last executing test programs: 2m42.840727996s ago: executing program 0 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt(r6, 0x0, 0x80000000, &(0x7f0000000340)=""/211, &(0x7f0000000440)=0xd3) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e000900273f70edbd7000000000000400000006000b007b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r12, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x190, r13, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe551}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1c4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x551d1b5f}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xa, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6ac}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e1e, 0x1ff, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @private1, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10, @empty, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x84000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000280)={r6, 0xc, 0x7, 0x28a9}) write$cgroup_type(r14, &(0x7f0000000500), 0x9) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000080)) 2m42.512537644s ago: executing program 0 (id=418): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) shutdown(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x1}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYBLOB="3700f6ffffffffffff8a0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x696c}, [@jmp={0x5, 0x1, 0xa, 0x12, 0xe, 0x1, 0x1}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @exit]}, &(0x7f0000000380)='syzkaller\x00', 0x8000, 0x45, &(0x7f00000003c0)=""/69, 0x0, 0x3, '\x00', r7, 0x25, r0, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x5, 0x705, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r0], &(0x7f0000000ac0)=[{0x3, 0x5, 0xe, 0xb}, {0x1, 0x5, 0x10, 0x377d2c876c2e7290}, {0x4, 0x3, 0xb, 0x5}, {0x4, 0x3, 0x9, 0x1}, {0x5, 0x3, 0xd, 0x7}, {0x5, 0x4, 0x3, 0xd}], 0x10, 0x10000}, 0x94) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="e5bd621cf23a45d5474a26f53d80bac1dd4e6b677c1d8782f1cbf383b1de245f25da077b6157ec518868d170e97a9187a51e36339d0a7eb937dabde0ac1f2afae71bf2a24a0c79830a3c73b7ea8d32a9f6d4d26712b7cdc26b6df7769ae7826f71a85cde17f45602b7318c837fa7ff0c402123a5d4572eb4a3653b84f139912c823ccb5eff209b5eaad860aecae3df33655eb2ef0965add9ef06726237aad5ba381fe26a5462cba6462f19eb8ef8d72f7f9dcf45ba8b0bffd104b10a2eb1a75e9a81d50fbe6dd08a6f2ae716030bfa028dda9ec9623a014dbeed4160bb2ecb018a52bb244813d92392ad1f7e6747364bae3b9d9e39d09e", 0xf7}, {&(0x7f0000000140)="54173382317275556c322c38b1145456290142bbecf5f7dc99dcd84654b9f3fda0e1370128ef1d66784b4b038884f8821199d30035b90ade7962240224", 0x3d}, {&(0x7f00000001c0)="dc4aeea10e4c71ae0c26b8acff62b752e634c46fee18103755df0a2a9e869e040c0b80b149b3772bf4a0f0e8474eec7e484cd7706d96bc7c3dcc382fafda98a5dd291ca950b36f26cbb3ae4af46634f3b014735a7be2a33d4bb23e548a37ab90b79402c67cfeb981ce51425a7a10547c1eca83a72ca44d7a8e22e04c64cfe1b3afe92b29b92a5633a3121a66666f", 0x8e}], 0x3, &(0x7f00000002c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x28, 0x0, 0x5, [0x7f]}]}}}], 0x18}, 0x4004) 2m41.897177781s ago: executing program 0 (id=424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) read$alg(r5, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r5, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000ca63a34bf7bc78211ea947bbaab3a5899c63dd1f15301e74056208fbf29d7bd23dbcc5e01d425ad3c8e2e2955b586b7c8d4c00ffea0c511a20fda40143ea1d4021589b7fc34f92032d88f4c9e147c1586ad150558e7f058f9c20fef181eb5933", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r7, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000b14040025bdeaf32654ef94ee9703000200000008000300010000001fe926c628efa85077c8a3"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r10}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r10, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) 2m41.505282564s ago: executing program 0 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x10000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x5c}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)='#\x00\x00\x00', 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000240)={0x1, 0x1648, 0x6, 0x500002}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="0308000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='IM`0', @ANYRES16=r6, @ANYBLOB="000200000000000000001000000008000500010000000800110003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r6, @ANYBLOB="0000000000730053e63cbc7eb482207443a4c1d2bc73784f923610ec20"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r11) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r8, @ANYRES16=r13, @ANYBLOB="01002bbd0600fec55022be0000fe07000300", @ANYRES32=r12, @ANYRESDEC=r5], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000844) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r14, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r16, @ANYBLOB="1c002b8008000100020000000500020002000000080004"], 0xe0}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) tee(r0, r9, 0x401, 0x8) 2m40.93536009s ago: executing program 0 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a001000000000cba563824153"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket(0x27, 0x6, 0xe0000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x4000}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) listen(r7, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f00000001c0), 0x2) ioctl$sock_SIOCINQ(r7, 0x5411, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r9, 0x993, 0x3, [0x9, 0x2, 0x81]}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r10 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000280)={0x5}, 0x1) 2m40.559022639s ago: executing program 0 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400bd7040ffffff1f55384b0000005105b5255a2dff0a1420400000000000000000008000000000000000fc0200"/66], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2f4, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1343}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a1fbad5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72c9}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81a9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1179}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x91}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xce3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 2m28.820884925s ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x101}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r2, 0x1, 0x0, 0xffffffff, 0x0, 0x28d}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x244, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf99f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x337}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x533a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70f9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x77}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffd95, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4004800}, 0xc4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a34097772"], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2m28.818032303s ago: executing program 3 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0xeff}, 0x10}, 0x1, 0x7}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) 2m28.81728194s ago: executing program 3 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x91}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000070a01040000000000000000010000082c000580080001400000002f080001400000002f0800014000006006080001400000000408000240000000010900010073797a30"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x2004c084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e000018000cac0f00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m28.510473246s ago: executing program 3 (id=646): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = socket(0x38, 0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="b311df2d000000000afb4d2300000001fe8000000000000000000000000000bb80070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cf700"/144], 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r7, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) getgid() gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000840)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = getgid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@empty}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000ac0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@loopback, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000080)=0xe8) getgid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2m28.117895935s ago: executing program 3 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000052000169389d2b42540fbf001c"], 0x14}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB="08001b00", @ANYRES32], 0x54}}, 0x0) 2m27.84680025s ago: executing program 3 (id=656): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000180)={{}, r0, 0x14, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0xffffffffffffffff, 0x3, {0xa, 0x0, 0x4, 0x40, 0x4}, [0xfffffffffffffff7]}}, @subvolid=0x101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m25.414240147s ago: executing program 32 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400bd7040ffffff1f55384b0000005105b5255a2dff0a1420400000000000000000008000000000000000fc0200"/66], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2f4, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1343}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a1fbad5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72c9}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81a9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1179}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x91}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xce3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 2m12.766702796s ago: executing program 33 (id=656): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000180)={{}, r0, 0x14, @inherit={0x50, &(0x7f00000000c0)={0x1, 0x1, 0xffffffffffffffff, 0x3, {0xa, 0x0, 0x4, 0x40, 0x4}, [0xfffffffffffffff7]}}, @subvolid=0x101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.969282739s ago: executing program 5 (id=2601): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000002c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4f, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x8, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xdc}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "a0d67d9d5979e0cfdfa4ac48501ecd1f"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0xff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="0d80c20000000000000000008100000008004500002400000000007390780000000000000000fffc0000801090789fe0148652745308919c0200000064729626d37160bf685d4c748297a3b30934b961946d0b683490c91ca9c7c2da6171e2875db97ed7b8259e054bf9974d9ad46e791a498c7edd0b59cae02421b0ece9a0f59e0ec4d64268050c3bad3bbf48f26f5558a05a8d17967f62"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 2.04718222s ago: executing program 5 (id=2617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r0, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) setsockopt(r3, 0x9, 0x80000000, &(0x7f0000000140)="6c3dc7b85b931048a72a87d7adc439209fd98c3a7a330197ac220454e088eb589f0a76fb123e93a4479a4b6fdc0b5972436054118caba3a5c302aafe1b9edd83fce0a7a879e5bb", 0x47) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180001000000000000000000006be9885d23a947d29ab3e35d8ab71baaa0e537fa9603cba97f3e89e009d83d2bd760938c3f07f7d2929e99144b6a4af32f45ef009519447816ea0955ad87c7ddc1cea5bce55ad3227f193a03fd19680eeecfff2edbc7d5cc9a0ed63a1378d4eb80bd4834e6add44ea900000000000000", @ANYRES32=r4, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) 1.720971401s ago: executing program 1 (id=2621): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xf12, 0x4) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000100000000008d0000"], 0x10}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x94a}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x2c) 1.64657076s ago: executing program 5 (id=2624): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x5, 0x9) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x60000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20004041) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', r0, 0x2f, 0xd1, 0xe3, 0xd20, 0x14, @local, @loopback, 0x1, 0x8010, 0x5, 0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c4, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x5e}}}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="31b4d19c2df99ae58fbf4581e72c33b59967989afc3f3d83703160032232eba2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1be3acc6b54c163d194c40edc94413e014f9641cfe4ebb8e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c76bdd04c79e6fd28a6985955132d6889563380d9a709ba4ff40a9c5c9bd2cc2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3705ecdf15080d4070e65b01db03fbeaf113fb9a415d08e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f3aa396e3db8fad74e15a03c7cceadb"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="32814ceaba41be1681b370604f69a07a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9bef712afbbdfbf360d3e4258560262e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2a049f8bc676bd3a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9bdc5b41b9ca09ff68fcf7203d14a87c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15d2aca9f00e3d9218d043563a4c6e45b6a648374f595958e0c9b914b101b6e9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bd906c9a9ac1e5d3858b333b114d58b15744bb1124cca835"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "18a36cf5c5df0449"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e7933e6239b8d008"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="822bda1e6f59ca70cfcf3842379d5e54"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5a8780e982c2edd331cf42e3fe6e2d6a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="90f48db0f1d037057ad8f39b26723fab"}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='io.stat\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000006c0)=0x1) r8 = socket(0x21, 0x5, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x90, r9, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x20004801) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r11, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r12, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000b40)={0x0, "2a32a6ce2c153395e5bcd3434e8e3a36"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001f40)={0xb, 0x3, {0xffffffffffffffff, @struct={0x233, 0x7fff}, r13, 0x5, 0x987, 0x0, 0xe40, 0x0, 0x24, @struct={0x5, 0x4}, 0x2, 0xffffffff, [0x3, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x4, 0xc000, 0x8]}, {0xffffffffffffffff, @usage=0x1, r14, 0x5ffc, 0x2, 0x8, 0x92fa, 0x1592, 0x34, @struct={0x2, 0x9}, 0x1, 0x9b1, [0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x6, 0x8]}, {0x3, @usage=0x373800000000000, 0x0, 0xfffffffffffffff7, 0xfff, 0x8, 0xfffffffffffff869, 0x1, 0x0, @usage=0x30bae52f, 0x9d, 0x4, [0x3, 0x2, 0x4, 0x7fff, 0x80, 0x1]}, {0xf, 0x2, 0x2}}) getsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000002340), &(0x7f0000002380)=0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002400)={r15, 0x100, 0x9}) 1.629652341s ago: executing program 4 (id=2625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.489102357s ago: executing program 1 (id=2626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x1d, 0x0, "68951b975b79fd00466d45b62db9eed3fa3aaba037eb21d0e82d869f0083bec1f73f4ce91394221969f0676b620c02606a0b11351a385f6ec980e0d9b98edb6bd0352c68ddef1d4915c6d6b8c9569ba8"}, 0xd8) accept4$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000003c0)=0x1c, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1.436423414s ago: executing program 6 (id=2627): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x1a17, 0x2}) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="9f70155adc6eaa6ef5a80d2779c4023ef38b2041c93ee58279c522246d315b2ce42f93875766937b7f849152a7b7db17b980ac350dd5e10bba914f6011202f2f1d467e66f1c208ce3a49d512362f45cd87eedeb6f706a7fd38459b318fa6be511e309bf4a50c443ec1110b10b129c7761d8ce489ba7485cc780ca5f7442f74c20e3da8ef0f8ed8c2cb9f1f21a49df7024136681d087c79237b23209b71009fb1793154c38e8478818a3aa75103db065ece2f679d999ef9dd812c86a9d2bda41497f0d0629a0b4f6eb0", 0xc9}], 0x1, &(0x7f0000000200)=[{0xb8, 0x103, 0x7fff, "813e1880d45595e286eafbb2e2e1fea5ddaada024ae8b360666542ec9ded73465186661b7b374117ffe4a37e95844a22b02053fec814af6723cca947574892eb118bb7358381b3a33888527dbd7c24981a1b6438bde1808614021538abee64de7d1d6b1278000a8c2d764c0d10b77d7c1e55de0c6a3adfda1a82cc1c3a3f91fc6d74c523690e191759ddb3266778f9d879be4d776cc0e56fd0ec974b6d372911f222be95"}, {0x38, 0x117, 0x7, "626363e50ccdc661fb5f307a96151e4ade8edeb66e1da79db32580050e6331e07e9d389ae7a3"}, {0x70, 0x101, 0xf, "fd17eba059f9776855e6479620f1a940a6f5d1070dab77f4ce4290095a007d6c57648ed5e7f75003b03c77ff90241b0fba3f3a608efcff2f174b6bf6db8c02aa26255e38f324f8468ecae4d5818c713d11ea930846c64a0ad66b9110584d5a5a"}, {0x48, 0x111, 0x3, "d7900705106d1f4746d5239f0fced35977a8077f48d0ab93297a176136d2b78ce9def028e29e0323d0f98ce908caca53e575670825"}, {0x60, 0x0, 0x1, "2fdca98be5ae87a57a9c3ee76c4d0ca37a1e7c654dfa739d9be3baa8c7ecca9e6473efb100b2a8968474664c576f2abaae597cf9d2321df4b3461deef69119a5aee187d8271819d7b4c8a4"}, {0x58, 0x7, 0x1ff, "f0d00d00452a23e576317108279cc9217095f43970020ba6be214c4bec1637816e853177329f9833c2480c76863272dff9923a1959807c09489733dbdbab602dae"}, {0xf8, 0x115, 0x2, "cd766214fa82c676f5677d747a69f26a989465c5eadae2faa6ce2b1ca8bc0a59ae120d26ae9857d7cf6dbe940ca991ab38c81a2ab98195b9ce0c5a890524257a86967463cac29c38fa7986cc636f34256a3e4c31ce0007af6dd17bfab12bd526b2ff19976d7d274cf57734f21ed1c0125cb01fc09b108694f5f7dcf889e5158f01d4a09c284e01ccb49c1edd15de30c50296ed6757e49ca107bc6a34764e5072d3c0b058ced1ab9b72cb1bc76924858d9dd832b36505c418c785227e63b15775304a383730b0c1bca54cb3614cf768542f9ea3f53a5b72b9635e61286d0922075919b37832"}], 0x358}, 0x64004884) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0xbfdf, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x8, [{{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @loopback}}]}, 0x490) r1 = openat$cgroup_subtree(r0, &(0x7f0000000a80), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000ac0)={[{0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'io'}, {0x0, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'rlimit'}, {0x2b, 'devices'}]}, 0x4a) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vxcan1\x00', 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x793557fdc20ad870}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x7232ae5aaede3536, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000a0) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000cc0)={0x0, {{0xa, 0x4e20, 0x2, @mcast2, 0x9}}}, 0x88) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000d80)={0x80}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000e40)={'team_slave_0\x00', @ifru_map={0x7f, 0x7fffffff, 0xe, 0xfe, 0xf6, 0x80}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x174, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73daad35}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1079}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7ff, @rand_addr=' \x01\x00', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x174}}, 0x40) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x22014000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x58, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000001280), &(0x7f00000012c0)=0x10) r7 = accept4$phonet_pipe(r0, &(0x7f0000001300), &(0x7f0000001340)=0x10, 0x80800) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000001380)='wg2\x00', 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000013c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001540)=""/33, 0x21}, {&(0x7f0000001580)=""/173, 0xad}, {&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/176, 0xb0}], 0x5}, 0x7}], 0x1, 0x10100, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001900)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000001980)={0xe5, 0x3, 0x0, 0xa176, 0x172}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x2c, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x4, 0xf}, {0xf, 0xc}}, [{0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0xfffff631}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x4) 1.298004328s ago: executing program 1 (id=2629): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0xa2, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @remote, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@multicast2}, {@remote}, {@private}, {@private}]}]}}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0xa) 1.297637201s ago: executing program 5 (id=2630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700000000000100000001800018014000200776c616e310000000000000000090007a51f980000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 1.29740948s ago: executing program 4 (id=2631): r0 = socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.292796643s ago: executing program 6 (id=2632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)}, 0x10) 1.221011087s ago: executing program 2 (id=2633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x80000070e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r5, 0xb26e82324748955d, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000) 1.146365296s ago: executing program 1 (id=2634): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00), 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000240)={@multicast, @random="a53c445e0fc1", @void, {@llc_tr={0x11, {@snap={0xc547d7abd226b3a9, 0x0, "a0b2", "53d54e", 0x8848, "d0f78d578ce0f2f561b9a7e2030437b3b7d71df2848985b7a3a23ea7dd3bf33cbbe71929d57af95cc8e60fe00abc32d2c60063e9eee5e0026ce3ba21bb0958d5344fa98a47f850aa01f460dc5e33cdba55f796507434c7ac3888a517388d73221fe57df23765ff98d08389df42fae3b79388a4fcba93a9897aa114b458c9fe6e48b9f3e8dfde"}}}}}, &(0x7f0000000180)={0x0, 0x2, [0xb4b, 0x8b1, 0x665, 0x223]}) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', r8, 0x8000, 0x700, 0x1, 0x40, {{0x5, 0x4, 0x0, 0x1a, 0x14, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local}}}}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x2}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 1.119973214s ago: executing program 4 (id=2635): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x0, 0x7, 0x4f}, 0x2c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf25030000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="6823170e32dba6eb7319da05813c3e5beeceff94ac754784310e95b94e0eb1652f31d2891aa41678c51b45aabed85dd42cd40e81891e3db5e451e4bd056976bb8874a39027047a5bd78976d23ba114b6d66645a4072ef1fdf2cb893883133aa0c92a3bac3312e2674cee7fb595ab8381b6a5b0"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x24, 0xff, 0x7}, 0x2c) 1.119428325s ago: executing program 6 (id=2636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013bc784b"], 0xffffffffffffff41}}, 0x20000000) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001080)={@remote, r2}, 0x14) pipe(&(0x7f00000010c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r4, 0x66f9, 0x100, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) unshare(0x2000000) close(0x4) socket$netlink(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 1.073682001s ago: executing program 2 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x6) 1.067087817s ago: executing program 5 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000007c0)={r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000220000000000000060000001800000007000000000000000a0a00009500000000000000950000000000000062416af8320873ef71ffba9ad9ada08ec18f6888fa3d9650baa00486809e161f3ce62397787d8e363544faaa6d7955540ac63451559c939f73f3c001ed938507775470993df02fb1c2e8357bf916d189f0b859af387d2b6a5b4346900e585e59ec84e57b2805f07ae6471c54637eb73bde830624cec278"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0xd, &(0x7f00000000c0)=""/13, 0x1f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x3, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x2, 0x6, 0x7}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002200000119bd7000fddbdf250a1414f90600000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10) socketpair(0x1f, 0x80000, 0x6, &(0x7f00000005c0)={0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000021401002abd700002dcdf250800010000000000080044"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) bind$unix(r4, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) recvmsg$unix(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/116, 0x74}], 0x1}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffc96}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x5e6395ee, 0x40, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x66, 0x0, 0xd, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@noop, @ssrr={0x89, 0xb, 0xa, [@multicast1, @loopback]}, @rr={0x7, 0xb, 0x22, [@local, @empty]}, @lsrr={0x83, 0xb, 0x23, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2]}]}}}}}) 871.028811ms ago: executing program 2 (id=2639): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1000046, @empty, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e200e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 843.272848ms ago: executing program 1 (id=2640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) r1 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000001200)=""/221, 0xdd}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/75, 0x4b}, {&(0x7f0000002380)=""/142, 0x8e}], 0x6}, 0x22) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x891f, &(0x7f00000024c0)={'dummy0\x00', 0x1000}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) 726.417515ms ago: executing program 6 (id=2641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x400}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xca5}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2060000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 726.13631ms ago: executing program 2 (id=2642): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) (async) listen(r3, 0x7) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0x80087601, 0xfffffffffffffffe) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) 645.560628ms ago: executing program 4 (id=2643): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000300)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001180)={r7}) (async, rerun: 32) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 644.886509ms ago: executing program 2 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000880)={&(0x7f0000000440)=@isdn={0x22, 0xc, 0x5, 0xc, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="f41ebdfcc62661344e13f95c1360cc917548448a425be75acc6d6a5d8a15ccc9d1017a7b4ba29b9c89483927aa2bbde38d420b36c74ccb55a09ecf755eecb87e8eed15fc861898115b80db326b1009920ef26b70f55703e2018faa2d82f4a789fe27f028fbffbb99dd0ba74b8d918ea9e980e980493275d0706886ee34ee934c8a2fe02474542f39de2f10ddd0fcc90c", 0x90}], 0x1, &(0x7f0000000f00)=[{0xc0, 0x116, 0x7, "d0b9ad28a2bde23bdcc760405dd64a73d92441c2ffabd165f0202f5e7af23a13579b36789c75fbf50abbef71e26f05170fcea7250d6b2d941f524414887010117275584e921781fd899b4073dc95f3ec488edb41644870b8d5d6c54d654d41d50909c6f3c94a1f2e1771c1d423fbcc81b249930901995f874de1f6fa6b6dc364878a625cc79c811f483c00fc6fdbabcb98c8448abb549d6c75e2c54acc53749bf3217a1c64d19cac0739a6"}, {0xb0, 0x10b, 0x7f, "ba68e0cc9700a7743a68825d3223734c837e5ff969676a1398627ebc5bc8f3043fc5fbebc36545f569a0df882c87ce64024cbc3e517577f09ee94309cc345ca0535623ff27c1abb967991caecf91968ffcb73843c42a464566d52666b3f22c39fe64daa7eb8a87532cc4cf443d2500f23b079a508916f1d7ed406ba29368d3169be81098feb62665799ffe595c8cfa970c47fbec516f2b6a6b63"}, {0x58, 0x113, 0x9, "e1da1f75632eae2320d2c36a5e9cdc966167e7c533e1cd014a0ca2e953becd2a6f9e4828b9429a4df72d6fa1e0257ca789a82d384bb47669266204eb53430428931a"}, {0xb8, 0x108, 0xd, "a12e18ef56ccb559f0fb428c04096ace45923b8dca305a22288ac7c11b9c2fdf915cbbd407faf8a677adb5a76ad92b67d4c50274ef847705280e76d61229ef1d7484ad14f171d7697fe20321f91dbf7ea40f295afdc6dd8dc91213edd75e3a5cbc87127f4ccf5e4d14878514a211979a4d55c1425f6956bf42f9ccfee46bd59b427f908df0a9b50c1273b0b489a0ac51867128e442a09fd29bd46a9dea7498511fe51e76435ad3"}, {0xc8, 0x108, 0x3, "da618433fd8cf02126836dca37bd96b1cea25cdc20ead6dd5667d2f6e231e3b9eb687f8003f417ca712b2aa13b028ce6009a3ad36f58c9390d5e258da31a2838b9fdb8b393d515e4bb6eb8c427a64925b1d80ab90f0426c6818df6d1738d486bca22efc70f94f76142ac6b332956537b21fa80dacb9bd73b2510c4d99b599275104e79a0b725924e87707126cca3285b7ecb3b1153a2fa1dcf17459dbf0898f30eae3e0cdfa382f12bb8cab9ed80a75aed33a5c11df8883f"}], 0x348}, 0x4048001) getpid() r6 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x1, 0x1, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xfffffffffffffffd}, {0x6}], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x4, 0x0, 0x6, 0x7, 0x6], 0x3, 0x1}, {0x0, [0x4, 0x4, 0x7, 0x2, 0x0, 0x5], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 574.449842ms ago: executing program 2 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0x6, 0xe}, {0x1, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="b71e6a9c8742465fdba2f125f3612a4e4987f835d6c3236cd71505560ee8617b548f500ed10d0121adb513aa87929e923381e8122f072e08748a0927189f2938e6b6fa2a5b0bd12d6d330d49172bb2e685d7768e742a49f1aa89641cb007b27bd78d3fa958de9175954e8cdd71a298d4b89b765f2450a6b8f7", 0x79, 0x801, &(0x7f0000000240)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 448.993189ms ago: executing program 4 (id=2646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x34, 0x3fc3, 0x8, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', r3, 0x4000, r4}, 0x18) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r11) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="ac3a366be85900b9b719", 0xa, 0x4000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 446.308534ms ago: executing program 6 (id=2647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtclass={0x4c, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0x6}, {0xd, 0xb}, {0x1, 0x10}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @tclass_kind_options=@c_cake={0x9}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000304000000000800064000000001"], 0x9c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, 0x0, &(0x7f00000002c0)=""/26}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 279.269956ms ago: executing program 6 (id=2648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a000000000000000100000008000b40000000002c00048028000180080001006e6174001c0002800800044000000009080002400000000a080067480140000000010900010073797a30000000001400000011000100"/186], 0xc8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x168, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_USERDATA={0x1c, 0x7, 0x1, 0x0, "0951faf94285935a930e7b802485946e7cec89d28b0df858"}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0xb9d6525f6653e0d7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x5, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3f, 0xc, "2a274de7be9035f53bc47b1c6d35e8984daca450eb5aa9badf5f556849cac165572ed4dced02d1a97300442e1cc8e3f6361ae45834b4f8ab499397"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x885) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x7, 0x6}, &(0x7f00000005c0)=0x90) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e20, 0xffff8000, @loopback, 0xffffffff}}, 0x7ffffffc, 0x1, 0x1, 0x15c, 0x20, 0x0, 0x6}, 0x9c) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x3a0000) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) pwritev(r1, &(0x7f0000000040), 0x0, 0x73a, 0x1) 238.133587ms ago: executing program 5 (id=2649): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x1d6, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x5, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 85.299979ms ago: executing program 4 (id=2650): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) close(r4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400000000000000000032bfa5", @ANYRES32=r3, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000a00)="31bb", 0x2, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @random="b59a81d0b9ec"}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xc4}}]}, 0x40}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {0x0, 0xfff0}, {0x8, 0x9}}}, 0x24}}, 0x0) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000180)=""/109, 0x6d}], 0x4, &(0x7f00000003c0)=""/6, 0x6}, 0x12001) 0s ago: executing program 1 (id=2651): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): ing VLAN 0 to HW filter on device bond0 [ 148.992377][ T9044] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.014163][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.022150][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.064534][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.071766][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.410894][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 149.540293][ T9273] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 149.594097][ T9273] team0: Port device dummy0 added [ 149.902119][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.794159][ T9323] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 150.868686][ T9323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.886988][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'. [ 150.915214][ T9332] netlink: 340 bytes leftover after parsing attributes in process `syz.5.908'. [ 150.931367][ T9332] openvswitch: netlink: Flow key attr not present in new flow. [ 150.942675][ T9334] netlink: 340 bytes leftover after parsing attributes in process `syz.5.908'. [ 151.009160][ T9044] veth0_vlan: entered promiscuous mode [ 151.015662][ T9334] openvswitch: netlink: Flow key attr not present in new flow. [ 151.034121][ T9044] veth1_vlan: entered promiscuous mode [ 151.131713][ T9323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.159888][ T9044] veth0_macvtap: entered promiscuous mode [ 151.172146][ T9044] veth1_macvtap: entered promiscuous mode [ 151.214115][ T9323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.307714][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.353772][ T9323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.385615][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.441684][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.463718][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.523853][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.534229][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.678829][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.710148][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 151.720136][ T8661] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.732370][ T8661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.758307][ T8661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.790494][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.847924][ T8661] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.963032][ T4891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.972674][ T4891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.060679][ C0] bridge0: port 1(1¾x9ÿ) entered learning state [ 152.068318][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 152.075619][ C0] bridge0: port 3(team0) entered learning state [ 152.080064][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 152.216513][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 152.633595][ T9410] netlink: 'syz.6.931': attribute type 1 has an invalid length. [ 152.655471][ T9410] netlink: 760 bytes leftover after parsing attributes in process `syz.6.931'. [ 152.695700][ T9410] netlink: 1 bytes leftover after parsing attributes in process `syz.6.931'. [ 153.210382][ T9432] syz_tun: entered allmulticast mode [ 153.340873][ T9433] syz_tun (unregistering): left allmulticast mode [ 153.804581][ T9457] openvswitch: netlink: Flow key attribute not present in set flow. [ 154.084446][ T9467] __nla_validate_parse: 4 callbacks suppressed [ 154.084464][ T9467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.944'. [ 154.158804][ T9467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.944'. [ 154.243140][ T9472] lec:lec_atm_send: lec0: Unknown message type 11 [ 154.317444][ T9445] lec:lec_atm_close: lec0: Shut down! [ 154.363096][ T9475] syzkaller0: entered promiscuous mode [ 154.374707][ T9475] syzkaller0: entered allmulticast mode [ 154.436585][ T9475] netlink: 'syz.5.947': attribute type 16 has an invalid length. [ 154.457708][ T9475] netlink: 'syz.5.947': attribute type 17 has an invalid length. [ 154.543402][ T9475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.740184][ T9491] netlink: 192 bytes leftover after parsing attributes in process `syz.6.949'. [ 155.031085][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 155.132544][ T9] lec:lec_start_xmit: lec0:No lecd attached [ 155.172804][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.6.955'. [ 155.494032][ T9520] s5ÿÿø: renamed from vlan1 (while UP) [ 155.745684][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.962'. [ 155.880866][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'. [ 155.956814][ T9554] netlink: zone id is out of range [ 156.004652][ T9554] netlink: get zone limit has 4 unknown bytes [ 156.120718][ T9569] x_tables: unsorted underflow at hook 4 [ 156.138284][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.969'. [ 156.201651][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.969'. [ 156.877761][ T9611] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 156.908813][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.981'. [ 156.925740][ T9611] dummy0: entered promiscuous mode [ 156.957854][ T9611] team0: Port device dummy0 removed [ 156.981377][ T9611] bridge0: port 3(dummy0) entered blocking state [ 156.987933][ T9611] bridge0: port 3(dummy0) entered disabled state [ 157.020753][ T9611] dummy0: entered allmulticast mode [ 157.098679][ T9622] xt_TCPMSS: Only works on TCP SYN packets [ 157.303777][ T9636] netlink: 'syz.5.990': attribute type 3 has an invalid length. [ 157.317472][ T9626] hsr0: entered promiscuous mode [ 157.348028][ T9626] macvtap1: entered promiscuous mode [ 157.360170][ T9626] macvtap1: entered allmulticast mode [ 157.377132][ T9626] hsr0: entered allmulticast mode [ 157.386283][ T9626] hsr_slave_0: entered allmulticast mode [ 157.396497][ T9626] hsr_slave_1: entered allmulticast mode [ 157.630263][ T9653] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 157.723753][ T9653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.048044][ T9678] Cannot find del_set index 1 as target [ 158.652977][ T9729] netlink: 'syz.2.1016': attribute type 11 has an invalid length. [ 158.877522][ T9739] block nbd4: not configured, cannot reconfigure [ 158.955962][ T9743] netlink: 'syz.5.1021': attribute type 11 has an invalid length. [ 159.183773][ T9759] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 159.226636][ T9762] __nla_validate_parse: 10 callbacks suppressed [ 159.226655][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1026'. [ 159.301888][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1026'. [ 159.335829][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1026'. [ 159.398105][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1026'. [ 159.621887][ T9784] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1029'. [ 159.724271][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 159.770389][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 159.876903][ T9803] batadv1: entered allmulticast mode [ 159.894684][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1035'. [ 159.951414][ T9813] IPVS: set_ctl: invalid protocol: 60 172.30.1.6:20004 [ 160.001784][ T5834] block nbd0: Receive control failed (result -107) [ 160.061928][ T9813] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20002 [ 160.119633][ T9826] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 160.223618][ T9830] netlink: 'syz.6.1041': attribute type 1 has an invalid length. [ 160.698395][ T9861] netlink: 'syz.6.1050': attribute type 10 has an invalid length. [ 160.744406][ T9861] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1050'. [ 160.772793][ T9863] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 160.860843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 160.869251][ C1] lec:lec_tx_timeout: lec0 [ 160.873953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 161.259727][ T9859] netlink: 'syz.6.1050': attribute type 10 has an invalid length. [ 161.279222][ T9859] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1050'. [ 161.485703][ T9898] vxcan0: tx drop: invalid sa for name 0x0000000000000004 [ 161.551045][ T9906] x_tables: duplicate underflow at hook 2 [ 161.718933][ T9909] syzkaller1: entered promiscuous mode [ 161.724787][ T9909] syzkaller1: entered allmulticast mode [ 161.922724][ T9926] netlink: 'syz.5.1067': attribute type 1 has an invalid length. [ 162.663525][ T9926] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 162.984859][ T9966] macvlan0: entered promiscuous mode [ 163.621428][T10003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 163.669818][T10003] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.677594][T10003] gretap3: entered promiscuous mode [ 163.697035][T10003] gretap3: entered allmulticast mode [ 163.838108][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.988416][T10019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.103606][T10020] erspan0: entered promiscuous mode [ 164.339835][T10052] netlink: 'syz.4.1092': attribute type 21 has an invalid length. [ 164.383970][T10052] __nla_validate_parse: 11 callbacks suppressed [ 164.383988][T10052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1092'. [ 165.004008][T10101] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1099'. [ 165.126417][T10103] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 165.318544][T10112] bond2: (slave gretap1): making interface the new active one [ 165.350348][T10112] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 165.663827][T10142] netlink: 'syz.4.1108': attribute type 83 has an invalid length. [ 165.684381][T10146] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1109'. [ 165.899322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 165.907519][ C1] lec:lec_tx_timeout: lec0 [ 165.919768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 165.982688][T10162] ip6tnl0: Caught tx_queue_len zero misconfig [ 166.241449][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 166.696164][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 166.717928][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.746626][T10206] netlink: 'syz.1.1124': attribute type 11 has an invalid length. [ 166.754644][T10206] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 166.762832][T10206] netlink: 'syz.1.1124': attribute type 5 has an invalid length. [ 166.780230][T10206] netlink: 'syz.1.1124': attribute type 6 has an invalid length. [ 166.804442][T10206] netlink: 199748 bytes leftover after parsing attributes in process `syz.1.1124'. [ 167.152848][T10227] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1130'. [ 167.217165][T10227] gretap0: entered promiscuous mode [ 167.380618][T10237] gretap0: left promiscuous mode [ 167.457169][T10237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.496617][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'. [ 167.690790][T10269] netlink: 'syz.1.1138': attribute type 11 has an invalid length. [ 167.696505][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1139'. [ 167.698644][T10269] netlink: 173856 bytes leftover after parsing attributes in process `syz.1.1138'. [ 168.248610][T10293] netlink: set zone limit has 4 unknown bytes [ 168.476385][T10310] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 168.519762][T10310] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 168.549701][T10310] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 168.662550][T10312] syzkaller0: entered promiscuous mode [ 168.668069][T10312] syzkaller0: entered allmulticast mode [ 168.793401][T10308] xt_bpf: check failed: parse error [ 169.523027][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.657680][T10363] bridge_slave_0 (unregistering): left allmulticast mode [ 169.672603][T10363] bridge_slave_0 (unregistering): left promiscuous mode [ 169.680878][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.767264][T10374] netlink: 'syz.2.1167': attribute type 13 has an invalid length. [ 169.796675][T10385] netlink: 'syz.2.1167': attribute type 13 has an invalid length. [ 169.840398][T10377] Cannot find add_set index 2 as target [ 169.848083][T10377] __nla_validate_parse: 3 callbacks suppressed [ 169.848099][T10377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1166'. [ 170.071366][T10371] netlink: 'syz.5.1165': attribute type 1 has an invalid length. [ 170.084287][T10371] x_tables: duplicate entry at hook 1 [ 170.223707][ T8661] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.284845][ T8661] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.299462][T10405] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 170.321971][ T8661] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.395260][ T8661] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.553866][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.596185][T10421] veth0: entered promiscuous mode [ 170.609829][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 170.714078][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 170.929571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 170.937681][ C1] lec:lec_tx_timeout: lec0 [ 170.942993][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.142035][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 171.313140][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 171.344642][T10449] hsr_slave_1 (unregistering): left promiscuous mode [ 171.509852][T10469] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 171.740869][T10483] netlink: 'syz.2.1190': attribute type 4 has an invalid length. [ 171.897940][T10497] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 171.985939][T10503] netlink: 'syz.6.1195': attribute type 10 has an invalid length. [ 172.012768][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.023793][T10503] bridge_slave_1: left allmulticast mode [ 172.030081][T10503] bridge_slave_1: left promiscuous mode [ 172.036111][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.056204][T10503] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.488294][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 172.516364][T10530] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 172.525288][T10526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.570616][T10530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1203'. [ 172.596257][T10530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1203'. [ 172.614084][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 172.763566][T10544] tipc: Can't bind to reserved service type 0 [ 172.774054][T10544] unsupported nlmsg_type 40 [ 172.809642][T10544] netlink: 'syz.6.1204': attribute type 1 has an invalid length. [ 172.817427][T10544] netlink: 'syz.6.1204': attribute type 3 has an invalid length. [ 172.829715][T10544] netlink: 'syz.6.1204': attribute type 7 has an invalid length. [ 172.847767][T10544] netlink: 'syz.6.1204': attribute type 8 has an invalid length. [ 172.899869][T10544] NCSI netlink: No device for ifindex 131092 [ 173.408488][T10577] bond1 (unregistering): Released all slaves [ 175.911370][T10552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.949325][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 175.957412][ C1] lec:lec_tx_timeout: lec0 [ 175.969403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.142253][T10649] tipc: Enabling of bearer rejected, failed to enable media [ 176.257409][T10649] bond4: Unable to set up delay as MII monitoring is disabled [ 176.275824][T10649] bond4 (unregistering): Released all slaves [ 176.337597][T10669] __nla_validate_parse: 4 callbacks suppressed [ 176.337614][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 177.036748][T10712] netlink: 'syz.1.1238': attribute type 2 has an invalid length. [ 177.066337][T10714] openvswitch: netlink: Missing key (keys=40, expected=80) [ 177.092120][T10709] bridge4: entered promiscuous mode [ 177.097379][T10709] bridge4: entered allmulticast mode [ 177.123872][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 177.164804][T10709] team0: Port device bridge4 added [ 177.212279][T10720] netlink: 'syz.5.1241': attribute type 21 has an invalid length. [ 177.244417][T10720] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.395656][T10736] pimreg3: entered allmulticast mode [ 177.435070][T10736] netlink: 'syz.5.1241': attribute type 1 has an invalid length. [ 177.723963][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 178.001920][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1253'. [ 178.079141][T10772] syzkaller1: entered promiscuous mode [ 178.107683][T10772] syzkaller1: entered allmulticast mode [ 178.426470][T10789] bond4: Unable to set up delay as MII monitoring is disabled [ 178.449687][T10789] bond4 (unregistering): Released all slaves [ 178.713704][T10817] netlink: 'syz.2.1262': attribute type 63 has an invalid length. [ 178.725145][T10817] netlink: 'syz.2.1262': attribute type 63 has an invalid length. [ 179.452602][T10855] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.803696][T10875] xt_hashlimit: invalid rate [ 179.815704][T10879] netlink: get zone limit has 8 unknown bytes [ 179.830430][T10876] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1278'. [ 179.912072][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1279'. [ 179.929867][T10881] ip6tnl0: Caught tx_queue_len zero misconfig [ 180.066693][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 180.249814][T10904] syzkaller0: entered promiscuous mode [ 180.256449][T10904] syzkaller0: entered allmulticast mode [ 180.643435][T10929] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1292'. [ 180.653640][T10929] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 180.942949][T10948] ip6t_srh: unknown srh match flags 4000 [ 180.979318][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 180.987387][ C1] lec:lec_tx_timeout: lec0 [ 180.992666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.074939][T10950] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1300'. [ 181.139019][T10954] netlink: 'syz.1.1302': attribute type 23 has an invalid length. [ 181.167463][T10952] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1301'. [ 181.169580][T10954] SET target dimension over the limit! [ 181.182241][T10956] tunl0: Caught tx_queue_len zero misconfig [ 181.619124][T10983] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1312'. [ 181.876163][T11003] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1318'. [ 181.892103][T11002] syzkaller0: entered promiscuous mode [ 181.910150][T11002] syzkaller0: entered allmulticast mode [ 182.079747][T11014] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 182.121551][T11016] netlink: 'syz.1.1323': attribute type 2 has an invalid length. [ 182.139979][ C0] bridge0: port 3(team0) entered forwarding state [ 182.146557][ C0] bridge0: topology change detected, propagating [ 182.153560][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.160847][ C0] bridge0: topology change detected, propagating [ 182.167347][ C0] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 182.173909][ C0] bridge0: topology change detected, propagating [ 182.277424][T11025] lo: Caught tx_queue_len zero misconfig [ 182.373912][T11033] xt_cluster: node mask cannot exceed total number of nodes [ 182.377230][T11028] bond4: entered promiscuous mode [ 182.386832][T11028] bond4: entered allmulticast mode [ 182.394287][T11028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.530348][T11038] netlink: 'syz.4.1332': attribute type 6 has an invalid length. [ 182.563686][T11046] xt_cluster: node mask cannot exceed total number of nodes [ 182.572322][T11034] syzkaller1: entered promiscuous mode [ 182.577812][T11034] syzkaller1: entered allmulticast mode [ 182.638416][T11053] netlink: 'syz.6.1334': attribute type 11 has an invalid length. [ 182.712673][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1333'. [ 183.186634][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1339'. [ 183.384502][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 183.466611][T11106] netlink: 'syz.1.1348': attribute type 2 has an invalid length. [ 183.483836][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 183.516118][T11106] netlink: 'syz.1.1348': attribute type 2 has an invalid length. [ 183.538445][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 184.057607][T11134] syzkaller0: entered allmulticast mode [ 184.608683][T11163] bond0: Caught tx_queue_len zero misconfig [ 184.638255][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 184.659822][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 184.668832][T11165] nbd: must specify a size in bytes for the device [ 184.753409][T11163] team1: entered promiscuous mode [ 184.778775][T11163] team1: entered allmulticast mode [ 184.852029][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1368'. [ 184.902554][T11176] netlink: 'syz.2.1370': attribute type 3 has an invalid length. [ 184.993584][T11176] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 185.539085][T11204] syzkaller0: entered promiscuous mode [ 185.549900][T11204] syzkaller0: entered allmulticast mode [ 185.582713][T11214] team_slave_1: Caught tx_queue_len zero misconfig [ 185.642722][ T4891] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.724260][T11227] netlink: 'syz.5.1384': attribute type 9 has an invalid length. [ 186.009319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 186.017388][ C1] lec:lec_tx_timeout: lec0 [ 186.023462][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 187.096236][ T4891] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.107400][ T4891] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.122079][T11223] gtp0: entered promiscuous mode [ 187.127092][T11223] gtp0: entered allmulticast mode [ 187.147473][ T4891] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.327695][T11252] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 187.342954][T11253] syzkaller1: entered promiscuous mode [ 187.369429][T11253] syzkaller1: entered allmulticast mode [ 187.390058][T11268] __nla_validate_parse: 12 callbacks suppressed [ 187.390076][T11268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1394'. [ 187.512389][T11275] FAULT_INJECTION: forcing a failure. [ 187.512389][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 187.528490][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.1.1396 Not tainted syzkaller #0 PREEMPT(full) [ 187.528515][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.528525][T11275] Call Trace: [ 187.528532][T11275] [ 187.528540][T11275] dump_stack_lvl+0xe8/0x150 [ 187.528566][T11275] should_fail_ex+0x412/0x560 [ 187.528591][T11275] should_failslab+0xa8/0x100 [ 187.528612][T11275] __kmalloc_noprof+0xde/0x7e0 [ 187.528629][T11275] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.528657][T11275] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.528685][T11275] genl_family_rcv_msg_doit+0xd9/0x330 [ 187.528713][T11275] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.528749][T11275] ? apparmor_capable+0x137/0x1a0 [ 187.528773][T11275] ? bpf_lsm_capable+0x9/0x20 [ 187.528798][T11275] ? security_capable+0x7e/0x2c0 [ 187.528822][T11275] genl_rcv_msg+0x61c/0x7a0 [ 187.528849][T11275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.528867][T11275] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.528888][T11275] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 187.528903][T11275] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.528927][T11275] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.528954][T11275] netlink_rcv_skb+0x232/0x4b0 [ 187.528972][T11275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.528994][T11275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.529008][T11275] ? genl_rcv+0x19/0x40 [ 187.529044][T11275] ? down_read+0x272/0x2e0 [ 187.529062][T11275] ? genl_rcv+0xd/0x40 [ 187.529083][T11275] genl_rcv+0x28/0x40 [ 187.529100][T11275] netlink_unicast+0x80f/0x9b0 [ 187.529130][T11275] ? __pfx_netlink_unicast+0x10/0x10 [ 187.529151][T11275] ? __alloc_skb+0x193/0x390 [ 187.529169][T11275] ? netlink_sendmsg+0x650/0xb40 [ 187.529184][T11275] ? skb_put+0x11b/0x210 [ 187.529207][T11275] netlink_sendmsg+0x813/0xb40 [ 187.529234][T11275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.529255][T11275] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.529273][T11275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.529290][T11275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.529305][T11275] ____sys_sendmsg+0xa68/0xad0 [ 187.529324][T11275] ? __might_fault+0xaf/0x130 [ 187.529350][T11275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.529379][T11275] ? import_iovec+0x73/0xa0 [ 187.529402][T11275] ___sys_sendmsg+0x2a5/0x360 [ 187.529421][T11275] ? __lock_acquire+0x6b5/0x2cf0 [ 187.529446][T11275] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.529499][T11275] ? __fget_files+0x2a/0x420 [ 187.529516][T11275] ? __fget_files+0x3a0/0x420 [ 187.529543][T11275] __x64_sys_sendmsg+0x1bd/0x2a0 [ 187.529566][T11275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.529596][T11275] ? __pfx_ksys_write+0x10/0x10 [ 187.529628][T11275] do_syscall_64+0xe2/0xf80 [ 187.529644][T11275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.529659][T11275] ? trace_irq_disable+0x37/0x100 [ 187.529674][T11275] ? clear_bhb_loop+0x60/0xb0 [ 187.529694][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.529709][T11275] RIP: 0033:0x7fbffc19aeb9 [ 187.529726][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.529746][T11275] RSP: 002b:00007fbffcfdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.529765][T11275] RAX: ffffffffffffffda RBX: 00007fbffc415fa0 RCX: 00007fbffc19aeb9 [ 187.529777][T11275] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 187.529788][T11275] RBP: 00007fbffcfdd090 R08: 0000000000000000 R09: 0000000000000000 [ 187.529798][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.529808][T11275] R13: 00007fbffc416038 R14: 00007fbffc415fa0 R15: 00007ffdeab6d9b8 [ 187.529837][T11275] [ 187.598039][T11279] FAULT_INJECTION: forcing a failure. [ 187.598039][T11279] name failslab, interval 1, probability 0, space 0, times 0 [ 187.864770][T11286] netlink: 'syz.1.1399': attribute type 21 has an invalid length. [ 187.907647][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.4.1398 Not tainted syzkaller #0 PREEMPT(full) [ 187.907672][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.907680][T11279] Call Trace: [ 187.907687][T11279] [ 187.907694][T11279] dump_stack_lvl+0xe8/0x150 [ 187.907720][T11279] should_fail_ex+0x412/0x560 [ 187.907745][T11279] should_failslab+0xa8/0x100 [ 187.907764][T11279] __kmalloc_noprof+0xde/0x7e0 [ 187.907780][T11279] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.907808][T11279] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.907835][T11279] genl_family_rcv_msg_doit+0xd9/0x330 [ 187.907860][T11279] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.907888][T11279] ? apparmor_capable+0x137/0x1a0 [ 187.907911][T11279] ? bpf_lsm_capable+0x9/0x20 [ 187.907930][T11279] ? security_capable+0x7e/0x2c0 [ 187.907954][T11279] genl_rcv_msg+0x61c/0x7a0 [ 187.907980][T11279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.907997][T11279] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.908017][T11279] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 187.908031][T11279] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.908055][T11279] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.908081][T11279] netlink_rcv_skb+0x232/0x4b0 [ 187.908099][T11279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.908119][T11279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.908133][T11279] ? genl_rcv+0x19/0x40 [ 187.908166][T11279] ? down_read+0x272/0x2e0 [ 187.908181][T11279] ? genl_rcv+0xd/0x40 [ 187.908198][T11279] genl_rcv+0x28/0x40 [ 187.908213][T11279] netlink_unicast+0x80f/0x9b0 [ 187.908241][T11279] ? __pfx_netlink_unicast+0x10/0x10 [ 187.908258][T11279] ? __alloc_skb+0x193/0x390 [ 187.908276][T11279] ? netlink_sendmsg+0x650/0xb40 [ 187.908291][T11279] ? skb_put+0x11b/0x210 [ 187.908312][T11279] netlink_sendmsg+0x813/0xb40 [ 187.908338][T11279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.908359][T11279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.908379][T11279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.908397][T11279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.908413][T11279] ____sys_sendmsg+0xa68/0xad0 [ 187.908432][T11279] ? __might_fault+0xaf/0x130 [ 187.908469][T11279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.908498][T11279] ? import_iovec+0x73/0xa0 [ 187.908521][T11279] ___sys_sendmsg+0x2a5/0x360 [ 187.908539][T11279] ? __lock_acquire+0x6b5/0x2cf0 [ 187.908564][T11279] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.908626][T11279] ? __fget_files+0x2a/0x420 [ 187.908643][T11279] ? __fget_files+0x3a0/0x420 [ 187.908670][T11279] __x64_sys_sendmsg+0x1bd/0x2a0 [ 187.908695][T11279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.908724][T11279] ? __pfx_ksys_write+0x10/0x10 [ 187.908755][T11279] do_syscall_64+0xe2/0xf80 [ 187.908772][T11279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.908788][T11279] ? trace_irq_disable+0x37/0x100 [ 187.908803][T11279] ? clear_bhb_loop+0x60/0xb0 [ 187.908821][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.908835][T11279] RIP: 0033:0x7f576b79aeb9 [ 187.908851][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.908864][T11279] RSP: 002b:00007f576c718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.908882][T11279] RAX: ffffffffffffffda RBX: 00007f576ba15fa0 RCX: 00007f576b79aeb9 [ 187.908894][T11279] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 187.908905][T11279] RBP: 00007f576c718090 R08: 0000000000000000 R09: 0000000000000000 [ 187.908916][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.908925][T11279] R13: 00007f576ba16038 R14: 00007f576ba15fa0 R15: 00007ffe09201258 [ 187.909024][T11279] [ 188.302655][T11296] IPv6: addrconf: prefix option has invalid lifetime [ 188.335938][T11286] netlink: 'syz.1.1399': attribute type 22 has an invalid length. [ 188.351088][T11286] netlink: 'syz.1.1399': attribute type 23 has an invalid length. [ 188.385273][T11286] netlink: 'syz.1.1399': attribute type 25 has an invalid length. [ 188.404401][T11286] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1399'. [ 188.414553][T11285] netlink: 'syz.1.1399': attribute type 21 has an invalid length. [ 188.422975][T11285] netlink: 'syz.1.1399': attribute type 22 has an invalid length. [ 188.431190][T11285] netlink: 'syz.1.1399': attribute type 23 has an invalid length. [ 188.440761][T11285] netlink: 'syz.1.1399': attribute type 25 has an invalid length. [ 188.448701][T11285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1399'. [ 188.481651][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 188.499459][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.519407][T11303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.532450][T11310] netlink: 'syz.6.1405': attribute type 21 has an invalid length. [ 188.540923][T11308] netlink: 'syz.6.1405': attribute type 9 has an invalid length. [ 188.548701][T11308] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.1405'. [ 188.560260][T11310] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1405'. [ 188.627348][T11308] openvswitch: netlink: Message has 4 unknown bytes. [ 188.746413][T11319] FAULT_INJECTION: forcing a failure. [ 188.746413][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 188.778920][T11319] CPU: 1 UID: 0 PID: 11319 Comm: syz.4.1409 Not tainted syzkaller #0 PREEMPT(full) [ 188.778945][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.778956][T11319] Call Trace: [ 188.778964][T11319] [ 188.778972][T11319] dump_stack_lvl+0xe8/0x150 [ 188.778998][T11319] should_fail_ex+0x412/0x560 [ 188.779024][T11319] should_failslab+0xa8/0x100 [ 188.779045][T11319] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 188.779070][T11319] ? __alloc_skb+0x1d7/0x390 [ 188.779087][T11319] ? __local_bh_enable_ip+0xd0/0x130 [ 188.779103][T11319] ? __alloc_skb+0x193/0x390 [ 188.779121][T11319] __alloc_skb+0x1d7/0x390 [ 188.779143][T11319] netlink_ack+0x146/0xa50 [ 188.779160][T11319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.779178][T11319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 188.779200][T11319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 188.779222][T11319] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.779250][T11319] netlink_rcv_skb+0x2b6/0x4b0 [ 188.779271][T11319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.779289][T11319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.779303][T11319] ? genl_rcv+0x19/0x40 [ 188.779336][T11319] ? down_read+0x272/0x2e0 [ 188.779353][T11319] ? genl_rcv+0xd/0x40 [ 188.779374][T11319] genl_rcv+0x28/0x40 [ 188.779392][T11319] netlink_unicast+0x80f/0x9b0 [ 188.779424][T11319] ? __pfx_netlink_unicast+0x10/0x10 [ 188.779445][T11319] ? __alloc_skb+0x193/0x390 [ 188.779465][T11319] ? netlink_sendmsg+0x650/0xb40 [ 188.779481][T11319] ? skb_put+0x11b/0x210 [ 188.779504][T11319] netlink_sendmsg+0x813/0xb40 [ 188.779531][T11319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.779552][T11319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 188.779575][T11319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.779599][T11319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.779613][T11319] ____sys_sendmsg+0xa68/0xad0 [ 188.779631][T11319] ? __might_fault+0xaf/0x130 [ 188.779658][T11319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.779687][T11319] ? import_iovec+0x73/0xa0 [ 188.779712][T11319] ___sys_sendmsg+0x2a5/0x360 [ 188.779731][T11319] ? __lock_acquire+0x6b5/0x2cf0 [ 188.779756][T11319] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.779811][T11319] ? __fget_files+0x2a/0x420 [ 188.779828][T11319] ? __fget_files+0x3a0/0x420 [ 188.779856][T11319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 188.779879][T11319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.779910][T11319] ? __pfx_ksys_write+0x10/0x10 [ 188.779944][T11319] do_syscall_64+0xe2/0xf80 [ 188.779961][T11319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.779978][T11319] ? trace_irq_disable+0x37/0x100 [ 188.779993][T11319] ? clear_bhb_loop+0x60/0xb0 [ 188.780014][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.780030][T11319] RIP: 0033:0x7f576b79aeb9 [ 188.780046][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.780061][T11319] RSP: 002b:00007f576c718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.780080][T11319] RAX: ffffffffffffffda RBX: 00007f576ba15fa0 RCX: 00007f576b79aeb9 [ 188.780093][T11319] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 188.780104][T11319] RBP: 00007f576c718090 R08: 0000000000000000 R09: 0000000000000000 [ 188.780116][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.780125][T11319] R13: 00007f576ba16038 R14: 00007f576ba15fa0 R15: 00007ffe09201258 [ 188.780172][T11319] [ 189.315104][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1412'. [ 189.410975][T11344] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1417'. [ 189.487913][T11352] tipc: Enabling of bearer rejected, failed to enable media [ 189.822800][T11384] FAULT_INJECTION: forcing a failure. [ 189.822800][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 189.889655][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.2.1428 Not tainted syzkaller #0 PREEMPT(full) [ 189.889679][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.889689][T11384] Call Trace: [ 189.889696][T11384] [ 189.889704][T11384] dump_stack_lvl+0xe8/0x150 [ 189.889729][T11384] should_fail_ex+0x412/0x560 [ 189.889753][T11384] should_failslab+0xa8/0x100 [ 189.889774][T11384] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 189.889799][T11384] ? __alloc_skb+0x1d7/0x390 [ 189.889817][T11384] ? __local_bh_enable_ip+0xd0/0x130 [ 189.889833][T11384] ? __alloc_skb+0x193/0x390 [ 189.889851][T11384] __alloc_skb+0x1d7/0x390 [ 189.889871][T11384] nl80211_send_scan_start+0x2f/0x170 [ 189.889891][T11384] nl80211_trigger_scan+0x1aee/0x1f50 [ 189.889921][T11384] genl_family_rcv_msg_doit+0x22a/0x330 [ 189.889950][T11384] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 189.889984][T11384] ? bpf_lsm_capable+0x9/0x20 [ 189.890003][T11384] ? security_capable+0x7e/0x2c0 [ 189.890028][T11384] genl_rcv_msg+0x61c/0x7a0 [ 189.890055][T11384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.890073][T11384] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 189.890093][T11384] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 189.890108][T11384] ? __pfx_nl80211_post_doit+0x10/0x10 [ 189.890132][T11384] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.890161][T11384] netlink_rcv_skb+0x232/0x4b0 [ 189.890189][T11384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.890211][T11384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.890226][T11384] ? genl_rcv+0x19/0x40 [ 189.890266][T11384] ? down_read+0x272/0x2e0 [ 189.890284][T11384] ? genl_rcv+0xd/0x40 [ 189.890305][T11384] genl_rcv+0x28/0x40 [ 189.890322][T11384] netlink_unicast+0x80f/0x9b0 [ 189.890355][T11384] ? __pfx_netlink_unicast+0x10/0x10 [ 189.890376][T11384] ? __alloc_skb+0x193/0x390 [ 189.890395][T11384] ? netlink_sendmsg+0x650/0xb40 [ 189.890410][T11384] ? skb_put+0x11b/0x210 [ 189.890432][T11384] netlink_sendmsg+0x813/0xb40 [ 189.890459][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.890480][T11384] ? aa_sock_msg_perm+0xf1/0x1b0 [ 189.890501][T11384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.890521][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.890537][T11384] ____sys_sendmsg+0xa68/0xad0 [ 189.890555][T11384] ? __might_fault+0xaf/0x130 [ 189.890584][T11384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.890613][T11384] ? import_iovec+0x73/0xa0 [ 189.890639][T11384] ___sys_sendmsg+0x2a5/0x360 [ 189.890659][T11384] ? __lock_acquire+0x6b5/0x2cf0 [ 189.890684][T11384] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.890738][T11384] ? __fget_files+0x2a/0x420 [ 189.890753][T11384] ? __fget_files+0x3a0/0x420 [ 189.890781][T11384] __x64_sys_sendmsg+0x1bd/0x2a0 [ 189.890802][T11384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.890825][T11384] ? __pfx_ksys_write+0x10/0x10 [ 189.890852][T11384] do_syscall_64+0xe2/0xf80 [ 189.890866][T11384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.890878][T11384] ? trace_irq_disable+0x37/0x100 [ 189.890890][T11384] ? clear_bhb_loop+0x60/0xb0 [ 189.890906][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.890918][T11384] RIP: 0033:0x7f6c16f9aeb9 [ 189.890932][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.890943][T11384] RSP: 002b:00007f6c17f2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.890959][T11384] RAX: ffffffffffffffda RBX: 00007f6c17215fa0 RCX: 00007f6c16f9aeb9 [ 189.890968][T11384] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 189.890977][T11384] RBP: 00007f6c17f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 189.890985][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.890993][T11384] R13: 00007f6c17216038 R14: 00007f6c17215fa0 R15: 00007fffc6af2d28 [ 189.891016][T11384] [ 190.312001][T11393] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.1429'. [ 190.321503][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 190.482291][T11397] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 191.039312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 191.047407][ C1] lec:lec_tx_timeout: lec0 [ 191.052137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.872944][T11429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.115289][T11494] syzkaller0: entered promiscuous mode [ 194.121991][T11494] syzkaller0: entered allmulticast mode [ 194.314921][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 194.490999][T11521] __nla_validate_parse: 3 callbacks suppressed [ 194.491017][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 194.576571][T11529] validate_nla: 5 callbacks suppressed [ 194.576589][T11529] netlink: 'syz.2.1459': attribute type 12 has an invalid length. [ 194.618644][T11529] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1459'. [ 194.642751][T11529] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 194.823325][T11550] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1464'. [ 194.911470][T11555] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1465'. [ 195.056284][T11521] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 195.528281][T11576] syzkaller0: entered promiscuous mode [ 195.534360][T11576] syzkaller0: entered allmulticast mode [ 195.545214][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 195.599154][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'. [ 195.599450][T11578] netlink: 'syz.2.1473': attribute type 3 has an invalid length. [ 195.763756][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1477'. [ 195.836374][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1478'. [ 196.062097][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 196.070182][ C1] lec:lec_tx_timeout: lec0 [ 196.075020][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.126826][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1486'. [ 196.345684][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1490'. [ 196.381783][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.383651][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.388122][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.394031][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.553383][T11626] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.588725][T11632] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 197.291147][T11681] netlink: 'syz.6.1507': attribute type 20 has an invalid length. [ 197.319621][T11681] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.350137][T11690] tipc: New replicast peer: 255.255.255.255 [ 197.357212][T11690] tipc: Enabled bearer , priority 10 [ 197.470063][T11693] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 197.598003][T11701] netlink: 'syz.1.1514': attribute type 7 has an invalid length. [ 197.605894][T11701] netlink: 'syz.1.1514': attribute type 8 has an invalid length. [ 197.635459][T11704] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 197.702076][T11710] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 197.776570][T11713] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 197.889844][T11721] netlink: 'syz.6.1517': attribute type 1 has an invalid length. [ 198.063168][T11739] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 198.199771][T11737] gretap1: entered promiscuous mode [ 198.286942][T11741] netem: change failed [ 198.301598][T11744] netem: change failed [ 198.750003][T11771] openvswitch: netlink: Flow key attribute not present in set flow. [ 198.864567][T11783] sctp: [Deprecated]: syz.1.1539 (pid 11783) Use of int in maxseg socket option. [ 198.864567][T11783] Use struct sctp_assoc_value instead [ 198.925694][T11788] netlink: 'syz.5.1540': attribute type 1 has an invalid length. [ 199.006141][T11787] gretap0: entered promiscuous mode [ 199.892953][T11849] __nla_validate_parse: 18 callbacks suppressed [ 199.892970][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1554'. [ 199.927254][T11851] syzkaller0: entered promiscuous mode [ 199.936139][T11851] syzkaller0: entered allmulticast mode [ 200.056951][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1557'. [ 200.130558][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 200.665279][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 200.809674][T11909] validate_nla: 1 callbacks suppressed [ 200.809693][T11909] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 200.867199][T11909] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1572'. [ 201.362370][T11938] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 201.387612][T11948] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 201.431064][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.498135][T11953] netlink: 'syz.5.1587': attribute type 1 has an invalid length. [ 201.507795][T11953] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1587'. [ 201.518718][T11950] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1586'. [ 201.642901][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 201.673227][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1589'. [ 201.899343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 201.907465][ C1] lec:lec_tx_timeout: lec0 [ 201.912581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 202.033340][T11978] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 202.058521][T11983] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1597'. [ 202.152464][ T798] IPVS: starting estimator thread 0... [ 202.280070][T11991] IPVS: using max 29 ests per chain, 69600 per kthread [ 203.055471][T12046] FAULT_INJECTION: forcing a failure. [ 203.055471][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 203.070062][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.5.1614 Not tainted syzkaller #0 PREEMPT(full) [ 203.070086][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.070097][T12046] Call Trace: [ 203.070103][T12046] [ 203.070111][T12046] dump_stack_lvl+0xe8/0x150 [ 203.070137][T12046] should_fail_ex+0x412/0x560 [ 203.070161][T12046] should_failslab+0xa8/0x100 [ 203.070183][T12046] kmem_cache_alloc_noprof+0x87/0x6e0 [ 203.070204][T12046] ? __netlink_lookup+0xc6/0x8b0 [ 203.070223][T12046] ? skb_clone+0x212/0x3a0 [ 203.070257][T12046] skb_clone+0x212/0x3a0 [ 203.070282][T12046] __netlink_deliver_tap+0x404/0x850 [ 203.070311][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.070330][T12046] netlink_deliver_tap+0x19c/0x1b0 [ 203.070349][T12046] netlink_unicast+0x7e3/0x9b0 [ 203.070380][T12046] ? __pfx_netlink_unicast+0x10/0x10 [ 203.070402][T12046] ? __alloc_skb+0x193/0x390 [ 203.070421][T12046] ? netlink_sendmsg+0x650/0xb40 [ 203.070436][T12046] ? skb_put+0x11b/0x210 [ 203.070463][T12046] netlink_sendmsg+0x813/0xb40 [ 203.070490][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.070511][T12046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 203.070532][T12046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.070552][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.070569][T12046] ____sys_sendmsg+0xa68/0xad0 [ 203.070589][T12046] ? __might_fault+0xaf/0x130 [ 203.070619][T12046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.070650][T12046] ? import_iovec+0x73/0xa0 [ 203.070676][T12046] ___sys_sendmsg+0x2a5/0x360 [ 203.070696][T12046] ? __lock_acquire+0x6b5/0x2cf0 [ 203.070722][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.070779][T12046] ? __fget_files+0x2a/0x420 [ 203.070797][T12046] ? __fget_files+0x3a0/0x420 [ 203.070825][T12046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.070849][T12046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.070879][T12046] ? __pfx_ksys_write+0x10/0x10 [ 203.070915][T12046] do_syscall_64+0xe2/0xf80 [ 203.070933][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.070949][T12046] ? trace_irq_disable+0x37/0x100 [ 203.070965][T12046] ? clear_bhb_loop+0x60/0xb0 [ 203.070986][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.071001][T12046] RIP: 0033:0x7fe04e39aeb9 [ 203.071018][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.071032][T12046] RSP: 002b:00007fe04f25c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.071051][T12046] RAX: ffffffffffffffda RBX: 00007fe04e615fa0 RCX: 00007fe04e39aeb9 [ 203.071064][T12046] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 203.071075][T12046] RBP: 00007fe04f25c090 R08: 0000000000000000 R09: 0000000000000000 [ 203.071085][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.071095][T12046] R13: 00007fe04e616038 R14: 00007fe04e615fa0 R15: 00007ffc1ddf3ea8 [ 203.071126][T12046] [ 203.713064][T12077] IPv6: addrconf: prefix option has invalid lifetime [ 203.973384][T12090] FAULT_INJECTION: forcing a failure. [ 203.973384][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 204.038397][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz.2.1629 Not tainted syzkaller #0 PREEMPT(full) [ 204.038422][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 204.038431][T12090] Call Trace: [ 204.038438][T12090] [ 204.038446][T12090] dump_stack_lvl+0xe8/0x150 [ 204.038473][T12090] should_fail_ex+0x412/0x560 [ 204.038500][T12090] should_failslab+0xa8/0x100 [ 204.038520][T12090] kmem_cache_alloc_noprof+0x87/0x6e0 [ 204.038541][T12090] ? __netlink_lookup+0xc6/0x8b0 [ 204.038561][T12090] ? skb_clone+0x212/0x3a0 [ 204.038586][T12090] skb_clone+0x212/0x3a0 [ 204.038611][T12090] __netlink_deliver_tap+0x404/0x850 [ 204.038639][T12090] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.038658][T12090] netlink_deliver_tap+0x19c/0x1b0 [ 204.038677][T12090] netlink_unicast+0x7e3/0x9b0 [ 204.038728][T12090] ? __pfx_netlink_unicast+0x10/0x10 [ 204.038750][T12090] ? __alloc_skb+0x193/0x390 [ 204.038767][T12090] ? netlink_sendmsg+0x650/0xb40 [ 204.038779][T12090] ? skb_put+0x11b/0x210 [ 204.038799][T12090] netlink_sendmsg+0x813/0xb40 [ 204.038822][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.038842][T12090] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.038862][T12090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.038880][T12090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.038895][T12090] ____sys_sendmsg+0xa68/0xad0 [ 204.038913][T12090] ? __might_fault+0xaf/0x130 [ 204.038938][T12090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.038965][T12090] ? import_iovec+0x73/0xa0 [ 204.038991][T12090] ___sys_sendmsg+0x2a5/0x360 [ 204.039009][T12090] ? __lock_acquire+0x6b5/0x2cf0 [ 204.039033][T12090] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.039088][T12090] ? __fget_files+0x2a/0x420 [ 204.039104][T12090] ? __fget_files+0x3a0/0x420 [ 204.039135][T12090] __x64_sys_sendmsg+0x1bd/0x2a0 [ 204.039155][T12090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.039182][T12090] ? __pfx_ksys_write+0x10/0x10 [ 204.039213][T12090] do_syscall_64+0xe2/0xf80 [ 204.039230][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.039245][T12090] ? trace_irq_disable+0x37/0x100 [ 204.039264][T12090] ? clear_bhb_loop+0x60/0xb0 [ 204.039282][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.039298][T12090] RIP: 0033:0x7f6c16f9aeb9 [ 204.039314][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.039327][T12090] RSP: 002b:00007f6c17f2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.039346][T12090] RAX: ffffffffffffffda RBX: 00007f6c17215fa0 RCX: 00007f6c16f9aeb9 [ 204.039358][T12090] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 204.039369][T12090] RBP: 00007f6c17f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 204.039380][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.039390][T12090] R13: 00007f6c17216038 R14: 00007f6c17215fa0 R15: 00007fffc6af2d28 [ 204.039418][T12090] [ 204.509150][T12109] syzkaller0: entered promiscuous mode [ 204.515724][T12109] syzkaller0: entered allmulticast mode [ 204.561381][T12109] syzkaller0: left promiscuous mode [ 204.576301][T12109] syzkaller0: left allmulticast mode [ 204.934295][T12125] __nla_validate_parse: 8 callbacks suppressed [ 204.934316][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1641'. [ 205.072114][T12138] FAULT_INJECTION: forcing a failure. [ 205.072114][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 205.105233][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.5.1645 Not tainted syzkaller #0 PREEMPT(full) [ 205.105258][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 205.105268][T12138] Call Trace: [ 205.105275][T12138] [ 205.105283][T12138] dump_stack_lvl+0xe8/0x150 [ 205.105309][T12138] should_fail_ex+0x412/0x560 [ 205.105335][T12138] should_failslab+0xa8/0x100 [ 205.105356][T12138] __kmalloc_noprof+0xde/0x7e0 [ 205.105373][T12138] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.105401][T12138] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.105430][T12138] genl_family_rcv_msg_doit+0xd9/0x330 [ 205.105457][T12138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.105486][T12138] ? apparmor_capable+0x137/0x1a0 [ 205.105511][T12138] ? bpf_lsm_capable+0x9/0x20 [ 205.105531][T12138] ? security_capable+0x7e/0x2c0 [ 205.105557][T12138] genl_rcv_msg+0x61c/0x7a0 [ 205.105584][T12138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.105603][T12138] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 205.105622][T12138] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 205.105638][T12138] ? __pfx_nl80211_post_doit+0x10/0x10 [ 205.105662][T12138] ? __pfx_ref_tracker_free+0x10/0x10 [ 205.105690][T12138] netlink_rcv_skb+0x232/0x4b0 [ 205.105709][T12138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.105732][T12138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.105747][T12138] ? genl_rcv+0x19/0x40 [ 205.105784][T12138] ? down_read+0x272/0x2e0 [ 205.105802][T12138] ? genl_rcv+0xd/0x40 [ 205.105831][T12138] genl_rcv+0x28/0x40 [ 205.105850][T12138] netlink_unicast+0x80f/0x9b0 [ 205.105882][T12138] ? __pfx_netlink_unicast+0x10/0x10 [ 205.105903][T12138] ? __alloc_skb+0x193/0x390 [ 205.105922][T12138] ? netlink_sendmsg+0x650/0xb40 [ 205.105938][T12138] ? skb_put+0x11b/0x210 [ 205.105961][T12138] netlink_sendmsg+0x813/0xb40 [ 205.105988][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.106008][T12138] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.106028][T12138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.106047][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.106063][T12138] ____sys_sendmsg+0xa68/0xad0 [ 205.106084][T12138] ? __might_fault+0xaf/0x130 [ 205.106113][T12138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.106143][T12138] ? import_iovec+0x73/0xa0 [ 205.106170][T12138] ___sys_sendmsg+0x2a5/0x360 [ 205.106189][T12138] ? __lock_acquire+0x6b5/0x2cf0 [ 205.106216][T12138] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.106272][T12138] ? __fget_files+0x2a/0x420 [ 205.106289][T12138] ? __fget_files+0x3a0/0x420 [ 205.106317][T12138] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.106341][T12138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.106372][T12138] ? __pfx_ksys_write+0x10/0x10 [ 205.106406][T12138] do_syscall_64+0xe2/0xf80 [ 205.106423][T12138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.106439][T12138] ? trace_irq_disable+0x37/0x100 [ 205.106456][T12138] ? clear_bhb_loop+0x60/0xb0 [ 205.106476][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.106492][T12138] RIP: 0033:0x7fe04e39aeb9 [ 205.106508][T12138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.106522][T12138] RSP: 002b:00007fe04f25c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.106542][T12138] RAX: ffffffffffffffda RBX: 00007fe04e615fa0 RCX: 00007fe04e39aeb9 [ 205.106555][T12138] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 205.106566][T12138] RBP: 00007fe04f25c090 R08: 0000000000000000 R09: 0000000000000000 [ 205.106577][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.106587][T12138] R13: 00007fe04e616038 R14: 00007fe04e615fa0 R15: 00007ffc1ddf3ea8 [ 205.106617][T12138] [ 205.555426][T12143] IPv6: Can't replace route, no match found [ 205.713374][T12151] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 205.870409][T12151] bond5: entered promiscuous mode [ 205.878968][T12151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.907623][T12159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1651'. [ 205.923531][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1651'. [ 205.951551][T12167] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1651'. [ 206.160545][T12187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1658'. [ 206.929575][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 206.937711][ C1] lec:lec_tx_timeout: lec0 [ 206.942510][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.010588][T12209] syzkaller0: entered promiscuous mode [ 207.028142][T12209] syzkaller0: entered allmulticast mode [ 207.148202][T12219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1662'. [ 207.595367][T12236] x_tables: duplicate underflow at hook 3 [ 207.690462][T12240] syzkaller0: entered promiscuous mode [ 207.706441][T12240] syzkaller0: entered allmulticast mode [ 207.868230][T12248] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1676'. [ 208.055647][T12258] tipc: Enabled bearer , priority 0 [ 208.085899][T12263] netlink: 'syz.5.1680': attribute type 1 has an invalid length. [ 208.099932][T12258] syzkaller0: entered promiscuous mode [ 208.105960][T12258] syzkaller0: entered allmulticast mode [ 208.185903][T12258] tipc: Resetting bearer [ 208.197388][T12273] netlink: zone id is out of range [ 208.204474][T12256] tipc: Resetting bearer [ 208.209830][T12273] netlink: zone id is out of range [ 208.215446][T12273] netlink: zone id is out of range [ 208.231687][T12273] netlink: del zone limit has 4 unknown bytes [ 208.236114][T12275] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1685'. [ 208.247185][T12256] tipc: Disabling bearer [ 208.340806][T12282] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.348893][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 208.485718][T12291] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 208.590631][T12297] IPv6: sit2: Disabled Multicast RS [ 208.596872][T12297] sit2: entered allmulticast mode [ 208.602143][T12298] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1691'. [ 208.757232][T12312] FAULT_INJECTION: forcing a failure. [ 208.757232][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.794339][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.1.1698 Not tainted syzkaller #0 PREEMPT(full) [ 208.794364][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.794374][T12312] Call Trace: [ 208.794381][T12312] [ 208.794388][T12312] dump_stack_lvl+0xe8/0x150 [ 208.794415][T12312] should_fail_ex+0x412/0x560 [ 208.794438][T12312] _copy_from_user+0x2d/0xb0 [ 208.794462][T12312] kstrtouint_from_user+0xd6/0x180 [ 208.794485][T12312] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 208.794522][T12312] proc_fail_nth_write+0x8e/0x210 [ 208.794544][T12312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.794572][T12312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.794596][T12312] vfs_write+0x29a/0xb90 [ 208.794625][T12312] ? __pfx_vfs_write+0x10/0x10 [ 208.794649][T12312] ? __fget_files+0x2a/0x420 [ 208.794671][T12312] ? __fget_files+0x3a0/0x420 [ 208.794688][T12312] ? __fget_files+0x2a/0x420 [ 208.794715][T12312] ksys_write+0x150/0x270 [ 208.794747][T12312] ? __pfx_ksys_write+0x10/0x10 [ 208.794779][T12312] do_syscall_64+0xe2/0xf80 [ 208.794797][T12312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.794812][T12312] ? trace_irq_disable+0x37/0x100 [ 208.794829][T12312] ? clear_bhb_loop+0x60/0xb0 [ 208.794849][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.794865][T12312] RIP: 0033:0x7fbffc15b78e [ 208.794880][T12312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.794895][T12312] RSP: 002b:00007fbffcfdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.794913][T12312] RAX: ffffffffffffffda RBX: 00007fbffcfdd6c0 RCX: 00007fbffc15b78e [ 208.794926][T12312] RDX: 0000000000000001 RSI: 00007fbffcfdd0a0 RDI: 0000000000000005 [ 208.794936][T12312] RBP: 00007fbffcfdd090 R08: 0000000000000000 R09: 0000000000000000 [ 208.794946][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.794955][T12312] R13: 00007fbffc416038 R14: 00007fbffc415fa0 R15: 00007ffdeab6d9b8 [ 208.794984][T12312] [ 209.238455][T12324] veth7: entered promiscuous mode [ 209.259468][T12324] veth7: entered allmulticast mode [ 209.318874][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.339638][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.350164][T12336] netlink: 'syz.5.1707': attribute type 1 has an invalid length. [ 209.359528][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.365937][T12336] netlink: 'syz.5.1707': attribute type 1 has an invalid length. [ 209.385940][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.397393][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.409555][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.471439][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.539170][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.614465][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.643653][T12333] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.703173][T12358] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 210.092157][T12389] __nla_validate_parse: 6 callbacks suppressed [ 210.092176][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1721'. [ 210.252390][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 210.326219][T12394] bridge3: port 1(veth0_to_bond) entered blocking state [ 210.380099][T12394] bridge3: port 1(veth0_to_bond) entered disabled state [ 210.385786][T12406] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1729'. [ 210.390273][T12394] veth0_to_bond: entered allmulticast mode [ 210.399034][T12409] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1730'. [ 210.412194][T12394] veth0_to_bond: entered promiscuous mode [ 210.576610][T12421] raw_sendmsg: syz.6.1733 forgot to set AF_INET. Fix it! [ 210.600463][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 210.727858][T12429] netlink: 'syz.6.1734': attribute type 9 has an invalid length. [ 210.895013][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 210.925943][T12444] block nbd1: Unsupported socket: should be TCP or UNIX. [ 210.962571][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 211.013424][T12444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 211.277433][T12458] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 211.311323][T12458] bond2 (unregistering): Released all slaves [ 211.800051][T12484] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20000 [ 211.856165][T12480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.959550][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 211.967757][ C1] lec:lec_tx_timeout: lec0 [ 211.973307][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.984220][T12489] : entered promiscuous mode [ 212.130891][T12497] netlink: 'syz.5.1754': attribute type 2 has an invalid length. [ 212.411390][T12513] netlink: 'syz.5.1759': attribute type 24 has an invalid length. [ 212.590138][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 212.608652][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 213.028395][T12550] 8021q: VLANs not supported on ip6_vti0 [ 213.318455][T12567] pimreg: left allmulticast mode [ 213.682735][T12593] tipc: Started in network mode [ 213.701199][T12593] tipc: Node identity 1, cluster identity 4711 [ 213.715750][T12593] tipc: Node number set to 1 [ 213.773474][T12587] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 213.956325][T12603] tipc: Enabling of bearer rejected, already enabled [ 214.615953][T12640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 214.630036][ T5830] Bluetooth: hci6: command 0x0405 tx timeout [ 214.719112][T12645] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 214.731499][T12640] netlink: 'syz.2.1789': attribute type 2 has an invalid length. [ 214.803271][T12640] 9: entered promiscuous mode [ 215.241610][T12677] __nla_validate_parse: 4 callbacks suppressed [ 215.241630][T12677] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1800'. [ 215.805776][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 215.826232][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 216.169848][T12730] bond5: option all_slaves_active: invalid value (222) [ 216.188878][T12730] bond5 (unregistering): Released all slaves [ 216.242332][T12742] sctp: [Deprecated]: syz.5.1812 (pid 12742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.242332][T12742] Use struct sctp_sack_info instead [ 216.405909][T12752] netlink: 808 bytes leftover after parsing attributes in process `syz.2.1815'. [ 216.607371][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 216.611213][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'. [ 216.617538][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'. [ 216.784948][ T5830] Bluetooth: hci6: command 0x0405 tx timeout [ 216.918895][T12781] xt_TCPMSS: Only works on TCP SYN packets [ 216.948783][T12787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.960157][T12787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.982291][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 216.999296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 217.007425][ C1] lec:lec_tx_timeout: lec0 [ 217.013360][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 217.209821][T12800] syzkaller0: entered promiscuous mode [ 217.216211][T12800] syzkaller0: entered allmulticast mode [ 217.237787][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1833'. [ 217.361565][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 217.657195][T12829] netlink: 'syz.5.1841': attribute type 7 has an invalid length. [ 217.680295][T12829] netlink: 'syz.5.1841': attribute type 7 has an invalid length. [ 217.777777][T12833] netlink: 'syz.1.1842': attribute type 9 has an invalid length. [ 218.074187][T12852] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 218.181811][T12863] netlink: 'syz.2.1853': attribute type 16 has an invalid length. [ 218.204040][T12852] bond4: entered promiscuous mode [ 218.210113][T12852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.225100][T12863] netlink: 'syz.2.1853': attribute type 17 has an invalid length. [ 218.305658][T12852] bond4: (slave bridge5): making interface the new active one [ 218.339626][T12852] bridge5: entered promiscuous mode [ 218.346051][T12852] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 218.403368][T12863] gretap0: left promiscuous mode [ 218.435419][T12863] bridge0: port 3(dummy0) entered blocking state [ 218.442208][T12863] bridge0: port 3(dummy0) entered forwarding state [ 218.495570][T12863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.563822][T12879] xt_TCPMSS: Only works on TCP SYN packets [ 218.831610][T12895] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.871853][T12895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.879116][T12895] IPv6: NLM_F_CREATE should be set when creating new route [ 218.882110][T12892] geneve3: entered promiscuous mode [ 219.020151][T12905] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 219.190061][T12917] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 219.513233][T12937] gtp0: entered promiscuous mode [ 219.546343][T12937] gtp0: entered allmulticast mode [ 219.601035][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.608500][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.660640][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.668300][T12947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.676093][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.683387][T12947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.739204][T12947] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.746588][T12947] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.807461][T12954] netlink: 'syz.5.1883': attribute type 18 has an invalid length. [ 219.865324][T12959] gre0: entered promiscuous mode [ 219.879664][T12959] gre0: entered allmulticast mode [ 219.909117][ T8667] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.934831][ T8667] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.960753][ T8667] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.054231][ T8667] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.292028][T12983] vlan1: entered promiscuous mode [ 220.297127][T12983] bridge0: entered promiscuous mode [ 220.566750][T13004] netlink: 'syz.1.1894': attribute type 17 has an invalid length. [ 220.597348][T13004] __nla_validate_parse: 13 callbacks suppressed [ 220.597367][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 220.605188][T13007] tipc: Enabled bearer , priority 0 [ 220.623413][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1894'. [ 220.645576][T13004] erspan0: entered promiscuous mode [ 220.653183][T13004] gretap0: entered promiscuous mode [ 220.940195][T13007] syzkaller0: entered promiscuous mode [ 220.948226][T13007] syzkaller0: entered allmulticast mode [ 220.960059][T13007] tipc: Resetting bearer [ 222.032337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.040419][ C1] lec:lec_tx_timeout: lec0 [ 222.045440][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.670055][T13034] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1901'. [ 222.687978][T13034] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1901'. [ 222.712450][T13034] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1901'. [ 222.754853][T13006] tipc: Resetting bearer [ 222.817785][T13006] tipc: Disabling bearer [ 222.900021][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 222.932931][T13059] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.086462][ T798] IPVS: starting estimator thread 0... [ 223.109001][T13073] netlink: 'syz.4.1912': attribute type 21 has an invalid length. [ 223.205752][T13074] IPVS: using max 31 ests per chain, 74400 per kthread [ 223.308054][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1917'. [ 223.317932][T13089] netlink: 'syz.5.1917': attribute type 1 has an invalid length. [ 223.332604][T13089] netlink: 'syz.5.1917': attribute type 2 has an invalid length. [ 223.371784][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 223.494830][T13100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1919'. [ 223.973132][T13124] syzkaller0: entered promiscuous mode [ 223.978764][T13124] syzkaller0: entered allmulticast mode [ 224.028194][T13128] tc_dump_action: action bad kind [ 224.185569][T13133] !: renamed from dummy0 (while UP) [ 224.219114][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 224.365858][T13142] tipc: Enabling not permitted [ 224.373662][T13142] tipc: Enabling of bearer rejected, failed to enable media [ 225.036234][T13182] netlink: 'syz.4.1947': attribute type 2 has an invalid length. [ 225.073155][T13182] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 225.099257][T13191] vcan0: tx address claim with different name [ 225.147023][T13191] netlink: 'syz.6.1949': attribute type 2 has an invalid length. [ 225.228818][T13191] : entered promiscuous mode [ 225.407770][T13213] netlink: 'syz.5.1956': attribute type 5 has an invalid length. [ 225.665800][T13225] FAULT_INJECTION: forcing a failure. [ 225.665800][T13225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.691804][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.5.1959 Not tainted syzkaller #0 PREEMPT(full) [ 225.691828][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.691838][T13225] Call Trace: [ 225.691846][T13225] [ 225.691853][T13225] dump_stack_lvl+0xe8/0x150 [ 225.691888][T13225] should_fail_ex+0x412/0x560 [ 225.691914][T13225] _copy_from_iter+0x1d3/0x1670 [ 225.691947][T13225] ? __pfx__copy_from_iter+0x10/0x10 [ 225.691966][T13225] ? sock_alloc_send_pskb+0x896/0x990 [ 225.691995][T13225] ? __pfx__copy_from_iter+0x10/0x10 [ 225.692018][T13225] ? page_copy_sane+0x16a/0x270 [ 225.692040][T13225] copy_page_from_iter+0xdd/0x170 [ 225.692065][T13225] skb_copy_datagram_from_iter+0x306/0x710 [ 225.692100][T13225] tun_get_user+0xc38/0x3dd0 [ 225.692127][T13225] ? aa_file_perm+0x12d/0x1630 [ 225.692153][T13225] ? aa_file_perm+0x440/0x1630 [ 225.692172][T13225] ? __pfx_tun_get_user+0x10/0x10 [ 225.692192][T13225] ? __lock_acquire+0x6b5/0x2cf0 [ 225.692216][T13225] ? kstrtoull+0x12f/0x1d0 [ 225.692241][T13225] ? ref_tracker_alloc+0x363/0x4d0 [ 225.692263][T13225] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 225.692284][T13225] ? tun_get+0x1c/0x2f0 [ 225.692301][T13225] ? tun_get+0x1c/0x2f0 [ 225.692322][T13225] ? tun_get+0x1c/0x2f0 [ 225.692339][T13225] ? tun_get+0x1c/0x2f0 [ 225.692360][T13225] tun_chr_write_iter+0x113/0x200 [ 225.692381][T13225] vfs_write+0x61d/0xb90 [ 225.692410][T13225] ? __pfx_vfs_write+0x10/0x10 [ 225.692442][T13225] ? __fget_files+0x2a/0x420 [ 225.692469][T13225] ksys_write+0x150/0x270 [ 225.692493][T13225] ? __pfx_ksys_write+0x10/0x10 [ 225.692525][T13225] do_syscall_64+0xe2/0xf80 [ 225.692543][T13225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.692559][T13225] ? trace_irq_disable+0x37/0x100 [ 225.692575][T13225] ? clear_bhb_loop+0x60/0xb0 [ 225.692595][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.692611][T13225] RIP: 0033:0x7fe04e39aeb9 [ 225.692627][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.692641][T13225] RSP: 002b:00007fe04f25c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.692660][T13225] RAX: ffffffffffffffda RBX: 00007fe04e615fa0 RCX: 00007fe04e39aeb9 [ 225.692673][T13225] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 225.692684][T13225] RBP: 00007fe04f25c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.692695][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.692706][T13225] R13: 00007fe04e616038 R14: 00007fe04e615fa0 R15: 00007ffc1ddf3ea8 [ 225.692734][T13225] [ 226.348421][T13235] __nla_validate_parse: 6 callbacks suppressed [ 226.348440][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 226.615541][T13252] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 227.059319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 227.067575][ C1] lec:lec_tx_timeout: lec0 [ 227.074923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.092814][T13280] FAULT_INJECTION: forcing a failure. [ 227.092814][T13280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.106090][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.5.1977 Not tainted syzkaller #0 PREEMPT(full) [ 227.106121][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 227.106132][T13280] Call Trace: [ 227.106139][T13280] [ 227.106146][T13280] dump_stack_lvl+0xe8/0x150 [ 227.106170][T13280] should_fail_ex+0x412/0x560 [ 227.106189][T13280] _copy_from_iter+0x1d3/0x1670 [ 227.106215][T13280] ? __pfx__copy_from_iter+0x10/0x10 [ 227.106229][T13280] ? sock_alloc_send_pskb+0x896/0x990 [ 227.106252][T13280] ? __pfx__copy_from_iter+0x10/0x10 [ 227.106271][T13280] ? page_copy_sane+0x16a/0x270 [ 227.106288][T13280] copy_page_from_iter+0xdd/0x170 [ 227.106307][T13280] skb_copy_datagram_from_iter+0x306/0x710 [ 227.106334][T13280] tun_get_user+0xc38/0x3dd0 [ 227.106356][T13280] ? aa_file_perm+0x12d/0x1630 [ 227.106375][T13280] ? aa_file_perm+0x440/0x1630 [ 227.106390][T13280] ? __pfx_tun_get_user+0x10/0x10 [ 227.106405][T13280] ? __lock_acquire+0x6b5/0x2cf0 [ 227.106424][T13280] ? kstrtoull+0x12f/0x1d0 [ 227.106445][T13280] ? ref_tracker_alloc+0x363/0x4d0 [ 227.106462][T13280] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 227.106479][T13280] ? tun_get+0x1c/0x2f0 [ 227.106492][T13280] ? tun_get+0x1c/0x2f0 [ 227.106508][T13280] ? tun_get+0x1c/0x2f0 [ 227.106520][T13280] ? tun_get+0x1c/0x2f0 [ 227.106536][T13280] tun_chr_write_iter+0x113/0x200 [ 227.106554][T13280] vfs_write+0x61d/0xb90 [ 227.106579][T13280] ? __pfx_vfs_write+0x10/0x10 [ 227.106604][T13280] ? __fget_files+0x2a/0x420 [ 227.106623][T13280] ksys_write+0x150/0x270 [ 227.106642][T13280] ? __pfx_ksys_write+0x10/0x10 [ 227.106667][T13280] do_syscall_64+0xe2/0xf80 [ 227.106681][T13280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.106693][T13280] ? trace_irq_disable+0x37/0x100 [ 227.106706][T13280] ? clear_bhb_loop+0x60/0xb0 [ 227.106721][T13280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.106741][T13280] RIP: 0033:0x7fe04e39aeb9 [ 227.106754][T13280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.106766][T13280] RSP: 002b:00007fe04f21a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.106781][T13280] RAX: ffffffffffffffda RBX: 00007fe04e616180 RCX: 00007fe04e39aeb9 [ 227.106792][T13280] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 227.106800][T13280] RBP: 00007fe04f21a090 R08: 0000000000000000 R09: 0000000000000000 [ 227.106808][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.106816][T13280] R13: 00007fe04e616218 R14: 00007fe04e616180 R15: 00007ffc1ddf3ea8 [ 227.106838][T13280] [ 227.659158][T13296] veth0: entered promiscuous mode [ 227.706188][T13297] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 227.716001][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 227.728195][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 227.737742][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 227.759388][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 227.760495][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1984'. [ 227.831658][T13297] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 227.855371][T13297] team0: Device veth1_macvtap failed to register rx_handler [ 228.393350][T13291] veth0: left promiscuous mode [ 228.599145][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1997'. [ 228.609783][T13343] openvswitch: netlink: Flow actions attr not present in new flow. [ 228.686788][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1998'. [ 228.690171][T13349] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2000'. [ 228.876042][T13329] lec:lec_atm_close: lec0: Shut down! [ 229.002473][T13367] syzkaller1: entered promiscuous mode [ 229.011728][T13367] syzkaller1: entered allmulticast mode [ 229.172256][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2008'. [ 229.197912][T13377] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 229.249125][T13377] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.353793][T13382] veth9: entered promiscuous mode [ 229.372016][T13382] bond6: (slave veth9): Enslaving as an active interface with a down link [ 229.408653][T13382] vlan2: entered allmulticast mode [ 229.420148][T13382] bond6: entered allmulticast mode [ 229.427456][T13382] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 229.586836][T13395] netlink: 'syz.1.2012': attribute type 3 has an invalid length. [ 229.634914][T13400] gretap0: entered promiscuous mode [ 230.020630][T13432] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 230.358854][T13450] xt_HMARK: spi-set and port-set can't be combined [ 230.404232][T13448] veth0: entered promiscuous mode [ 230.412050][T13448] veth0: left promiscuous mode [ 231.503867][T13466] __nla_validate_parse: 13 callbacks suppressed [ 231.503889][T13466] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2034'. [ 231.580293][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 231.610896][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 231.657752][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2039'. [ 231.677417][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2039'. [ 231.766520][T13484] gretap1: entered promiscuous mode [ 231.779726][T13484] gretap1: entered allmulticast mode [ 231.884041][T13500] xt_l2tp: invalid flags combination: 0 [ 231.901512][T13500] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2042'. [ 231.922728][T13500] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2042'. [ 231.965042][T13502] openvswitch: netlink: Multiple metadata blocks provided [ 231.971291][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2046'. [ 231.975104][T13502] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2045'. [ 231.982268][T13506] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 231.992075][T13502] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2045'. [ 232.019757][T13506] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 232.285531][T13524] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 232.744551][T13552] --map-set only usable from mangle table [ 232.917212][T13560] netlink: 'syz.2.2065': attribute type 29 has an invalid length. [ 232.962116][T13560] netlink: 'syz.2.2065': attribute type 29 has an invalid length. [ 233.133673][T13574] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 233.232695][T13574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.292883][T13577] bond3: (slave veth7): Enslaving as an active interface with a down link [ 233.363807][T13574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.395790][T13574] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 233.457649][T13586] vlan2: entered promiscuous mode [ 233.465564][T13586] geneve1: entered promiscuous mode [ 233.471932][T13586] vlan2: entered allmulticast mode [ 233.477197][T13586] geneve1: entered allmulticast mode [ 233.491869][T13591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.516164][T13594] vlan1: entered allmulticast mode [ 233.522663][T13594] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 233.576266][T13601] sctp: [Deprecated]: syz.2.2076 (pid 13601) Use of int in maxseg socket option. [ 233.576266][T13601] Use struct sctp_assoc_value instead [ 233.899335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 233.907503][ C1] lec:lec_tx_timeout: lec0 [ 233.912684][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.251645][T13649] wireguard0: entered promiscuous mode [ 234.257468][T13649] wireguard0: entered allmulticast mode [ 234.272433][T13649] team0: Device wireguard0 is of different type [ 234.659209][T13677] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 234.865776][T13687] geneve3: entered promiscuous mode [ 234.939215][T13691] block nbd1: Unsupported socket: should be TCP or UNIX. [ 235.948251][T13760] netlink: 'syz.1.2123': attribute type 4 has an invalid length. [ 235.977653][T13756] veth0: entered promiscuous mode [ 235.983589][T13756] bridge0: entered promiscuous mode [ 236.004830][T13752] bridge0: left promiscuous mode [ 236.010195][T13752] veth0: left promiscuous mode [ 236.316234][T13786] netlink: 'syz.1.2130': attribute type 32 has an invalid length. [ 236.316245][T13785] netlink: 'syz.1.2130': attribute type 32 has an invalid length. [ 236.377961][T13785] bond5: option coupled_control: invalid value (255) [ 236.402687][T13785] bond5 (unregistering): Released all slaves [ 236.467329][T13786] bond5: option coupled_control: invalid value (255) [ 236.487211][T13786] bond5 (unregistering): Released all slaves [ 236.511670][T13781] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 236.527923][T13790] __nla_validate_parse: 28 callbacks suppressed [ 236.527944][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2131'. [ 236.603408][T13790] syzkaller0: entered promiscuous mode [ 236.643838][T13790] syzkaller0: entered allmulticast mode [ 236.777108][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2138'. [ 236.987106][T13829] delete_channel: no stack [ 237.046108][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 237.055439][T13834] bridge_slave_1: left allmulticast mode [ 237.061278][T13834] bridge_slave_1: left promiscuous mode [ 237.067561][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.167977][T13834] bridge_slave_0: left allmulticast mode [ 237.189573][T13834] bridge_slave_0: left promiscuous mode [ 237.198713][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.353372][T13851] .: renamed from bridge_slave_1 (while UP) [ 237.380951][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 237.426502][T13860] veth0: entered promiscuous mode [ 237.466530][T13866] veth0: left promiscuous mode [ 237.529007][T13872] validate_nla: 2 callbacks suppressed [ 237.529026][T13872] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 237.584450][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 237.588783][T13872] bond8: entered promiscuous mode [ 237.603738][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 237.622026][T13872] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.675786][T13877] veth0: entered promiscuous mode [ 237.823040][T13872] bond8: (slave bridge58): making interface the new active one [ 237.834747][T13872] bridge58: entered promiscuous mode [ 237.842009][T13872] bond8: (slave bridge58): Enslaving as an active interface with an up link [ 237.872180][T13871] veth0: left promiscuous mode [ 238.143003][T13906] IPv4: Oversized IP packet from 172.20.20.10 [ 238.225556][T13910] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 238.265938][T13910] syzkaller0: entered promiscuous mode [ 238.282829][T13910] syzkaller0: entered allmulticast mode [ 238.628909][T13923] bond3: option resend_igmp: invalid value (32767) [ 238.659516][T13923] bond3: option resend_igmp: allowed values 0 - 255 [ 238.711039][T13939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2173'. [ 238.731724][T13923] bond3 (unregistering): Released all slaves [ 238.745640][T13939] nbd: must specify at least one socket [ 238.838859][T13932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'. [ 238.919321][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 238.927391][ C1] lec:lec_tx_timeout: lec0 [ 238.932504][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.961782][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 239.333226][T13981] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 239.352887][T13986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2185'. [ 239.378468][T13981] bond4: (slave geneve3): making interface the new active one [ 239.387191][T13981] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 239.397343][ T60] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 239.515558][ T60] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 239.588165][ T60] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 239.625341][ T60] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 239.659722][T13997] bridge_slave_0: invalid flags given to default FDB implementation [ 239.777820][T13964] delete_channel: no stack [ 240.003030][T14014] veth1_vlan: Device is already in use. [ 240.206001][T14031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.334127][T14039] netlink: 'syz.6.2203': attribute type 13 has an invalid length. [ 240.912515][T14077] Bluetooth: MGMT ver 1.23 [ 241.118395][T14091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.125727][T14091] IPv6: NLM_F_CREATE should be set when creating new route [ 241.394980][T14103] syzkaller1: entered promiscuous mode [ 241.404958][T14103] syzkaller1: entered allmulticast mode [ 241.430597][T14103] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 241.681090][T14126] syzkaller0: entered promiscuous mode [ 241.690923][T14126] syzkaller0: entered allmulticast mode [ 241.701862][T14124] __nla_validate_parse: 13 callbacks suppressed [ 241.701879][T14124] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2230'. [ 242.150120][T14143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.163720][T14149] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2239'. [ 242.178381][T14145] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 242.187297][T14143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2236'. [ 242.255911][T14151] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 242.266174][T14151] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 242.278487][T14151] bond9: (slave xfrm1): making interface the new active one [ 242.284608][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 242.287076][T14151] bond9: (slave xfrm1): Enslaving as an active interface with an up link [ 242.346566][T14145] bond9 (unregistering): (slave xfrm1): Releasing backup interface [ 242.379031][T14145] bond9 (unregistering): Released all slaves [ 242.426426][ T128] hid-generic 0005:0B57:0000.0002: item fetching failed at offset 0/1 [ 242.439912][ T128] hid-generic 0005:0B57:0000.0002: probe with driver hid-generic failed with error -22 [ 242.582028][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 242.695401][T14166] bond9: entered promiscuous mode [ 242.702292][T14166] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.822441][T14179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2246'. [ 243.105241][T14200] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 243.770462][T14238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.940302][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 243.948419][ C1] lec:lec_tx_timeout: lec0 [ 243.953678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.228349][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 244.380343][T14268] tipc: Enabled bearer , priority 0 [ 244.542799][T14285] x_tables: unsorted underflow at hook 2 [ 244.675842][T14273] syzkaller0: entered promiscuous mode [ 244.740973][T14273] syzkaller0: entered allmulticast mode [ 244.747271][T14273] tipc: Resetting bearer [ 244.760854][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 244.776829][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 244.799509][T14257] tipc: Resetting bearer [ 244.949164][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 245.801910][T14313] IPVS: length: 239 != 24 [ 246.359777][T14257] tipc: Disabling bearer [ 246.368233][T14292] tipc: Enabling of bearer rejected, failed to enable media [ 246.379425][T14288] netlink: 'syz.2.2271': attribute type 29 has an invalid length. [ 246.823398][T14338] __nla_validate_parse: 3 callbacks suppressed [ 246.823416][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'. [ 246.840857][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'. [ 247.477022][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 247.589579][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 248.421500][T14367] netlink: 'syz.4.2287': attribute type 5 has an invalid length. [ 248.469553][T14362] netlink: 'syz.4.2287': attribute type 5 has an invalid length. [ 248.478384][T14367] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2287'. [ 248.540978][T14362] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2287'. [ 248.745597][T14389] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.2292'. [ 248.768821][T14389] netlink: ct family unspecified [ 248.850635][T14395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.969559][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 248.970322][T14407] syz.5.2297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 248.977651][ C1] lec:lec_tx_timeout: lec0 [ 248.979356][T14407] ,cpuset= [ 248.990282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.004407][T14407] /,mems_allowed=0-1 [ 249.020384][T14407] CPU: 0 UID: 0 PID: 14407 Comm: syz.5.2297 Not tainted syzkaller #0 PREEMPT(full) [ 249.020412][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.020423][T14407] Call Trace: [ 249.020431][T14407] [ 249.020439][T14407] dump_stack_lvl+0xe8/0x150 [ 249.020470][T14407] warn_alloc+0x249/0x340 [ 249.020491][T14407] ? stack_trace_save+0xa9/0x100 [ 249.020518][T14407] ? __pfx_warn_alloc+0x10/0x10 [ 249.020544][T14407] ? kasan_save_track+0x4f/0x80 [ 249.020560][T14407] ? kasan_save_track+0x3e/0x80 [ 249.020575][T14407] ? __kasan_kmalloc+0x93/0xb0 [ 249.020592][T14407] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 249.020610][T14407] ? xskq_create+0x56/0x170 [ 249.020628][T14407] ? xsk_setsockopt+0x54c/0x990 [ 249.020652][T14407] ? do_sock_setsockopt+0x17c/0x1b0 [ 249.020683][T14407] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 249.020705][T14407] ? do_syscall_64+0xe2/0xf80 [ 249.020727][T14407] __vmalloc_node_range_noprof+0x132/0x1730 [ 249.020776][T14407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.020803][T14407] ? __kasan_kmalloc+0x93/0xb0 [ 249.020825][T14407] vmalloc_user_noprof+0xad/0xe0 [ 249.020842][T14407] ? xskq_create+0xbf/0x170 [ 249.020860][T14407] xskq_create+0xbf/0x170 [ 249.020879][T14407] xsk_init_queue+0xad/0x110 [ 249.020905][T14407] xsk_setsockopt+0x54c/0x990 [ 249.020934][T14407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.020961][T14407] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.020986][T14407] ? aa_sock_opt_perm+0xff/0x1a0 [ 249.021012][T14407] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 249.021031][T14407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.021056][T14407] do_sock_setsockopt+0x17c/0x1b0 [ 249.021084][T14407] __x64_sys_setsockopt+0x13d/0x1b0 [ 249.021112][T14407] do_syscall_64+0xe2/0xf80 [ 249.021130][T14407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.021145][T14407] ? trace_irq_disable+0x37/0x100 [ 249.021161][T14407] ? clear_bhb_loop+0x60/0xb0 [ 249.021184][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.021202][T14407] RIP: 0033:0x7fe04e39aeb9 [ 249.021219][T14407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.021234][T14407] RSP: 002b:00007fe04f25c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.021255][T14407] RAX: ffffffffffffffda RBX: 00007fe04e615fa0 RCX: 00007fe04e39aeb9 [ 249.021269][T14407] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 249.021282][T14407] RBP: 00007fe04e408c1f R08: 0000000000000004 R09: 0000000000000000 [ 249.021294][T14407] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.021306][T14407] R13: 00007fe04e616038 R14: 00007fe04e615fa0 R15: 00007ffc1ddf3ea8 [ 249.021336][T14407] [ 249.024649][T14407] Mem-Info: [ 249.131738][T14410] sch_fq: defrate 0 ignored. [ 249.211176][T14407] active_anon:7112 inactive_anon:0 isolated_anon:0 [ 249.211176][T14407] active_file:3081 inactive_file:40000 isolated_file:0 [ 249.211176][T14407] unevictable:768 dirty:120 writeback:0 [ 249.211176][T14407] slab_reclaimable:11818 slab_unreclaimable:111566 [ 249.211176][T14407] mapped:39816 shmem:1381 pagetables:1383 [ 249.211176][T14407] sec_pagetables:0 bounce:0 [ 249.211176][T14407] kernel_misc_reclaimable:0 [ 249.211176][T14407] free:1283166 free_pcp:14902 free_cma:0 [ 249.356860][T14407] Node 0 active_anon:28448kB inactive_anon:0kB active_file:12324kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163364kB dirty:480kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14024kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.390601][T14407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.443745][T14407] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.478642][T14407] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 249.486379][T14407] Node 0 DMA32 free:1224724kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28248kB inactive_anon:0kB active_file:12324kB inactive_file:159800kB unevictable:1536kB writepending:480kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:38204kB local_pcp:21732kB free_cma:0kB [ 249.524896][T14407] lowmem_reserve[]: 0 0 1 1 1 [ 249.534500][T14407] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.573665][T14407] lowmem_reserve[]: 0 0 0 [ 249.589810][T14420] tipc: Enabling of bearer rejected, failed to enable media [ 249.609245][T14407] 0 0 [ 249.612518][T14407] Node 1 Normal free:3892304kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21964kB local_pcp:9764kB free_cma:0kB [ 249.647228][T14407] lowmem_reserve[]: 0 0 0 0 0 [ 249.657829][T14407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 249.677915][T14407] Node 0 DMA32: 1991*4kB (UM) 2277*8kB (UM) 503*16kB (UM) 73*32kB (UME) 51*64kB (UME) 35*128kB (UME) 16*256kB (UM) 7*512kB (M) 3*1024kB (M) 3*2048kB (UM) 284*4096kB (M) = 1224468kB [ 249.716977][T14407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 249.729688][T14407] Node 1 Normal: 208*4kB (UE) 58*8kB (UME) 44*16kB (UME) 98*32kB (UME) 23*64kB (UME) 5*128kB (UME) 4*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892304kB [ 249.767659][T14407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.783287][T14407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.793960][T14407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.842021][T14407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.851821][T14407] 44458 total pagecache pages [ 249.865573][T14407] 0 pages in swap cache [ 249.874079][T14407] Free swap = 124996kB [ 249.884279][T14407] Total swap = 124996kB [ 249.888474][T14407] 2097051 pages RAM [ 249.904696][T14407] 0 pages HighMem/MovableOnly [ 249.910083][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.942116][T14407] 426622 pages reserved [ 249.946319][T14407] 0 pages cma reserved [ 249.949603][T14432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2308'. [ 249.983351][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.993355][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.002451][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.132061][T14445] Unsupported ieee802154 address type: 0 [ 250.356614][T14462] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 250.363995][T14463] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 250.560203][T14472] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2319'. [ 250.622731][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.632197][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.641735][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.786046][T14481] bond0: entered promiscuous mode [ 250.791210][T14481] bond_slave_0: entered promiscuous mode [ 250.808070][T14481] bond_slave_1: entered promiscuous mode [ 250.950655][T14456] pim6reg1: entered promiscuous mode [ 250.969159][T14456] pim6reg1: entered allmulticast mode [ 251.100323][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.388439][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 251.611649][T14519] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2332'. [ 251.704226][T14532] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2337'. [ 251.740426][T14532] netlink: ct family unspecified [ 251.756563][T14532] tipc: Enabling of bearer rejected, media not registered [ 251.915943][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 252.001337][T14552] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2345'. [ 252.081935][T14562] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2348'. [ 252.087095][T14565] syzkaller0: entered promiscuous mode [ 252.108831][T14565] syzkaller0: entered allmulticast mode [ 252.380843][T14580] nbd1: detected capacity change from 0 to 127 [ 252.412697][ T5830] block nbd1: Receive control failed (result -32) [ 252.431168][ T5829] block nbd1: Dead connection, failed to find a fallback [ 252.440781][ T5829] block nbd1: shutting down sockets [ 252.446646][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.461520][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.470998][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.488992][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.516145][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.526992][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read [ 252.541985][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.559013][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read [ 252.568410][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.612261][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.622842][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.634378][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.643001][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.656124][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read [ 252.664256][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.687339][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read [ 252.699519][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.709184][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.718212][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.754875][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.776866][ T5829] ldm_validate_partition_table(): Disk read failed. [ 252.797768][ T5829] Dev nbd1: unable to read RDB block 0 [ 252.843030][ T5829] nbd1: unable to read partition table [ 252.890538][T14603] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 252.903240][T14603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2356'. [ 252.919835][ T5829] ldm_validate_partition_table(): Disk read failed. [ 252.931549][T14607] netlink: 'syz.6.2357': attribute type 5 has an invalid length. [ 252.937262][ T5829] Dev nbd1: unable to read RDB block 0 [ 252.970564][ T5829] nbd1: unable to read partition table [ 253.024581][T14610] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2359'. [ 253.264563][T14625] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 253.444542][T14630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2366'. [ 253.459072][T14637] netlink: 'syz.2.2369': attribute type 3 has an invalid length. [ 253.657839][T14650] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2373'. [ 253.676238][T14605] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 253.989756][T14668] netlink: 'syz.5.2381': attribute type 1 has an invalid length. [ 253.999403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.007481][ C1] lec:lec_tx_timeout: lec0 [ 254.012163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.057616][T14668] bond5: entered promiscuous mode [ 254.069192][T14668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.157363][T14673] bond5: (slave bridge0): making interface the new active one [ 254.174567][T14673] bridge0: entered promiscuous mode [ 254.203170][T14673] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 254.235347][ T128] net_ratelimit: 8 callbacks suppressed [ 254.235364][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.265353][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 254.718258][T14709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.794151][T14712] syzkaller0: entered promiscuous mode [ 254.819454][T14712] syzkaller0: entered allmulticast mode [ 254.836032][T14718] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 254.941058][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 255.022301][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 255.059112][T14733] veth0_virt_wifi: default FDB implementation only supports local addresses [ 255.153973][T14738] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2402'. [ 255.415217][T14748] blkio.reset_stats is deprecated [ 255.463391][ T60] tipc: Subscription rejected, illegal request [ 255.691960][T14763] gtp1: entered promiscuous mode [ 255.753046][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 256.082112][T14794] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 256.088864][T14799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.110605][T14798] netlink: 'syz.5.2419': attribute type 10 has an invalid length. [ 256.201826][T14805] netlink: 'syz.5.2421': attribute type 1 has an invalid length. [ 256.266030][T14805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.295562][T14809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.306511][T14811] bond6: (slave gretap1): making interface the new active one [ 256.308188][T14811] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 256.345719][T14813] netlink: 'syz.1.2423': attribute type 3 has an invalid length. [ 256.618336][T14826] openvswitch: netlink: Multiple metadata blocks provided [ 256.833475][T14837] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 256.878865][T14839] tls_set_device_offload_rx: netdev not found [ 257.023399][T14842] __nla_validate_parse: 7 callbacks suppressed [ 257.023420][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2432'. [ 257.083435][T14851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2434'. [ 257.120815][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'. [ 257.137404][T14842] netlink: 'syz.6.2432': attribute type 9 has an invalid length. [ 257.181234][T14842] netlink: 'syz.6.2432': attribute type 11 has an invalid length. [ 257.193338][T14842] netlink: 'syz.6.2432': attribute type 12 has an invalid length. [ 257.234868][T14842] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2432'. [ 257.287553][T14868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.296987][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2432'. [ 257.308082][T14866] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2440'. [ 257.319800][T14861] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2438'. [ 257.331950][T14861] openvswitch: netlink: Message has 6 unknown bytes. [ 257.382984][T14869] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2441'. [ 257.519426][T14879] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 257.543015][T14884] tipc: Failed to remove unknown binding: 66,0,0/1518907263:2068787345/2068787346 [ 257.563152][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 257.564059][T14884] tipc: Failed to remove unknown binding: 66,0,0/1518907263:2068787345/2068787346 [ 257.807043][T14891] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.820274][T14893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.873320][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2452'. [ 257.968619][T14920] xt_hashlimit: size too large, truncated to 1048576 [ 258.389099][T14934] netlink: 'syz.6.2458': attribute type 1 has an invalid length. [ 258.463170][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a5a9800: rx timeout, send abort [ 258.473513][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a5a9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 258.826014][T14965] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 259.019390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 259.027434][ C1] lec:lec_tx_timeout: lec0 [ 259.032156][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.454953][T15001] netlink: 'syz.6.2475': attribute type 1 has an invalid length. [ 259.638987][T15008] syzkaller0: entered promiscuous mode [ 259.646706][T15008] syzkaller0: entered allmulticast mode [ 261.377564][T15038] netlink: 'syz.5.2486': attribute type 21 has an invalid length. [ 261.694483][T15059] netlink: 'syz.5.2493': attribute type 13 has an invalid length. [ 262.082938][T15087] netlink: 'syz.5.2499': attribute type 11 has an invalid length. [ 262.099934][T15087] __nla_validate_parse: 13 callbacks suppressed [ 262.099952][T15087] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2499'. [ 262.415963][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2503'. [ 262.501253][T15105] bond5: entered promiscuous mode [ 262.506867][T15105] bond5: entered allmulticast mode [ 262.514179][T15105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.580334][T15105] macvlan2: entered promiscuous mode [ 262.586616][T15105] macvlan2: entered allmulticast mode [ 262.594067][T15105] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.626453][T15117] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 262.632889][T15117] syzkaller1: linktype set to 823 [ 262.791864][T15132] openvswitch: netlink: Key 12 has unexpected len 8 expected 2 [ 262.828757][T15134] xt_hashlimit: max too large, truncated to 1048576 [ 262.945974][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 263.027475][T15142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2512'. [ 263.207975][T15148] syzkaller0: entered promiscuous mode [ 263.220894][T15148] syzkaller0: entered allmulticast mode [ 263.232788][T15138] @0Ù: renamed from bond_slave_1 (while UP) [ 263.706125][T15178] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2520'. [ 263.759416][T15178] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2520'. [ 263.816918][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2525'. [ 263.936427][T15197] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 263.993488][T15198] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2524'. [ 263.996808][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 264.012590][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 264.039514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 264.047627][ C1] lec:lec_tx_timeout: lec0 [ 264.052768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.540688][ T5830] Bluetooth: hci6: command 0x0405 tx timeout [ 265.343190][T15197] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 265.648995][T15222] netlink: 'syz.2.2533': attribute type 13 has an invalid length. [ 265.694226][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2534'. [ 266.018433][T15242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.198555][T15256] lo: Caught tx_queue_len zero misconfig [ 266.445336][T15264] netlink: 'syz.4.2549': attribute type 9 has an invalid length. [ 266.667992][T15278] IPVS: set_ctl: invalid protocol: 41 100.1.0.253:20004 [ 266.718705][T15286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.875650][T15278] x_tables: duplicate underflow at hook 1 [ 267.005261][T15295] ip6gre1: entered allmulticast mode [ 267.044994][T15301] netlink: 'syz.4.2559': attribute type 33 has an invalid length. [ 267.117967][T15308] __nla_validate_parse: 1 callbacks suppressed [ 267.117984][T15308] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2561'. [ 267.195831][T15308] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.203096][T15308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.210689][T15308] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.217853][T15308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.251776][T15308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.303568][T15310] ip6tnl0: Caught tx_queue_len zero misconfig [ 267.374280][T15106] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.395197][T15106] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.426752][T15106] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 267.437141][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 267.447228][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 267.485305][T15320] IPv6: sit1: Disabled Multicast RS [ 267.497206][T15320] sit1: entered allmulticast mode [ 267.525955][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'. [ 267.535512][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'. [ 267.545403][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'. [ 267.562609][T15313] syzkaller0: entered promiscuous mode [ 267.568600][T15313] syzkaller0: entered allmulticast mode [ 267.600391][T15331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 267.912811][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 267.940623][T15351] syzkaller0: entered promiscuous mode [ 267.949240][T15351] syzkaller0: entered allmulticast mode [ 268.000186][T15355] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 268.013394][T15355] bond7 (unregistering): Released all slaves [ 268.380345][T15381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 268.493196][T15390] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 268.511214][T15390] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 268.643210][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2585'. [ 268.688597][T15392] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2585'. [ 268.766405][T15392] bond7: option lp_interval: invalid value (0) [ 268.778802][T15392] bond7: option lp_interval: allowed values 1 - 2147483647 [ 268.794337][T15392] bond7 (unregistering): Released all slaves [ 269.059337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 269.067472][ C1] lec:lec_tx_timeout: lec0 [ 269.072407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.105536][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2593'. [ 269.222686][T15425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.240839][T15429] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 269.339222][T15429] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 269.468834][ T5834] Bluetooth: hci6: link tx timeout [ 269.475355][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.587152][T15452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.594325][T15454] bond0: entered promiscuous mode [ 269.602014][T15454] bond_slave_0: entered promiscuous mode [ 269.608579][T15454] bond_slave_1: entered promiscuous mode [ 269.654791][T15457] sctp: [Deprecated]: syz.4.2607 (pid 15457) Use of int in maxseg socket option. [ 269.654791][T15457] Use struct sctp_assoc_value instead [ 269.694054][T15458] sctp: [Deprecated]: syz.4.2607 (pid 15458) Use of int in maxseg socket option. [ 269.694054][T15458] Use struct sctp_assoc_value instead [ 270.276686][T15489] netlink: 'syz.6.2614': attribute type 5 has an invalid length. [ 270.284866][T15491] lo: Caught tx_queue_len zero misconfig [ 270.409510][T15496] netlink: 'syz.1.2616': attribute type 5 has an invalid length. [ 270.472569][T15502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.514257][ T50] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.542108][ T50] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.569212][ T50] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.645418][ T50] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.429679][T15566] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 271.499799][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 271.664670][T15574] netlink: 'syz.1.2640': attribute type 10 has an invalid length. [ 271.770699][T15574] team0 (unregistering): Port device team_slave_1 removed [ 271.798802][T15591] x_tables: duplicate underflow at hook 3 [ 271.815577][T15574] team0 (unregistering): Port device bridge4 removed [ 271.905890][T15593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.381325][ T31] INFO: task syz.3.656:8409 blocked for more than 143 seconds. [ 272.388952][ T31] Not tainted syzkaller #0 [ 272.426021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.436327][ T31] task:syz.3.656 state:D stack:27104 pid:8409 tgid:8408 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 272.452228][ T31] Call Trace: [ 272.455781][ T31] [ 272.469682][ T31] __schedule+0x14ea/0x5050 [ 272.474347][ T31] ? __pfx___schedule+0x10/0x10 [ 272.479591][ T31] ? schedule+0x90/0x360 [ 272.484064][ T31] schedule+0x164/0x360 [ 272.488368][ T31] schedule_preempt_disabled+0x13/0x30 [ 272.494842][ T31] __mutex_lock+0x7fe/0x1300 [ 272.500006][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.505304][ T31] ? __mutex_lock+0x5ac/0x1300 [ 272.515502][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 272.522309][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 272.527520][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 272.534726][ T31] ? rcu_is_watching+0x15/0xb0 [ 272.539948][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 272.546131][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 272.553324][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 272.558919][ T31] ? __asan_memcpy+0x40/0x70 [ 272.563920][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.570639][ T31] ? bpf_lsm_capable+0x9/0x20 [ 272.575541][ T31] ? security_capable+0x7e/0x2c0 [ 272.581487][ T31] genl_rcv_msg+0x61c/0x7a0 [ 272.586141][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.591541][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 272.597775][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.603464][ T31] ? __skb_clone+0x63/0x7a0 [ 272.608105][ T31] netlink_rcv_skb+0x232/0x4b0 [ 272.614137][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.619342][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.624727][ T31] ? genl_rcv+0x19/0x40 [ 272.628900][ T31] ? down_read+0x272/0x2e0 [ 272.634025][ T31] ? genl_rcv+0xd/0x40 [ 272.638114][ T31] genl_rcv+0x28/0x40 [ 272.642770][ T31] netlink_unicast+0x80f/0x9b0 [ 272.647754][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 272.653239][ T31] ? __alloc_skb+0x193/0x390 [ 272.657901][ T31] ? netlink_sendmsg+0x650/0xb40 [ 272.662880][ T31] ? skb_put+0x11b/0x210 [ 272.667127][ T31] netlink_sendmsg+0x813/0xb40 [ 272.672408][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.677718][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.682722][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.688019][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.693718][ T31] ____sys_sendmsg+0xa68/0xad0 [ 272.698506][ T31] ? __might_fault+0xaf/0x130 [ 272.703730][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.709053][ T31] ? import_iovec+0x73/0xa0 [ 272.714545][ T31] ___sys_sendmsg+0x2a5/0x360 [ 272.719378][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 272.724336][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.730051][ T31] ? futex_wait+0x29a/0x380 [ 272.734748][ T31] ? __fget_files+0x2a/0x420 [ 272.740019][ T31] ? __fget_files+0x3a0/0x420 [ 272.744748][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.750221][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.755709][ T31] ? rcu_is_watching+0x15/0xb0 [ 272.760889][ T31] do_syscall_64+0xe2/0xf80 [ 272.765424][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.771664][ T31] ? trace_irq_disable+0x37/0x100 [ 272.776700][ T31] ? clear_bhb_loop+0x60/0xb0 [ 272.782054][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.787967][ T31] RIP: 0033:0x7f779d79aeb9 [ 272.793033][ T31] RSP: 002b:00007f779e6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.801606][ T31] RAX: ffffffffffffffda RBX: 00007f779da15fa0 RCX: 00007f779d79aeb9 [ 272.809772][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 272.818418][ T31] RBP: 00007f779d808c1f R08: 0000000000000000 R09: 0000000000000000 [ 272.826902][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.835478][ T31] R13: 00007f779da16038 R14: 00007f779da15fa0 R15: 00007ffc635b37b8 [ 272.843564][ T31] [ 272.846746][ T31] [ 272.846746][ T31] Showing all locks held in the system: [ 272.856062][ T31] 1 lock held by khungtaskd/31: [ 272.865994][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 272.876129][ T31] 2 locks held by getty/5584: [ 272.881394][ T31] #0: ffff8880353ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 272.891333][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 272.901528][ T31] 2 locks held by syz.0.441/7657: [ 272.906555][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 272.915389][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 272.926193][ T31] 2 locks held by syz.3.656/8409: [ 272.931422][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 272.940122][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 272.950309][ T31] 3 locks held by kworker/u8:11/8666: [ 272.955718][ T31] #0: ffff8880304b9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 272.967487][ T31] #1: ffffc90003037bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 272.981129][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 272.990800][ T31] 3 locks held by kworker/u8:13/15106: [ 272.996259][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 273.008621][ T31] #1: ffffc90019e9fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 273.022131][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 273.031431][ T31] 1 lock held by syz.6.2648/15608: [ 273.036554][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 273.045807][ T31] 1 lock held by syz.5.2649/15611: [ 273.051433][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 273.060522][ T31] 2 locks held by syz.4.2650/15615: [ 273.065804][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 273.074837][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 273.086338][ T31] [ 273.088712][ T31] ============================================= [ 273.088712][ T31] [ 273.098089][ T31] NMI backtrace for cpu 0 [ 273.098109][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.098126][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 273.098136][ T31] Call Trace: [ 273.098143][ T31] [ 273.098151][ T31] dump_stack_lvl+0xe8/0x150 [ 273.098177][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 273.098199][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.098225][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 273.098248][ T31] sys_info+0x135/0x170 [ 273.098266][ T31] watchdog+0xf90/0xfe0 [ 273.098287][ T31] ? watchdog+0x209/0xfe0 [ 273.098310][ T31] kthread+0x726/0x8b0 [ 273.098330][ T31] ? __pfx_watchdog+0x10/0x10 [ 273.098346][ T31] ? __pfx_kthread+0x10/0x10 [ 273.098366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.098388][ T31] ? __pfx_kthread+0x10/0x10 [ 273.098407][ T31] ret_from_fork+0x51b/0xa40 [ 273.098431][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.098452][ T31] ? __switch_to+0xc82/0x1410 [ 273.098476][ T31] ? __pfx_kthread+0x10/0x10 [ 273.098495][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.098529][ T31] [ 273.098538][ T31] Sending NMI from CPU 0 to CPUs 1: [ 273.221082][ C1] NMI backtrace for cpu 1 [ 273.221101][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 273.221117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 273.221126][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 273.221147][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 273.221159][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 273.221173][ C1] RAX: 00000000000b9755 RBX: ffffffff8199570d RCX: 0000000080000001 [ 273.221184][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc9188 RDI: ffffffff8c073980 [ 273.221194][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 273.221205][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1a70 [ 273.221216][ C1] R13: 1ffff11003a58b70 R14: 0000000000000001 R15: 0000000000000001 [ 273.221226][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 273.221238][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.221248][ C1] CR2: 00007fbffc3e1ad8 CR3: 0000000079830000 CR4: 00000000003526f0 [ 273.221262][ C1] Call Trace: [ 273.221269][ C1] [ 273.221276][ C1] default_idle+0x9/0x20 [ 273.221292][ C1] default_idle_call+0x72/0xb0 [ 273.221309][ C1] do_idle+0x1bd/0x500 [ 273.221325][ C1] ? __pfx_do_idle+0x10/0x10 [ 273.221338][ C1] ? do_idle+0x11/0x500 [ 273.221352][ C1] cpu_startup_entry+0x43/0x60 [ 273.221365][ C1] start_secondary+0x101/0x110 [ 273.221386][ C1] common_startup_64+0x13e/0x147 [ 273.221410][ C1] [ 273.390167][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 273.397033][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.406142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 273.416197][ T31] Call Trace: [ 273.419474][ T31] [ 273.422421][ T31] vpanic+0x1e0/0x670 [ 273.426413][ T31] panic+0xc5/0xd0 [ 273.430131][ T31] ? __pfx_panic+0x10/0x10 [ 273.434546][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 273.439924][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 273.446085][ T31] watchdog+0xfda/0xfe0 [ 273.450246][ T31] ? watchdog+0x209/0xfe0 [ 273.454790][ T31] kthread+0x726/0x8b0 [ 273.459141][ T31] ? __pfx_watchdog+0x10/0x10 [ 273.465564][ T31] ? __pfx_kthread+0x10/0x10 [ 273.470299][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.475691][ T31] ? __pfx_kthread+0x10/0x10 [ 273.480982][ T31] ret_from_fork+0x51b/0xa40 [ 273.485574][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.490707][ T31] ? __switch_to+0xc82/0x1410 [ 273.496205][ T31] ? __pfx_kthread+0x10/0x10 [ 273.500830][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.505661][ T31] [ 273.509066][ T31] Kernel Offset: disabled [ 273.513468][ T31] Rebooting in 86400 seconds..