, 0x7ff, 0x1, 0x9, 0x8, 0xffff, 0x60000, 0x1ff80000, 0x4, 0x6695, 0x5, 0x3, 0x4, 0x2, 0x6, 0x0, 0xb, 0x28d1, 0x8, 0x9, 0x7, 0x5, 0x3, 0x10001, 0xfffffff8, 0xf, 0x0, 0x3, 0x3, 0x0, 0xfff, 0x7ff, 0x1, 0xbc8, 0x9, 0xfffff000, 0x25d8, 0xfffffff8, 0x73d4, 0x6, 0x7, 0x894, 0x9, 0xffffc0ea, 0xa, 0x2, 0x50b, 0x2, 0x9, 0x1, 0x1cae, 0xfffffff8, 0x300, 0x6, 0x6ee002bd, 0xbe, 0xa2d, 0x6, 0x5, 0x4, 0x1ff, 0x8, 0xfffffff8, 0x101, 0x8, 0x7ff, 0xed4, 0xfffffffe, 0x4b7, 0x3ff, 0x6, 0x1000, 0xf2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}]}, 0x1884}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.516820077s ago: executing program 0 (id=2775): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfce) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000004fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000000000000400000004000000"], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4c392ea2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x97}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9ad}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x68}}, 0xf371cc2a4cc195fb) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x9732) listen(r8, 0xec) accept4$bt_l2cap(r8, 0x0, 0x0, 0x800) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r9, &(0x7f0000000000)="41000200010001", 0x7) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) 2.198603395s ago: executing program 1 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000500)={@empty, @local, 0x0}, &(0x7f0000000540)=0xc) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x45ac, 0x200, 0xfffff7a2, 0x200, r3, 0x400, '\x00', r4, r3, 0x5, 0x1, 0x1, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="c29e1e93", 0x4}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000300)="8b201b903186", 0x6}], 0x1) r7 = accept(r0, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000840)=0x80) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000880), 0x3) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000005c0), &(0x7f0000000600)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x2b8, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x390, 0x3a8, 0x3a8, 0x390, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x290, 0x2b8, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x6, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @common=@srh1={{0x90}, {0x32, 0x4, 0x1, 0x8, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffffff], 0x800, 0x18}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xffffffff], 'lo\x00', 'sit0\x00', {}, {}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x20000123, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000048000000009aaa000018150000", @ANYBLOB="257fd6aca70f83e4fde50e413ce53fdeacdc772af41333153bf8c611d87dbc1121565342190c55de25253a20914d4723802f30cf88a6d12a382ef9994fd80fd7520795a5556158c73e0ac55749917e2cb3a911cc88ad0d2c27da0914baf2963c840bfea211292d28b62285eacd726426c9f8a34c81624f985967f99455e55b1951564e80f50269b2ce93c0b364fae3cf95741ec0a7a2472de33db1dde847a4adee8517d5982d6954f1679abbabac43e621b7f8", @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000180100002020662500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000160000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.977283579s ago: executing program 3 (id=2778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000020a01080000000000000000020000080900010073797a30000000000c000440000000000000000144010000160a0108000000000000000007000004980003807c000380140001007866726d3000000000000000000000001400010076657468305f766972745f77696669001400010062726964676530000000000000000000140001007465616d5f736c6176655f310000000014000100767863616e310000000000000000000014000100726f7365300000000000000000000000180003801400010064756d6d79300000000000000000000008000740000000030c000540000000000000000578000380180003801400010062617461647630000000000000000000540003801400010064766d727031000000000000000000001400010076657468305f746f5f626f6e640000001400010064766d72703000000000000000000000140001006272696467655f736c6176655f31000008000140000000000900010073797a31000000004c020000000a010400000000000000000300000acb000600f32c2aced22cdedebbad9e4f60f74fad2e4100150889d824c1b10cf1ded98b1bc7963e4413188b98b43b4b4b14b8f9af65bde49a6957ace038833a7a38bf84df528789424ad385014e4985bc11ed32db8a85e532afa4fd87bc18afcf2ba5c306424a8345cf5f7afcfe0b2d950a5ad64699ce71dd83af63806d7ebff1e4c90bb1cc3eee2eb6ab96e791385ae7f0392de86016fab25ba93927683d8e70c6ae3638b2d25fd8b2180e5ac6782855e5e56c3f37418984d2332d617f4b610a8f6e01a75dde5f2eb9b1f589f7a9bae16d4f84f8c39300a8000600dca177b07a0ad135839d51b33ea1de8702e49d2de8f6969999dcd6ab533b89fa944916b97a6cee4566395e6a1d4688231e4a0d57a785070ceaed5200954a22a9c3c11f6ade04a487f74a530e3f478f6a95556fa0c27b24466f6975eaee35c2164142326c5721e5909f7d6ee9eeea0564a07b8834221442b479746f0576c989ecf5808c9874e4fe2384c5a57580feff189e0de343f0246c1857c6f9444145b800ea5f2b6d08000240000000010900010073797a31000000004c000600fab44a20e06619ff1df98dd2e6176ca38b76dd3cd7d16bb85dbf3bea2165b0b4f8e0efeb5fccb23c42e08fd3df4af7f481af82fa19d808f1db1b5935c73e3bf72ad00637ec8df1710900010073797a31000000004c0006001918ca79ead49f8ee1092d5487130addb9929e4e1c69ec75bfaad5"], 0x5d4}, 0x1, 0x0, 0x0, 0x40448d1}, 0x404c011) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0xffffffffffffff45, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x18, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0xffffffffffffff45, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x18, 0x1}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) 1.798311108s ago: executing program 3 (id=2779): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1b}, 0xb, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r8}, 0x20) close(0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r10}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x30, 0x40, 0x107, 0x70bd2c, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x95, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, 0x0, 0x800) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x8, 0x0, 0x2, 0x5, 0x4, 0x2}}, {0x8, 0x2, [0x4, 0x7]}}, {{0x1c, 0x1, {0x17, 0xf7, 0x9, 0x70, 0x2, 0xfffffffe, 0xffff, 0x9}}, {0x16, 0x2, [0x9, 0x7, 0x2, 0xb7, 0x8f, 0x3, 0x0, 0x1, 0x0]}}]}]}, 0x80}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x9}]}}]}, 0x44}}, 0x4000) 1.663703878s ago: executing program 2 (id=2780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 1.541470403s ago: executing program 1 (id=2781): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r3, 0x6, 0x1ff, 0x3, 0x0, 0x7fff, 0x8001, 0x80000001, {r2, @in6={{0xa, 0x4e23, 0x5, @private0, 0x2}}, 0x6, 0x0, 0x6, 0x10000, 0x3}}, &(0x7f0000000100)=0xb0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000980)=0x7d, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xffb, &(0x7f00000014c0)=""/4091, 0x0, 0xc}, 0x94) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r3, 0x6, 0x1ff, 0x3, 0x0, 0x7fff, 0x8001, 0x80000001, {r2, @in6={{0xa, 0x4e23, 0x5, @private0, 0x2}}, 0x6, 0x0, 0x6, 0x10000, 0x3}}, &(0x7f0000000100)=0xb0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000980)=0x7d, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) (async) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xffb, &(0x7f00000014c0)=""/4091, 0x0, 0xc}, 0x94) (async) 1.540650566s ago: executing program 3 (id=2782): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) unshare(0x2a020400) sendmsg$nl_route_sched(r0, 0x0, 0x4090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0xfffffc98) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="2451801380a78b67bc0046a98c9fac97", @ANYBLOB="0801010035c4386733ffffffffffffffff462df44d8fda01e8dd8e7c0dcfef644ab05df72ef25194a07c08c84af371eae497c8026c0e38584505e8aa4d4329ef9b365510cf7a5b278e0836841c48a9e80de34cd3b612b7dd866a7dec42067bf87e2241968fb86e9ff87a88d2d81cf6b82bfd32666f819a738803dca2e786a5872da7144217e9bef12a169826dff75d0067b73bd9a119434484b0b59c69b496e606898141d8ec03b4f204d282320e470a408e14b4eabb8020399706148b5a7d84724e01b93de3d4f01a1b5d574a0a846d79b7f844b1cbaf3053dfbf8d2e5707453b95d30dacf202da576d0400", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 1.428508686s ago: executing program 0 (id=2783): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r2 = socket(0x1d, 0x4, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r12, 0x0, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r14, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0xb61, 0xfffffffa, 0x80, 0x4b}, 0x10) 1.367605284s ago: executing program 3 (id=2784): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.282565074s ago: executing program 1 (id=2785): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb0200020000000000000700000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c000000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x25, 0x401}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2b}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x0, 0x15, 0x5}, @fwd={0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/159, 0x7f, 0x9f, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0xffffffff, 0x6, 0x9, 0x100, r3, 0xe15, '\x00', 0x0, r4, 0x0, 0x3, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x6}, 0x5}], 0x2, 0x40018020, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x480, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x8, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4fa0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r6) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0xfffffe75) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600002200028008000a00", @ANYRES32=0x0, @ANYBLOB="00001a8000001c0000000a800000080003000000000007000000070000001c0000000a8000000700ff01000000000000000000000000000100000700fc010000000000000000000000000001000008000900000000000700ff02000000000000000000000000000100000700fe80000000000000000000000000000f00000800080000000000080001000000000008006000000000000700000002800000018000000f0000000000000011000800000000001a0009000000000012002e04000000001b000000000000000a0013000000000002800000018000000d00070000000000040007000000000015000100000000000f0000040000000019000700000000000d003200000000000a8000000700fc000000000000000000000000000000000008000600000000800700ff020000000000000000000000000001000007000000000000000000000000000000000000000700"/356], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.206041959s ago: executing program 3 (id=2786): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x9}, 0x8}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)="ba3c0b505ce25ac710681fe1c1d39ce1ab3b92a7db981bd3b354fd2f00650110ad51ac140a21caabf48715d94e5670e6f63e5bcbca226ac211f5409ef1c6f1c454102d93782b98d0b54dc805567b6c8b1e173ea549c5b2f622f59ab8350565e5db4023fced0a03dfe444ad6223007436cde33f18095fb6c5b90642234716b4c19bd57a93fee946f7095f9df42cea00f7b22e067cb4c253cfa6453b444773f01d966449817599d9f9dd81da80843edb85", 0xb0}, {&(0x7f0000000100)="1b2c070fe019e2dc744fcf6739f4a046994e35eaed2a1576bb149df0da65f39384d41d3f50947a05a0ac347757a24befa20d5e46204ed0bb8497ca31abf2f93be7e2a23aafbf432fc0ede3aec266ed5e46aa82a631a10dc1d326fc0c12257bb9ea16c82ab8f4a034a75489af5b32671fdd16af7986b77a19282c7d6f69681b02935c7550f6fa5d4db651d0", 0x8b}, {&(0x7f0000000280)="9fb1cb767cb8a93c175d093ad1a895fc59591fcca4fccaf146d00487a8352a1f733a00707a1beb6e30dc1c73b5e6df3a534eac9102f576e827d997c10b9f5718744ef1c77ad70e50cd85ca28b7e1f82ebeb2fcf98e476569054e42a00a5d634fea5411ffa660a5ee0c66044457c63780ebfa0d38f219d8e73f7c15214b02cb88815c8548110717a61995faec4796d858bee72edaeeb79934b0fcc7fd62886f8dc05f8c6d42b2c7e14205d6f97f7d4a114867c18a852358f34c3189170ac7286926", 0xc1}, {&(0x7f0000000380)="d373c4c8796286507c309aa36fe0e66d7b21a17d3f731122e533647657d0ab8dd88a243770984e38071533e6c584e73fc802c0eb39504a773785f906e2811043f18ae1604447c07dba05af1be7f0181252a21a40b962b9c7a68162d107aab501276b0d33112891d72489e066b21b16998b4dce406c5fdc8274c69431e76858cd5baeeafd", 0x84}], 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)="ba3c0b505ce25ac710681fe1c1d39ce1ab3b92a7db981bd3b354fd2f00650110ad51ac140a21caabf48715d94e5670e6f63e5bcbca226ac211f5409ef1c6f1c454102d93782b98d0b54dc805567b6c8b1e173ea549c5b2f622f59ab8350565e5db4023fced0a03dfe444ad6223007436cde33f18095fb6c5b90642234716b4c19bd57a93fee946f7095f9df42cea00f7b22e067cb4c253cfa6453b444773f01d966449817599d9f9dd81da80843edb85", 0xb0}, {&(0x7f0000000100)="1b2c070fe019e2dc744fcf6739f4a046994e35eaed2a1576bb149df0da65f39384d41d3f50947a05a0ac347757a24befa20d5e46204ed0bb8497ca31abf2f93be7e2a23aafbf432fc0ede3aec266ed5e46aa82a631a10dc1d326fc0c12257bb9ea16c82ab8f4a034a75489af5b32671fdd16af7986b77a19282c7d6f69681b02935c7550f6fa5d4db651d0", 0x8b}, {&(0x7f0000000280)="9fb1cb767cb8a93c175d093ad1a895fc59591fcca4fccaf146d00487a8352a1f733a00707a1beb6e30dc1c73b5e6df3a534eac9102f576e827d997c10b9f5718744ef1c77ad70e50cd85ca28b7e1f82ebeb2fcf98e476569054e42a00a5d634fea5411ffa660a5ee0c66044457c63780ebfa0d38f219d8e73f7c15214b02cb88815c8548110717a61995faec4796d858bee72edaeeb79934b0fcc7fd62886f8dc05f8c6d42b2c7e14205d6f97f7d4a114867c18a852358f34c3189170ac7286926", 0xc1}, {&(0x7f0000000380)="d373c4c8796286507c309aa36fe0e66d7b21a17d3f731122e533647657d0ab8dd88a243770984e38071533e6c584e73fc802c0eb39504a773785f906e2811043f18ae1604447c07dba05af1be7f0181252a21a40b962b9c7a68162d107aab501276b0d33112891d72489e066b21b16998b4dce406c5fdc8274c69431e76858cd5baeeafd", 0x84}], 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x10, 0x400, 0x7, 0x1, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xb}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x10, 0x400, 0x7, 0x1, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xb}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x415f, '\x00', 0x0, r3, 0x1, 0x1, 0x1}, 0x50) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001500)={0xfff7, 0x208, 0x9, 0x7, 0x0}, &(0x7f0000001540)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001580)={r7, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x80000000}}}, &(0x7f0000001640)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001580)={r7, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x80000000}}}, &(0x7f0000001640)=0x84) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000014c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="80000010", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25100000003800018014000300fe8000000000000000000000000000bb0800090062000000060001000a000000060004004e21000008000b00736970003400028006000e0000020000080005000200000005000d000100000006000b000a000000080004000103000006000b000a000000"], 0x80}, 0x1, 0x0, 0x0, 0x8019ab2cf63e105}, 0x80) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) 1.181204391s ago: executing program 2 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@private1, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x44044}, 0x20000010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x47, 0x1, 0x151c8f99, 0x100, 0x1, 0x8}, {0x8}}}, @common=@inet=@ecn={{0x28}, {0x30, 0x0, 0x5, 0xa3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff6, 0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(0x3) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000400000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@private1}, &(0x7f00000004c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x44044}, 0x20000010) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x47, 0x1, 0x151c8f99, 0x100, 0x1, 0x8}, {0x8}}}, @common=@inet=@ecn={{0x28}, {0x30, 0x0, 0x5, 0xa3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff6, 0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) close(0x3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000400000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) (async) 844.77681ms ago: executing program 3 (id=2788): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 780.729048ms ago: executing program 1 (id=2789): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x6, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 758.290138ms ago: executing program 2 (id=2790): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) pipe(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x5) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000010000304000000000000000000ffffff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 402.050344ms ago: executing program 1 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x9}]}, &(0x7f00000000c0)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000208010800000000000000800500000a0900010073797a3000000000309a007f7f5cb9d17555542be7c82605135975e18e03e48934ad733e93d5beb431b2b98ee7bc223753df63f7214136af15d3dc77c736aa7f1ee6ad5a6e4fb2f1a9549d35fc6ad23871416658c5719855346d693b91d6"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40080) r9 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a96ac79f134e212c180623e4fa8cc6705ff1e8008f9fa3599ee91d3b93ce61fadd15a25546ec7aaf849b1e643e8d684cb5761ec656200b5fdf1bc71d5d39e1714a4f03b1ffda35df2b3e378282a4d2843e02bbc9f6a8511bbb577c33aeb421b3ecb4b5a92abbc18a97eb000e101e5c316c40ecde4c405839befe44699094cc65fc87808b8178a264d9c15d6d45f3751c4becf85b7bb2cc2", 0x170}, {&(0x7f0000000680)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c", 0xb5}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r9, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) bind$bt_hci(r2, &(0x7f0000000040), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000005600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 355.081672ms ago: executing program 2 (id=2792): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) r7 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10, 0x0}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000004b80)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x30, 0x0, @wg=@response={0x2, 0x4, 0x0, "954819110bcf22796f6cb28be9a1224c000be94660dd39d2cb40f22ff59e284c", "9432ca693246dd965f2232f1884e12b4", {"984b5769ec3117e138db720f57b59775", "08cb0087a738e17dda00000d00"}}}}}}}}}, 0x9e) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8) 352.725078ms ago: executing program 0 (id=2793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000020000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c0003800640"], 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "7d14a0b0fe0e4906"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 32) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x1, 0x3ff, 0x1, 0x2, 0x3}) (rerun: 32) close(r3) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f00000000c0), 0x12) (async) close(r8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={r7, 0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"}) 843.544µs ago: executing program 2 (id=2794): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="1fa3927e9271ec67422793b4acc8ea2bda1ec1740f5809c3ebe59c2ac155471381b05e0da6033cf39af52f793dadccc89822b9fbbb0f1f530852a72be559ee882c5d837f6aba2aecf383133334c0d96e5154d83c45752e64f9e7f5da45d87b3b15ef98164e5a3d6ba31c4a1de8da0dd92b024540b1662628d1606a4c3dc2934319cd32b2b9889ebb310375bf1c907dc5d61ed01d54a9ccc30cc5fde73a20ac3b5593845d7e6c8e0ebe7a5847a381c45da9a2b6db9c4700fdaa09cae770a3f01dbc66bd47b40e2d73b1da03ba18498a9d0791c9377a373f568a8aa6c99244f2461a3cbb7c9aa028937ac488159888114df4a4b99c9685a9ca7f5296798aaf4bb6ce56d9cdaa391b37af718e2245c79f6736cd20bbcd5bbaff676c08fff0471da5f3cc763ada8b7754a73e13bef15687045cf4260717055aace7f71cbf416d32ab656287b2d34eea996da515df80abb7eadc4e2d992fbfc6c7f5ead3540954d557116ac867cc3fd57c1d0e7959a9710db0890bcc574be03c6cf209314adde4d3e34ae0dc0a97defd692c9e66ecbdee99a498a71ed2d47b86fa0c5b5f2f7aa793db91740c173a881503cf5a06ee475be88de2d4232ac845af59d05fc8a5b9747d29e0b2928de6f642164196da01cd617cbe29f2dec5563da7a71de4d4beb1ea2aca5a70ece13568cd957e63184dc3775581d7fb66f2f0262d05d7ea312b7b87fd346f7a0c84273a886dbe1e7154b550d3600776c2776bf6140859542c70909351b527c58cd713838a1920e69743b8fab0fae34a9af69bf058f2bbb654ad886ddcbe1def70cc823689382ed1a9b6593a7f6d2cc452d2388ed8cef39e82c0ab5dc4d78d6fccbf0a1c2608ee899e801df380b075d2dfd8c0d602c161b9383aaff0858f61e718735a88d3d76122826ef8aaad6b0504dc971ab63105bcd4c94c45ab76c6021c27888dff68797d1f8e94ef5415e42f69b1518c68ed0eebc4344cc6c397fe7c7aeb718406b052761b7cb07fc74ea82c25f343f40d1f1477ace317c461a5958c5ba4974df5f8d8aa92a4f14e2eb000e82a8e408b022bd95b7c4a536d6fb2ab145b58e55f7f34ec7f2f32d5ad3fe5a6d72655a8cb283733768806e2f8a66d8fc7c5be7686996ac5e35c0f44b91b315946f0fc060f52d914a4c7b02a87aa41cb369ec73496c483d2b644cced3699bbd162d78b07512c00088ac44b3466a5f04dc30591fd0b54c6883f82c0c7884ac4fba4ad2a9a1bc51b8d75f6888fc73b98737cec0db963372aaaff75782a9036f5e18387ef3078b534bbce7ee1c3db2a5613cd8cb6b0e5054f9fabd1b349f7fd9552142fb5564753c65e64517498e8c5ab264ff8d17e9162e50a1d641edebdd473210949d23652c172a35ba7655a9552aa988808308a22f1764bb2de98a0065e063d3daa2e7913d3f004340ac21e98e2094175f542c8c9a006fb34626b92af55fc957f3786212b0ed8044b47d5eb492a68c55969b33c9f0e3e79c9508ad44374659782a68a15b32d4087a9b81bc12fe4e58bc932d2326fdde85778bd1473a1dd2c18c69d91b85ac4c95bbde86f487433cd2b4b6e5bb342da99be27fc1801843905f8c3867dfcf31f5d1fdd6bf2515bd900ecc030853e1ea5df3c740d3a408a77367bbe16e2a8aabc29e661532300986df412d0f454716602ed628c78353bfd5b9883d7205eef3ebed3433d2d915ea7bcd423c1e1efc0726d5cb5e703d1918b687621f92ed09154932347c4559fcdcf4364d50922bc2dbf2698d4c5dd155e0542beb09d65a04a4154f7321f7c2add4c7c2408596533bc787b4d6d24c39fb273aec639ab2747cf31b6aff1c069ae3255475479106aa90b27dc604e1fc8f855b298d294eb4dada849be22b626ac684e35e80af1f2273ed80aac06eb194daa6aefe0e5cdb657735d359ab644d4c21182e3548940741e82f0378fb0498befbd1d8759d9a551a11727db7a0d0f472dde10a7f2c9cdbe82fc03965de4417cecb0ac6c8c3346ddbd379590f7ba84032437c2ebcb436c1a854b796c2e8fe02a2d405999543f57ea5bfba59d670a7826d7ad9be0eea85c89681d6a43054612c5fef51aa96cb779d1ec7c0a868efbd1ac6f9299cd24dcf20d06e834c87e3e22bc3c803003c424e75cf85235e2f4e16752a7a1f0895c558c3c5315854f90f3a203d2c521dbe2cf39380fbb7b0f3fdab1bf985b88781fd515317ca5d83116c0cc56de476b06c9685dc2e2a1fbcc997fbcf585238da85d305b9d1bd7cf99c009d595be4c6eac3b25489c21a051acfab13af6dc6c424cf9225ac3f81f3cfe3b96eba63f54c0d8dfea0878fb40aeff1093fc9160da0747f01f330e05deb6361af3d660d20222850c894b734897af30d6e48efa97aedf915118fc79aff0a672794f32411898d9a017e4090aab3ea63d358a4cc99a75b58c677f8bc6460f3e7f372632753fd832d5e6e76ce206651089a124247eb84f50f4aa5878aa572a9ab065ca6fdee6b01d1103a09b09f0ae92f0f2659f76e03c199df8d7f4dcb16ab938d0576ee087e29f4c21df2cac9b43544422d331cf95316ddeaf05911a28cf2ee86cf4c1b4902ae7f0ee40ce44020df96c555d8422f5ac17af6a9e71807f0f6121656d44990be329d0660dcdc03d65182391f32951bf9c98ebd0447fadcfdd18cdf968d5fd958ee0f01233cd810ac850f3ad2c57545471aa072c59fa732106678a605fb3c489b68d9f1a850a80bbad287458d01983c820370a8ffd7c73b121a15c37c2fedca4029ec0761fce53ec0d254129bd23f4539a7b2e295858288d9c7635ee7f153b87b8fd0e660cd02cdd6deab88d466e60544f80249fb3a5eede09fc6d6ee2a1112e64bbdd27f03536e1ecbb926ae9cd9316a89be85470ba21556a1ac180d390ccb739d56ddd4fc150d756082143487d468d23c28df47d6995c90587598b35992fc5afdbd99629d77d973356bce43ea031472af70bcde14ed52c36d678aa781ac0a325b0dbd352fb6ad2b5f25503ccc0eb3bfc6c8525f34921d6c3b5a91733f6fc17e1777bbb0a7d8e684aed58a7ab286e591d06ffc528644a26e2fa67b37982369cc07874708a1cdd151dd301091c5539e8175eead0762226578b47e87e2d65d8d037cd7330d79a9e1303cd9c0d72b8da49e64e97e2d0e2c773290b60d81463634913725b1831d054683b9b86c9ea1076168fffed2e991ad50b93a304ab64a6406276d48caeeb26ee858e3ad252fddd39bf0ef60cf62369e526885f34e19d2be52cef48b3cd5d7a665ffba8504bcc9c2b426cc53cec6816085f16d63f4775bebd1ec0f8a87461606ffbda8f287dafb3517e16a385320ed32ea832e3bb87531d87e1643bfbac69ea3f83bf27c9dd49effafcbcc3a8b2c82eacd58cedc2ac71ac47cdda488e65529fe5652a07d87d48038c2d84bf27804c25a55e9733594c6960b899400ef43f946d66571f4e4fc4389c78e2b36fe312e10a9bed763f386f4eb6611c11e7c5f89e375f8c70afd8dba77e257569239eb8af84697b2cd0c705e3704e6829d761caaf52ec8fc41cb98c2f69b7d5f41b9eb412a5f25ad0c5fce67caf9a2ca42f1a733819d6833308fcd5c5e76f619a8164892b5ed80f27ea719550da813b5dce6c2bc57756f34bca89f204917e7fa71e710b26850702d53096d0600823e3407b2c48bc94f3754ace6486b6d5120c9ee5975b1a503e79f747fe0b1ec1e1b63af4ca766845b51b63c44ea555e733307c4d8f6b678a3fa99e80a79c6e16a634d229a0f874190603ddad300b2ab73a6a8f673d0bcee869ebec83930d1778c83c095e555157c9bcd8b4541797ed9aa8e3914cdcd58e699a9d2e97f8c7dff93f9e938f42350e4cdd50dfcc42053039f15d89970db842c00d22411ac70cd2a39607ede4dea8353dedb4688478722d52c96b6f289d8a2ffa78cf892bcf330f6506774d688c29d1f0ba102ed2cf183cb597b28a8fff90955f7162ca1b86293b9eb8a72e0eb13c24c971dbdcc4f8e44d2b236889f5b03c0e8ceb7ffeaba29d5568db92f20336a3dc7aee429e5cf980e1d61fb3e32ea9c56392a087194f79c82df63789e12b93828208d6cdb3ca9afce85780f0ac46eaeee04d6b3e7b98a6ebd03a132378301aece5cdea3b51efcc7339995912fa0e16080f7c781cd91df5a5cae7d6fa6338dc9e6b3ee4437a150142c169f6dedf8f9064248572efbb6fdb6ab4747b0c1e8cf845c0cded59c4f77542b7daf6fb623b420a63ba21693da279b4b17707cba517fc5f572725372a1a980f0f5ed11ac615642acdda9c84e8c2d1e1d3e6eb097a636831f79551981dd9f008cf8748bae6307b6d336cdd314f66421dce9dd2a89950879ec8f4ebe211a3f72da8611321cacdc660c08d449eaca3cadc549c934d40eabf608efa1caf9bb838d2070d3dd0ae90b84849cfd5be089a43762f7b03c3e2fda1e2df3916d38f16243fb09c57d20a46b5bee15a17fdb8255fead66a93ddbe1872af663641b708048bab7d4ebabb41ea3b4072ecd0bf6be7bf2c7c5c7c998e2657d39d02f2c3ea3ea4ab7adcf475dffb93f6efaab7db8b79202003a31f30d2aa06f8a9daa1d6b40a143051e8a4f75aadf760d000778bda6b93e3585d0ec8250234b7236abeff176eada36cebe29733e323cb48c01212babd27af87d79bdb781c66bcf48ab250d9ff5abe7b7bc97c555639f79b9133803016a1d0010e26db4929668ab910bdbdfe926b7257c0fa5b3fa708c95fd5172dfdd8afc9d13e680005a875fc9eae42ad232416f82e1d070276dd75ef5a07c9a6db6beb47370e858a393ab9893903df0391d7b37f2bc72d8e52e28e3641509be0ef154060dd684486e0bc82d9885236f3c2b009ad15fad21cd26f55803c51b63f62aba2e01359e1adbe778e18ba602f6e1c6568a0039b1060c737ecba653d890c126406d1a2b266d6a0727e16fec5776aa6257509778493cc77bc99e64615191c6e5af5e56b650c1d28749adc2dba3bc87ba6dfcd7db17009d73b0b43339c86981c0c13778b42e546cf10818f092c048d27bc00e9187eb67b6a09818b42667a6ec0b56a0f32f688e8084e9cf9c588ebf777a55958abf70a88178b34ca45da7afb5f77461dea5e8ba0723c0760f0850c414795e8be28a2592f156ad243d63a332a70f405e9de19278266de0f6c84aca0e780cc74bacf80c86cbbb4a7edf616352f6ad3f5811cfe6fc7deda80562b2c33ad83e643e8c1f08a0e54a61c4367cdf1e2978c8c5d49a947120792cfe47b590152f79b7da9ee50298f3d77c0d7e8901f38095fdb981c075ff25e681acbf37b11182237a3b76efa84711c56315f7016c3308f060f4b730b6251e5e96cff1d87cc2120fa05733426204d0864b50cc9fe7aa7b03bd35c2afa4afe2f2e0ea946266071d6c0b88e547fb8c54263067039c0088f0648dc048c38af892670022b66e33c2e79d5e5bcf7d6eee29500ae6cf93c14c5630b89b1b6b9c0308b4c42583403d991690d1ab309cdf6bf8395074f210397c7fe6f457096c37dd24b7c27c7ce898b0c2acab28165a8967cd99fd6aafdb82cd0fd219d75c9f65b1195213e61feb3d333c1d6454c411759af6fe7a3df2c425a308632b0142729f18fb6caa2bbf1a97b1406ad84bb7a51acbdf07c812aec44ffdcbee3e2b5b773db62c9f700f9dbc793b10fbcdf075f4a95b1d4ec9e5b1c8f5c002e63978120b281652d9f2fbab2a60985e199b42546462735c13b6aa850d4c72fcdc2db19cc15d3dfc5967c706df96d970c19dcd7f73a5a11361be874e7d0", @ANYRES64=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) (async) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) (async, rerun: 32) sendmmsg(r7, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) (async, rerun: 32) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0xfffffffffffffffe, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r9, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 0s ago: executing program 0 (id=2795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x1}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=[{0x108, 0x104, 0x10, "9c223eb74fee32821eb91c982121bc6667f27f7f70c52f7aad7db35f80e505bbf800c86a15d48129e632ecaead7d55bed7434bb57a1851c0b11a3d7b073850c33aca83d175e616f320582bf85bb41a102671d6a5d434fc7be752b1bebad9f3bc0bf743ee3b4a16bb47d8fec0d073f8441e6222193c1efd95efe337b46c4f8deac3631b6fefb521e641e52252af03071dc2bcd5459b57334854b8c107f0b3672be5809610d3ca1087b11f2e9076bcefae4ca8b42b778b614866397d0f38f0469b159e68210fe0c6087e3e5795388a7a060ff40742e7936e8a305aba7f5e5fb562afbfe19789f2ca8247f2e4c40b842dc4ed33a6f3"}, {0x88, 0x118, 0x2, "0c469a642e71c52a924979ff4551346038e10db2987ba58364f88ca90daea16f6f7d159eed3d29a158c42b73948d85669a06f60a5b9e335cccfc9c90f1f639cb9e11b92ca1466a32dbf3309f7c1a0ee4f2de347b09d46a580fce09b29fa1bb95b251c9dc5d6e28690c4e3e91a4c08b95d3474b0d199b293a"}, {0x28, 0x104, 0x9, "35ae14504ff3ef90516bd08d1969d9fc682285b6bd3c"}], 0x1b8}, 0x8000) kernel console output (not intermixed with test programs): v0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.343374][T13177] lo speed is unknown, defaulting to 1000 [ 322.362495][ T9209] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 322.429096][T13177] xt_addrtype: ipv6 does not support BROADCAST matching [ 322.445508][T13180] can: request_module (can-proto-0) failed. [ 322.514926][T13186] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 322.620066][T13192] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 322.727930][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.054724][T13169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.224682][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 323.232871][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 323.260591][ T9203] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.299935][T13196] vlan3: entered promiscuous mode [ 323.309800][T13196] dummy0: entered promiscuous mode [ 323.637380][ T9129] page_pool_release_retry() stalled pool shutdown: id 105, 1 inflight 60 sec [ 323.709123][T13215] bridge0: port 3(vlan2) entered blocking state [ 323.742584][T13215] bridge0: port 3(vlan2) entered disabled state [ 323.774855][T13215] vlan2: entered allmulticast mode [ 323.781280][T13215] geneve0: entered allmulticast mode [ 323.789704][T13215] vlan2: entered promiscuous mode [ 323.794814][T13215] geneve0: entered promiscuous mode [ 323.806726][ T9203] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.935498][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 323.996983][T13236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 324.009838][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 324.470470][T13257] bond0: left promiscuous mode [ 324.493703][T13257] bond_slave_0: left promiscuous mode [ 324.509121][T13257] bond_slave_1: left promiscuous mode [ 324.525290][T13257] bridge0: left promiscuous mode [ 324.542942][T13257] bond0: left allmulticast mode [ 324.566604][T13257] bond_slave_0: left allmulticast mode [ 324.572239][T13257] bond_slave_1: left allmulticast mode [ 324.584140][T13257] bridge0: left allmulticast mode [ 324.625637][T13257] batman_adv: batadv0: Interface deactivated: dummy0 [ 324.695994][T13257] vlan0: left promiscuous mode [ 324.729373][T13257] vxlan0: left promiscuous mode [ 324.734640][T13257] vxlan0: left allmulticast mode [ 324.877119][ T9203] net_ratelimit: 1 callbacks suppressed [ 324.877152][ T9203] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.072504][T13257] bridge7: left promiscuous mode [ 325.102536][T13257] bond4: left promiscuous mode [ 325.121155][T13257] bond4: left allmulticast mode [ 325.177674][T13257] bond5: left promiscuous mode [ 325.203100][ T14] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.229045][T13277] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 325.292427][T13277] vlan3: entered promiscuous mode [ 325.359558][ T14] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.377029][ T14] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.395913][ T14] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.418343][T13264] netlink: 'syz.1.1837': attribute type 11 has an invalid length. [ 325.427902][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.487771][T13264] netlink: 'syz.1.1837': attribute type 11 has an invalid length. [ 325.653074][T13284] syzkaller0: entered promiscuous mode [ 325.668738][T13286] 8021q: VLANs not supported on nlmon0 [ 325.834770][T13290] netlink: 'syz.4.1844': attribute type 6 has an invalid length. [ 325.967591][ T6759] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.506558][ T6759] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.653749][T13329] lo speed is unknown, defaulting to 1000 [ 326.731148][T13333] netlink: 'syz.1.1857': attribute type 26 has an invalid length. [ 326.788652][T13333] syzkaller0: entered promiscuous mode [ 326.802019][T13333] syzkaller0: entered allmulticast mode [ 327.050870][ T6759] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.290938][T13339] netlink: 'syz.2.1859': attribute type 39 has an invalid length. [ 327.321323][T13340] netlink: 'syz.2.1859': attribute type 39 has an invalid length. [ 327.597605][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.889631][T13361] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 328.136778][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 328.378760][T13361] 8021q: adding VLAN 0 to HW filter on device bond10 [ 328.408990][T13364] bond10: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 328.476806][T13364] bond10: option resend_igmp: invalid value (1278) [ 328.484920][T13364] bond10: option resend_igmp: allowed values 0 - 255 [ 328.672786][T13381] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 328.697312][ T6759] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 329.069930][T13394] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 329.258896][ T9205] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 329.330784][T13407] __nla_validate_parse: 11 callbacks suppressed [ 329.330810][T13407] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1877'. [ 329.418164][T13409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 329.835127][T13443] netlink: 'syz.0.1886': attribute type 13 has an invalid length. [ 329.859065][T13437] netlink: 'syz.0.1886': attribute type 13 has an invalid length. [ 330.212829][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 330.317271][ T14] net_ratelimit: 1 callbacks suppressed [ 330.317290][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 330.887103][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.436574][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.514444][T13513] netlink: 'syz.3.1906': attribute type 2 has an invalid length. [ 331.679029][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 331.706967][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 331.723655][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 331.752883][T13513] : entered promiscuous mode [ 331.859587][T13525] can: request_module (can-proto-0) failed. [ 331.869600][T13532] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 331.998698][ T9204] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.017429][T13537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.047347][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1913'. [ 332.093895][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 332.215004][T13535] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1911'. [ 332.255181][T13535] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1911'. [ 332.539358][ T9204] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.993029][T13578] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 333.106898][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 333.416006][T13584] RDS: rds_bind could not find a transport for ::feff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 333.667542][ T9204] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 333.941649][T13608] can: request_module (can-proto-0) failed. [ 333.977015][T13608] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 334.181537][T13621] can: request_module (can-proto-0) failed. [ 334.203515][T13621] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 334.238155][ T6759] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 334.293927][T13621] batman_adv: batadv0: Interface activated: dummy0 [ 334.307174][T13621] batadv0: mtu less than device minimum [ 334.388515][T13630] __nla_validate_parse: 1 callbacks suppressed [ 334.388536][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 334.409129][T13630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.590486][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 335.812380][ T14] net_ratelimit: 21 callbacks suppressed [ 335.812401][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 336.258648][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 336.292910][T13700] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 336.366158][T13700] vlan3: entered promiscuous mode [ 336.401807][T13704] netlink: 'syz.0.1952': attribute type 4 has an invalid length. [ 336.410660][ T9205] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 336.493059][T13704] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.714025][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1954'. [ 336.977052][ T9205] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.561181][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.763502][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1961'. [ 338.106567][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 338.666527][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 338.886639][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.226448][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 339.605232][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.614341][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 339.691738][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.703083][T13822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.787529][ T9204] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.157217][T13841] lo speed is unknown, defaulting to 1000 [ 340.220439][T13843] netlink: 'syz.1.1986': attribute type 11 has an invalid length. [ 340.336748][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.410655][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1987'. [ 340.497317][T13845] veth1_vlan: left promiscuous mode [ 340.522886][T13845] veth0_vlan: left promiscuous mode [ 340.543679][T13845] veth0_vlan: entered promiscuous mode [ 340.575135][T13845] veth1_vlan: entered promiscuous mode [ 340.610481][T13845] veth1_macvtap: left promiscuous mode [ 340.628402][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1988'. [ 340.642471][T13845] veth0_macvtap: left promiscuous mode [ 340.662725][T13845] veth0_macvtap: entered promiscuous mode [ 340.728034][T13845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 340.783876][T13845] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 340.822038][T13845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.907324][ T9204] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.981830][T13845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.990337][ T9204] bond2: (slave ip6gretap1): link status down again after 0 ms [ 341.038316][T13845] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 341.105185][T13845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.145161][T13845] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 341.217963][T13845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.258407][T13845] bridge0: port 3(vlan2) entered blocking state [ 341.264919][T13845] bridge0: port 3(vlan2) entered forwarding state [ 341.396508][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 341.461570][ T6773] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.495123][T13845] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.592797][T13845] 8021q: adding VLAN 0 to HW filter on device eth0 [ 341.673058][T13845] 8021q: adding VLAN 0 to HW filter on device eth1 [ 341.706250][T13845] 8021q: adding VLAN 0 to HW filter on device eth2 [ 341.732881][T13845] 8021q: adding VLAN 0 to HW filter on device eth3 [ 341.834285][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1985'. [ 342.087058][ T9206] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.245167][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 342.389829][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 342.417481][ T14] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 342.427751][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1998'. [ 342.454736][T13897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1997'. [ 342.567159][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.600670][ T6770] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.610399][T13908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 342.646834][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.649027][ T6770] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.681396][ T10] block nbd0: Possible stuck request ffff888026ade000: control (read@0,1024B). Runtime 90 seconds [ 342.693027][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.746807][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'. [ 342.756188][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 342.980445][T13915] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 342.998575][T13915] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2001'. [ 343.223489][T13929] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 343.311579][T13929] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.375679][T13934] bond11: (slave dummy0): making interface the new active one [ 343.413009][T13934] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 343.861816][T13956] lo: entered allmulticast mode [ 344.310592][T13975] netlink: 'syz.1.2013': attribute type 13 has an invalid length. [ 344.352064][T13975] netlink: 'syz.1.2013': attribute type 17 has an invalid length. [ 344.443270][T13975] team0: left promiscuous mode [ 344.761438][T13975] bond5: left promiscuous mode [ 344.800504][T13975] bridge7: left promiscuous mode [ 344.824711][T13975] geneve3: left promiscuous mode [ 344.835833][T13975] geneve4: left promiscuous mode [ 344.849016][T13975] ip6gre1: left promiscuous mode [ 344.854226][T13975] ip6gre1: left allmulticast mode [ 344.876763][T13975] macsec0: left promiscuous mode [ 345.023561][T13975] ip6gre2: left promiscuous mode [ 345.029113][T13975] ip6gre2: left allmulticast mode [ 345.438358][T14014] xt_l2tp: v2 doesn't support IP mode [ 345.473588][T14010] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 345.655989][T14010] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.712022][T14029] __nla_validate_parse: 6 callbacks suppressed [ 345.712042][T14029] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.2026'. [ 345.783302][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 345.829174][T14020] bond12: (slave veth13): Enslaving as an active interface with a down link [ 345.898796][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 345.916840][ T14] net_ratelimit: 109 callbacks suppressed [ 345.916861][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 345.966630][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.016449][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.058519][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.097226][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.126802][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.158246][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.186872][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.226927][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 346.248889][ T9203] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.276507][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.324451][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 346.350480][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 346.699071][T14056] can: request_module (can-proto-0) failed. [ 346.715714][T14056] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 346.764522][T14060] syzkaller0: entered promiscuous mode [ 346.784708][T14060] syzkaller0: entered allmulticast mode [ 346.853178][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 346.863723][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 346.885952][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 346.968482][ T9203] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.969019][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 346.978213][ T9203] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.978260][ T9203] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.978299][ T9203] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.034517][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 347.568764][T14074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.588107][T14080] tipc: Enabling of bearer rejected, failed to enable media [ 347.761943][ T9210] bond12: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 347.815536][ T9210] bond12: (slave veth13): making interface the new active one [ 347.860447][ T9210] bond12: active interface up! [ 348.340405][T14108] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 348.431342][ T30] audit: type=1800 audit(1782475165.388:7): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2049" name="memory.events" dev="tmpfs" ino=2254 res=0 errno=0 [ 348.453742][T14105] netlink: 'syz.4.2049': attribute type 4 has an invalid length. [ 348.464095][T14101] lo speed is unknown, defaulting to 1000 [ 348.500548][T14105] netlink: 'syz.4.2049': attribute type 4 has an invalid length. [ 348.643713][T14116] "syz.0.2051" (14116) uses obsolete ecb(arc4) skcipher [ 349.560560][T14134] can: request_module (can-proto-0) failed. [ 349.584305][T14134] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 350.044824][T14156] bond11: (slave dummy0): Releasing active interface [ 350.532054][T14166] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 350.554573][T14166] syzkaller1: linktype set to 780 [ 350.926168][T14183] __nla_validate_parse: 7 callbacks suppressed [ 350.926212][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2062'. [ 351.020371][ T14] net_ratelimit: 157 callbacks suppressed [ 351.020465][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.077315][ T14] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.207987][ T6759] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.226755][ T6759] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.253363][T14198] FAULT_INJECTION: forcing a failure. [ 351.253363][T14198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.273849][T14198] CPU: 0 UID: 0 PID: 14198 Comm: syz.4.2066 Not tainted syzkaller #0 PREEMPT(full) [ 351.273896][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.273916][T14198] Call Trace: [ 351.273973][T14198] [ 351.274041][T14198] dump_stack_lvl+0xe8/0x150 [ 351.274175][T14198] should_fail_ex+0x40c/0x560 [ 351.274291][T14198] _copy_from_user+0x2d/0xb0 [ 351.274341][T14198] ___sys_sendmsg+0x1c6/0x360 [ 351.274456][T14198] ? __lock_acquire+0x683/0x2cf0 [ 351.274526][T14198] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.274591][T14198] ? __fget_files+0x2a/0x420 [ 351.274636][T14198] ? __fget_files+0x3a2/0x420 [ 351.274670][T14198] __x64_sys_sendmsg+0x1b1/0x290 [ 351.274698][T14198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.274743][T14198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.274786][T14198] do_syscall_64+0x174/0x580 [ 351.274866][T14198] ? trace_irq_disable+0x3b/0x140 [ 351.274901][T14198] ? clear_bhb_loop+0x40/0x90 [ 351.274928][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.274950][T14198] RIP: 0033:0x7f0c93f9ce59 [ 351.274978][T14198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.275034][T14198] RSP: 002b:00007f0c94e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.275080][T14198] RAX: ffffffffffffffda RBX: 00007f0c94215fa0 RCX: 00007f0c93f9ce59 [ 351.275095][T14198] RDX: 0000000020000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 351.275109][T14198] RBP: 00007f0c94e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 351.275122][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.275133][T14198] R13: 00007f0c94216038 R14: 00007f0c94215fa0 R15: 00007ffd36b6a4d8 [ 351.275166][T14198] [ 351.455918][ T6759] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.463778][ T6759] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.487625][ T14] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.576765][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.584591][ T9210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.697752][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 351.805667][T14210] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 351.824456][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2067'. [ 351.911925][T14220] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 351.944020][T14209] can: request_module (can-proto-0) failed. [ 352.201750][T14228] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2072'. [ 352.225154][T14228] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2072'. [ 352.928027][T14262] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2076'. [ 353.007476][T14262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 353.233797][T14271] FAULT_INJECTION: forcing a failure. [ 353.233797][T14271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.264787][T14271] CPU: 0 UID: 0 PID: 14271 Comm: syz.3.2078 Not tainted syzkaller #0 PREEMPT(full) [ 353.264817][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.264829][T14271] Call Trace: [ 353.264837][T14271] [ 353.264846][T14271] dump_stack_lvl+0xe8/0x150 [ 353.264879][T14271] should_fail_ex+0x40c/0x560 [ 353.264914][T14271] _copy_from_user+0x2d/0xb0 [ 353.264939][T14271] __copy_msghdr+0x390/0x590 [ 353.264968][T14271] ___sys_sendmsg+0x213/0x360 [ 353.264991][T14271] ? __lock_acquire+0x683/0x2cf0 [ 353.265020][T14271] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.265087][T14271] ? __fget_files+0x2a/0x420 [ 353.265109][T14271] ? __fget_files+0x3a2/0x420 [ 353.265142][T14271] __x64_sys_sendmsg+0x1b1/0x290 [ 353.265170][T14271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.265214][T14271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.265238][T14271] do_syscall_64+0x174/0x580 [ 353.265265][T14271] ? clear_bhb_loop+0x40/0x90 [ 353.265292][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.265314][T14271] RIP: 0033:0x7f5b6319ce59 [ 353.265334][T14271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.265354][T14271] RSP: 002b:00007f5b640dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.265377][T14271] RAX: ffffffffffffffda RBX: 00007f5b63415fa0 RCX: 00007f5b6319ce59 [ 353.265393][T14271] RDX: 0000000020000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 353.265408][T14271] RBP: 00007f5b640dd090 R08: 0000000000000000 R09: 0000000000000000 [ 353.265421][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.265435][T14271] R13: 00007f5b63416038 R14: 00007f5b63415fa0 R15: 00007ffdb9106ac8 [ 353.265470][T14271] [ 353.623522][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 353.651377][T14272] veth1_macvtap: entered promiscuous mode [ 353.693032][T14272] macsec1: entered promiscuous mode [ 353.994306][T14272] veth1_macvtap: left promiscuous mode [ 354.170194][T14274] vlan3: entered promiscuous mode [ 354.206669][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 354.311874][T14289] C: renamed from veth1_to_team [ 354.320498][T14289] netlink: 'syz.2.2083': attribute type 8 has an invalid length. [ 354.479198][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2086'. [ 354.679067][T14300] can: request_module (can-proto-0) failed. [ 354.689357][T14300] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 354.713995][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 354.725622][T14304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2089'. [ 355.382413][T14329] lo speed is unknown, defaulting to 1000 [ 356.108776][ T9203] net_ratelimit: 111 callbacks suppressed [ 356.108797][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.150282][ T9206] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 356.173479][ T9203] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.306997][ T9206] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.335522][ T9206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.476896][ T9206] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.501932][ T9206] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.638301][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.662648][ T9203] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.786813][ T6759] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.824397][T14382] __nla_validate_parse: 3 callbacks suppressed [ 356.824415][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 356.975589][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 357.050913][T14385] vlan0: entered promiscuous mode [ 357.067040][T14385] dummy0: entered promiscuous mode [ 357.085131][T14393] xt_hashlimit: size too large, truncated to 1048576 [ 357.378936][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 357.455205][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 357.670242][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 357.733798][T14405] can: request_module (can-proto-0) failed. [ 357.750090][T14405] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 358.123317][T14421] netlink: 'syz.3.2113': attribute type 2 has an invalid length. [ 358.154025][T14427] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.2113'. [ 358.221180][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2113'. [ 358.246385][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2113'. [ 358.268125][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2113'. [ 358.474780][T14432] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2114'. [ 358.507201][T14434] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 359.077142][T14451] lo speed is unknown, defaulting to 1000 [ 359.818071][T14478] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 359.928583][T14486] netlink: 'syz.1.2127': attribute type 5 has an invalid length. [ 360.004668][T14478] bond13: entered promiscuous mode [ 360.029839][T14478] 8021q: adding VLAN 0 to HW filter on device bond13 [ 360.084665][T14486] macvtap1: entered allmulticast mode [ 360.244401][T14478] macvtap2: entered allmulticast mode [ 360.278022][T14507] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 360.329842][T14486] bond13: (slave bridge19): making interface the new active one [ 360.344584][T14486] bridge19: entered promiscuous mode [ 360.352786][T14486] bond13: (slave bridge19): Enslaving as an active interface with an up link [ 360.424935][T14510] FAULT_INJECTION: forcing a failure. [ 360.424935][T14510] name failslab, interval 1, probability 0, space 0, times 0 [ 360.452280][T14510] CPU: 0 UID: 0 PID: 14510 Comm: syz.0.2135 Not tainted syzkaller #0 PREEMPT(full) [ 360.452311][T14510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.452324][T14510] Call Trace: [ 360.452332][T14510] [ 360.452342][T14510] dump_stack_lvl+0xe8/0x150 [ 360.452375][T14510] should_fail_ex+0x40c/0x560 [ 360.452415][T14510] should_failslab+0xa8/0x100 [ 360.452475][T14510] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 360.452517][T14510] ? local_lock_release+0x9c/0x160 [ 360.452609][T14510] ? __alloc_skb+0x1d7/0x7a0 [ 360.452627][T14510] ? __alloc_skb+0x1d7/0x7a0 [ 360.452654][T14510] __alloc_skb+0x1d7/0x7a0 [ 360.452679][T14510] __pskb_copy_fclone+0xab/0x1200 [ 360.452714][T14510] ? tipc_loopback_trace+0x48/0x1b0 [ 360.452784][T14510] ? tipc_loopback_trace+0x48/0x1b0 [ 360.452831][T14510] tipc_clone_to_loopback+0x103/0x4f0 [ 360.452918][T14510] tipc_node_xmit+0x1de/0xf10 [ 360.452941][T14510] ? tipc_msg_build+0x439/0xf50 [ 360.452979][T14510] ? __pfx_tipc_node_xmit+0x10/0x10 [ 360.453010][T14510] ? tipc_msg_build+0x4af/0xf50 [ 360.453041][T14510] ? tipc_node_find+0xb3/0x490 [ 360.453075][T14510] ? tipc_node_find+0x3bd/0x490 [ 360.453117][T14510] ? stack_depot_save_flags+0x33/0x800 [ 360.453184][T14510] ? __lock_acquire+0x683/0x2cf0 [ 360.453216][T14510] tipc_send_group_msg+0x2bb/0x560 [ 360.453277][T14510] ? __pfx_tipc_send_group_msg+0x10/0x10 [ 360.453331][T14510] tipc_send_group_unicast+0x4e0/0x550 [ 360.453381][T14510] ? __pfx_tipc_send_group_unicast+0x10/0x10 [ 360.453412][T14510] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.453471][T14510] ? __pfx_woken_wake_function+0x10/0x10 [ 360.453511][T14510] ? tipc_dest_pop+0x19c/0x230 [ 360.453543][T14510] ? tipc_dest_pop+0x19c/0x230 [ 360.453572][T14510] __tipc_sendmsg+0x152b/0x2b60 [ 360.453612][T14510] ? up_write+0x19f/0x4a0 [ 360.453647][T14510] ? process_measurement+0x14fb/0x1c10 [ 360.453745][T14510] ? __pfx___tipc_sendmsg+0x10/0x10 [ 360.453779][T14510] ? kasan_quarantine_put+0xbb/0x1f0 [ 360.453821][T14510] ? aa_label_sk_perm+0x532/0x6e0 [ 360.453868][T14510] ? __lock_acquire+0x683/0x2cf0 [ 360.453897][T14510] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 360.453920][T14510] ? __lock_acquire+0x683/0x2cf0 [ 360.453959][T14510] ? unwind_next_frame+0x8f/0x2550 [ 360.454028][T14510] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.454064][T14510] ? tipc_sendmsg+0x47/0x70 [ 360.454098][T14510] ? __local_bh_enable_ip+0xd0/0x130 [ 360.454145][T14510] tipc_sendmsg+0x55/0x70 [ 360.454178][T14510] ? __pfx_tipc_sendmsg+0x10/0x10 [ 360.454208][T14510] sock_sendmsg_nosec+0x13a/0x180 [ 360.454241][T14510] ____sys_sendmsg+0x54e/0x850 [ 360.454272][T14510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.454306][T14510] ? import_iovec+0x73/0xa0 [ 360.454357][T14510] ___sys_sendmsg+0x2a5/0x360 [ 360.454380][T14510] ? __lock_acquire+0x683/0x2cf0 [ 360.454407][T14510] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.454471][T14510] ? __fget_files+0x2a/0x420 [ 360.454492][T14510] ? __fget_files+0x3a2/0x420 [ 360.454525][T14510] __x64_sys_sendmsg+0x1b1/0x290 [ 360.454553][T14510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.454599][T14510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.454623][T14510] do_syscall_64+0x174/0x580 [ 360.454642][T14510] ? trace_irq_disable+0x3b/0x140 [ 360.454663][T14510] ? clear_bhb_loop+0x40/0x90 [ 360.454690][T14510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.454712][T14510] RIP: 0033:0x7f131b99ce59 [ 360.454732][T14510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.454751][T14510] RSP: 002b:00007f131c857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.454774][T14510] RAX: ffffffffffffffda RBX: 00007f131bc15fa0 RCX: 00007f131b99ce59 [ 360.454796][T14510] RDX: 0000000020000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 360.454811][T14510] RBP: 00007f131c857090 R08: 0000000000000000 R09: 0000000000000000 [ 360.454824][T14510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.454837][T14510] R13: 00007f131bc16038 R14: 00007f131bc15fa0 R15: 00007ffff810c068 [ 360.454872][T14510] [ 361.116486][ T6773] net_ratelimit: 118 callbacks suppressed [ 361.116517][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.160267][ T9212] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.186454][ T9212] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.206497][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.237434][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.256417][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.276901][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.297448][ T6773] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.318174][ T6770] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.329887][T14521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.350095][ T9206] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 361.358774][T14517] macvlan0: entered promiscuous mode [ 361.364166][T14517] macvlan0: entered allmulticast mode [ 361.379196][T14517] bond3: entered promiscuous mode [ 361.385363][T14517] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 361.398219][T14517] bond3: left promiscuous mode [ 361.687089][T14534] can: request_module (can-proto-0) failed. [ 361.721820][T14534] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 361.848684][T14538] syzkaller0: entered promiscuous mode [ 361.866464][T14538] syzkaller0: entered allmulticast mode [ 363.878578][T14512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.297687][T14576] __nla_validate_parse: 10 callbacks suppressed [ 364.297705][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2152'. [ 364.497900][T14582] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 364.648998][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 364.681100][T14585] can: request_module (can-proto-0) failed. [ 364.695976][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 364.700191][T14592] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 364.725458][T14591] FAULT_INJECTION: forcing a failure. [ 364.725458][T14591] name failslab, interval 1, probability 0, space 0, times 0 [ 364.767181][T14591] CPU: 0 UID: 0 PID: 14591 Comm: syz.1.2157 Not tainted syzkaller #0 PREEMPT(full) [ 364.767210][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.767231][T14591] Call Trace: [ 364.767242][T14591] [ 364.767251][T14591] dump_stack_lvl+0xe8/0x150 [ 364.767285][T14591] should_fail_ex+0x40c/0x560 [ 364.767320][T14591] should_failslab+0xa8/0x100 [ 364.767347][T14591] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 364.767378][T14591] ? local_lock_release+0x9c/0x160 [ 364.767412][T14591] ? __alloc_skb+0x1d7/0x7a0 [ 364.767430][T14591] ? __alloc_skb+0x1d7/0x7a0 [ 364.767457][T14591] __alloc_skb+0x1d7/0x7a0 [ 364.767482][T14591] netlink_sendmsg+0x5d4/0xb40 [ 364.767605][T14591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.767635][T14591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.767676][T14591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.767699][T14591] sock_sendmsg_nosec+0x13a/0x180 [ 364.767733][T14591] ____sys_sendmsg+0x54e/0x850 [ 364.767762][T14591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.767795][T14591] ? import_iovec+0x73/0xa0 [ 364.767822][T14591] ___sys_sendmsg+0x2a5/0x360 [ 364.767894][T14591] ? __lock_acquire+0x683/0x2cf0 [ 364.767922][T14591] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.767984][T14591] ? __fget_files+0x2a/0x420 [ 364.768005][T14591] ? __fget_files+0x3a2/0x420 [ 364.768037][T14591] __x64_sys_sendmsg+0x1b1/0x290 [ 364.768065][T14591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.768108][T14591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.768133][T14591] do_syscall_64+0x174/0x580 [ 364.768154][T14591] ? trace_irq_disable+0x3b/0x140 [ 364.768174][T14591] ? clear_bhb_loop+0x40/0x90 [ 364.768202][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.768224][T14591] RIP: 0033:0x7f9e99f9ce59 [ 364.768244][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.768263][T14591] RSP: 002b:00007f9e9af0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.768287][T14591] RAX: ffffffffffffffda RBX: 00007f9e9a215fa0 RCX: 00007f9e99f9ce59 [ 364.768303][T14591] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 364.768316][T14591] RBP: 00007f9e9af0c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.768330][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.768342][T14591] R13: 00007f9e9a216038 R14: 00007f9e9a215fa0 R15: 00007ffc3ca58148 [ 364.768373][T14591] [ 365.270103][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 365.358119][T14613] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 365.369269][T14612] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 365.387111][T14612] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 365.423283][T14617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2166'. [ 365.438104][T14613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.458902][T14615] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 365.677797][T14623] batman_adv: batadv0: Interface deactivated: dummy0 [ 365.711852][T14623] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 365.720857][T14623] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 365.834521][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 366.090174][T14641] can: request_module (can-proto-0) failed. [ 366.152355][T14651] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 366.196121][T14651] batman_adv: batadv0: Interface activated: dummy0 [ 366.203816][ T9206] net_ratelimit: 106 callbacks suppressed [ 366.203838][ T9206] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.215337][T14651] batadv0: mtu less than device minimum [ 366.237840][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.249707][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.261553][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.271948][ T6759] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 366.281202][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.293065][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.304926][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.316782][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.362636][T14658] netlink: 'syz.1.2180': attribute type 1 has an invalid length. [ 366.489846][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2181'. [ 367.064966][T14690] netlink: 'syz.3.2187': attribute type 30 has an invalid length. [ 367.125230][T14690] bond5: option arp_missed_max: invalid value (0) [ 367.135635][T14690] bond5: option arp_missed_max: allowed values 1 - 255 [ 367.149768][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 367.260721][T14690] bond5 (unregistering): Released all slaves [ 367.362663][T14695] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 367.945096][T14731] can: request_module (can-proto-0) failed. [ 368.175009][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 368.231640][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2198'. [ 369.259861][T14786] lo speed is unknown, defaulting to 1000 [ 369.646812][T14806] __nla_validate_parse: 2 callbacks suppressed [ 369.646834][T14806] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2217'. [ 370.201995][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 370.551234][T14843] tipc: Enabling of bearer rejected, already enabled [ 370.570439][T14843] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 370.589776][T14843] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 370.742928][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 370.776950][T14849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.852359][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 370.957890][T14849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.144973][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'. [ 371.210044][ T6836] net_ratelimit: 131 callbacks suppressed [ 371.210067][ T6836] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.264602][ T6836] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.334738][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2236'. [ 371.406551][ T9203] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.433916][ T9203] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.468109][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 371.567135][ T9212] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.601120][ T9212] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.668060][ T9203] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.727517][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 371.758983][ T9210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.845058][T14890] syzkaller0: entered promiscuous mode [ 371.864829][T14890] syzkaller0: entered allmulticast mode [ 371.897086][ T9209] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 372.015605][T14896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2242'. [ 372.390660][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2243'. [ 372.752566][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2246'. [ 372.768229][ T10] block nbd0: Possible stuck request ffff888026ade000: control (read@0,1024B). Runtime 120 seconds [ 372.924231][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 372.934045][T14919] netlink: 'syz.3.2247': attribute type 5 has an invalid length. [ 373.093628][T14919] geneve3: entered promiscuous mode [ 373.100053][T14919] geneve3: entered allmulticast mode [ 373.121038][T14924] xt_hashlimit: size too large, truncated to 1048576 [ 373.215586][T14938] xt_hashlimit: size too large, truncated to 1048576 [ 373.241656][T14938] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 373.594411][ T6759] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 41867 - 0 [ 373.603865][ T6759] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 41867 - 0 [ 373.674745][ T6759] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 41867 - 0 [ 373.704340][ T6759] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 41867 - 0 [ 373.919356][T14958] can: request_module (can-proto-0) failed. [ 373.933892][T14958] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 374.619650][T14993] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 374.701326][T14999] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 374.724265][T14993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.802638][T14998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.842932][T14998] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 374.907012][T14998] bond3: (slave gre1): Error -95 calling set_mac_address [ 374.952996][T14993] gretap1: entered promiscuous mode [ 374.991777][T14993] bond3: (slave gretap1): making interface the new active one [ 375.012038][T14993] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 375.214607][T15020] __nla_validate_parse: 7 callbacks suppressed [ 375.214627][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2273'. [ 375.321665][T15021] lo speed is unknown, defaulting to 1000 [ 375.442004][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 375.464367][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 375.653668][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 375.689856][T15042] vlan3: entered promiscuous mode [ 375.981240][T15058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2284'. [ 376.193143][T15072] digital: digital_start_poll: Unknown protocol [ 376.226656][ T9210] net_ratelimit: 134 callbacks suppressed [ 376.226687][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.256043][ T9210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.361485][ T9206] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 376.386979][ T97] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.406922][ T97] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.547524][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.587027][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.637618][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.666413][ T9210] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 376.685296][ T9210] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.735255][T15094] can: request_module (can-proto-0) failed. [ 376.828457][T15094] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 376.837386][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 377.069767][T15106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2295'. [ 377.146050][T15103] can: request_module (can-proto-0) failed. [ 377.177614][T15103] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 377.758773][T15132] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 378.102212][T15148] syz_tun: entered allmulticast mode [ 378.110010][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 378.242801][T15158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2303'. [ 378.324137][T15158] syzkaller1: entered promiscuous mode [ 378.330851][T15158] syzkaller1: entered allmulticast mode [ 378.521336][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.035437][T15179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2313'. [ 379.821698][T15154] syz_tun: left allmulticast mode [ 379.930435][ T30] audit: type=1107 audit(1782475196.888:8): pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 380.015991][T15201] tipc: Enabling of bearer rejected, already enabled [ 380.352011][T15214] can: request_module (can-proto-0) failed. [ 380.367417][T15214] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 380.394505][T15215] __nla_validate_parse: 1 callbacks suppressed [ 380.394525][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 380.443997][T15214] batman_adv: batadv0: Interface deactivated: dummy0 [ 380.451245][T15214] batman_adv: batadv0: Removing interface: dummy0 [ 380.463788][T15227] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 380.565791][T15227] bond5: entered promiscuous mode [ 380.572234][T15227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.653867][T15227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.677896][T15227] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 380.696377][T15227] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 380.715557][T15227] bond5: (slave xfrm1): making interface the new active one [ 380.723088][T15227] xfrm1: entered promiscuous mode [ 380.747237][T15227] xfrm1: left promiscuous mode [ 380.852614][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2331'. [ 381.058966][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 381.082761][T15253] vxlan0: entered promiscuous mode [ 381.089211][T15253] vxlan0: entered allmulticast mode [ 381.191124][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2332'. [ 381.236575][ T14] net_ratelimit: 117 callbacks suppressed [ 381.236597][ T14] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.258670][T15264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2335'. [ 381.270851][ T14] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.354315][T15268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2337'. [ 381.387340][ T97] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.405426][ T97] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.532538][T15272] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 381.540759][ T97] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.561788][ T97] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.687125][ T97] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.702934][ T97] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.827279][ T6759] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 381.959920][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2343'. [ 382.201564][T15287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2344'. [ 382.281431][T15294] bridge11: entered promiscuous mode [ 382.303863][T15294] bridge11: entered allmulticast mode [ 382.339298][T15294] team0: Port device bridge11 added [ 382.583798][T15310] netlink: 'syz.3.2350': attribute type 40 has an invalid length. [ 383.451098][T15328] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 383.498740][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2354'. [ 383.748366][T15327] bridge0: port 3(vlan2) entered disabled state [ 385.613850][T15318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.629655][ T9129] lo speed is unknown, defaulting to 1000 [ 385.649843][ T6773] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.661172][ T9129] syz1: Port: 1 Link DOWN [ 385.691763][ T6773] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 385.721364][ T6773] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 46064 - 0 [ 385.750485][ T6773] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 385.788228][T15336] lo speed is unknown, defaulting to 1000 [ 385.794272][ T6773] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.822132][ T6773] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 385.871210][ T6773] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 46064 - 0 [ 385.900175][ T6773] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 385.934267][ T6773] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.976961][ T6773] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 386.011363][ T6773] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 46064 - 0 [ 386.042607][ T6773] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 386.075913][ T6773] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.104203][ T6773] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 386.127769][ T6773] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 46064 - 0 [ 386.137922][ T6773] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 386.182595][T15361] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 386.294673][T15362] tap0: tun_chr_ioctl cmd 1074025677 [ 386.309045][T15362] tap0: linktype set to 787 [ 386.314954][T15364] tap0: tun_chr_ioctl cmd 3223345255 [ 386.340655][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 386.355372][T15358] syzkaller0: entered promiscuous mode [ 386.361316][T15358] syzkaller0: entered allmulticast mode [ 386.380116][T15369] gretap1: entered allmulticast mode [ 386.415480][T15367] can: request_module (can-proto-0) failed. [ 386.445970][T15367] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 386.485802][T15376] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2365'. [ 387.379828][T15401] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 387.437853][T15405] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2373'. [ 387.485680][T15405] smc: net device wlan0 applied user defined pnetid SYZ0 [ 387.513599][T15405] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2373'. [ 387.623053][T15409] netlink: 'syz.4.2375': attribute type 3 has an invalid length. [ 387.758403][T15410] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2373'. [ 388.095830][T15434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 388.242825][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 388.279413][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 388.332282][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2381'. [ 388.542911][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 388.658974][T15466] net_ratelimit: 110 callbacks suppressed [ 388.658995][T15466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.375608][T15497] syzkaller0: entered promiscuous mode [ 389.437930][T15497] syzkaller0: entered allmulticast mode [ 389.483932][T15502] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 389.541655][T15502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.594152][T15502] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 389.862334][T15518] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 389.893524][T15518] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 389.910543][T15520] netlink: 'syz.2.2398': attribute type 30 has an invalid length. [ 389.939647][T15502] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 389.978148][T15502] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 390.032858][T15502] bond5: (slave ipvlan3): Error -95 calling set_mac_address [ 390.119448][T15519] bond5: (slave syz_tun): making interface the new active one [ 390.153756][T15519] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 390.488058][T15533] pim6reg1: entered promiscuous mode [ 390.507800][T15533] pim6reg1: entered allmulticast mode [ 390.990150][T15564] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 391.185226][T15571] xt_CT: No such helper "syz1" [ 391.678506][T15569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.945331][T15571] syzkaller0: entered promiscuous mode [ 391.951105][T15571] syzkaller0: entered allmulticast mode [ 392.028476][T15610] __nla_validate_parse: 4 callbacks suppressed [ 392.028498][T15610] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2415'. [ 392.102052][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 392.171285][T15622] FAULT_INJECTION: forcing a failure. [ 392.171285][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 392.190031][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.0.2418 Not tainted syzkaller #0 PREEMPT(full) [ 392.190061][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.190074][T15622] Call Trace: [ 392.190082][T15622] [ 392.190092][T15622] dump_stack_lvl+0xe8/0x150 [ 392.190125][T15622] should_fail_ex+0x40c/0x560 [ 392.190162][T15622] should_failslab+0xa8/0x100 [ 392.190190][T15622] __kmalloc_noprof+0xfe/0x720 [ 392.190221][T15622] ? rcu_is_watching+0x15/0xb0 [ 392.190282][T15622] ? tomoyo_realpath_from_path+0xef/0x640 [ 392.190437][T15622] ? tomoyo_realpath_from_path+0xef/0x640 [ 392.190473][T15622] tomoyo_realpath_from_path+0xef/0x640 [ 392.190513][T15622] ? tomoyo_path_number_perm+0x219/0x5f0 [ 392.190536][T15622] tomoyo_path_number_perm+0x246/0x5f0 [ 392.190564][T15622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.190586][T15622] ? __lock_acquire+0x683/0x2cf0 [ 392.190620][T15622] ? hook_file_ioctl+0x1f0/0x5f0 [ 392.190658][T15622] ? __fget_files+0x2a/0x420 [ 392.190679][T15622] ? __fget_files+0x2a/0x420 [ 392.190694][T15622] ? __fget_files+0x3a2/0x420 [ 392.190714][T15622] ? __fget_files+0x2a/0x420 [ 392.190745][T15622] security_file_ioctl+0xc3/0x2a0 [ 392.190803][T15622] __se_sys_ioctl+0x47/0x170 [ 392.190840][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.190864][T15622] do_syscall_64+0x174/0x580 [ 392.190886][T15622] ? trace_irq_disable+0x3b/0x140 [ 392.190908][T15622] ? clear_bhb_loop+0x40/0x90 [ 392.190934][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.190956][T15622] RIP: 0033:0x7f131b99ce59 [ 392.190978][T15622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.190996][T15622] RSP: 002b:00007f131c836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.191020][T15622] RAX: ffffffffffffffda RBX: 00007f131bc16090 RCX: 00007f131b99ce59 [ 392.191036][T15622] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 392.191049][T15622] RBP: 00007f131c836090 R08: 0000000000000000 R09: 0000000000000000 [ 392.191062][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.191074][T15622] R13: 00007f131bc16128 R14: 00007f131bc16090 R15: 00007ffff810c068 [ 392.191110][T15622] [ 392.191134][T15622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.302192][T15623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.591307][T15569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.622265][T15610] 8021q: VLANs not supported on ip6_vti0 [ 394.639829][T15615] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 394.727652][T15569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.893433][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 394.953822][T15569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.995276][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2421'. [ 395.675603][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.708044][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.728738][T15665] tipc: Can't bind to reserved service type 0 [ 395.769274][T15665] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2428'. [ 395.825249][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.844962][T15651] batadv0: mtu less than device minimum [ 395.855074][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.868566][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.880387][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.892194][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.904056][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.915904][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.927670][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.939471][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.951348][T15651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.982718][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.017998][T15651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.028736][T15651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.042915][T15651] veth1_vlan: left promiscuous mode [ 396.049758][T15651] veth0_vlan: left promiscuous mode [ 396.056635][T15651] veth0_vlan: entered promiscuous mode [ 396.065055][T15651] veth1_vlan: entered promiscuous mode [ 396.077717][T15651] veth1_macvtap: left promiscuous mode [ 396.084595][T15651] veth0_macvtap: left promiscuous mode [ 396.091721][T15651] veth0_macvtap: entered promiscuous mode [ 396.099632][T15651] veth1_macvtap: entered promiscuous mode [ 396.111424][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.121825][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.131909][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.140981][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.152369][T15651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.161362][T15651] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 396.171334][T15651] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 396.206858][T15651] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 396.218151][T15651] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 396.258946][T15651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.291937][T15651] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 396.331995][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.339298][ T97] bridge0: port 1(bridge_slave_0) entered listening state [ 396.361582][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.368798][ T97] bridge0: port 2(bridge_slave_1) entered listening state [ 396.440916][ T6836] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.452868][ T6836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.462516][ T6836] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.487023][ T6836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.555789][ T6836] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.586672][ T6836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.619836][ T6836] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.640613][ T6836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.772024][ T6836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.917667][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 397.015143][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.022514][T15683] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.075169][T15683] batman_adv: batadv0: Interface deactivated: dummy0 [ 397.154206][T15683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.169287][T15683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.434801][T15683] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 397.451439][ T6836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.468172][ T6836] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.489238][ T6836] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.508846][ T6836] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.523395][ T6836] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.543583][T15687] vlan0: entered promiscuous mode [ 397.552653][ T6836] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.573489][ T6836] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.592591][ T6836] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.618416][ T6836] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.644089][ T6836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.705086][ T97] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.826059][T15718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2443'. [ 397.837171][T15717] FAULT_INJECTION: forcing a failure. [ 397.837171][T15717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.845897][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2443'. [ 397.880674][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2443'. [ 397.888452][T15717] CPU: 1 UID: 0 PID: 15717 Comm: syz.3.2442 Not tainted syzkaller #0 PREEMPT(full) [ 397.888544][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.888576][T15717] Call Trace: [ 397.888605][T15717] [ 397.888637][T15717] dump_stack_lvl+0xe8/0x150 [ 397.888729][T15717] should_fail_ex+0x40c/0x560 [ 397.888841][T15717] _copy_to_user+0x31/0xb0 [ 397.888913][T15717] simple_read_from_buffer+0xe1/0x170 [ 397.888987][T15717] proc_fail_nth_read+0x1bb/0x230 [ 397.889114][T15717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.889194][T15717] ? rw_verify_area+0x24a/0x4c0 [ 397.889267][T15717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.889295][T15717] vfs_read+0x213/0xa80 [ 397.889377][T15717] ? __pfx___mutex_lock+0x10/0x10 [ 397.889505][T15717] ? __pfx_vfs_read+0x10/0x10 [ 397.889577][T15717] ? __fget_files+0x2a/0x420 [ 397.889650][T15717] ? __fget_files+0x3a2/0x420 [ 397.889706][T15717] ? __fget_files+0x2a/0x420 [ 397.889735][T15717] ksys_read+0x150/0x270 [ 397.889771][T15717] ? __pfx_ksys_read+0x10/0x10 [ 397.889806][T15717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.889829][T15717] do_syscall_64+0x174/0x580 [ 397.889848][T15717] ? trace_irq_disable+0x3b/0x140 [ 397.889869][T15717] ? clear_bhb_loop+0x40/0x90 [ 397.889965][T15717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.890043][T15717] RIP: 0033:0x7f5b6315d68e [ 397.890113][T15717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.890164][T15717] RSP: 002b:00007f5b640bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.890226][T15717] RAX: ffffffffffffffda RBX: 00007f5b640bc6c0 RCX: 00007f5b6315d68e [ 397.890274][T15717] RDX: 000000000000000f RSI: 00007f5b640bc0a0 RDI: 0000000000000007 [ 397.890306][T15717] RBP: 00007f5b640bc090 R08: 0000000000000000 R09: 0000000000000000 [ 397.890345][T15717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.890377][T15717] R13: 00007f5b63416128 R14: 00007f5b63416090 R15: 00007ffdb9106ac8 [ 397.890479][T15717] [ 397.892568][T15721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2445'. [ 398.096686][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2443'. [ 398.173553][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 398.248905][T15729] ipt_REJECT: TCP_RESET invalid for non-tcp [ 398.260255][T15729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2446'. [ 399.047813][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'. [ 399.065749][T15746] syz.1.2451: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.091465][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.1.2451 Not tainted syzkaller #0 PREEMPT(full) [ 399.091496][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.091509][T15746] Call Trace: [ 399.091518][T15746] [ 399.091528][T15746] dump_stack_lvl+0xe8/0x150 [ 399.091562][T15746] warn_alloc+0x24c/0x270 [ 399.091600][T15746] ? stack_depot_save_flags+0x33/0x800 [ 399.091637][T15746] ? __pfx_warn_alloc+0x10/0x10 [ 399.091674][T15746] ? kasan_save_track+0x3e/0x80 [ 399.091693][T15746] ? __kasan_kmalloc+0x93/0xb0 [ 399.091717][T15746] ? xsk_setsockopt+0x52a/0x960 [ 399.091857][T15746] ? do_sock_setsockopt+0x17c/0x1b0 [ 399.091882][T15746] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 399.091903][T15746] ? do_syscall_64+0x174/0x580 [ 399.091925][T15746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.091960][T15746] __vmalloc_node_range_noprof+0x12c/0x1730 [ 399.092028][T15746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.092067][T15746] ? __kasan_kmalloc+0x93/0xb0 [ 399.092092][T15746] ? __kmalloc_cache_noprof+0x32d/0x660 [ 399.092127][T15746] ? __kmalloc_cache_noprof+0x150/0x660 [ 399.092165][T15746] vmalloc_user_noprof+0xad/0xe0 [ 399.092201][T15746] ? xskq_create+0xbf/0x170 [ 399.092241][T15746] xskq_create+0xbf/0x170 [ 399.092277][T15746] xsk_init_queue+0x8a/0xe0 [ 399.092311][T15746] xsk_setsockopt+0x52a/0x960 [ 399.092341][T15746] ? __fget_files+0x2a/0x420 [ 399.092365][T15746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.092396][T15746] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.092426][T15746] ? aa_sock_opt_perm+0xff/0x1a0 [ 399.092458][T15746] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 399.092505][T15746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.092537][T15746] do_sock_setsockopt+0x17c/0x1b0 [ 399.092565][T15746] __x64_sys_setsockopt+0x13d/0x1b0 [ 399.092591][T15746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.092615][T15746] do_syscall_64+0x174/0x580 [ 399.092635][T15746] ? trace_irq_disable+0x3b/0x140 [ 399.092657][T15746] ? clear_bhb_loop+0x40/0x90 [ 399.092686][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.092709][T15746] RIP: 0033:0x7f9e99f9ce59 [ 399.092730][T15746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.092751][T15746] RSP: 002b:00007f9e9af0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.092776][T15746] RAX: ffffffffffffffda RBX: 00007f9e9a215fa0 RCX: 00007f9e99f9ce59 [ 399.092793][T15746] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 399.092807][T15746] RBP: 00007f9e9a032e6f R08: 0000000000000004 R09: 0000000000000000 [ 399.092822][T15746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.092837][T15746] R13: 00007f9e9a216038 R14: 00007f9e9a215fa0 R15: 00007ffc3ca58148 [ 399.092875][T15746] [ 399.092902][T15746] Mem-Info: [ 399.412686][T15746] active_anon:12108 inactive_anon:0 isolated_anon:0 [ 399.412686][T15746] active_file:0 inactive_file:43641 isolated_file:0 [ 399.412686][T15746] unevictable:768 dirty:286 writeback:0 [ 399.412686][T15746] slab_reclaimable:11069 slab_unreclaimable:133502 [ 399.412686][T15746] mapped:31822 shmem:1306 pagetables:3500 [ 399.412686][T15746] sec_pagetables:0 bounce:0 [ 399.412686][T15746] kernel_misc_reclaimable:0 [ 399.412686][T15746] free:1281991 free_pcp:9152 free_cma:0 [ 399.482977][T15763] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 399.537181][T15746] Node 0 active_anon:48532kB inactive_anon:0kB active_file:0kB inactive_file:174368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123488kB dirty:1144kB writeback:0kB shmem:3688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14708kB pagetables:13956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 399.581919][T15758] can: request_module (can-proto-0) failed. [ 399.616577][T15746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 399.664734][T15762] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 399.734843][T15746] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.749011][T15775] netlink: 'syz.1.2451': attribute type 1 has an invalid length. [ 399.801742][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 399.840672][T15746] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 399.856235][T15746] Node 0 DMA32 free:1171728kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48632kB inactive_anon:0kB active_file:0kB inactive_file:174368kB unevictable:1536kB writepending:1148kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:33332kB local_pcp:11888kB free_cma:0kB [ 399.917828][T15762] team0: Port device dummy0 added [ 399.941385][T15746] lowmem_reserve[]: 0 0 0 0 0 [ 399.952218][T15746] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 400.025264][T15750] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 400.039473][T15746] lowmem_reserve[]: 0 0 0 0 0 [ 400.085597][T15746] Node 1 Normal free:3944312kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.189319][T15746] lowmem_reserve[]: 0 0 0 0 0 [ 400.219722][T15750] team0: Port device dummy0 removed [ 400.246088][T15746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.340305][T15746] Node 0 DMA32: 2455*4kB (UM) 2092*8kB (UME) 717*16kB (UM) 1891*32kB (UME) 901*64kB (UME) 631*128kB (UME) 404*256kB (UM) 210*512kB (UM) 92*1024kB (UM) 8*2048kB (UME) 150*4096kB (UM) = 1172908kB [ 400.387893][T15746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 400.399892][T15746] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 10*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944312kB [ 400.417779][T15746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.427452][T15746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.437644][T15746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.447662][T15746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.457421][T15746] 44930 total pagecache pages [ 400.462238][T15746] 0 pages in swap cache [ 400.466517][T15746] Free swap = 124996kB [ 400.470708][T15746] Total swap = 124996kB [ 400.475009][T15746] 2097051 pages RAM [ 400.479467][T15746] 0 pages HighMem/MovableOnly [ 400.484203][T15746] 427419 pages reserved [ 400.488680][T15746] 0 pages cma reserved [ 400.718669][T15801] netlink: 'syz.0.2463': attribute type 4 has an invalid length. [ 400.735246][T15801] netlink: 'syz.0.2463': attribute type 4 has an invalid length. [ 400.892807][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2465'. [ 400.924668][T15809] net_ratelimit: 34 callbacks suppressed [ 400.924702][T15809] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.997346][T15855] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 402.010959][T15846] can: request_module (can-proto-0) failed. [ 402.166520][T15859] syzkaller0: entered promiscuous mode [ 402.179789][T15859] syzkaller0: entered allmulticast mode [ 402.234395][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.331367][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.373616][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.838983][ T10] block nbd0: Possible stuck request ffff888026ade000: control (read@0,1024B). Runtime 150 seconds [ 404.126589][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.669411][T15886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.680074][T15886] batman_adv: batadv0: Interface activated: dummy0 [ 404.687090][T15886] batadv0: mtu less than device minimum [ 404.693595][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.705098][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.716513][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.727867][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.739262][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.750689][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.762205][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.773503][T15886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.799214][T15886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.828597][T15886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.857095][T15886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.887310][T15886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.897879][T15886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.910015][T15886] veth1_vlan: left promiscuous mode [ 404.916230][T15886] veth0_vlan: left promiscuous mode [ 404.927347][T15886] veth0_vlan: entered promiscuous mode [ 404.934678][T15886] veth1_vlan: entered promiscuous mode [ 404.944270][T15886] veth1_macvtap: left promiscuous mode [ 404.950834][T15886] veth0_macvtap: left promiscuous mode [ 404.957617][T15886] veth0_macvtap: entered promiscuous mode [ 404.964271][T15886] veth1_macvtap: entered promiscuous mode [ 404.976206][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.989480][ T4992] udevd[4992]: worker [5727] /devices/virtual/block/nbd0 is taking a long time [ 404.999983][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.008418][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.024705][T15886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.037832][T15886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.046560][T15886] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 405.059890][T15886] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 405.113957][T15995] __nla_validate_parse: 4 callbacks suppressed [ 405.113971][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 405.135687][T15886] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 405.144176][T15886] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 405.183583][T15886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.248417][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.255674][ T14] bridge0: port 1(bridge_slave_0) entered listening state [ 405.290787][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.298111][ T14] bridge0: port 2(bridge_slave_1) entered listening state [ 405.362057][ T6770] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.383049][ T6770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.477416][ T6770] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.494179][ T6770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.522084][T16011] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2485'. [ 405.533334][ T6770] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.560772][ T6770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.589761][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 405.627585][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 405.671201][T16014] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 405.726646][ T6770] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.763053][ T6770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.789773][T16024] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 405.826935][T16033] netlink: 'syz.3.2489': attribute type 1 has an invalid length. [ 405.841292][T16027] can: request_module (can-proto-0) failed. [ 406.057791][ T6770] net_ratelimit: 56 callbacks suppressed [ 406.057813][ T6770] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 406.078555][ T6770] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.606782][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 406.621197][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 406.691384][T16067] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2496'. [ 406.778844][ T9209] bond4: (slave gretap0): link status up again after 0 ms [ 406.818095][ T9209] bond4: (slave gretap0): link status up again after 0 ms [ 406.868587][ T9209] bond4: (slave gretap0): link status up again after 0 ms [ 406.905586][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.918574][ T9203] bond4: (slave gretap0): link status up again after 0 ms [ 406.934374][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 406.945240][T16074] netlink: 'syz.4.2501': attribute type 16 has an invalid length. [ 406.956671][ T9203] bond4: (slave gretap0): link status up again after 0 ms [ 406.967100][T16079] unsupported nla_type 216 [ 406.972140][T16074] netlink: 'syz.4.2501': attribute type 17 has an invalid length. [ 407.007872][ T9203] bond4: (slave gretap0): link status up again after 0 ms [ 407.108206][T16067] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 407.139982][T16072] 8021q: VLANs not supported on gre0 [ 407.180699][T16076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 407.225709][T16068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2499'. [ 407.252272][T16068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2499'. [ 407.266641][T16078] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.280114][T16078] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.449831][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.457132][T16074] bridge0: port 1(bridge_slave_0) entered listening state [ 407.479913][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.487206][T16074] bridge0: port 2(bridge_slave_1) entered listening state [ 407.524565][T16074] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 407.572743][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.580047][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.595726][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.602992][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.870829][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2503'. [ 408.009871][T16087] veth9: entered allmulticast mode [ 408.035350][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 408.084023][T16095] syzkaller0: entered promiscuous mode [ 408.098753][T16095] syzkaller0: entered allmulticast mode [ 408.245720][ T30] audit: type=1804 audit(1782475225.198:9): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2508" name="/newroot/479/cgroup.controllers" dev="tmpfs" ino=2500 res=1 errno=0 [ 408.303723][ T30] audit: type=1800 audit(1782475225.238:10): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2508" name="cgroup.controllers" dev="tmpfs" ino=2500 res=0 errno=0 [ 408.426424][T16112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.526136][T16120] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 408.764684][T16127] netlink: 'syz.0.2517': attribute type 1 has an invalid length. [ 409.153225][T16139] nbd: socks must be embedded in a SOCK_ITEM attr [ 409.441843][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.463522][T16156] "syz.2.2527" (16156) uses obsolete ecb(arc4) skcipher [ 409.474865][T16156] SET target dimension over the limit! [ 409.484375][T16157] "syz.2.2527" (16157) uses obsolete ecb(arc4) skcipher [ 409.507084][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.577687][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.590050][T16165] pimreg9: entered allmulticast mode [ 409.702437][T16171] netlink: 'syz.0.2531': attribute type 10 has an invalid length. [ 409.732836][T16171] team0: Port device dummy0 added [ 409.822795][T16173] veth5: entered allmulticast mode [ 410.250496][T16190] sctp: [Deprecated]: syz.3.2539 (pid 16190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.250496][T16190] Use struct sctp_sack_info instead [ 410.338239][T16196] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 410.497719][T16209] __nla_validate_parse: 40 callbacks suppressed [ 410.497740][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 410.513774][T16209] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2542'. [ 410.524742][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 410.535148][T16209] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2542'. [ 410.544891][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 410.691433][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 410.882473][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 411.139473][ T97] net_ratelimit: 79 callbacks suppressed [ 411.139494][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 411.297484][ T97] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 411.311977][ T97] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 411.327090][ T14] bond4: (slave gretap0): failed to get link speed/duplex [ 411.457285][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 411.600621][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 411.652759][T16258] xt_time: unknown flags 0xf4 [ 411.706652][T16257] can: request_module (can-proto-0) failed. [ 411.737135][ T6759] bond4: (slave gretap0): failed to get link speed/duplex [ 411.857005][ T6759] bond4: (slave gretap0): failed to get link speed/duplex [ 411.926931][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 411.941700][ T9209] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 412.044943][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 412.075964][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 412.090366][T16279] netlink: 58 bytes leftover after parsing attributes in process `syz.2.2559'. [ 412.135816][T16279] team0 (unregistering): Port device team_slave_1 removed [ 412.378277][T16299] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 412.468238][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.475559][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.513691][T16294] batman_adv: batadv0: Interface deactivated: dummy0 [ 412.671320][T16294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.694238][T16294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.886053][T16316] FAULT_INJECTION: forcing a failure. [ 412.886053][T16316] name failslab, interval 1, probability 0, space 0, times 0 [ 412.902927][T16316] CPU: 1 UID: 0 PID: 16316 Comm: syz.0.2569 Not tainted syzkaller #0 PREEMPT(full) [ 412.902969][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.902991][T16316] Call Trace: [ 412.903004][T16316] [ 412.903018][T16316] dump_stack_lvl+0xe8/0x150 [ 412.903054][T16316] should_fail_ex+0x40c/0x560 [ 412.903091][T16316] should_failslab+0xa8/0x100 [ 412.903117][T16316] __kmalloc_noprof+0xfe/0x720 [ 412.903153][T16316] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 412.903187][T16316] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 412.903227][T16316] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 412.903268][T16316] genl_family_rcv_msg_doit+0xda/0x340 [ 412.903307][T16316] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.903352][T16316] ? apparmor_capable+0x126/0x170 [ 412.903461][T16316] ? bpf_lsm_capable+0x9/0x20 [ 412.903481][T16316] ? security_capable+0x7e/0x2c0 [ 412.903558][T16316] genl_rcv_msg+0x614/0x7a0 [ 412.903596][T16316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.903624][T16316] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 412.903718][T16316] ? __pfx_nl80211_get_key+0x10/0x10 [ 412.903744][T16316] ? __pfx_nl80211_post_doit+0x10/0x10 [ 412.903771][T16316] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.903814][T16316] netlink_rcv_skb+0x226/0x4a0 [ 412.903838][T16316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.903871][T16316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.903920][T16316] ? down_read+0x2be/0x330 [ 412.903948][T16316] genl_rcv+0x28/0x40 [ 412.903976][T16316] netlink_unicast+0x7bb/0x940 [ 412.904011][T16316] netlink_sendmsg+0x813/0xb40 [ 412.904046][T16316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.904077][T16316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.904109][T16316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.904132][T16316] sock_sendmsg_nosec+0x13a/0x180 [ 412.904165][T16316] ____sys_sendmsg+0x54e/0x850 [ 412.904194][T16316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.904228][T16316] ? import_iovec+0x73/0xa0 [ 412.904254][T16316] ___sys_sendmsg+0x2a5/0x360 [ 412.904276][T16316] ? __lock_acquire+0x683/0x2cf0 [ 412.904304][T16316] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.904369][T16316] ? __fget_files+0x2a/0x420 [ 412.904390][T16316] ? __fget_files+0x3a2/0x420 [ 412.904422][T16316] __x64_sys_sendmsg+0x1b1/0x290 [ 412.904450][T16316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.904492][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.904514][T16316] do_syscall_64+0x174/0x580 [ 412.904533][T16316] ? trace_irq_disable+0x3b/0x140 [ 412.904553][T16316] ? clear_bhb_loop+0x40/0x90 [ 412.904580][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.904602][T16316] RIP: 0033:0x7f131b99ce59 [ 412.904623][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.904642][T16316] RSP: 002b:00007f131c857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.904665][T16316] RAX: ffffffffffffffda RBX: 00007f131bc15fa0 RCX: 00007f131b99ce59 [ 412.904681][T16316] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 412.904695][T16316] RBP: 00007f131c857090 R08: 0000000000000000 R09: 0000000000000000 [ 412.904709][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.904721][T16316] R13: 00007f131bc16038 R14: 00007f131bc15fa0 R15: 00007ffff810c068 [ 412.904755][T16316] [ 413.303196][T16299] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 413.374108][ T14] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.402636][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.414385][ T14] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.424558][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.433978][ T14] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.443687][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.455678][ T14] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.465400][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.874862][T16350] FAULT_INJECTION: forcing a failure. [ 413.874862][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 413.889014][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.1.2580 Not tainted syzkaller #0 PREEMPT(full) [ 413.889043][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.889056][T16350] Call Trace: [ 413.889065][T16350] [ 413.889074][T16350] dump_stack_lvl+0xe8/0x150 [ 413.889109][T16350] should_fail_ex+0x40c/0x560 [ 413.889146][T16350] should_failslab+0xa8/0x100 [ 413.889173][T16350] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 413.889211][T16350] ? local_lock_release+0x9c/0x160 [ 413.889247][T16350] ? __alloc_skb+0x1d7/0x7a0 [ 413.889265][T16350] ? __alloc_skb+0x1d7/0x7a0 [ 413.889292][T16350] __alloc_skb+0x1d7/0x7a0 [ 413.889318][T16350] netlink_ack+0x136/0xb30 [ 413.889338][T16350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.889367][T16350] ? __pfx_nl80211_post_doit+0x10/0x10 [ 413.889411][T16350] netlink_rcv_skb+0x2a4/0x4a0 [ 413.889437][T16350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.889479][T16350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.889521][T16350] ? down_read+0x2be/0x330 [ 413.889549][T16350] genl_rcv+0x28/0x40 [ 413.889576][T16350] netlink_unicast+0x7bb/0x940 [ 413.889611][T16350] netlink_sendmsg+0x813/0xb40 [ 413.889648][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.889677][T16350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.889710][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.889734][T16350] sock_sendmsg_nosec+0x13a/0x180 [ 413.889767][T16350] ____sys_sendmsg+0x54e/0x850 [ 413.889797][T16350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.889830][T16350] ? import_iovec+0x73/0xa0 [ 413.889857][T16350] ___sys_sendmsg+0x2a5/0x360 [ 413.889879][T16350] ? __lock_acquire+0x683/0x2cf0 [ 413.889907][T16350] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.889971][T16350] ? __fget_files+0x2a/0x420 [ 413.889993][T16350] ? __fget_files+0x3a2/0x420 [ 413.890026][T16350] __x64_sys_sendmsg+0x1b1/0x290 [ 413.890053][T16350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.890098][T16350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.890121][T16350] do_syscall_64+0x174/0x580 [ 413.890141][T16350] ? trace_irq_disable+0x3b/0x140 [ 413.890163][T16350] ? clear_bhb_loop+0x40/0x90 [ 413.890191][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.890213][T16350] RIP: 0033:0x7f9e99f9ce59 [ 413.890233][T16350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.890252][T16350] RSP: 002b:00007f9e9af0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.890276][T16350] RAX: ffffffffffffffda RBX: 00007f9e9a215fa0 RCX: 00007f9e99f9ce59 [ 413.890292][T16350] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 413.890306][T16350] RBP: 00007f9e9af0c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.890319][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.890332][T16350] R13: 00007f9e9a216038 R14: 00007f9e9a215fa0 R15: 00007ffc3ca58148 [ 413.890368][T16350] [ 414.318465][T16357] ip6tnl3: entered allmulticast mode [ 414.414479][T16360] FAULT_INJECTION: forcing a failure. [ 414.414479][T16360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.439397][T16360] CPU: 1 UID: 0 PID: 16360 Comm: syz.1.2584 Not tainted syzkaller #0 PREEMPT(full) [ 414.439427][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.439440][T16360] Call Trace: [ 414.439449][T16360] [ 414.439458][T16360] dump_stack_lvl+0xe8/0x150 [ 414.439490][T16360] should_fail_ex+0x40c/0x560 [ 414.439526][T16360] _copy_from_user+0x2d/0xb0 [ 414.439552][T16360] ____sys_sendmsg+0x303/0x850 [ 414.439584][T16360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.439619][T16360] ? import_iovec+0x73/0xa0 [ 414.439646][T16360] ___sys_sendmsg+0x2a5/0x360 [ 414.439669][T16360] ? __lock_acquire+0x683/0x2cf0 [ 414.439696][T16360] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.439763][T16360] ? __fget_files+0x2a/0x420 [ 414.439786][T16360] ? __fget_files+0x3a2/0x420 [ 414.439818][T16360] __x64_sys_sendmsg+0x1b1/0x290 [ 414.439846][T16360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.439891][T16360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.439916][T16360] do_syscall_64+0x174/0x580 [ 414.439940][T16360] ? clear_bhb_loop+0x40/0x90 [ 414.439967][T16360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.439989][T16360] RIP: 0033:0x7f9e99f9ce59 [ 414.440009][T16360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.440028][T16360] RSP: 002b:00007f9e9af0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.440050][T16360] RAX: ffffffffffffffda RBX: 00007f9e9a215fa0 RCX: 00007f9e99f9ce59 [ 414.440066][T16360] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 414.440080][T16360] RBP: 00007f9e9af0c090 R08: 0000000000000000 R09: 0000000000000000 [ 414.440093][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.440106][T16360] R13: 00007f9e9a216038 R14: 00007f9e9a215fa0 R15: 00007ffc3ca58148 [ 414.440141][T16360] [ 414.744305][T16365] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 414.746489][T16362] IPVS: set_ctl: invalid protocol: 26740 97.100.101.100:0 [ 414.753216][T16365] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 414.767881][T16365] 0·: renamed from hsr0 [ 414.799083][T16365] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.813228][T16365] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.824307][T16365] 0·: entered allmulticast mode [ 414.830397][T16365] hsr_slave_0: entered allmulticast mode [ 414.836092][T16365] hsr_slave_1: entered allmulticast mode [ 414.874717][T16369] vlan2: entered promiscuous mode [ 415.611879][T16378] macsec1: left promiscuous mode [ 415.632204][T16378] vlan3: left promiscuous mode [ 415.644644][T16378] geneve3: left promiscuous mode [ 415.709741][ T97] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.729745][ T97] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.756529][ T97] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 41867 - 0 [ 415.774570][ T97] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.797041][ T97] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.819092][ T97] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 41867 - 0 [ 415.856773][ T97] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.865449][ T97] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.875064][ T97] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 41867 - 0 [ 415.970757][ T97] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.989812][ T97] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.999017][ T97] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 41867 - 0 [ 416.096833][T16414] __nla_validate_parse: 7 callbacks suppressed [ 416.096855][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 416.396017][T16416] bridge_slave_1: left allmulticast mode [ 416.405328][T16416] bridge_slave_1: left promiscuous mode [ 416.419584][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.458226][T16416] bridge_slave_0: left allmulticast mode [ 416.477300][T16416] bridge_slave_0: left promiscuous mode [ 416.502970][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.573666][T16416] bond0: (slave bridge0): Releasing backup interface [ 416.616395][ T97] net_ratelimit: 18 callbacks suppressed [ 416.616416][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 416.652658][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2603'. [ 416.663247][T16427] gre1: entered promiscuous mode [ 416.701533][T16426] syzkaller0: entered promiscuous mode [ 416.712021][T16426] syzkaller0: entered allmulticast mode [ 416.875177][T16435] lo speed is unknown, defaulting to 1000 [ 416.886964][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 416.923749][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 417.006772][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 417.128743][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 417.141069][T16452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'. [ 417.246614][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 417.367079][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 417.520626][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 417.539360][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 417.555213][T16468] vlan3: entered promiscuous mode [ 417.657055][ T9203] bond4: (slave gretap0): failed to get link speed/duplex [ 417.766541][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 417.789493][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2618'. [ 417.926877][ T14] bond4: (slave gretap0): failed to get link speed/duplex [ 418.169821][T16488] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 418.243999][T16483] syzkaller1: entered promiscuous mode [ 418.256980][T16483] syzkaller1: entered allmulticast mode [ 419.516624][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2633'. [ 420.857321][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 420.910412][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 420.910614][ T97] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.973650][ T97] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.036095][ T97] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.062610][ T97] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.233696][T16592] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2644'. [ 421.659794][ T97] net_ratelimit: 29 callbacks suppressed [ 421.659819][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 421.743434][T16595] syzkaller0: entered promiscuous mode [ 421.773384][T16595] syzkaller0: entered allmulticast mode [ 421.797933][T16610] TC_ACT_REPEAT abuse ? [ 421.864009][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2649'. [ 421.968141][T16612] vlan2: entered allmulticast mode [ 421.991001][T16612] bond0: entered allmulticast mode [ 422.003436][T16612] bond_slave_0: entered allmulticast mode [ 422.017069][T16612] bond_slave_1: entered allmulticast mode [ 422.030455][T16612] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 422.068366][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 422.165975][ T30] audit: type=1800 audit(1782475239.118:11): pid=16619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2650" name=CB dev="tmpfs" ino=2677 res=0 errno=0 [ 422.207203][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 422.309500][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 422.337612][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 422.476573][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 422.589418][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 422.716393][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 422.848423][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 422.976474][ T6770] bond4: (slave gretap0): failed to get link speed/duplex [ 423.270833][T16651] syzkaller0: entered promiscuous mode [ 423.276924][T16651] syzkaller0: entered allmulticast mode [ 423.501176][T16653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2661'. [ 423.701088][T16658] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2663'. [ 423.736510][T16662] x_tables: duplicate underflow at hook 1 [ 423.817344][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'. [ 423.830214][T16658] syzkaller1: entered promiscuous mode [ 423.847468][T16658] syzkaller1: entered allmulticast mode [ 423.856764][T16662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2665'. [ 423.857728][T16670] netlink: 'syz.0.2667': attribute type 8 has an invalid length. [ 423.879159][T16662] netlink: 'syz.3.2665': attribute type 1 has an invalid length. [ 423.964811][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2668'. [ 424.062515][T16679] netlink: 2780 bytes leftover after parsing attributes in process `syz.0.2669'. [ 424.214725][T16682] batman_adv: batadv0: Removing interface: dummy0 [ 424.268497][T16682] bond1: (slave veth0_to_bond): Releasing backup interface [ 424.334603][T16682] bond0: (slave bond_slave_0): Releasing backup interface [ 424.361841][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2671'. [ 424.379368][T16682] bond_slave_0: left allmulticast mode [ 424.433178][T16682] bond0: (slave bond_slave_1): Releasing backup interface [ 424.478529][T16682] bond_slave_1: left allmulticast mode [ 424.495037][T16688] can: request_module (can-proto-0) failed. [ 424.505963][T16682] team0: Port device team_slave_0 removed [ 424.531343][T16682] team0: Port device team_slave_1 removed [ 424.544847][T16682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.563669][T16682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.695701][T16724] sctp: [Deprecated]: syz.2.2677 (pid 16724) Use of int in max_burst socket option. [ 425.695701][T16724] Use struct sctp_assoc_value instead [ 425.910557][T16728] syzkaller0: entered promiscuous mode [ 425.945697][T16728] syzkaller0: entered allmulticast mode [ 425.961517][T16733] netlink: 'syz.3.2679': attribute type 5 has an invalid length. [ 426.493400][T16748] syzkaller0: entered promiscuous mode [ 426.512178][T16748] syzkaller0: entered allmulticast mode [ 426.522686][T16752] __nla_validate_parse: 1 callbacks suppressed [ 426.522708][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2684'. [ 426.709906][ T9210] net_ratelimit: 25 callbacks suppressed [ 426.709929][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 426.794124][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 426.857388][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 426.922038][T16766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2688'. [ 426.976873][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 427.011183][T16769] xt_hashlimit: size too large, truncated to 1048576 [ 427.108139][ T6770] bond4: (slave gretap0): failed to get link speed/duplex [ 427.172868][T16769] xt_check_match_common: 23 callbacks suppressed [ 427.172971][T16769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 427.335262][T16779] bond6: Removing last ns target with arp_interval on [ 427.462388][T16774] bond7: Removing last ns target with arp_interval on [ 427.503595][T16787] SET target dimension over the limit! [ 427.604898][T16774] bond8: Removing last ns target with arp_interval on [ 427.656451][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 427.674669][T16801] can: request_module (can-proto-0) failed. [ 427.847236][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 429.717285][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 430.287825][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 430.364528][T16830] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 430.395368][T16828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2702'. [ 430.401961][T16830] bond6: entered promiscuous mode [ 430.410384][T16830] bond6: entered allmulticast mode [ 430.416072][T16830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.427621][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 430.490160][T16830] macvlan2: entered promiscuous mode [ 430.495611][T16830] macvlan2: entered allmulticast mode [ 430.508342][T16830] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.571077][T16835] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 430.638414][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 430.717615][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 430.731607][T16843] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 430.766495][ T9210] bond4: (slave gretap0): link status up again after 0 ms [ 430.807047][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.888247][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.984406][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 431.056524][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 431.135411][T16869] can: request_module (can-proto-0) failed. [ 431.155400][T16872] syzkaller1: entered promiscuous mode [ 431.161679][T16872] syzkaller1: entered allmulticast mode [ 431.171728][T16872] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2717'. [ 431.181086][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 431.698241][T16893] FAULT_INJECTION: forcing a failure. [ 431.698241][T16893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.712452][T16893] CPU: 0 UID: 0 PID: 16893 Comm: syz.3.2726 Not tainted syzkaller #0 PREEMPT(full) [ 431.712483][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.712497][T16893] Call Trace: [ 431.712506][T16893] [ 431.712514][T16893] dump_stack_lvl+0xe8/0x150 [ 431.712549][T16893] should_fail_ex+0x40c/0x560 [ 431.712586][T16893] _copy_to_user+0x31/0xb0 [ 431.712612][T16893] simple_read_from_buffer+0xe1/0x170 [ 431.712641][T16893] proc_fail_nth_read+0x1bb/0x230 [ 431.712668][T16893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.712694][T16893] ? rw_verify_area+0x24a/0x4c0 [ 431.712722][T16893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.712744][T16893] vfs_read+0x213/0xa80 [ 431.712775][T16893] ? __pfx___mutex_lock+0x10/0x10 [ 431.712798][T16893] ? __pfx_vfs_read+0x10/0x10 [ 431.712825][T16893] ? __fget_files+0x2a/0x420 [ 431.712852][T16893] ? __fget_files+0x3a2/0x420 [ 431.712887][T16893] ? __fget_files+0x2a/0x420 [ 431.712929][T16893] ksys_read+0x150/0x270 [ 431.712957][T16893] ? __pfx_ksys_read+0x10/0x10 [ 431.712992][T16893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.713016][T16893] do_syscall_64+0x174/0x580 [ 431.713038][T16893] ? clear_bhb_loop+0x40/0x90 [ 431.713065][T16893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.713087][T16893] RIP: 0033:0x7f5b6315d68e [ 431.713107][T16893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.713126][T16893] RSP: 002b:00007f5b640dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.713150][T16893] RAX: ffffffffffffffda RBX: 00007f5b640dd6c0 RCX: 00007f5b6315d68e [ 431.713165][T16893] RDX: 000000000000000f RSI: 00007f5b640dd0a0 RDI: 0000000000000005 [ 431.713178][T16893] RBP: 00007f5b640dd090 R08: 0000000000000000 R09: 0000000000000000 [ 431.713200][T16893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.713213][T16893] R13: 00007f5b63416038 R14: 00007f5b63415fa0 R15: 00007ffdb9106ac8 [ 431.713249][T16893] [ 431.916621][ T6773] net_ratelimit: 10 callbacks suppressed [ 431.916669][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 432.031595][T16902] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 432.062772][ T6770] bond4: (slave gretap0): failed to get link speed/duplex [ 432.171787][T16912] tipc: Enabling of bearer rejected, already enabled [ 432.207110][ T6770] bond4: (slave gretap0): failed to get link speed/duplex [ 432.262971][T16917] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2732'. [ 432.316666][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 432.375300][T16921] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 432.383337][T16921] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 432.426439][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 432.465772][T16925] ipt_rpfilter: unknown options [ 432.556379][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 432.676539][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 432.762934][T16941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2740'. [ 432.796437][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 432.916739][ T10] block nbd0: Possible stuck request ffff888026ade000: control (read@0,1024B). Runtime 180 seconds [ 432.966503][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 433.017026][T16944] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2740'. [ 433.116866][ T9210] bond4: (slave gretap0): failed to get link speed/duplex [ 433.279346][T16948] can: request_module (can-proto-0) failed. [ 433.420532][T16956] netlink: 'syz.2.2743': attribute type 13 has an invalid length. [ 433.485654][T16956] netlink: 'syz.2.2743': attribute type 17 has an invalid length. [ 433.509325][T16956] netlink: 'syz.2.2743': attribute type 27 has an invalid length. [ 433.758274][T16966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2746'. [ 433.920124][T16970] sit2: entered promiscuous mode [ 434.420274][T16989] syzkaller0: entered promiscuous mode [ 434.431103][T16989] syzkaller0: entered allmulticast mode [ 434.516714][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 434.582266][T16997] netlink: 'syz.2.2755': attribute type 12 has an invalid length. [ 434.679052][T16999] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2756'. [ 434.700869][T16999] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2756'. [ 434.896179][T17004] macsec0: entered promiscuous mode [ 434.924305][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 434.957087][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 434.989589][T17003] dvmrp0: entered allmulticast mode [ 435.056112][T16997] macsec0 (unregistering): left promiscuous mode [ 435.133925][T17010] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2759'. [ 435.236966][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 435.509281][T17025] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 435.523840][T17027] vlan3: entered promiscuous mode [ 435.547612][T17022] can: request_module (can-proto-0) failed. [ 435.641783][T17025] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.991305][T17044] syzkaller0: entered promiscuous mode [ 436.010418][T17044] syzkaller0: entered allmulticast mode [ 436.812103][T17071] syzkaller1: entered promiscuous mode [ 436.834677][T17071] syzkaller1: entered allmulticast mode [ 436.961260][T17074] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 436.991713][ T6759] net_ratelimit: 27 callbacks suppressed [ 436.991735][ T6759] bond4: (slave gretap0): failed to get link speed/duplex [ 437.353690][T17095] xt_hashlimit: size too large, truncated to 1048576 [ 437.379383][T17095] xt_hashlimit: max too large, truncated to 1048576 [ 437.509422][T17074] bond9: entered promiscuous mode [ 437.515114][T17074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.544762][T17099] netlink: 'syz.3.2779': attribute type 9 has an invalid length. [ 437.553278][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 437.736611][T17102] syzkaller0: entered promiscuous mode [ 437.751534][T17102] syzkaller0: entered allmulticast mode [ 437.757968][T17107] __nla_validate_parse: 9 callbacks suppressed [ 437.757988][T17107] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2782'. [ 437.797393][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 437.920324][T17115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2784'. [ 437.939054][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 438.064276][T17112] can: request_module (can-proto-0) failed. [ 438.081582][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 438.128370][T17119] team0: Port device dummy0 removed [ 438.151879][T17119] batman_adv: batadv0: Adding interface: dummy0 [ 438.163165][T17119] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.195726][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 438.201612][T17119] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 438.216635][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 438.260179][T17129] xt_hashlimit: max too large, truncated to 1048576 [ 438.274257][T17129] xt_ecn: cannot match TCP bits for non-tcp packets [ 438.293815][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 438.360205][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 438.517219][ T6836] bond4: (slave gretap0): failed to get link speed/duplex [ 438.610111][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 438.656987][T17140] vlan3: entered promiscuous mode [ 438.738589][ T6836] bond4: (slave gretap0): failed to get link speed/duplex [ 438.857132][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 438.941812][T17145] geneve3: entered promiscuous mode [ 438.967984][ T6836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 59294 - 0 [ 438.996611][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 438.997781][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 439.015399][ T6836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 59294 - 0 [ 439.024512][ T6836] bond4: (slave gretap0): failed to get link speed/duplex [ 439.038745][ T6773] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 59294 - 0 [ 439.058408][ T6773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 59294 - 0 [ 439.257153][T17157] [ 439.261096][T17157] ============================= [ 439.266026][T17157] WARNING: suspicious RCU usage [ 439.271467][T17157] syzkaller #0 Not tainted [ 439.275962][T17157] ----------------------------- [ 439.281674][T17157] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 439.291191][T17157] [ 439.291191][T17157] other info that might help us debug this: [ 439.291191][T17157] [ 439.302036][T17157] [ 439.302036][T17157] rcu_scheduler_active = 2, debug_locks = 1 [ 439.310878][T17157] 1 lock held by syz.2.2794/17157: [ 439.316102][T17157] #0: ffffffff8e959e18 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 439.328752][T17157] [ 439.328752][T17157] stack backtrace: [ 439.334688][T17157] CPU: 0 UID: 0 PID: 17157 Comm: syz.2.2794 Not tainted syzkaller #0 PREEMPT(full) [ 439.334715][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.334727][T17157] Call Trace: [ 439.334736][T17157] [ 439.334745][T17157] dump_stack_lvl+0xe8/0x150 [ 439.334777][T17157] lockdep_rcu_suspicious+0x13f/0x1d0 [ 439.334806][T17157] get_callchain_entry+0x2b6/0x3c0 [ 439.334863][T17157] get_perf_callchain+0xd5/0x880 [ 439.334886][T17157] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.334926][T17157] ? __pfx_get_perf_callchain+0x10/0x10 [ 439.334953][T17157] ? __schedule+0x17ef/0x56c0 [ 439.334993][T17157] __bpf_get_stack+0x3e9/0xa70 [ 439.335028][T17157] ? __pfx___bpf_get_stack+0x10/0x10 [ 439.335049][T17157] ? __resched_curr+0x23e/0x530 [ 439.335075][T17157] ? __lock_acquire+0x683/0x2cf0 [ 439.335101][T17157] bpf_get_stack+0x33/0x50 [ 439.335122][T17157] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 439.335143][T17157] bpf_get_stack_raw_tp+0x1a4/0x210 [ 439.335181][T17157] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 439.335203][T17157] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 439.335238][T17157] bpf_prog_test_run_syscall+0x324/0x4c0 [ 439.335269][T17157] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 439.335294][T17157] ? __fget_files+0x2a/0x420 [ 439.335320][T17157] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 439.335348][T17157] bpf_prog_test_run+0x2c5/0x340 [ 439.335387][T17157] __sys_bpf+0xa22/0xd90 [ 439.335416][T17157] ? __pfx___sys_bpf+0x10/0x10 [ 439.335442][T17157] ? do_futex+0x458/0x4e0 [ 439.335511][T17157] ? rcu_is_watching+0x15/0xb0 [ 439.335545][T17157] __x64_sys_bpf+0xba/0xd0 [ 439.335577][T17157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.335602][T17157] do_syscall_64+0x174/0x580 [ 439.335620][T17157] ? trace_irq_disable+0x3b/0x140 [ 439.335641][T17157] ? clear_bhb_loop+0x40/0x90 [ 439.335668][T17157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.335698][T17157] RIP: 0033:0x7f93f099ce59 [ 439.335717][T17157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.335736][T17157] RSP: 002b:00007f93f17d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 439.335759][T17157] RAX: ffffffffffffffda RBX: 00007f93f0c15fa0 RCX: 00007f93f099ce59 [ 439.335774][T17157] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 439.335788][T17157] RBP: 00007f93f0a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 439.335802][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.335815][T17157] R13: 00007f93f0c16038 R14: 00007f93f0c15fa0 R15: 00007ffdb7749eb8 [ 439.335848][T17157] [ 439.967318][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.647759][ T6836] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.693295][ T6836] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59294 - 0 [ 440.900166][ T5630] bond5: (slave syz_tun): Releasing active interface [ 440.958456][ T6836] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.973624][ T6836] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59294 - 0 [ 441.036846][ T6836] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.047291][ T6836] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59294 - 0 [ 441.127108][ T6836] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.137018][ T6836] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59294 - 0 [ 441.235030][ T6836] vlan2: left allmulticast mode [ 441.240725][ T6836] geneve0: left allmulticast mode [ 441.247129][ T6836] vlan2: left promiscuous mode [ 441.252071][ T6836] geneve0: left promiscuous mode [ 441.259482][ T6836] bridge0: port 3(vlan2) entered disabled state [ 441.272619][ T6836] bridge_slave_1: left allmulticast mode [ 441.278556][ T6836] bridge_slave_1: left promiscuous mode [ 441.286122][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.295941][ T6836] bridge_slave_0: left allmulticast mode [ 441.302573][ T6836] bridge_slave_0: left promiscuous mode [ 441.308487][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.328088][ T6836] vlan1: left allmulticast mode [ 441.339131][ T6836] vlan1: left promiscuous mode [ 441.344434][ T6836] bridge4: port 1(vlan1) entered disabled state [ 441.364205][ T6836] pimreg9: left allmulticast mode [ 441.539053][ T6836] bond3 (unregistering): (slave gretap1): Releasing active interface [ 441.589093][ T6836] batman_adv: batadv0: Removing interface: vlan0 [ 441.721062][ T6836] bond1 (unregistering): Released all slaves [ 441.737171][ T6836] bond2 (unregistering): Released all slaves [ 441.753656][ T6836] bond0 (unregistering): Released all slaves [ 441.775586][ T6836] bond3 (unregistering): Released all slaves [ 442.136796][ T9206] net_ratelimit: 14 callbacks suppressed [ 442.136820][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 442.257029][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 442.386417][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 442.405438][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 442.500342][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 442.622680][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 442.727017][ T6836] hsr_slave_0: left promiscuous mode [ 442.733396][ T6836] hsr_slave_1: left promiscuous mode [ 442.741983][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.155807][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 443.176699][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 443.306509][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 443.422933][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 443.563175][ T9209] bond4: (slave gretap0): failed to get link speed/duplex [ 443.676903][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 443.687190][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 443.744404][ T6836] IPVS: stop unused estimator thread 0... [ 444.102201][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 446.765719][ T4992] udevd[4992]: worker [5727] /devices/virtual/block/nbd0 timeout; kill it [ 446.776004][ T4992] udevd[4992]: seq 15795 '/devices/virtual/block/nbd0' killed [ 447.206728][ T9203] net_ratelimit: 31 callbacks suppressed [ 447.206752][ T9203] bond4: (slave gretap0): failed to get link speed/duplex [ 447.326547][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 447.436539][ T6773] bond4: (slave gretap0): failed to get link speed/duplex [ 447.560238][ T97] bond4: (slave gretap0): failed to get link speed/duplex [ 447.676595][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 447.786785][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 447.896799][ T9206] bond4: (slave gretap0): failed to get link speed/duplex [ 448.007113][ T9203] bond4: (slave gretap0): failed to get link speed/duplex [ 448.126496][ T9203] bond4: (slave gretap0): failed to get link speed/duplex [ 448.237058][ T97] bond4: (slave gretap0): failed to get link speed/duplex