last executing test programs: 1m35.467069326s ago: executing program 0 (id=2871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@multiport={{0x50}, {0x1, 0x3, [0x4e23, 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e21], [0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x88, 0x1, 0x7a84, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb81, 'syz1\x00', {0xfffffffffffffff9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x380) 1m34.829898737s ago: executing program 0 (id=2874): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000540)=0x800, 0x4) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x11150}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x763}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5b}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) 1m33.136790521s ago: executing program 0 (id=2879): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) socket$inet(0x2, 0x2, 0x5) 1m31.644410143s ago: executing program 0 (id=2890): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900018073797a3000000000580000000c0a01020000000000000000010000000900020073797a32000000002c0003802800008008000640000000001c000b801800018007000100637400000c00028008000140000000000900010073797a3000000000140000001000010000000800000000000000000a"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010fb00000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000012c0), 0xc, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001300)=""/13, 0xd}, {&(0x7f0000001480)=""/134, 0x86}, {&(0x7f0000001400)=""/22, 0x16}, {&(0x7f0000001540)=""/10, 0xa}, {&(0x7f0000001580)=""/40, 0x28}, {&(0x7f00000015c0)=""/129, 0x81}, {&(0x7f0000001680)=""/32, 0x20}], 0x8, &(0x7f0000001740)=[{0x78, 0x0, 0x0, ""/103}, {0x78, 0x0, 0x0, ""/99}, {0x18, 0x0, 0x0, ""/1}], 0x108, 0x10120}, 0x38, 0x100) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 1m30.051552767s ago: executing program 0 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000), 0xc) writev(r4, &(0x7f0000000440)=[{&(0x7f00000004c0)="2e94", 0x2}], 0x1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000)=0xfffff800, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x43, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xffffffffffffffa6, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x80000084, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='K', @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004800900010071797a16bd"], 0x94}}, 0x0) 1m26.558672681s ago: executing program 3 (id=2906): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) (async, rerun: 64) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (rerun: 64) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 32) accept(r0, 0x0, 0x0) 1m25.923362592s ago: executing program 3 (id=2908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095000000000018200000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4000}, 0x4008051) 1m25.430450621s ago: executing program 3 (id=2911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x15, 0x3, 0x200009) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xfff3}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x24082000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, 0x1403, 0x300, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2}, 0x840) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$rds(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)=""/177, 0xb1}, {&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/164, 0xa4}], 0x3, &(0x7f00000003c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_dest={0x53, 0x114, 0x2, {0x44, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x1e7e}, &(0x7f0000000280)=0x400, &(0x7f0000000300)=0x8e22, 0x9, 0x53d, 0x8, 0xfffffffffffffffb, 0x4, 0x6}}], 0x88, 0x4010}, 0x4004094) 1m24.699252086s ago: executing program 1 (id=2914): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="182300000000002e000000950000001a00000010000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x28, r4, 0x1, 0x0, 0x20000300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x28}}, 0x10010) 1m24.237008898s ago: executing program 2 (id=2915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xf, 0x0, &(0x7f0000000180)="e0b9547e9387dbe9005bec19c0af57", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.22717336s ago: executing program 3 (id=2916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@multiport={{0x50}, {0x1, 0x3, [0x4e23, 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e21], [0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1, 0x7a84, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb81, 'syz1\x00', {0xfffffffffffffff9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x380) (fail_nth: 1) 1m24.057976604s ago: executing program 1 (id=2917): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0x10, 0x803, 0x0) accept4(r5, &(0x7f0000000280)=@nl, &(0x7f0000000200)=0x80, 0xa5df2de2f9b0757f) (async) r6 = accept4(r5, &(0x7f0000000280)=@nl, &(0x7f0000000200)=0x80, 0xa5df2de2f9b0757f) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r7 = socket$tipc(0x1e, 0xeb3093780201f306, 0x0) listen(r7, 0x0) poll(&(0x7f0000000380)=[{r7, 0x2}], 0x1, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14208003}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000129bd7000fcdbdf25052908000000001300000100442f030000000c00030001000080000000000c0004000900000000000000440404000600000000000000080001001000009b02fafdc03c0b2500000000000c000300af1b0000000000000c0003ffffffff00000000000c000300000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14208003}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000129bd7000fcdbdf25052908000000001300000100442f030000000c00030001000080000000000c0004000900000000000000440404000600000000000000080001001000009b02fafdc03c0b2500000000000c000300af1b0000000000000c0003ffffffff00000000000c000300000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r8 = socket(0x2d, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='gpu_mem_total\x00', r9, 0x0, 0x20a}, 0x18) write$nbd(r8, &(0x7f00000005c0)={0x67446698, 0x0, 0x0, 0x2, 0x4, "a3c5cbcb76b7a2"}, 0x17) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0003000000030000002a437cad929190e728460aef386c5a8a1f69bc2af666d14159f4aedbc1ea78760cd1edf24f289d751d48c33000c83e6b40b3365243dfb23104fef11e34c6f8ad9c9f334c8192029891fb7a8eb195c0196be48724e06d012dbf74f4f46a222ee57847e67bd42351f211cf839cdf26a14b"], 0x40}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 1m23.197183415s ago: executing program 2 (id=2918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={r1, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, 0x8) 1m22.494775338s ago: executing program 3 (id=2920): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xa, 0x4, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x13, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="660a00fd3ca849f36d6ff900001000"/26], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000070000004ea86c3a0000000095000000b5e39aac691c452dcc6d00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYBLOB="0303fdfffffffcffffff0c00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="806be8489e7d5676eef0b3a873d2d0764e99bb995eda67781ad9a7975924eee67feed699d5063ab674557007b0e97838b3c3f668f474f9d00b6ad6d2be6c1c07f4ac86ec48edac64231f438c8737c4b0870a", @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESDEC=r5], 0xe0}], 0x1, 0x0, 0x0, 0x20000881}, 0x0) r6 = socket(0xa, 0x3, 0x3a) recvmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000015c0)=""/104, 0x68}], 0x1}, 0x8}], 0x1, 0x10120, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r9, &(0x7f0000001040)="8149", 0x2, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) 1m22.273167632s ago: executing program 1 (id=2922): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x91}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) 1m22.009612104s ago: executing program 2 (id=2923): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000000) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)={0x4a8, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x481, 0xb, 0x0, 0x1, [@generic="01d83913867e10e9085c1b69d67e927e1527b486212a0d5b3c050505894d9b119a9c3086822721a8d70641e883083c1a38624ff7e639318f558bdebe4bf423961ba9ed7add646e9caf9da5d20380a37b3bac4bb8bde242ce17b61c5541dbfeaaf0cded5bc4e281e38154c70df69dbba5ed0c86ed8a9055eb2aab5d0bdb8af773a959a04db339a53eb5a7f3708c51b9a7c465bec1f20f6f52ecd20b95d5022cf84b3ab70d885ea4feca5c25b648c5648949a46789964b910332dd7c2d034e7c25ad4b6e29ed", @nested={0x7d, 0x11a, 0x0, 0x1, [@typed={0x11, 0x11a, 0x0, 0x0, @str='{@\\%.]-&^\xb1-:\x00'}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r1}, @typed={0x8, 0xd0, 0x0, 0x0, @str='{*6\x00'}, @nested={0x4, 0xe9}, @typed={0x5, 0x10a, 0x0, 0x0, @str='\x00'}, @generic="b1751ac8a15d015e478384af15d8217012a749eb9cf2860d7126931c44b79317f8848e5885b35baa8f334f2dc8eb122585e665a660", @nested={0x4, 0x115}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r3}]}, @nested={0x335, 0xcd, 0x0, 0x1, [@generic="727987a82c048b0560a6ffddd3f00e7f7921f3f6707c6a8cae", @typed={0x8, 0x5b, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x9}, @generic="bd933fc266666a9720511703845666d5928966065e5fe8643c96ad98f2519e678bb07cdba9da96301f77fc3df40bc1ca46b42568f5a578d1191cfeb8a17a22866fd4af8c1195301f08086674b436dfb1635f6e76e1849a2b474bfa", @generic="e8fffbff2473feb8acec2d2f2705f0cf8aa8ea88ccda102ecfd4dd49478c1f604061b88c60b281bfd2da40589021729dada5d27a7869e25376b4e6f01b1c835084221e0197a66abe9fda936eb14e366f4c9298f79bd3e69e7caf935748dc376e66338e2897ea6fa448697822bb2bc08bd1aa69302367c383d2dce99d793e1bc64882cab058", @typed={0x29, 0x34, 0x0, 0x0, @binary="b9ebfbe84d4c4b97ae25462ceec67bac93f7036ed930eab8c33791d8947ba994000df97225"}, @nested={0x1fb, 0x18, 0x0, 0x1, [@generic, @nested={0x12c, 0x93, 0x0, 0x1, [@nested={0x4, 0x30}, @generic="a841da2c81fbdf129c5c59542fe5c0c142016e94a0adedf4a0325d37777c7a35237d19803aba54905347aa969e06dfce8b2748e272221113143f45d1064f53fae52fc6190bf743644afa7cac1a2175d1e1ca0a99f9a4b2564a8b24766124a3951f33bf13cfc2cd56c7732ed31205cfec167f", @nested={0x4, 0xad}, @generic="ee060eac192f02ee9827b9eee6f48a9fbf3040d0a329f72e5e8d57e7477ae0ec1254699e6f3cf06a2ec7d4d09d2372062ffdfc5f8281ad92ce07035cb5749bd2068578b20e5c78022685cd79ee14ff6394a32b7c89ae23623ea5479290e812e7d3422ce0c8fc24a6a4a351f2065e1fa2bf91d27d2fc672a0974c615c2a8a5a31dd23", @typed={0xc, 0x142, 0x0, 0x0, @u64}, @nested={0x4, 0xe6}, @typed={0xd, 0x1f, 0x0, 0x0, @str='netdevsim'}, @typed={0xa, 0x134, 0x0, 0x0, @str='-(-*-\x00'}]}, @generic="b8ac6f023aa1ab2be1a3254cc90695b00352db712f9c70a707da3cae1508424cfb49590aa96946483011656f2db0f98974d56b48288210298cc62dd22c6d81289d18a2987c7edac2773c5360ca833211fb4767368a9a3d383ffbe51bca5cefb1620cd5556cae828ab5489b53d2a497a323d9e16b9ffa0a5e0df1cdc4f52e2ffb2d2c7cbff6519c8628d990", @nested={0x4, 0xbc}, @generic="bb6c40d5454dd36160a127c0e5aa5e116a4671a087c346917fbfd4f2733634c722342ffbb7a400be37f284d5fb7723b37ec206005d86744bb84e8481"]}]}]}]}, 0x4a8}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) close(0x3) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x20) 1m22.001629525s ago: executing program 1 (id=2924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000044) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000"], 0xfdef) 1m21.464674836s ago: executing program 2 (id=2926): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r3, &(0x7f00000002c0)="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", 0xfc) (async) write(r3, &(0x7f00000002c0)="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", 0xfc) 1m19.723230985s ago: executing program 2 (id=2927): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x179}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) 1m19.329492856s ago: executing program 4 (id=2929): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/237, 0x46, 0xed, 0x9}, 0x28) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) 1m19.096650562s ago: executing program 2 (id=2930): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x34, 0x3e, 0x10b, 0x70bd2a, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0xc, 0xc3, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x99}]}, @nested={0x4, 0x28}, @typed={0x8, 0x133, 0x0, 0x0, @fd}, @typed={0x8, 0x6f, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x28000600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x79e7469dcf10f3e}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/223, 0xdf}, {0x0}], 0x2}, 0x80000001}, {{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/114, 0x72}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000002040)=""/261, 0x105}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001d40)=""/221, 0xdd}, {&(0x7f0000001e40)=""/246, 0xf6}, {&(0x7f00000017c0)=""/182, 0xb6}], 0xd, &(0x7f0000001ac0)=""/198, 0xc6}, 0x3}], 0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xe9, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0xe9, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe4"}}}}}}}}, 0x123) 1m18.969654904s ago: executing program 4 (id=2931): write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000d80)={0x0, 0x1039000, 0x800, 0xb0, 0xed75d9a3c528c222}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m18.785626456s ago: executing program 4 (id=2932): bpf$MAP_CREATE(0x7ffffffe, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) 1m18.686470391s ago: executing program 4 (id=2933): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2a, "ea71e4c7957ef54fd7dd0ad87dd58baf89867de56cf40d97c92730f11fa3d50829bed46fa80bb29e14d8"}, &(0x7f0000000040)=0x32) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0xfffffffa}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x8000804}, 0x801) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffff05c}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004081}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x0, @mcast1, 0xd645}, @in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0xd640}], 0x38) connect$phonet_pipe(r2, &(0x7f0000000340)={0x23, 0x6, 0x3, 0xf7}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x2b, @private=0xa010100, 0x4e20, 0x0, 'lc\x00', 0x24, 0x1, 0x42}, 0x2c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x8004) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000540)={r5, r6/1000+60000}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'hsr0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x7, 0x0}, 0x8) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x0, r4}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x8, 0x7fffffff, 0x2, 0x9, 0x4, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000580)=@raw=[@jmp={0x5, 0x0, 0x2, 0x2, 0xb, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @generic={0x8b, 0x2, 0xc, 0x3, 0x7}], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd4, &(0x7f0000000600)=""/212, 0x40f00, 0x2, '\x00', r7, @fallback=0x1, r8, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x8, 0xfffffff4, 0x2}, 0x10, r9, r10, 0x7, &(0x7f0000000980)=[0x1, r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x0, 0x5, 0xf, 0xa}, {0x0, 0x2, 0x10, 0x3}, {0x1, 0x7b70, 0x10, 0x8}, {0x0, 0x4, 0x9, 0x6}, {0x5, 0x1, 0xf, 0x1}, {0x4, 0x5, 0x5, 0x4}, {0x5, 0x1, 0xa, 0xc}], 0x10, 0x800}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r13, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r14, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xc6, 0x47}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x824) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000dc0)=0x4009, 0x4) pipe(&(0x7f0000000e00)) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) 1m18.446703129s ago: executing program 4 (id=2934): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc014}, 0x20004840) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) bind$tipc(r1, 0x0, 0x0) 1m18.051670501s ago: executing program 4 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x4, 0xc, 0x2000000, 0x966f, 0x3}, &(0x7f0000000000)=0x98) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x2, 0x5, 0x2, 0xa, 0xd, 0x4, 0x4, 0x2, 0xf, 0xd, 0x8, 0x3, 0xb, 0x86, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x4, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x8f5, 0x2, 0xc, 0x40, 0x7, 0x8, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 1m17.03800668s ago: executing program 0 (id=2936): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "040000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) 1m16.61616875s ago: executing program 1 (id=2937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000045c6be22f48653cc068d89e8219703636bcfa50a3ea78cb66d6dc5596c344ddcf0422a88f302ff128c10bb2bcccf0f4cfaab869f53"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = accept(r1, &(0x7f0000000800)=@ax25={{0x3, @rose}, [@null, @null, @rose, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000880)=0x80) sendmmsg$alg(r2, &(0x7f0000002e00)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)="d68870066c23b20affedbf3c4b98d81250668ab750c49972c851ad3e4d62742f346ba50b6272d384b9c70e33e9d39bbfe76681ddbe7f0209f2a827dc9ecfc7d73251b320e52eb9e73c18437d173743435972efd75823ebaa56e4e4320717380b089aade078280bd364db66f029fb9b29c93175a65d7af501d1dd18759298038abc1ccb8bd966a53ba522976e512fb0b928e2a2dea6c5f45411e904fb3c35a7dc3d199675762f9e6041a7", 0xaa}, {&(0x7f0000000980)="2599fb0c1dc12b1589d947ade8c617f7f918c35f7581e405d9d625e308cefd6b94787c2847c4065e4a2df195a12acd3f46789e87d484bdeed54918f9c6814b4a273c8593e1d4a19ddb1d5f44eca073de4a93034562e7c30ac1d6ffdf88a0554e5867a1fe03e40ef696117b", 0x6b}, {&(0x7f0000000a00)="6cfddadb68337d556380a33fd1deea6f667ac2de4167016f01dac04710d5ae446a9e312322e8ef1b1f4346d4455e33b92b9fa9e3ce238cf6d3cd257ed84a1f91fd5800bd41f6cbfdf54ed665ea8a8ea4bdbe15b4a04da72d7aaabf3a462b2a5774327caeb3ceb6adca20746a9e16216b2c119dfb45f1e35774a66c2a2e9d3cb1", 0x80}, {&(0x7f0000000a80)="f6c8a99acec4a1310efce74e5faebf8c4826ec341a7a9f81af4068635c532ab2b71d59bd480a9a2935e36d212a58ecfbb58ab5d2c741a08dc95aa29e475e413eb27b0bccd8f6151388066af21cfd124702194de4692f355d840d00a06ddc3e5308dbca39de67e46df8ddfac7871e22f904274e4bf1767f1db005b9671dc81288b355f604606af8", 0x87}, {&(0x7f0000000b40)="45cf606f103daa22a8d03a75e514026b9e2c727c83640c", 0x17}], 0x5, 0x0, 0x0, 0xc000}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c00)="c3313f554fb2dcb204e7f7a9ae510f2e54ba56939262f6802f7dc50a5cdd9631130ea880834dbae7482d3b38ccf21f3244e90cf3b38fec7e43f30e3a5d4047cd3c961a4f936b4a227e5d473dfe09fbd9742d97a5043ca260536647e1bac8d679ca4f3b987227e78cdb65e1cb8166c6f89750c09a1593", 0x76}, {&(0x7f0000000c80)="131ccf53864fc5dc814fce64a6858f2b06c08696bdf0ef8672a7815ea0a745c96e7c390c988df2f8da5daeaa7fbb0a679af06fed5932ba243f33e35ae05fd4bdc6b5ccf4d801d74f14f88c64f4f1bdb4a5c5c1df", 0x54}, {&(0x7f0000000d00)="bd649dcf2ff6505542930d8764895d8b04db9cba0abeb525f990b8709d9fb688db31f72c8e284a2e2dfc322078bca4bfeaa00e529eb307558537", 0x3a}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="e09bdc8cb9e17192eb4b8867682e85165a31d074e1906fabc48f7b8eef3beb62afe731474b547e5f4880ec67a697cec25f9b3edcd709749eef176d0d9bd28e4a8bb1e7929aead222e2998a9c459c091de32ba0c3429628f59727b6eef301f14cb66174b31bb8e62461ac3456b406964af4afd0bf4903d897ffd09183aa5ed7d75a5a7b518deed72064495e00c29e989b0fea99ad5b8ea6ab4e16225510", 0x9d}, {&(0x7f0000001e00)="499b0b0de8ed9da2d9364988a83e2fb4052184bede976a286114f23296a7dc522a7f3bcac43f3589c3eb8400f9404c379ed642f49edeec7e4c65fde8808013cbe80f32a184397f2e4dae1dd057a57eb27aae0c0cc28491d29c1851e45c815d4e4e6335eada74612084e17e5a05a8f40ece933c7bf23d1a033ef0dae9cdf3f355b271ecb76cabf423b18bcc6f83f6ad9db2f970dc48ec379c762da40b35a322cde0b8cc916ff6fb18da6fe6be0e0d7587a5130c62934363e744d0d5f51a1bf546534b80d29d8c", 0xc6}], 0x6, &(0x7f0000001f80)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x68, "b15b0fafe8648bd1ae61fc1b760b6c49b717b5c003f693f68b3e6771fe6383e4f84b9b7fe4d1ae7b877782e5ac2419a5908e4416c017da698398db1c5a5a3620e94f2479b9d34107a25d40718e61594b927058e8cfba7121958a3239da27de0ebb9005109c15030e"}, @iv={0x40, 0x117, 0x2, 0x27, "f7e91ff6cf9804c36f2c6c9e3477a06d014ec4d7fdc2ffdec057e6f7d91a4af03042f96b60949c"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x168, 0x8000}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002100)="4cc9765c76a8a722072dbe33b0e903e6cf0ee1d54f8b6e778795f506c8882edc7c3284c16debe7497cc8573761997fb87139ab562282a0c54305d54e32cd383e23a031507823c061620c38c9b15bd843f5e66f215b26f0a9330ac8f9dcfb178efb5a940efd3bf84d14e0e7a72e22ce9fc9224017ef4f0498", 0x78}, {&(0x7f0000002180)="dbe5261c296eb7", 0x7}, {&(0x7f00000021c0)="23a8eebb419a27b6fa05b318cbb63af94fcf76131c444afc59cf6ddad852960d1031d76532e29240ea6c791948f8f0e4ad8a6816b62e1fda64115eb39ba990c1c1a544ad9d7ae71be6c53cfc82fbc03c780f37b274a09c3528480024278d1f6c74ee2190d689f5b150a8e4015a3fe4581cec2b3b967986d3b7fb55e517a1d7f918982ec8ee998205f721daf95f955e6ba94a2b5b865b0be1cdba5a8b4dc05c845c98", 0xa2}, {&(0x7f0000002280)}], 0x4, &(0x7f0000002300)=[@iv={0xa0, 0x117, 0x2, 0x8a, "5ed981d224a2d5c2bedee8dc19e0f48460664879e95efd92035d08143f0db6053117f5e4c265db2c0d572fe9547dcb5c3aa384211acb0239956ba73f2781074c321d2774c6c9cc674410f9c21614e1dcac3fa9e52bfcb198dbb13d4bacbb1c374464feecb623f5467abf627a710ab400c08b3faae4572e5bdfc47854fae4bd5b3f883a4eb2841c9d211c"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}], 0xd0, 0x800}, {0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002400)="c0da3a132c756de5bee93e2bbffedcfd9fa6801ad6dc97d245579cc4c416eefb8a08c785cd90fad6486c2346e2dd800b1a0596e471", 0x35}, {&(0x7f0000002440)="cb39f7267e9770ccff6366edc9cfe3378ffd61f35df23163bf0f70000260ba6e21291e853acb39b3b233a597b08dc65504918fb5c5086c73ea7718b262f58b9e36b281c6", 0x44}, {&(0x7f00000024c0)="85bfee99891d1d7949ffad39fd024d998502cfa7736c8d6a87e25acb8ae0d258649b6a1c78d3ac89438ace8b716fc8555e837eb7df9460ad13492f9b475b5b95cd52165896cc68cbc2f49db1ff6f18e4f93fd776b5771076855853b28913d54a4ea9e62fac9ad0d5006266a7bd54501173b9b5d3", 0x74}], 0x3, &(0x7f0000002580)=[@iv={0x48, 0x117, 0x2, 0x30, "7e09c378bb21e2aa22b0bc76af667b5f6453e9e8f0bce7a47774a5b64f1e5ba1ff8365e1ba038f166b5cba1426ac0de5"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x886}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}], 0xc0, 0x20040800}, {0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002640)="7428e52c78480f43b76e5f410a313c7a70f12096c9bbbb631439d8d9c1c503257be7e6da1a856616b1517545b6fd0a7fe2b6dacc2b089ad3d3ca6ad690708335b6a712ed46bc02f96e737f616406de16d795e369b6d76bad8db2efe82a79fd2f45b93ea3361d908935e0bc5dff8a03363670d1281878603c501a2eb95ed27f2b655ec551a6c63f7dceea", 0x8a}, {&(0x7f0000002700)="5a77dceba393af839bdd91a1a6884c6b50c766d30e95ce0ee7e4d5575da6d6dc485d005612154077cbda8d9cfe8feacb96e77360fe5710a19f95a30cf32b0876615cd94565d66162fed7ec6e034fa1aa079f6b5507eca9daf0e2a5db419b5e9da81017fa5ff357c4e708cbad496ac9ea5fe8ab31b7e7698331b6be1869a9bbae396c1b70321123583746eb405615e05ce10ed34db548bd5b8ed2aa5e9e41a05f8f56fefbc4540a21fd63e721cb560b29281b3dc3adefd1f3aa9f0aa0d22dd0c4593f666c46a573e0a3ae345c2e", 0xcd}, {&(0x7f0000002800)="66679984f9be02eff0a3a4613fe69580db06c385494ace59fc25fdfd2057d410627f8fd56d2253ef3450d5c10f09c7427ceff874650bff4fa813d803d1b9d2ca3ae7e164cefe5f3a636e36f53c10a5c53efd50a95edd21407eaf3a33dbdc5db571", 0x61}, {&(0x7f0000002880)="a042b188d327705aef15e88098feb335559b0810", 0x14}, {&(0x7f00000028c0)="9d4ccba1beed72d35f9db888ea76d4213a18ea7e4e44d8746bb86e94672f41f31994f76ff5d432bbe82bddfc1b3da22aae576c1b86610e4e26901b3a526b2272a6bde01e6164888a77113295893af1497a56c1729b7007bae13217e5a41cacb80734019cfef26d18d0373fa3c0a9c9ade1462e5592f248c4d81e", 0x7a}, {&(0x7f0000002940)="f48d48d9216d3ac772e4b48e52731dbbefe766a3bc6f8c219ee0d78aa59087bdaa54b8de3a19a85a840181aa6c246554c013d64e72650ed21ae16245af3a4e5b8908239f2be59938c6b1a6a0865352bb51a1824b82321ed9a950bf774737b436a610fbe8e5253b1ec26e420ae802133ed007e51af038dce7b9a8df7be6c95b2ae90f778a89a873baffc36412faa742cf4f8f8664c8a498fc36ca5d76f24d3b24c80775c8c26555cf15abac8301867c7c4c059851bf6bd4b753d589cefe6b55c8f5ca3f283e4137b16ed46f4d7da0bdd9e80f2f66d1c6577fbd3ecdef4d7395936126604dcaf86c79", 0xe8}], 0x6, &(0x7f0000002ac0)=[@iv={0xf0, 0x117, 0x2, 0xdc, "f2d686c287faa3939e450e096877c38f048bc87476f64b1018b47a9d797bbf87b2899eb3a6b182dc1c73338e54e7a075cb5502db27bcb89dcc6d2f712d8dd362eb159055b35720da7837b182fd46ff764562b7a735a2a57e8e37ed58a51035802df9fb94a9f6cdfba9f3782d1eec45f933f56986feb0ce7294844142d4b8364926a5da4a723bcf7ba5172486f48c54b75b1063cd050571c5483e67497d4d9e39b88f7abfd0879450ebf0aaf837ca1df9f6eae22792571e9b6fd2e4182e2c7551889f93fefdb2d8682a94cd66550a6022c6fa2c8639732e1c2145615e"}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x65, "242e3d26c1d0b02109c5e986b1cf9163ac7c31738445f1909d6ba8d65d0b67836078384946b152af471530624422177adb1cf112887377caf29355c0aa412df222ce6366967ac3c9c30997fada1eab11596392a13d80fcbd06661936ff06464c567e7e2a38"}, @iv={0x100, 0x117, 0x2, 0xea, "5360a5b80608c2485ce758bcd86ba4c9523485a236ee2b64887bd0fa10817fb230c33f8c682286436eca6408c21cd72cbb715f62b523dccf29bb205a94326518cd7949be07d1f99229ac5477d62a18a63161b0ba0b1c233a1b786a80976320c98e2c87ec9542989e5ffb6d2e89b1a15098be1d6fb5488c6573148a3c751823a38f766429882eb08fe7e2d71386ed0310713d0d7460970211a029ac0a04dbee40d9cff36cd9dd3866f0aed7b1e0c1931534046c2b55005e17c87420c970ba0f4f0790b9e3fa2612dd4b23dd8e195c5cfe32499cacdf9027afcb9b88c5cadb480198f0feab88a00b6d1b60"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x58, 0x117, 0x2, 0x41, "aa55d3c32ddb772b29e920fbbfcaad53daafca602ca6992076eba47218d3ac213d978e8dca4942007bf701e7750d4116c3892dff63a25bd48be9af8b1ef82eef4b"}, @iv={0x20, 0x117, 0x2, 0x7, "d52cf4f0a6807c"}, @assoc={0x18, 0x117, 0x4, 0xc7}], 0x330, 0x44000}], 0x5, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000003540)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000200)="9d68429f93ccc946123b57c57b", &(0x7f0000000700)=@buf="18a4ec7b557916f0a8144f8d139c0a634267263aa81a93c38961978e07c636c718ef71eb21c28b4908923d75a9c44f127e10f701e3290a7fa10821b586d64792845db12b496e13ab0926734291d403bc72f17251bfbb88ef847dba3e8f44d21d028fa391320fb43ed8795d7bd24508bba1ae5c95ab776eafc4e7a7a65af209e09f45a5fc9242d01cc09a839a7dae1ab9944a068f8ebc13ee2fb9879527bd3a5aed55055c86e9116505c9e769efa33fd0463f", 0x2}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010300000000000000002b00000008000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="f9af7d31ae101258d5596d91c40fadd65d08f247199591bd26f6053cd711f12be2a70cfd9b8b9fa59a9ef37e150ae2912803a7bee849297dcec01bb6af5065e7c81ee79dc0f206e9a155633d020000000000000024d559c78418798d77d26dafdea1e96ee49f3bfbf0718c4457438e5ec733f704f5321af88f8a0851e2c0"], 0x24}}, 0xc810) sendmsg$NFT_BATCH(r2, &(0x7f00000034c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003480)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x1e8, 0x0, 0xa, 0x404, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "b9cadf51fe62153828f16fe610909c54d23e7b7ce241828d240f8f238b0823e6c3b108936b63a70b166022fab8a90b2b3a312caaa0f3d47706309c5886d16bc92658f7ffc75b256526d958a89fad2e128c5d35552a37ba32e38d1fd26abd9cf62260e8dd8382baa508a6663412046a79b167a097d66ecb5bf2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "0355830b0c90293eaef7f44b59e23d96e0839442055f385350ff4a72d20ee448274cd4adbc077a3638ec89195016d76cd3440bf934ba34f82e9a319c406d7442eef846359c1b5126cf2872a584c85cc8f5a2ce1f2e34a74352a5594c800085a8fe807f829286586a35b39815639fed95f2fb045bb3887342db5289fcc1b3aba19d9c05f92285a8c0f861b5e0a66a6f321c0cf2673712f627f634ef1508ccfaa91cb789cf04bc85f96c13011f167ad00cdef7de73096792fede5a5d642a1d5c847cee4e79720f673e6193edef39245dcd0f2eb0fc618319f9f455a9858a6313e155d442eef9dde0b27b4a589f425f0ed7c80d"}, @NFTA_TABLE_USERDATA={0x17, 0x6, "6a23ad1cbde93d9c905ab970b2dfc04361056c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xdc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xbc, 0x6, "66dcd40b651dac99c835b27ab1b0df2441f618c8f72574467ad99e2265e0f5ba75c94eda58608375dfeb55ecddbb54593fd531429dc44801db41767c490c142f0f7745ca492fc4d68728fc72d48a5203192f414d26d2792cb2dd8d18e33c04b85528766b75cde855e7c250e563be6a1f93fae47f8d905eb134c978c34e27aa65fa8a0aca13ce6c15cd7cde36aaf24cc9bdac5cc740558475ecd55e090f64397ddd10cf30bcb282dd9f523c058469ddabfde815e8316e2942"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x6f, 0x6, "ec34b670aec269c17172e87aa9690a0b2d2afbac3ec83dc38a2406f1848da6110f79df7ae504358fdf31b65bff1cb85d5dfd0feea9b8a8c16819282f66aaedce9e52ba6d1072e1f2217be5f8e4b2cf5d9b33beb73a9fefce8ecf078a4ffbab60119b13f0e1e2db8be1cc47"}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}]}], {0x14}}, 0x528}, 0x1, 0x0, 0x0, 0x40091}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x4e21, 0xc, 0x4e21, 0x0, 0xa, 0xa0, 0x60, 0x2b, r4, r7}, {0xcc00, 0x4, 0x9, 0x0, 0x5, 0x1, 0x5, 0x8}, {0x9, 0x2}, 0x5, 0x6e6bb6, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@local, 0x34ff, 0x3, 0x3, 0x1, 0x6, 0x1a, 0x5}}, 0xe8) r12 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003500)='cpu.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r12, 0xf505, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m15.235818999s ago: executing program 3 (id=2938): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf2508000800", @ANYRESHEX=r0, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x24044827}, 0xc094) 1m5.326381184s ago: executing program 1 (id=2939): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) r6 = socket(0xf, 0x2, 0x0) (rerun: 64) r7 = socket(0x11, 0x3, 0x8) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000200)=0x9, 0x4) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r8, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x4, 0x2, 0x5}, &(0x7f00000001c0)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) 52.825546727s ago: executing program 32 (id=2936): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "040000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto$inet6(r0, &(0x7f0000000380)="25f8c847cb79a3d6854491c270ddd0971c0fbd588949ad1b41d069093640551de55af3f3024ce907328b4af0102d46f6aeedffbb971f8f7323151672e8b147e7dd3361622fad1309a3170b2e5fbec745c10577722d93e9bcf47bef2f4316f035b4d29ac394bf82ccedf49dc0c16a9f4b74a4141a632cd6fe3cfc1f924a5ea0440851e2b6552d0ca00d57efbf66bcac7fb9df99acb5", 0x95, 0x8000, 0x0, 0x0) 37.514031452s ago: executing program 33 (id=2930): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x34, 0x3e, 0x10b, 0x70bd2a, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0xc, 0xc3, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x99}]}, @nested={0x4, 0x28}, @typed={0x8, 0x133, 0x0, 0x0, @fd}, @typed={0x8, 0x6f, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x28000600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x79e7469dcf10f3e}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/223, 0xdf}, {0x0}], 0x2}, 0x80000001}, {{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/114, 0x72}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000002040)=""/261, 0x105}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001d40)=""/221, 0xdd}, {&(0x7f0000001e40)=""/246, 0xf6}, {&(0x7f00000017c0)=""/182, 0xb6}], 0xd, &(0x7f0000001ac0)=""/198, 0xc6}, 0x3}], 0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xe9, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0xe9, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe4"}}}}}}}}, 0x123) 26.977540091s ago: executing program 34 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x4, 0xc, 0x2000000, 0x966f, 0x3}, &(0x7f0000000000)=0x98) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x2, 0x5, 0x2, 0xa, 0xd, 0x4, 0x4, 0x2, 0xf, 0xd, 0x8, 0x3, 0xb, 0x86, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x4, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x8f5, 0x2, 0xc, 0x40, 0x7, 0x8, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 20.160755382s ago: executing program 35 (id=2939): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) r6 = socket(0xf, 0x2, 0x0) (rerun: 64) r7 = socket(0x11, 0x3, 0x8) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000200)=0x9, 0x4) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r8, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x4, 0x2, 0x5}, &(0x7f00000001c0)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) 0s ago: executing program 36 (id=2938): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf2508000800", @ANYRESHEX=r0, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x24044827}, 0xc094) kernel console output (not intermixed with test programs): 2] tipc: Disabling bearer [ 336.924167][ T981] tipc: Node number set to 2208470591 [ 337.121757][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 337.182320][T11995] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1542'. [ 337.191397][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 337.862921][T12032] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1551'. [ 338.043582][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 338.070194][T12044] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 338.088885][T12042] geneve4: entered promiscuous mode [ 338.102431][ T7253] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.166029][T12047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'. [ 338.203594][T12044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.210998][ T7253] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.219977][T12047] bond3: entered promiscuous mode [ 338.226774][ T7253] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.235646][ T7253] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.310895][T12044] bond3: (slave dummy0): making interface the new active one [ 338.349169][T12044] dummy0: entered promiscuous mode [ 338.376041][T12044] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 338.515511][T12062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1557'. [ 338.529663][T12064] netlink: 'syz.1.1558': attribute type 15 has an invalid length. [ 338.548660][T12065] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 338.642567][T12077] netlink: 'syz.3.1560': attribute type 6 has an invalid length. [ 338.655506][T12071] netlink: 'syz.2.1561': attribute type 49 has an invalid length. [ 338.697359][T12079] netlink: 'syz.3.1560': attribute type 6 has an invalid length. [ 338.708357][T12065] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.720508][T12065] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 338.733800][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1559'. [ 338.762366][T12084] No such timeout policy "syz1" [ 338.773137][T12086] netlink: 'syz.4.1563': attribute type 23 has an invalid length. [ 338.796897][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 338.841445][T12082] bond4: (slave bridge8): Enslaving as an active interface with a down link [ 338.913607][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 338.970893][T12094] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 339.109293][T12094] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.242475][T12099] lo speed is unknown, defaulting to 1000 [ 339.608628][T12099] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.610138][T12117] lo speed is unknown, defaulting to 1000 [ 339.955339][T12099] xfrm0 speed is unknown, defaulting to 1000 [ 340.253739][T12117] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.644772][T12144] __nla_validate_parse: 7 callbacks suppressed [ 340.644790][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 340.654725][T12117] xfrm0 speed is unknown, defaulting to 1000 [ 341.408322][T12149] batadv1: entered promiscuous mode [ 341.434468][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 341.445055][T12158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1580'. [ 341.552287][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.607026][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.681792][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.708556][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.761678][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.784262][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 341.809082][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'. [ 342.488602][ T5977] lo speed is unknown, defaulting to 1000 [ 342.494602][ T7252] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.504720][ T981] ip6_vti0 speed is unknown, defaulting to 1000 [ 342.511179][ T981] syz2: Port: 1 Link DOWN [ 342.511786][ T5977] syz0: Port: 1 Link DOWN [ 342.526687][ T7252] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.562611][ T5977] lo speed is unknown, defaulting to 1000 [ 342.562649][ T7252] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.581658][ T5895] ip6_vti0 speed is unknown, defaulting to 1000 [ 342.610645][ T7252] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.116536][T12196] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 343.140906][T12199] pim6reg: entered allmulticast mode [ 343.164954][T12198] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 343.167741][T12196] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 343.309832][T12215] tipc: Enabled bearer , priority 0 [ 343.350701][T12215] syzkaller0: entered promiscuous mode [ 343.356907][T12215] syzkaller0: entered allmulticast mode [ 343.380986][T12215] tipc: Resetting bearer [ 343.457981][T12224] tipc: Resetting bearer [ 343.556927][T12224] tipc: Disabling bearer [ 343.617522][T12221] lo speed is unknown, defaulting to 1000 [ 343.994337][T12221] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.080261][T12243] lo speed is unknown, defaulting to 1000 [ 344.285934][T12221] xfrm0 speed is unknown, defaulting to 1000 [ 344.413708][T12249] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.598532][T12252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 344.640048][T12243] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.651324][T12252] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 345.030519][T12256] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 345.263884][T12243] xfrm0 speed is unknown, defaulting to 1000 [ 346.009461][T12280] __nla_validate_parse: 174 callbacks suppressed [ 346.009482][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1612'. [ 346.727184][T12310] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 347.026866][T12315] gretap1: entered promiscuous mode [ 347.270212][T12319] erspan0: left promiscuous mode [ 347.308257][T12319] bridge2: left promiscuous mode [ 347.329833][T12319] vlan2: left promiscuous mode [ 347.339338][T12319] bond1: left promiscuous mode [ 347.347213][T12319] geneve2: left promiscuous mode [ 347.382248][T12319] vlan4: left promiscuous mode [ 347.392712][T12319] bond0: left promiscuous mode [ 347.416414][T12319] bond_slave_0: left promiscuous mode [ 347.442627][T12319] bond_slave_1: left promiscuous mode [ 347.448519][T12319] veth5: left promiscuous mode [ 347.521471][T12319] bond3: left promiscuous mode [ 347.541797][T12319] bond4: left promiscuous mode [ 347.606757][T12319] ip6gre2: left promiscuous mode [ 347.655513][T12319] geneve4: left promiscuous mode [ 347.689491][T12319] gretap1: left promiscuous mode [ 347.749319][ T3483] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.771035][ T3483] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.779778][ T3483] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.788650][ T3483] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.835979][ T3483] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.865521][ T3483] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.880591][ T3483] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.893920][ T3483] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.916571][T12335] syzkaller0: entered promiscuous mode [ 347.927822][T12335] syzkaller0: entered allmulticast mode [ 347.937782][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 347.952288][T12335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1623'. [ 348.064478][T12338] nftables ruleset with unbound chain [ 348.304357][T12355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1630'. [ 348.349070][T12358] netlink: 'syz.3.1632': attribute type 4 has an invalid length. [ 348.373966][T12362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1631'. [ 348.466164][T12365] syz.4.1633 (12365) used obsolete PPPIOCDETACH ioctl [ 348.838276][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 348.944256][T12375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.309754][T12417] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 349.432834][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.433362][T12422] FAULT_INJECTION: forcing a failure. [ 349.433362][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 349.459680][T12422] CPU: 1 UID: 0 PID: 12422 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(full) [ 349.459706][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.459715][T12422] Call Trace: [ 349.459723][T12422] [ 349.459731][T12422] dump_stack_lvl+0x189/0x250 [ 349.459754][T12422] ? __pfx____ratelimit+0x10/0x10 [ 349.459772][T12422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.459791][T12422] ? __pfx__printk+0x10/0x10 [ 349.459817][T12422] ? __pfx___might_resched+0x10/0x10 [ 349.459833][T12422] ? fs_reclaim_acquire+0x7d/0x100 [ 349.459869][T12422] should_fail_ex+0x414/0x560 [ 349.459896][T12422] should_failslab+0xa8/0x100 [ 349.459917][T12422] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 349.459936][T12422] ? __kernfs_new_node+0x9c/0x880 [ 349.459959][T12422] kstrdup+0x42/0x100 [ 349.459982][T12422] __kernfs_new_node+0x9c/0x880 [ 349.460000][T12422] ? kasan_save_track+0x3e/0x80 [ 349.460015][T12422] ? __kasan_kmalloc+0x93/0xb0 [ 349.460029][T12422] ? __kmalloc_node_track_caller_noprof+0x575/0x820 [ 349.460051][T12422] ? __pfx___kernfs_new_node+0x10/0x10 [ 349.460070][T12422] ? kernfs_root+0x1c/0x230 [ 349.460102][T12422] ? kernfs_root+0x1c/0x230 [ 349.460119][T12422] ? kernfs_root+0x1c/0x230 [ 349.460132][T12422] ? kernfs_root+0x1c/0x230 [ 349.460152][T12422] kernfs_new_node+0x102/0x210 [ 349.460174][T12422] __kernfs_create_file+0x4b/0x2e0 [ 349.460199][T12422] sysfs_add_file_mode_ns+0x238/0x300 [ 349.460228][T12422] sysfs_create_file_ns+0x128/0x1a0 [ 349.460251][T12422] ? trace_kmalloc+0x1f/0xb0 [ 349.460265][T12422] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 349.460284][T12422] ? kstrdup+0x81/0x100 [ 349.460308][T12422] idletimer_tg_checkentry+0x3d1/0x990 [ 349.460334][T12422] xt_check_target+0x3c3/0xa90 [ 349.460354][T12422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.460372][T12422] ? __pfx_xt_check_target+0x10/0x10 [ 349.460390][T12422] ? pcpu_alloc_noprof+0xf95/0x1750 [ 349.460415][T12422] ? xt_find_target+0x1f3/0x240 [ 349.460437][T12422] translate_table+0x186b/0x2040 [ 349.460489][T12422] ? __pfx_translate_table+0x10/0x10 [ 349.460510][T12422] ? __might_fault+0xb0/0x130 [ 349.460547][T12422] ? _copy_from_user+0x94/0xb0 [ 349.460572][T12422] do_ip6t_set_ctl+0x970/0xce0 [ 349.460596][T12422] ? rcu_is_watching+0x15/0xb0 [ 349.460621][T12422] ? trace_contention_end+0x39/0x100 [ 349.460640][T12422] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 349.460678][T12422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.460713][T12422] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.460736][T12422] nf_setsockopt+0x26f/0x290 [ 349.460754][T12422] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 349.460775][T12422] do_sock_setsockopt+0x17c/0x1b0 [ 349.460806][T12422] __x64_sys_setsockopt+0x13f/0x1b0 [ 349.460829][T12422] do_syscall_64+0xfa/0xf80 [ 349.460848][T12422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.460864][T12422] ? clear_bhb_loop+0x60/0xb0 [ 349.460885][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.460900][T12422] RIP: 0033:0x7fe53cf8f749 [ 349.460917][T12422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.460931][T12422] RSP: 002b:00007fe53dd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.460949][T12422] RAX: ffffffffffffffda RBX: 00007fe53d1e5fa0 RCX: 00007fe53cf8f749 [ 349.460961][T12422] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 349.460971][T12422] RBP: 00007fe53dd83090 R08: 0000000000000380 R09: 0000000000000000 [ 349.460981][T12422] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 349.460993][T12422] R13: 00007fe53d1e6038 R14: 00007fe53d1e5fa0 R15: 00007fff2e203ad8 [ 349.461023][T12422] [ 349.918727][T12426] x_tables: unsorted underflow at hook 1 [ 350.044350][ T3483] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 350.112523][T12444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1644'. [ 350.129391][T12439] lo speed is unknown, defaulting to 1000 [ 350.137165][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 350.226898][T12455] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 350.255035][T12455] gretap1: entered allmulticast mode [ 350.332009][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 350.419090][T12439] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.445604][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.550233][T12439] xfrm0 speed is unknown, defaulting to 1000 [ 350.821913][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.084275][T12480] lo speed is unknown, defaulting to 1000 [ 351.162485][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 351.182476][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 351.212627][T12489] : entered promiscuous mode [ 351.244325][T12489] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 351.347220][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 351.389402][T12493] macvtap1: entered promiscuous mode [ 351.402842][T12493] vlan0: entered promiscuous mode [ 351.421263][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 351.496820][T12489] bond6: entered promiscuous mode [ 351.510886][T12489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.542950][T12480] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.549559][T12511] netlink: 'syz.2.1665': attribute type 6 has an invalid length. [ 351.560217][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 351.577998][T12498] vlan3: entered promiscuous mode [ 351.583245][T12498] bond0: entered promiscuous mode [ 351.826476][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1667'. [ 351.962129][T12480] xfrm0 speed is unknown, defaulting to 1000 [ 351.968194][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'. [ 351.983028][T12527] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1670'. [ 351.993091][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.189381][T12537] netlink: 66 bytes leftover after parsing attributes in process `syz.4.1673'. [ 352.527004][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 352.885982][T12569] lo speed is unknown, defaulting to 1000 [ 353.011566][T12573] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 353.128133][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.447083][T12576] syzkaller0: entered promiscuous mode [ 353.453284][T12576] syzkaller0: entered allmulticast mode [ 353.890142][T12569] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.982727][T12589] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.270583][ T7252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.404303][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.213479][T12569] xfrm0 speed is unknown, defaulting to 1000 [ 356.226870][T12599] tipc: Enabling of bearer rejected, failed to enable media [ 356.387979][T12617] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 356.457534][T12617] bond5: entered promiscuous mode [ 356.474180][T12617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.541913][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.743588][T12636] __nla_validate_parse: 3 callbacks suppressed [ 356.743606][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 356.830235][T12639] netlink: 'syz.2.1695': attribute type 16 has an invalid length. [ 357.264238][T12652] batadv1: entered promiscuous mode [ 357.492174][T12654] tipc: Enabling of bearer rejected, failed to enable media [ 357.623452][T12659] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1700'. [ 357.711900][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.801803][T12654] syzkaller0: entered promiscuous mode [ 357.807464][T12654] syzkaller0: entered allmulticast mode [ 357.890746][T12671] can: request_module (can-proto-0) failed. [ 358.264170][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 358.266391][T12685] gre2: entered allmulticast mode [ 358.292842][T12687] tipc: MTU too low for tipc bearer [ 358.390213][T12693] tipc: Invalid UDP bearer configuration [ 358.390267][T12693] tipc: Enabling of bearer rejected, failed to enable media [ 358.566895][T12710] sock: sock_timestamping_bind_phc: sock not bind to device [ 358.573693][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 358.586266][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.626620][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 358.770074][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 358.843390][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.859090][T12730] netlink: 'syz.3.1717': attribute type 13 has an invalid length. [ 358.867540][T12730] netlink: 'syz.3.1717': attribute type 17 has an invalid length. [ 359.473269][T12758] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1724'. [ 359.493453][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.532110][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.540752][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.565212][T12757] netlink: 'syz.2.1726': attribute type 23 has an invalid length. [ 359.736398][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'. [ 359.746443][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 359.843834][T12764] veth7: entered allmulticast mode [ 359.912157][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.976028][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 360.002987][T12751] Set syz1 is full, maxelem 9 reached [ 360.013805][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.454467][T12790] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 360.474897][T12794] netlink: 'syz.0.1738': attribute type 9 has an invalid length. [ 360.570029][T12797] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 360.693192][T12797] bond6: entered promiscuous mode [ 360.699164][T12797] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.779056][T12806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.797494][T12806] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 360.832616][T12806] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 360.853562][T12806] bond6: (slave gre2): Opening slave failed [ 361.110586][T12833] syzkaller0: entered promiscuous mode [ 361.151938][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.308051][T12850] netlink: 'syz.3.1750': attribute type 21 has an invalid length. [ 361.341266][T12852] netlink: 'syz.0.1751': attribute type 2 has an invalid length. [ 361.356626][T12852] netlink: 'syz.0.1751': attribute type 8 has an invalid length. [ 361.586158][T12861] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 361.598198][T12861] bond6 (unregistering): Released all slaves [ 361.643122][T12858] lo speed is unknown, defaulting to 1000 [ 361.686366][T12865] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 362.011074][T12858] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.025511][T12884] __nla_validate_parse: 14 callbacks suppressed [ 362.025529][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'. [ 362.090474][T12884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.220565][T12891] syzkaller1: entered promiscuous mode [ 362.230068][T12891] syzkaller1: entered allmulticast mode [ 362.262031][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.311058][T12891] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 362.356367][T12891] syzkaller0: entered promiscuous mode [ 362.374324][T12891] syzkaller0: entered allmulticast mode [ 362.464547][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1768'. [ 362.511034][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1768'. [ 362.522046][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'. [ 362.591183][T12858] xfrm0 speed is unknown, defaulting to 1000 [ 362.592558][T12905] lo speed is unknown, defaulting to 1000 [ 362.606791][T12903] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 362.687545][T12908] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1771'. [ 362.906434][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.915640][T12917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.374296][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.572913][T12932] lo speed is unknown, defaulting to 1000 [ 363.881404][T12932] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.131079][T12905] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.139546][T12932] xfrm0 speed is unknown, defaulting to 1000 [ 364.203855][T12970] netlink: 'syz.3.1784': attribute type 4 has an invalid length. [ 364.856935][T12905] xfrm0 speed is unknown, defaulting to 1000 [ 365.453358][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 366.567198][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 366.933621][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 367.004193][T12990] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 367.218330][T12997] lo speed is unknown, defaulting to 1000 [ 368.667935][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.677681][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.724290][T13034] netlink: 'syz.3.1800': attribute type 12 has an invalid length. [ 368.729448][T12997] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.978887][T13051] tipc: New replicast peer: 0.0.0.0 [ 368.985359][T13051] tipc: Enabled bearer , priority 10 [ 369.219178][T13055] lo speed is unknown, defaulting to 1000 [ 369.238387][T13068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.400180][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 369.431291][T12997] xfrm0 speed is unknown, defaulting to 1000 [ 369.456471][T13080] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1810'. [ 369.540965][T13082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1810'. [ 369.541851][T13083] netlink: 'syz.4.1811': attribute type 5 has an invalid length. [ 369.653592][T13080] syzkaller1: entered promiscuous mode [ 369.659122][T13080] syzkaller1: entered allmulticast mode [ 370.317495][T13055] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.206643][T13055] xfrm0 speed is unknown, defaulting to 1000 [ 371.855630][T13127] lo speed is unknown, defaulting to 1000 [ 372.237736][T13127] ip6_vti0 speed is unknown, defaulting to 1000 [ 372.554083][T13127] xfrm0 speed is unknown, defaulting to 1000 [ 373.463721][T13144] @ÿ: renamed from veth0_vlan [ 373.564658][T13144] tipc: Enabled bearer , priority 0 [ 373.571894][T13148] syzkaller0: entered promiscuous mode [ 373.577383][T13148] syzkaller0: entered allmulticast mode [ 373.646096][T13144] tipc: Resetting bearer [ 373.654833][T13143] tipc: Resetting bearer [ 373.744620][T13143] tipc: Disabling bearer [ 373.762600][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 375.231448][T13183] netlink: 'syz.4.1835': attribute type 12 has an invalid length. [ 375.335612][T13185] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1837'. [ 375.365608][T13185] block nbd0: not configured, cannot reconfigure [ 375.465477][T13188] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 375.473866][ T7253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.481963][ T7253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.484637][T13185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.512255][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1835'. [ 375.660505][T13197] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.718809][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 375.893846][T13216] netlink: 'syz.1.1844': attribute type 7 has an invalid length. [ 375.907260][T13211] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 376.305815][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.705774][T13231] vlan0 (unregistering): left promiscuous mode [ 376.750537][T13231] tipc: Disabling bearer [ 377.304696][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1855'. [ 377.319869][T13265] sctp: [Deprecated]: syz.2.1855 (pid 13265) Use of int in max_burst socket option deprecated. [ 377.319869][T13265] Use struct sctp_assoc_value instead [ 378.385457][T13293] netlink: 'syz.2.1863': attribute type 29 has an invalid length. [ 378.444812][T13293] netlink: 'syz.2.1863': attribute type 29 has an invalid length. [ 378.552015][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 378.725774][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.952936][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 379.338170][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 379.353950][T13312] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 379.395349][T13312] lo speed is unknown, defaulting to 1000 [ 379.767213][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1871'. [ 380.000419][T13312] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.235235][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 380.334126][T13333] syzkaller0: entered promiscuous mode [ 380.347037][T13329] netlink: 'syz.3.1873': attribute type 9 has an invalid length. [ 380.355189][T13333] syzkaller0: entered allmulticast mode [ 380.373782][T13329] netlink: 'syz.3.1873': attribute type 11 has an invalid length. [ 380.393271][T13329] netlink: 'syz.3.1873': attribute type 12 has an invalid length. [ 380.401136][T13329] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1873'. [ 380.441774][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 380.690356][T13312] xfrm0 speed is unknown, defaulting to 1000 [ 380.755166][T13348] xt_TCPMSS: Only works on TCP SYN packets [ 380.842536][T13350] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 380.943708][T13352] syzkaller1: entered promiscuous mode [ 380.949481][T13352] syzkaller1: entered allmulticast mode [ 381.124674][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 382.135653][T13380] netlink: 'syz.3.1888': attribute type 4 has an invalid length. [ 382.179422][T13380] netlink: 'syz.3.1888': attribute type 4 has an invalid length. [ 382.654629][T13391] lo speed is unknown, defaulting to 1000 [ 382.662959][T13393] tipc: Enabled bearer , priority 0 [ 382.692627][T13393] syzkaller0: entered promiscuous mode [ 382.698135][T13393] syzkaller0: entered allmulticast mode [ 382.750021][T13394] tipc: Resetting bearer [ 382.798160][T13394] tipc: Disabling bearer [ 383.018983][T13391] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.524168][T13391] xfrm0 speed is unknown, defaulting to 1000 [ 383.775509][T13432] netlink: 'syz.4.1899': attribute type 3 has an invalid length. [ 384.026289][T13445] lo speed is unknown, defaulting to 1000 [ 384.090846][T13448] syzkaller0: entered promiscuous mode [ 384.107072][T13448] syzkaller0: entered allmulticast mode [ 384.460114][T13445] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.008935][T13445] xfrm0 speed is unknown, defaulting to 1000 [ 385.204134][T13468] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 385.265735][T13470] tipc: Enabled bearer , priority 10 [ 385.952167][T13485] lo speed is unknown, defaulting to 1000 [ 386.195063][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 386.246634][T13493] syzkaller0: entered promiscuous mode [ 386.252322][T13493] syzkaller0: entered allmulticast mode [ 386.258673][T13485] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.314178][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 386.437393][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 388.164864][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 388.174843][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 388.186276][T13485] xfrm0 speed is unknown, defaulting to 1000 [ 388.434142][T13527] : renamed from veth0_to_bond [ 388.700958][T13530] syzkaller0: entered promiscuous mode [ 388.707281][T13530] syzkaller0: entered allmulticast mode [ 389.303543][T13536] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 389.365053][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 389.483641][T13539] macvlan4: entered promiscuous mode [ 389.489763][T13539] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 389.755983][T13549] tipc: Enabled bearer , priority 0 [ 389.792652][T13549] syzkaller0: entered promiscuous mode [ 389.798167][T13549] syzkaller0: entered allmulticast mode [ 389.837041][T13549] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 389.864699][T13549] tipc: Resetting bearer [ 389.908646][T13548] tipc: Resetting bearer [ 390.023989][T13548] tipc: Disabling bearer [ 390.285937][T13559] bridge0: port 1(macvtap1) entered blocking state [ 390.297576][T13559] bridge0: port 1(macvtap1) entered disabled state [ 390.316345][T13559] macvtap1: entered allmulticast mode [ 390.343024][T13559] macvtap1: left allmulticast mode [ 390.567712][T13567] lo speed is unknown, defaulting to 1000 [ 390.860876][T13576] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 390.933020][T13576] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.001932][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 391.052769][T13578] bond8: (slave gretap1): making interface the new active one [ 391.083960][T13578] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 391.102937][T13567] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.442623][T13576] bond8 (unregistering): (slave gretap1): Releasing active interface [ 391.462659][T13576] bond8 (unregistering): Released all slaves [ 391.636292][T13567] xfrm0 speed is unknown, defaulting to 1000 [ 392.843145][T13612] netlink: 'syz.1.1942': attribute type 2 has an invalid length. [ 393.060483][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 393.088420][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 393.415031][T13626] pimreg: tun_chr_ioctl cmd 1074025673 [ 393.452925][T13625] pimreg: tun_chr_ioctl cmd 1074812117 [ 393.468521][T13626] pimreg: tun_chr_ioctl cmd 1074812117 [ 393.574690][T13636] netlink: 'syz.2.1951': attribute type 2 has an invalid length. [ 393.800045][T13645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1953'. [ 394.564598][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1961'. [ 394.584817][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 394.601642][T13666] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1961'. [ 394.620878][T13666] netlink: 'syz.2.1961': attribute type 3 has an invalid length. [ 394.681690][T13666] netlink: 'syz.2.1961': attribute type 2 has an invalid length. [ 394.681782][T13673] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.689448][T13666] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1961'. [ 394.689493][T13666] netlink: 'syz.2.1961': attribute type 2 has an invalid length. [ 394.847166][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.906204][T13678] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 394.924762][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 395.006327][T13687] xt_hashlimit: size too large, truncated to 1048576 [ 395.084704][T13680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.198133][T13693] syzkaller1: entered promiscuous mode [ 395.217064][T13699] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1970'. [ 395.221894][T13693] syzkaller1: entered allmulticast mode [ 395.273119][T13702] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 395.394178][T13707] lo speed is unknown, defaulting to 1000 [ 395.900073][T13707] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.339789][T13707] xfrm0 speed is unknown, defaulting to 1000 [ 396.609593][T13765] tipc: New replicast peer: 0.0.0.0 [ 396.652575][T13765] tipc: Enabled bearer , priority 10 [ 396.669652][T13768] tipc: New replicast peer: 172.30.1.3 [ 396.702347][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 396.855447][T13775] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 396.934928][T13775] bond9: entered promiscuous mode [ 396.940404][T13775] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.243330][T13792] syzkaller0: entered promiscuous mode [ 397.248848][T13792] syzkaller0: entered allmulticast mode [ 397.276159][T13791] tipc: Enabled bearer , priority 0 [ 397.372169][T13792] tipc: Resetting bearer [ 397.433288][T13792] tipc: Disabling bearer [ 398.250783][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 398.271174][T13819] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 398.297305][T13820] syzkaller0: entered promiscuous mode [ 398.303047][T13820] syzkaller0: entered allmulticast mode [ 398.334830][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2007'. [ 398.843516][T13838] netem: incorrect ge model size [ 398.854007][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'. [ 398.856662][T13838] netem: change failed [ 399.064473][T13860] C: renamed from team_slave_0 [ 399.086614][T13860] netlink: 'syz.0.2019': attribute type 2 has an invalid length. [ 399.220438][T13860] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2019'. [ 399.230861][T13860] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.253704][T13866] netlink: 'syz.0.2019': attribute type 2 has an invalid length. [ 399.270949][T13866] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2019'. [ 399.281253][T13866] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.969132][T13899] netlink: 'syz.2.2030': attribute type 23 has an invalid length. [ 400.003743][T13897] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 400.125044][T13912] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2033'. [ 400.188051][T13916] batadv0: mtu less than device minimum [ 400.205754][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 400.315437][T13923] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 400.437184][T13923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.503139][T13926] bond5: (slave ip6erspan1): making interface the new active one [ 400.524906][T13926] bond5: (slave ip6erspan1): Enslaving as an active interface with an up link [ 400.696177][T13937] bond0: entered promiscuous mode [ 400.701450][T13938] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 400.726146][T13939] macvtap1: entered promiscuous mode [ 400.733758][T13939] syz_tun: entered promiscuous mode [ 400.747891][T13939] syz_tun: left promiscuous mode [ 400.748013][T13942] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 400.763359][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 400.774866][T13941] netlink: 'syz.0.2043': attribute type 23 has an invalid length. [ 400.782884][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 400.888529][T13938] `: Port device dummy0 added [ 400.970168][T13942] `: Port device dummy0 removed [ 400.997680][T13942] dummy0: entered promiscuous mode [ 401.005974][T13942] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.060179][T13955] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 401.232192][T13955] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 401.516354][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 401.904429][T13981] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 402.006421][T13981] bond8: entered promiscuous mode [ 402.011729][T13981] bond8: entered allmulticast mode [ 402.135639][T13983] bond8: (slave ip6gretap2): making interface the new active one [ 402.193793][T13983] ip6gretap2: entered promiscuous mode [ 402.201456][T13983] ip6gretap2: entered allmulticast mode [ 402.220663][T13983] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 402.640164][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.651658][T14007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.716399][T14004] lo speed is unknown, defaulting to 1000 [ 402.752395][T14015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.022189][T14004] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.224662][T14023] tipc: Enabled bearer , priority 0 [ 403.310077][T14004] xfrm0 speed is unknown, defaulting to 1000 [ 403.355204][T14023] syzkaller0: entered promiscuous mode [ 403.370342][T14023] syzkaller0: entered allmulticast mode [ 403.663950][T14033] tipc: Resetting bearer [ 403.718425][T14022] tipc: Resetting bearer [ 403.793296][T14022] tipc: Disabling bearer [ 404.034223][T14060] __nla_validate_parse: 5 callbacks suppressed [ 404.034240][T14060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2072'. [ 404.461643][T14075] netlink: 'syz.2.2075': attribute type 1 has an invalid length. [ 405.150337][T14082] lo speed is unknown, defaulting to 1000 [ 405.529139][T14082] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.592888][T14094] set match dimension is over the limit! [ 405.676246][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2081'. [ 405.705739][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'. [ 405.732374][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2081'. [ 405.779878][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2081'. [ 405.823087][T14096] syzkaller0: entered promiscuous mode [ 405.851150][T14096] syzkaller0: entered allmulticast mode [ 405.870354][T14082] xfrm0 speed is unknown, defaulting to 1000 [ 406.128275][T14104] tipc: Resetting bearer [ 406.133678][T14104] gre0: left promiscuous mode [ 406.573279][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 408.673560][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2093'. [ 408.699113][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 408.732339][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 408.940531][T14154] wg1: entered promiscuous mode [ 408.946222][T14154] wg1: entered allmulticast mode [ 411.718072][T14180] netlink: 'syz.1.2103': attribute type 8 has an invalid length. [ 411.780804][T14187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.813174][T14187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 411.865036][T14186] vlan3: entered promiscuous mode [ 411.943840][T14195] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 411.968284][T14187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.979370][T14187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.143667][T14187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.171647][T14187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.189064][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 412.336506][T14187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.357058][T14187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.379871][T14205] 8021q: VLANs not supported on caif0 [ 412.532885][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 412.550616][ T1007] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.561645][ T1007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.624165][ T76] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.646583][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.654691][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 412.708766][ T7252] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.722448][ T7252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.797925][T14235] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 412.840091][T14235] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2117'. [ 413.145805][ T51] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.155302][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 413.244630][T14258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2120'. [ 413.255450][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2120'. [ 413.268457][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 413.281616][T14255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 413.290804][T14255] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2122'. [ 413.377426][T14260] block nbd0: Unsupported socket: should be TCP or UNIX. [ 413.483464][T14250] lo speed is unknown, defaulting to 1000 [ 413.776101][T14273] netlink: 'syz.0.2125': attribute type 298 has an invalid length. [ 413.785423][T14273] netlink: 'syz.0.2125': attribute type 15 has an invalid length. [ 414.034588][T14250] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.128928][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 415.244012][T14250] xfrm0 speed is unknown, defaulting to 1000 [ 416.761016][T14312] bond5: entered promiscuous mode [ 416.787428][T14312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.158306][T14312] bond5 (unregistering): Released all slaves [ 417.186925][T14315] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 417.262053][T14321] NFSD: Failed to start, no listeners configured. [ 417.330905][T14329] lo speed is unknown, defaulting to 1000 [ 417.567306][T14338] __nla_validate_parse: 3 callbacks suppressed [ 417.567327][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 417.857860][T14352] syzkaller0: entered promiscuous mode [ 417.873920][T14352] syzkaller0: entered allmulticast mode [ 417.912048][T14354] tipc: Enabling of bearer rejected, failed to enable media [ 418.029860][T14352] tipc: Enabled bearer , priority 0 [ 418.167769][T14360] xt_nat: multiple ranges no longer supported [ 418.180051][T14349] lo speed is unknown, defaulting to 1000 [ 418.180051][T14329] ip6_vti0 speed is unknown, defaulting to 1000 [ 418.431969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.453151][T14351] tipc: Resetting bearer [ 418.515876][T14351] tipc: Disabling bearer [ 418.768256][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2151'. [ 418.864128][T14368] Cannot find add_set index 2 as target [ 418.872182][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 418.955565][T14376] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2152'. [ 419.036769][T14349] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.045324][T14329] xfrm0 speed is unknown, defaulting to 1000 [ 419.195910][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 419.213071][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 419.245455][T14385] netlink: 'syz.3.2154': attribute type 39 has an invalid length. [ 419.311740][T14385] hsr_slave_1 (unregistering): left promiscuous mode [ 419.371628][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 419.410197][T14394] can: request_module (can-proto-0) failed. [ 419.469401][T14391] tipc: Enabled bearer , priority 0 [ 419.500379][T14391] syzkaller0: entered promiscuous mode [ 419.521201][T14391] syzkaller0: entered allmulticast mode [ 419.600172][T14391] tipc: Resetting bearer [ 419.626987][T14349] xfrm0 speed is unknown, defaulting to 1000 [ 419.725405][T14390] tipc: Resetting bearer [ 419.752613][T14390] tipc: Disabling bearer [ 420.114242][T14416] wireguard0: entered promiscuous mode [ 420.120430][T14416] wireguard0: entered allmulticast mode [ 420.154197][T14416] team0: Device wireguard0 is of different type [ 420.468505][T14420] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2164'. [ 421.442187][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 421.459264][T14453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.597252][T14453] netlink: 'syz.4.2173': attribute type 21 has an invalid length. [ 421.651214][T14453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2173'. [ 421.973380][T14458] IPVS: length: 8 != 258125111200 [ 422.241764][T14466] tipc: Enabled bearer , priority 0 [ 422.249313][T14466] syzkaller0: entered promiscuous mode [ 422.264355][T14466] syzkaller0: entered allmulticast mode [ 422.282528][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 422.315675][T14465] tipc: Resetting bearer [ 422.376068][T14465] tipc: Disabling bearer [ 422.680342][T14478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2182'. [ 422.731019][T14459] lec:lec_atm_close: lec0: Shut down! [ 422.856069][T14486] lo speed is unknown, defaulting to 1000 [ 423.024362][T14488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 423.670194][T14511] tipc: New replicast peer: 255.255.255.255 [ 423.681338][T14511] tipc: Enabled bearer , priority 10 [ 423.692646][T14511] netlink: 'syz.0.2188': attribute type 4 has an invalid length. [ 424.117936][T14486] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.384162][T14528] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 424.494455][T14533] netlink: 'syz.3.2195': attribute type 2 has an invalid length. [ 424.494565][T14534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2193'. [ 424.553594][T14533] @„;: entered promiscuous mode [ 424.602610][T14486] xfrm0 speed is unknown, defaulting to 1000 [ 424.715660][T14538] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 424.821384][T14540] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 424.822223][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2196'. [ 424.836277][T14540] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 424.865775][ T981] tipc: Node number set to 4075591512 [ 424.894762][T14538] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 424.922675][ T5976] bond0: (slave bond_slave_0): interface is now down [ 424.931633][ T5976] bond0: (slave bond_slave_1): interface is now down [ 424.988086][T14544] bond9: (slave bridge5): Enslaving as an active interface with a down link [ 425.040860][T14538] macvlan5: entered promiscuous mode [ 425.059407][T14538] macvlan5: entered allmulticast mode [ 425.070299][T14538] bond9: entered promiscuous mode [ 425.074025][ T1332] bond0: (slave bond_slave_0): interface is now down [ 425.082665][ T1332] bond0: (slave bond_slave_1): interface is now down [ 425.090555][T14538] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 425.100465][T14538] bond9: left promiscuous mode [ 425.174083][T14543] lo speed is unknown, defaulting to 1000 [ 425.231878][ T1332] bond0: (slave bond_slave_0): interface is now down [ 425.257113][ T1332] bond0: (slave bond_slave_1): interface is now down [ 425.307938][ T1332] bond0: now running without any active interface! [ 425.356848][T14553] FAULT_INJECTION: forcing a failure. [ 425.356848][T14553] name failslab, interval 1, probability 0, space 0, times 0 [ 425.393302][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.2.2200 Not tainted syzkaller #0 PREEMPT(full) [ 425.393329][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.393343][T14553] Call Trace: [ 425.393351][T14553] [ 425.393360][T14553] dump_stack_lvl+0x189/0x250 [ 425.393387][T14553] ? __pfx____ratelimit+0x10/0x10 [ 425.393406][T14553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.393426][T14553] ? __pfx__printk+0x10/0x10 [ 425.393455][T14553] ? __pfx___might_resched+0x10/0x10 [ 425.393474][T14553] ? fs_reclaim_acquire+0x7d/0x100 [ 425.393498][T14553] should_fail_ex+0x414/0x560 [ 425.393529][T14553] should_failslab+0xa8/0x100 [ 425.393550][T14553] kmem_cache_alloc_noprof+0x88/0x710 [ 425.393574][T14553] ? getname_flags+0xb8/0x540 [ 425.393597][T14553] getname_flags+0xb8/0x540 [ 425.393630][T14553] __x64_sys_mkdirat+0x7a/0xa0 [ 425.393649][T14553] do_syscall_64+0xfa/0xf80 [ 425.393668][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.393686][T14553] ? clear_bhb_loop+0x60/0xb0 [ 425.393707][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.393730][T14553] RIP: 0033:0x7fe53cf8f749 [ 425.393746][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.393760][T14553] RSP: 002b:00007fe53dd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 425.393779][T14553] RAX: ffffffffffffffda RBX: 00007fe53d1e5fa0 RCX: 00007fe53cf8f749 [ 425.393792][T14553] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 425.393805][T14553] RBP: 00007fe53dd83090 R08: 0000000000000000 R09: 0000000000000000 [ 425.393817][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.393829][T14553] R13: 00007fe53d1e6038 R14: 00007fe53d1e5fa0 R15: 00007fff2e203ad8 [ 425.393859][T14553] [ 425.691006][T14543] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.699278][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2204'. [ 425.710720][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 425.767475][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'. [ 425.793640][T14561] netlink: 'syz.2.2204': attribute type 4 has an invalid length. [ 425.922546][T14563] netlink: 'syz.3.2205': attribute type 3 has an invalid length. [ 425.930407][T14563] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 425.931333][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 425.941658][T14563] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2205'. [ 426.006474][T14565] bond5: entered allmulticast mode [ 426.013326][T14565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.052336][T14543] xfrm0 speed is unknown, defaulting to 1000 [ 426.120638][T14572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.149129][T14572] bond6: entered allmulticast mode [ 426.155474][T14572] bond5: (slave bond6): Enslaving as an active interface with an up link [ 426.390503][T14593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2213'. [ 426.475185][T14595] FAULT_INJECTION: forcing a failure. [ 426.475185][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.528225][T14595] CPU: 0 UID: 0 PID: 14595 Comm: syz.2.2214 Not tainted syzkaller #0 PREEMPT(full) [ 426.528252][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.528263][T14595] Call Trace: [ 426.528271][T14595] [ 426.528278][T14595] dump_stack_lvl+0x189/0x250 [ 426.528304][T14595] ? __pfx____ratelimit+0x10/0x10 [ 426.528322][T14595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.528341][T14595] ? __pfx__printk+0x10/0x10 [ 426.528377][T14595] should_fail_ex+0x414/0x560 [ 426.528407][T14595] strncpy_from_user+0x36/0x2c0 [ 426.528434][T14595] getname_flags+0xf3/0x540 [ 426.528460][T14595] __x64_sys_mkdirat+0x7a/0xa0 [ 426.528479][T14595] do_syscall_64+0xfa/0xf80 [ 426.528498][T14595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.528514][T14595] ? clear_bhb_loop+0x60/0xb0 [ 426.528536][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.528552][T14595] RIP: 0033:0x7fe53cf8f749 [ 426.528567][T14595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.528581][T14595] RSP: 002b:00007fe53dd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 426.528601][T14595] RAX: ffffffffffffffda RBX: 00007fe53d1e5fa0 RCX: 00007fe53cf8f749 [ 426.528614][T14595] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 426.528626][T14595] RBP: 00007fe53dd83090 R08: 0000000000000000 R09: 0000000000000000 [ 426.528637][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.528648][T14595] R13: 00007fe53d1e6038 R14: 00007fe53d1e5fa0 R15: 00007fff2e203ad8 [ 426.528678][T14595] [ 426.762843][T14600] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 427.301051][T14618] tipc: Enabling not permitted [ 427.317245][T14618] tipc: Enabling of bearer rejected, failed to enable media [ 427.427735][T14621] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 427.544574][T14621] : entered promiscuous mode [ 427.598325][T14625] IPVS: Scheduler module ip_vs_sip not found [ 427.683015][T14626] bond7: entered promiscuous mode [ 427.688600][T14626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 427.773785][T14641] FAULT_INJECTION: forcing a failure. [ 427.773785][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 427.798373][T14633] lo speed is unknown, defaulting to 1000 [ 427.815217][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.4.2228 Not tainted syzkaller #0 PREEMPT(full) [ 427.815245][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.815256][T14641] Call Trace: [ 427.815263][T14641] [ 427.815271][T14641] dump_stack_lvl+0x189/0x250 [ 427.815297][T14641] ? __pfx____ratelimit+0x10/0x10 [ 427.815316][T14641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.815336][T14641] ? __pfx__printk+0x10/0x10 [ 427.815367][T14641] ? __pfx___might_resched+0x10/0x10 [ 427.815384][T14641] ? fs_reclaim_acquire+0x7d/0x100 [ 427.815407][T14641] should_fail_ex+0x414/0x560 [ 427.815438][T14641] should_failslab+0xa8/0x100 [ 427.815460][T14641] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 427.815487][T14641] ? __d_alloc+0x37/0x6f0 [ 427.815514][T14641] __d_alloc+0x37/0x6f0 [ 427.815543][T14641] d_alloc+0x4b/0x190 [ 427.815564][T14641] ? lookup_one_qstr_excl+0xc8/0x360 [ 427.815589][T14641] lookup_one_qstr_excl+0xdc/0x360 [ 427.815616][T14641] filename_create+0x209/0x360 [ 427.815631][T14641] ? rcu_is_watching+0x15/0xb0 [ 427.815663][T14641] ? __pfx_filename_create+0x10/0x10 [ 427.815690][T14641] do_mkdirat+0xca/0x4b0 [ 427.815715][T14641] ? __pfx_do_mkdirat+0x10/0x10 [ 427.815734][T14641] ? getname_flags+0x1e5/0x540 [ 427.815759][T14641] __x64_sys_mkdirat+0x87/0xa0 [ 427.815778][T14641] do_syscall_64+0xfa/0xf80 [ 427.815798][T14641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.815816][T14641] ? clear_bhb_loop+0x60/0xb0 [ 427.815838][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.815854][T14641] RIP: 0033:0x7f14bed8f749 [ 427.815872][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.815886][T14641] RSP: 002b:00007f14bfb51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 427.815907][T14641] RAX: ffffffffffffffda RBX: 00007f14befe5fa0 RCX: 00007f14bed8f749 [ 427.815919][T14641] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 427.815931][T14641] RBP: 00007f14bfb51090 R08: 0000000000000000 R09: 0000000000000000 [ 427.815942][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.815952][T14641] R13: 00007f14befe6038 R14: 00007f14befe5fa0 R15: 00007ffe95f74788 [ 427.815984][T14641] [ 427.948292][T14648] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2230'. [ 427.967544][T14649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2229'. [ 428.041034][T14651] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2231'. [ 428.127407][T14653] bond0: (slave sit0): Error: Device type is different from other slaves [ 428.549972][T14633] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.963780][T14670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.976116][T14670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.990971][T14670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 429.095363][T14674] bond8: option arp_validate: invalid value (18446744073491447809) [ 429.108096][T14677] netlink: 'syz.0.2237': attribute type 13 has an invalid length. [ 429.108563][T14674] bond8 (unregistering): Released all slaves [ 429.140054][T14633] xfrm0 speed is unknown, defaulting to 1000 [ 429.198801][T14670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.209506][T14670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.220282][T14670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 429.390487][T14670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.406077][T14670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.433859][T14670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 429.770877][T14670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.837976][T14670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.861852][T14670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 429.880117][T14710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2243'. [ 429.925722][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 430.332571][ T1332] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.351012][ T1332] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 430.371275][ T1332] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 430.418712][ T1332] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.429316][ T1332] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 430.441823][ T1332] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 430.495220][ T1332] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.512776][ T1332] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 430.533450][ T1332] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 430.631440][ T1332] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.647788][ T1332] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 430.662086][ T1332] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 430.874425][T14731] 8021q: adding VLAN 0 to HW filter on device bond10 [ 431.097590][T14737] lo speed is unknown, defaulting to 1000 [ 431.215543][T14747] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2253'. [ 431.426532][T14755] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 431.460194][T14758] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 431.584951][T14737] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.710065][T14772] netlink: 'syz.2.2259': attribute type 21 has an invalid length. [ 431.718548][T14772] netlink: 'syz.2.2259': attribute type 6 has an invalid length. [ 431.728287][T14772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2259'. [ 431.759979][T14772] dvmrp0: entered allmulticast mode [ 432.015133][T14781] lo speed is unknown, defaulting to 1000 [ 432.052581][T14737] xfrm0 speed is unknown, defaulting to 1000 [ 432.127625][T14788] 8021q: VLANs not supported on ip_vti0 [ 432.287108][ T30] audit: type=1107 audit(1766163095.878:6): pid=14791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 432.360265][T14781] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.515078][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 432.532592][T14795] erspan0: entered promiscuous mode [ 432.542493][T14795] erspan0: left promiscuous mode [ 432.672968][T14781] xfrm0 speed is unknown, defaulting to 1000 [ 432.895672][T14804] bridge6: entered promiscuous mode [ 432.970998][T14808] tipc: Enabled bearer , priority 0 [ 432.986867][T14808] syzkaller0: entered promiscuous mode [ 432.994785][T14808] syzkaller0: entered allmulticast mode [ 433.115180][T14818] tipc: Resetting bearer [ 433.146390][T14807] tipc: Resetting bearer [ 433.245610][T14807] tipc: Disabling bearer [ 433.389781][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2276'. [ 433.607206][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.620907][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.633228][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.661924][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.689771][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.717514][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.079206][T14860] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 434.179228][T14857] lo speed is unknown, defaulting to 1000 [ 434.192715][T14863] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 434.244571][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.317419][T14863] team0: entered promiscuous mode [ 434.323101][T14863] team_slave_0: entered promiscuous mode [ 434.329456][T14863] team_slave_1: entered promiscuous mode [ 434.335821][T14863] team0: entered allmulticast mode [ 434.342148][T14863] team_slave_0: entered allmulticast mode [ 434.348232][T14863] team_slave_1: entered allmulticast mode [ 434.356243][T14863] bond0: (slave team0): Enslaving as an active interface with an up link [ 434.372377][T14867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2287'. [ 434.388974][T14867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2287'. [ 434.430427][T14872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2287'. [ 434.497665][T14874] 8021q: VLANs not supported on wg1 [ 434.510961][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'. [ 434.524702][ T6412] bond0: (slave team0): interface is now down [ 434.543997][ T6412] bond0: now running without any active interface! [ 434.976733][T14884] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 435.073773][T14890] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2292'. [ 435.092482][T14871] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 435.100471][T14871] netlink: 'syz.2.2288': attribute type 4 has an invalid length. [ 435.114215][T14871] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2288'. [ 435.134521][T14869] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 435.148781][T14890] geneve3: entered promiscuous mode [ 435.148795][T14869] netlink: 'syz.2.2288': attribute type 4 has an invalid length. [ 435.148810][T14869] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2288'. [ 435.164814][T14890] geneve3: entered allmulticast mode [ 435.222040][T14857] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.238097][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 435.354617][T14896] FAULT_INJECTION: forcing a failure. [ 435.354617][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 435.431811][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.1.2294 Not tainted syzkaller #0 PREEMPT(full) [ 435.431846][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.431856][T14896] Call Trace: [ 435.431865][T14896] [ 435.431872][T14896] dump_stack_lvl+0x189/0x250 [ 435.431899][T14896] ? __pfx____ratelimit+0x10/0x10 [ 435.431917][T14896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.431937][T14896] ? __pfx__printk+0x10/0x10 [ 435.431968][T14896] ? __pfx___might_resched+0x10/0x10 [ 435.431993][T14896] should_fail_ex+0x414/0x560 [ 435.432027][T14896] should_failslab+0xa8/0x100 [ 435.432066][T14896] __kmalloc_noprof+0xdf/0x800 [ 435.432083][T14896] ? security_inode_init_security+0xfc/0x3d0 [ 435.432105][T14896] ? __pfx___get_acl+0x10/0x10 [ 435.432122][T14896] ? __raw_spin_lock_init+0x45/0x100 [ 435.432146][T14896] security_inode_init_security+0xfc/0x3d0 [ 435.432169][T14896] ? __pfx_shmem_initxattrs+0x10/0x10 [ 435.432188][T14896] ? __pfx_security_inode_init_security+0x10/0x10 [ 435.432208][T14896] ? set_cached_acl+0xd2/0x180 [ 435.432226][T14896] ? simple_acl_create+0x184/0x1b0 [ 435.432251][T14896] shmem_mknod+0x1fe/0x360 [ 435.432274][T14896] shmem_mkdir+0x33/0x70 [ 435.432294][T14896] vfs_mkdir+0x512/0x5b0 [ 435.432322][T14896] do_mkdirat+0x276/0x4b0 [ 435.432346][T14896] ? __pfx_do_mkdirat+0x10/0x10 [ 435.432366][T14896] ? getname_flags+0x1e5/0x540 [ 435.432391][T14896] __x64_sys_mkdirat+0x87/0xa0 [ 435.432410][T14896] do_syscall_64+0xfa/0xf80 [ 435.432430][T14896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.432447][T14896] ? clear_bhb_loop+0x60/0xb0 [ 435.432469][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.432487][T14896] RIP: 0033:0x7f55cc38f749 [ 435.432504][T14896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.432518][T14896] RSP: 002b:00007f55ca5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 435.432539][T14896] RAX: ffffffffffffffda RBX: 00007f55cc5e5fa0 RCX: 00007f55cc38f749 [ 435.432552][T14896] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 435.432564][T14896] RBP: 00007f55ca5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.432575][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.432586][T14896] R13: 00007f55cc5e6038 R14: 00007f55cc5e5fa0 R15: 00007ffc123fe1d8 [ 435.432617][T14896] [ 435.796726][T14857] xfrm0 speed is unknown, defaulting to 1000 [ 435.803437][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2299'. [ 436.126373][T14922] syzkaller0: refused to change device tx_queue_len [ 436.408821][T14934] xt_hashlimit: max too large, truncated to 1048576 [ 436.437571][T14935] gre0: entered promiscuous mode [ 436.454119][T14935] gre0: entered allmulticast mode [ 436.629558][T14941] FAULT_INJECTION: forcing a failure. [ 436.629558][T14941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.644287][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.0.2308 Not tainted syzkaller #0 PREEMPT(full) [ 436.644314][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.644325][T14941] Call Trace: [ 436.644332][T14941] [ 436.644340][T14941] dump_stack_lvl+0x189/0x250 [ 436.644367][T14941] ? __pfx____ratelimit+0x10/0x10 [ 436.644385][T14941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.644406][T14941] ? __pfx__printk+0x10/0x10 [ 436.644442][T14941] should_fail_ex+0x414/0x560 [ 436.644473][T14941] _copy_to_user+0x31/0xb0 [ 436.644497][T14941] simple_read_from_buffer+0xe1/0x170 [ 436.644523][T14941] proc_fail_nth_read+0x1b3/0x220 [ 436.644546][T14941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.644568][T14941] ? rw_verify_area+0x2a6/0x4d0 [ 436.644584][T14941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.644604][T14941] vfs_read+0x200/0xa30 [ 436.644620][T14941] ? fdget_pos+0x247/0x320 [ 436.644645][T14941] ? __pfx___mutex_lock+0x10/0x10 [ 436.644664][T14941] ? __pfx_vfs_read+0x10/0x10 [ 436.644683][T14941] ? __fget_files+0x2a/0x420 [ 436.644708][T14941] ? __fget_files+0x3a0/0x420 [ 436.644727][T14941] ? __fget_files+0x2a/0x420 [ 436.644764][T14941] ksys_read+0x145/0x250 [ 436.644785][T14941] ? __pfx_ksys_read+0x10/0x10 [ 436.644805][T14941] ? do_syscall_64+0xbe/0xf80 [ 436.644828][T14941] do_syscall_64+0xfa/0xf80 [ 436.644848][T14941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.644865][T14941] ? clear_bhb_loop+0x60/0xb0 [ 436.644886][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.644903][T14941] RIP: 0033:0x7fc6ffb8e15c [ 436.644920][T14941] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.644934][T14941] RSP: 002b:00007fc7009ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.644952][T14941] RAX: ffffffffffffffda RBX: 00007fc6ffde5fa0 RCX: 00007fc6ffb8e15c [ 436.644965][T14941] RDX: 000000000000000f RSI: 00007fc7009ec0a0 RDI: 0000000000000004 [ 436.644980][T14941] RBP: 00007fc7009ec090 R08: 0000000000000000 R09: 0000000000000000 [ 436.644991][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.645001][T14941] R13: 00007fc6ffde6038 R14: 00007fc6ffde5fa0 R15: 00007ffe3adbadd8 [ 436.645034][T14941] [ 436.988554][T14939] lo speed is unknown, defaulting to 1000 [ 437.100065][T14947] syzkaller0: entered promiscuous mode [ 437.124145][T14947] syzkaller0: entered allmulticast mode [ 437.453950][T14948] lo speed is unknown, defaulting to 1000 [ 437.453996][T14939] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.474800][T14962] tipc: Enabling of bearer rejected, already enabled [ 437.568547][ T981] hid (null): unknown global tag 0xe [ 437.600625][ T981] hid-generic 0005:15C2:0009.0001: unknown global tag 0xe [ 437.637452][ T981] hid-generic 0005:15C2:0009.0001: item 0 4 1 14 parsing failed [ 437.650315][T14973] validate_nla: 2 callbacks suppressed [ 437.650333][T14973] netlink: 'syz.3.2313': attribute type 7 has an invalid length. [ 437.690402][ T981] hid-generic 0005:15C2:0009.0001: probe with driver hid-generic failed with error -22 [ 437.757452][T14977] netlink: 'syz.2.2318': attribute type 3 has an invalid length. [ 437.772351][T14977] dvmrp0: left allmulticast mode [ 437.872839][T14939] xfrm0 speed is unknown, defaulting to 1000 [ 437.947401][T14982] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 438.031819][T14982] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.039418][T14948] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.056202][T14984] veth9: entered promiscuous mode [ 438.075329][T14984] bond6: (slave veth9): Enslaving as an active interface with a down link [ 438.476558][T14948] xfrm0 speed is unknown, defaulting to 1000 [ 438.768913][T15000] __nla_validate_parse: 4 callbacks suppressed [ 438.768934][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 439.061620][T15021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2325'. [ 439.391671][T15041] netlink: 'syz.1.2328': attribute type 12 has an invalid length. [ 439.492036][T15046] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 440.132999][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 440.166372][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.166460][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.203105][T15061] tipc: Enabled bearer , priority 0 [ 440.338055][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 440.351301][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 440.505106][T15073] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 440.513770][T15073] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2340'. [ 440.525345][T15073] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2340'. [ 440.538111][T15073] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2340'. [ 440.736385][T15063] tipc: Disabling bearer [ 441.001098][T15076] team0: Port device bond0 removed [ 441.058823][T15076] team0: Port device dummy0 removed [ 441.072102][T15076] bridge_slave_0: left allmulticast mode [ 441.077989][T15076] bridge_slave_0: left promiscuous mode [ 441.085332][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.096264][T15076] bridge_slave_1: left allmulticast mode [ 441.104221][T15076] bridge_slave_1: left promiscuous mode [ 441.111188][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.131236][T15076] bond0: (slave bond_slave_0): Releasing backup interface [ 441.147588][T15076] bond_slave_0: left allmulticast mode [ 441.162948][T15076] bond0: (slave bond_slave_1): Releasing backup interface [ 441.186179][T15076] bond_slave_1: left allmulticast mode [ 441.195835][T15095] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2345'. [ 441.208659][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2344'. [ 441.224094][T15076] team0: Port device C removed [ 441.231483][T15076] team0: Port device team_slave_1 removed [ 441.239316][T15076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.258312][T15082] bridge0: left promiscuous mode [ 441.283883][T15079] syzkaller1: entered promiscuous mode [ 441.298535][T15079] syzkaller1: entered allmulticast mode [ 441.777358][T15113] xt_hashlimit: overflow, rate too high: 0 [ 442.553702][T15153] netlink: 'syz.1.2359': attribute type 29 has an invalid length. [ 442.589323][T15156] netlink: 'syz.1.2359': attribute type 29 has an invalid length. [ 442.687566][T15159] lo speed is unknown, defaulting to 1000 [ 443.284818][T15159] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.295546][T15163] lo speed is unknown, defaulting to 1000 [ 443.363946][T15173] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 443.879603][T15159] xfrm0 speed is unknown, defaulting to 1000 [ 444.042792][T15163] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.062989][T15185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.193448][T15190] __nla_validate_parse: 6 callbacks suppressed [ 444.193465][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 444.316388][T15193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2369'. [ 444.326061][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 444.335230][T15193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2369'. [ 444.345344][T15193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2369'. [ 444.441377][T15163] xfrm0 speed is unknown, defaulting to 1000 [ 444.734757][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 444.765538][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 445.526754][T15221] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 445.735496][T15221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.862645][T15232] veth11: entered promiscuous mode [ 445.886512][T15232] bond7: (slave veth11): Enslaving as an active interface with a down link [ 445.901766][T15234] syzkaller0: entered promiscuous mode [ 445.932785][T15234] syzkaller0: entered allmulticast mode [ 446.012340][T15232] tipc: Enabled bearer , priority 0 [ 446.020495][T15240] syzkaller0: entered promiscuous mode [ 446.037329][T15240] syzkaller0: entered allmulticast mode [ 446.058099][T15220] tipc: Resetting bearer [ 446.064462][T15242] netlink: 'syz.0.2382': attribute type 153 has an invalid length. [ 446.088317][T15220] tipc: Disabling bearer [ 446.233051][T15251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2385'. [ 446.248468][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 446.396152][T15254] batadv1: entered promiscuous mode [ 446.408481][T15256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2388'. [ 446.505207][T15258] syzkaller0: entered promiscuous mode [ 446.520657][T15262] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.531760][T15258] syzkaller0: entered allmulticast mode [ 446.587900][T15268] nft_compat: unsupported protocol 0 [ 446.613009][T15262] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.733247][T15254] lo speed is unknown, defaulting to 1000 [ 446.906833][T15274] netlink: 'syz.0.2394': attribute type 1 has an invalid length. [ 447.013652][T15279] tipc: Bearer : already 2 bearers with priority 10 [ 447.024238][T15279] tipc: Bearer : trying with adjusted priority [ 447.060013][T15279] tipc: Enabling of bearer rejected, failed to enable media [ 447.188718][T15284] syzkaller0: entered promiscuous mode [ 447.222388][T15284] syzkaller0: entered allmulticast mode [ 447.368733][T15254] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.504504][T15300] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 447.613407][T15300] 8021q: adding VLAN 0 to HW filter on device bond10 [ 447.689939][T15303] bond10: (slave gretap2): making interface the new active one [ 447.699289][T15303] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 447.711023][T15254] xfrm0 speed is unknown, defaulting to 1000 [ 447.795809][T15307] vti1: entered promiscuous mode [ 447.818651][ T30] audit: type=1804 audit(1766163111.408:7): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2404" name="/newroot/473/cgroup.controllers" dev="tmpfs" ino=2461 res=1 errno=0 [ 447.869367][ T30] audit: type=1800 audit(1766163111.438:8): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2404" name="cgroup.controllers" dev="tmpfs" ino=2461 res=0 errno=0 [ 447.891916][T15311] netlink: 'syz.2.2405': attribute type 21 has an invalid length. [ 447.917369][T15311] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 448.005092][T15319] --map-set only usable from mangle table [ 449.034501][T15342] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 449.338497][T15344] lo speed is unknown, defaulting to 1000 [ 449.351845][T15355] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 449.475130][T15359] __nla_validate_parse: 10 callbacks suppressed [ 449.475148][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 449.568972][T15355] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.618566][T15357] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 449.642831][T15363] sctp: [Deprecated]: syz.3.2419 (pid 15363) Use of int in maxseg socket option. [ 449.642831][T15363] Use struct sctp_assoc_value instead [ 449.672320][T15357] bond10: (slave batadv1): making interface the new active one [ 449.711024][T15357] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 450.001199][T15359] bond10 (unregistering): (slave batadv1): Releasing active interface [ 450.024495][T15359] bond10 (unregistering): Released all slaves [ 450.049790][T15344] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.068810][T15374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2421'. [ 450.081886][T15370] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.178017][T15376] netlink: 'syz.3.2421': attribute type 3 has an invalid length. [ 450.222819][T15370] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.350359][T15381] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2422'. [ 450.509608][T15370] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.572103][T15344] xfrm0 speed is unknown, defaulting to 1000 [ 450.628966][T15370] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.649257][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 450.873233][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.907114][ T1161] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.956364][ T1161] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.978633][ T1161] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.992661][T15390] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 451.091598][T15389] can: request_module (can-proto-0) failed. [ 451.242595][T15397] netlink: 'syz.3.2427': attribute type 32 has an invalid length. [ 451.382911][T15397] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2427'. [ 451.432903][T15397] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2427'. [ 451.462502][T15400] netlink: 'syz.3.2427': attribute type 32 has an invalid length. [ 452.260454][T15414] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.279594][T15414] bond11: (slave lo): speed changed to 0 on port 1 [ 452.289208][T15414] bond11: (slave lo): Enslaving as a backup interface with an up link [ 452.313813][T15414] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 452.488137][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 452.497721][T15433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2438'. [ 452.507084][T15433] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2438'. [ 452.535440][T15433] block nbd0: Unsupported socket: should be TCP or UNIX. [ 452.573998][T15440] bond0: entered promiscuous mode [ 452.846146][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2444'. [ 452.890966][T15456] macvlan0: entered allmulticast mode [ 452.909926][T15456] veth1_vlan: entered allmulticast mode [ 453.229373][T15464] lo speed is unknown, defaulting to 1000 [ 453.937367][T15464] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.323315][T15507] tipc: Enabling of bearer rejected, failed to enable media [ 454.363324][T15510] tipc: Enabling of bearer rejected, failed to enable media [ 454.487842][T15464] xfrm0 speed is unknown, defaulting to 1000 [ 455.856910][T15547] __nla_validate_parse: 5 callbacks suppressed [ 455.856928][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2469'. [ 456.266024][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'. [ 456.412274][T15556] lo speed is unknown, defaulting to 1000 [ 456.943831][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 457.041086][T15556] ip6_vti0 speed is unknown, defaulting to 1000 [ 457.069741][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 457.112195][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 457.524856][T15556] xfrm0 speed is unknown, defaulting to 1000 [ 457.871437][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 458.098634][T15600] syzkaller0: entered promiscuous mode [ 458.105652][T15600] syzkaller0: entered allmulticast mode [ 458.113965][T15602] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 458.137980][T15602] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 458.146113][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 458.179592][T15604] lo speed is unknown, defaulting to 1000 [ 458.193764][T15600] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 458.202411][T15600] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 458.240283][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 458.392601][T15617] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2488'. [ 458.592531][T15604] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.616066][T15630] wg1: left promiscuous mode [ 459.870427][T15630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.056482][T15630] hsr0: left promiscuous mode [ 460.065211][T15630] vlan0: left promiscuous mode [ 460.077932][T15630] team1: left promiscuous mode [ 460.088324][T15630] geneve2: left promiscuous mode [ 460.126014][T15630] bond6: left promiscuous mode [ 460.143086][T15630] bond9: left promiscuous mode [ 460.177534][T15604] xfrm0 speed is unknown, defaulting to 1000 [ 460.189410][T15015] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.206979][T15015] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 460.216415][T15015] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.225276][T15015] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.243754][T15015] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 460.257393][T15015] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.266471][T15015] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.275010][T15015] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 460.283660][T15015] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.317615][T15015] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.331832][T15015] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 460.347249][T15015] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 460.486088][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 460.581997][T15656] team1: entered promiscuous mode [ 460.587083][T15656] team1: entered allmulticast mode [ 460.652336][T15656] 8021q: adding VLAN 0 to HW filter on device team1 [ 460.807705][T15666] team_slave_1: Caught tx_queue_len zero misconfig [ 461.190959][T15682] sctp: [Deprecated]: syz.4.2507 (pid 15682) Use of int in max_burst socket option. [ 461.190959][T15682] Use struct sctp_assoc_value instead [ 461.210721][T15681] tipc: Enabled bearer , priority 0 [ 461.218341][T15681] syzkaller0: entered promiscuous mode [ 461.224277][T15681] syzkaller0: entered allmulticast mode [ 461.239423][T15681] netlink: 'syz.4.2507': attribute type 83 has an invalid length. [ 461.251665][T15680] tipc: Resetting bearer [ 461.280130][T15680] tipc: Disabling bearer [ 461.550790][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 461.552207][T15689] lo speed is unknown, defaulting to 1000 [ 461.860730][T15706] netlink: 'syz.3.2513': attribute type 11 has an invalid length. [ 461.966613][T15714] netlink: 'syz.4.2514': attribute type 15 has an invalid length. [ 462.013511][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2515'. [ 462.031738][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'. [ 462.133072][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 462.142214][T15716] 8021q: adding VLAN 0 to HW filter on device bond12 [ 462.154568][T15694] lo speed is unknown, defaulting to 1000 [ 462.163648][T15689] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.469702][T15737] dvmrp12: entered allmulticast mode [ 462.666533][T15736] dvmrp12: left allmulticast mode [ 462.766270][T15719] lo speed is unknown, defaulting to 1000 [ 462.986477][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 462.987553][T15694] ip6_vti0 speed is unknown, defaulting to 1000 [ 463.003095][T15752] netlink: 'syz.4.2524': attribute type 11 has an invalid length. [ 463.010950][T15752] netlink: 'syz.4.2524': attribute type 11 has an invalid length. [ 463.082403][T15752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2524'. [ 463.173651][T15759] macvtap1: entered promiscuous mode [ 463.210998][T15759] macvtap1: entered allmulticast mode [ 463.234338][T15752] netlink: 'syz.4.2524': attribute type 11 has an invalid length. [ 463.251752][T15752] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.2524'. [ 463.491276][T15770] lo speed is unknown, defaulting to 1000 [ 463.554345][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 463.577972][T15777] vxcan1: entered promiscuous mode [ 463.599650][T15777] vxcan1: entered allmulticast mode [ 463.633293][T15780] pimreg1: tun_chr_ioctl cmd 1074025673 [ 463.639234][T15779] pimreg1: tun_chr_ioctl cmd 1074025677 [ 463.652574][T15779] pimreg1: linktype set to 804 [ 463.670284][T15780] pimreg1: tun_chr_ioctl cmd 1074025677 [ 463.682172][T15780] pimreg1: linktype set to 804 [ 463.932602][T15719] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.000635][T15789] lo speed is unknown, defaulting to 1000 [ 464.044553][T15694] xfrm0 speed is unknown, defaulting to 1000 [ 464.398002][T15770] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.509203][T15719] xfrm0 speed is unknown, defaulting to 1000 [ 464.705492][T15789] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.949886][T15770] xfrm0 speed is unknown, defaulting to 1000 [ 464.986955][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 465.648563][T15789] xfrm0 speed is unknown, defaulting to 1000 [ 466.303253][T15811] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 467.056709][T15817] bond8: (slave ip_vti0): Device is not bonding slave [ 467.072284][T15817] bond8: option active_slave: invalid value (ip_vti0) [ 467.086234][T15817] bond8 (unregistering): Released all slaves [ 468.045255][T15830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2544'. [ 468.191195][T15835] netlink: 'syz.2.2543': attribute type 1 has an invalid length. [ 468.199526][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 469.091258][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 469.185432][T15850] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.201116][T15854] bond0: left promiscuous mode [ 469.381349][T15870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2555'. [ 469.567374][T15877] syzkaller0: entered promiscuous mode [ 469.591963][T15877] syzkaller0: entered allmulticast mode [ 469.741046][T15894] x_tables: duplicate underflow at hook 3 [ 469.903918][T15896] netlink: 'syz.0.2563': attribute type 16 has an invalid length. [ 469.914469][T15896] netlink: 'syz.0.2563': attribute type 3 has an invalid length. [ 469.929954][T15896] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2563'. [ 470.021025][T15907] Cannot find map_set index 135 as target [ 470.042105][T15906] Cannot find map_set index 135 as target [ 470.076977][T15913] xt_l2tp: v2 doesn't support IP mode [ 470.084637][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2567'. [ 470.148073][T15915] xt_l2tp: v2 doesn't support IP mode [ 470.334491][T15926] syzkaller0: entered promiscuous mode [ 470.340001][T15926] syzkaller0: entered allmulticast mode [ 470.413521][T15931] syzkaller0: entered promiscuous mode [ 470.419142][T15931] syzkaller0: entered allmulticast mode [ 470.454766][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 470.517450][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 470.550478][T15942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.642088][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 470.713633][T15946] openvswitch: netlink: IP tunnel TTL not specified. [ 470.778233][T15944] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2575'. [ 471.084532][T15950] tipc: Enabled bearer , priority 0 [ 471.097379][T15951] syzkaller0: entered promiscuous mode [ 471.107703][T15951] syzkaller0: entered allmulticast mode [ 471.138972][T15952] tipc: Resetting bearer [ 471.152851][T15949] tipc: Resetting bearer [ 471.171199][T15949] tipc: Disabling bearer [ 471.460618][T15965] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 471.526485][T15967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.606919][T15973] openvswitch: netlink: IP tunnel TTL not specified. [ 471.743625][T15979] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 471.938824][T15981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.956162][ T5926] lo speed is unknown, defaulting to 1000 [ 471.966251][ T5977] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.976730][ T5926] syz0: Port: 1 Link ACTIVE [ 471.982324][ T5977] syz2: Port: 1 Link ACTIVE [ 472.008277][ T5977] lo speed is unknown, defaulting to 1000 [ 472.014580][ T5926] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.824802][T16025] IPv6: Can't replace route, no match found [ 472.878607][T16028] netlink: 'syz.4.2600': attribute type 1 has an invalid length. [ 472.926615][T16025] 8021q: adding VLAN 0 to HW filter on device bond9 [ 473.076307][T16028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.255156][T16047] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 473.502354][T16059] __nla_validate_parse: 3 callbacks suppressed [ 473.502373][T16059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2608'. [ 473.528933][T16056] lo speed is unknown, defaulting to 1000 [ 473.752321][T16071] syzkaller0: entered promiscuous mode [ 473.781737][T16071] syzkaller0: entered allmulticast mode [ 473.820392][T16056] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.063665][T16056] xfrm0 speed is unknown, defaulting to 1000 [ 474.344424][T16091] lo speed is unknown, defaulting to 1000 [ 474.510979][T16100] netlink: 'syz.0.2619': attribute type 10 has an invalid length. [ 474.546482][T16100] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 474.860752][T16091] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.241712][T16091] xfrm0 speed is unknown, defaulting to 1000 [ 475.388601][T16122] lo speed is unknown, defaulting to 1000 [ 476.146614][T16122] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.234590][T16130] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 476.422159][T16132] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.2628'. [ 476.482528][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.821780][T16122] xfrm0 speed is unknown, defaulting to 1000 [ 477.522271][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 477.725984][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2635'. [ 477.741219][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2635'. [ 477.959359][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 478.238193][T16173] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2639'. [ 478.705631][T16185] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 478.715036][T16185] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2643'. [ 479.749934][T16214] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 479.776446][T16214] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2651'. [ 480.081897][T16237] netlink: 'syz.3.2659': attribute type 6 has an invalid length. [ 480.146456][T16237] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2659'. [ 480.558729][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 480.883926][T16265] lo speed is unknown, defaulting to 1000 [ 481.044507][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 481.103117][T16281] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2672'. [ 481.124104][ T9] IPVS: starting estimator thread 0... [ 481.133391][T16282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2673'. [ 481.152333][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 481.181721][T16282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'. [ 481.253771][T16284] IPVS: using max 26 ests per chain, 62400 per kthread [ 481.321642][T16292] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 481.554305][T16265] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.554312][T16268] lo speed is unknown, defaulting to 1000 [ 482.467090][T16283] lo speed is unknown, defaulting to 1000 [ 482.467122][T16265] xfrm0 speed is unknown, defaulting to 1000 [ 482.480020][T16268] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.105175][T16303] lo speed is unknown, defaulting to 1000 [ 483.660938][T16268] xfrm0 speed is unknown, defaulting to 1000 [ 483.660955][T16283] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.675161][T16289] lo speed is unknown, defaulting to 1000 [ 484.657934][T16303] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.683036][T16318] lo speed is unknown, defaulting to 1000 [ 485.196130][T16289] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.196130][T16283] xfrm0 speed is unknown, defaulting to 1000 [ 485.694147][T16303] xfrm0 speed is unknown, defaulting to 1000 [ 486.190054][T16289] xfrm0 speed is unknown, defaulting to 1000 [ 486.196618][T16318] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.111410][T16318] xfrm0 speed is unknown, defaulting to 1000 [ 488.742665][T16371] netlink: 212188 bytes leftover after parsing attributes in process `syz.2.2694'. [ 490.647878][T16391] netlink: 'syz.2.2701': attribute type 11 has an invalid length. [ 490.667681][T16391] netlink: 'syz.2.2701': attribute type 23 has an invalid length. [ 490.692501][T16391] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2701'. [ 491.433555][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 494.123442][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 494.711498][T16468] netlink: 'syz.4.2719': attribute type 11 has an invalid length. [ 495.265604][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 495.314576][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 495.349688][T16485] netlink: 'syz.0.2720': attribute type 15 has an invalid length. [ 496.123278][T16510] syzkaller0: entered promiscuous mode [ 496.128989][T16510] syzkaller0: entered allmulticast mode [ 496.323007][T16518] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2732'. [ 496.752032][T16533] netlink: 'syz.0.2736': attribute type 3 has an invalid length. [ 497.614517][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.627609][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.645274][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.657140][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.666894][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 497.791310][T16573] netlink: 212112 bytes leftover after parsing attributes in process `syz.0.2745'. [ 497.794337][T16568] lo speed is unknown, defaulting to 1000 [ 497.983223][T12298] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.091425][T16577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2746'. [ 498.150145][T12298] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.221203][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 498.248712][T12298] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.296382][T16581] ipvlan0: entered promiscuous mode [ 498.302938][T16581] ipvlan0: entered allmulticast mode [ 498.308745][T16581] geneve1: entered allmulticast mode [ 498.366206][T16568] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.396590][T12298] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.498488][T16584] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 498.598530][T16584] 8021q: adding VLAN 0 to HW filter on device bond10 [ 498.678766][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2750'. [ 498.941341][T16568] xfrm0 speed is unknown, defaulting to 1000 [ 499.329169][T12298] bond5 (unregistering): (slave ip6erspan1): Releasing active interface [ 499.386145][T16619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2758'. [ 499.771765][ T5830] Bluetooth: hci5: command tx timeout [ 499.877050][T12298] tipc: Disabling bearer [ 500.197690][T12298] bond2 (unregistering): (slave bridge4): Releasing active interface [ 500.275422][T12298] bond3 (unregistering): (slave bridge6): Releasing active interface [ 500.774242][T12298] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 500.784640][T12298] bond1 (unregistering): (slave macvlan2): the permanent HWaddr of slave - 9e:2a:31:51:d0:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 500.835760][T12298] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 500.855141][T12298] bond0 (unregistering): Released all slaves [ 501.068195][T12298] bond1 (unregistering): Released all slaves [ 501.081242][T12298] bond2 (unregistering): Released all slaves [ 501.297884][T12298] bond3 (unregistering): Released all slaves [ 501.509513][T12298] bond4 (unregistering): Released all slaves [ 501.619198][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.761216][T12298] bond5 (unregistering): Released all slaves [ 501.842400][ T5830] Bluetooth: hci5: command tx timeout [ 501.999530][T12298] bond6 (unregistering): (slave veth9): Releasing active interface [ 502.010505][T12298] bond6 (unregistering): Released all slaves [ 502.197228][T12298] bond7 (unregistering): (slave veth11): Releasing active interface [ 502.208253][T12298] bond7 (unregistering): Released all slaves [ 502.400972][T12298] bond8 (unregistering): Released all slaves [ 502.624219][T12298] bond9 (unregistering): Released all slaves [ 502.649682][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2756'. [ 502.663573][T16622] pim6reg: entered allmulticast mode [ 503.014064][T12298] : left promiscuous mode [ 503.347731][T12298] tipc: Disabling bearer [ 503.361740][T12298] tipc: Left network mode [ 503.452650][T16654] syzkaller0: entered promiscuous mode [ 503.458683][T16654] syzkaller0: entered allmulticast mode [ 503.588920][T16652] tipc: Enabled bearer , priority 0 [ 503.691424][T16651] tipc: Resetting bearer [ 503.705388][T16657] netlink: 'syz.0.2766': attribute type 4 has an invalid length. [ 503.716183][T16650] tipc: Resetting bearer [ 503.774670][T16658] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2766'. [ 503.785480][T16658] block nbd0: not configured, cannot reconfigure [ 503.793334][T16650] tipc: Disabling bearer [ 503.922413][ T5830] Bluetooth: hci5: command tx timeout [ 503.948121][ T5895] lo speed is unknown, defaulting to 1000 [ 503.964192][T16658] syzkaller0: entered promiscuous mode [ 503.970119][T16658] syzkaller0: entered allmulticast mode [ 503.996533][ T5895] syz0: Port: 1 Link DOWN [ 504.037889][ T9] lo speed is unknown, defaulting to 1000 [ 504.169797][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2768'. [ 504.303807][T16680] tipc: Enabled bearer , priority 0 [ 504.363039][T16680] syzkaller0: entered promiscuous mode [ 504.375542][T16680] syzkaller0: entered allmulticast mode [ 504.428314][T16686] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 504.582301][T16568] chnl_net:caif_netlink_parms(): no params data found [ 504.654960][T16687] bridge4: entered allmulticast mode [ 504.703917][T16686] bond7: entered promiscuous mode [ 504.709471][T16686] bond7: entered allmulticast mode [ 504.716453][T16686] 8021q: adding VLAN 0 to HW filter on device bond7 [ 504.730121][T16680] tipc: Resetting bearer [ 504.767825][T16679] tipc: Resetting bearer [ 504.853271][T16679] tipc: Disabling bearer [ 505.907623][T12298] hsr_slave_0: left promiscuous mode [ 506.022018][ T5830] Bluetooth: hci5: command tx timeout [ 506.286322][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'. [ 506.298374][T12298] pim6reg (unregistering): left allmulticast mode [ 507.349188][T16713] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 507.484331][T16736] lo speed is unknown, defaulting to 1000 [ 507.553361][T16742] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2783'. [ 507.584232][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.603546][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2783'. [ 507.621136][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.642480][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2783'. [ 507.657684][T16568] bridge_slave_0: entered allmulticast mode [ 507.677424][T16568] bridge_slave_0: entered promiscuous mode [ 507.717713][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.730229][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.738393][T16568] bridge_slave_1: entered allmulticast mode [ 507.758581][T16568] bridge_slave_1: entered promiscuous mode [ 507.828872][T16736] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.882839][T16742] lo speed is unknown, defaulting to 1000 [ 507.895403][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.008748][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.173854][T16568] team0: Port device team_slave_0 added [ 508.184957][T16568] team0: Port device team_slave_1 added [ 508.187866][T12298] IPVS: stop unused estimator thread 0... [ 508.326702][T16736] xfrm0 speed is unknown, defaulting to 1000 [ 508.350648][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.371270][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.440582][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.733017][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.759710][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.831896][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.852098][T16742] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.136044][T16568] hsr_slave_0: entered promiscuous mode [ 509.143687][T16568] hsr_slave_1: entered promiscuous mode [ 509.151313][T16568] debugfs: 'hsr0' already exists in 'hsr' [ 509.157500][T16568] Cannot create hsr debugfs directory [ 509.583723][T16742] xfrm0 speed is unknown, defaulting to 1000 [ 510.639613][T16775] Cannot find del_set index 4 as target [ 510.866380][T16568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.946956][T16568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.991094][T16568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.027308][T16568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.306431][T16568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.378788][T16568] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.418861][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.426588][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.459397][T15016] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.467374][T15016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.838337][T16793] lo speed is unknown, defaulting to 1000 [ 512.248932][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.545367][T16568] veth0_vlan: entered promiscuous mode [ 512.606312][T16568] veth1_vlan: entered promiscuous mode [ 512.734786][T16568] veth0_macvtap: entered promiscuous mode [ 512.773894][T16568] veth1_macvtap: entered promiscuous mode [ 512.842918][T16568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.891257][T16568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.956860][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.000100][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.004365][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2803'. [ 513.021166][ T7253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.104790][ T7253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.193551][T16793] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.377330][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.394076][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.493588][T15016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.514381][T15016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.142515][T16857] lo speed is unknown, defaulting to 1000 [ 514.330754][T16864] A link change request failed with some changes committed already. Interface vetè0_virt_wif may have been left with an inconsistent configuration, please check. [ 514.461761][T16793] xfrm0 speed is unknown, defaulting to 1000 [ 514.998451][T16864] bond0: option resend_igmp: invalid value (4096) [ 515.022281][T16864] bond0: option resend_igmp: allowed values 0 - 255 [ 515.061256][T16857] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.389018][T16857] xfrm0 speed is unknown, defaulting to 1000 [ 517.737260][T16918] lo speed is unknown, defaulting to 1000 [ 518.625871][T16918] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.384676][T16936] lo speed is unknown, defaulting to 1000 [ 519.392695][T16918] xfrm0 speed is unknown, defaulting to 1000 [ 520.254114][T16936] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.171081][T16950] Cannot find del_set index 0 as target [ 521.417785][T16936] xfrm0 speed is unknown, defaulting to 1000 [ 521.673740][T16953] xt_TCPMSS: Only works on TCP SYN packets [ 524.062967][T16959] batadv2: entered promiscuous mode [ 524.549034][T16961] lo speed is unknown, defaulting to 1000 [ 525.835497][T16980] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2848'. [ 525.924910][T16980] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2848'. [ 529.187362][T17011] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2856'. [ 529.209534][T17011] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2856'. [ 529.414241][T17000] bond13 (unregistering): Released all slaves [ 529.491925][T16961] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.499884][T17006] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 529.542993][T17006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 529.601901][T17006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 530.192305][T17035] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 530.239082][T17035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2860'. [ 530.347615][T16961] xfrm0 speed is unknown, defaulting to 1000 [ 531.611459][T17048] vlan0: entered promiscuous mode [ 531.831144][T17050] bridge0: port 3(veth0_to_bridge) entered blocking state [ 531.884185][T17052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2867'. [ 531.914371][T17050] bridge0: port 3(veth0_to_bridge) entered disabled state [ 532.015987][T17050] veth0_to_bridge: entered allmulticast mode [ 532.173227][T17050] veth0_to_bridge: entered promiscuous mode [ 532.350370][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2870'. [ 533.054940][T17066] veth3: entered promiscuous mode [ 533.372546][T17076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.456829][T17076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 535.724386][T17129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2885'. [ 535.930336][T17131] lo speed is unknown, defaulting to 1000 [ 536.922518][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 537.210981][T17131] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.270374][T17143] lo speed is unknown, defaulting to 1000 [ 537.767148][T17165] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2893'. [ 538.457540][T17171] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2895'. [ 538.607315][T17131] xfrm0 speed is unknown, defaulting to 1000 [ 538.614450][T17143] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.565222][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 540.018384][ C0] sched: DL replenish lagged too much [ 540.071696][T17143] xfrm0 speed is unknown, defaulting to 1000 [ 541.350964][T17210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.969412][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 543.421271][T17233] erspan0: entered promiscuous mode [ 543.584002][T17243] FAULT_INJECTION: forcing a failure. [ 543.584002][T17243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.700417][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.3.2916 Not tainted syzkaller #0 PREEMPT(full) [ 543.700445][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.700456][T17243] Call Trace: [ 543.700464][T17243] [ 543.700475][T17243] dump_stack_lvl+0x189/0x250 [ 543.700503][T17243] ? __pfx____ratelimit+0x10/0x10 [ 543.700528][T17243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.700549][T17243] ? __pfx__printk+0x10/0x10 [ 543.700575][T17243] ? __might_fault+0xb0/0x130 [ 543.700618][T17243] should_fail_ex+0x414/0x560 [ 543.700660][T17243] _copy_from_user+0x2d/0xb0 [ 543.700684][T17243] do_ipv6_setsockopt+0x23e/0x2eb0 [ 543.700715][T17243] ? get_pid_task+0x20/0x1f0 [ 543.700737][T17243] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 543.700762][T17243] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 543.700795][T17243] ? __lock_acquire+0x6b6/0x2cf0 [ 543.700819][T17243] ? __pfx___might_resched+0x10/0x10 [ 543.700843][T17243] ? ksys_write+0x1cb/0x250 [ 543.700865][T17243] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 543.700884][T17243] ? aa_sk_perm+0x15f/0x920 [ 543.700906][T17243] ? aa_sk_perm+0x7ee/0x920 [ 543.700932][T17243] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.700954][T17243] ? aa_sock_opt_perm+0xff/0x1a0 [ 543.700997][T17243] ipv6_setsockopt+0x59/0x170 [ 543.701019][T17243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 543.701048][T17243] do_sock_setsockopt+0x17c/0x1b0 [ 543.701074][T17243] __x64_sys_setsockopt+0x13f/0x1b0 [ 543.701101][T17243] do_syscall_64+0xfa/0xf80 [ 543.701121][T17243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.701139][T17243] ? clear_bhb_loop+0x60/0xb0 [ 543.701162][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.701180][T17243] RIP: 0033:0x7f7e5e98f749 [ 543.701198][T17243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.701213][T17243] RSP: 002b:00007f7e5f8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 543.701234][T17243] RAX: ffffffffffffffda RBX: 00007f7e5ebe5fa0 RCX: 00007f7e5e98f749 [ 543.701247][T17243] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 543.701260][T17243] RBP: 00007f7e5f8cf090 R08: 0000000000000380 R09: 0000000000000000 [ 543.701272][T17243] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 543.701284][T17243] R13: 00007f7e5ebe6038 R14: 00007f7e5ebe5fa0 R15: 00007fff4dd06778 [ 543.701317][T17243] [ 544.311010][T17233] bond0: left promiscuous mode [ 544.317234][T17233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.329076][T17233] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.371227][T17233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.984728][T17256] gretap1: entered promiscuous mode [ 545.758088][T17272] netlink: 'syz.2.2923': attribute type 11 has an invalid length. [ 546.401593][T17281] dummy0: entered promiscuous mode [ 546.435250][T17281] vlan3: entered promiscuous mode [ 547.627946][T17283] netlink: 'syz.2.2926': attribute type 12 has an invalid length. [ 547.670016][T17284] netlink: 'syz.2.2926': attribute type 12 has an invalid length. [ 547.942700][T17286] FAULT_INJECTION: forcing a failure. [ 547.942700][T17286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.991726][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.4.2928 Not tainted syzkaller #0 PREEMPT(full) [ 547.991756][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.991767][T17286] Call Trace: [ 547.991776][T17286] [ 547.991784][T17286] dump_stack_lvl+0x189/0x250 [ 547.991811][T17286] ? __pfx____ratelimit+0x10/0x10 [ 547.991828][T17286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.991848][T17286] ? __pfx__printk+0x10/0x10 [ 547.991873][T17286] ? __might_fault+0xb0/0x130 [ 547.991906][T17286] should_fail_ex+0x414/0x560 [ 547.991936][T17286] _copy_from_user+0x2d/0xb0 [ 547.991958][T17286] __sys_bpf+0x1e3/0x860 [ 547.991984][T17286] ? __pfx___sys_bpf+0x10/0x10 [ 547.992021][T17286] ? ksys_write+0x22a/0x250 [ 547.992042][T17286] ? __pfx_ksys_write+0x10/0x10 [ 547.992064][T17286] __x64_sys_bpf+0x7c/0x90 [ 547.992087][T17286] do_syscall_64+0xfa/0xf80 [ 547.992107][T17286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.992124][T17286] ? clear_bhb_loop+0x60/0xb0 [ 547.992153][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.992175][T17286] RIP: 0033:0x7f14bed8f749 [ 547.992192][T17286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.992207][T17286] RSP: 002b:00007f14bfb51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.992227][T17286] RAX: ffffffffffffffda RBX: 00007f14befe5fa0 RCX: 00007f14bed8f749 [ 547.992246][T17286] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 547.992257][T17286] RBP: 00007f14bfb51090 R08: 0000000000000000 R09: 0000000000000000 [ 547.992269][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.992280][T17286] R13: 00007f14befe6038 R14: 00007f14befe5fa0 R15: 00007ffe95f74788 [ 547.992309][T17286] [ 548.998194][T17308] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 [ 550.911623][T17317] syzkaller0: entered promiscuous mode [ 550.924326][T17317] syzkaller0: entered allmulticast mode [ 564.087631][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.817280][T17347] netlink: 'syz.3.2938': attribute type 8 has an invalid length. [ 624.013567][T17351] Bluetooth: hci5: command 0x0406 tx timeout [ 624.595896][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.032232][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.009847][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 694.496640][T17351] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 695.340743][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.077925][T17351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.036644][T17351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.260609][T17351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.871489][T17351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.070732][T17351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.402999][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 709.156046][T17351] Bluetooth: hci0: command tx timeout [ 711.279822][ T5835] Bluetooth: hci0: command tx timeout [ 713.188941][T17351] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 713.779632][T17351] Bluetooth: hci0: command tx timeout [ 715.931157][T17351] Bluetooth: hci0: command tx timeout [ 717.728208][T17351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 719.987750][T17363] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 746.098036][ T31] INFO: task kworker/u8:3:49 blocked for more than 144 seconds. [ 746.114083][ T31] Not tainted syzkaller #0 [ 746.119041][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.483267][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.699959][ T31] task:kworker/u8:3 state:D stack:22264 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 749.130790][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 749.145415][ T31] Call Trace: [ 749.148729][ T31] [ 749.613837][T17351] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 750.180117][ T31] __schedule+0x14bc/0x5000 [ 750.208313][ T31] ? __pfx___schedule+0x10/0x10 [ 750.370924][T17351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.439233][T17351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.480892][ T31] ? schedule+0x91/0x360 [ 750.493850][ T31] schedule+0x165/0x360 [ 750.498049][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.111327][ T31] __mutex_lock+0x7e6/0x1350 [ 751.124694][ T31] ? __mutex_lock+0x5bb/0x1350 [ 751.145813][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 751.151071][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.777763][T17365] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 754.110366][ T31] addrconf_dad_work+0x112/0x14b0 [ 754.124642][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 754.130216][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 754.936264][ T31] ? _raw_spin_unlock_irq+0x23/0x50