last executing test programs: 4m12.585541829s ago: executing program 2 (id=1261): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002f0009002abd700000000000040000002e001180e796bd6dd42541affac6ff415af85a2e520000000000005def59af00"/68], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4m12.107035722s ago: executing program 2 (id=1265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x8}]}) close(0x3) 4m11.587648389s ago: executing program 2 (id=1267): unshare(0x2a020480) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async, rerun: 64) pipe(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYRES32=r1], 0xac}, 0x1, 0x0, 0x0, 0x40088c1}, 0x85ceef59dec7e509) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x20044841}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) close(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) 4m11.276915617s ago: executing program 2 (id=1271): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 4m10.162332217s ago: executing program 2 (id=1276): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x55a7b51853bbe1f0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x36c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2997}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x948}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ca}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x37}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94f8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f78f84892fe416b9b9abebc46b8963c63b29d21f9f32cb6156d3d367001b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 4m9.909632514s ago: executing program 2 (id=1277): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="356f56e5", 0x4}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3m54.859112435s ago: executing program 32 (id=1277): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="356f56e5", 0x4}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m29.016776073s ago: executing program 0 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0e010100000000000000000a0000060900020073797a310000000009000114000380100000800c0001800600010000000000140000001100010000000000000000000100000a000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000040) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 2m28.797748318s ago: executing program 0 (id=1813): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d00)={r2, &(0x7f0000000400)="08b11b247783838d990357718e795d148104091d89dcb73198e03c21737f9de3903350618e07aa9c9fda05020f70264a86bd269a6e0842c9dfadb0f7bdc89d32f9b69b3a8a2ae363812e38fc831ceaca9f99d54503200d5051bf6c1e", &(0x7f0000000c00)=""/247, 0x4}, 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000030d00000000008000000000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100004001"], 0x80}, 0x1, 0x0, 0x0, 0x4042080}, 0x20008050) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0xfffffffffffffd88, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r8, 0x5) connect$inet(r9, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000020), 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x0, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 2m28.01358118s ago: executing program 0 (id=1822): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xffff) mmap(&(0x7f00005d2000/0x3000)=nil, 0x3000, 0x0, 0x6011, r0, 0x1000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0xa20f0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000a871ebe65af544141000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000010660800000000000018000000000000000000000000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r9, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000300)="6d75c4c697afbf9c512ac3fd598be95f2cf40e85bfa3ca672f95c3c956", 0x1d}, {&(0x7f00000005c0)="70067a444c8de9e275f9afd542066308a54cfa60d70415001393a3b991daf9c243404fed02aeb3a56f266e7fe507cf7ef0b99fba0fc5b69fdd069b173cd8fb51174718a667c082293a6e89b29e92d7826a55b0a650d1ea8e56b152738588ed84d882e706e8fc25049bd6f5c1355df75ec274db18b8daf9a776039cb99bdfdeabb120123f8ccc2874ba327eeeea6dd6e8014f1a63e14d43949737bd", 0x9b}, {&(0x7f0000000680)="34863223fd129a7368a7bccc5167b1b27832dfb901607133d8df0ccb190e45a6a27113dda68582fe925a60aa20d1afe4a8c8b36d4e181e98088699dd6958d837a38f6103d6c5d703d397b1c694beb89042d50546ec8975462f13446d6e3a5f81f777dea108e5da5d1098d0e5d4c8001ae1b8f407005d9c04ba499d55eeaa07abb486", 0x82}, {&(0x7f0000000800)="0894f5b66a7bbb992fc889ce171f7e6cdcbf69570700545d559e2113dcb20b11181695b196910914d27e2fb3507305ad5e369b0ce915bcf4caa8a870a5622b8c0a1c2d8dbdf39d576b11897019469757c89529f9e31e5b4c3589b2a9aed8d539ad38f3c7aafb6a6d0ca47610ebb4d40a4392a2193d1e1aac45cb9e368402b31d22ecc99258aa0015224a92065912d501abbc95", 0x93}, {&(0x7f0000000980)="0b2a30e7d56da24bcdd9be1fbc2c488309c35270ebdf4f2f839e89a108a07c7ef79a0521a7749013c4b2b168ce2d0e4e2f2c24a09c5095f9cca9f31e1385798f08fd7eacf581c9ddeab7248654f757ab4e843310211a54d9615375afbff6ee6a71061b224fe518a1817ff9e6f7215545f30ab7926548250cbc86ab6c56d2e4af2ba8a26649a63c8de444038b7e05a831c452b6e087813fd0c190d0bbe0fde02c54d26bb4b5ca2357ed4afaeb207d82e3c59137d00bb016f25d8c630f322da0509656e9460b4bb35a9585597649cf68098dda323c58319a67788f4872ee93a4b19781a9e5a0c82732cc7a", 0xea}, {&(0x7f0000000740)="cfbd66e379535034e4a57890a6de248524aec56900d998f13c2ce02bb10d10fee10fa17274f3484983cd65bd779a81934a86616884241c525d7632c27113a2c5b80870145612378d0c054fd41e8560c3", 0x50}], 0x6}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="ab3817dedbfadbe9a8e19aac23dfcc5f8ddf33301626e691981864a24c1fc25e314e96907041c32b55ca7c5baefce68573f78f75e02d2894ffab63c5450c3b9da7d42283b8f6de446686bb4246e16fae3024276082de4a29575e340322c55ccadab3922e317fe6d573421956998b42b6ffca179986ef999d92ee7eba33af4be3ef36f4aa28e2825eae40ee84ab43e96132a91fac827a6eb949ba92", 0x9b}], 0x1, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe35}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2bcb}}], 0x88}}], 0x3, 0x40080) 2m26.855833059s ago: executing program 0 (id=1838): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @multicast1}]}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={r0, 0x9, 0x1, 0x82, 0x7, 0x0, 0x5, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x80000000, @mcast2, 0xfffffff7}}, 0x2, 0x8000, 0x80, 0xe, 0x7}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x3}, 0x8) 2m26.672512657s ago: executing program 0 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r2}}, 0x1c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x998}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}]}]}, 0x44}}, 0x1) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r11, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) (async) read(r11, &(0x7f0000000600)=""/256, 0x100) r12 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt(r12, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) (async, rerun: 32) connect(r12, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a0001000000000000000000"], 0x64}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m26.406411096s ago: executing program 0 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008101}, 0x40014) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000008ae5993900001ecfe087a86445f4c64071817ddb1a9704be60db6a127dd9ccec0097157f0e41e40d2095fb068bbfbee57f60bb860b2e4434e741f8a0412aa497fe9f716485830c8aeac894", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(0x3) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) (async) close(r3) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x27143}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x81}]}, 0x50}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x90000018}) (async) poll(&(0x7f0000000100)=[{r9, 0x2000}], 0x1, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000000)=0x8) 2m11.191074878s ago: executing program 33 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008101}, 0x40014) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000008ae5993900001ecfe087a86445f4c64071817ddb1a9704be60db6a127dd9ccec0097157f0e41e40d2095fb068bbfbee57f60bb860b2e4434e741f8a0412aa497fe9f716485830c8aeac894", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(0x3) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) (async) close(r3) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x27143}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x81}]}, 0x50}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x90000018}) (async) poll(&(0x7f0000000100)=[{r9, 0x2000}], 0x1, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000000)=0x8) 22.721580239s ago: executing program 4 (id=2523): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={0x3c}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x0, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x83, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty}, {0x1f, 0x8, 0x0, @local, "7535bfe5a7e97b15cdcba5966d9732ea8ea08cf639b5e5d7bcec8a8a25ecde7989a190279cbfc9c67f6a2c99e404512295a4cb3dfd4a1ef09082d6d9dd11683efc9cbfbedf14876b75b5a0b6e83c7bb96983447caf70f4f1bab78e6fb7f86c49abefdd46d19844"}}}, 0x8d) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x14, 0x13, 0x0, 0x5, 0x70bc27, 0x21dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$tun(r2, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0xffc1}]}}}}}}, 0x46) 21.412991607s ago: executing program 4 (id=2529): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xdd57530f6be89645}, @TCA_TBF_PBURST={0x8, 0x7, 0x74d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x1, 0x100, 0x2, 0x80000001}, {0x40, 0x1, 0x2, 0x5, 0x7, 0x7f9}, 0x2, 0x8, 0x46}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x2, 0x6, 0x493}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x6, 0x1, 0x3) connect$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xd, 0x3, "c6a41d106c72000000"}]}}}]}]}], {0x14}}, 0x6c}}, 0x4048010) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21.097819431s ago: executing program 5 (id=2531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000300000000000000007b8af8ff00000000bfa200000000000500000000000000ffb70300000802ddffb60400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x10000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) 19.649299687s ago: executing program 5 (id=2535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0xe5f, 0x18, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1112, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d3, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x2, 0x7, 0xf, 0x8}, {{@in=@local, 0x4d4, 0x32}, 0x0, @in=@local, 0x34ff, 0x3, 0x1, 0x9, 0xffff, 0x5, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x3e, r1}, 0xcc380fb59df11e40) 19.07001339s ago: executing program 1 (id=2536): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125c88a8cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@any, 0x7ff, 0x6, 0x7f, 0xfffb, 0xe, "402a3e1bd9c49bc98ed25546bd112ee0f55a132ab54825c34328a7a6fb1fdfa6ce44a864e1e25953d1858c1d3821645857d14930ed8a54edddb34d6f3e15d8aeb5b938b439d957fdf9e7eaa6e4f5dd0a1ddb794a70172bc65ff27c079deb8ba0b1a1fb4cd7ba6e2cec6545932300b2f664b7c32b301f25d3dc2d1aba080884ca"}) 18.099989451s ago: executing program 5 (id=2539): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b000100000000000000000011"], 0x14}}, 0x4044000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) epoll_create1(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x8d0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r5, &(0x7f0000000380)="7a718c159a2b15dd405d9a18688dc975ca6227598491a77e73ff3249c0416ee998f480cdac9712a689ae7c5cb6b0fa59e0d8b6db9efb5267709e2658aecf13faf8c203da9c64126b72caf0122c109ce396e5cfb8faf850ebc332c4b8fbc2f13f4ee08aeb4ede58ac42afa73f574ac065a07c5edde2571232e794cdf069bb7cf168f63cc92e320f6d5910bf2b068e48df19fb5b3e3cc901f638432349812639922d5aed0cdf5436f99be331f58333159163b6a3994eef7c5e844f259dd7a352f76b92a8cf4a4aa2243c122e9e424439d9488911a78c72a8ac7825", &(0x7f00000005c0)=""/149}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x4}, @in6={0xa, 0x4e20, 0x81, @mcast2, 0x1000}], 0x80) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r9) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 16.819268141s ago: executing program 1 (id=2542): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "1d97ee3d10e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000480)={0x4c, r9, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfff7fffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x21, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @perr={0x84, 0x15, {0x7, 0x1, [{{0x0, 0x1}, @broadcast, 0x6, @value, 0x2f}]}}]}]}, 0x4c}}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r10, 0x100}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r11, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r12}, &(0x7f0000000880), &(0x7f00000008c0)=r10}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r13, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 15.721565814s ago: executing program 5 (id=2544): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r3, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 14.819831445s ago: executing program 4 (id=2546): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001680)={0x0, 0x8, 0x9, [0x10, 0xfff9, 0x9, 0x30, 0x7, 0xae8, 0x6f9, 0x7, 0x7fff]}, &(0x7f00000016c0)=0x1a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x2, 0x8}, &(0x7f00000017c0)=0x90) sendmsg$inet_sctp(r0, &(0x7f00000018c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="4e245439750463ff799e5ecba7c71011d7e9d6f67cf602d5721c76a043fd856f2405614429613a61eb754f148cd18f4f8cbd2426b92ec6be4dce0318cf465e033f82459e32fc8a343b7bbde17c4b07e1a80ad6c6a2e6f8f7c15aa21416ad78120f281e647316c3a1d9e9ffed0653d602b73119cb71197b54a6e82d12cb29b23e94554177710b8de80660c86045a52bd96e2e62257478c6e7043e931f6f181195a8a13046c5317ec5b41c03a82e1986657e99e7da9a97d2dd83fec0b53bf8c09657bb30027b7238897d12fbc46af10fcd625266330ed5cf7bbf857bd1466b3595493b702c372e6179f0465fae31c9ad016766", 0xf2}, {&(0x7f0000001140)="a6b7ac6f4fc0ee889dce3f2ff5ba1ebc366fd66ea58524470671e2cadc409712d4cfbc3a28f5444ed85ce10a6f67f3fcd76acc40a74c115b0922a8d0a4fd3c68efd33fef74f7e801856417cc573df22fa9e22507a8f5017d6897cf7d90df795fff0fa0dc6f3ff996d82dd9148a7ab965bff37ed087ef6304d3d27e7cced4707dbf948cfc40be33d77a9135449a29bac9c21a0c17c6219ca2f05f7e9e79eedcc8c707e6ede3158e151344b74c46b00418afa514e67f2e8edc422d27", 0xbb}, {&(0x7f0000001200)="cde1371c03375f2d5d329e0fb77fee556633589015283766d6d6f9487e5db32c408123af421fd96b1cdd077cdd67479efa4c7da0aa7047cc742c86ed4dcdf1192d05a408d2a21e30fa597648c07498f8aecce0916ab7f7f17733b5f4cb0add11fe6c3fe2ab8537191bd8653f3fddd0784c8307f7c6ed3bca47", 0x79}, {&(0x7f0000001280)="284bd250511d9dea565714c310c03f766887c91ac6945d42299c6a5be7c46e26df7cec1468e733b9d39ebccb2882d15be5f4d1c9557dc3ff883e3b3ae6c1a6e904c3eb81f7b06794659b472732618943f784de13fed1b82080024b554a0566ca1df269c1e3e88f8068db1adef0e200f49e00e31721d953fb4362aac592d91df4edc2220c52eb10a6666f8994", 0x8c}, {&(0x7f0000001340)="553c50a714ede4a5d8f6ec364d34b109a0c6e899bac680afad36fd564a32008837ddd39e2b9d4b0e0bb5a2e839b0c109e0ea0bc96d13721365a4e904673c8c3e1c96effe37de5e846abdeea5c65f13e0dbc65a5b", 0x54}, {&(0x7f00000013c0)="9ebd156877ac2c6ff44b4c873be08d71a4c860be80fc830de733a291430387225283b64c690d10b395dbd563bbfe87807e17da9db7c2f4da6e40ddce81cbd56d4c0ab2795d", 0x45}, {&(0x7f0000001440)="92ad56d4370ad09f5709287923e1132ef3b425c23568db294d7f39b1338088bf1d88f3732bde7dce1b34d40de859833b8431139b811a7beda5f710f4f93456cf697e9675305cf08ccbb48811d01c5c597ad0712fe05c7621e8f3d7b2a1a45b6a06f709783cdc7111df8f77ee5eec99180fd3d20a241791ac7931d536ab6a25ae423ee56111", 0x85}, {&(0x7f0000001500)="9bbcc4fd1ef2ec235f07d557c27bf36453f4f899b8774ec406c02c31bbce85c217284c241893437fb965a54668cc19157a87a11d1c03f9fd23975bb5afc2a6ecd6b4e64dcf4d8226b872a8ffb37b61b020e6e839299dd98a89c59aea303d5004c2fdf3fe19dd3a96a0e3a9c77de9042c8950baf9cdb11c6a222fb576c62f98b5ffb6c1a96ad48d997a", 0x89}], 0x9, &(0x7f0000001800)=[@sndinfo={0x20, 0x84, 0x2, {0xb3, 0x8006, 0x100, 0x0, r1}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18, 0x84, 0x6, {0xa}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x97, 0x8, 0x2, 0x6, 0x6, 0x4, 0x0, r2}}], 0xb0, 0x4000800}, 0x20008001) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001900)) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @local}, &(0x7f0000001980)=0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000019c0)=0x8, 0x4) r4 = socket(0x25, 0x4, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000001a00)) openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x210080, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001c00)={{r5, &(0x7f0000001a80)='!${\x00', 0x5a5100, &(0x7f0000001ac0)={@align=0x2, {0x1000, 0xb322, 0xf4, 0x3ec7}}, 0xdf, &(0x7f0000001b00)={@_ha_fsid}, &(0x7f0000001b40)=0x4}, {[0x6ab, 0x80000000, 0xe, 0x2]}, 0x8, 0x6c, &(0x7f0000001b80)=""/108}) getsockname$packet(r4, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001cc0)=0x14) connect$can_bcm(r6, &(0x7f0000001d00)={0x1d, r7}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000001d40)={0x8, [0xd89a, 0x5, 0x0, 0x2, 0x8610, 0x71f4, 0x6, 0x7]}, 0x14) r8 = accept(r0, &(0x7f0000001d80)=@x25={0x9, @remote}, &(0x7f0000001e00)=0x80) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000001e40)={0x0, 0x0, 0x0, r7, 0xfff}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc) sendmsg$nl_route(r6, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)=@ipv4_delrule={0x4c, 0x21, 0x300, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x20, 0x4, 0xe, 0x0, 0x0, 0x4, 0xc}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}, @FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r6, &(0x7f0000002040)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r9 = socket$inet(0x2, 0x80002, 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000002080)={0x7, 0xfff2, 0x8000, 0x3, 0x4, 0x0, 0x6, 0x1, r1}, 0x20) r10 = accept$packet(r8, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002140)={r1, 0xc8, "2f7377d81b073f361eba318a6436c092fee08a2c49f7d47c77fb7f18d882d1d0deacc82f4853e1048addf66298403064b91c55e3ca40889c23b70cdc76ae13533a16d98b26862dd57c80088fcf9bf614371e49552dc6da050240f1559d4efab4a08943f1921bc7e41494ba879951b31a4e98d13cac521b6e09c4934ec624daa3545eab10ff4b1da4e001aef5fa3d636dc57c1683f74f7e41980ea0504a950dcedc506374bba4f1c3de2f3f8a3be75a21dfe5a341162e84666efef58260493066b10834a159187b7b"}, &(0x7f0000002240)=0xd0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002280)={r11, 0x8, 0x2a, "c166ba0904d73f6c688c099cd52105b64a7a5f61dae75ca2805b14e7850f7a3114b0134edf41429d9967"}, 0x32) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x52, '\x00', r7, r6, 0x2, 0x1, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000023c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x48880}, 0x840) 14.581443164s ago: executing program 5 (id=2547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000006}}], 0x30}, 0x4) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000800)={0x0, 0x1ff}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x6, 0xb}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) connect(r5, &(0x7f0000000940)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) close(r4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x3, 0x5}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40) 14.479519491s ago: executing program 1 (id=2548): unshare(0x400) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r3, &(0x7f0000000140)="00008848d100582a", 0x8) 14.364626017s ago: executing program 3 (id=2549): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="010000000300000000"], 0x50) 13.733517101s ago: executing program 6 (id=2550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140100001000010000000008000000000000000a20000000000a01080000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a310000000009000100736e7a300000000008000540000000251c0011800a0001006c696d69740000000c0002800800044000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) (async) r1 = socket(0x1e, 0x4, 0xf) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x8, 0xc00000, 0xfff, 0x1dbd}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x3, 0x9}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r3, r4, 0x0, 0xffffffff000) (async) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000640), &(0x7f0000000340)=0x4) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) listen(r6, 0xc) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, 0x0, 0x0) 13.617614718s ago: executing program 4 (id=2551): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300010a140000000b0a01020000000000009700070000031400000011000100000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000140)=0x1, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000500)) 13.426653606s ago: executing program 3 (id=2552): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125c88a8cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@any, 0x7ff, 0x6, 0x7f, 0xfffb, 0xe, "402a3e1bd9c49bc98ed25546bd112ee0f55a132ab54825c34328a7a6fb1fdfa6ce44a864e1e25953d1858c1d3821645857d14930ed8a54edddb34d6f3e15d8aeb5b938b439d957fdf9e7eaa6e4f5dd0a1ddb794a70172bc65ff27c079deb8ba0b1a1fb4cd7ba6e2cec6545932300b2f664b7c32b301f25d3dc2d1aba080884ca"}) 12.98140753s ago: executing program 5 (id=2553): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000280)={'virt_wifi0\x00', @ifru_map={0x1, 0x8000, 0xf95, 0x0, 0x89, 0x5}}) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) close(0x3) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x847c}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_getnexthop={0x0, 0x6a, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NHA_GROUPS, @NHA_FDB, @NHA_FDB]}, 0xfffffffffffffdd1}, 0x1, 0x0, 0x0, 0x20044044}, 0x40080c0) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[@mss={0x2, 0x1}, @window={0x3, 0xfff9, 0x5}, @window={0x3, 0x68, 0x8}, @timestamp, @timestamp, @mss={0x2, 0x10001}, @mss={0x2, 0xffff8001}], 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @loopback}], 0x20) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x1) shutdown(r4, 0x1) 12.76845714s ago: executing program 6 (id=2554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x8, 0xd, 0x4, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8088, 0x7, 0x3, 0x2}}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1320, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x8001}, {0x9}, {0x6, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x12f0, 0x2, [@TCA_CGROUP_ACT={0x290, 0x1, [@m_ife={0xc4, 0x0, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x85, 0x6, "275e1604f8bae0ed9b272607231259c10809e37e698196438bd64b2686ed92295805c270074d9bbe32a73f83ac91d64c9ab6656f5ef242bc3bf78ef40a6fb5a021351681ee44ea93f9923b9ebbf601260b91c0ab61306cc9c820ebcf287bf21fdfc7c946f4c1e4ce15bfa91fa9cf999ed93323ee00c77b024cd7bc517b6bb1361a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x12c, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x20000000, 0x0, 0x6e5a5d96}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xac2b9}]}, {0xd4, 0x6, "74ef0c590bd8977604ab595d60a6cc8c253d122fa04988d380e0c1f32df1725156a22cfe1b9b968deefe1976503e72e01279bf7aff3677582b9c99943c29ebb824fbac4f1d5b1922aef59587c3044cf4b51bff2a545674a519e433df2e5a78fd8743d4e1894e52f73f15606a0efc5dc02c21ae72de9a4fa68964a810d6db97c1b87931ee8b456728a773164b0f1a550157b3091d97f7635931d126c9e9f90f5ab12cb9701a410fce3d978f345a9634bdcbf6af8f4e1832cdfff2e83e516e17d69db6796296d689ef57ce3626e0d597d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x48, 0x20, 0x0, 0x0, {{0x7}, {0x4}, {0x1d, 0x6, "fe4a76a99bbb626b8db9f458f83da589b407d73079540ad93d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x7, 0x6, 0x8, 0xc9}}]}, {0x12, 0x6, "c7e0e01a1d1efc375fb142c73c4b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x3b8, 0x1, [@m_xt={0x318, 0x15, 0x0, 0x0, {{0x7}, {0x238, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x52, 0x6, {0x2, 'nat\x00', 0x0, 0x7, "055a09045078b9d6865aac42b791a46bb2617d7f22c11c67997ba58c07624046d81fa1add40d6842"}}, @TCA_IPT_TARG={0x111, 0x6, {0x7, 'security\x00', 0xd7, 0xad38, "b6a894af1a2defd9d9bfbf63704f6d9c2cb135dd39eb85b76ab21188aaf256d003efb10160102df2b116595f687cd14b444a3d8b6746b47b4e0c00c66bed3f110fdd406383e9be7cbfc471777314b6c1a7d663b3662e82c2c5a9e4da4edd797866d32d5c632e84ac1ca3fa4f6264d7fe488ef7e3b27edecd42df1791764998d0f3ee6bb3f56ff2614a54c8ff3ce7672de4d83cce1a515f446c9b592577af038313278cd2a72bb45f0080d0e4fd514dab9bc56b59e5084a2c22a25f9e9ec14044a9679d0a361491ce07440ba07bd0797154136aceba2d3a64cadaaff5fd9d848746691bd07718c6"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x6c, 0x6, {0x9, 'nat\x00', 0x0, 0x0, "f769e69a146459b6dfc7496205f70d977d2c80b3f87980ad2f3ff70694397e554e78b787e1ad28bddfa92f64bc2149ef6ad485518d02211add1816da4798ee9a9967"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xba6, 'filter\x00', 0x2, 0x9}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xba, 0x6, "75f33ac3f1fc54e46b165de929d5c3f32a61a5d42765ce5b001e2a44c1861e6d41fbc6a1e08265d5abfa2a51d80aa430ddebcbb24512cae768dfbf15b7bd2f22a9bffc3964b527493cbeb85546bce2238b640b97d7bef3d02b0d3cc07d9bd520f28771a4e800eb0fc83bed5e4412132c8da9d5390612ff7081677bad45144dd17db9a013c0410236bcb6a7ad5aaa59b3251ed22c476ba4bd91766f06ef624e768081ddb7538183b3cd2a920908cca46b0a48865054b3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x9c, 0xb, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x0, 0x8000, 0x8e}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x17df, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ed, 0x6}}]}, {0x3f, 0x6, "2a25ca40e1956f6ca2c5ecc065d8b44f7e1874958cad12c39a649436a7887dec589c933ad365dfb807b7aa94e16c1a5cee49569dc0130b24ce36c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x27c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x825, 0x4, 0xc77}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="f5dd", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8f2c68b05f88d32c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4000, 0xe}, {0x703, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x8b}, {0x400, 0x1, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x8}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7, 0x1}, {0xff, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x97, 0x2, 0x1}}}]}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="dccfdeae1a9dc133"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0x7f, 0x100, 0x40, 0x1, 0xe, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x472, 0x7, 0x81}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xb}, {0x0, 0x4, 0xd190f4242cab2133}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x10}, {0x2, 0x6, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa, 0x1, 0x9}, {0xb6, 0x3, 0x7, 0x4, 0xa, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xff, 0x1, 0x7}, {0x6800, 0x8, 0x7ff, 0x3, 0x0, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x34, 0x3, 0x0, 0x0, {{0x1}, "a4733bea41805153c1c0f7e15e268f776e56666e8b48051407f351d2f0c950b6726cc0dea4"}}, @TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x7, 0x0, 0xfff}, "b31c9cd3772fda2b7fcc98aac0fa561efb4d18f446295349a0266edce0d92b3a33cdfdfe24efadac6cef447aab6d83251ce67baaf85026ef1a47e0253796cbf7a1b2a133ce97733c5bc1279ef5d3e71221ba4f8121cd5a68ea255163124e8ba6a0d3cc534194fe303d4b2ffb84da9934811530af9c38c20503443b1a5baf5ede08304c7b7f6ca081147b9b27c426e9b30467d7b2bb44e5cd0a4e27edfa8962a6732af88d193ad90c4a9ec7fe84d547b789ba7dcfa8d889afb4e45d52d961e23d0fa4c42ff9"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x4}, {0x4, 0x7, 0x3, "57eb3938d0317e"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x525}}]}, @TCA_CGROUP_ACT={0x180, 0x1, [@m_bpf={0xf0, 0x9, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x8, 0x6, 0x3}, {0x6, 0x2, 0x9, 0x84}, {0x400, 0x5, 0x0, 0x1}, {0xff, 0x6, 0x5, 0xfffffffa}, {0x56, 0x55, 0x1, 0x10}]}]}, {0x9b, 0x6, "788b8c83a55bca532383203ca2ab33c05be4b723c4cf2780baafe258200010e05a20e10fe07177abdd725d5b85ac3390716b0c0d4ed4d120620ee70b349421bbadbb4582b6dd2f3cb820d69716782d113feb75893add7fec431de543c16d048b8c90aff981a617ff3f1740a4bd890cac0caa47d83e73c539437ad033b0da9c5d7b7083516200f87505371b6050e3e93628731ec5c3c1a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x8c, 0x11, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x4, 0x4, 0x0, 0x2}}]}, {0x35, 0x6, "f678e9897fced2c4993879c97f276195b81c0ca2d406f5ae3205ca0844d04919be5a1a199825144a21161089be557aaa66"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_EMATCHES={0x84, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x613}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb9c, 0x0, 0x1}, {0x7, 0x2, 0x2}}}]}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x538f, 0x0, 0x1}, {0x8000, 0xd}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2222, 0x6, 0x2}, {0x9, 0xa0}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="16", @TCF_META_TYPE_VAR="55f578aab788", @TCF_META_TYPE_VAR="0e4105460eddd4b4c0fe"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x10}, {0x81, 0x6}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x1}, {0xf7}}}]}]}, @TCA_CGROUP_ACT={0x800, 0x1, [@m_gact={0xa4, 0x10, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x6, 0x0, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa45e, 0x6, 0x0, 0x5, 0xfffffe00}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x558, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x81f, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1884, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26ba, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x108a, 0x20000000}}]}, {0xc, 0x6, "d976d494e56dbc92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x6c, 0x14, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1000, 0x20000000, 0x1000}}]}, {0x26, 0x6, "459d4a7124f028a75a2780b7e529cbc6c6d00d6daf72d86d5cffcf21905e6af95374"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x12c, 0x7, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x1, 0x81, 0x2}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000000, 0xffffffffffffffff, 0x1000, 0x10001}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0x7, 0x4, 0xfffffff9}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xfffffff5, 0x0, 0x4, 0x3370}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x0, 0xd, 0x9}, 0x1, r2}}]}, {0x5f, 0x6, "ab4d351c31fa853ffe3d14ea1679de98a737ad08a3b2d83c7fef5752aa46a221a809dfb8104bab6789ab127edcd713897fad1ce358d12fbd759e27de214642f32d17f5d098559d780606a77c2fcae0617461530e542bbed9dea874"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xb0, 0x13, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x3, 0x5, 0x9, 0xca7}}]}, {0x66, 0x6, "5b448121f7521e2a0fc5e2825d37f5a7ddd2d43b82896e2e316cd3d63f21d30b5d2ca78f25452328b826cecf0cf9d608e17404aeef73804668d780c9808168f639b9a8b7d291054d0890a4ce900731edbe0fc504276123c8d43b4bba1647889116e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x64, 0x1b, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0xffffffffffffffff, 0x5, 0x1dd1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x104, 0x15, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x6, 0x7, 0x8, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xa8, 0x6, "a332e964ea6b26193d78f6e0218b5b08a3c45c5170da9c3f2d5f575e50b048055ded81587d0f230bedc574eb711e082ef4e863a5b321aef5430ef2686deedc4989d51981b82ed24f86cc81b698cb41b655fc0fae6e690d1ad02b02add3bcb9b978ffa58efba426ff40963fb3ff75b78b4de4132a5b13be29d7356af639b6e50ead11f7d75b07516b2a491c0852a26136454b7ccff795cba5dbe33c3d60400967f524db03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xdc, 0x9, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x4, 0x6, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x68, 0x8b, 0x3, 0x2, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x5, 0x89d, 0x2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="2f7565c113d5"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0xc}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xd}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x1f, 0x6, "a17d2e585548b4a3c51f130c4c3b4cdd69c4dae8be83cd85e16a3f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xbc, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x0, 0x8, 0x5}, 0x3, r2}}]}, {0x6f, 0x6, "4444ea2242d04d927e897a32649afefdaff743b44ac07cef894d9e914cf12c0cb7933d66f607edbc97bbdea53319d01450829136702c4713a02b195c1ba158d4364b93fa066ca6683c7b6371984ef693daa2a8a0f3d2b631ed720eba35466ac76d0b20a23851b7fb06420b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0xd4, 0x15, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa6, 0x3, 0x3, 0x2, 0x6}, @multicast2, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x126, 0xffffffffffffffff, 0x3, 0x1}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, 0x808000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5453, 0x20000000, 0x80000000, 0x933}, @rand_addr=0x64010101, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x4, 0x7, 0x3, 0x200}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}]}, {0xc, 0x6, "39f15f832cce6335"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x13c, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '\'%-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xfffffffd, 0x8, 0x4, 0x90a}}]}, {0xee, 0x6, "ecc1bd125c4dee09ee27875723e6fbee4198488b8ca5d4fc809951f4ffafb164eea488e8778222eb914185261a2aceb174ca72cbb82b2ba73c4dbc0446a138fd62c8dc093ae49ada6f58a3db68c76dcc6f36956f5d1d3a63d5baa7ced20e8c10e2b701b7fc5c57c8ccba13a47a0a09dec065a45124316d1d8d3726f6c5e962a379c737bfd2af5264304df68c20f9302773f1772b3011ef4d917df3d8c9c7887181732c9b7657558b1a8afaf09cdec0ea1dc66b258883ea6e3ecda724501d71308651aeda347730cd69f187d7474d0e184831f3ba83e79356c637c49911d02c5e93a67a5a786717c24cfd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1320}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) 12.527540062s ago: executing program 4 (id=2555): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) 12.453648227s ago: executing program 1 (id=2556): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000002f00090027bd7000fbdbdf2504000000c4001a803e00", @ANYRESDEC=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x80014) socket$key(0xf, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000002f00090027bd7000fbdbdf2504000000c4001a803e00", @ANYRESDEC=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x80014) (async) 11.315517978s ago: executing program 4 (id=2557): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_crypto(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=@del={0xe8, 0x11, 0x100, 0x70bd2c, 0x25dfdbfb, {{'ecb(cast5)\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x24068001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="cc17ffeb6d79566be57d9276ccc6ad76aae0199cfde117eab827ff2a43604512dfc34c8296d471003ea63cbfc2032fb08bbbd34e3b6ffecc481d401f6426c01c93f4fbdfc790c233b93ec24a06ea6bff9c529329f2e51400170d641e"], 0x38}, 0x1, 0x300}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) pipe(&(0x7f0000000180)) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 11.295652103s ago: executing program 1 (id=2558): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000240), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911187000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000040000000800000010"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8fffff7b703000008000050b704000000000000850000010000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 11.112295683s ago: executing program 3 (id=2559): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/net\x00') r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x6034, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/net\x00') (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x6034, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r5, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async) 10.321475071s ago: executing program 6 (id=2560): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x1c8, 0x0, 0x130, 0x1c8, 0x1c8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, &(0x7f0000000000), {[{{@ip={@multicast2, @loopback, 0xffffff00, 0xff, 'macvtap0\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x2, 0x30}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x3, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x16}}, @common=@ah={{0x30}, {[0x5, 0x7f]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x39, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.845073769s ago: executing program 3 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x8, 0x126, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x7, 0x15b, 0x0, 0x0, @str='Y-\x00'}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000300)={0x7, 0x32}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.316692522s ago: executing program 6 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000109030000000000000000000a15f6ac58bc9d8dd4797a3000000000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 5.79809122s ago: executing program 3 (id=2563): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES64=0x0], 0x48}}, 0x4040) 4.244728721s ago: executing program 6 (id=2564): socket$inet6(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2}, 0xc) sendmmsg$alg(r1, &(0x7f0000016940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0x80}], 0x1, 0x20004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) mmap(&(0x7f0000773000/0x4000)=nil, 0x4000, 0x8, 0x100010, r3, 0xc0937000) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000001c07020000f8ffffffb78afa03000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0xc3073, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r4) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000000e00000000000020000000ed27acf9ffffffffffffffa1563904ab3d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 4.057332001s ago: executing program 3 (id=2565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e23, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x4}, 0x6}}}, 0x88) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}]}, 0x110) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x26, 0x61b, 0x270bd1d, 0x25dfdbfb, {0x8}, [@typed={0x8, 0x163, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0xc0) openat$cgroup_procs(r8, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x5, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0xa, 0x1}, {0x6, 0x1}, {0x9}, {0x3}, {0x8, 0x5}, {0xe, 0x4}, {0x1, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0xd, 0x2}, {0x0, 0x4}, {0xf, 0x2}, {0x400000f, 0x4}, {0xd, 0x5}]}, @struct={0x10, 0x0, 0x0, 0x4, 0x1, 0xb0}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x6, [{0xc, 0x4620, 0x6}, {0x8, 0x5, 0x5}, {0x1, 0x9, 0x8}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x0, 0x4}]}, @fwd={0x7}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x115, 0x0, 0x1, 0x9}, 0x28) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, r11) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r12, 0x301, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) 3.288884157s ago: executing program 1 (id=2566): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300010a140000000b0a0102000000000000fd00070000031400000011000100000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000140)=0x1, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000500)) 0s ago: executing program 6 (id=2567): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][ T9773] netlink: 'syz.0.1076': attribute type 2 has an invalid length. [ 243.484907][ T9773] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 243.762614][ T9786] xt_limit: Overflow, try lower: 268435456/134217728 [ 243.915456][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.143957][ T9806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.883110][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1093'. [ 244.990259][ T9823] syzkaller0: create flow: hash 298072310 index 2 [ 245.090200][ T9821] syzkaller0: delete flow: hash 298072310 index 2 [ 245.188241][ T9840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.762732][ T9857] __nla_validate_parse: 2 callbacks suppressed [ 245.762753][ T9857] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1103'. [ 246.490014][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1113'. [ 246.759105][ T9906] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 246.894173][ T9906] bond3: entered promiscuous mode [ 246.900598][ T9906] bond3: entered allmulticast mode [ 246.906479][ T9906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.986718][ T9906] bridge1: entered promiscuous mode [ 246.999676][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.005713][ T9906] bridge1: entered allmulticast mode [ 247.024900][ T9906] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 247.120273][ T6366] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.136550][ T9911] bridge2: entered promiscuous mode [ 247.194911][ T9911] bridge2: entered allmulticast mode [ 247.297510][ T9911] bond3: (slave bridge2): Enslaving as a backup interface with a down link [ 247.404911][ T9911] bridge3: entered promiscuous mode [ 247.421077][ T9911] bridge3: entered allmulticast mode [ 247.452900][ T9911] bond3: (slave bridge3): Enslaving as a backup interface with a down link [ 247.701769][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'. [ 247.815601][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 247.886892][ T9954] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1127'. [ 248.445288][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1134'. [ 248.512981][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 248.585818][ T5621] block nbd0: Receive control failed (result -107) [ 248.722327][T10001] tunl0: entered promiscuous mode [ 248.735022][T10001] netlink: 'syz.1.1136': attribute type 4 has an invalid length. [ 248.762684][T10001] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1136'. [ 249.255257][T10021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.327527][T10028] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 249.335736][T10028] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1146'. [ 249.530037][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1138'. [ 249.800079][T10039] ovs-system: left promiscuous mode [ 250.321321][T10049] syzkaller1: entered promiscuous mode [ 250.344656][T10049] syzkaller1: entered allmulticast mode [ 250.566311][T10066] tipc: Enabling of bearer rejected, already enabled [ 250.589071][T10065] batadv_slave_0: entered allmulticast mode [ 250.603095][T10065] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 250.646707][T10069] netlink: 'syz.2.1152': attribute type 17 has an invalid length. [ 251.182263][T10102] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 251.431867][T10102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.629456][T10108] bond4: (slave veth5): Enslaving as an active interface with a down link [ 251.706314][T10111] vlan2: entered allmulticast mode [ 251.718315][T10111] bridge0: port 2(vlan2) entered blocking state [ 251.727675][T10111] bridge0: port 2(vlan2) entered disabled state [ 251.746743][T10111] vlan2: entered promiscuous mode [ 251.914651][T10133] FAULT_INJECTION: forcing a failure. [ 251.914651][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 251.970148][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.4.1167 Not tainted syzkaller #0 PREEMPT(full) [ 251.970194][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.970230][T10133] Call Trace: [ 251.970238][T10133] [ 251.970248][T10133] dump_stack_lvl+0xe8/0x150 [ 251.970286][T10133] should_fail_ex+0x410/0x560 [ 251.970325][T10133] should_failslab+0xa8/0x100 [ 251.970358][T10133] __kmalloc_noprof+0xfe/0x720 [ 251.970386][T10133] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 251.970416][T10133] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 251.970455][T10133] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 251.970496][T10133] genl_family_rcv_msg_doit+0xda/0x340 [ 251.970531][T10133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.970568][T10133] ? apparmor_capable+0x126/0x170 [ 251.970596][T10133] ? bpf_lsm_capable+0x9/0x20 [ 251.970621][T10133] ? security_capable+0x7e/0x2c0 [ 251.970659][T10133] genl_rcv_msg+0x614/0x7a0 [ 251.970695][T10133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.970722][T10133] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 251.970767][T10133] netlink_rcv_skb+0x226/0x4a0 [ 251.970790][T10133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.970820][T10133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.970858][T10133] ? down_read+0x2be/0x330 [ 251.970890][T10133] genl_rcv+0x28/0x40 [ 251.970916][T10133] netlink_unicast+0x7bd/0x940 [ 251.970970][T10133] netlink_sendmsg+0x813/0xb40 [ 251.971006][T10133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.971032][T10133] ? aa_sock_msg_perm+0xf6/0x1c0 [ 251.971073][T10133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.971094][T10133] sock_sendmsg_nosec+0x13a/0x180 [ 251.971123][T10133] ____sys_sendmsg+0x54e/0x850 [ 251.971161][T10133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.971202][T10133] ? import_iovec+0x73/0xa0 [ 251.971234][T10133] ___sys_sendmsg+0x2a5/0x360 [ 251.971264][T10133] ? __lock_acquire+0x683/0x2cf0 [ 251.971299][T10133] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.971370][T10133] ? __fget_files+0x2a/0x420 [ 251.971399][T10133] ? __fget_files+0x3a2/0x420 [ 251.971440][T10133] __x64_sys_sendmsg+0x1b1/0x290 [ 251.971476][T10133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.971531][T10133] do_syscall_64+0x166/0x520 [ 251.971555][T10133] ? trace_irq_disable+0x3b/0x140 [ 251.971583][T10133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.971605][T10133] ? clear_bhb_loop+0x70/0xc0 [ 251.971632][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.971664][T10133] RIP: 0033:0x7fbc0139e0d9 [ 251.971685][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.971702][T10133] RSP: 002b:00007fbc022de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.971725][T10133] RAX: ffffffffffffffda RBX: 00007fbc01625fa0 RCX: 00007fbc0139e0d9 [ 251.971740][T10133] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 251.971753][T10133] RBP: 00007fbc022de090 R08: 0000000000000000 R09: 0000000000000000 [ 251.971765][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.971777][T10133] R13: 00007fbc01626038 R14: 00007fbc01625fa0 R15: 00007fff723d23c8 [ 251.971812][T10133] [ 251.972374][T10136] netlink: 'syz.0.1168': attribute type 2 has an invalid length. [ 252.316890][T10136] __nla_validate_parse: 31 callbacks suppressed [ 252.316919][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 252.513271][T10143] sctp: [Deprecated]: syz.4.1171 (pid 10143) Use of int in max_burst socket option. [ 252.513271][T10143] Use struct sctp_assoc_value instead [ 252.596621][T10143] dummy0: mtu less than device minimum [ 252.860507][T10162] ip6tnl3: entered allmulticast mode [ 252.893258][T10166] xt_hashlimit: size too large, truncated to 1048576 [ 253.430576][T10188] --map-set only usable from mangle table [ 253.766819][T10207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 253.784960][T10205] tipc: Started in network mode [ 253.790784][T10207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 253.802445][T10205] tipc: Node identity 0619f299d76e, cluster identity 4711 [ 253.825369][T10205] tipc: Enabled bearer , priority 0 [ 253.865805][T10208] syzkaller0: entered promiscuous mode [ 253.906860][T10208] syzkaller0: entered allmulticast mode [ 253.926339][T10205] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 254.016975][T10205] tipc: Resetting bearer [ 254.029342][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1191'. [ 254.040053][T10214] netlink: 'syz.3.1191': attribute type 7 has an invalid length. [ 254.049760][T10202] tipc: Resetting bearer [ 254.055667][T10214] netlink: 'syz.3.1191': attribute type 8 has an invalid length. [ 254.065446][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 254.094540][T10219] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 254.111440][T10202] tipc: Disabling bearer [ 254.112845][T10219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1191'. [ 254.406865][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1195'. [ 254.427232][T10228] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 254.447505][T10228] netlink: 'syz.1.1195': attribute type 2 has an invalid length. [ 254.466059][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 254.508142][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'. [ 254.569856][T10233] lo speed is unknown, defaulting to 1000 [ 254.601629][T10233] lo speed is unknown, defaulting to 1000 [ 254.651498][T10233] lo speed is unknown, defaulting to 1000 [ 254.667276][T10233] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 254.697757][T10233] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 254.773140][T10233] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 254.927081][T10233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 255.100971][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 255.135827][T10261] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.404918][T10233] lo speed is unknown, defaulting to 1000 [ 255.453010][T10233] lo speed is unknown, defaulting to 1000 [ 255.519066][T10233] lo speed is unknown, defaulting to 1000 [ 255.560458][T10233] lo speed is unknown, defaulting to 1000 [ 255.587499][T10233] lo speed is unknown, defaulting to 1000 [ 255.913648][T10284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 255.926595][T10282] syzkaller1: entered promiscuous mode [ 255.954911][T10282] syzkaller1: entered allmulticast mode [ 256.021869][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.291661][T10306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.546298][T10320] netlink: 'syz.3.1216': attribute type 30 has an invalid length. [ 257.800670][T10376] __nla_validate_parse: 4 callbacks suppressed [ 257.800693][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 258.141287][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 258.244945][T10397] netlink: 'syz.4.1236': attribute type 3 has an invalid length. [ 258.297417][T10397] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1236'. [ 258.325357][ T5621] block nbd1: Receive control failed (result -1) [ 259.197673][T10429] syzkaller1: entered promiscuous mode [ 259.217322][T10429] syzkaller1: entered allmulticast mode [ 259.315760][T10437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.537336][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 259.641145][T10441] v: left promiscuous mode [ 259.685207][T10441] ipvlan2: left promiscuous mode [ 259.841250][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 259.993842][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 260.200318][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'. [ 260.214234][T10466] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 260.242237][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 260.322754][T10471] netlink: Conntrack attr has 1 unknown bytes [ 260.361710][T10470] xt_TCPMSS: Only works on TCP SYN packets [ 260.386988][T10471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.575931][T10476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.982708][ T30] audit: type=1804 audit(1787590844.859:2): pid=10488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1261" name="/newroot/250/cgroup.controllers" dev="tmpfs" ino=1298 res=1 errno=0 [ 261.068664][ T30] audit: type=1800 audit(1787590844.889:3): pid=10488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1261" name="cgroup.controllers" dev="tmpfs" ino=1298 res=0 errno=0 [ 261.764012][T10497] syzkaller1: entered promiscuous mode [ 261.776220][T10497] syzkaller1: entered allmulticast mode [ 261.930147][T10510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.254823][T10522] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1270'. [ 262.367536][T10529] netlink: 'syz.0.1272': attribute type 5 has an invalid length. [ 262.507069][T10533] Bluetooth: hci0: unsupported parameter 5161 [ 262.519750][T10533] Bluetooth: hci0: unsupported parameter 8192 [ 262.526207][T10533] Bluetooth: hci0: unsupported parameter 5161 [ 262.533051][T10533] Bluetooth: hci0: unsupported parameter 8192 [ 262.811825][T10522] team0: left allmulticast mode [ 262.827413][T10522] team_slave_0: left allmulticast mode [ 262.851882][T10522] team_slave_1: left allmulticast mode [ 262.868457][T10522] bond1: left allmulticast mode [ 262.879656][T10522] team0: left promiscuous mode [ 262.884707][T10522] team_slave_0: left promiscuous mode [ 262.892768][T10522] team_slave_1: left promiscuous mode [ 262.906404][T10522] bond1: left promiscuous mode [ 262.923865][T10522] bridge0: port 3(team0) entered disabled state [ 262.955490][T10540] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 263.162916][T10523] block nbd2: shutting down sockets [ 263.437511][T10522] bridge_slave_0: left allmulticast mode [ 263.457462][T10522] bridge_slave_0: left promiscuous mode [ 263.472399][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.536678][T10522] bridge_slave_1: left allmulticast mode [ 263.549435][T10522] bridge_slave_1: left promiscuous mode [ 263.562008][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.644188][T10522] bond0: (slave 30): Releasing backup interface [ 263.665724][T10522] bond0: (slave bond_slave_1): Releasing backup interface [ 263.710492][T10522] team0: Port device team_slave_0 removed [ 263.734755][T10522] team0: Port device team_slave_1 removed [ 263.756656][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.768659][T10522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.788234][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.799396][T10522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.819706][T10522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.858983][ T5810] lo speed is unknown, defaulting to 1000 [ 263.867828][T10540] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 264.091787][T10560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.166131][T10564] pim6reg: entered allmulticast mode [ 264.191713][T10564] pim6reg: left allmulticast mode [ 264.268716][T10575] netlink: 'syz.3.1283': attribute type 5 has an invalid length. [ 264.351956][T10559] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1280'. [ 264.605567][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 267.041440][T10599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.203090][T10616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1290'. [ 267.432368][T10626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.520642][T10628] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 267.605699][T10628] veth0_to_bridge: entered promiscuous mode [ 267.614733][T10628] macvtap1: entered allmulticast mode [ 267.620921][T10628] veth0_to_bridge: entered allmulticast mode [ 267.694947][T10635] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1295'. [ 267.734152][T10637] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1297'. [ 267.750137][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 267.764992][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 267.990575][T10640] bond4 (unregistering): Released all slaves [ 268.080290][T10646] bridge0: entered allmulticast mode [ 268.336814][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 268.355553][T10654] bond0: option updelay: invalid value (18446744073675997440) [ 268.367900][T10654] bond0: option updelay: allowed values 0 - 2147483647 [ 268.377409][T10658] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1302'. [ 268.385440][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 268.444889][T10654] lo speed is unknown, defaulting to 1000 [ 268.512598][T10663] siw: device registration error -23 [ 268.928248][T10682] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 269.274830][T10684] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 269.675143][T10706] __nla_validate_parse: 4 callbacks suppressed [ 269.675164][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1317'. [ 269.806555][T10715] IPVS: nq: FWM 3 0x00000003 - no destination available [ 269.841246][T10709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1318'. [ 270.042347][T10726] netlink: 632 bytes leftover after parsing attributes in process `syz.0.1323'. [ 271.789991][T10752] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1331'. [ 273.136500][T10744] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 273.146577][T10744] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 273.156285][T10744] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 273.460202][T10774] syzkaller0: entered promiscuous mode [ 273.466247][T10774] syzkaller0: entered allmulticast mode [ 273.737759][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 273.765933][T10779] sctp: [Deprecated]: syz.0.1338 (pid 10779) Use of int in maxseg socket option. [ 273.765933][T10779] Use struct sctp_assoc_value instead [ 273.911637][T10769] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 273.941871][ T5621] block nbd2: Receive control failed (result -32) [ 273.941900][ T5615] block nbd2: Receive control failed (result -32) [ 274.278294][T10802] syzkaller1: entered promiscuous mode [ 274.289753][T10802] syzkaller1: entered allmulticast mode [ 274.395584][T10814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.471985][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 274.923651][T10830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1351'. [ 274.951530][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 274.961467][T10830] bridge_slave_1: left allmulticast mode [ 274.967516][T10830] bridge_slave_1: left promiscuous mode [ 274.984253][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.075466][T10830] bridge0 (unregistering): left allmulticast mode [ 275.093885][T10837] netlink: set zone limit has 4 unknown bytes [ 275.342214][T10846] netlink: 'syz.3.1356': attribute type 9 has an invalid length. [ 275.352517][T10847] netlink: 'syz.4.1357': attribute type 21 has an invalid length. [ 275.372714][T10846] netlink: 'syz.3.1356': attribute type 5 has an invalid length. [ 275.458594][T10853] netlink: 'syz.3.1356': attribute type 16 has an invalid length. [ 275.501365][T10847] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1357'. [ 275.519969][T10853] netlink: 'syz.3.1356': attribute type 17 has an invalid length. [ 275.538288][T10856] macvlan0: entered promiscuous mode [ 275.544847][T10856] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 275.565169][T10856] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 275.795905][T10853] veth1_to_bond: left allmulticast mode [ 275.834265][T10853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 275.863298][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1362'. [ 276.108275][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 276.122285][T10876] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 276.162400][T10876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.188169][T10876] bond4: (slave gretap1): making interface the new active one [ 276.200462][T10876] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 276.537768][T10887] syzkaller0: entered promiscuous mode [ 276.544052][T10887] syzkaller0: entered allmulticast mode [ 276.957062][T10891] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1370'. [ 276.988162][T10891] syz_tun: entered promiscuous mode [ 277.002853][T10891] macvlan2: entered allmulticast mode [ 277.030263][T10891] syz_tun: entered allmulticast mode [ 277.053276][T10891] syz_tun: left allmulticast mode [ 277.070688][T10891] syz_tun: left promiscuous mode [ 277.601589][T10898] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 277.645976][T10902] tipc: Can't bind to reserved service type 0 [ 277.647056][T10898] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1371'. [ 277.697276][T10898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1371'. [ 278.351059][T10924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1383'. [ 278.511513][T10924] bond0 (unregistering): Released all slaves [ 278.810049][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 278.932038][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.944991][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.957631][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.972486][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.983140][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.015461][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.024832][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.032411][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.041453][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.050992][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.265190][T10959] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 279.288352][T10959] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 279.301472][T10959] veth0_virt_wifi: entered allmulticast mode [ 279.327178][T10959] veth0_virt_wifi: entered promiscuous mode [ 279.902382][T10978] syzkaller0: entered promiscuous mode [ 279.918645][T10978] syzkaller0: entered allmulticast mode [ 280.043041][T10989] nbd: must specify a size in bytes for the device [ 280.084003][T10989] netlink: 'syz.0.1399': attribute type 2 has an invalid length. [ 280.597126][T11004] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 280.605543][ T13] IPVS: starting estimator thread 0... [ 280.709031][T11005] IPVS: using max 39 ests per chain, 93600 per kthread [ 280.910256][ T13] tipc: Subscription rejected, illegal request [ 280.964628][T11012] netlink: 'syz.0.1404': attribute type 21 has an invalid length. [ 280.972653][T11012] netlink: 'syz.0.1404': attribute type 20 has an invalid length. [ 281.140671][ T5621] Bluetooth: hci5: command tx timeout [ 282.939636][T10946] lo speed is unknown, defaulting to 1000 [ 283.220159][ T5621] Bluetooth: hci5: command tx timeout [ 283.290132][T11025] __nla_validate_parse: 1 callbacks suppressed [ 283.290151][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1409'. [ 283.422173][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 283.591944][T11037] lo speed is unknown, defaulting to 1000 [ 283.840646][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.848325][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.856868][T10946] bridge_slave_0: entered allmulticast mode [ 283.870156][T10946] bridge_slave_0: entered promiscuous mode [ 283.970500][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.977986][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.986579][T10946] bridge_slave_1: entered allmulticast mode [ 283.995032][T10946] bridge_slave_1: entered promiscuous mode [ 284.201723][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.260066][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.356064][T10946] team0: Port device team_slave_0 added [ 284.383108][T10946] team0: Port device team_slave_1 added [ 284.470454][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.484259][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.537640][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.583347][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.599792][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.641227][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.762136][T10946] hsr_slave_0: entered promiscuous mode [ 284.772455][T10946] hsr_slave_1: entered promiscuous mode [ 284.779424][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 284.785246][T10946] Cannot create hsr debugfs directory [ 285.032972][T11086] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 285.111183][T11086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.298496][ T5621] Bluetooth: hci5: command tx timeout [ 286.066004][T10946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.083176][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.100738][T10946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.125569][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.134079][T10946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.146590][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.163765][T10946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.210191][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.313771][T11130] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 286.339233][T11130] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 286.515685][T11139] siw: device registration error -23 [ 286.545796][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.577925][T11139] macvtap0: entered promiscuous mode [ 286.652982][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.687233][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.694547][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.794301][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.801620][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.045262][T11152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.097027][T11152] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.121957][T11164] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1437'. [ 287.372341][T11171] netlink: 'syz.3.1440': attribute type 39 has an invalid length. [ 287.380501][ T5621] Bluetooth: hci5: command tx timeout [ 287.461825][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 287.723775][T11195] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 287.736463][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 287.745997][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 287.773590][T11195] bond4 (unregistering): Released all slaves [ 288.052007][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 288.057167][T11195] 0: reclassify loop, rule prio 0, protocol 03 [ 288.207713][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 288.264092][T11217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 288.288463][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 288.446751][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.807280][T11238] bond0: (slave batadv0): Releasing backup interface [ 288.831439][T11238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.067228][T11249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1454'. [ 289.137972][T10946] veth0_vlan: entered promiscuous mode [ 289.191110][T10946] veth1_vlan: entered promiscuous mode [ 289.274295][T10946] veth0_macvtap: entered promiscuous mode [ 289.293750][T10946] veth1_macvtap: entered promiscuous mode [ 289.338417][T11257] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.1455'. [ 289.357095][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.375551][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.460446][ T33] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.491520][ T33] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.548528][ T95] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.580035][ T95] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.759328][ T95] bond3: (slave bridge1): link status up again after 0 ms [ 289.781282][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 289.919615][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 290.028613][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 290.139475][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 290.248635][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 290.358637][ T33] bond3: (slave bridge1): failed to get link speed/duplex [ 290.468786][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 291.927319][T11251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.079265][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.122432][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.187433][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.198598][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.443520][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'. [ 292.726007][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 292.887625][T11299] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 293.143075][ T33] net_ratelimit: 22 callbacks suppressed [ 293.143096][ T33] bond3: (slave bridge1): failed to get link speed/duplex [ 293.279146][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 293.314919][ T143] bond3: (slave bridge1): failed to get link speed/duplex [ 293.548619][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 293.679230][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 293.809506][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 293.836100][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1474'. [ 294.019759][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 294.178914][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 294.405740][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 294.434419][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1481'. [ 294.447785][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 294.483673][T11368] veth0_macvtap: left promiscuous mode [ 294.573402][T11372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.621917][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 294.678826][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 294.800546][ T143] bond3: (slave bridge1): failed to get link speed/duplex [ 294.812527][T11384] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1482'. [ 294.932268][ T37] IPVS: starting estimator thread 0... [ 294.957512][T11382] smbdirect: ib_dev[syz1] removed [ 295.028861][T11394] IPVS: using max 26 ests per chain, 62400 per kthread [ 295.137550][T11401] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 295.153570][T11401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1489'. [ 295.162962][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 295.381682][T11411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.736867][T11420] netlink: 'syz.4.1494': attribute type 23 has an invalid length. [ 295.825478][T11427] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 295.864273][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'. [ 295.890105][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'. [ 295.911831][T11426] netlink: 'syz.0.1496': attribute type 6 has an invalid length. [ 296.007838][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 296.599773][T11467] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 297.023552][T11485] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 298.148655][ T95] net_ratelimit: 22 callbacks suppressed [ 298.148677][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 298.208497][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.268666][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 298.390039][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 298.518548][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 298.638594][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 298.760075][ T6366] bond3: (slave bridge1): failed to get link speed/duplex [ 298.892235][ T95] bond3: (slave bridge1): failed to get link speed/duplex [ 299.018721][ T71] bond3: (slave bridge1): failed to get link speed/duplex [ 299.139937][ T37] bond3: (slave bridge1): failed to get link speed/duplex [ 299.307758][T11562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.440994][T11568] __nla_validate_parse: 3 callbacks suppressed [ 299.441016][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1534'. [ 299.626557][T11581] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 299.715930][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 299.786504][T11585] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1537'. [ 299.818099][T11587] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1538'. [ 299.854332][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 299.879695][T11583] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 299.891606][T11583] bond5 (unregistering): Released all slaves [ 299.915361][ T7672] lo speed is unknown, defaulting to 1000 [ 299.921346][ T7672] syz2: Port: 1 Link DOWN [ 299.941692][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 300.282184][T11592] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 300.353413][T11591] IPVS: persistence engine module ip_vs_pe_  not found [ 301.305018][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 301.449477][T11648] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1551'. [ 301.542931][T11641] bond5 (unregistering): Released all slaves [ 302.126102][T11667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1555'. [ 302.157649][T11667] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1555'. [ 302.185261][T11667] 0: renamed from hsr0 (while UP) [ 302.284340][T11667] 0: left promiscuous mode [ 302.298779][T11667] 0: entered allmulticast mode [ 302.344396][T11667] hsr_slave_0: entered allmulticast mode [ 302.398524][T11667] hsr_slave_1: entered allmulticast mode [ 302.777125][T11686] ip6erspan1: entered allmulticast mode [ 303.652475][T11731] veth0_to_bond: entered allmulticast mode [ 303.806172][T11737] net_ratelimit: 27 callbacks suppressed [ 303.806194][T11737] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.305960][T11763] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 304.422111][T11767] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 304.500898][T11763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.568734][T11764] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 304.630270][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.670536][T11767] dummy0: entered promiscuous mode [ 304.745677][T11764] netlink: 'syz.4.1587': attribute type 2 has an invalid length. [ 304.788822][ T95] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 305.003169][T11788] __nla_validate_parse: 6 callbacks suppressed [ 305.003190][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 305.049975][T11788] tc_dump_action: action bad kind [ 305.069690][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1595'. [ 305.141302][T11789] vlan2: entered promiscuous mode [ 305.190531][T11789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1595'. [ 305.447105][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1598'. [ 306.231576][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.273831][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.282330][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.306056][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.325408][T11858] ip_tables: iptables: counters copy to user failed while replacing table [ 306.377922][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.424868][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.451164][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.466473][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.475165][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.487714][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.512488][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.545808][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.583793][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.608911][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.628001][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.648019][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.660049][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.682649][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.705578][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.727009][T11867] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 306.738252][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.769869][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.777946][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.786386][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.794287][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.801962][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.809782][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.817172][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.825813][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.833901][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.841931][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.849580][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.857002][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.864801][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.872538][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.880274][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.887738][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.895601][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.911642][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.920294][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.927592][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.935525][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.950098][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.957577][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.965466][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.973924][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 306.992420][T11851] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 307.007322][T11871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.224662][T11888] 8021q: VLANs not supported on syzkaller0 [ 307.264605][T11888] syzkaller0: left promiscuous mode [ 307.277824][T11888] syzkaller0: left allmulticast mode [ 307.284351][T11888] tipc: Resetting bearer [ 307.980246][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.023161][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.069757][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.227316][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.287738][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.347100][T11909] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 308.393478][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.426319][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 308.507800][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.515184][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.588010][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.595378][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.739968][T11941] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 308.852128][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 308.911579][T11941] bond1: entered promiscuous mode [ 308.916267][T11951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1631'. [ 308.927882][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 308.934050][T11941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.998308][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 309.087808][T11931] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 309.683906][T11980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.804565][T11990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1637'. [ 310.062683][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.070696][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.257958][T11989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.276156][T11989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.406921][T12008] bond5: option all_slaves_active: invalid value (255) [ 310.415986][T12008] bond5 (unregistering): Released all slaves [ 310.445456][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.460607][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.480485][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.488036][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.542055][ T143] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.554337][ T143] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.570873][ T143] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.584376][ T143] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.590575][T11977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.599688][T11983] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 312.610521][T11983] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1637'. [ 312.972514][T12030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1647'. [ 313.061689][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'. [ 313.227449][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.308288][T12045] netlink: 'syz.1.1652': attribute type 2 has an invalid length. [ 313.479791][T12049] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 313.506678][T12053] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 313.711249][T12053] bond6: entered promiscuous mode [ 313.757010][T12053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.799371][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 314.163823][T12057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.207325][T12057] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 314.234528][T12076] netlink: 'syz.1.1658': attribute type 39 has an invalid length. [ 314.243340][T12057] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 314.257483][T12057] bond6: (slave gre1): making interface the new active one [ 314.286597][T12057] gre1: entered promiscuous mode [ 314.305744][T12057] bond6: (slave gre1): Enslaving as an active interface with an up link [ 314.366142][T12078] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1659'. [ 314.381105][T12066] bond6 (unregistering): (slave gre1): Releasing backup interface [ 314.390164][T12066] gre1: left promiscuous mode [ 314.396867][T12066] bond6 (unregistering): Released all slaves [ 314.716372][T12095] sctp: [Deprecated]: syz.0.1663 (pid 12095) Use of int in maxseg socket option. [ 314.716372][T12095] Use struct sctp_assoc_value instead [ 314.757901][T12096] sctp: [Deprecated]: syz.0.1663 (pid 12096) Use of int in maxseg socket option. [ 314.757901][T12096] Use struct sctp_assoc_value instead [ 314.790170][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1661'. [ 314.910937][T12097] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 315.206477][T12115] syzkaller1: entered promiscuous mode [ 315.215832][T12115] syzkaller1: entered allmulticast mode [ 315.298892][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 315.628005][T12137] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 315.699485][T12137] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 315.949933][T12144] sch_tbf: peakrate 2567 is lower than or equals to rate 11411122545543103513 ! [ 315.972844][T12155] Cannot find del_set index 4 as target [ 316.149206][T12164] bond0 (unregistering): Released all slaves [ 316.458778][T12172] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 316.495719][T12168] ip6erspan0: entered allmulticast mode [ 316.653830][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 316.694178][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 316.801343][T12176] veth5: entered allmulticast mode [ 316.856776][T12176] bond2: (slave veth5): Enslaving as an active interface with a down link [ 317.096801][T12186] bond2: (slave veth0_to_bond): making interface the new active one [ 317.141637][T12186] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 317.223527][T12193] macvlan0: entered promiscuous mode [ 317.272586][T12193] macvlan0: entered allmulticast mode [ 317.350734][T12193] bond2: entered promiscuous mode [ 317.365673][T12193] veth0_to_bond: entered promiscuous mode [ 317.381530][T12193] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 317.400219][T12193] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 317.432528][T12193] bond2: left promiscuous mode [ 317.450167][T12193] veth0_to_bond: left promiscuous mode [ 317.461953][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475255][T12209] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 317.887036][T12231] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 318.019144][T12231] bond5: entered promiscuous mode [ 318.033206][T12231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.063492][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 318.096109][T12231] xt_CT: No such helper "syz1" [ 318.136745][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1698'. [ 318.216946][T12231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.246081][T12231] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 318.305652][T12231] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 318.327455][T12250] xt_l2tp: wrong L2TP version: 0 [ 318.359435][T12253] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1700'. [ 318.385846][T12231] bond5: (slave gre1): making interface the new active one [ 318.400743][T12231] gre1: entered promiscuous mode [ 318.412438][T12231] bond5: (slave gre1): Enslaving as an active interface with an up link [ 318.444376][T12258] netlink: 'syz.0.1701': attribute type 2 has an invalid length. [ 318.809177][ T7662] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 318.878823][ T6366] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 318.907501][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 318.927433][T12266] 8021q: VLANs not supported on ip6_vti0 [ 318.967283][T12276] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1706'. [ 319.027936][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 319.087057][T12279] syzkaller0: entered promiscuous mode [ 319.107514][T12276] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1706'. [ 319.135573][T12279] syzkaller0: entered allmulticast mode [ 319.587285][T12292] tipc: Failed to remove unknown binding: 66,0,0/0:4155796679/4155796681 [ 319.655430][T12292] tipc: Failed to remove unknown binding: 66,0,0/0:4155796679/4155796680 [ 319.699312][ T7662] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 319.775705][T12292] tipc: Failed to remove unknown binding: 66,0,0/0:4155796679/4155796681 [ 319.848029][T12292] tipc: Failed to remove unknown binding: 66,0,0/0:4155796679/4155796680 [ 319.952294][ T33] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 320.025036][ T7662] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 320.182005][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1713'. [ 320.207465][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.226547][T12323] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 320.251631][T12328] netlink: 'syz.5.1713': attribute type 1 has an invalid length. [ 320.264526][T12323] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 320.295040][T12322] ip6gre1: entered promiscuous mode [ 320.300653][T12322] ip6gre1: entered allmulticast mode [ 320.319333][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 320.552757][T12335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1716'. [ 320.604739][ T5270] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 320.762476][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 320.877579][T12335] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 321.241083][T12366] xt_policy: too many policy elements [ 321.484925][ T5270] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 322.306101][T12406] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 322.315908][T12406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 322.327782][T12406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 322.547598][T12419] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 323.063935][T12428] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.458486][T12444] __nla_validate_parse: 3 callbacks suppressed [ 323.458511][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1744'. [ 323.537163][T12444] bond3: option min_links: invalid value (18446744073709551612) [ 323.545273][T12444] bond3: option min_links: allowed values 0 - 2147483647 [ 323.559294][T12444] bond3 (unregistering): Released all slaves [ 323.664470][T12452] FAULT_INJECTION: forcing a failure. [ 323.664470][T12452] name failslab, interval 1, probability 0, space 0, times 0 [ 323.677710][T12452] CPU: 1 UID: 0 PID: 12452 Comm: syz.5.1746 Not tainted syzkaller #0 PREEMPT(full) [ 323.677738][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.677759][T12452] Call Trace: [ 323.677767][T12452] [ 323.677777][T12452] dump_stack_lvl+0xe8/0x150 [ 323.677814][T12452] should_fail_ex+0x410/0x560 [ 323.677855][T12452] should_failslab+0xa8/0x100 [ 323.677889][T12452] __kmalloc_noprof+0xfe/0x720 [ 323.677917][T12452] ? bpf_test_init+0x9f/0x150 [ 323.677950][T12452] ? bpf_test_init+0x9f/0x150 [ 323.677990][T12452] bpf_test_init+0x9f/0x150 [ 323.678030][T12452] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 323.678070][T12452] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 323.678100][T12452] ? __fget_files+0x2a/0x420 [ 323.678136][T12452] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 323.678160][T12452] bpf_prog_test_run+0x2c5/0x340 [ 323.678199][T12452] __sys_bpf+0xa22/0xd90 [ 323.678241][T12452] ? __pfx___sys_bpf+0x10/0x10 [ 323.678287][T12452] ? __fget_files+0x2a/0x420 [ 323.678335][T12452] ? ksys_write+0x242/0x270 [ 323.678374][T12452] ? __pfx_ksys_write+0x10/0x10 [ 323.678411][T12452] __x64_sys_bpf+0xba/0xd0 [ 323.678459][T12452] do_syscall_64+0x166/0x520 [ 323.678482][T12452] ? trace_irq_disable+0x3b/0x140 [ 323.678520][T12452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.678542][T12452] ? clear_bhb_loop+0x70/0xc0 [ 323.678569][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.678590][T12452] RIP: 0033:0x7f4f9559e0d9 [ 323.678611][T12452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.678631][T12452] RSP: 002b:00007f4f964ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.678655][T12452] RAX: ffffffffffffffda RBX: 00007f4f95825fa0 RCX: 00007f4f9559e0d9 [ 323.678671][T12452] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 323.678686][T12452] RBP: 00007f4f964ec090 R08: 0000000000000000 R09: 0000000000000000 [ 323.678700][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.678712][T12452] R13: 00007f4f95826038 R14: 00007f4f95825fa0 R15: 00007ffd2534dbf8 [ 323.678748][T12452] [ 323.910536][T12454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.572228][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 325.466971][ T5270] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 325.628823][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 327.105357][T12468] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 327.113924][T12468] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 328.227249][T12468] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 329.468340][ T5270] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 330.228903][T12468] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 330.658614][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 332.230835][T12468] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 332.976482][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 333.469777][ T5270] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 335.698735][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 340.738708][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 345.778596][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 349.170372][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 350.818685][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 355.858677][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 356.937765][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 356.959592][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 356.994904][T12512] Cannot find add_set index 3840 as target [ 357.222459][T12526] FAULT_INJECTION: forcing a failure. [ 357.222459][T12526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.281117][T12533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 357.283629][T12526] CPU: 0 UID: 0 PID: 12526 Comm: syz.5.1758 Not tainted syzkaller #0 PREEMPT(full) [ 357.283715][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.283748][T12526] Call Trace: [ 357.283770][T12526] [ 357.283791][T12526] dump_stack_lvl+0xe8/0x150 [ 357.283904][T12526] should_fail_ex+0x410/0x560 [ 357.284001][T12526] _copy_from_user+0x2d/0xb0 [ 357.284065][T12526] bpf_test_init+0xd8/0x150 [ 357.284191][T12526] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 357.284324][T12526] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.284398][T12526] ? __fget_files+0x2a/0x420 [ 357.284493][T12526] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.284556][T12526] bpf_prog_test_run+0x2c5/0x340 [ 357.284701][T12526] __sys_bpf+0xa22/0xd90 [ 357.284817][T12526] ? __pfx___sys_bpf+0x10/0x10 [ 357.284931][T12526] ? __fget_files+0x2a/0x420 [ 357.285069][T12526] ? ksys_write+0x242/0x270 [ 357.285155][T12526] ? __pfx_ksys_write+0x10/0x10 [ 357.285259][T12526] __x64_sys_bpf+0xba/0xd0 [ 357.285333][T12526] do_syscall_64+0x166/0x520 [ 357.285398][T12526] ? trace_irq_disable+0x3b/0x140 [ 357.285479][T12526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.285549][T12526] ? clear_bhb_loop+0x70/0xc0 [ 357.285641][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.285702][T12526] RIP: 0033:0x7f4f9559e0d9 [ 357.285757][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.285811][T12526] RSP: 002b:00007f4f964ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.285867][T12526] RAX: ffffffffffffffda RBX: 00007f4f95825fa0 RCX: 00007f4f9559e0d9 [ 357.285895][T12526] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 357.285936][T12526] RBP: 00007f4f964ec090 R08: 0000000000000000 R09: 0000000000000000 [ 357.285969][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.286001][T12526] R13: 00007f4f95826038 R14: 00007f4f95825fa0 R15: 00007ffd2534dbf8 [ 357.286095][T12526] [ 357.481479][T12538] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 357.546049][T12538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 357.564001][T12538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.531110][T12593] IPVS: length: 4096 != 24 [ 358.780772][T12612] FAULT_INJECTION: forcing a failure. [ 358.780772][T12612] name failslab, interval 1, probability 0, space 0, times 0 [ 358.823470][T12612] CPU: 1 UID: 0 PID: 12612 Comm: syz.5.1775 Not tainted syzkaller #0 PREEMPT(full) [ 358.823501][T12612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.823521][T12612] Call Trace: [ 358.823530][T12612] [ 358.823543][T12612] dump_stack_lvl+0xe8/0x150 [ 358.823599][T12612] should_fail_ex+0x410/0x560 [ 358.823635][T12612] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 358.823661][T12612] should_failslab+0xa8/0x100 [ 358.823693][T12612] __kvmalloc_node_noprof+0x176/0x870 [ 358.823728][T12612] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 358.823757][T12612] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 358.823785][T12612] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 358.823816][T12612] ? __mutex_unlock_slowpath+0x731/0x900 [ 358.823853][T12612] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 358.823876][T12612] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 358.823895][T12612] ? bpf_dispatcher_xdp+0x800/0x1000 [ 358.823949][T12612] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 358.823974][T12612] ? _copy_from_user+0x94/0xb0 [ 358.823993][T12612] ? bpf_test_init+0x113/0x150 [ 358.824018][T12612] ? xdp_convert_md_to_buff+0x5b/0x330 [ 358.824038][T12612] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 358.824068][T12612] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.824089][T12612] ? __fget_files+0x2a/0x420 [ 358.824117][T12612] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.824136][T12612] bpf_prog_test_run+0x2c5/0x340 [ 358.824165][T12612] __sys_bpf+0xa22/0xd90 [ 358.824197][T12612] ? __pfx___sys_bpf+0x10/0x10 [ 358.824237][T12612] ? __fget_files+0x2a/0x420 [ 358.824276][T12612] ? ksys_write+0x242/0x270 [ 358.824305][T12612] ? __pfx_ksys_write+0x10/0x10 [ 358.824337][T12612] __x64_sys_bpf+0xba/0xd0 [ 358.824363][T12612] do_syscall_64+0x166/0x520 [ 358.824383][T12612] ? trace_irq_disable+0x3b/0x140 [ 358.824406][T12612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.824428][T12612] ? clear_bhb_loop+0x70/0xc0 [ 358.824449][T12612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.824467][T12612] RIP: 0033:0x7f4f9559e0d9 [ 358.824483][T12612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.824498][T12612] RSP: 002b:00007f4f964ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.824517][T12612] RAX: ffffffffffffffda RBX: 00007f4f95825fa0 RCX: 00007f4f9559e0d9 [ 358.824530][T12612] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 358.824541][T12612] RBP: 00007f4f964ec090 R08: 0000000000000000 R09: 0000000000000000 [ 358.824551][T12612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.824562][T12612] R13: 00007f4f95826038 R14: 00007f4f95825fa0 R15: 00007ffd2534dbf8 [ 358.824589][T12612] [ 359.124591][T12615] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.1778'. [ 359.179412][T12615] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.1778'. [ 360.089377][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1782'. [ 360.903870][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 361.833370][T12617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.573847][T12589] syzkaller1: entered promiscuous mode [ 362.579864][T12589] syzkaller1: entered allmulticast mode [ 362.626382][T12642] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 363.184590][T12692] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1790'. [ 363.263796][T12681] lo speed is unknown, defaulting to 1000 [ 363.307288][T12696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1795'. [ 364.203856][T12734] bridge_slave_1: invalid flags given to default FDB implementation [ 364.237568][T12740] bridge_slave_1: invalid flags given to default FDB implementation [ 364.247159][T12735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.330748][T12742] netlink: 'syz.0.1806': attribute type 11 has an invalid length. [ 364.649268][T12749] ipvlan2: entered promiscuous mode [ 364.665477][T12760] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.680297][T12749] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.696991][T12760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1811'. [ 364.709079][T12749] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 364.722472][T12749] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 364.834653][T12765] xt_hashlimit: size too large, truncated to 1048576 [ 364.937301][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1816'. [ 364.960605][T12772] @0: renamed from bond_slave_1 (while UP) [ 365.198986][T12785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 365.232305][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 365.242292][T12785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 365.252838][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 365.276058][T12780] syzkaller0: entered promiscuous mode [ 365.288407][T12780] syzkaller0: entered allmulticast mode [ 365.294569][T12780] tipc: Resetting bearer [ 365.869793][T12809] syzkaller0: entered promiscuous mode [ 365.884793][T12809] syzkaller0: entered allmulticast mode [ 365.938602][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 366.087824][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1829'. [ 366.125377][T12826] Bluetooth: ISO socket layer initialized [ 366.423643][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1836'. [ 366.587000][T12845] debugfs: 'netdev:syzkaller0' already exists in 'phy6' [ 366.937585][T12864] IPVS: Scheduler module ip_vs_sip not found [ 370.445808][T12890] gretap0: entered promiscuous mode [ 370.463714][T12902] __nla_validate_parse: 4 callbacks suppressed [ 370.463735][T12902] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1851'. [ 370.537776][T12907] syzkaller0: entered promiscuous mode [ 370.564433][T12907] syzkaller0: entered allmulticast mode [ 370.661053][T12915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.718320][T12919] netlink: 'syz.5.1855': attribute type 1 has an invalid length. [ 370.896195][T12919] bond1: entered promiscuous mode [ 370.914435][T12919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.978536][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 371.276902][T12941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1859'. [ 371.391537][ T6366] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 371.454767][T12944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.751483][T12976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.905593][T12979] lo speed is unknown, defaulting to 1000 [ 372.140265][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 372.172898][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 372.210005][T12992] Bluetooth: MGMT ver 1.23 [ 372.229950][T12992] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1873'. [ 372.378183][T12998] netlink: 'syz.1.1875': attribute type 11 has an invalid length. [ 372.443861][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1875'. [ 372.564904][T13001] nbd: socks must be embedded in a SOCK_ITEM attr [ 372.597352][T13001] block nbd3: shutting down sockets [ 372.680366][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1878'. [ 372.690615][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 372.777277][T13016] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 372.815730][T13016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.845821][T13016] bond3: (slave veth7): Enslaving as an active interface with a down link [ 373.586205][T13033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 373.612954][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.622891][ T12] syzkaller0: tun_net_xmit 76 [ 373.643890][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.654035][ T12] syzkaller0: tun_net_xmit 48 [ 373.661455][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.671581][ T7662] syzkaller0: tun_net_xmit 76 [ 373.676774][T13038] syzkaller0: create flow: hash 298072310 index 2 [ 373.693997][T13038] syzkaller0: delete flow: hash 298072310 index 2 [ 373.701476][T13037] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 373.710795][T13037] netlink: 'syz.1.1887': attribute type 13 has an invalid length. [ 373.719383][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.727623][ T1214] syzkaller0: tun_net_xmit 76 [ 373.758896][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.767176][ T7662] syzkaller0: tun_net_xmit 76 [ 373.797560][T13037] tipc: Resetting bearer [ 374.129485][T13051] ip6tnl0: Caught tx_queue_len zero misconfig [ 374.242320][T13051] syzkaller0: left promiscuous mode [ 374.255453][T13051] syzkaller0: left allmulticast mode [ 374.281575][T13051] tipc: Resetting bearer [ 374.443005][T13067] netlink: 'syz.1.1897': attribute type 2 has an invalid length. [ 374.545637][T13071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1898'. [ 374.560418][T13071] tipc: Invalid UDP bearer configuration [ 374.560479][T13071] tipc: Enabling of bearer rejected, failed to enable media [ 374.689180][T13076] tipc: Enabling of bearer rejected, failed to enable media [ 374.872377][T13088] tunl0: Caught tx_queue_len zero misconfig [ 375.133894][T13099] netlink: 'syz.3.1908': attribute type 2 has an invalid length. [ 375.443540][T13110] 8021q: VLANs not supported on vcan0 [ 375.470835][T13110] vxcan2: entered promiscuous mode [ 375.777330][T13126] __nla_validate_parse: 5 callbacks suppressed [ 375.777352][T13126] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1918'. [ 375.845856][T13131] netlink: 'syz.4.1919': attribute type 31 has an invalid length. [ 375.998677][T13128] syzkaller0: left promiscuous mode [ 376.005246][T13128] syzkaller0: left allmulticast mode [ 376.018298][T13128] syzkaller0: create flow: hash 298072310 index 2 [ 376.018493][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 376.042194][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 376.083662][T13128] syzkaller0: delete flow: hash 298072310 index 2 [ 376.406561][T13149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.497858][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 376.557122][T13155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.149789][T13165] netlink: 'syz.1.1933': attribute type 2 has an invalid length. [ 377.234176][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1934'. [ 377.314617][T13173] netlink: 'syz.3.1935': attribute type 5 has an invalid length. [ 377.355071][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 377.458793][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.556877][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 378.203797][T13200] vlan1: entered promiscuous mode [ 378.211106][T13200] bridge0: entered promiscuous mode [ 378.517948][T13216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1951'. [ 378.647014][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058423800: rx timeout, send abort [ 378.902486][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.912030][ T1306] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 379.147195][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ce8c00: rx timeout, send abort [ 379.157685][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058423800: abort rx timeout. Force session deactivation [ 379.655521][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ce8c00: abort rx timeout. Force session deactivation [ 379.952356][T13268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1972'. [ 379.978845][T13268] 0: renamed from hsr0 [ 379.989186][T13268] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.008497][T13268] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.048440][T13268] 0: entered allmulticast mode [ 380.058022][T13268] hsr_slave_0: entered allmulticast mode [ 380.065132][T13268] hsr_slave_1: entered allmulticast mode [ 380.074233][T13268] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 380.213849][T13278] bond2: Removing last ns target with arp_interval on [ 380.260795][T13274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1973'. [ 380.326248][T13274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1973'. [ 380.503291][T13274] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 380.518103][T13274] bond4 (unregistering): Released all slaves [ 380.561298][T13294] syzkaller0: left promiscuous mode [ 380.567038][T13294] syzkaller0: left allmulticast mode [ 380.803128][T13302] __nla_validate_parse: 1 callbacks suppressed [ 380.803148][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1982'. [ 380.827885][T13297] dvmrp0: entered allmulticast mode [ 380.844416][T13302] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.877749][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 381.058528][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 381.247012][T13310] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 381.280606][T13314] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 381.453551][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 381.485693][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 381.512844][T13326] sctp: [Deprecated]: syz.1.1991 (pid 13326) Use of int in max_burst socket option. [ 381.512844][T13326] Use struct sctp_assoc_value instead [ 381.561343][ T95] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 381.601305][ T95] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 381.635821][ T95] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 381.659702][ T95] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20004 - 0 [ 381.680717][T13322] syzkaller0: Caught tx_queue_len zero misconfig [ 381.972780][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1997'. [ 382.005150][T13344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.174694][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 382.512534][T13364] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2001'. [ 382.555118][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 382.667131][T13364] openvswitch: netlink: IP tunnel dst address not specified [ 382.695879][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.717814][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.727668][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.743704][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.762955][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.816077][ T5270] veth0_vlan: left promiscuous mode [ 382.854883][ T1214] veth0_vlan: entered promiscuous mode [ 383.181318][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 383.202115][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 383.247675][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 383.863720][T13374] lo speed is unknown, defaulting to 1000 [ 384.700905][T13445] tipc: Started in network mode [ 384.713617][T13445] tipc: Node identity 7a48f6b1b6a, cluster identity 4711 [ 384.750727][T13445] tipc: Enabled bearer , priority 0 [ 384.795675][T13455] syzkaller0: entered promiscuous mode [ 384.809727][T13455] syzkaller0: entered allmulticast mode [ 384.819119][ T5621] Bluetooth: hci6: command tx timeout [ 384.852767][T13454] ovs-s: entered promiscuous mode [ 384.966729][T13457] openvswitch: ovs-s: Dropping previously announced user features [ 385.212932][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.253521][T13374] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.270133][T13374] bridge_slave_0: entered allmulticast mode [ 385.285693][T13374] bridge_slave_0: entered promiscuous mode [ 385.336285][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.347474][T13374] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.369021][T13374] bridge_slave_1: entered allmulticast mode [ 385.403537][T13374] bridge_slave_1: entered promiscuous mode [ 385.431002][T13480] tipc: Enabling of bearer rejected, already enabled [ 385.583448][T13374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.639490][T13374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.796629][T13374] team0: Port device team_slave_0 added [ 385.816008][T13374] team0: Port device team_slave_1 added [ 385.891873][T13500] nbd: socks must be embedded in a SOCK_ITEM attr [ 385.936238][ T1214] tipc: Node number set to 3437819569 [ 385.947406][T13374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.971605][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.008415][T13500] block nbd3: shutting down sockets [ 386.025311][T13374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.045297][T13374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.053167][T13374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.098503][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 386.146152][T13374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.173052][T13511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.242423][T13511] __nla_validate_parse: 2 callbacks suppressed [ 386.242447][T13511] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2031'. [ 386.385339][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2030'. [ 386.484110][T13374] hsr_slave_0: entered promiscuous mode [ 386.510262][T13374] hsr_slave_1: entered promiscuous mode [ 386.703182][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.720871][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.726568][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.737348][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.743276][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.749039][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.754687][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.761971][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.769772][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.775359][T13536] ip6t_srh: unknown srh invflags 4000 [ 386.909462][ T5621] Bluetooth: hci6: command tx timeout [ 387.117489][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 387.133767][T13551] FAULT_INJECTION: forcing a failure. [ 387.133767][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.192169][T13551] CPU: 1 UID: 0 PID: 13551 Comm: syz.5.2039 Not tainted syzkaller #0 PREEMPT(full) [ 387.192211][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.192224][T13551] Call Trace: [ 387.192233][T13551] [ 387.192242][T13551] dump_stack_lvl+0xe8/0x150 [ 387.192282][T13551] should_fail_ex+0x410/0x560 [ 387.192322][T13551] _copy_from_iter+0x1d3/0x1660 [ 387.192354][T13551] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 387.192382][T13551] ? rcu_is_watching+0x16/0xb0 [ 387.192403][T13551] ? trace_kmem_cache_alloc+0x29/0xe0 [ 387.192430][T13551] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 387.192455][T13551] ? __pfx__copy_from_iter+0x10/0x10 [ 387.192487][T13551] ? __alloc_skb+0x27a/0x7a0 [ 387.192515][T13551] ? __alloc_skb+0x27a/0x7a0 [ 387.192548][T13551] ? netlink_sendmsg+0x650/0xb40 [ 387.192569][T13551] ? skb_put+0x112/0x210 [ 387.192601][T13551] netlink_sendmsg+0x6c0/0xb40 [ 387.192634][T13551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.192659][T13551] ? aa_sock_msg_perm+0xf6/0x1c0 [ 387.192701][T13551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.192723][T13551] sock_sendmsg_nosec+0x13a/0x180 [ 387.192753][T13551] ____sys_sendmsg+0x54e/0x850 [ 387.192792][T13551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.192835][T13551] ? import_iovec+0x73/0xa0 [ 387.192860][T13551] ___sys_sendmsg+0x2a5/0x360 [ 387.192892][T13551] ? __lock_acquire+0x683/0x2cf0 [ 387.192929][T13551] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.193001][T13551] ? __fget_files+0x2a/0x420 [ 387.193031][T13551] ? __fget_files+0x3a2/0x420 [ 387.193072][T13551] __x64_sys_sendmsg+0x1b1/0x290 [ 387.193109][T13551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.193175][T13551] do_syscall_64+0x166/0x520 [ 387.193201][T13551] ? trace_irq_disable+0x3b/0x140 [ 387.193230][T13551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.193253][T13551] ? clear_bhb_loop+0x70/0xc0 [ 387.193280][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.193303][T13551] RIP: 0033:0x7f4f9559e0d9 [ 387.193324][T13551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.193343][T13551] RSP: 002b:00007f4f964ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.193366][T13551] RAX: ffffffffffffffda RBX: 00007f4f95825fa0 RCX: 00007f4f9559e0d9 [ 387.193382][T13551] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 387.193396][T13551] RBP: 00007f4f964ec090 R08: 0000000000000000 R09: 0000000000000000 [ 387.193410][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.193422][T13551] R13: 00007f4f95826038 R14: 00007f4f95825fa0 R15: 00007ffd2534dbf8 [ 387.193458][T13551] [ 387.675750][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2041'. [ 387.957222][T13374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.996761][T13374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.022184][T13374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.115851][T13374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.167076][T13374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.284267][T13374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.361107][ T7662] syzkaller0: tun_net_xmit 76 [ 388.411231][T13589] bond6: entered allmulticast mode [ 388.434593][T13374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.462113][T13374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.470477][ T7662] syzkaller0: tun_net_xmit 76 [ 388.498711][ C0] syzkaller0: tun_net_xmit 48 [ 388.534182][T13595] macvlan2: entered promiscuous mode [ 388.540381][T13595] macvlan2: entered allmulticast mode [ 388.547148][T13595] bond6: (slave macvlan2): Opening slave failed [ 388.610018][T13585] syzkaller0: tun_net_xmit 76 [ 388.630551][T13585] tipc: Enabled bearer , priority 0 [ 388.722765][T13581] tipc: Resetting bearer [ 388.950081][T13625] FAULT_INJECTION: forcing a failure. [ 388.950081][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 388.979012][ T5621] Bluetooth: hci6: command tx timeout [ 389.012033][T13374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.016409][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.3.2053 Not tainted syzkaller #0 PREEMPT(full) [ 389.016534][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.016567][T13625] Call Trace: [ 389.016589][T13625] [ 389.016610][T13625] dump_stack_lvl+0xe8/0x150 [ 389.016717][T13625] should_fail_ex+0x410/0x560 [ 389.016816][T13625] should_failslab+0xa8/0x100 [ 389.016914][T13625] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 389.016991][T13625] ? skb_clone+0x212/0x3a0 [ 389.017045][T13625] ? skb_clone+0x212/0x3a0 [ 389.017129][T13625] skb_clone+0x212/0x3a0 [ 389.017195][T13625] __netlink_deliver_tap+0x413/0x860 [ 389.017290][T13625] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.017345][T13625] netlink_deliver_tap+0x19c/0x1b0 [ 389.017413][T13625] netlink_unicast+0x781/0x940 [ 389.017529][T13625] netlink_sendmsg+0x813/0xb40 [ 389.017615][T13625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.017680][T13625] ? aa_sock_msg_perm+0xf6/0x1c0 [ 389.017814][T13625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.017874][T13625] sock_sendmsg_nosec+0x13a/0x180 [ 389.017947][T13625] ____sys_sendmsg+0x54e/0x850 [ 389.018053][T13625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.018164][T13625] ? import_iovec+0x73/0xa0 [ 389.018237][T13625] ___sys_sendmsg+0x2a5/0x360 [ 389.018321][T13625] ? __lock_acquire+0x683/0x2cf0 [ 389.018422][T13625] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.018614][T13625] ? __fget_files+0x2a/0x420 [ 389.018694][T13625] ? __fget_files+0x3a2/0x420 [ 389.018733][T13625] __x64_sys_sendmsg+0x1b1/0x290 [ 389.018767][T13625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.018821][T13625] do_syscall_64+0x166/0x520 [ 389.018846][T13625] ? trace_irq_disable+0x3b/0x140 [ 389.018966][T13625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.019045][T13625] ? clear_bhb_loop+0x70/0xc0 [ 389.019119][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.019224][T13625] RIP: 0033:0x7fcad699e0d9 [ 389.019281][T13625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.019334][T13625] RSP: 002b:00007fcad4bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.019383][T13625] RAX: ffffffffffffffda RBX: 00007fcad6c25fa0 RCX: 00007fcad699e0d9 [ 389.019427][T13625] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 389.019462][T13625] RBP: 00007fcad4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.019503][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.019535][T13625] R13: 00007fcad6c26038 R14: 00007fcad6c25fa0 R15: 00007ffdb62269d8 [ 389.019623][T13625] [ 389.362114][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2054'. [ 389.397700][T13374] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.415973][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.423240][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.428165][T13629] siw: device registration error -23 [ 389.447621][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2054'. [ 389.528841][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.536084][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.673048][ T13] tipc: Resetting bearer [ 389.857300][T13646] tipc: Resetting bearer [ 389.870131][T13638] block nbd3: server does not support multiple connections per device. [ 389.887543][T13638] block nbd3: shutting down sockets [ 390.202304][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 390.227944][T13663] Cannot find add_set index 4 as target [ 390.278984][ C1] syzkaller0: tun_net_xmit 76 [ 390.393151][T13645] tipc: Resetting bearer [ 390.503827][T13671] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.699373][T13671] bond3: (slave lo): Enslaving as an active interface with an up link [ 390.764864][T13689] FAULT_INJECTION: forcing a failure. [ 390.764864][T13689] name failslab, interval 1, probability 0, space 0, times 0 [ 390.782779][T13671] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 390.806898][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.3.2065 Not tainted syzkaller #0 PREEMPT(full) [ 390.806931][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.806943][T13689] Call Trace: [ 390.806953][T13689] [ 390.806961][T13689] dump_stack_lvl+0xe8/0x150 [ 390.806997][T13689] should_fail_ex+0x410/0x560 [ 390.807028][T13689] should_failslab+0xa8/0x100 [ 390.807077][T13689] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 390.807099][T13689] ? local_lock_release+0x9c/0x160 [ 390.807125][T13689] ? __alloc_skb+0x1db/0x7a0 [ 390.807146][T13689] ? __alloc_skb+0x1db/0x7a0 [ 390.807176][T13689] __alloc_skb+0x1db/0x7a0 [ 390.807204][T13689] tipc_nl_compat_doit+0x18a/0x650 [ 390.807238][T13689] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 390.807305][T13689] ? apparmor_capable+0x126/0x170 [ 390.807329][T13689] ? bpf_lsm_capable+0x9/0x20 [ 390.807350][T13689] ? security_capable+0x7e/0x2c0 [ 390.807384][T13689] tipc_nl_compat_recv+0x8d3/0xcf0 [ 390.807415][T13689] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 390.807447][T13689] ? __mutex_trylock_common+0x15f/0x270 [ 390.807469][T13689] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 390.807495][T13689] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 390.807511][T13689] ? __pfx___mutex_trylock_common+0x10/0x10 [ 390.807535][T13689] ? trace_contention_end+0x3d/0x140 [ 390.807554][T13689] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 390.807587][T13689] genl_family_rcv_msg_doit+0x233/0x340 [ 390.807625][T13689] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.807659][T13689] ? __dev_queue_xmit+0x29b/0x3820 [ 390.807688][T13689] genl_rcv_msg+0x614/0x7a0 [ 390.807716][T13689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.807738][T13689] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 390.807771][T13689] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.807800][T13689] netlink_rcv_skb+0x226/0x4a0 [ 390.807822][T13689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.807849][T13689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.807887][T13689] ? down_read+0x2be/0x330 [ 390.807917][T13689] genl_rcv+0x28/0x40 [ 390.807939][T13689] netlink_unicast+0x7bd/0x940 [ 390.807983][T13689] netlink_sendmsg+0x813/0xb40 [ 390.808016][T13689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.808041][T13689] ? aa_sock_msg_perm+0xf6/0x1c0 [ 390.808082][T13689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.808104][T13689] sock_sendmsg_nosec+0x13a/0x180 [ 390.808132][T13689] ____sys_sendmsg+0x54e/0x850 [ 390.808171][T13689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.808212][T13689] ? import_iovec+0x73/0xa0 [ 390.808239][T13689] ___sys_sendmsg+0x2a5/0x360 [ 390.808281][T13689] ? __lock_acquire+0x683/0x2cf0 [ 390.808317][T13689] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.808387][T13689] ? __fget_files+0x2a/0x420 [ 390.808417][T13689] ? __fget_files+0x3a2/0x420 [ 390.808458][T13689] __x64_sys_sendmsg+0x1b1/0x290 [ 390.808496][T13689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.808556][T13689] do_syscall_64+0x166/0x520 [ 390.808581][T13689] ? trace_irq_disable+0x3b/0x140 [ 390.808611][T13689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.808634][T13689] ? clear_bhb_loop+0x70/0xc0 [ 390.808663][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.808684][T13689] RIP: 0033:0x7fcad699e0d9 [ 390.808705][T13689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.808724][T13689] RSP: 002b:00007fcad4bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.808747][T13689] RAX: ffffffffffffffda RBX: 00007fcad6c25fa0 RCX: 00007fcad699e0d9 [ 390.808764][T13689] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 390.808778][T13689] RBP: 00007fcad4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.808792][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.808805][T13689] R13: 00007fcad6c26038 R14: 00007fcad6c25fa0 R15: 00007ffdb62269d8 [ 390.808843][T13689] [ 391.189693][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 391.206823][ T5621] Bluetooth: hci6: command tx timeout [ 391.268050][ T37] tipc: Resetting bearer [ 391.526646][T13704] team_slave_1: Caught tx_queue_len zero misconfig [ 391.831106][T13704] lo speed is unknown, defaulting to 1000 [ 391.844904][T13713] set match dimension is over the limit! [ 392.100747][T13374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.610356][T13727] virt_wifi0: entered promiscuous mode [ 392.822817][T13740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.897580][T13374] veth0_vlan: entered promiscuous mode [ 392.933968][T13374] veth1_vlan: entered promiscuous mode [ 393.055259][T13374] veth0_macvtap: entered promiscuous mode [ 393.092237][T13374] veth1_macvtap: entered promiscuous mode [ 393.145879][T13374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.161725][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 393.200263][T13749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2079'. [ 393.213610][T13374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.279730][ T6366] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.300008][ T143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.333481][ T13] IPVS: starting estimator thread 0... [ 393.337458][ T143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.443377][T13757] IPVS: using max 28 ests per chain, 67200 per kthread [ 393.484336][ T6366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.757500][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.784890][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.862903][T13764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.889236][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.912443][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.180584][T13772] Bluetooth: hci0: unsupported parameter 5135 [ 394.203867][T13772] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 394.241817][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2084'. [ 394.271665][T13752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2080'. [ 394.313977][T13772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.335657][T13752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2080'. [ 394.377138][T13752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2080'. [ 394.794942][T13763] tipc: Resetting bearer [ 395.270545][T13801] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 395.355402][T13801] netlink: 'syz.1.2093': attribute type 2 has an invalid length. [ 395.592383][T13821] netlink: 'syz.6.2097': attribute type 11 has an invalid length. [ 395.675296][T13831] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2103'. [ 395.904092][T13843] netlink: 'syz.4.2106': attribute type 6 has an invalid length. [ 395.962825][T13843] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.223069][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2112'. [ 396.247233][T13862] netlink: 'syz.6.2112': attribute type 1 has an invalid length. [ 396.258563][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 396.277456][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2112'. [ 396.535317][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2114'. [ 396.606165][T13878] netlink: 'syz.5.2115': attribute type 10 has an invalid length. [ 396.697175][T13882] sctp: [Deprecated]: syz.1.2117 (pid 13882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.697175][T13882] Use struct sctp_sack_info instead [ 396.908522][T13878] team0 (unregistering): Port device team_slave_0 removed [ 396.960932][T13878] team0 (unregistering): Port device team_slave_1 removed [ 397.834798][T13929] tipc: Resetting bearer [ 398.528026][T13968] __nla_validate_parse: 5 callbacks suppressed [ 398.528047][T13968] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2136'. [ 398.547374][T13968] syz_tun: entered allmulticast mode [ 398.583324][T13967] syz_tun: left allmulticast mode [ 398.903078][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2141'. [ 398.997671][T13991] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 399.032262][T13990] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 399.090682][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2141'. [ 399.172234][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.277363][T13998] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 399.966910][T14009] netlink: 'syz.3.2143': attribute type 7 has an invalid length. [ 400.044541][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 400.560308][T14047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.597119][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2154'. [ 400.615925][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2154'. [ 400.655581][T14049] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2154'. [ 400.779786][T14049] can: request_module (can-proto-0) failed. [ 400.831858][T14058] netlink: 'syz.4.2155': attribute type 30 has an invalid length. [ 401.298535][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 401.424536][T14079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.611433][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2163'. [ 401.634155][T14086] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2166'. [ 401.707884][T14094] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 402.000762][ T6364] bond4: (slave gretap1): link status up again after 0 ms [ 402.048553][ T6366] bond4: (slave gretap1): link status up again after 0 ms [ 402.095841][T14102] tipc: Resetting bearer [ 402.098077][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 402.106329][ T6366] bond4: (slave gretap1): link status up again after 0 ms [ 402.176441][ T37] bond4: (slave gretap1): link status up again after 0 ms [ 402.208637][ T143] bond4: (slave gretap1): link status up again after 0 ms [ 402.249781][ T13] bond4: (slave gretap1): link status up again after 0 ms [ 402.272440][T14105] lo speed is unknown, defaulting to 1000 [ 402.294622][ T13] bond4: (slave gretap1): link status up again after 0 ms [ 402.338764][ T13] bond4: (slave gretap1): link status up again after 0 ms [ 402.447907][T14101] tipc: Resetting bearer [ 402.491211][ T13] tipc: Resetting bearer [ 403.415619][T14159] pimreg9: entered allmulticast mode [ 404.212113][T14191] __nla_validate_parse: 2 callbacks suppressed [ 404.212132][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2183'. [ 404.918249][T14223] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 405.339794][T14223] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.376335][T14233] tipc: Invalid UDP bearer configuration [ 405.376391][T14233] tipc: Enabling of bearer rejected, failed to enable media [ 405.550493][T14239] syzkaller0: entered promiscuous mode [ 405.571271][T14239] syzkaller0: entered allmulticast mode [ 405.620717][ T143] net_ratelimit: 41 callbacks suppressed [ 405.620741][ T143] bond4: (slave gretap1): failed to get link speed/duplex [ 405.818986][ T143] bond4: (slave gretap1): failed to get link speed/duplex [ 406.021801][ T143] bond4: (slave gretap1): failed to get link speed/duplex [ 406.194982][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 406.338750][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 406.352344][ T143] bond4: (slave gretap1): failed to get link speed/duplex [ 406.380988][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 406.439939][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 406.490500][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 406.627275][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 406.680602][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 406.800935][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 406.919539][T14290] IPVS: length: 204 != 8 [ 406.981797][ T12] bond4: (slave gretap1): failed to get link speed/duplex [ 407.098154][T14302] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 407.172397][T14306] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 407.198465][ T37] bond4: (slave gretap1): failed to get link speed/duplex [ 407.610649][T14330] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 407.892755][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 408.101364][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2216'. [ 408.345277][T14339] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 408.925726][T14355] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 409.305421][T14373] ieee802154 phy0 wpan0: encryption failed: -90 [ 409.406546][T14379] netlink: 'syz.3.2227': attribute type 251 has an invalid length. [ 411.225100][T14421] netlink: 'syz.6.2240': attribute type 22 has an invalid length. [ 411.246804][T14427] netlink: 'syz.6.2240': attribute type 22 has an invalid length. [ 411.299431][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2240'. [ 411.311218][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2240'. [ 411.380432][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 411.604011][T14427] netlink: 'syz.6.2240': attribute type 22 has an invalid length. [ 411.618743][ T37] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.641128][T14421] netlink: 'syz.6.2240': attribute type 22 has an invalid length. [ 411.664298][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2240'. [ 411.689362][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2240'. [ 411.713125][ T95] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.769608][ T95] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.819192][ T37] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.194739][T14448] can: request_module (can-proto-0) failed. [ 412.304776][T14455] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 413.465430][T14485] pimreg: entered allmulticast mode [ 413.499740][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 413.760322][T14489] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 413.827222][T14489] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 413.900706][T14508] netlink: 'syz.6.2254': attribute type 1 has an invalid length. [ 413.942015][T14508] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2254'. [ 413.955675][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2251'. [ 413.956952][T14510] lo: entered allmulticast mode [ 414.005577][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2251'. [ 414.264923][T14518] netlink: 'syz.4.2257': attribute type 3 has an invalid length. [ 414.275760][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2257'. [ 414.951171][T14537] syzkaller0: entered promiscuous mode [ 415.014650][T14537] syzkaller0: entered allmulticast mode [ 415.085435][T14543] tipc: Enabled bearer , priority 0 [ 415.305596][T14534] tipc: Resetting bearer [ 415.422272][T14534] tipc: Disabling bearer [ 415.497326][T14557] tipc: Enabling of bearer rejected, already enabled [ 415.636809][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2268'. [ 416.365421][T14576] lo speed is unknown, defaulting to 1000 [ 416.418490][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 416.479368][T14582] netlink: Failed to add helper -22 [ 416.613592][T14582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.192515][T14607] openvswitch: netlink: IP tunnel dst address not specified [ 417.256877][T14607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.345315][T14612] syzkaller1: entered promiscuous mode [ 417.377173][T14612] syzkaller1: entered allmulticast mode [ 417.637622][T14622] netlink: 'syz.6.2280': attribute type 3 has an invalid length. [ 417.731023][T14622] __nla_validate_parse: 1 callbacks suppressed [ 417.731043][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2280'. [ 417.936790][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'. [ 418.222382][T14636] Cannot find set identified by id 0 to match [ 418.732082][T14654] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 419.185198][T14660] tipc: Enabling of bearer rejected, failed to enable media [ 419.652518][T14666] pim6reg: entered allmulticast mode [ 420.002942][T14676] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 420.109681][T14669] ovs-s: entered promiscuous mode [ 420.132680][T14677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 420.883736][T14676] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 420.885921][T14683] dummy0: left promiscuous mode [ 421.458471][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 421.881525][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'. [ 422.314856][T14714] netlink: 'syz.1.2303': attribute type 4 has an invalid length. [ 422.439942][T14714] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2303'. [ 422.705748][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2307'. [ 423.378428][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 425.275457][T14719] macsec1: entered promiscuous mode [ 425.301686][T14719] bridge0: entered promiscuous mode [ 425.913695][T14762] netlink: 'syz.5.2314': attribute type 1 has an invalid length. [ 427.061096][T14752] Bluetooth: hci5: command 0x0406 tx timeout [ 428.001003][T14799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.063885][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 428.085655][T14801] batadv0: entered promiscuous mode [ 428.128594][T14801] macvtap0: entered promiscuous mode [ 428.148040][T14801] macvtap0: entered allmulticast mode [ 428.170098][T14801] batadv0: entered allmulticast mode [ 428.230188][T14801] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 428.287639][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2326'. [ 428.344397][T14801] batadv0: left allmulticast mode [ 428.366530][T14801] batadv0: left promiscuous mode [ 428.462829][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 430.572015][T14827] lo speed is unknown, defaulting to 1000 [ 432.511245][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'. [ 433.574804][T14853] debugfs: 'netdev:syzkaller0' already exists in 'phy6' [ 434.219476][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 434.590087][T14867] ip6tnl3: entered allmulticast mode [ 434.596222][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2338'. [ 434.962218][ T95] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 435.096483][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2340'. [ 436.015503][T14888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.094055][T14892] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 436.146704][T14896] netlink: 'syz.1.2342': attribute type 6 has an invalid length. [ 436.709203][T14903] openvswitch: netlink: Unknown key attributes 1 [ 436.721179][T14908] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.097112][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2346'. [ 437.349586][T14918] x_tables: duplicate underflow at hook 2 [ 437.684081][T14928] netlink: 'syz.4.2350': attribute type 30 has an invalid length. [ 438.939275][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 439.218806][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 439.258749][T14947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.502921][T14945] bond4: (slave ip6erspan0): making interface the new active one [ 439.943413][T14957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.128458][T14945] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 440.361473][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373829][ T1306] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 440.693360][ T6364] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.016822][ T6366] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.098721][ T5767] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.170438][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.257310][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2357'. [ 441.361886][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2357'. [ 442.513590][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 442.671494][T14973] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 443.439544][T14997] lo speed is unknown, defaulting to 1000 [ 443.536035][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 443.956248][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 444.093813][T15006] xt_hashlimit: size too large, truncated to 1048576 [ 445.938127][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 446.236679][T15026] netlink: 'syz.4.2372': attribute type 30 has an invalid length. [ 447.375706][T15040] debugfs: 'netdev:syzkaller0' already exists in 'phy20' [ 448.028534][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 448.525752][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 450.397927][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 451.831766][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2392'. [ 452.021611][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'. [ 452.045627][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2392'. [ 453.272619][T15115] netlink: 'syz.3.2398': attribute type 9 has an invalid length. [ 453.418377][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 453.919489][T15106] netlink: 'syz.6.2397': attribute type 4 has an invalid length. [ 454.764107][T15128] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 455.719444][T15133] netlink: 'syz.5.2406': attribute type 5 has an invalid length. [ 456.163935][T15146] team0: Mode changed to "loadbalance" [ 456.565452][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 457.978353][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 458.139213][T15178] tipc: Resetting bearer [ 458.290491][ T5713] syzkaller0: tun_net_xmit 76 [ 458.398805][ C0] syzkaller0: tun_net_xmit 76 [ 458.506189][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 458.551001][T15179] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2419'. [ 458.678560][ C0] syzkaller0: tun_net_xmit 76 [ 458.724489][T15185] sctp: [Deprecated]: syz.5.2421 (pid 15185) Use of int in max_burst socket option. [ 458.724489][T15185] Use struct sctp_assoc_value instead [ 458.777909][T15175] tipc: Resetting bearer [ 458.924637][T15190] lo: Caught tx_queue_len zero misconfig [ 459.092865][T15190] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 459.603811][ T143] tipc: Resetting bearer [ 460.030099][T15203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.169903][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2428'. [ 460.398352][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 460.547335][T15215] netlink: 'syz.5.2429': attribute type 2 has an invalid length. [ 460.557458][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 460.615469][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 460.731806][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2428'. [ 461.480748][T15225] syzkaller1: entered promiscuous mode [ 461.523537][T15225] syzkaller1: entered allmulticast mode [ 462.164032][T15232] debugfs: 'netdev:syzkaller0' already exists in 'phy6' [ 462.261532][T15237] ip_tables: iptables: counters copy to user failed while replacing table [ 462.903483][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2434'. [ 464.658593][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 466.342589][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 467.661964][T15289] netlink: 'syz.4.2445': attribute type 9 has an invalid length. [ 468.169496][T15297] gretap0: entered promiscuous mode [ 468.382512][T15297] vlan2: entered promiscuous mode [ 469.991103][T15311] netlink: 'syz.5.2453': attribute type 23 has an invalid length. [ 470.677159][T15315] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.776354][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 471.148123][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2457'. [ 471.517054][T15332] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2460'. [ 473.066344][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 473.126205][T15352] bond0: option arp_validate: invalid value (55553) [ 473.214964][T15352] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 473.359487][T15352] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2465'. [ 473.542213][T15352] NCSI netlink: No device for ifindex 0 [ 474.622486][T15367] tipc: Resetting bearer [ 475.592775][T15377] ip_tables: iptables: counters copy to user failed while replacing table [ 475.701687][T15381] syzkaller0: left promiscuous mode [ 475.719813][T15381] syzkaller0: left allmulticast mode [ 475.766281][T15380] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 476.155178][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2474'. [ 476.541917][T15384] veth11: entered allmulticast mode [ 476.751788][T15397] netlink: 'syz.6.2479': attribute type 32 has an invalid length. [ 476.856258][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2479'. [ 477.212856][T15396] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 477.352417][T15380] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 477.431835][T15396] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 477.516848][T15396] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 477.750457][T15397] bond1: option coupled_control: invalid value (10) [ 478.706015][T15397] bond1 (unregistering): Released all slaves [ 480.239376][T15436] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2486'. [ 480.789932][T15442] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 480.878697][T15442] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 481.086628][T15450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2488'. [ 481.156326][T15442] bond4: entered promiscuous mode [ 481.200974][T15442] bond4: entered allmulticast mode [ 481.254551][T15442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.681740][ T5621] block nbd3: Receive control failed (result -32) [ 482.027312][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2495'. [ 482.464434][T15476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.997810][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 484.094653][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2502'. [ 484.139626][T15499] netlink: 'syz.6.2502': attribute type 11 has an invalid length. [ 484.169671][T15499] netlink: 'syz.6.2502': attribute type 13 has an invalid length. [ 484.191673][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2503'. [ 484.477660][T15505] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 485.245302][T15522] syzkaller1: entered promiscuous mode [ 485.351195][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 485.398737][T15522] syzkaller1: entered allmulticast mode [ 485.410564][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 485.805934][T15520] tipc: Resetting bearer [ 485.895308][T15517] tipc: Resetting bearer [ 486.875328][ T33] tipc: Resetting bearer [ 486.935757][T15528] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 487.062680][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 489.527532][T15566] ip_tables: iptables: counters copy to user failed while replacing table [ 489.756663][T15568] debugfs: 'netdev:syzkaller0' already exists in 'phy20' [ 490.607630][T15580] x_tables: duplicate underflow at hook 1 [ 490.726817][T15583] xt_ipcomp: unknown flags 1D [ 490.800400][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2520'. [ 490.838913][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 490.865594][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 492.715109][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2530'. [ 494.751999][T15645] veth0_to_bond: entered allmulticast mode [ 495.370067][T15648] ip6gre0: Caught tx_queue_len zero misconfig [ 496.359405][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2539'. [ 496.540996][T15659] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 496.622481][T15662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2541'. [ 497.342497][T15659] bond5: entered promiscuous mode [ 497.491722][T15659] bond5: entered allmulticast mode [ 497.602719][T15659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.767735][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 497.913972][T15664] syz.3.2541 (15664) used obsolete PPPIOCDETACH ioctl [ 497.948482][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 499.143828][ T37] IPVS: starting estimator thread 0... [ 499.384284][T15690] IPVS: using max 26 ests per chain, 62400 per kthread [ 501.406797][T15720] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2556'. [ 501.626419][T15719] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 501.721065][T15719] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2555'. [ 501.758350][T15719] NCSI netlink: No device for ifindex 0 [ 501.794139][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.806741][ T1306] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 503.779819][T14752] Bluetooth: hci6: command 0x0405 tx timeout [ 503.920584][T15750] x_tables: duplicate underflow at hook 1 [ 503.946855][T15738] lo speed is unknown, defaulting to 1000 [ 503.967363][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 504.392810][T15742] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 504.918348][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 506.519979][T15742] geneve3: entered promiscuous mode [ 506.939244][T15742] geneve3: entered allmulticast mode [ 507.746128][T12343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 513.948514][ T31] INFO: task syz.0.1843:12877 blocked for more than 143 seconds. [ 513.956420][ T31] Not tainted syzkaller #0 [ 514.259872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.295255][ T31] task:syz.0.1843 state:D stack:27200 pid:12877 tgid:12875 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 514.425632][ T31] Call Trace: [ 514.499002][ T31] [ 514.509642][ T31] __schedule+0x17d4/0x5630 [ 514.529373][ T31] ? __pfx___schedule+0x10/0x10 [ 514.547015][T15798] netlink: 'syz.6.2567': attribute type 1 has an invalid length. [ 514.591242][ T31] ? schedule+0x90/0x2b0 [ 514.633138][ T31] schedule+0x164/0x2b0 [ 514.673508][T15798] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2567'. [ 514.696711][ T31] schedule_preempt_disabled+0x13/0x30 [ 514.859381][ T31] __mutex_lock+0x7c1/0x1550 [ 514.868318][ T31] ? __mutex_lock+0x5d4/0x1550 [ 514.885555][ T31] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 514.902595][T15798] NCSI netlink: No device for ifindex 0 [ 514.912684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 514.926175][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 514.941517][ T31] ? kern_path+0xd1/0x150 [ 514.995797][ T31] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 515.031478][ T31] ? __nla_parse+0x40/0x60 [ 515.052394][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 515.198144][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 515.255119][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 515.288379][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 515.324536][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 515.374073][ T31] ? bpf_lsm_capable+0x9/0x20 [ 515.397407][ T31] ? security_capable+0x7e/0x2c0 [ 515.424913][ T31] genl_rcv_msg+0x614/0x7a0 [ 515.439168][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.477246][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 515.498340][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 515.516929][ T31] netlink_rcv_skb+0x226/0x4a0 [ 515.532297][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.544799][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.572226][ T31] ? down_read+0x2be/0x330 [ 515.594107][ T31] genl_rcv+0x28/0x40 [ 515.605506][ T31] netlink_unicast+0x7bd/0x940 [ 515.619856][ T31] netlink_sendmsg+0x813/0xb40 [ 515.634649][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.659711][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 515.668191][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.686057][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 515.701179][ T31] ____sys_sendmsg+0x54e/0x850 [ 515.715949][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.739652][ T31] ? import_iovec+0x73/0xa0 [ 515.759829][ T31] ___sys_sendmsg+0x2a5/0x360 [ 515.770307][ T31] ? __lock_acquire+0x683/0x2cf0 [ 515.782082][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.955724][ T31] ? __fget_files+0x2a/0x420 [ 515.970412][ T31] ? __fget_files+0x3a2/0x420 [ 515.985337][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 515.999507][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 516.015433][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.033161][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 516.181214][ T31] do_syscall_64+0x166/0x520 [ 516.208168][ T31] ? trace_irq_disable+0x3b/0x140 [ 516.222217][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.239418][ T31] ? clear_bhb_loop+0x70/0xc0 [ 516.264054][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.322179][ T31] RIP: 0033:0x7fa29099e0d9 [ 516.338345][ T31] RSP: 002b:00007fa29178f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.351364][ T31] RAX: ffffffffffffffda RBX: 00007fa290c26090 RCX: 00007fa29099e0d9 [ 516.378343][ T31] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 516.389615][ T31] RBP: 00007fa290a35024 R08: 0000000000000000 R09: 0000000000000000 [ 516.431723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.452078][ T31] R13: 00007fa290c26128 R14: 00007fa290c26090 R15: 00007ffe1d1fe718 [ 516.473589][ T31] [ 516.573323][ T31] [ 516.573323][ T31] Showing all locks held in the system: [ 516.704676][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 516.719068][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 516.745920][ T31] locks held by getty/5362: 2, on CPU#1: [ 516.761575][ T31] #0: ffff888035b010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.788307][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 516.838498][ T31] locks held by syz.2.1277/10550: 2, on CPU#1: [ 516.856695][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.878480][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 516.907285][ T31] locks held by syz.0.1843/12877: 2, on CPU#0: [ 517.160259][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.213466][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 517.240251][ T31] locks held by syz.4.2557/15738: 2, on CPU#0: [ 517.259689][ T31] #0: ffffffff90027b28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 517.296176][ T31] #1: ffffffff8eb603b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 517.339782][ T31] locks held by kworker/u8:9/15761: 3, last CPU#0: [ 517.360715][ T31] #0: ffff88803250e940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 517.394174][ T31] #1: ffffc9000427fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 517.470164][ T31] #2: ffff8880b8628198 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 517.515933][ T31] [ 517.525221][ T31] ============================================= [ 517.525221][ T31] [ 517.612165][ T31] NMI backtrace for cpu 1 [ 517.612191][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.612217][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.612231][ T31] Call Trace: [ 517.612239][ T31] [ 517.612249][ T31] dump_stack_lvl+0xe8/0x150 [ 517.612289][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 517.612324][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.612360][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 517.612398][ T31] sys_info+0x135/0x170 [ 517.612428][ T31] watchdog+0xfd7/0x1030 [ 517.612467][ T31] ? watchdog+0x1c7/0x1030 [ 517.612506][ T31] kthread+0x38b/0x480 [ 517.612538][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.612566][ T31] ? __pfx_kthread+0x10/0x10 [ 517.612600][ T31] ret_from_fork+0x514/0xb70 [ 517.612636][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.612667][ T31] ? __switch_to+0xc89/0x1420 [ 517.612698][ T31] ? __pfx_kthread+0x10/0x10 [ 517.612732][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.612784][ T31] [ 517.612792][ T31] Sending NMI from CPU 1 to CPUs 0: [ 517.737446][ C0] NMI backtrace for cpu 0 [ 517.737468][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 517.737497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.737509][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 517.737544][ C0] Code: c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a8 ad a8 11 65 48 8b 15 a8 ad a8 11 f7 c2 00 01 00 ff [ 517.737561][ C0] RSP: 0018:ffffc90000147bd0 EFLAGS: 00000046 [ 517.737580][ C0] RAX: ffffffff81b390f6 RBX: 0000000000000001 RCX: 8000000000000101 [ 517.737594][ C0] RDX: 8000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 517.737606][ C0] RBP: ffff88807ee54138 R08: 0000000000000100 R09: 0000000000080000 [ 517.737619][ C0] R10: 0000000000000000 R11: ffffffff9a7d3748 R12: ffff8880b8628180 [ 517.737633][ C0] R13: dffffc0000000000 R14: ffff8880b86284a0 R15: ffff8880b8628490 [ 517.737647][ C0] FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 517.737663][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.737676][ C0] CR2: 000055bc5a5871a0 CR3: 000000007bbba000 CR4: 00000000003526f0 [ 517.737693][ C0] Call Trace: [ 517.737702][ C0] [ 517.737709][ C0] __hrtimer_run_queues+0x216/0xa10 [ 517.737746][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 517.737772][ C0] handle_softirqs+0x226/0x860 [ 517.737797][ C0] ? run_ksoftirqd+0x36/0x60 [ 517.737826][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 517.737849][ C0] run_ksoftirqd+0x36/0x60 [ 517.737872][ C0] smpboot_thread_fn+0x565/0xa70 [ 517.737897][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 517.737926][ C0] kthread+0x38b/0x480 [ 517.737953][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 517.737977][ C0] ? __pfx_kthread+0x10/0x10 [ 517.738004][ C0] ret_from_fork+0x514/0xb70 [ 517.738034][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 517.738060][ C0] ? __switch_to+0xc89/0x1420 [ 517.738091][ C0] ? __pfx_kthread+0x10/0x10 [ 517.738119][ C0] ret_from_fork_asm+0x1a/0x30 [ 517.738158][ C0] [ 518.197720][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 518.204663][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 518.213814][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.223932][ T31] Call Trace: [ 518.227250][ T31] [ 518.230212][ T31] vpanic+0x56d/0xa60 [ 518.234249][ T31] ? __pfx___schedule+0x10/0x10 [ 518.239140][ T31] ? __pfx_vpanic+0x10/0x10 [ 518.243706][ T31] panic+0xc5/0xd0 [ 518.247510][ T31] ? __pfx_panic+0x10/0x10 [ 518.252101][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 518.257805][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 518.263314][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 518.269533][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 518.275746][ T31] watchdog+0x1030/0x1030 [ 518.280133][ T31] ? watchdog+0x1c7/0x1030 [ 518.284637][ T31] kthread+0x38b/0x480 [ 518.288756][ T31] ? __pfx_watchdog+0x10/0x10 [ 518.293911][ T31] ? __pfx_kthread+0x10/0x10 [ 518.298647][ T31] ret_from_fork+0x514/0xb70 [ 518.303289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.308445][ T31] ? __switch_to+0xc89/0x1420 [ 518.313175][ T31] ? __pfx_kthread+0x10/0x10 [ 518.317818][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.322644][ T31] [ 518.326372][ T31] Kernel Offset: disabled [ 518.330726][ T31] Rebooting in 86400 seconds..