last executing test programs: 3m38.905283527s ago: executing program 1 (id=2890): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x18, 0x1412, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040"], 0x80}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@loopback, @private=0xa010100, r3}, 0xc) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, 0x0) 3m38.629922548s ago: executing program 1 (id=2894): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea01001800000000000017435d44a9"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 3m38.443822681s ago: executing program 1 (id=2895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002065070043f163a5e263d8c6fc1244646cabaf972324a808f49803000000d8c9cd8eeb2b3dcedbb37229a7c1eb078b9cd43d85e25e4b996810407b0a8ac75ae74b7a5ff3a2d87b6a37f1ae698393d7c6756f05600e405f9c34febf4a746415314d607054472cd1f6b542615c39c4092ffd82d5ad95848a3a3cbfa602c335b9b7b1d00df8", @ANYRES16=r3, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="100030800c0001800800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m38.288531109s ago: executing program 1 (id=2898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@netfilter={0xa, 0x0, 0x9932}}, 0x20) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r3, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 3m37.043270727s ago: executing program 1 (id=2908): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800", @ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 3m26.820846601s ago: executing program 1 (id=2915): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3, 0x20, 0xfffffffffffffff7, 0x3}, &(0x7f0000000500)=0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000500090008"], 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) unshare(0x400) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x82}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="4e5d460aac9ba68ed02a33b29b84", 0xe}], 0x1) socket$kcm(0x10, 0x2, 0x0) 3m11.773291433s ago: executing program 32 (id=2915): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3, 0x20, 0xfffffffffffffff7, 0x3}, &(0x7f0000000500)=0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000500090008"], 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) unshare(0x400) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x82}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="4e5d460aac9ba68ed02a33b29b84", 0xe}], 0x1) socket$kcm(0x10, 0x2, 0x0) 1.934506199s ago: executing program 2 (id=4550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000900000000000000000000e83ae4dd013e24100c5b248bdeeceb2b063b201a5ff7d36382d162849c76e5886bbf263d69e7d59038ff399c6d9a972848380028de6a570af661a84b1a774738a73d7d15fff3330c8b792568bb7b786e8b2e229631d3cf76348ed6"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xffffffffffffffff}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1.895543118s ago: executing program 3 (id=4552): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) 1.815406018s ago: executing program 4 (id=4553): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xfffffffffffffdb1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x1c, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x21, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) unshare(0x28000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x5}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x64}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xfffffffffffffdb1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x1c, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x21, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) unshare(0x28000600) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x5}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x64}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9}, 0x94) (async) 1.766735055s ago: executing program 2 (id=4555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r2, 0x0, 0x0, 0x80000) connect(r1, &(0x7f00000001c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xfffc, 0x4, 0x1, 0x8, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e23, 0x8, @private1, 0x955f}}, 0x1ff, 0x0, 0x2, 0x8, 0x11, 0x80, 0xfa}, 0x9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x0, 0x202, 0x4, 0x8000, r5}, &(0x7f0000000780)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xf4, r7, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000100000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8efffff000008000000b70300000000000085000000b0000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff00b703000000000000850000000600000095000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8e}, 0x94) r9 = accept4(r2, 0x0, &(0x7f0000000140), 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r10) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="100028bd7000fcdbdf2502e4ffff05000c004e2400006f66200a053d8f0700000000000000640e2cc0e88954b5fc7a0ef114d820a011cbf2124853e7342f1d696870fb031f5d579b07fdac4825ce9d9ae55739657398562692ce62129c4df2b8b0d754004143b0f1baacf64d385b30a89e450c8743a7227e05d5e7d4e428a1584090e29fffcd9c13d80b71447a1097d98e907cdaf651e79e88608b4d23191184a6b4cacde6b2515e2b0e44bee69d8b4aedb23e19ec1786bd54"], 0x1c}, 0x1, 0x0, 0x0, 0x28000000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_crypto(r9, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=@upd={0xe8, 0x12, 0x300, 0x70bd2b, 0x25dfdbfd, {{'cbc-cast6-avx\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) 1.590873996s ago: executing program 2 (id=4557): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700010025bd7080fd0d0825110000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40000c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe800000"], 0xfdef) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRESDEC=r2], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) sendmsg$IPSET_CMD_DEL(r4, 0x0, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'dummy0\x00', 0x7101}) (async) r8 = socket(0x1, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x38, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x1f, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x65828c70}}]}, 0x38}}, 0x0) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x0, 0xe, 0x0, &(0x7f0000000200)="00885ffedb2d9bc9000000000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x5, 0x6a8, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x400, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x0, 0x2}}}}, 0x30}}, 0x0) 1.557458301s ago: executing program 3 (id=4558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r0 = socket$nl_generic(0x11, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @random="3b66ab8bd32b", @void, {@can={0xc, {{0x3}, 0x5, 0x0, 0x0, 0x0, "051efd7331561f7e"}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x7800, 0x40, 0x80000000, 0x7, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x9, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x6}]}, @noop]}}}}}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000fc0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00 \x00\x00 '], 0x260}}], 0x2, 0x24000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000200)={0x2c, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)=0x9) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.494579519s ago: executing program 4 (id=4559): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xffec}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21, 0x0, 0xfffffffe}}]}}]}, 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffc}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0xe, 0x0, &(0x7f00000005c0)="9dc8c44fc36947f0ab694c0ad455", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/88, 0xffffff45}, {&(0x7f0000000780)=""/83, 0x53}], 0x2, 0x0, 0xf00}, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000002c0)="92c6b7281c3643ead8d3021f407b681873a6c4b0e787522f147543516c4b73091ae354761c872f5d1039c1b8d2a25795fc1139a8ea500301163fcf0744baf45fa2d05aed", 0x44) 1.453391146s ago: executing program 5 (id=4561): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0xc000}, 0x18) (async) unshare(0x20000400) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001680)={'batadv_slave_1\x00', 0x0}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)=@o_path={&(0x7f0000001780)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x5, &(0x7f0000000600)=@raw=[@exit, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x1, 0xb, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff1}, @call={0x85, 0x0, 0x0, 0x200000ad}], &(0x7f0000001700)='syzkaller\x00', 0xee54, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x9, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000019c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x0, 0x6, 0xc5cf, 0xeb7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001880)=[r5, r6], &(0x7f00000018c0)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0xb129}, 0x94) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYRES32=r8, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=r8], 0x50) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x42, 0x4, 0x3e8, 0xffffffff, 0x280, 0x0, 0x280, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0xe0, 0x108, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@set={{0x40}, {{0x1, [0x7, 0x4, 0x1, 0x6, 0x3, 0x2], 0x5, 0x5}}}, @common=@addrtype={{0x30}, {0x82, 0x122, 0x1}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x150, 0x178, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff000000], @ipv6=@mcast2, [0xff000000, 0x0, 0xffffffff, 0xff000000], @ipv4=@local, [0xff, 0x0, 0xff000000, 0xff000000], @ipv6=@empty, [0x0, 0xffffffff, 0x0, 0xff0000ff], 0x6, 0x3, 0x32, 0x4e22, 0x4e22, 0x4e20, 0x4e22, 0x210, 0x2030}, 0x0, 0x4c}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@dev, @remote, 0x0, 0xff, 'veth1_to_team\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x1, 0x2], 0x1, 0x5}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, &(0x7f0000000300)) (async) getsockopt$inet_opts(r9, 0x0, 0x16, &(0x7f0000000180)=""/170, &(0x7f0000000240)=0xaa) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.359855753s ago: executing program 2 (id=4562): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {}, {0x16, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc00}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x84, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x8, @private1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1200}, @in={0x2, 0x4e27, @remote}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @empty}}, [0x5, 0x1, 0x5, 0x8, 0x6, 0x3, 0x7f, 0x6, 0x8000000000000001, 0x4, 0x2, 0x2, 0x8, 0x9, 0x9]}, &(0x7f00000003c0)=0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x240088c0) r6 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {}, {0x16, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc00}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x84, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x8, @private1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1200}, @in={0x2, 0x4e27, @remote}]}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @empty}}, [0x5, 0x1, 0x5, 0x8, 0x6, 0x3, 0x7f, 0x6, 0x8000000000000001, 0x4, 0x2, 0x2, 0x8, 0x9, 0x9]}, &(0x7f00000003c0)=0x100) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x240088c0) (async) socket(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.255721871s ago: executing program 3 (id=4563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x188, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x188}, 0x1, 0x0, 0x0, 0x48c0}, 0x20004000) 1.227028421s ago: executing program 4 (id=4564): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) 1.226455246s ago: executing program 5 (id=4565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f00000003c0)={0x14f4, 0x9, 0x1, 0x201, 0x70bd2a, 0x25dfdbfb, {0x6bb0ad4413e5cca6, 0x0, 0x7}, [@generic="ca6f142da8ae3c1efbd93bff4df7a1ad6dba629dce095ed28e0a82677865ac4d86ff6e2cc202a5e44f2d5614dd35f0bbb5cc185b2e828f5173974d3d2bf132ad350d113b03b919f566dcd6d38f2c542c5f3bfb73da6bb3600b1bd5f92a34862587c9fca25d7a7ee9212e21bc22b67267193beecda606bb5044e75367ff829a79cb0deae2556cad6596821e8221f0e114161b16f0783cb9bc3c9c3c40387054130408e237217cc1fca0cf0117a32db0a8baa958004fa68a2f7158e354d9d64f3578269ec6e9f107e743f6ee29c06d7fb93b10b78724ab348ca7d7b1c0919faddb3d96010cfd74131c61780fe36511f5325775c267", @nested={0x12c, 0x10d, 0x0, 0x1, [@generic="3409a2dcf0520205da8a4d510c95ec72abe46068f513df1fd9ebf7ecc3d5a7a4dfadd0adde2c8246443a098968994ae222c64a762048ae6ec6e17862b6ef1d2cb9e6c1c2cb6a286cff49c8acff93990488ca27b18891932575a88a646e1bc7a5516ba46fc832b17be52ad6a47754018cddf1f096a706e8576132cc08572cb7a0a344ebd2455b8c963d66cdaaa8aa350a9d0d65c26cb1f680d0d693ac43b243cbe0b6b0b5e7b5c4ff1248b20ff95459cd8cebfa397fb168091477f3b80ecb577dedc0213554f28dad5fa33c7cf5507ddd196a07feea532cc927092350baa7cb52a6cd1bdea64a04136fedde178411ecf40679a10b", @nested={0x4, 0x52}, @generic="027f263923d11df9720458cc74e63a942a8b1b5fef123282145d938d41a71d2b77031b2b6f1ec08f22fc386a", @nested={0x4, 0x8c}]}, @nested={0xd0, 0x15e, 0x0, 0x1, [@generic="2fbd38c2f6d523bd70eb2ff7c59e3dca80984e61aef45e0819b572d6eea68c6c6075f581061b888108ef39adcd9bc1bcfd4da23c50c4db00fb09b3f23c8c5515ae761002f913e183b9fe736e6297ce23e47b92bedd55e0421bd8101edc6217d357a465c0016f117fc754911c6948c1e0d50c73e7961fdc23ca2f4975b868d3972ad099a92a76e5926cbb6727f1a5367501c6a2bf166f1c8bc8fbbf73ab50eaaee8a92b1332cebde768974558976386a14faf254e6b9816f4d63d9b1dcc7e02634d4ea33d22f9f838c82c5226"]}, @generic="4cdba801ed0dd85a137d2346320820abd5cb12467db7d4b29baf4fb716f6714fb49ce646a56d9ce44c34ac521cc5ebf99442835729361fd39db7c65eee3fd1b0009e2b50c957c712c72049c7a317", @generic="5bf79a660aec7a1d67e9cec666585861b956aec0682fd89c18da50e105f606d70bd69ba7fdc74580d43aebfa1bf627d8c6f2173f9b697ac03ed88a03ce6dad279252765a680d438a98b06f878d7be109d3dbc81562eb6bc35a4e1bc3a70bacb0ea3c98acba14bac6f07ba0c034c9f7d9f1d5e11688d7588eac837d3c74dbce714a6a4b7ab9982dbe2c24a2d0ba847c566ec5769a9e9e184d2d0d5c6299ea02bf1ea2c566a3e0d0771acf348716da4006b2087a77e6f9e961a7183e16f3cd3eca422b26df0678df59fed14f0f5a1144fc8f72de992384f09142fa53ca86e34f6639aed23aace63defce", @typed={0x8, 0x13, 0x0, 0x0, @uid=r1}, @nested={0xa2, 0x12c, 0x0, 0x1, [@generic="b79181f09549d6088e55895490cb212d4997b6ee72d2d2272cf7342794fcdd97f813ba13222c62b9b82ad92fe9ce9b15d4b086997185dc15558466bc0ed586b07e741e7f19783f3cdce80270630fee644a1d52241991f50fd8c1f4ade901ae1899a7c4c8ac037dd0b66eabd9f9d205b764d0864bc6f04452a120ef6e8d4ea04a8e9591a84c9a8e3c76285fea3c57ded7f661f22f34b676cf3d38a55dea56"]}, @generic="453083a3ccb2e774ea3128ed0de3a26011524c4fb317b970fee1b148b1a7013753054ebbfdf8043c572f5d30c501bbca4828a580f41a36089ed2d1c4c710e9825bbb4c99a3eba26a388dde794b90828cc5aa406ec27e36feb1b1ce001f63b996d0516d42641ad1017d73be1a568c441ca0e401edfeffa43df17711c79ae67c02221e24eeed17f1c869185406ce17e657cae88b51f889dad9ce141f656d9cc34eb9bb4d802daa5250170570edba6bee3be6024705a33540632ab9beaecc79f6ee3cf3e2d615cfc8cbb8bf9c561561ed449de7ef77ecad9583a0ebe94452ce4a47899f7b47200ecd1700dfc4fab39cd81c41fc0a16c9f20a68be1720f43ae1cdb68a83d2397648e5554826eeea39fdea9a19c1d043d795a9c065c0123f75e53c310d94d089c48fe62abb682d2c0149d5c06477a71f7682745bab1da6f8ce631a08f856850819de1cf52740973867a7e1609c2bf0d3af7e2ca91d400855604479e433dee857618fbc0041ddd7ad0697421294a2a07d9d765ece91f052573eda7cd55f9a38cb73e14e0b769f4a4b7381246cd0b95fc242b4135caeea2b1c5c08b7e02ea4800738ab60e3a5e126aac3f0eff174c91746a65a5db3c7b4a4277e3c5c8484bd0ad55a2c8ad12e4be70846836768c10f1b0ece49f65dc896579469cf740f7100a0a7a1c5dc7e523c01bef5d967bccd66b4d0cc86cbdced8790436ed11bf1958039e7fecc636d77ac7c6a118c06e6477f93aafb6af6ce56f73e8791fdc6979d969187b1826fa3926a77770ffc30022251e671a9b4fd73795bb3bcc193f2215bf2b41e48d56db0b28af59c59c1934fbe6e25c240bf3c074b65bf80683bd0279020cebc8596f216da452e153902a48b37802d9c6f1b00bae2f225895508cf9517e35d9e75a2b3b6feef201759f9a5c4fe041a2de6a9eaedde4863115c5d0380281d5203aee51e4bea8c6376acde947c8a6f1342856ea9119573e2460e7d86c043e20c7b60785cdb2785cffab4c359fc6985aa08d5ff6a7b49401381eec3858a87e6fe0926bf1260751d9d26ac50273ff8fc5199317c9fab9372a26f5ab82721771ae7e27b1ed6e2e25d744baf5d0d02f4dc86dc1c3f2f8d27355b48e3077b43d92a56a879c336ae8ef24d54e87e42637f8c0e7e344706108f7cafc9465a43baa19d99078077cbfe523e5667589aaf341d65087e10523d2bc8d37e2f7e27771dd391a89b0b2514842d3a4ff87d53d5eae86163a6522f5658d6ed85a3fb7534b1200709f12b5546bb230f1e27d32ac9330dbf03d321e9fd5fd4a4e7ef7b74019e1b840c340b039f122d7580cbb93dbda0ab18f00281da8e3b8cf2e2c3bb26c2c75a73c674d2426feaef6d21e9de508f1b62e45fa9f2bf47edcc79dd0dd53098b896a1511eea240be11a938c8603132f5643e6a940bd391cc04aa039f92e633056e479048944915f458dba1d66604aaa9cea8f608e3cd9d29e978685f3870be292bfffb1e109a7115ed80f3ea2cb4b6f3c52f43824f27021fe45e587b6245d8eb3632034b04311c6594d913aa5a3ad171020566e658d4b53b886e382c539738c44b5564d074a73c0b5d8443d8fbb840dbf9d663ba40601f46b7c6cc2e1f643eb72817ae91529c2d3e9c34d65959f2b7856030679b2a629c8bf17d6cce0bac54c2426c1dd4ba88f9ab0e9c94141b00fc3c00d40464cf4480aeb77edf5e9068a644ec07ad5769973f06981ba081bc660b2f948880f3590d2fc52dd15f676f2aee6a6febf83d44ba57545dced9136067bf597bcb1cf38c8d511e9297ea5e8e30693577396e95725dc85064dae17e6d8c3dfbbc5f7bc89f8eea3f4b86f002be3e60bed7ef70ac10698b5f923668139b6e0074b186a0887e074225a9feb902c6551d5f62250fe5ee404d0961ce20c33064c9c87b0b5b9652ce3bc59ccf001955dcbcf8e2a0839ea84642e3515fa2e3122467580213b336a477a00e8eb338d209736c7e6e9f30fb4673cb0825ec9c1aa5f38a76aff90f81d5d30d362657217abefe3e519f49c0df92a71281bfe6d3d257b6af96a892f40ed9ee5ba628368f8bf68272d9751b5db517209cd3825c7e6733cdc754cb0242128a6f0ccc757065e0390fa12d20151793b8ad68e2062fc3cc9a1bbe2f3660193a4be490449eac4dc0daa0819101bc8e6db3b67e73f5eaa4a5f25a1a63f7064986a32b41812f92f72d20d9a8a3a2e8c6c8ecb68d99262da59df7c73016dd1dea0fd804e868173007456694e989eed6a88f2abeb553dee2b72944095a819ddcc91bb9800c51b3755db3a9637a28000b43efef68c284913e95661e00867b91d8b9675c35602c5bc9aedb63d05d93580d31c3d1158d9d9f729d6596c067319db21180125893bf568e580e607eeeb0a8a34403b2e238a21f4a018bb5906f3067063029b447d2aaefe8032769807afaec0d7368a615e9a92a7c0f8b44375e7cafd8d59e152667449a5e7a8dcb7284ff7c6993a4aeb79d98f15bc9bfe2f085115d97a031f645395a5f62eddf78feedf08b5434d3b3358f9ee122b058d1c6ec926506215da2346525e2d549351e98af067ba46da31de221e99cc014a3932bf94d2c23ec1fc61c8bab7a858504b8d6319002d54b3eca3f694636e04367bd15fe65450bca251c7bcd47fbb9313569ad3ec1bafc623b6981d0612ca4e3cb3fe76f26877bc3d37ed9a81e1b914153a48ebf5e6b0284c9c0e7950262c3dd4a3964550f29f885afdb133b278c588553baa41fd966ad980fc05f51f57d774188732a4759bbf44996d1eeb7c5611f536768628951e0ea94d860072b340a82db255bd0e88d0eaf4417d05614685c635e18feb0a5cd0bd0c42c11e02e9d213669207155e924f87beb7977bbfdc3f022c688be1152245b2e7732e918c6e93123453586288586937f631eb21eebb7d570bea6eb549051adc2cb487e3f07e782613c8d02d5fd6a18cdb6f8122abea75a02b05da34449296243c7a4cd2f0e91cb3e421f2066f578002c1f97235a83f7e274b11e183eb6f021d3697deb8affb332905f339f841135d7f4731556bb02f00413c21494e89b021f4e34b09a0c62ce3bb12f392ad4a59c7c45126cdeb95fac326a0933df22fe43e5c287b05e90671a0a3371c96d0535ada62fb9518fdcb1157adb3afafbed424754ffe4390f947348f406757167eede2b3a9a41f11dd02386fda96e3f05a974408a4073152d6de3b3eae9c8e4d965e2437f2d50e674a59f751b7934c9af600691d83c8fae5ba05e0d1e01ae8c292d51b93a9b482b8abbb3b6d1445abec5f113719406e80924abc80633e4fc02ee39c1403a8360e06ee583a235fcef07ff87c569d3bc6265afafc3aff323c2934e3855a6b10285cde9f6896df4b91dcb1e0e6770dc34ffc2dcb2f9752aa2cd82e4f4c12c0643211bb240b0d2888bc56dcc3e8a9cda35a791078894afc018b765409e35c735fb5e0add25a7dd53b0c5d80f6c74a861c783ec9c37ff869c85d1b659cd98434fbff7943c2be862d34b68eb769bd6e0aa185b22d3604dddba5e967ad25b03c9c328d36302a7a28eda356a29f0173d493dcf6412d8a2d2964adaf3a7a35ab89e391fe04e386885600c604d8398f94f48e1173d2145d6ab1cfc6d01a7e3e6b9c28621c3519d0365bf1c616906eea27f42a3cf63b832b5ffbe49ac69a69fbe8e2210d82eb86f4914147981fdfab38406cd110eaf72c09d72b4d8af1d605dd8bcbdd5cf25da119d73c3c2c9bc80b4906cb0c528456ed6b0dfca9149ee93e39394faf03f53b1e1c86adee5e949b8d775567eeed18baf5aca383333c508c843b998a35a912db9bbb62feeb270666aa989b7980afda01b29dbb7731ba5dfe64f04d474d4715ea747103fd1fb5d93f9f500cdba16a93de32f2bef1af3227f086f97d1aee51d2db1dde66041e18c733b536d6d130807e97d6f7575ee3ff97e84fe95a3b99e502c32cc385f14f0540ec2ca919e9e60c0d04ede9f829fa38e29aa88cea6e568aa78bcfdf6ec15e82757fd95362e1ec27a5ad2f6005c69b591e2d0e5cccdb9ecf5c07188663ced67a7eb6f4013ff086283fd5c2642fcff0e3276d75095d785fa71e5142850129e3e1d68bcc0646a94ea657d818a6faa81c57145d5ae1659974c0d53c01a9a77a10eec08b49507152901d848785da9ceaeb3d1ec27f2a8c590f24fb1fa84ee6c7e3022dcf84019237c5fbcf6dd698f5623128513b4a2ff2078aa80bb9a11a339bc2c3960edf4a685a0b9c4443b5a40855a84c8e088fec62cd3fd37c4e033d00e7796c8904b36fa24abe49cbe253a7296205aa8e1b3d99924931e6602b6931752c99ef5d17df1634e1571123cc86abbbefb9ad21a689052d4de5e68650c6ab70255eb0c69a0466fbf40fdc3cd4c2d3bc4a6748e923a58990ff147a5ed6d8aa89f36af1fbbd2e823060b79410899246afc87b85b4f8eca08a2382852d225b4abb3095f5bb61fc0afeec89d27a32aead36d0efb3fc55ca38a36f0b6bdb71a94f01eb6f33e7834781d58fd56bfc586760a58b15d78929873132936012090a7c171ce4830b1cc9fbbf975e69f91c272880793451d4d833ac10cc6f93b7597087add4328fccf05c8550fbff590efef924ae17dcb061acd5481899175d00d8635f3c51f7b43ce71c80e45351ba588e71faa6c13423caf80e404df9d8f3d125679eb6a5148a0c1038b4d91312f90be812c925a8a6e6f7eec1072c5e81296dfc973e89a9daa493ecc1f796e1cfb878c4b843849d1f5886a14d938281ea45e2b759b328d7db622e7c9f5a7c5bc17f921135cd2f086cf201da4ba789bdca45b9583d4d1737fecebc72e1a2058971308f891b0c5474b568789064eee6785576305e49121d6e95536533d5a82d1a8f97b1190bd2ae159d458d60f5df145c735f317214decb2f7c05938e7d2bc622b9bca0e7cb6fabe60cc7aa7892d35837f605884b5fad2aa95c152760a539f3b91b15eb8f72178156f089a3294a3eeae970c02f4b00a2cb2927cb70ecf625b96b2935e1875d3dfc263c34d2ff66460c3e6275b57736bfe16da43651997d0fd284bed4c33efbff9419d73ddb485b68a7e09dbb04c4892dfdc16b697d06ce0b6f87691e6eb0b13b46df5126329b7bad5a6320a334c6c7f6446b178be18b54bc35cc403311c50b00dc8add85f14ab939ecc68da7dfbd7b66425ca25c5019b962db6b14db6886dee80806f0acef63fce7d0536f57b6e04fc77c79d3662f1294cbe9da8831b205201dcf67d6dd3c88d95f382c2e09f587f1b55ba1808f414a8f78107414086fbb055a8d93ab02ba8b7a1db5eaa43ee9c243162bdb7c02830c759cd245c1c880bbfa0ce4fb9810117d2adddd63c487f15c38c1196cc524702670cc137abfdbbc87b26048563eff549a7427584dcc3c3eec037559e0a947519cfb25dd6aa75c92dda0b73915bf790f84468ddc4218762e33c5a9d3c7a8a32d38cdab64a63aacb9fde93845d971cc16524ee7a587e569f6d110ed8c3e938e0e4e1b6000ab1d7831a6c16eb8788fe184f0cba1b50ec011587863c2a6f115ea962afe934cffbf9990f287a10fe943994a1121e6c05c9481d7ffc46892e2ab8499b05a92c89f0ce71b6f24d4649cd15a077ca5164cd3206be90cb948f5aaca055adce256bafaacc11b2a5421bec794826a8cf11835dab9ce60ac081d928c6168749c2d80a7271a34c805cf978be044f592e8fa5b1527bbf226cacd187a794efe43e62557f76cfa75a0fd2ee7d7b6b152846606852987d9f14ed1667d90c45cd18ed2c53a4a12096c", @nested={0xc, 0x129, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @fd=r2}]}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000000) 1.063303666s ago: executing program 2 (id=4566): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}}, 0x40880) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x676, 0x2022, 0x0) read$alg(r1, &(0x7f0000000000)=""/24, 0x18) syz_emit_ethernet(0xffffffffffffff17, 0x0, 0x0) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001480)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x160, 0x3c8, 0xffffffff, 0x280, 0x160, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f00000001c0), {[{{@ip={@private=0xa010100, @broadcast, 0xff000000, 0xffffff00, 'wlan0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x2, 0x1, 0x1}, 0x0, 0x128, 0x160, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv4=@multicast2, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@loopback, [0xff, 0xffffff00, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff], 0x4d6c659e, 0xb, 0x6c, 0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x120, 0x2020}, 0x80, 0x61}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x5, @remote, @broadcast, @port=0x4e20, @gre_key=0xf}}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'bond0\x00', 'veth0\x00', {0xff}, {}, 0xa, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="620b1078ee7f", 0x1000, 0x7, [0xb, 0x29, 0x2, 0x14, 0xa, 0x3b, 0xd, 0x0, 0x9, 0x1a, 0x2c, 0x9, 0x10, 0x1e, 0x3e, 0x13], 0x0, 0x1400000, 0x6}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x6, 0x2, 0x4, 0x5, 0x2], 0x0, 0x7e42ec1e22994048}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv6=@mcast2, @gre_key=0xfbff, @port=0x4e23}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x402, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0xb619, '.\x00'}}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r4, r0, 0x47dc, 0x5b, &(0x7f0000000240)="e71bfc5ed7f2183fce8471ecc8a855612d12d4af1086f290b8902098481cbf637f93df59b14a8299e330a5c1277714df1a8a3dc5c078fac5ed9690240dd73adc70f664fd82b16bd95fe29f64a8933cdf8fe2fb33aa19e8e0763964", 0x7f, 0x2, 0x0, 0x8, 0x4, 0x2, 0x8ef, 'syz1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0xfa, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x30, 0x40, 0x2, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) 1.027283313s ago: executing program 3 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000240)=""/122, 0x7a, 0x0, &(0x7f00000003c0)=""/133, 0x85}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r4, 0x0, 0x0, 0x1fb) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083dccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x48, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040009000000000000000003000000000300000004000000020000000500000000000011050000000600000004000000000000010000000078004a0400002e00"], &(0x7f0000000c80)=""/223, 0x54, 0xdf, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1b, 0x17, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0xeb, &(0x7f0000000b00)=""/235, 0x40f00, 0x1, '\x00', r5, @fallback=0x29, r7, 0x8, &(0x7f0000000dc0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xa, 0x8001, 0xffffffea}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[r6, r4], 0x0, 0x10, 0xe}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) tee(r3, r8, 0xf, 0x8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r6, 0xeb190000) (async) epoll_pwait(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000200)={[0xff]}, 0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(aegis128))\x00'}, 0x58) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000fc0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040824}, 0x40800) close(r1) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec0000001f0001"], 0xec}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aeb5a80b3d9c0b87fb9b9afa68f7b5a2c2f31e88577281f1acf3c9d7431a6f2b2bc89674e945b548beef440450c0edcc7234582abee1ee5c561b0e6ab88e33d2bd4f92a70a25316ebbbed0b332403da62fdccbd853809de1abd748791231ca450030624b2cc2d8f774f0977ff644318761dbddbe93fe479d5c59c86208c4c53"], 0x7c}}, 0x0) 1.011682969s ago: executing program 0 (id=4568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000440)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d2088c4c8622ed0599136ca096ee089adbde87b8b86001e649", 0x0, 0x43, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="851000000400000018120000", @ANYRES16, @ANYRES64=r0, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="5ff6e2a7143a00830a30265be7f55cef318dac20653aa3f929b86f7501d35563330ab9de5023fc3a06887c79288e2f32c0268cca65ef99023db9b7f4780fa1d0e1220fc84803194f0bdc7534ddd185d6961f02b9337bae6c5e19ab0f892711c5c12746dbb33f3a013ccc"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe07, 0x0, 0x0, 0x10, 0xe0}, 0x94) 887.113853ms ago: executing program 5 (id=4569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0dfcdfc4004cdb70466518907efd04373a0e64e30bbd8f6d482f0", 0x45) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f00000000c0)={0x0, 0x3ff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="55f8a715ca3b5f3d334f4b011caf8680e64184e2627f76b2a2e10aea63128af2e080b49047b7914fba207b7d81fb4803c5ad4f5eb61e67ffe978429510c5", @ANYRES16=r14, @ANYBLOB="110a28bd7000fddbdf250900000008000300", @ANYRES32=r15], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x24008089) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x10000, @local, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="1e9384179ae6c1b0705ffa341cd98a7b1ae4ab416fb36fc96fefb753f881debb43d7c5ada8547488664aaca4c37cbfb645bd8ef20721e59f7290afbe354e46112228dd21809edd40", 0x48}, {&(0x7f0000000500)="f2ad7e7b8d604c1a6c40a71ca11502a64f45b8d8d37da5b3328836032698bca4594e4595d690abd0a7aa0daee0ec64d6bbce14a5c67cb5c1ddc8510f01f4520e3e928db58f5e4e15dc5901ff238ca197bb5e10a50ea39a715a200698947de7d1f210b1b665d2a1a7ebe5e2883c95d0bee73cc23a593112aadabd4a178cc8446d0b61192e46cca0bcd50de3ffb5f2d7823a6cf4d9e8a0c8b35f2a", 0x9a}], 0x2, &(0x7f0000000840)=[@rthdrdstopts={{0x90, 0x29, 0x37, {0x73, 0xe, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0xfffffff7}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xfc}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x7, 0x6, [0x10, 0x81, 0x1, 0x5, 0x9, 0x1, 0x7, 0x80000001, 0x7]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr={{0x18, 0x29, 0x39, {0x36, 0x0, 0x0, 0x4}}}, @hopopts={{0x80, 0x29, 0x36, {0x32, 0xc, '\x00', [@generic={0x8, 0x26, "85f256432dbccabb645223ac88c2bb4c191d52621312d7f1e76d950a19d0d78719f334eb5ae0"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xa47}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffa}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3a, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x18, {0x0, 0x4, 0xf8, 0x5f17, [0x0, 0x69]}}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x2b, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc9}, @pad1, @generic={0x99, 0x4a, "82161248e43919c71ebfa48ae800f8bc6553afca25d7faff867db7ab56c6a4b78f0a13ca8702072b421252bbb8f1c3e95bc91c949522d4e9c113e979ee6fac1f9b2179f7d4e3b162811c"}, @jumbo]}}}], 0x248}}], 0x1, 0x0) 885.34525ms ago: executing program 4 (id=4570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) listen(r2, 0x1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0xf, 0x63, [@remote, @broadcast, @private=0xa010100]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 875.595411ms ago: executing program 0 (id=4571): epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb405, 0x30, 0x57ec, 0x200}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b1989f8be8cefc022b105cee7b531644933df114154d932fa0c81dcdcbabb2053230611cd3819d", @ANYRES16=r2, @ANYBLOB="0d0304000000fdffffff130000000c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001000010001000000fddbdf25fe880000000000000000000000000001e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000012010000000000000600000080000000ffff00000000000031250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b000000000000000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 790.122475ms ago: executing program 3 (id=4572): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="344084f5b20d6190d6d2533538a0357c29157aa29089118efe3d", 0x1a) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {0x0, 0x0, 0x2}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) 699.838991ms ago: executing program 4 (id=4573): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x16}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x10) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 286.322307ms ago: executing program 5 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x17}]}, 0x1c}, 0x1, 0x0, 0x1500000000000000, 0x40040}, 0x40000) 284.412209ms ago: executing program 0 (id=4575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x94, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x41145}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_PORT_SELF={0x85, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '-&#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "543624e3769f1463ccc092eafe849476"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000006f5c000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000000040)=""/45}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000000)='-,^-\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x1]}, {0x872, 0xf, 0x7f, 0x2}}, 0x8001, &(0x7f0000000180), &(0x7f00000001c0)=0x200}) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4010, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r3, r4}, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffe6f, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 284.213318ms ago: executing program 5 (id=4576): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000040)=0x2c) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000000c0)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x10, 0x1000}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x2}, 0x4) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 279.957044ms ago: executing program 0 (id=4577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x188, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x188}, 0x1, 0x0, 0x0, 0x48c0}, 0x20004000) 279.744212ms ago: executing program 3 (id=4578): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x3, 0x8, 0xfffffffd, {0x4d, 0x2, 0xf, 0xa6b, 0x5}, {0xff, 0x0, 0x2, 0x9, 0x6, 0x3ff}, 0x8001, 0x2, 0x3}}]}]}}]}, 0x74}}, 0x0) (async, rerun: 32) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r6, &(0x7f0000000680)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0xfffffffffffffe61) (async, rerun: 32) write$tun(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="000000f5645a2e5232575fdc4cf200000000000000000000000000000000000000000000ffff0a0101024e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000690780003"], 0x40) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, 0x0, &(0x7f0000000300)=0x60) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000140)=ANY=[@ANYRESHEX=r8, @ANYRES32=r7, @ANYRESHEX=r1, @ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 247.402957ms ago: executing program 0 (id=4579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x401}], 0x1c) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x0, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 188.654609ms ago: executing program 5 (id=4580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x0, @remote}, 0x4, {0x2, 0x4e21, @broadcast}, 'ip6tnl0\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000100000000000000000200000634000780080001400000000008000240fffffffd080001fdfbdcf8213d5fe77ed02b402f9c5f400000000108000240000000040800014000000003080002400000000024000780080002400000cea10800024000000007080001400000000808000240000000050900010073797a3100000000080005400000000308000540000000030900010073797a31b85c00000c00024000000000000000060900010073797a3000004800"], 0xac}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) 59.48678ms ago: executing program 2 (id=4581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000001c0)={0xac000, 0xfffffffffffffffb, 0x4, 0x80000000, 0x7f, 0x566c}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0000000000080028"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) 51.145183ms ago: executing program 4 (id=4582): syz_emit_ethernet(0x137, &(0x7f00000001c0)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x30, 0x4, 0x2, 0x6, 0x129, 0x67, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@rr={0x7, 0x23, 0x53, [@multicast2, @multicast2, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0x1f, 0x4b, [@remote, @multicast2, @multicast1, @loopback, @multicast1, @private=0xa010102, @loopback]}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x11, "25283c79d61ce8efe42e1611674cb4"}, {0x2, 0x2}, {0x1, 0xa, "323d863198759377"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x0, [{@remote, 0x4}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xd, "498a939fc63b8192da2189"}, {0x7, 0x8, "3b3e64792de6"}, {0x1, 0xb, "5c1b899dad26a82a96"}, {0x6, 0xb, "016c36a48c658f5b9b"}]}, @noop, @end, @generic={0x83, 0x2}]}}, {0x11, 0x5, 0x0, @rand_addr=0x64010100, "d78936f8dada21329797edfd44edb65b3fbecdb74420c5b00967707233fe25a5cfc2b110280788fdcbcf29bd816f946d182b9ddc0b0f4878391b67442d5040a2d13278350744a24c4ad235a6c789a3fdd4a804fb1ffef62b12a9b465456229378b"}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d33", 0x29}, {&(0x7f0000000380)='\vu!', 0x3}], 0x2}, 0x30008b08) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000003c0)=""/13, &(0x7f0000000540)=0xd) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000280)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r10, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x4, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) recvmmsg(r10, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000100000000000000300100000c000180080002006c6f000008000500"], 0x28}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r3) sendmsg$nl_generic(r8, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000100000000000000300100000c00018008000100010000000800050011223344"], 0x28}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000a40)={{'\x00', 0x1}, {0xffff}, 0x98, 0x0, 0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, &(0x7f0000000880)={0x2, 0xb2, {0x1, 0xc, 0x54, "a03c35029fd554268fe37e4c5af8041642ac447718620408affdb3ede49965ff49de2a6a499eb78464ccec7423e95aa2a31aa94ad67cbf50a3a182e5721d7a1192de62a2e984de3a9f97845e3a038c584a578bf2", 0x51, "7a148f8953bce1c6d944631ddbfc93c9535b8e3dcd784b12d9fd7cc4955d386be2bc2f6f473add114329a7ead360a0efd8828535d92511f8eb216e5cb449d8488018f3746c26da00f50e4877e6068be7c0"}}, 0xbe}) sendmsg$nl_generic(r8, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0, 0x28}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 0s ago: executing program 0 (id=4583): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000023c0)={&(0x7f0000002340)=[{0x2, 0x0, 0x4724, 0x5, 0xdb, 0x2, 0x8, 0x2}, {0x1, 0x0, 0x8, 0x1, 0xa, 0x7, 0x8, 0x9549}], 0x2, 0x38, 0x1, 0xcc}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f00000025c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000005c0)={0x0, 0xcd, 0x81}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000009c0)={{r3}, r5, 0x4, @unused=[0x25d, 0x1, 0x1ff, 0x401], @devid=r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}]}], {0x14}}, 0xa8}}, 0x40001d0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r9, @ANYBLOB="0800054030c04a6dce39e8dbd93827a74d8e4ce7aad6f4326aa6dbb55de8893e835721210705a43a7f2dff821cdf66bc6b478975525eb7ca2efea23f90739cc54640e4dc2972a98a000526d96405686aa1d2", @ANYRES32=r9, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2404d888}, 0x240408d4) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f5900fffe8000000000000000000000000000aaff0200000000000000000000000000013c"], 0x0) kernel console output (not intermixed with test programs): ace with an up link [ 521.707007][T18637] hsr_slave_0: entered promiscuous mode [ 521.716513][T18637] hsr_slave_1: entered promiscuous mode [ 521.731126][T18637] debugfs: 'hsr0' already exists in 'hsr' [ 521.742611][T18637] Cannot create hsr debugfs directory [ 521.752648][T12028] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.765127][T18445] veth1_macvtap: entered promiscuous mode [ 521.786190][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.861680][T15160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.899760][T12028] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.915019][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.241143][T15160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.359283][T15165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.368180][T15165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.377049][T15165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.445418][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 522.507810][T18789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3142'. [ 522.554836][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.612782][T15160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.702585][T15161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.710513][T15161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.847905][T18793] bond12 (unregistering): Released all slaves [ 522.919947][T15161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.927834][T15161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.936625][T18637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.964074][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.989589][T18637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 523.002636][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.017792][T18637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.030554][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.042466][T18637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.057235][T18797] net_ratelimit: 1708 callbacks suppressed [ 523.057252][T18797] netlink: zone id is out of range [ 523.073250][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.080872][ T5628] Bluetooth: hci1: command tx timeout [ 523.093732][T18797] netlink: zone id is out of range [ 523.099445][T18797] netlink: zone id is out of range [ 523.707726][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 523.725157][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 523.751035][T18823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.070226][T15160] bridge_slave_1: left allmulticast mode [ 524.092875][T15160] bridge_slave_1: left promiscuous mode [ 524.130254][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.203814][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 524.215294][T15160] bridge_slave_0: left allmulticast mode [ 524.246373][T15160] bridge_slave_0: left promiscuous mode [ 524.263653][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.266305][T18847] netlink: 'syz.0.3155': attribute type 8 has an invalid length. [ 524.278510][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 524.299837][T18855] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 524.525127][T18866] openvswitch: netlink: Missing valid actions attribute. [ 524.533418][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.578325][T18868] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3156'. [ 524.816352][T15160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.835055][T15160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.845713][T15160] bond0 (unregistering): Released all slaves [ 524.867130][T18847] veth1_to_team: entered promiscuous mode [ 524.874351][T18847] gretap0: entered promiscuous mode [ 524.880874][T18847] veth1_to_team: left promiscuous mode [ 524.899777][T18876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'. [ 524.908892][T18847] gretap0: left promiscuous mode [ 524.922491][T18855] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 524.923175][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 524.943460][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 524.952757][T18845] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 524.976597][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 524.989372][T18637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.137474][T18637] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.155032][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.162339][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.171862][ T5628] Bluetooth: hci1: command tx timeout [ 525.284287][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.291511][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.706343][T18899] netlink: 'syz.0.3163': attribute type 13 has an invalid length. [ 526.377132][T18923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3166'. [ 526.507446][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 526.519628][T18637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.097951][T18920] syzkaller1: entered promiscuous mode [ 527.103514][T18920] syzkaller1: entered allmulticast mode [ 528.346082][T18988] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 528.358233][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 528.662906][T18637] veth0_vlan: entered promiscuous mode [ 528.680602][T18637] veth1_vlan: entered promiscuous mode [ 528.731870][T18637] veth0_macvtap: entered promiscuous mode [ 528.745574][T18637] veth1_macvtap: entered promiscuous mode [ 528.776852][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 528.794527][T18637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.808234][T18637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.897551][T15158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.207751][T15158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.469002][T15160] hsr_slave_0: left promiscuous mode [ 529.522367][T15160] hsr_slave_1: left promiscuous mode [ 529.546435][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.573567][T15160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.641094][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.681985][T15160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.808740][T15160] veth1_macvtap: left promiscuous mode [ 529.825751][T15160] veth0_macvtap: left promiscuous mode [ 529.833142][T15160] veth1_vlan: left promiscuous mode [ 529.839291][T15160] veth0_vlan: left promiscuous mode [ 530.232390][T15160] team0 (unregistering): Port device team_slave_1 removed [ 530.254887][T15160] team0 (unregistering): Port device team_slave_0 removed [ 530.399605][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 530.416437][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.436777][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.608267][T15165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.616170][T15165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.700757][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.716088][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.736605][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.778335][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 531.788881][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.800979][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 531.808528][T19100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'. [ 531.819152][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.829417][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 531.878740][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 531.997030][T19103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'. [ 532.454820][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 300 seconds [ 532.465949][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 300 seconds [ 532.477991][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 300 seconds [ 532.489220][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 300 seconds [ 532.528158][ T5614] bridge0: port 4(syz_tun) entered disabled state [ 532.718287][ T5614] syz_tun (unregistering): left promiscuous mode [ 532.724812][ T5614] bridge0: port 4(syz_tun) entered disabled state [ 533.476099][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 533.493582][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 533.503859][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 533.891950][ T5628] Bluetooth: hci5: command tx timeout [ 534.272050][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.289287][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.297041][T19098] bridge_slave_0: entered allmulticast mode [ 534.304915][T19098] bridge_slave_0: entered promiscuous mode [ 534.314815][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.323834][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.331656][T19098] bridge_slave_1: entered allmulticast mode [ 534.340419][T19098] bridge_slave_1: entered promiscuous mode [ 534.422441][T19098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.501160][T19098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.597415][T19098] team0: Port device team_slave_0 added [ 534.606204][T19098] team0: Port device team_slave_1 added [ 534.716801][T19098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.723827][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.761677][T19098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.774941][T19098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.781943][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.916774][T19098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.234226][T19098] hsr_slave_0: entered promiscuous mode [ 535.242804][T19098] hsr_slave_1: entered promiscuous mode [ 535.753468][T19253] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3262'. [ 535.957619][ T5628] Bluetooth: hci5: command tx timeout [ 535.994238][T19098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.005198][T19098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 536.015416][T19098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.285445][ T7352] batadv1: left promiscuous mode [ 536.388225][T19098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.398973][T19098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 536.410127][T19098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.432462][T19281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3274'. [ 536.462398][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 536.656295][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3275'. [ 536.690642][T19291] macsec1: entered promiscuous mode [ 536.934225][T19303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3280'. [ 536.948737][T19303] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3280'. [ 537.042302][T19299] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 537.053804][T19299] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 537.062332][T19299] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 537.178732][T19098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.210287][T19098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 537.224857][T19098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.251113][T19314] dvmrp8: entered allmulticast mode [ 537.256591][T19316] macvlan0: entered promiscuous mode [ 537.262105][T19316] netlink: 'syz.3.3283': attribute type 1 has an invalid length. [ 537.269938][T19316] netlink: 'syz.3.3283': attribute type 2 has an invalid length. [ 537.278486][T19307] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3278'. [ 537.297546][T19316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.574752][T19327] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 537.582063][T19327] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3289'. [ 537.707001][T19098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.732250][T19098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 537.748767][T19098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.824309][T19330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.010131][T19342] geneve0: entered promiscuous mode [ 538.021337][T19342] netlink: 'syz.5.3291': attribute type 2 has an invalid length. [ 538.037190][ T5628] Bluetooth: hci5: command tx timeout [ 538.047019][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3291'. [ 538.157127][T19352] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3296'. [ 538.277091][T19352] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 538.332750][T19359] netlink: 'syz.5.3298': attribute type 12 has an invalid length. [ 538.373016][T19352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.499496][T19357] IPVS: Error connecting to the multicast addr [ 538.762161][T19374] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 538.778390][T19374] NCSI netlink: No device for ifindex 0 [ 538.858696][T19375] bond0: (slave bond_slave_1): Releasing backup interface [ 538.909711][T19377] syzkaller0: entered promiscuous mode [ 538.915734][T19377] syzkaller0: entered allmulticast mode [ 539.801824][T19377] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 539.929842][T19098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.944033][T19098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.952951][T19098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.964544][T19098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.973628][T19098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.984272][T19098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.008968][T19098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.043991][T19098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.118870][ T5628] Bluetooth: hci5: command tx timeout [ 540.244608][T19098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.312523][T19098] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.348482][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.355698][T12028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.370955][T15161] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.378243][T15161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.963212][T19426] netlink: 'syz.3.3316': attribute type 4 has an invalid length. [ 541.428784][T19098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.525616][T19098] veth0_vlan: entered promiscuous mode [ 541.540735][T19098] veth1_vlan: entered promiscuous mode [ 541.683962][T19098] veth0_macvtap: entered promiscuous mode [ 541.694728][T19098] veth1_macvtap: entered promiscuous mode [ 541.721741][T19098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.747702][T19098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.820484][T12028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.859410][T12028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.027743][T12028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.070863][T12028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.183394][T19459] __nla_validate_parse: 8 callbacks suppressed [ 542.183416][T19459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3324'. [ 542.329888][T15158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.390844][T15158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.440830][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 542.508114][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.516023][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.637416][T19472] bond2 (unregistering): Released all slaves [ 542.745514][T19479] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3327'. [ 543.047494][T19498] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 543.055160][T19498] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 543.063027][T19488] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.612509][T19506] netlink: 'syz.0.3330': attribute type 6 has an invalid length. [ 543.746742][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.770946][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.779337][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.787342][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.795091][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.005098][T19517] xt_hashlimit: size too large, truncated to 1048576 [ 544.111001][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'. [ 544.629191][T19539] FAULT_INJECTION: forcing a failure. [ 544.629191][T19539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.642833][T19539] CPU: 1 UID: 0 PID: 19539 Comm: syz.4.3339 Not tainted syzkaller #0 PREEMPT(full) [ 544.642861][T19539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.642873][T19539] Call Trace: [ 544.642882][T19539] [ 544.642891][T19539] dump_stack_lvl+0xe8/0x150 [ 544.642928][T19539] should_fail_ex+0x40c/0x560 [ 544.642958][T19539] _copy_from_user+0x2d/0xb0 [ 544.642989][T19539] do_ipv6_setsockopt+0x249/0x3180 [ 544.643159][T19539] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 544.643229][T19539] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 544.643253][T19539] ? get_pid_task+0x20/0x1f0 [ 544.643309][T19539] ? __lock_acquire+0x683/0x2cf0 [ 544.643359][T19539] ? aa_sk_perm+0x6d5/0x900 [ 544.643389][T19539] ? __fget_files+0x2a/0x420 [ 544.643422][T19539] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.643453][T19539] ? __fget_files+0x2a/0x420 [ 544.643477][T19539] ? aa_sock_opt_perm+0xff/0x1a0 [ 544.643512][T19539] ipv6_setsockopt+0x59/0x170 [ 544.643535][T19539] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 544.643604][T19539] do_sock_setsockopt+0x17c/0x1b0 [ 544.643632][T19539] __x64_sys_setsockopt+0x13d/0x1b0 [ 544.643657][T19539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.643682][T19539] do_syscall_64+0x174/0x580 [ 544.643715][T19539] ? trace_irq_disable+0x3b/0x140 [ 544.643742][T19539] ? clear_bhb_loop+0x70/0xc0 [ 544.643769][T19539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.643790][T19539] RIP: 0033:0x7ffabeb9e0d9 [ 544.643811][T19539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.643839][T19539] RSP: 002b:00007ffabfb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.643862][T19539] RAX: ffffffffffffffda RBX: 00007ffabee25fa0 RCX: 00007ffabeb9e0d9 [ 544.643878][T19539] RDX: 000000000000004a RSI: 0000000000000029 RDI: 0000000000000003 [ 544.643890][T19539] RBP: 00007ffabfb42090 R08: 0000000000000004 R09: 0000000000000000 [ 544.643903][T19539] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 544.643916][T19539] R13: 00007ffabee26038 R14: 00007ffabee25fa0 R15: 00007ffd79561b68 [ 544.643950][T19539] [ 544.939912][ T5615] syz_tun (unregistering): left allmulticast mode [ 545.302665][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3346'. [ 545.472506][T19562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.916188][T19589] FAULT_INJECTION: forcing a failure. [ 545.916188][T19589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.934059][T19589] CPU: 0 UID: 0 PID: 19589 Comm: syz.5.3351 Not tainted syzkaller #0 PREEMPT(full) [ 545.934089][T19589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.934102][T19589] Call Trace: [ 545.934110][T19589] [ 545.934129][T19589] dump_stack_lvl+0xe8/0x150 [ 545.934165][T19589] should_fail_ex+0x40c/0x560 [ 545.934192][T19589] _copy_to_user+0x31/0xb0 [ 545.934223][T19589] simple_read_from_buffer+0xe1/0x170 [ 545.934258][T19589] proc_fail_nth_read+0x1bb/0x230 [ 545.934293][T19589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.934326][T19589] ? rw_verify_area+0x24a/0x4c0 [ 545.934359][T19589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.934386][T19589] vfs_read+0x213/0xa80 [ 545.934420][T19589] ? __pfx___mutex_lock+0x10/0x10 [ 545.934454][T19589] ? __pfx_vfs_read+0x10/0x10 [ 545.934486][T19589] ? __fget_files+0x2a/0x420 [ 545.934518][T19589] ? __fget_files+0x3a2/0x420 [ 545.934543][T19589] ? __fget_files+0x2a/0x420 [ 545.934579][T19589] ksys_read+0x150/0x270 [ 545.934613][T19589] ? __pfx_ksys_read+0x10/0x10 [ 545.934653][T19589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.934677][T19589] do_syscall_64+0x174/0x580 [ 545.934707][T19589] ? trace_irq_disable+0x3b/0x140 [ 545.934733][T19589] ? clear_bhb_loop+0x70/0xc0 [ 545.934759][T19589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.934780][T19589] RIP: 0033:0x7fc9e695e90e [ 545.934800][T19589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.934819][T19589] RSP: 002b:00007fc9e77d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.934840][T19589] RAX: ffffffffffffffda RBX: 00007fc9e77d76c0 RCX: 00007fc9e695e90e [ 545.934856][T19589] RDX: 000000000000000f RSI: 00007fc9e77d70a0 RDI: 0000000000000004 [ 545.934869][T19589] RBP: 00007fc9e77d7090 R08: 0000000000000000 R09: 0000000000000000 [ 545.934881][T19589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.934893][T19589] R13: 00007fc9e6c26038 R14: 00007fc9e6c25fa0 R15: 00007ffccf341548 [ 545.934928][T19589] [ 546.264483][ T5628] Bluetooth: hci2: command tx timeout [ 546.511264][T19597] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3353'. [ 546.818945][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3354'. [ 546.975162][T19607] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 547.415643][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 547.457556][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3357'. [ 547.466592][T19628] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 547.575432][T19635] netlink: 'syz.4.3358': attribute type 10 has an invalid length. [ 547.639272][T19635] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3358'. [ 547.679685][T19637] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3358'. [ 547.723763][T19635] bond0: entered promiscuous mode [ 547.781765][T19635] bond_slave_0: entered promiscuous mode [ 547.787981][T19635] bridge0: port 3(bond0) entered blocking state [ 547.805810][T19635] bridge0: port 3(bond0) entered disabled state [ 547.848706][T19635] bond0: entered allmulticast mode [ 547.853913][T19635] bond_slave_0: entered allmulticast mode [ 547.863133][T19635] bridge0: port 3(bond0) entered blocking state [ 547.869589][T19635] bridge0: port 3(bond0) entered forwarding state [ 547.888682][T19630] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3358'. [ 547.968976][T19637] bridge0: port 3(bond0) entered disabled state [ 547.975526][T19637] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.982907][T19637] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.277085][ T5628] Bluetooth: hci2: command tx timeout [ 548.288689][T19652] C: renamed from veth1_to_team [ 548.343215][T19652] netlink: 'syz.3.3361': attribute type 2 has an invalid length. [ 548.351044][T19652] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3361'. [ 548.360118][T19652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 548.402261][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 548.492159][T19510] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.499638][T19510] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.506913][T19510] bridge_slave_0: entered allmulticast mode [ 548.515091][T19510] bridge_slave_0: entered promiscuous mode [ 548.529776][T19510] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.537079][T19510] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.544345][T19510] bridge_slave_1: entered allmulticast mode [ 548.552583][T19510] bridge_slave_1: entered promiscuous mode [ 548.718382][T19510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.731380][T19510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.784219][T19510] team0: Port device team_slave_0 added [ 548.865066][T19510] team0: Port device team_slave_1 added [ 548.903363][T19510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.924372][T19665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.946037][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.998437][ T7352] IPVS: starting estimator thread 0... [ 549.002438][T19510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.016666][T19510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.048884][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.074888][T19510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.242563][T19510] hsr_slave_0: entered promiscuous mode [ 549.282429][T19510] hsr_slave_1: entered promiscuous mode [ 549.299491][T19510] debugfs: 'hsr0' already exists in 'hsr' [ 549.305300][T19510] Cannot create hsr debugfs directory [ 549.377673][T19670] IPVS: using max 31 ests per chain, 74400 per kthread [ 549.401714][T19676] netlink: 'syz.5.3367': attribute type 15 has an invalid length. [ 549.409616][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 549.607367][T15161] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.629558][T15161] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.648230][T15161] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.676709][T15161] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.940830][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3368'. [ 550.357034][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 550.364986][ T5628] Bluetooth: hci2: command tx timeout [ 551.043804][T19707] atomic_op ffff88802a5201e0 conn xmit_atomic 0000000000000000 [ 551.084689][T19707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 551.200057][T19710] veth3: entered allmulticast mode [ 551.325268][T19718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.614509][T19716] ip6gre1: entered promiscuous mode [ 551.621337][T19716] ip6gre1: entered allmulticast mode [ 551.887085][T19510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 551.943722][T19733] netlink: 'syz.5.3382': attribute type 10 has an invalid length. [ 551.995901][T19735] xt_HMARK: spi-set and port-set can't be combined [ 552.012651][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.029350][T19733] team0: Device veth1_virt_wifi failed to register rx_handler [ 552.045642][T19510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.081733][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.098750][T19510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.119180][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.132242][T19510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.143931][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.292864][T19510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.361075][T19510] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.436913][ T5628] Bluetooth: hci2: command tx timeout [ 552.445694][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.452985][T15158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.477039][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.484302][T15158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.824730][T19754] netlink: 'syz.5.3385': attribute type 1 has an invalid length. [ 553.286335][T19510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.489794][T19510] veth0_vlan: entered promiscuous mode [ 553.508540][T19778] __nla_validate_parse: 3 callbacks suppressed [ 553.508559][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'. [ 553.540138][T19778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3391'. [ 553.545012][T19510] veth1_vlan: entered promiscuous mode [ 553.569097][T19778] geneve2: entered promiscuous mode [ 553.574349][T19778] geneve2: entered allmulticast mode [ 553.608544][T19510] veth0_macvtap: entered promiscuous mode [ 553.620540][T19510] veth1_macvtap: entered promiscuous mode [ 553.686250][T19510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.722056][T19510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.739659][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.820012][T15161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.832905][T19788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3394'. [ 553.869263][T12028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.940893][T12028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.950952][T12028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.015767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.025183][T15161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.029881][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3395'. [ 554.056100][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.068551][T15161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.093786][T12028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.103433][T12028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.112393][T15161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.229408][T19797] netlink: 'syz.2.3331': attribute type 3 has an invalid length. [ 554.279159][T19798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3397'. [ 554.334344][T19798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3397'. [ 554.570912][T19811] Bluetooth: MGMT ver 1.23 [ 554.686227][T19812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3400'. [ 554.781178][T19812] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.829000][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 554.837960][T19829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3404'. [ 554.849320][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 555.669782][T19870] netlink: 'syz.5.3412': attribute type 27 has an invalid length. [ 556.525602][T19916] v: renamed from dummy0 (while UP) [ 556.614177][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.688831][T19924] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 557.255641][T19946] veth1_virt_wifi: mtu greater than device maximum [ 557.465233][T19952] 8021q: VLANs not supported on vxcan1 [ 557.833802][T19972] netlink: 'syz.3.3439': attribute type 13 has an invalid length. [ 557.842331][T19972] netlink: 'syz.3.3439': attribute type 17 has an invalid length. [ 557.861846][T19972] gretap0: refused to change device tx_queue_len [ 557.921326][T19972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 558.069247][T19980] ip6tnl1: entered allmulticast mode [ 558.203171][T19987] bridge0: port 4(veth0) entered blocking state [ 558.237656][T19987] bridge0: port 4(veth0) entered disabled state [ 558.249450][T19987] veth0: entered allmulticast mode [ 558.256653][T19987] veth0: entered promiscuous mode [ 558.303218][T19991] sctp: [Deprecated]: syz.0.3445 (pid 19991) Use of int in max_burst socket option deprecated. [ 558.303218][T19991] Use struct sctp_assoc_value instead [ 558.756044][T20016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.806051][T20019] __nla_validate_parse: 4 callbacks suppressed [ 558.806091][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 559.029833][T20033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3456'. [ 559.078945][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3457'. [ 559.098277][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3457'. [ 559.109370][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3457'. [ 559.119061][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3457'. [ 559.169833][T20040] batman_adv: batadv0: Adding interface: dummy0 [ 559.176295][T20040] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.206649][T20040] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 559.318391][T20044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3461'. [ 559.776344][T20082] syzkaller1: entered promiscuous mode [ 559.781906][T20082] syzkaller1: entered allmulticast mode [ 559.806353][T20076] Can't find ip_set type has`:net,port [ 560.105217][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'. [ 560.156086][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'. [ 560.506876][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 561.092820][T20118] syzkaller0: entered promiscuous mode [ 561.118631][T20118] syzkaller0: entered allmulticast mode [ 561.296811][T20149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.304107][T20149] IPv6: NLM_F_CREATE should be set when creating new route [ 562.519374][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 330 seconds [ 562.531257][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 330 seconds [ 562.543295][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 330 seconds [ 562.554688][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 330 seconds [ 562.673825][T20149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.689371][T20149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.366804][T15161] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.423794][T20204] syzkaller1: entered promiscuous mode [ 563.452426][T20204] syzkaller1: entered allmulticast mode [ 563.888967][T15161] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.911261][T15161] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.237453][T20261] __nla_validate_parse: 6 callbacks suppressed [ 564.237476][T20261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3504'. [ 564.843407][T20279] netlink: 'syz.4.3510': attribute type 2 has an invalid length. [ 564.943711][T20285] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 564.953590][T20285] netlink: 'syz.2.3511': attribute type 6 has an invalid length. [ 564.962082][T20285] netlink: 'syz.2.3511': attribute type 3 has an invalid length. [ 565.009657][T20288] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 565.035460][T20288] netlink: 'syz.2.3511': attribute type 6 has an invalid length. [ 565.041971][T20286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3510'. [ 565.099576][T20288] netlink: 'syz.2.3511': attribute type 3 has an invalid length. [ 565.341332][T20300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.769227][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3521'. [ 565.861739][T20322] syz_tun: entered allmulticast mode [ 565.953097][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 565.990139][T20326] netlink: 'syz.0.3523': attribute type 20 has an invalid length. [ 566.002374][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 566.039452][T15161] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.068346][T15161] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.102605][T15161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.133686][T15161] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.244257][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3525'. [ 566.462349][T20339] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.470298][T20339] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.783400][T20339] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.810885][T20307] syz_tun: left allmulticast mode [ 567.264591][T20364] syzkaller0: entered promiscuous mode [ 567.306330][T20364] syzkaller0: entered allmulticast mode [ 567.482722][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3533'. [ 570.451352][ T4978] udevd[4978]: worker [5828] /devices/virtual/block/nbd1 timeout; kill it [ 570.460034][ T4978] udevd[4978]: seq 14336 '/devices/virtual/block/nbd1' killed [ 571.873785][T20432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3540'. [ 572.207604][T20447] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3545'. [ 572.283129][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3547'. [ 572.370753][T20456] x_tables: duplicate entry at hook 3 [ 572.488300][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 572.519064][T20464] netlink: 'syz.5.3550': attribute type 33 has an invalid length. [ 572.911607][T20482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3556'. [ 573.101071][T20488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3556'. [ 573.130034][T20491] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3558'. [ 573.213686][T20482] IPv6: NLM_F_CREATE should be specified when creating new route [ 573.476006][T20499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.663996][T20501] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3563'. [ 573.819099][T20504] netlink: 'syz.5.3564': attribute type 3 has an invalid length. [ 574.059543][T20520] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 574.067384][T20520] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3567'. [ 574.114036][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 574.431172][T20531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.001014][T20554] netlink: 'syz.2.3581': attribute type 30 has an invalid length. [ 575.076479][T20554] vxlan0: entered promiscuous mode [ 575.081691][T20554] vxlan0: entered allmulticast mode [ 575.107915][T15160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.147412][T15160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.185677][T15160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.218450][T20554] netlink: 'syz.2.3581': attribute type 30 has an invalid length. [ 575.253223][T20554] vxlan1: entered promiscuous mode [ 575.258428][T20554] vxlan1: entered allmulticast mode [ 575.287327][T20562] netlink: 'syz.0.3584': attribute type 30 has an invalid length. [ 575.296416][T20562] netlink: 'syz.0.3584': attribute type 6 has an invalid length. [ 575.304229][T20562] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.393099][T15162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.483269][T20571] syzkaller0: entered promiscuous mode [ 575.517792][T20571] syzkaller0: entered allmulticast mode [ 575.644370][T20580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.383233][T20605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.459930][T20605] bridge0: port 3(bond1) entered blocking state [ 576.466457][T20605] bridge0: port 3(bond1) entered disabled state [ 576.473210][T20605] bond1: entered allmulticast mode [ 576.481192][T20605] bond1: entered promiscuous mode [ 577.156989][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 577.181346][T20558] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 577.196222][T20558] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 577.446896][T20662] __nla_validate_parse: 6 callbacks suppressed [ 577.446913][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 577.597546][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 577.625855][T20665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.902713][T20558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.909182][T20558] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 577.923734][T20558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.929720][T20558] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 577.963354][T20558] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.970698][T20558] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 577.986216][T20558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.992198][T20558] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 578.243756][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3614'. [ 578.485103][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3620'. [ 578.498644][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3620'. [ 578.525125][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 578.538711][T20691] syzkaller0: entered promiscuous mode [ 578.544271][T20691] syzkaller0: entered allmulticast mode [ 579.042403][T20703] ip_tables: iptables: counters copy to user failed while replacing table [ 579.239186][T20712] dummy0: mtu less than device minimum [ 579.487455][T20723] ip_tables: iptables: counters copy to user failed while replacing table [ 579.997947][T20740] netlink: 'syz.5.3631': attribute type 13 has an invalid length. [ 580.010356][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3631'. [ 580.024393][T20740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3631'. [ 580.138507][T20740] bond0: (slave bond_slave_0): Releasing backup interface [ 580.300084][T20740] bond_slave_0: entered promiscuous mode [ 580.312227][T20740] bond_slave_0: entered allmulticast mode [ 580.320297][T20754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 580.374235][T20754] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3635'. [ 580.462700][T20757] xt_hashlimit: size too large, truncated to 1048576 [ 582.464033][T20830] veth1_macvtap: left promiscuous mode [ 582.469612][T20830] macsec0: entered allmulticast mode [ 582.488288][T20830] veth1_macvtap: entered promiscuous mode [ 582.494100][T20830] veth1_macvtap: entered allmulticast mode [ 582.546678][T20830] macsec0: left allmulticast mode [ 582.551797][T20830] veth1_macvtap: left allmulticast mode [ 582.578840][T20830] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 582.714133][T20837] __nla_validate_parse: 3 callbacks suppressed [ 582.714162][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3650'. [ 582.751987][T20837] vlan0: entered promiscuous mode [ 582.830875][T20839] netlink: 'syz.5.3652': attribute type 13 has an invalid length. [ 582.898500][T20839] netlink: 'syz.5.3652': attribute type 17 has an invalid length. [ 583.225592][T20839] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 583.637062][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.777853][T20866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3659'. [ 584.269695][T20876] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 584.318051][T20876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3664'. [ 584.687426][T15161] IPVS: starting estimator thread 0... [ 584.848726][T20907] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3669'. [ 585.098611][T20901] IPVS: using max 29 ests per chain, 69600 per kthread [ 585.551293][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3674'. [ 585.598252][T20927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.666226][T20931] netlink: 'syz.3.3676': attribute type 25 has an invalid length. [ 585.674213][T20931] netlink: 'syz.3.3676': attribute type 3 has an invalid length. [ 585.681980][T20931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3676'. [ 585.949572][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'. [ 585.958622][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'. [ 586.183395][T20950] netlink: 'syz.4.3684': attribute type 13 has an invalid length. [ 586.333042][T20959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3684'. [ 586.357283][T20960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3683'. [ 586.500645][T20964] netlink: 'syz.2.3685': attribute type 14 has an invalid length. [ 586.642031][T20974] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 586.840988][T20981] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 587.520685][T21018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 587.621245][T21021] xt_socket: unknown flags 0x4 [ 588.068501][T21037] FAULT_INJECTION: forcing a failure. [ 588.068501][T21037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.081660][T21037] CPU: 0 UID: 0 PID: 21037 Comm: syz.0.3699 Not tainted syzkaller #0 PREEMPT(full) [ 588.081688][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.081703][T21037] Call Trace: [ 588.081712][T21037] [ 588.081721][T21037] dump_stack_lvl+0xe8/0x150 [ 588.081758][T21037] should_fail_ex+0x40c/0x560 [ 588.081786][T21037] _copy_from_user+0x2d/0xb0 [ 588.081818][T21037] ___sys_sendmsg+0x1c6/0x360 [ 588.081842][T21037] ? __lock_acquire+0x683/0x2cf0 [ 588.081874][T21037] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.081937][T21037] ? __fget_files+0x2a/0x420 [ 588.081964][T21037] ? __fget_files+0x3a2/0x420 [ 588.082002][T21037] __x64_sys_sendmsg+0x1b1/0x290 [ 588.082029][T21037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.082073][T21037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.082098][T21037] do_syscall_64+0x174/0x580 [ 588.082129][T21037] ? trace_irq_disable+0x3b/0x140 [ 588.082156][T21037] ? clear_bhb_loop+0x70/0xc0 [ 588.082181][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.082203][T21037] RIP: 0033:0x7f9a57f9e0d9 [ 588.082224][T21037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.082242][T21037] RSP: 002b:00007f9a58eeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.082264][T21037] RAX: ffffffffffffffda RBX: 00007f9a58225fa0 RCX: 00007f9a57f9e0d9 [ 588.082280][T21037] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 588.082294][T21037] RBP: 00007f9a58eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 588.082307][T21037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.082320][T21037] R13: 00007f9a58226038 R14: 00007f9a58225fa0 R15: 00007ffee62feb08 [ 588.082361][T21037] [ 588.782829][T21061] __nla_validate_parse: 2 callbacks suppressed [ 588.782852][T21061] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3706'. [ 588.989682][T21068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3708'. [ 589.003825][T21070] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3709'. [ 589.063743][T21075] netlink: 'syz.4.3710': attribute type 1 has an invalid length. [ 589.123959][T21075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.382562][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 589.392996][T21090] tipc: Invalid UDP bearer configuration [ 589.393047][T21090] tipc: Enabling of bearer rejected, failed to enable media [ 589.890896][T15160] syzkaller0: tun_net_xmit 76 [ 589.899111][T15160] syzkaller0: tun_net_xmit 48 [ 589.910563][T21103] syzkaller0: create flow: hash 4284825181 index 2 [ 589.917553][T10495] syzkaller0: tun_net_xmit 76 [ 589.957953][T21101] syzkaller0: delete flow: hash 4284825181 index 2 [ 589.976953][T10495] syzkaller0: tun_net_xmit 76 [ 590.438055][T21120] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3721'. [ 590.457427][T21119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3723'. [ 590.592899][T21122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3726'. [ 590.678288][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 592.605464][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 360 seconds [ 592.617522][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 360 seconds [ 592.628732][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 360 seconds [ 592.640036][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 360 seconds [ 593.812907][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 593.870040][T21154] tunl0: Caught tx_queue_len zero misconfig [ 593.896702][T21161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3732'. [ 593.992399][T21165] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3733'. [ 594.262286][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3735'. [ 594.524726][T21195] gretap1: entered promiscuous mode [ 594.928509][T21210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3744'. [ 595.240052][T21233] syzkaller0: entered promiscuous mode [ 595.245798][T21233] syzkaller0: entered allmulticast mode [ 596.078210][T21262] netlink: 'syz.0.3756': attribute type 10 has an invalid length. [ 596.599142][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 596.943814][T21300] vlan0: entered allmulticast mode [ 596.949034][T21300] bond0: entered allmulticast mode [ 597.309389][T21306] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 598.095661][T21334] tc_dump_action: action bad kind [ 598.327834][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3770'. [ 598.472919][T21355] tipc: Started in network mode [ 598.477891][T21355] tipc: Node identity 1eba413badb3, cluster identity 4711 [ 598.485221][T21355] tipc: Enabled bearer , priority 0 [ 598.621030][T21355] syzkaller0: entered promiscuous mode [ 598.626681][T21355] syzkaller0: entered allmulticast mode [ 598.632990][T21355] tipc: Resetting bearer [ 598.657266][T21357] team0: Device xfrm0 is of different type [ 598.727620][T21363] netlink: 'syz.3.3774': attribute type 6 has an invalid length. [ 598.738006][T21363] netlink: 'syz.3.3774': attribute type 7 has an invalid length. [ 598.745804][T21363] netlink: 'syz.3.3774': attribute type 8 has an invalid length. [ 598.782797][T21365] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3773'. [ 598.993636][T21375] netlink: 'syz.0.3778': attribute type 3 has an invalid length. [ 599.097416][T21346] tipc: Resetting bearer [ 599.766902][T21412] sock: sock_timestamping_bind_phc: sock not bind to device [ 599.949420][T21421] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3790'. [ 600.327421][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 600.408528][T21431] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3792'. [ 603.191144][T21346] tipc: Disabling bearer [ 603.204580][T10902] tipc: Node number set to 3003728187 [ 603.237188][T21431] batman_adv: batadv0: Removing interface: dummy0 [ 603.691353][T21442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.719952][T15162] IPVS: starting estimator thread 0... [ 603.731023][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 603.741300][T21449] batman_adv: batadv0: Adding interface: vlan4 [ 603.747515][T21449] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.802564][T21449] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 603.816827][T21455] IPVS: using max 27 ests per chain, 64800 per kthread [ 604.053732][T21466] netlink: 'syz.4.3801': attribute type 5 has an invalid length. [ 604.382131][T21474] netlink: 'syz.5.3804': attribute type 2 has an invalid length. [ 604.399600][T21474] netlink: 'syz.5.3804': attribute type 2 has an invalid length. [ 604.577076][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 604.620375][T21479] team0: Port device team_slave_0 removed [ 604.683378][T21483] syzkaller1: entered promiscuous mode [ 604.688928][T21483] syzkaller1: entered allmulticast mode [ 604.974178][T21495] netlink: 'syz.3.3809': attribute type 3 has an invalid length. [ 604.992971][T21495] netlink: 'syz.3.3809': attribute type 13 has an invalid length. [ 605.015007][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3810'. [ 605.460913][T21516] bond_slave_0: entered promiscuous mode [ 605.476067][T21516] bond_slave_0: entered allmulticast mode [ 605.951824][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3820'. [ 606.137067][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 606.205266][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'. [ 606.326378][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3822'. [ 606.953762][T21569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.091467][T21573] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3829'. [ 607.320131][T21583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3831'. [ 607.376681][T21585] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 607.384207][T21587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3833'. [ 607.385157][T21586] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 607.401594][T21586] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 607.410082][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3834'. [ 607.419341][T21585] unsupported nla_type 216 [ 607.426243][T21586] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 607.434638][T21586] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 607.460131][T21586] netlink: 'syz.3.3835': attribute type 13 has an invalid length. [ 607.569009][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3836'. [ 607.613513][T21592] tc_dump_action: action bad kind [ 607.830344][T21605] openvswitch: netlink: IP tunnel dst address not specified [ 607.850898][T21596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.868613][T21602] bond2: (slave dummy0): making interface the new active one [ 607.877367][T21602] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 607.941142][T21606] vlan2: entered allmulticast mode [ 607.948502][T21606] bridge1: entered allmulticast mode [ 607.954231][T21596] : renamed from dummy0 (while UP) [ 608.025142][T21601] bridge1: port 1(erspan0) entered blocking state [ 608.057029][T21601] bridge1: port 1(erspan0) entered disabled state [ 608.063732][T21601] erspan0: entered allmulticast mode [ 608.071547][T21601] erspan0: entered promiscuous mode [ 608.225556][T21614] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 608.551432][T21636] openvswitch: netlink: Duplicate or invalid key (type 0). [ 608.558739][T21636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.236769][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 609.395362][T15160] tipc: Subscription rejected, illegal request [ 609.488040][T21680] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 609.715137][T21688] validate_nla: 61 callbacks suppressed [ 609.715161][T21688] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 609.808766][T21688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.865082][T21689] bond3: (slave veth9): Enslaving as an active interface with a down link [ 610.029653][T21703] openvswitch: netlink: Unknown key attributes 2 [ 610.087874][T21688] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.098817][T21688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.197551][T21688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.207638][T21688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.220275][T21688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.272744][T21688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.299095][T21688] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 610.312659][T21688] veth1_vlan: left promiscuous mode [ 610.322308][T21688] vlan0: left promiscuous mode [ 610.329962][T21688] veth1_vlan: entered promiscuous mode [ 610.341376][T21688] veth1_macvtap: left promiscuous mode [ 610.371645][T21688] veth0_macvtap: left promiscuous mode [ 610.379808][T21688] veth0_macvtap: entered promiscuous mode [ 610.387149][T21688] veth1_macvtap: entered promiscuous mode [ 610.398756][T21688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.407473][T21688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.416172][T21688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.426970][T21688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.436279][T21688] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 610.474221][T21690] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.515954][T21690] bond3: (slave batadv1): making interface the new active one [ 610.540418][T21690] batadv1: entered promiscuous mode [ 610.546277][T21690] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 610.561534][T12028] bridge0: port 4(veth0) entered blocking state [ 610.567997][T12028] bridge0: port 4(veth0) entered forwarding state [ 610.644373][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.651599][T12028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.663739][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.670962][T12028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.042136][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.077766][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.120435][T21732] __nla_validate_parse: 4 callbacks suppressed [ 611.120456][T21732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'. [ 611.166784][T15162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.206263][T21737] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 611.304155][T21747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3877'. [ 611.326513][T21746] IPVS: set_ctl: invalid protocol: 51 172.20.20.62:20001 [ 611.333715][ T29] audit: type=1800 audit(1786277390.143:6): pid=21748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3873" name="memory.events" dev="tmpfs" ino=869 res=0 errno=0 [ 611.434798][T21748] netlink: 'syz.4.3873': attribute type 30 has an invalid length. [ 611.470476][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3878'. [ 611.657387][T21747] syzkaller0: entered promiscuous mode [ 611.662976][T21747] syzkaller0: entered allmulticast mode [ 611.724118][T21747] tipc: Started in network mode [ 611.729764][T21747] tipc: Node identity dee501a84e65, cluster identity 4711 [ 611.749579][T21747] tipc: Enabled bearer , priority 0 [ 611.794533][T21761] x_tables: duplicate underflow at hook 3 [ 611.940276][T21769] x_tables: duplicate underflow at hook 4 [ 612.241620][T21778] openvswitch: netlink: Message has 1 unknown bytes. [ 612.248429][T21778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.287613][T21781] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 612.295468][T21781] netlink: 'syz.2.3887': attribute type 2 has an invalid length. [ 612.395217][T21781] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 612.670465][T21793] xt_hashlimit: size too large, truncated to 1048576 [ 612.804576][T21752] tipc: Resetting bearer [ 612.898192][T21752] tipc: Disabling bearer [ 613.014275][T10902] tipc: Node number set to 2424308136 [ 613.109269][T21810] netlink: 'syz.3.3896': attribute type 1 has an invalid length. [ 613.196276][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3896'. [ 613.273634][T21810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.355878][T21812] veth5: entered allmulticast mode [ 613.366904][T21812] bond3: (slave veth5): Enslaving as an active interface with a down link [ 613.412768][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 613.424078][T21817] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 613.431776][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 613.441628][T21818] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 613.448467][T21825] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 613.469768][T21810] bond3: (slave veth0_to_bond): making interface the new active one [ 613.481086][T21810] veth0_to_bond: entered promiscuous mode [ 613.487415][T21810] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 613.814243][T21841] syzkaller0: entered promiscuous mode [ 613.836989][T21841] syzkaller0: entered allmulticast mode [ 614.031801][T21851] netlink: 179624 bytes leftover after parsing attributes in process `syz.0.3908'. [ 614.804504][T21885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3917'. [ 614.823955][T21891] FAULT_INJECTION: forcing a failure. [ 614.823955][T21891] name failslab, interval 1, probability 0, space 0, times 0 [ 614.844423][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.5.3919 Not tainted syzkaller #0 PREEMPT(full) [ 614.844471][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.844492][T21891] Call Trace: [ 614.844507][T21891] [ 614.844523][T21891] dump_stack_lvl+0xe8/0x150 [ 614.844570][T21891] should_fail_ex+0x40c/0x560 [ 614.844601][T21891] should_failslab+0xa8/0x100 [ 614.844635][T21891] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 614.844662][T21891] ? skb_clone+0x212/0x3a0 [ 614.844776][T21891] ? skb_clone+0x212/0x3a0 [ 614.844808][T21891] skb_clone+0x212/0x3a0 [ 614.844836][T21891] __netlink_deliver_tap+0x413/0x860 [ 614.844875][T21891] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.844902][T21891] netlink_deliver_tap+0x19c/0x1b0 [ 614.844928][T21891] netlink_unicast+0x77f/0x940 [ 614.844963][T21891] netlink_sendmsg+0x813/0xb40 [ 614.844999][T21891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.845030][T21891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.845069][T21891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.845093][T21891] sock_sendmsg_nosec+0x13a/0x180 [ 614.845125][T21891] ____sys_sendmsg+0x54e/0x850 [ 614.845156][T21891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.845190][T21891] ? import_iovec+0x73/0xa0 [ 614.845222][T21891] ___sys_sendmsg+0x2a5/0x360 [ 614.845244][T21891] ? __lock_acquire+0x683/0x2cf0 [ 614.845278][T21891] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.845346][T21891] ? __fget_files+0x2a/0x420 [ 614.845373][T21891] ? __fget_files+0x3a2/0x420 [ 614.845410][T21891] __x64_sys_sendmsg+0x1b1/0x290 [ 614.845438][T21891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.845482][T21891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.845506][T21891] do_syscall_64+0x174/0x580 [ 614.845539][T21891] ? trace_irq_disable+0x3b/0x140 [ 614.845571][T21891] ? clear_bhb_loop+0x70/0xc0 [ 614.845598][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.845619][T21891] RIP: 0033:0x7fc9e699e0d9 [ 614.845640][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.845658][T21891] RSP: 002b:00007fc9e77d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.845680][T21891] RAX: ffffffffffffffda RBX: 00007fc9e6c25fa0 RCX: 00007fc9e699e0d9 [ 614.845695][T21891] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 614.845709][T21891] RBP: 00007fc9e77d7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.845722][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.845734][T21891] R13: 00007fc9e6c26038 R14: 00007fc9e6c25fa0 R15: 00007ffccf341548 [ 614.845770][T21891] [ 615.259474][T21898] netlink: 'syz.2.3920': attribute type 25 has an invalid length. [ 615.349995][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3920'. [ 615.358960][T21898] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 615.437617][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3926'. [ 615.449324][T21904] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 615.457148][T21904] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 615.471171][T21908] netlink: 'syz.3.3926': attribute type 1 has an invalid length. [ 615.489975][T21910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.513119][T21904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.706710][T21928] netlink: 'syz.2.3930': attribute type 1 has an invalid length. [ 615.764360][T21931] Dead loop on virtual device ip6_vti0 (net 687), fix it urgently! [ 615.797848][T21929] tunl0: Caught tx_queue_len zero misconfig [ 616.122331][T21954] FAULT_INJECTION: forcing a failure. [ 616.122331][T21954] name failslab, interval 1, probability 0, space 0, times 0 [ 616.170591][T21954] CPU: 1 UID: 0 PID: 21954 Comm: syz.3.3935 Not tainted syzkaller #0 PREEMPT(full) [ 616.170622][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.170635][T21954] Call Trace: [ 616.170644][T21954] [ 616.170653][T21954] dump_stack_lvl+0xe8/0x150 [ 616.170691][T21954] should_fail_ex+0x40c/0x560 [ 616.170721][T21954] should_failslab+0xa8/0x100 [ 616.170753][T21954] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 616.170782][T21954] ? local_lock_release+0x9c/0x160 [ 616.170818][T21954] ? __alloc_skb+0x1d7/0x7a0 [ 616.170834][T21954] ? __alloc_skb+0x1d7/0x7a0 [ 616.170862][T21954] __alloc_skb+0x1d7/0x7a0 [ 616.170887][T21954] netlink_dump+0x1e7/0xee0 [ 616.170917][T21954] ? rcu_is_watching+0x15/0xb0 [ 616.170996][T21954] ? __pfx_netlink_dump+0x10/0x10 [ 616.171035][T21954] ? genl_start+0x497/0x6d0 [ 616.171073][T21954] __netlink_dump_start+0x589/0x7b0 [ 616.171106][T21954] genl_family_rcv_msg_dumpit+0x213/0x310 [ 616.171142][T21954] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 616.171172][T21954] ? genl_get_cmd+0x82f/0x960 [ 616.171208][T21954] ? __pfx_genl_start+0x10/0x10 [ 616.171236][T21954] ? __pfx_genl_dumpit+0x10/0x10 [ 616.171264][T21954] ? __pfx_genl_done+0x10/0x10 [ 616.171297][T21954] ? __lock_acquire+0x683/0x2cf0 [ 616.171336][T21954] genl_rcv_msg+0x5e1/0x7a0 [ 616.171374][T21954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.171404][T21954] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 616.171575][T21954] netlink_rcv_skb+0x226/0x4a0 [ 616.171601][T21954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.171633][T21954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.171676][T21954] ? down_read+0x2be/0x330 [ 616.171703][T21954] genl_rcv+0x28/0x40 [ 616.171730][T21954] netlink_unicast+0x7bb/0x940 [ 616.171766][T21954] netlink_sendmsg+0x813/0xb40 [ 616.171802][T21954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.171833][T21954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.171872][T21954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.171895][T21954] sock_sendmsg_nosec+0x13a/0x180 [ 616.171928][T21954] ____sys_sendmsg+0x54e/0x850 [ 616.171960][T21954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.171995][T21954] ? import_iovec+0x73/0xa0 [ 616.172027][T21954] ___sys_sendmsg+0x2a5/0x360 [ 616.172050][T21954] ? __lock_acquire+0x683/0x2cf0 [ 616.172082][T21954] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.172149][T21954] ? __fget_files+0x2a/0x420 [ 616.172176][T21954] ? __fget_files+0x3a2/0x420 [ 616.172215][T21954] __x64_sys_sendmsg+0x1b1/0x290 [ 616.172242][T21954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.172288][T21954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.172312][T21954] do_syscall_64+0x174/0x580 [ 616.172343][T21954] ? trace_irq_disable+0x3b/0x140 [ 616.172369][T21954] ? clear_bhb_loop+0x70/0xc0 [ 616.172396][T21954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.172417][T21954] RIP: 0033:0x7ff49fb9e0d9 [ 616.172438][T21954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.172456][T21954] RSP: 002b:00007ff49ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.172478][T21954] RAX: ffffffffffffffda RBX: 00007ff49fe25fa0 RCX: 00007ff49fb9e0d9 [ 616.172494][T21954] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 616.172507][T21954] RBP: 00007ff49ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 616.172528][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.172541][T21954] R13: 00007ff49fe26038 R14: 00007ff49fe25fa0 R15: 00007ffcceb413e8 [ 616.172578][T21954] [ 616.451163][T21923] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 616.634681][T21924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.653306][T21924] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 616.711053][T21924] bond0 (unregistering): Released all slaves [ 616.981728][T21966] tipc: Enabling of bearer rejected, already enabled [ 616.988460][T21961] __nla_validate_parse: 1 callbacks suppressed [ 616.988514][T21961] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3939'. [ 617.014604][T21966] tipc: Enabling of bearer rejected, already enabled [ 617.573282][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3943'. [ 617.679686][T21976] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3942'. [ 617.690335][T21976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3942'. [ 617.764346][T21990] x_tables: duplicate underflow at hook 1 [ 618.004694][T22009] can: request_module (can-proto-3) failed. [ 618.035212][T22012] FAULT_INJECTION: forcing a failure. [ 618.035212][T22012] name failslab, interval 1, probability 0, space 0, times 0 [ 618.047984][T22012] CPU: 0 UID: 0 PID: 22012 Comm: syz.4.3949 Not tainted syzkaller #0 PREEMPT(full) [ 618.048012][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.048027][T22012] Call Trace: [ 618.048035][T22012] [ 618.048045][T22012] dump_stack_lvl+0xe8/0x150 [ 618.048082][T22012] should_fail_ex+0x40c/0x560 [ 618.048111][T22012] should_failslab+0xa8/0x100 [ 618.048143][T22012] __kmalloc_cache_noprof+0xa8/0x660 [ 618.048172][T22012] ? nl80211_dump_scan+0x12a/0x2160 [ 618.048202][T22012] ? nl80211_dump_scan+0x12a/0x2160 [ 618.048240][T22012] nl80211_dump_scan+0x12a/0x2160 [ 618.048273][T22012] ? kasan_save_track+0x3e/0x80 [ 618.048296][T22012] ? __kasan_kmalloc+0x93/0xb0 [ 618.048322][T22012] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 618.048347][T22012] ? __alloc_skb+0x2bd/0x7a0 [ 618.048365][T22012] ? netlink_dump+0x1e7/0xee0 [ 618.048387][T22012] ? __netlink_dump_start+0x589/0x7b0 [ 618.048428][T22012] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 618.048459][T22012] ? netlink_rcv_skb+0x226/0x4a0 [ 618.048481][T22012] ? genl_rcv+0x28/0x40 [ 618.048517][T22012] ? netlink_unicast+0x7bb/0x940 [ 618.048546][T22012] ? netlink_sendmsg+0x813/0xb40 [ 618.048569][T22012] ? sock_sendmsg_nosec+0x13a/0x180 [ 618.048614][T22012] ? ____sys_sendmsg+0x54e/0x850 [ 618.048647][T22012] ? ___sys_sendmsg+0x2a5/0x360 [ 618.048668][T22012] ? __x64_sys_sendmsg+0x1b1/0x290 [ 618.048689][T22012] ? do_syscall_64+0x174/0x580 [ 618.048719][T22012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.048751][T22012] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 618.048809][T22012] ? rcu_is_watching+0x15/0xb0 [ 618.048841][T22012] ? trace_kmalloc+0x2a/0xf0 [ 618.048869][T22012] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 618.048897][T22012] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 618.048922][T22012] ? netlink_dump+0x1e7/0xee0 [ 618.048949][T22012] ? netlink_dump+0x1e7/0xee0 [ 618.048980][T22012] genl_dumpit+0x10b/0x1b0 [ 618.049015][T22012] netlink_dump+0x711/0xee0 [ 618.049053][T22012] ? __pfx_netlink_dump+0x10/0x10 [ 618.049091][T22012] ? genl_start+0x497/0x6d0 [ 618.049129][T22012] __netlink_dump_start+0x589/0x7b0 [ 618.049161][T22012] genl_family_rcv_msg_dumpit+0x213/0x310 [ 618.049196][T22012] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 618.049226][T22012] ? genl_get_cmd+0x82f/0x960 [ 618.049261][T22012] ? __pfx_genl_start+0x10/0x10 [ 618.049288][T22012] ? __pfx_genl_dumpit+0x10/0x10 [ 618.049315][T22012] ? __pfx_genl_done+0x10/0x10 [ 618.049348][T22012] ? __dev_queue_xmit+0x29b/0x3820 [ 618.049386][T22012] genl_rcv_msg+0x5e1/0x7a0 [ 618.049424][T22012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.049453][T22012] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 618.049485][T22012] ? __pfx_ref_tracker_free+0x10/0x10 [ 618.049522][T22012] netlink_rcv_skb+0x226/0x4a0 [ 618.049548][T22012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.049580][T22012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.049622][T22012] ? down_read+0x2be/0x330 [ 618.049648][T22012] genl_rcv+0x28/0x40 [ 618.049676][T22012] netlink_unicast+0x7bb/0x940 [ 618.049711][T22012] netlink_sendmsg+0x813/0xb40 [ 618.049747][T22012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.049778][T22012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.049816][T22012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.049840][T22012] sock_sendmsg_nosec+0x13a/0x180 [ 618.049873][T22012] ____sys_sendmsg+0x54e/0x850 [ 618.049903][T22012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.049945][T22012] ? import_iovec+0x73/0xa0 [ 618.049978][T22012] ___sys_sendmsg+0x2a5/0x360 [ 618.050000][T22012] ? __lock_acquire+0x683/0x2cf0 [ 618.050032][T22012] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.050098][T22012] ? __fget_files+0x2a/0x420 [ 618.050123][T22012] ? __fget_files+0x3a2/0x420 [ 618.050162][T22012] __x64_sys_sendmsg+0x1b1/0x290 [ 618.050189][T22012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.050235][T22012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.050258][T22012] do_syscall_64+0x174/0x580 [ 618.050287][T22012] ? trace_irq_disable+0x3b/0x140 [ 618.050313][T22012] ? clear_bhb_loop+0x70/0xc0 [ 618.050341][T22012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.050362][T22012] RIP: 0033:0x7ffabeb9e0d9 [ 618.050384][T22012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.050401][T22012] RSP: 002b:00007ffabfb42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.050424][T22012] RAX: ffffffffffffffda RBX: 00007ffabee25fa0 RCX: 00007ffabeb9e0d9 [ 618.050439][T22012] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 618.050453][T22012] RBP: 00007ffabfb42090 R08: 0000000000000000 R09: 0000000000000000 [ 618.050466][T22012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.050479][T22012] R13: 00007ffabee26038 R14: 00007ffabee25fa0 R15: 00007ffd79561b68 [ 618.050514][T22012] [ 618.641316][T22014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3950'. [ 618.744830][T22016] netlink: 'syz.4.3951': attribute type 1 has an invalid length. [ 618.755100][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3951'. [ 618.764625][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3951'. [ 618.889005][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3954'. [ 619.397205][T22046] syzkaller0: entered promiscuous mode [ 619.402767][T22046] syzkaller0: entered allmulticast mode [ 619.598042][T22046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3958'. [ 619.853410][T22065] FAULT_INJECTION: forcing a failure. [ 619.853410][T22065] name failslab, interval 1, probability 0, space 0, times 0 [ 619.867043][T22065] CPU: 0 UID: 0 PID: 22065 Comm: syz.4.3961 Not tainted syzkaller #0 PREEMPT(full) [ 619.867071][T22065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.867082][T22065] Call Trace: [ 619.867090][T22065] [ 619.867097][T22065] dump_stack_lvl+0xe8/0x150 [ 619.867126][T22065] should_fail_ex+0x40c/0x560 [ 619.867149][T22065] should_failslab+0xa8/0x100 [ 619.867176][T22065] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 619.867197][T22065] ? skb_clone+0x212/0x3a0 [ 619.867216][T22065] ? skb_clone+0x212/0x3a0 [ 619.867240][T22065] skb_clone+0x212/0x3a0 [ 619.867263][T22065] __netlink_deliver_tap+0x413/0x860 [ 619.867296][T22065] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.867317][T22065] netlink_deliver_tap+0x19c/0x1b0 [ 619.867338][T22065] __netlink_sendskb+0x47/0x90 [ 619.867357][T22065] netlink_dump+0xa8c/0xee0 [ 619.867386][T22065] ? __pfx_netlink_dump+0x10/0x10 [ 619.867416][T22065] ? genl_start+0x497/0x6d0 [ 619.867446][T22065] __netlink_dump_start+0x589/0x7b0 [ 619.867471][T22065] genl_family_rcv_msg_dumpit+0x213/0x310 [ 619.867500][T22065] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 619.867524][T22065] ? genl_get_cmd+0x82f/0x960 [ 619.867552][T22065] ? __pfx_genl_start+0x10/0x10 [ 619.867574][T22065] ? __pfx_genl_dumpit+0x10/0x10 [ 619.867596][T22065] ? __pfx_genl_done+0x10/0x10 [ 619.867621][T22065] ? __dev_queue_xmit+0x29b/0x3820 [ 619.867651][T22065] genl_rcv_msg+0x5e1/0x7a0 [ 619.867681][T22065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.867704][T22065] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 619.867731][T22065] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.867762][T22065] netlink_rcv_skb+0x226/0x4a0 [ 619.867791][T22065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.867816][T22065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.867849][T22065] ? down_read+0x2be/0x330 [ 619.867870][T22065] genl_rcv+0x28/0x40 [ 619.867892][T22065] netlink_unicast+0x7bb/0x940 [ 619.867918][T22065] netlink_sendmsg+0x813/0xb40 [ 619.867947][T22065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.867971][T22065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.868001][T22065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.868020][T22065] sock_sendmsg_nosec+0x13a/0x180 [ 619.868047][T22065] ____sys_sendmsg+0x54e/0x850 [ 619.868071][T22065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.868098][T22065] ? import_iovec+0x73/0xa0 [ 619.868124][T22065] ___sys_sendmsg+0x2a5/0x360 [ 619.868141][T22065] ? __lock_acquire+0x683/0x2cf0 [ 619.868168][T22065] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.868218][T22065] ? __fget_files+0x2a/0x420 [ 619.868243][T22065] ? __fget_files+0x3a2/0x420 [ 619.868273][T22065] __x64_sys_sendmsg+0x1b1/0x290 [ 619.868296][T22065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.868331][T22065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.868350][T22065] do_syscall_64+0x174/0x580 [ 619.868375][T22065] ? trace_irq_disable+0x3b/0x140 [ 619.868395][T22065] ? clear_bhb_loop+0x70/0xc0 [ 619.868416][T22065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.868433][T22065] RIP: 0033:0x7ffabeb9e0d9 [ 619.868449][T22065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.868463][T22065] RSP: 002b:00007ffabfb42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.868482][T22065] RAX: ffffffffffffffda RBX: 00007ffabee25fa0 RCX: 00007ffabeb9e0d9 [ 619.868494][T22065] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 619.868505][T22065] RBP: 00007ffabfb42090 R08: 0000000000000000 R09: 0000000000000000 [ 619.868515][T22065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.868525][T22065] R13: 00007ffabee26038 R14: 00007ffabee25fa0 R15: 00007ffd79561b68 [ 619.868553][T22065] [ 620.979910][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3967'. [ 621.332588][T22110] netlink: 'syz.2.3974': attribute type 1 has an invalid length. [ 621.395738][T22110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.452481][T22116] bond1: (slave veth3): Enslaving as an active interface with a down link [ 621.470342][T22110] netlink: 'syz.2.3974': attribute type 3 has an invalid length. [ 621.598324][T22124] netlink: 'syz.4.3976': attribute type 13 has an invalid length. [ 621.912210][T22128] vlan5: entered promiscuous mode [ 621.917332][T22128] bridge0: entered promiscuous mode [ 622.269739][T22149] __nla_validate_parse: 2 callbacks suppressed [ 622.269756][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 622.480338][T22144] bridge2: entered promiscuous mode [ 622.486413][T22144] bridge2: entered allmulticast mode [ 622.493771][T22144] team0: Device bridge2 is of different type [ 622.605874][T22168] Only authenc() type AEADs are supported by ESSIV [ 622.614690][T15161] IPVS: starting estimator thread 0... [ 622.635468][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.679021][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 390 seconds [ 622.690099][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 390 seconds [ 622.701755][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 390 seconds [ 622.713597][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 390 seconds [ 622.754646][T22144] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:19999 [ 622.768116][T22170] IPVS: using max 25 ests per chain, 60000 per kthread [ 622.784189][T22173] ipvlan2: entered promiscuous mode [ 622.789851][T22173] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 622.802214][T22173] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 622.812646][T22173] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 622.854508][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3986'. [ 622.863597][T22175] bond0: Unable to set down delay as MII monitoring is disabled [ 624.587923][ T12] batadv1: left promiscuous mode [ 625.368610][T22154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.693115][T22204] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 625.715438][T22200] xt_CT: No such helper "netbios-ns" [ 626.160101][T22226] tipc: Failed to remove unknown binding: 66,0,0/0:837016379/837016381 [ 626.168472][T22226] tipc: Failed to remove unknown binding: 66,0,0/0:837016379/837016380 [ 626.210033][T22225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3999'. [ 626.219519][T22226] tipc: Failed to remove unknown binding: 66,0,0/0:837016379/837016381 [ 626.227835][T22226] tipc: Failed to remove unknown binding: 66,0,0/0:837016379/837016380 [ 626.453478][T22213] syzkaller0: entered promiscuous mode [ 626.459042][T22213] syzkaller0: entered allmulticast mode [ 626.556936][T22250] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 626.609957][T22250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.753568][T22259] netlink: 'syz.0.4006': attribute type 3 has an invalid length. [ 626.761384][T22259] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4006'. [ 626.837681][T22261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 626.941310][T22266] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 627.065962][T22272] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4013'. [ 627.076577][T22272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 627.085672][T22272] ip6tnl0: Caught tx_queue_len zero misconfig [ 627.149755][ T48] veth0_to_bond: left promiscuous mode [ 627.349858][T22290] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4018'. [ 627.434223][T22295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4019'. [ 627.824310][T22316] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 627.940575][T22324] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 627.971361][T22325] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 627.986144][T22324] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20004 [ 627.999492][T22325] netlink: 'syz.2.4026': attribute type 5 has an invalid length. [ 628.022886][T22326] pim6reg: entered allmulticast mode [ 628.130576][T22333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4029'. [ 628.152376][T22333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4029'. [ 628.561450][T22357] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4038'. [ 628.573835][T22357] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4038'. [ 628.583071][T22355] netlink: 'syz.4.4037': attribute type 2 has an invalid length. [ 628.634991][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4037'. [ 628.752475][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4038'. [ 628.791372][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4038'. [ 628.879725][T22361] tipc: Enabled bearer , priority 0 [ 628.893937][T22361] syzkaller0: entered promiscuous mode [ 628.902866][T22361] syzkaller0: entered allmulticast mode [ 629.016008][T22361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 629.461465][T22383] tunl0: entered promiscuous mode [ 629.484120][T22383] gre0: entered promiscuous mode [ 629.501844][T22383] gretap0: entered promiscuous mode [ 629.508348][T22383] erspan0: entered promiscuous mode [ 629.551893][T22383] ip_vti0: entered promiscuous mode [ 629.572124][T22383] ip6_vti0: entered promiscuous mode [ 629.579028][T22383] sit0: entered promiscuous mode [ 629.584791][T22383] ip6tnl0: entered promiscuous mode [ 629.590763][T22383] ip6gre0: entered promiscuous mode [ 629.596745][T22383] syz_tun: entered promiscuous mode [ 629.643407][T22383] ip6gretap0: entered promiscuous mode [ 629.660215][T22383] vcan0: entered promiscuous mode [ 629.672761][T22383] bond0: entered promiscuous mode [ 629.696753][T22383] bond_slave_0: entered promiscuous mode [ 629.704104][T22383] bond_slave_1: entered promiscuous mode [ 629.748577][T22383] team0: entered promiscuous mode [ 629.753935][T22383] team_slave_0: entered promiscuous mode [ 629.759840][T22383] team_slave_1: entered promiscuous mode [ 629.766996][T22383] nlmon0: entered promiscuous mode [ 629.773219][T22383] batadv0: entered promiscuous mode [ 629.779655][T22383] vxcan0: entered promiscuous mode [ 629.785657][T22383] vxcan1: entered promiscuous mode [ 629.791872][T22383] veth0: entered promiscuous mode [ 629.798592][T22383] veth1: entered promiscuous mode [ 629.804513][T22383] wg0: entered promiscuous mode [ 629.839762][T22383] wg1: entered promiscuous mode [ 629.845502][T22383] wg2: entered promiscuous mode [ 629.855464][T22383] veth0_to_bridge: entered promiscuous mode [ 629.863503][T22383] veth1_to_bridge: entered promiscuous mode [ 629.884726][T22383] veth0_to_bond: entered promiscuous mode [ 629.891528][T22383] veth1_to_bond: entered promiscuous mode [ 629.899063][T22383] veth0_to_team: entered promiscuous mode [ 629.906795][T22383] veth1_to_team: entered promiscuous mode [ 629.914461][T22383] veth0_to_batadv: entered promiscuous mode [ 629.921294][T22383] batadv_slave_0: entered promiscuous mode [ 629.928033][T22383] veth1_to_batadv: entered promiscuous mode [ 629.986830][T22383] batadv_slave_1: entered promiscuous mode [ 629.994762][T22383] xfrm0: entered promiscuous mode [ 630.000446][T22383] veth0_to_hsr: entered promiscuous mode [ 630.007474][T22383] veth1_to_hsr: entered promiscuous mode [ 630.014353][T22383] hsr0: entered promiscuous mode [ 630.020131][T22383] veth1_virt_wifi: entered promiscuous mode [ 630.026790][T22383] veth0_virt_wifi: entered promiscuous mode [ 630.033644][T22383] virt_wifi0: entered promiscuous mode [ 630.041226][T22383] vlan0: entered promiscuous mode [ 630.105616][T22383] vlan1: entered promiscuous mode [ 630.111537][T22383] macvlan0: entered promiscuous mode [ 630.117752][T22383] macvlan1: entered promiscuous mode [ 630.123838][T22383] ipvlan0: entered promiscuous mode [ 630.129217][T22383] ipvlan1: entered promiscuous mode [ 630.135810][T22383] macvtap0: entered promiscuous mode [ 630.141858][T22383] macsec0: entered promiscuous mode [ 630.147853][T22383] geneve0: entered promiscuous mode [ 630.153744][T22383] geneve1: entered promiscuous mode [ 630.184337][T22383] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 630.192894][T22383] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 630.202072][T22383] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 630.210675][T22383] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 630.219173][T22383] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 630.226416][T22383] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 630.233686][T22383] gre1: entered promiscuous mode [ 630.239394][T22383] vlan2: entered promiscuous mode [ 630.244695][T22383] ip6tnl1: entered promiscuous mode [ 630.250627][T22383] mac80211_hwsim hwsim52 wlan2: entered promiscuous mode [ 630.259256][T22383] bridge1: entered promiscuous mode [ 630.265352][T22383] vlan3: entered promiscuous mode [ 630.284789][T22383] bridge2: entered promiscuous mode [ 630.291158][T22383] vlan4: entered promiscuous mode [ 630.296550][T22383] bond1: entered promiscuous mode [ 630.302547][T22383] veth2: entered promiscuous mode [ 630.307720][T22383] veth3: entered promiscuous mode [ 630.313996][T22383] gre2: entered promiscuous mode [ 630.333308][T22376] tipc: Resetting bearer [ 630.366595][T22376] tipc: Disabling bearer [ 630.545004][T22414] x_tables: duplicate underflow at hook 2 [ 630.643109][T22417] openvswitch: netlink: Duplicate or invalid key (type 0). [ 630.859592][T22426] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4057'. [ 631.622590][T22465] IPVS: set_ctl: invalid protocol: 197 10.1.1.1:20003 [ 631.757439][T22470] netlink: 'syz.2.4066': attribute type 1 has an invalid length. [ 631.921845][T22470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 631.939566][T22476] set match dimension is over the limit! [ 631.977434][T22475] syz_tun: left promiscuous mode [ 632.032555][T22475] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 632.132979][T22434] syz_tun: entered allmulticast mode [ 632.157525][T22434] dvmrp8: entered allmulticast mode [ 632.250901][T22431] syz_tun: left allmulticast mode [ 632.438362][T22506] openvswitch: netlink: IP tunnel dst address not specified [ 632.624377][T22515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.867282][T22523] __nla_validate_parse: 5 callbacks suppressed [ 632.867305][T22523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4078'. [ 633.044285][T22523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.802735][T22569] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 633.804675][T22571] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 633.927821][T22577] x_tables: duplicate underflow at hook 2 [ 633.999359][T22568] bond4: (slave geneve3): making interface the new active one [ 634.107507][T22568] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 634.395122][T22590] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4088'. [ 634.437497][ T48] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.458930][ T48] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.473731][T22586] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4088'. [ 634.502341][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 634.528526][ T48] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 634.702453][ T5628] block nbd5: Receive control failed (result -32) [ 634.780844][T22606] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4092'. [ 634.789957][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4092'. [ 634.800966][T22606] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 634.921540][T22613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4095'. [ 635.115919][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'. [ 635.223493][T22630] Cannot find del_set index 2 as target [ 635.623594][T22654] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 635.725185][T22663] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 636.138613][T22679] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 636.593875][T22703] netlink: 'syz.4.4116': attribute type 13 has an invalid length. [ 636.857196][T22711] xt_hashlimit: size too large, truncated to 1048576 [ 636.887586][T22712] netlink: 'syz.0.4122': attribute type 2 has an invalid length. [ 636.895399][T22712] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4122'. [ 636.974611][T22716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4124'. [ 637.060832][T22713] xt_hashlimit: size too large, truncated to 1048576 [ 637.232786][T22730] Cannot find add_set index 34 as target [ 637.276662][T22732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.334864][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 637.644123][T22746] bond0: entered allmulticast mode [ 637.943010][T22754] netlink: 'syz.5.4134': attribute type 1 has an invalid length. [ 637.969311][T22754] bond1: entered promiscuous mode [ 637.974844][T22754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.038400][T22754] bond1: (slave bridge3): making interface the new active one [ 638.046013][T22754] bridge3: entered promiscuous mode [ 638.054068][T22754] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 638.355466][T22764] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.381961][T22773] __nla_validate_parse: 4 callbacks suppressed [ 638.381982][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4139'. [ 638.688088][T22783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4142'. [ 638.700609][T22781] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 638.716795][T22780] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 638.740255][T22780] netlink: 'syz.5.4141': attribute type 1 has an invalid length. [ 638.749291][T22780] netlink: 'syz.5.4141': attribute type 22 has an invalid length. [ 638.802675][T22793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4145'. [ 638.870146][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4146'. [ 638.926916][T22795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4146'. [ 639.164427][T22793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4145'. [ 639.174412][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4146'. [ 639.183845][T22793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4145'. [ 639.375947][T22816] netlink: 'syz.0.4150': attribute type 33 has an invalid length. [ 639.429933][T22822] netlink: 'syz.3.4149': attribute type 4 has an invalid length. [ 639.483788][T22822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4149'. [ 639.651039][T22832] netlink: 'syz.3.4154': attribute type 1 has an invalid length. [ 639.746099][T22832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 639.789581][T22839] netlink: zone id is out of range [ 639.804859][T22839] netlink: zone id is out of range [ 639.824610][T22839] netlink: zone id is out of range [ 639.838711][T22840] bond5: (slave gretap1): making interface the new active one [ 639.853671][T22839] netlink: zone id is out of range [ 639.866182][T22839] netlink: zone id is out of range [ 639.884504][T22839] netlink: zone id is out of range [ 639.902449][T22839] netlink: zone id is out of range [ 639.908960][T22839] netlink: zone id is out of range [ 639.914473][T22839] netlink: zone id is out of range [ 639.930334][T22840] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 640.418255][T21249] udevd[21249]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory [ 640.544393][T22832] bond5 (unregistering): (slave gretap1): Releasing active interface [ 640.622670][T22832] bond5 (unregistering): Released all slaves [ 640.685280][T22866] block nbd0: reconnected socket [ 640.694079][T22866] nbd: socks must be embedded in a SOCK_ITEM attr [ 640.940822][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 640.969245][ T5628] block nbd0: Receive control failed (result -32) [ 641.221508][T22891] xt_ecn: cannot match TCP bits for non-tcp packets [ 641.742747][T22919] gre0: entered promiscuous mode [ 641.798407][T22919] gre0: entered allmulticast mode [ 642.339939][T22956] netlink: 'syz.3.4187': attribute type 4 has an invalid length. [ 642.542672][T22962] netlink: 'syz.5.4190': attribute type 1 has an invalid length. [ 642.755322][T22975] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 643.481724][T23017] __nla_validate_parse: 13 callbacks suppressed [ 643.481744][T23017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 643.656180][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4208'. [ 643.772491][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 643.834452][T23035] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4214'. [ 643.849504][T23036] bond2: (slave syz_tun): Removing an active aggregator [ 643.863906][T23036] bond2: (slave syz_tun): Releasing backup interface [ 643.902980][T23036] bridge_slave_0: left allmulticast mode [ 643.928332][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4216'. [ 643.940778][T23036] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.953217][T23036] bridge_slave_1: left allmulticast mode [ 643.959174][T23036] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.974245][T23036] bond0: (slave bond_slave_0): Releasing backup interface [ 643.986296][T23036] bond0: (slave bond_slave_1): Releasing backup interface [ 644.002023][T23036] team0: Port device team_slave_0 removed [ 644.050093][T23036] team0: Port device team_slave_1 removed [ 644.056935][T23036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.064378][T23036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.073312][T23036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.081201][T23036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.090757][T23036] net_ratelimit: 16 callbacks suppressed [ 644.090777][T23036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 644.308997][T23057] netlink: 'syz.2.4220': attribute type 62 has an invalid length. [ 644.411162][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4221'. [ 644.663289][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4227'. [ 644.862806][T23088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.961467][T23092] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4229'. [ 644.970677][T23092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4229'. [ 645.094680][T15162] wlan1: Trigger new scan to find an IBSS to join [ 645.297871][T23100] x_tables: duplicate underflow at hook 1 [ 645.364208][T23104] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4232'. [ 645.439277][T23104] ip_tables: iptables: counters copy to user failed while replacing table [ 645.751536][T23119] ip6_vti0: Caught tx_queue_len zero misconfig [ 645.762958][T23117] netlink: 'syz.2.4236': attribute type 1 has an invalid length. [ 645.776321][T23119] team0 (unregistering): Port device xfrm0 removed [ 646.185391][T23143] openvswitch: netlink: IP tunnel dst address not specified [ 646.217301][T23143] bond5: entered promiscuous mode [ 646.284186][T23138] IPVS: length: 193 != 8 [ 646.460114][T23147] bond0: Device is already in use. [ 646.792198][T23164] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 646.812904][T23129] syzkaller1: entered promiscuous mode [ 646.840196][T23129] syzkaller1: entered allmulticast mode [ 647.175869][T23184] xt_policy: output policy not valid in PREROUTING and INPUT [ 647.310113][T23189] bond0: Caught tx_queue_len zero misconfig [ 647.574065][T23186] netlink: 'syz.2.4253': attribute type 5 has an invalid length. [ 647.581875][T23186] netlink: 'syz.2.4253': attribute type 6 has an invalid length. [ 647.687168][T23207] netlink: 'syz.4.4260': attribute type 1 has an invalid length. [ 647.793163][T23218] batadv_slave_0: Caught tx_queue_len zero misconfig [ 648.092387][T23226] netlink: 'syz.4.4266': attribute type 2 has an invalid length. [ 648.100999][T23226] netlink: 'syz.4.4266': attribute type 11 has an invalid length. [ 648.425820][T23239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 648.433542][T23234] syzkaller1: entered promiscuous mode [ 648.441167][T23234] syzkaller1: entered allmulticast mode [ 648.492839][T23234] __nla_validate_parse: 13 callbacks suppressed [ 648.492861][T23234] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4269'. [ 648.571887][T23247] syzkaller0: entered promiscuous mode [ 648.578353][T23247] syzkaller0: entered allmulticast mode [ 648.592060][T23247] tipc: Started in network mode [ 648.597656][T23247] tipc: Node identity 2665c7a9f787, cluster identity 4711 [ 648.621692][T23247] tipc: Enabled bearer , priority 0 [ 648.664333][T23247] tipc: Resetting bearer [ 648.755217][T23251] pim6reg0: tun_chr_ioctl cmd 35111 [ 648.790673][T23246] tipc: Resetting bearer [ 648.832394][T23255] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4275'. [ 648.860921][T23246] tipc: Disabling bearer [ 648.941058][T23256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.956625][T23251] tc_dump_action: action bad kind [ 649.118909][T23260] netlink: 'syz.5.4276': attribute type 1 has an invalid length. [ 649.193146][T15159] wlan1: Trigger new scan to find an IBSS to join [ 649.404516][T23275] netlink: 'syz.2.4282': attribute type 10 has an invalid length. [ 649.424633][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4279'. [ 649.834258][T23299] netlink: 'syz.3.4286': attribute type 4 has an invalid length. [ 649.882586][T23299] netlink: 'syz.3.4286': attribute type 4 has an invalid length. [ 650.330064][T23312] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 650.430273][ T7739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.443373][T23319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.458433][T23320] netlink: Invalid conntrack timeout [ 650.463816][T23320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.507064][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4291'. [ 650.830670][ T29] audit: type=1804 audit(1786277429.653:7): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4296" name="/newroot/191/cgroup.controllers" dev="tmpfs" ino=1018 res=1 errno=0 [ 650.913842][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 650.945366][ T29] audit: type=1800 audit(1786277429.653:8): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4296" name="cgroup.controllers" dev="tmpfs" ino=1018 res=0 errno=0 [ 651.021887][ T29] audit: type=1804 audit(1786277429.733:9): pid=23340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4292" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1285 res=1 errno=0 [ 651.128315][ T29] audit: type=1800 audit(1786277429.733:10): pid=23340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4292" name="cgroup.controllers" dev="tmpfs" ino=1285 res=0 errno=0 [ 651.385653][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 651.676787][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4300'. [ 652.363126][T23406] tipc: Started in network mode [ 652.378597][T23406] tipc: Node identity eec9acd8875f, cluster identity 4711 [ 652.404070][T23406] tipc: Enabled bearer , priority 0 [ 652.444607][T23396] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 652.675216][T23404] tipc: Resetting bearer [ 652.699119][T23408] syzkaller0: entered promiscuous mode [ 652.724181][T23408] syzkaller0: entered allmulticast mode [ 652.779616][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 420 seconds [ 652.791098][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 420 seconds [ 652.803359][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 420 seconds [ 652.815150][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 420 seconds [ 652.879840][T23425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4311'. [ 652.913931][T23390] tipc: Resetting bearer [ 653.022002][T23390] tipc: Disabling bearer [ 653.158547][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4312'. [ 653.247794][T23437] IPVS: Unknown mcast interface: vcan0 [ 653.832045][T23462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4322'. [ 654.607740][T23499] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4330'. [ 654.622539][T23493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4327'. [ 654.724621][T23504] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 654.789575][T23507] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4327'. [ 654.948151][T23507] bond2: (slave ): Releasing active interface [ 655.417205][T23532] IPv6: sit3: Disabled Multicast RS [ 655.622797][T23534] bridge_slave_0: left allmulticast mode [ 655.628535][T23534] bridge_slave_0: left promiscuous mode [ 655.634378][T23534] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.707726][T23534] bridge_slave_1: left allmulticast mode [ 655.714473][T23534] bridge_slave_1: left promiscuous mode [ 655.722375][T23534] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.736440][T23534] bond0: (slave bond_slave_0): Releasing backup interface [ 655.756821][T23544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4341'. [ 655.807826][T23534] bond0: (slave bond_slave_1): Releasing backup interface [ 655.868963][T23534] team0: Port device team_slave_1 removed [ 655.875588][T23534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.911597][T23534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.927999][T23534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.967175][T23534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.994664][T23534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 656.042768][T23548] team0: Mode changed to "loadbalance" [ 656.324095][T23577] netlink: 'syz.4.4348': attribute type 5 has an invalid length. [ 656.335932][T23577] syzkaller0: entered promiscuous mode [ 656.342564][T23577] syzkaller0: entered allmulticast mode [ 656.351828][T23577] tipc: Started in network mode [ 656.364356][T23577] tipc: Node identity 4aa7cf365c37, cluster identity 4711 [ 656.377607][T23577] tipc: Enabled bearer , priority 0 [ 656.400606][T23577] tipc: Resetting bearer [ 656.429353][T23576] tipc: Resetting bearer [ 656.475518][T23576] tipc: Disabling bearer [ 656.648987][T23593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 656.893567][T23603] TC_ACT_REPEAT abuse ? [ 657.060590][T23610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4360'. [ 657.077020][T23612] openvswitch: netlink: EtherType 300 is less than min 600 [ 657.210238][T23619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4363'. [ 657.273037][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 657.338389][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4365'. [ 657.452637][T23631] netlink: 'syz.2.4367': attribute type 8 has an invalid length. [ 657.472966][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 657.843650][T23643] syzkaller0: entered promiscuous mode [ 657.856660][T23643] syzkaller0: entered allmulticast mode [ 658.462111][T23656] tipc: Enabled bearer , priority 0 [ 658.605531][T23656] syzkaller0: entered promiscuous mode [ 658.623046][T23656] syzkaller0: entered allmulticast mode [ 658.635367][T23656] tipc: Resetting bearer [ 658.662762][T23655] tipc: Resetting bearer [ 658.766955][T23668] netlink: 'syz.4.4382': attribute type 1 has an invalid length. [ 660.275802][T23684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.749545][T23655] tipc: Disabling bearer [ 662.956224][T23719] netlink: 'syz.4.4390': attribute type 8 has an invalid length. [ 662.967997][T23719] netlink: 'syz.4.4390': attribute type 8 has an invalid length. [ 663.267480][T23736] netlink: 'syz.5.4391': attribute type 5 has an invalid length. [ 663.538955][T23743] tipc: New replicast peer: 255.255.255.255 [ 663.545966][T23743] tipc: Enabled bearer , priority 5 [ 663.564583][T23743] __nla_validate_parse: 1 callbacks suppressed [ 663.564606][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4394'. [ 663.639521][T23743] netlink: 'syz.2.4394': attribute type 1 has an invalid length. [ 663.739852][T23753] netlink: 'syz.0.4399': attribute type 3 has an invalid length. [ 663.758454][T23743] bond3: entered promiscuous mode [ 663.768913][T23743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.829832][T23756] gtp0: entered promiscuous mode [ 663.834863][T23756] gtp0: entered allmulticast mode [ 663.843391][T23756] team0: Port device gtp0 added [ 663.857614][T23756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4400'. [ 663.872852][T23756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4400'. [ 663.892323][T23756] dvmrp8: entered allmulticast mode [ 664.175985][T23771] netlink: 'syz.5.4401': attribute type 2 has an invalid length. [ 664.245984][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4401'. [ 664.269767][T23772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.654708][T23782] bond5 (unregistering): Released all slaves [ 664.742259][T10499] tipc: Node number set to 3521300393 [ 664.749924][T23792] netlink: 'syz.5.4408': attribute type 10 has an invalid length. [ 664.758061][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4408'. [ 665.198681][T23836] netlink: 'syz.4.4414': attribute type 39 has an invalid length. [ 665.897633][T23869] syzkaller1: entered promiscuous mode [ 665.903233][T23869] syzkaller1: entered allmulticast mode [ 666.003169][T23869] netlink: 'syz.0.4421': attribute type 1 has an invalid length. [ 666.077831][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4423'. [ 666.672015][T23904] netlink: ct family unspecified [ 666.677072][T23904] openvswitch: netlink: Actions may not be safe on all matching packets [ 666.973541][T23907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.073410][T23918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4434'. [ 667.646373][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4439'. [ 667.669256][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4439'. [ 667.764780][T23931] netlink: 'syz.0.4437': attribute type 10 has an invalid length. [ 668.222543][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4447'. [ 668.251355][T23959] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 668.381341][T23960] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 668.425144][T23960] bond5 (unregistering): Released all slaves [ 668.584680][T23958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 668.961765][T23991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4453'. [ 669.043799][T23993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4453'. [ 669.137530][T23993] veth1_to_team: entered promiscuous mode [ 669.153338][T23993] gretap0: entered promiscuous mode [ 669.165982][T23993] hsr1: entered promiscuous mode [ 669.362120][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4459'. [ 669.899411][T24037] netlink: 810 bytes leftover after parsing attributes in process `syz.4.4468'. [ 669.931669][T24037] IPv6: Can't replace route, no match found [ 670.193328][ T5628] block nbd7: Receive control failed (result -32) [ 670.338693][T24049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4471'. [ 670.412996][T24052] geneve3: entered promiscuous mode [ 670.595013][T24060] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4477'. [ 670.609533][T24067] syzkaller0: entered promiscuous mode [ 670.615083][T24067] syzkaller0: entered allmulticast mode [ 670.781948][T24072] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 670.792686][T24072] validate_nla: 1 callbacks suppressed [ 670.792700][T24072] netlink: 'syz.2.4479': attribute type 10 has an invalid length. [ 670.807442][T24072] veth0_to_bond: left promiscuous mode [ 670.816392][T24072] veth0_to_bond: entered promiscuous mode [ 671.116082][T24079] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4481'. [ 682.857850][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 450 seconds [ 682.868914][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 450 seconds [ 682.879966][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 450 seconds [ 682.891030][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 450 seconds [ 683.503483][T23840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 687.265722][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4489'. [ 687.332397][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4488'. [ 688.353566][T24098] block nbd8: shutting down sockets [ 688.716699][T24136] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 689.239447][T24166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4508'. [ 689.312396][T24159] ipvlan0: Caught tx_queue_len zero misconfig [ 689.444362][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 689.592743][T24186] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4514'. [ 689.628207][T24185] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4514'. [ 692.620931][T24189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.353631][T24203] tipc: Enabled bearer , priority 0 [ 704.373509][T24203] tipc: Resetting bearer [ 704.431344][T24209] xt_ecn: cannot match TCP bits for non-tcp packets [ 704.443461][T24202] tipc: Disabling bearer [ 704.455212][T24211] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4518'. [ 704.465022][T24210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.556641][T24217] netlink: 'syz.4.4521': attribute type 1 has an invalid length. [ 704.564658][T24217] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4521'. [ 704.582783][T24217] wg2: Caught tx_queue_len zero misconfig [ 704.714627][T24220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4522'. [ 704.806304][T24231] netlink: 'syz.0.4527': attribute type 5 has an invalid length. [ 704.927639][T24241] xt_hashlimit: size too large, truncated to 1048576 [ 704.938745][T24239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.938954][T24242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.964521][T24234] syzkaller0: entered promiscuous mode [ 704.971022][T24234] syzkaller0: entered allmulticast mode [ 705.028537][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4532'. [ 705.051728][T24248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4531'. [ 705.078575][T24248] openvswitch: netlink: Flow key attr not present in new flow. [ 705.121600][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 705.136546][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 705.167920][T24248] netlink: 'syz.2.4531': attribute type 1 has an invalid length. [ 705.207333][T24248] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4531'. [ 705.343728][T24261] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 705.353067][T24256] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4531'. [ 705.393187][T24256] veth1_to_bond: entered allmulticast mode [ 705.416708][T24246] veth1_to_bond: left allmulticast mode [ 705.643793][T24270] syzkaller0: entered promiscuous mode [ 705.666064][T24270] syzkaller0: entered allmulticast mode [ 706.037256][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4540'. [ 706.288572][T24290] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 706.752276][T24327] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 706.810300][T24328] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 706.997015][T24347] openvswitch: netlink: Flow key attribute not present in set flow. [ 707.107052][T24347] veth2: entered allmulticast mode [ 707.417214][T24368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.426263][T24368] team0: Port device bond6 added [ 708.445094][T24429] [ 708.447509][T24429] ====================================================== [ 708.454562][T24429] WARNING: possible circular locking dependency detected [ 708.461632][T24429] syzkaller #0 Not tainted [ 708.466082][T24429] ------------------------------------------------------ [ 708.473136][T24429] syz.2.4581/24429 is trying to acquire lock: [ 708.479330][T24429] ffffffff9001db00 (xps_map_mutex){+.+.}-{4:4}, at: netif_reset_xps_queues_gt+0x6f/0xc0 [ 708.489143][T24429] [ 708.489143][T24429] but task is already holding lock: [ 708.496543][T24429] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 708.506620][T24429] [ 708.506620][T24429] which lock already depends on the new lock. [ 708.506620][T24429] [ 708.517136][T24429] [ 708.517136][T24429] the existing dependency chain (in reverse order) is: [ 708.526176][T24429] [ 708.526176][T24429] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 708.534024][T24429] cpus_read_lock+0x42/0x160 [ 708.539171][T24429] static_key_slow_inc+0x12/0x30 [ 708.544706][T24429] nbd_genl_reconfigure+0x1301/0x1e80 [ 708.550722][T24429] genl_family_rcv_msg_doit+0x233/0x340 [ 708.556820][T24429] genl_rcv_msg+0x614/0x7a0 [ 708.561890][T24429] netlink_rcv_skb+0x226/0x4a0 [ 708.567212][T24429] genl_rcv+0x28/0x40 [ 708.571764][T24429] netlink_unicast+0x7bb/0x940 [ 708.577075][T24429] netlink_sendmsg+0x813/0xb40 [ 708.582388][T24429] sock_sendmsg_nosec+0x13a/0x180 [ 708.587960][T24429] ____sys_sendmsg+0x54e/0x850 [ 708.593267][T24429] ___sys_sendmsg+0x2a5/0x360 [ 708.598485][T24429] __x64_sys_sendmsg+0x1b1/0x290 [ 708.603968][T24429] do_syscall_64+0x174/0x580 [ 708.609116][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.615569][T24429] [ 708.615569][T24429] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 708.623241][T24429] __mutex_lock+0x19d/0x1550 [ 708.628398][T24429] nbd_queue_rq+0x373/0x1150 [ 708.633540][T24429] blk_mq_dispatch_rq_list+0x499/0x1990 [ 708.639782][T24429] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 708.646714][T24429] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 708.653238][T24429] blk_mq_run_work_fn+0x16c/0x300 [ 708.658817][T24429] process_scheduled_works+0xa8e/0x14e0 [ 708.664917][T24429] worker_thread+0xa47/0xfb0 [ 708.670054][T24429] kthread+0x388/0x470 [ 708.674678][T24429] ret_from_fork+0x514/0xb70 [ 708.679892][T24429] ret_from_fork_asm+0x1a/0x30 [ 708.685208][T24429] [ 708.685208][T24429] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 708.692453][T24429] __mutex_lock+0x19d/0x1550 [ 708.697602][T24429] nbd_queue_rq+0xc1/0x1150 [ 708.702651][T24429] blk_mq_dispatch_rq_list+0x499/0x1990 [ 708.708787][T24429] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 708.715679][T24429] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 708.722218][T24429] blk_mq_run_work_fn+0x16c/0x300 [ 708.727799][T24429] process_scheduled_works+0xa8e/0x14e0 [ 708.733894][T24429] worker_thread+0xa47/0xfb0 [ 708.739027][T24429] kthread+0x388/0x470 [ 708.743646][T24429] ret_from_fork+0x514/0xb70 [ 708.748804][T24429] ret_from_fork_asm+0x1a/0x30 [ 708.754143][T24429] [ 708.754143][T24429] -> #4 (set->srcu){.+.+}-{0:0}: [ 708.761302][T24429] __synchronize_srcu+0xc9/0x2f0 [ 708.766796][T24429] elevator_switch+0x1e8/0x7b0 [ 708.772188][T24429] elevator_change+0x2fa/0x480 [ 708.777525][T24429] elevator_set_default+0x375/0x440 [ 708.783265][T24429] blk_register_queue+0x3f3/0x4e0 [ 708.788898][T24429] __add_disk+0x6cb/0xe30 [ 708.793796][T24429] add_disk_fwnode+0x100/0x3a0 [ 708.799138][T24429] nbd_dev_add+0x733/0xb60 [ 708.804102][T24429] nbd_init+0x15f/0x1e0 [ 708.808915][T24429] do_one_initcall+0x250/0x870 [ 708.814233][T24429] do_initcall_level+0x10a/0x1a0 [ 708.819797][T24429] do_initcalls+0x59/0xa0 [ 708.824671][T24429] kernel_init_freeable+0x29d/0x3e0 [ 708.830412][T24429] kernel_init+0x1d/0x1d0 [ 708.835285][T24429] ret_from_fork+0x514/0xb70 [ 708.840429][T24429] ret_from_fork_asm+0x1a/0x30 [ 708.845744][T24429] [ 708.845744][T24429] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 708.853587][T24429] __mutex_lock+0x19d/0x1550 [ 708.858742][T24429] elevator_change+0x1af/0x480 [ 708.864051][T24429] elevator_set_none+0xb5/0x140 [ 708.869449][T24429] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 708.875805][T24429] nbd_start_device+0x189/0xb30 [ 708.881211][T24429] nbd_genl_connect+0x1597/0x1c10 [ 708.886785][T24429] genl_family_rcv_msg_doit+0x233/0x340 [ 708.892883][T24429] genl_rcv_msg+0x614/0x7a0 [ 708.897935][T24429] netlink_rcv_skb+0x226/0x4a0 [ 708.903238][T24429] genl_rcv+0x28/0x40 [ 708.907772][T24429] netlink_unicast+0x7bb/0x940 [ 708.913076][T24429] netlink_sendmsg+0x813/0xb40 [ 708.918386][T24429] sock_sendmsg_nosec+0x13a/0x180 [ 708.923960][T24429] ____sys_sendmsg+0x54e/0x850 [ 708.929267][T24429] ___sys_sendmsg+0x2a5/0x360 [ 708.934487][T24429] __x64_sys_sendmsg+0x1b1/0x290 [ 708.939963][T24429] do_syscall_64+0x174/0x580 [ 708.945100][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.951568][T24429] [ 708.951568][T24429] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 708.960215][T24429] blk_alloc_queue+0x544/0x690 [ 708.965539][T24429] __blk_mq_alloc_disk+0x194/0x390 [ 708.971203][T24429] nbd_dev_add+0x494/0xb60 [ 708.976169][T24429] nbd_init+0x15f/0x1e0 [ 708.980873][T24429] do_one_initcall+0x250/0x870 [ 708.986194][T24429] do_initcall_level+0x10a/0x1a0 [ 708.991673][T24429] do_initcalls+0x59/0xa0 [ 708.996537][T24429] kernel_init_freeable+0x29d/0x3e0 [ 709.002277][T24429] kernel_init+0x1d/0x1d0 [ 709.007182][T24429] ret_from_fork+0x514/0xb70 [ 709.012416][T24429] ret_from_fork_asm+0x1a/0x30 [ 709.017739][T24429] [ 709.017739][T24429] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 709.024980][T24429] fs_reclaim_acquire+0x71/0x100 [ 709.030471][T24429] __kmalloc_noprof+0xbc/0x720 [ 709.035787][T24429] __netif_set_xps_queue+0x4d8/0x1e30 [ 709.041703][T24429] virtnet_set_affinity+0x586/0x6c0 [ 709.047572][T24429] init_vqs+0x1085/0x11c0 [ 709.052447][T24429] virtnet_probe+0x21f1/0x48d0 [ 709.057760][T24429] virtio_dev_probe+0xdf6/0x10c0 [ 709.063334][T24429] really_probe+0x254/0xae0 [ 709.068424][T24429] __driver_probe_device+0x1e8/0x360 [ 709.074251][T24429] driver_probe_device+0x4f/0x240 [ 709.079818][T24429] __driver_attach+0x339/0x600 [ 709.085130][T24429] bus_for_each_dev+0x23b/0x2c0 [ 709.090595][T24429] bus_add_driver+0x345/0x670 [ 709.095822][T24429] driver_register+0x23a/0x320 [ 709.101124][T24429] virtio_net_driver_init+0x71/0xa0 [ 709.106947][T24429] do_one_initcall+0x250/0x870 [ 709.112274][T24429] do_initcall_level+0x10a/0x1a0 [ 709.117760][T24429] do_initcalls+0x59/0xa0 [ 709.122625][T24429] kernel_init_freeable+0x29d/0x3e0 [ 709.128379][T24429] kernel_init+0x1d/0x1d0 [ 709.133268][T24429] ret_from_fork+0x514/0xb70 [ 709.138411][T24429] ret_from_fork_asm+0x1a/0x30 [ 709.143734][T24429] [ 709.143734][T24429] -> #0 (xps_map_mutex){+.+.}-{4:4}: [ 709.151230][T24429] __lock_acquire+0x1520/0x2cf0 [ 709.156630][T24429] lock_acquire+0x106/0x350 [ 709.161706][T24429] __mutex_lock+0x19d/0x1550 [ 709.166853][T24429] netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.172854][T24429] netif_set_real_num_tx_queues+0x8d8/0xae0 [ 709.179289][T24429] veth_set_channels+0x46f/0xad0 [ 709.184777][T24429] ethnl_set_channels+0x8d6/0x970 [ 709.190415][T24429] ethnl_default_set_doit+0xa37/0x1080 [ 709.196429][T24429] genl_family_rcv_msg_doit+0x233/0x340 [ 709.202529][T24429] genl_rcv_msg+0x614/0x7a0 [ 709.207592][T24429] netlink_rcv_skb+0x226/0x4a0 [ 709.212897][T24429] genl_rcv+0x28/0x40 [ 709.217437][T24429] netlink_unicast+0x7bb/0x940 [ 709.222749][T24429] netlink_sendmsg+0x813/0xb40 [ 709.228057][T24429] sock_sendmsg_nosec+0x13a/0x180 [ 709.233639][T24429] ____sys_sendmsg+0x54e/0x850 [ 709.238942][T24429] ___sys_sendmsg+0x2a5/0x360 [ 709.244163][T24429] __x64_sys_sendmsg+0x1b1/0x290 [ 709.249645][T24429] do_syscall_64+0x174/0x580 [ 709.254789][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.261228][T24429] [ 709.261228][T24429] other info that might help us debug this: [ 709.261228][T24429] [ 709.271480][T24429] Chain exists of: [ 709.271480][T24429] xps_map_mutex --> &nsock->tx_lock --> cpu_hotplug_lock [ 709.271480][T24429] [ 709.284490][T24429] Possible unsafe locking scenario: [ 709.284490][T24429] [ 709.291957][T24429] CPU0 CPU1 [ 709.297341][T24429] ---- ---- [ 709.302720][T24429] rlock(cpu_hotplug_lock); [ 709.307335][T24429] lock(&nsock->tx_lock); [ 709.314304][T24429] lock(cpu_hotplug_lock); [ 709.321350][T24429] lock(xps_map_mutex); [ 709.325612][T24429] [ 709.325612][T24429] *** DEADLOCK *** [ 709.325612][T24429] [ 709.333773][T24429] 3 locks held by syz.2.4581/24429: [ 709.338988][T24429] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 709.347238][T24429] #1: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x854/0x1080 [ 709.357204][T24429] #2: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 709.367700][T24429] [ 709.367700][T24429] stack backtrace: [ 709.373619][T24429] CPU: 0 UID: 0 PID: 24429 Comm: syz.2.4581 Not tainted syzkaller #0 PREEMPT(full) [ 709.373642][T24429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.373654][T24429] Call Trace: [ 709.373661][T24429] [ 709.373668][T24429] dump_stack_lvl+0xe8/0x150 [ 709.373697][T24429] print_circular_bug+0x2e1/0x300 [ 709.373728][T24429] check_noncircular+0x12e/0x150 [ 709.373758][T24429] __lock_acquire+0x1520/0x2cf0 [ 709.373781][T24429] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 709.373885][T24429] ? preempt_schedule_thunk+0x16/0x40 [ 709.373903][T24429] ? preempt_schedule_common+0x82/0xd0 [ 709.373927][T24429] ? __bfs+0x153/0x290 [ 709.373955][T24429] ? __pfx_hlock_conflict+0x10/0x10 [ 709.373983][T24429] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.374000][T24429] lock_acquire+0x106/0x350 [ 709.374021][T24429] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.374045][T24429] __mutex_lock+0x19d/0x1550 [ 709.374070][T24429] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.374092][T24429] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.374110][T24429] ? __pfx___mutex_lock+0x10/0x10 [ 709.374136][T24429] ? netif_reset_xps_queues_gt+0x61/0xc0 [ 709.374159][T24429] netif_reset_xps_queues_gt+0x6f/0xc0 [ 709.374177][T24429] netif_set_real_num_tx_queues+0x8d8/0xae0 [ 709.374199][T24429] ? netif_set_real_num_rx_queues+0x224/0x330 [ 709.374218][T24429] veth_set_channels+0x46f/0xad0 [ 709.374246][T24429] ethnl_set_channels+0x8d6/0x970 [ 709.374269][T24429] ? __pfx_ethnl_set_channels+0x10/0x10 [ 709.374287][T24429] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 709.374311][T24429] ? ethnl_default_set_doit+0x9a4/0x1080 [ 709.374337][T24429] ? ethnl_ops_begin+0x30f/0x3c0 [ 709.374358][T24429] ethnl_default_set_doit+0xa37/0x1080 [ 709.374386][T24429] genl_family_rcv_msg_doit+0x233/0x340 [ 709.374415][T24429] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 709.374447][T24429] ? bpf_lsm_capable+0x9/0x20 [ 709.374478][T24429] ? security_capable+0x7e/0x2c0 [ 709.374556][T24429] genl_rcv_msg+0x614/0x7a0 [ 709.374582][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.374605][T24429] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 709.374629][T24429] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.374653][T24429] netlink_rcv_skb+0x226/0x4a0 [ 709.374672][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.374697][T24429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.374722][T24429] ? down_read+0x2be/0x330 [ 709.374739][T24429] genl_rcv+0x28/0x40 [ 709.374761][T24429] netlink_unicast+0x7bb/0x940 [ 709.374782][T24429] netlink_sendmsg+0x813/0xb40 [ 709.374807][T24429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.374828][T24429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.374856][T24429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.374875][T24429] sock_sendmsg_nosec+0x13a/0x180 [ 709.374899][T24429] ____sys_sendmsg+0x54e/0x850 [ 709.374920][T24429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.374941][T24429] ? import_iovec+0x73/0xa0 [ 709.374972][T24429] ___sys_sendmsg+0x2a5/0x360 [ 709.374990][T24429] ? __lock_acquire+0x683/0x2cf0 [ 709.375012][T24429] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.375032][T24429] ? futex_wake+0x51b/0x5f0 [ 709.375073][T24429] ? __fget_files+0x2a/0x420 [ 709.375094][T24429] ? __fget_files+0x3a2/0x420 [ 709.375119][T24429] __x64_sys_sendmsg+0x1b1/0x290 [ 709.375138][T24429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.375165][T24429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.375183][T24429] do_syscall_64+0x174/0x580 [ 709.375208][T24429] ? trace_irq_disable+0x3b/0x140 [ 709.375228][T24429] ? clear_bhb_loop+0x70/0xc0 [ 709.375247][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.375264][T24429] RIP: 0033:0x7fce3a19e0d9 [ 709.375280][T24429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.375296][T24429] RSP: 002b:00007fce3afae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.375315][T24429] RAX: ffffffffffffffda RBX: 00007fce3a425fa0 RCX: 00007fce3a19e0d9 [ 709.375328][T24429] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 709.375339][T24429] RBP: 00007fce3a235024 R08: 0000000000000000 R09: 0000000000000000 [ 709.375349][T24429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.375359][T24429] R13: 00007fce3a426038 R14: 00007fce3a425fa0 R15: 00007ffd4135d348 [ 709.375379][T24429] [ 711.636882][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.918886][ T25] block nbd1: Possible stuck request ffff888027cde000: control (read@0,1024B). Runtime 480 seconds [ 712.929783][ T25] block nbd1: Possible stuck request ffff888027cde1c0: control (read@1024,1024B). Runtime 480 seconds [ 712.940940][ T25] block nbd1: Possible stuck request ffff888027cde380: control (read@2048,1024B). Runtime 480 seconds [ 712.952585][ T25] block nbd1: Possible stuck request ffff888027cde540: control (read@3072,1024B). Runtime 480 seconds [ 715.486956][T23831] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)