last executing test programs: 2m33.468227538s ago: executing program 4 (id=1326): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r1}) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r2, 0x2) accept4(r2, 0x0, 0x0, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr=' \x01\x00', r1}, 0x14) 2m33.192475722s ago: executing program 4 (id=1330): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000940)=""/205, 0xcd}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f0000000a40)=""/237, 0xed}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x69}], 0x2, 0x180, 0x0) (fail_nth: 19) 2m32.873964226s ago: executing program 4 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 2m32.580246349s ago: executing program 4 (id=1338): r0 = socket$inet(0x2, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r8, 0xb03, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c8000) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000002000000e900"/24], 0x18}, 0x20004081) 2m32.396451399s ago: executing program 4 (id=1341): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0xffff, {0xa, 0x0, 0x8833, @mcast1, 0xc08}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m32.134013634s ago: executing program 4 (id=1344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0xe, 0x1}, 0x100, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="79000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, r3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 2m31.536655182s ago: executing program 3 (id=1349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x38, 0x20000000000001e2, &(0x7f00000001c0)=ANY=[@ANYBLOB="ec5b25abaaa5bbe34c593ae78b992513da69c75977ade363df522e0a589ce859d6c3bab075e6ca7f41e0e8cf8a18e6cd237e925c4bb66bf1ef5325a21c2b1507b278d133c8210053ff90078adec23f4c730642c0b52ea520db20d26c04735e6bedeb5972d7b9dc648e25df202b4be03cb1"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0xd, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r10, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r12, 0x0, 0x0}, 0x10) (async, rerun: 32) vmsplice(r8, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="ffd386fbad5c3288ddbeda4bec619659e646ba05a139b22fc1bd6be9e515cb1e4d1e62fde2a17bc57847234318bf2c64263cae3b6bc06972fe6d005ebc3543e5bdd8afa2b402388727f7b158383d6acb614d597a82f05779e2da5ce837dfee0deddf95b9ced9ab934c07c7b034c8fa7bd31636dca2a04755207d01296d76319145d766ff7fcd3ec36f33689ccca6686dcab7b9", 0x93}, {&(0x7f00000003c0)="58fe7d9f4599a2f58bfdd169225eef06", 0x10}, {&(0x7f0000001300)="d3f767bfe597a4d1c88f1644e0c7eaebc25f909e122c1bb0c50ee366ba51f27879ea4d9cf1713f10ae3c7d1edff4c79078754fd2e6c3b061ad9b3c887468cf5c7dbdc552e10c639a0a7661c8c86a559e4eba1a338f6d6d1b529f4030132480183ef3444c16324ee9f0c0f4155646d6bc5bfd868b53efb681f9e8728805bc32f13667f8f95991123861373f02c702f27d57353de1e05b44b78b261e45a11dd4434cfd8b234d16bf0079626f9231ebc41faaa0e64c1df3edb9db8744340bcdc5d50197b9e61e6a82c1fd9b3ad9386bbcf6d13c76a22f84ba2172d90d5537a80526b234b6afa9ec950299125bf2463d8aa8744f6a4b1092c3a207c816230b00cf09bc8e174ab3176bc83ca6cd3c2ed3d2340f97a36b23d5b30f7c83f008d0525f2d4b3e6ce8b86ef2b38e384b822d934dfb5e1e39c2f047a677e0ee153fb1a6f942a6345f641489a5f25d92b9efcdb4fd6aff79117919eb5d06772d42ca98ef76f540f6043c1195d447bbbb5511bbe756facdcb1e4f1b3805e54d5ed89606dceca189e5beafb2747106259c96f34eb4b56a7aa1a2dc35b286c0f5ce9e0d12af1149415ab3b53b43ac9094c5b16c1112e5c72b23dab44be1159387750fcbc4b9c983f9f58d47e377d93473e0297ee73a8f8340eb7cceb23cb8a024fb7edb55fde40419145536ce93abf7cfae45cdbfaaa7722710f1ecf38faa6db23cc75d2bce64825acd88a7b6dbf311fb824b067b85e3a965a4c5f739c1054b5df575a7e7c120d9fbc0cc6b659fa8c945592591502673dc2e75abe21a49b4ca198eb719c1f1028163fbeadf2b5e125e3097cf2597b024998740d655ef125a0e14bc82c06d1009d1626639f611bebd26968d71229282da3954d19517692d459a559e210f63ae5fd0e51b670fc15b48b421cb7cb88bce6c6416d8b7a57362d61ea262250a5c1e10322740f483e8994d903656966777684e5f045b8d4222a85fff30d5f5c591922a23ba6f70f1e79aca05547b8a66119b7525808080e13799f8d21de6692f3a192bc6eb39e4d55fc5751ad863fd46de477a3b3957f63592134b361dedf3e6ea94edf370b2333e02b39023cf21cef849f0ed0f234019a59aa395ce9940b656d4405ae4401e8be361bb8202e698cfad12a4b8f2167262fbf020c01ba352ae5c39554c2511e42555cfaf4c4edd7481fe564c9a77d0ce46fb71ef00192646bada2566b9e0279f8a8a6c5bda97b5e2f9b0944044186905d15cccc4cd3aa987964174f1af2677c1b94d865ce1d4d2a1214fa3b1aabeee1edd585768d229a2360a2d5e84111399753ccc2e185533b05c51f2be5a8810ac38ba0e6f46a0c5bd78212f56ee5e8e5608979fd8f7f01aba85e7b1ace78df8eed9bf8b29ec7f17632c129143fe3cff0a3e303355a89f1e6fb3dab7e3ef83a6688d151a88e5856ae877700ff6ef91bc95ed0c31793ea4e0fbce5905f8d05c18164b677f1f18461799dfed92b21273e704b087fc1c74d709afc2be9d9163c39bcfbdec3d201a5ca6fd657424abf6a9d2076ba9318f9b178fc9e8206e07e1c7733502d018e5791cfe8aa4d2acccbbcef5455876fcd76500fc9c714d355f09101f85ed96c34b72a6388d2a89e171b5193fd9357137fb748e1393ce18e667e7cede9c23a4d4973a26fa628abae241a5320eb9d9fe09b669c603c0715ca2dd821e995370ca2cde892769ef331cbf03c72bea77e52fcbcc2c6c36522f9ab3b13128b35feb1f00cc1e9146b9dc954a600cb8721355e980e672a1a1e3dfe49d60af6352d8c2e4a3952bc6418094bd36d6f422abe75c11feb4d576bbc17fdee877444f951722302fd9d83dd4b5f094ea9723f31688873c4e1ae91d9b922446ff2d2837f3678592be961546f4ef18f1f9b6bc29aed4b4934c029534350afbab526c2632e329fda13b44dbd1347cbdcf0b03f4d438266940d3cc759dec20589d1b9cbacaf1355efe119f6d34993d52c82175baed513d10d0f87fce748dd05dd79c852aa730b23b316257bb903165422b523bb40cdfc2c2787383e489036fe388112edc1d03dcffd470f8b783ed497b4c810997634538defb3788b820dc4ce8e3b0ff47e095f04942fb909a6615bee9710fa561589f741939a55cadf263e7da2c38fb0acaa691f0ae40e8b99b43d8ee0d432171c3fcc7158f12bcea5f779dd1877c915f04cfe4a16b8145549a3434e2af34d7d6d3a59eaec20826caf3f85a9da240d2241be2f04712663b9a0181c7a4b589fd6927423297b8e7663534b6a7c9d0d5e93a63923ceace1b3288001dac7b0aa242fee2c7d0362e1a7ae8bccc03d5c2c7db5f0deb838ee95feb128c37cc0eea4f2d0fa1cfa2bd5b1b857776e45cfcf059853955bd0e2a4ef012db7572f2448282932efcae9c5b6cc0fd6f4a591986b03233032842e193db5ded9fe313a8419055cdfcd2625c53fbacd5f9b41f5f97b0ab8b19b6e832cea146a92ef0ad06d6c955651987b9ca61803d701eadfae4d6cfd8f7733ff4c218eed1e082a855eda1bd6ede2d18837f8ffa65aaafbc5cb53490ebc63f0a166d92426d9be3544faaba918a44bd497cb4136d37adb18bed63cf956166ff893390beae8e27b810add5f0e7024d8a972e38dac8f9d8dc3be461ac41163960bcff04163b4d132d77b44b6500a7c90ce54aee4ee982f1a944c19d8a6382e69194f9ea006507f3b7bd71bd98c05aeacf769672bfdc034909ae1e5b120d187764030954347cf131cc6b65fd4df5a716afe82a71a277508646117f6d9e97eea9c51225ab3d96b19ccfa4c716e892b327083b4fac2266a7d38b8c046b455c2d0f97ee07c15a659b190a93f17227b92666786bf4f803c621151ebbc10bdd734f7f0d4939f5fbc3d8f9004f123c10290b8d045202b63b8c71b56986173976b3ec4bfc30f58354fff21c2d9c06d701b69982298542f568caca26bcbfa1388d6b90d224523ac5f70ffed114c749d6d4de3bc2be9ffd4cca640b3c191bf7870129e20c1730291fe61bb0b2742013d26fef6387fc5d84159329f73873a41586d3e19106cedbc9ec59cf2ed78cdd78a34cbf3b58b93732a7ac098cd2e7b0180e60d8927f05b166de8525189d4a8a75c3119b0b829ea635a10c1be3276583132fce23dee1794125143fbdaad88663bdfa7840d9ed8b8de25cd957109a589ca89cd8b06e1335f4bfdd968252ba5fc2581256948a3cb06790c51c75eb128feeefee62813e60bb357a1e46f4d8fd8a91ae068d60067e7cbbe59461bcc14844596999ec435c0fb647349691997a11997d2e59c9cb80e81d5e8c487f00d5ecd14cfb9e88ad41b33811b81196af74f8176ac57702e3d0a95ade1c9c4634801c7e0eac20a6add6ae02b361163b9b458ee56f099944700810249bb0b9194bc55f6fd0d648635ab5a39113ca165701c4da8dc24ed0185e264e504a8fdd5a917de0627a404839ad263be1ecc7f1563b3044e2948508f662251c1734ea41a67efef5d92fec220427d46b3e9eab4cdc5a2f109f1ace782f75eceac7c43073fec2af531c4800485efb276a818478e2c1e14bc857ca5a405c339b3d89cc677fba9acb5b687e1d6b1f6e0cee40b9bbc4410ea7b87ef5ec3de30a97ee48e5a71c96977a1f0e09fe4d9d7c09cc90a167222b135891ec0b70522ba06b654b05f356fd386c059d9de974b5f6da18d6251fe7ae1a19e07fc3bf2357ae13ba1e2c09bbd7b8c493b4d975a3ea5262def393d318601e2e806c914bbd49b23ada0105699da3ac50af14fca8804d30bb0441191e04b90c68f2fc76a8d8fefcddde29d40833e12128809a2efadc3ba8304aa18a1087ec586391a7ab5115277470e4dadf39925562784960da1b8732d86e3d4d4053d05c56317216ed025b1168aed1c9c2b43f75d393a2b4b4a1a25ac17bbbc690b18a422c993c3195eb4c089953e1a1b42c24eb4db332786fd9ba19efb2a1eff0aaeca5d23816e6dd412e062af1ab95755ac8df24350c3b9124ba60c2eb112f6efae7da40700182cb03778d7669955a73fe407a3cadb12d94a849029ab3a1590ae28ad84ff2ccc7f6af3f093f338b7f67ea3b5d992da9cf6fb121a4960ecff0984b50afb0b54f2462df0204f1d0de99d82835d5216772dad62b3700a6c1f121359bfb361dbdea2c4355714bcd19d862ce629d048ef83a3ff71430863fb016f0e1e59fe2551a40ea60a5fdbf0b528b29bd2656bc6c75e1a053ccf7c2fd2373973bf5742d9bf05db8697460f73ae993d8fef96c1c21b6a143ec3565b6c70b40e494d80b4139ae20640384b900800fcb06566e0c1bbf0cfcb671dd25fa2ed435cd69a583601c9296c6fe78cf1c3f0cc9d5d931506ba3c71145d2ff4656db962f4a40c137230e34d4270a0a532f4dadb3d560e1f9a989948c4a83146272b5e1ea19d255bf22c504047b87d4057c9ed73c6dc0899c24a4aa5b4ae461cfae152e73453b2b2b4a0451ab9ebbac952c3c8457b597b4e2e72acfc35823af7d7e0ebd618000fb54482eb2537e4b2857d86c0b0cf6158c9834a3225b8715b70b6826e5f0fe81b510b81e6f78fdfe1b6bdf9aface43fa9dbd57a7e8ce1a6003904f22e9451efdd68675eaede173eb1115a9fdd7247801d899217e4a055a60e9c191b33e2aadf702b2788414b217ebc4336293a63415ecc7ba2d69ba484f5fe0bf6231cbb05616dd5a647f51b4a80787049a6a13af1407fbfbe5d865f270e185aba88b7c5a0928a98da79d16ddfe482e11ae05ac60f1fe7f360bb6b1e989c9ac6514ab09734487ea242643c6c52236d01cfbc696839f46f7410dd6f87d745441edf42e3fc62d17ad2e6e5cba91388b1368fa9fc0c3e99f040a4f7f108d3dc2750d57174db4c5b07e8f23572c528f5c9a3df4e7a318d47e417690f6dfe0e826942bf18b0d6516d89f65e8276fe9513655c04b9bb16557e8bd12aae5c83ee7af20bf02ed69ea678e4a4d6d0cf60d31f96208811f00831e4732aba8dc5dc8b79f2311bb6beef95a14fc0fb6de687748b0d2358eab8ca1f81094074171be54aa2c1c4b7312a99616fa8baa0f48aaa5a8f55c9fcbb5bcf56e7c6c99c7da60f20874ff4902bdddabea0a7c2996d5361e5ce4427de5911e55580394c6af5d3e59ca33aee4d9ba4590f5ca0ac170b9d715ed0e83ace624760fc9b29306e4333f7c37ff5bca4bd0fb64ed44c9575d9f6cbe7ced245e2c01f714a05e6818d2366d006338d1694390ce0a04abd72719845438974816a55a05ca2315a7a92819b7e477d6a3be0df3d5d2bdea2a3e633c94fa5b68bc2b10c9c9c87a26a074c4099382bacdb30603d67a0ff6a082140716fb9166f993444cfb87451f811c7032783dcf4e30e177e1173e8181841a9b7bd95b30db13e0f6fb7dc777e40fe6ad30b2d83aef8c00bc3a5b749b8a23ad214c26b0e9bc53c598fbe56de1ec90b3b8e351f816c405ac85abc1b5fadaf24403e183b4bbd4de1989a946dae255acc3a39da7e1da907f46a5d33024bbcc4c5ab60d4ac31056458f6710777fee5a7dbc84372b2b022675cdcee5ddb2d5cc26a60cf88536e7e784be04f6355e7f106ce840ae2fc391dda00198cce9a95b013c4aeb0fb6e8146c48914a806ff0f1c00984e1e2deca6edd0143ae2a5063790faaffccd06bdf7d07ada6c0bad389587104e16b4b3934126fb0aaaa203e0890f592d3cfe320c324ba45e11b00a3963df896a48d63872788cf296fa09c64493c0bd000ab948aa48f5eabcb1f6bc8bb575500c5912b71b83b1802a70be7878b2d8ebdaf4b955822c18b26e2c107d60cd9f372e1c0", 0x1000}, {&(0x7f0000000540)="eed06b74859ae94f58497bdb0026ef470548be68b506cbc239192225f0abbee17d7373022b451535d33c6aa9d3597c0f582340527b347ebcc6b4dce162f77e0918ba8261dadb23201505550967937fd5d0ab1bd16d9a9a9aa74449923fd4d2e629f05c840806b312096a1ae812d78465e2eec1e27f7d5e08feb304d1109b6df541dea0f776233ab481e68a1345529cb5e05bec84f0944fc77342c13e06b003ab5bb50708710b8bceee45b6cd39c9eba6f28e5cd408d721361c3054faeca11a8ec488f3174b5e9072a142a36dcca7e8db5f20173f15fba22f6c51b27a28c44b6f1c65026ad812409b79417f3e28cd", 0xee}], 0x5, 0x8) (rerun: 32) sendfile(r9, r1, 0x0, 0xfffbffff) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7d28cd29020601080000000000c200000000080004000780050005000a000000050001000700000005000100070000000900020073797a30000000000c000300686173683af07000"], 0x48}}, 0x0) 2m31.395370779s ago: executing program 3 (id=1351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) (async) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) (async) epoll_create1(0x0) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) (async) sendmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4048091) (async) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4048091) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5452, &(0x7f0000000080)) epoll_create1(0x0) (async) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000040)={0x80000017}) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x940008c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x74, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x940008c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x74, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 2m31.060656454s ago: executing program 3 (id=1354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 2m30.633423243s ago: executing program 3 (id=1358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fa, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48af}}, @generic={0xa, 0xd, 0xf, 0x4, 0x8000}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000b40)={0x208, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x3e}}}}, [@NL80211_ATTR_FRAME_MATCH={0xa4, 0x5b, "4896db755910d5018ff98fa28d4e7e221b37709377a32318056c5fa99b9db8cc5d725162bfad4179bafb9c944d9bee0b99b2a40c4d3643c691fe2d72b170bdf7e2be4c18145a51f52d19b4837096591dc15013c72aefd64ba568a0ee2ff1684c740cace7e4f507806e93f0b70967df245d523e3f4826b95417dcd27fd32197a516506640f31b2498e6e16148a7033e2b780311c79cb0bcd0b0be15dec27bcf46"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x26, 0x5b, "ffe7710c97c13f587fdb1994c3106335b1b7773fd0064aeb107b6d6db01d6cdd7020"}, @NL80211_ATTR_FRAME_MATCH={0x9, 0x5b, "5a3ff1204d"}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "4be5b0d00ed7376545cef9aa9768103f3870d11aa8d9ff48dcb1927ea77b4de7a0b7f8a0e7e271fdbdb05aac56a43e6bbcdd27023443726bd33d6c4eba5da901887c28a2d4d30214217027dfb02afd700aaa8b1ca3bd86aa812c2351bc49cb66c9e9ba4850140f8916f5182fe613497658af429cbeae480367b2b3d663351b4f0aee6dcbe8ad5bed43a22948d1f43e2acf739651314544b2771a98553033f30cce0598105ff823c2023fdac4170a511fa12060e679e46dc9fcbafe2638ec4210843ad94aac9c9f22cc57e3f08f7d1864bb9d87fd24b74379c31f35a0e1b1dc8b73c4f38f2113256467777ec4cf4e75d327922119a4197350b9d8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x208}, 0x1, 0x0, 0x0, 0x4850}, 0x815) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m29.167346878s ago: executing program 3 (id=1365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@deltaction={0x1b0, 0x31, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1b6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1b3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async) socket$inet(0x2, 0x1, 0x5) 2m28.831868548s ago: executing program 3 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m17.093883796s ago: executing program 32 (id=1344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0xe, 0x1}, 0x100, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="79000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, r3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 2m13.705521722s ago: executing program 33 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m42.18696354s ago: executing program 6 (id=1930): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0xfffffffd}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x41}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xed6c}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x83}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m41.907590023s ago: executing program 6 (id=1935): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000280000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) 1m41.652245365s ago: executing program 6 (id=1941): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xefcd9f3a8c34df88, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd2a, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x409c8f40ba51a2fa, 0x3a, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000a80)={0x16c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5c8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7df}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x381e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1604}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe23}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2000c808}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r6, r7, 0x8, 0x0, @val=@netfilter={0x1, 0x1, 0x5}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r6, 0x4, r6}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r10, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r14, {0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1c}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getsockopt$sock_buf(r13, 0x1, 0x1c, &(0x7f00000003c0)=""/53, &(0x7f0000000400)=0x35) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0xf8, 0x40, 0x9, 0x7b, @mcast2, @private0, 0x7, 0x8000, 0x8001, 0xa4}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x11c, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040a0}, 0x4000000) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x4000840) 1m41.44489836s ago: executing program 6 (id=1944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f28e5f8e24a6cbe50fe8476f1877ecaf3df8ab5b8b8fcce1f2bc85abe9a8e67f6c1d00c09877b70d67bfd3c84453826e510da7167fd21762483f5a2a22bef8a0524db104a76b65a3b71da55dd33606084e84d10a772b1f3cec30b66f3be8ad94b357e5d31a869ead8c5a2b13a0b51f00", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f28e5f8e24a6cbe50fe8476f1877ecaf3df8ab5b8b8fcce1f2bc85abe9a8e67f6c1d00c09877b70d67bfd3c84453826e510da7167fd21762483f5a2a22bef8a0524db104a76b65a3b71da55dd33606084e84d10a772b1f3cec30b66f3be8ad94b357e5d31a869ead8c5a2b13a0b51f00", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) 1m41.265461309s ago: executing program 6 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000001540)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000001540)='GPL\x00'}, 0x90) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) 1m41.099620958s ago: executing program 6 (id=1952): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000190001000000000000311e8854a3d9864f142100c0be80200000001100050000000008000200ac1e0001e548aff8fcab434bf3096787261fb195f812391b1839a2938b93bc89739cc0d102728d06bc0602b407574c9775f1b82b553ff49c1d6e503b1a553ffd4f57b8b912e94aba9e80f60cd93c2baa1652ec4453578e77d5313567a3f3c425563fbf478c10e0ef30173162c972df99d4487808e29761758e38a92c8ee3948156d79b13d1"], 0x24}}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) socket$inet(0x2, 0x80000, 0x10) 1m37.540762139s ago: executing program 2 (id=2016): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) sendto$l2tp6(r3, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x8084) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20044804) 1m37.352623403s ago: executing program 2 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a00000f", 0x38}], 0x1}, 0x0) 1m37.217292765s ago: executing program 2 (id=2021): r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000030baa828ede2ca2e1f735f23ac86eb35010cfe6f6248053c6531339d61ff4fd8d9030b7db30ffa1ba1fc833b6d77477df651f60a3e62f2b9ef1ec1aba1e84413734a293a1702d2347b3a", @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf250000000008000500e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0xfffffffe}, 0x4) socketpair(0x2, 0x80000, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x404, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x8080) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) 1m37.008919196s ago: executing program 2 (id=2024): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) accept4(r1, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x80, 0x800) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4, 0x3) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0x401, 0xffffffff, 0x2, 0x5]}, &(0x7f00000001c0)=0x54) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400000000fedbdf25000000001f0b223db98995371f4f3c79bf12776c4b9416817d75b232b66d9d07a386510f9336c0fd883ce31547a661ead29ce98fad18fed1fbd2e3b89f88d1dbb97acb6cf176e4d00fe26a0b3d855797b9", @ANYRES32=0x0, @ANYRES64=r7], 0x50}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000005}, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040)=0xfffffebb) 1m36.675154818s ago: executing program 2 (id=2026): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080), 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0x10, 0x2, 0x4) (async) socket$inet6(0x10, 0x2, 0x4) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) (async) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1m36.459842799s ago: executing program 2 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r2, 0x1, 0x31, 0x0, &(0x7f00000008c0)) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) 1m26.028854962s ago: executing program 34 (id=1952): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000190001000000000000311e8854a3d9864f142100c0be80200000001100050000000008000200ac1e0001e548aff8fcab434bf3096787261fb195f812391b1839a2938b93bc89739cc0d102728d06bc0602b407574c9775f1b82b553ff49c1d6e503b1a553ffd4f57b8b912e94aba9e80f60cd93c2baa1652ec4453578e77d5313567a3f3c425563fbf478c10e0ef30173162c972df99d4487808e29761758e38a92c8ee3948156d79b13d1"], 0x24}}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) socket$inet(0x2, 0x80000, 0x10) 1m22.377251075s ago: executing program 5 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1m22.216682164s ago: executing program 5 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000003b7b8fe00000000000a50000000060a01040000000000000000020000000900010073797a30000000000900020073797a320000000024000480200001800b00010064796e153e7365740000100002800900010073797a3200000000140000001100010000000000000000002b6c96a0dcb33f978abd46bd96818c5f8a85eeecbcf1d2ea40f95433397d7ec97831d88f5f74b0c2932715a5464d95e14d4162907c04b4a69684edab0b17d7ffb2750d8bfefa73cd55450c91e0ea"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x100000ce}}], 0x1, 0x400c) 1m22.078014599s ago: executing program 5 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000000000f3ffffffffff", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) 1m21.740421978s ago: executing program 5 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1, 0x0, 0xb00}, 0x0) 1m21.592218955s ago: executing program 5 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_sample={0x15c, 0x1d, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xe, 0x7, 0x0, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x400}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x40, 0xfffffffffffffffa, 0x1, 0xfff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x7, 0xfff, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x64cd}]}, {0xb8, 0x6, "8409a4d071fe18dc535898e0274678e8bdf92e47986051954f491afc6d03386c3290c48a1ac009163f4f8151d1c5a16baa8c8a79cb243a9b4d3e6349852a4ffcd0ab64009c547cec949f0fbe4bb0793ad2ddae6b4da868865bdd416f58405afc6a5b08acf9a9954c7c766a6728944739592b3d2150dd2779d8054e2766d8cfc10e81a6a3a072ffe87ff10e23ea8520d8d0767ba3625775e45985cfa7cd69b92a1ee9bfb64fbab34fcd492014332e9b13a0f7b393"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xd8, 0x13, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x2, 0x3, 0x8, 0x6b13}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd8000000}]}, {0x82, 0x6, "1ac282c7b65a0966e23587f35a0e9bfadbe8312fed8bbf45019b34a40894fb441737f744545026eba35bc497e9abeb8af7e8bdab4bcd110e6bd5dfec436e7d68af1330f17f3454bb190876629eda343d24ef6cefead6293875cac248ad9b5b011f8b55d3e69b93710389ddec9de2d9977964583840a801a8142aabeee739"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x24c}}, 0x0) 1m21.440108992s ago: executing program 5 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="8001000010000100"/53, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff000000000000000033000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006465666c61746500"/312], 0x180}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x0, 0x3f, 0x28, 0x1}, {0x5, 0x3, 0x9, 0x5}, {0x7fff, 0x4, 0x22, 0x101}, {0x7ff, 0x5, 0x3, 0x7f}, {0x0, 0x0, 0x8, 0x6}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000880)={&(0x7f0000000380)={0xa, 0x4e21, 0xbbec, @remote, 0x3e51}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000400)="bec143524d9bc239061379", 0xb}, {&(0x7f0000000440)="be69d35f1faee6cc54895e354feea434c91dc72bb7405a6ae3fdefbcd85366b7b5b3459c4c0185b9e4d86a2fa3b33d9e3cab9bae7b71192b9bb67d69a99611264833841559f3ff", 0x47}, {&(0x7f00000004c0)="5c078c96975fefde9427a11fceb67e47d8b6617aacf79e28de65fe2df59fb555a02494967270522d62c46691e8d14c09f6312fa3340e81ca9cdbe0dbc6f66b2f9f088e0d7212467d2ca44e422b83ceb0e37afe5195fe3661b51c7cb0d031a88f3d14b63a9a3a99849627a2dc7780c351da3011866dcbc303f838055cc881aff60246cc4329a822a8eefb11d65421505e85f12ac480a46b7952e85963c28f043278694619efdd39836c6df70e6f8c91d2a58c1f280d29e2bb1f7dc677a7d22f1df311468472367f12055db6a17ba019097c84626a750f", 0xd6}], 0x4, &(0x7f0000000600)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x33, 0x6, '\x00', [@pad1, @generic={0x8, 0x13, "47b9d09f99f3dcccc3249d0acbc82f81f6c94b"}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @rthdrdstopts={{0x180, 0x29, 0x37, {0x62, 0x2c, '\x00', [@generic={0x9, 0x54, "0afec2969edb57b3d846528215dab6bae1dda17e12ea767e62183e3594be5051113a2c4561e5a066b683919250af57bea8a96cb0e188dd434c42d5f9d1733490e705f0bdf8d951507c4b58c99de14498562db89d"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xd}, @jumbo={0xc2, 0x4, 0x6dc1}, @jumbo, @generic={0x33, 0xef, "ec3f53ace74f1e36d9fba794054d89d1be4d1732d504bafa9c68aa65ba54797c530f3eea8e215af0a3df6b82fae0dc77e09678f9ff9ca608ee518e9a5b6d7d998af8a50ca66839cb4d0db3d9cfa4b5c1ca72378385bb6a647ad0269cbf223b2095de021e47da33ae584f22bd29eba4609ec4a95b15898a72d443650e5bd0f9b365da0d881151f905765a02d0c7ded06fc9c604ae03cff20b4a592d7a9bca148b2bac0a37c91f5307e2625b63ea55a5221556dd723f59ffcd835357e117630a0f4c95b7da84336d179ba9ba16b8e4e4d0e2d935e9b0075b3107d3a73b40b207b1f7f74f67c5c0aa9784235753c2ff6d"}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @enc_lim, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x15}}, @generic={0x40, 0x22, "544c4d948b2137ab6d9952f5f8682fb6ed49d86f2549fdcc1b602ed3d411edfd4e61"}]}}}], 0x248}, 0x4044040) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r7, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="646237931df741faaeb17904c8aed7a413141f2aacbe54cad907f8d97696231ede15952e7e0b464b4b84e8e2845fec1bee1eae1d23a567cbb95953c4c7c71aaf691cb51a2e2e4ec32109bda5b32fd9bf5f52b0a9fdc77b727a89cadd2fc4c0e7afc07b1279c4d42c70e9b8c0e6226aaec4aaa2ce58facfab12844affbfbf0fda5a9d", @ANYRES64=0x0], 0x20) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @empty, 0x4}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYBLOB="8f9ccb3d68f629aa7f1b91a4c0259bf7ffbe510988153fbf2a9abd128169173422eb27c22ecceecc6e0d8b5982e54816772a2b7887ada37e28971b74cf1d3fa753", @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) 1m21.379726004s ago: executing program 35 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r2, 0x1, 0x31, 0x0, &(0x7f00000008c0)) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) 1m6.247886157s ago: executing program 36 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="8001000010000100"/53, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff000000000000000033000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006465666c61746500"/312], 0x180}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x0, 0x3f, 0x28, 0x1}, {0x5, 0x3, 0x9, 0x5}, {0x7fff, 0x4, 0x22, 0x101}, {0x7ff, 0x5, 0x3, 0x7f}, {0x0, 0x0, 0x8, 0x6}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000880)={&(0x7f0000000380)={0xa, 0x4e21, 0xbbec, @remote, 0x3e51}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000001180)="af281d4d5ab68cc93fbc9310894659cd4e769f2956e39ee8fa7e3304aa056035c368cfb266d866b94148f2888efb34bf1aeba62c4f17fc365bf2e985e7b8ced564ca48a14df4f0efee9056e0584659e1eb1e50ccd9eaf3c32e49719061d070db30ba454c093dc197477cc2adde85ec5aef3cb49a913114a4f2cbd83e29446e01005ac8632177121f166503970c007d1fe9df8c17d4427657c77d8712854898bd00e1d2d2ed839758d08629b7fc0daba83e87dd3149344eabdcdbd164fd996610a93d8c95f0aee110070d7ba4558b2666379d3b87fcd8bafc31338d5e5200adeae69086ab8f00a402389cbb979f4b60c978787f068cd1196fcb63d698c0833c2ea6d814259b625952bfad0c1a070b04f9cd1e3f61dd99edccfc6d24edaaa16182585bb81d74fcdf1660866b944639a12c732b5ef95ce6f3f75d016e8d7f8dba85c9a300e5eb79b2b948dd5c01ba09a3f6989297366dbb027b4971769ef7d071845973cbf34b01820f38fe66b037b50f49eeb89d7de838e322259d770b088e1e372b2838afd42a251f38bdc10fe12364fe94f1d983d91ecc509478da40db80fe531088357b7cc33d2238361d3677e7802cdaf823cc809efc9c207f5ecdca102cd655fcdca70b502d272173ffef42122e958fb483d7e07596c49467f99793743a4389dd040740552b7fc3f94e3cc86eb5c81914de49cd99bd4ab568767af6f2fc0ac740f4f280169cf69f8f23bd4781fe4fa86bac4196841b1a38e218bbdfb1aed251c8edeb7461e4ec8bbc7cfe47478e6fc8a38ff390f4aa55c0d5f277dbd12a18f597d80f3b19a05c74e8e4febeb00d939431561ae951d8d673d6cfa8f44d32531eb5e0f1ecfa854137dc82ffe5519dc0fbf89c22d6e9ea7c8e6b0310b698ebd2b2be6a04554ef2246a172505073c4e3923d15488c6d06181122243a8c8aff8c9c8dc922778c90ebbe1eb5933873461ea7160550f6670876b6ba9c67f07e7c3b0e620442c0a42364418e32c3c53b66b1b1209966ed91ff420f3f9b12833b0142fef5717a44ff394ac2997fe06971193232215f4d94ab6adf3fd4a0cd485612bb6a9ebe7cbcd65f18ed1de1f7287a29b3a92a4723d26cfc278d270f32157ae91a78c34009def78942327b4876d460517e5708c4feac32f5e1620191acefff53274004f4f1ef335f7e3f27b6c92c33b9ba391749d65e054886bc04b81a581fadfb46ba956f17d42a3988380f1d7b3f946ff725e17bd8bdac781ae5cc92da146d3f61bb315111fb6004a03f9ff4a4a57c45efd10b7c6ea49465026d8a5a593c1c118dc24b74001798aa95e6e23fdb26ca6915c5f1300e37a44572d578a5003f8b9bb5d3d54a111e97fbf6ad15afd341731b269839d2d65ee645be28fef35cb71ee96444bb96a99fe3e2cddb509934b98aea921c9dbf0c31c43282503d8d9879664a4ac5891709c87d9e5291a8183bb068d06aecdb8676aca01120d2face983b478f0376f4b7e8d54f7e4ecd16036348543205b100ce012863c298a214b1ae28048a1c27594903feeae210f6f56e23db5bd4b88de991cb8b180ac4b68f56385bf4662e385661d7b7c4a28fbe408c8277f4a871f18eaed76985ddc7a9c3bd08861cc97c860498b1f70c6523d2b5b117430b69c99aaa6a606c90cc020f571da1b7470b9f5d620f3df8ba5bb390bd66355a1545649323ea091da4ffe802d16184be5bfc4463c5100fb68bc7c33b0566fa1a0b9b5b3f95f2a8bfb660e2a6de210951feae371d387f37b5712cf730895f6711aaa126899d3803bfa80504e205ed14244617786b4f053bad1d825137e365f0ee880d5040167f8e123f2448fef99896b7fb67327f3f9c2aaa00f1af53a6c00a0eed08afacddd259d8274eadd9dfa94e649b5337872b55bd4a63265c18927e32c76a46bb7b74ede47ede1ab6c1b43db43696b673670a96782aa3f518b6adb7d0520f9d80756c38dec3ef51d99ef065f77b926d6bc20b6d9650abb8491010a82d5a0473c24174a0cba7e86e76c57fa5a06a7a4b6ebe8c99adcfdacfe3c8c883416b617012e933b004868f76606bab1585e3456bfff9f24bbe33573d37e7205ca1191e432225efadddac2ea6bd9fdddf8b67596d468c90b7ee18b46690729b72d685a7ee7f4299a723cc2a839a818ad29b7333287361fd9d4f9c6a4debf721e103de8d5bdd799b5d4ceff29057c9dcf3958c7a4de1359a278e161e25d16e9edcda09c321ff7c4205fb00ffcf1aae46f37728f8514d6b3387724dcaf52a0e730452c95f2d6fd5363787718cf58689963af7a901a50c44828ea6520d20bc6ed9effe1d06f1934eed7143184bc4d8037545f317d11304752d451e1e422e1eef9253ae5bbd981e6c800c85fa13446a5dc1cec031e4109b1b8a889fb699f9556c23a370fc4f22d958505824b5caaf86631f00df35c19fb8794b1b77d9391f34a0f83d8d7a8bc76d8e98c9b534011ed6fb9428d2bdd29ad926be91a4da1152796340e52286c122f7f0f701148ed4c665e7804d3a2d81474be141c79fde27de1447f7b03ca0b897bba74bf6baf48c4250cd68a69f5fdad1cfa2999b03c8a7b5db5d30d71da117c57d772832e73476f0ccaf9fa83ed8a80a3f37eb89bb7c3de6ffa40dae1511ca1edaea9337472a42dfe73feb8738a8e0c788beea71d4a4f3de2d79ef97197fa661f512b41090e586462fa5f77097e9844960c2eb182b4419eb288ed37f54d01080bfe257872d356ce007fe88e0c839bee52f49c23d56f9206f5cfcdc04862a789f8c10097f077dc140bb19a9d7da07a2b299d3fec872c8aad356342aff52dec3420524b229ef572b02ae2506ffa91fe7e79968ec3f2a50fc4a2ef793c182e721a4dc5dc78a498d388817f908f15f9cd23fe1848aa4c0ff5eb88f3e7ac1b8abada4207f91564e2f548849cf5d7da3821cb891bdf30a2a0221b429711a09bfbda2fcf7af406747326f5555a93cbc3e770e6e521e3f165b9bab07636822662dd6c7274cc8df1f45e5ffc8687a769911483a4d70c877e2c3a1782ed70910ff65c604be31140c2751c7355b980a6d851393cd87a78f4a4226af0b57b4be82d17a6b0b83b5b2c8d6291b0324897f724a984d216debf379c9c4e83a96fe7af2ebaa17672eba557149bed3eea6f8f337c3ad97cf74d41e9ebfc1049e8daf950997f4e0f94601875531e0be9d82e6db7a1e0733f1d7c73279c048217549f24088b54b56b80654197572393da556a7f0c653f36707ccb066d66730d3769df43bac79ed9ebfbb8831dcbf5a9b9ed52bae3f49f77a3b661d7b9b092f873e892931fceaf82f497a372a87a83e3b1108afcda9fcc792487c23b640e5316884e8c8a69e5f430f9a065f591f4395206200fef3b55c83af1e03089e907efd7dc41410503ab349d9eff5e4bcbf32d74ff3c8ec3fafb05f4097c450cabf1feff98d00b8c8d18b262b593b0ecfc22186ad9fd8074456b1ba22654abba13c8442670202c8972d876c625c0c488f2ab0e407c811c6ea023b948aeeefdd94d745fea2a21c20e88a51435409c497982f2f95475abe23a7059181792a6a08ec9f8085faa9c601ba5adefe27c4b1ca1eb99705a5117d387b2140ff0a4bd7401656cc6b59acf25384055c7e6c0693dcc9d5ddd5022431b79e1386819051498f86fa5f88057ef509569d8228cacc408adf957a605a89ecbe3021a5fad016d2d32369a2093a754ff0338f2cd3f93724c9eb409a7279f09ce1c197edec154f7b8ae9fde042e3e8e14f69b56df821534e82a9e4ee9e41f60de37dcdde35568271a3d7b6e934f9042d4a06496f6df24d9f73a13206425f5ed2b9e5851ff23489bb594de61dcd21b5034029aa84887149b2039ab0826a422f6a7d4f203edfa6bfccc4c061fe625c269f1ae7d977f199491003d9bc291d340e3a268e6d9de500ebb143e1da55dea0af1f7cb688800c9d0cd01cd1c2c89b992f33357404e31c2f85b0a533d87e8f304c0fe83b66db685628f63cc16005905a0095f58b57a2f44de0daa26b79a6e2738fd3d6b13608678ad652c0e4b8eb1e158855c08374a4c61aa28382f49fed9bd5a47c2d36f57cfcb2e67afc48a592efae812d40c6977293ebc5f78ba042816df917e4c88e4b858cabc0d7bd6799487bd1b9148f7eb3bcd8338770ba1db31465dcdb2f3fd068c60d8ed0c9ac2b7ff51455f1a3eaf3f300f1b67e6155b496636ec73817894834c81f9c4ae91478817b4e2f32b3f6f5763e23a67452409419adf03e664fcaa8027a08bf9c948983f3394e562512cecaa828b8996da9eac2e9ac229a34b703081993c94e4bfa81061361037e88a653d36832a261d7c8715956052f9d9bf7ca530b7155782bde3fdff4cc86474202e9fa670b664735f69b04176eb84276218e7fdc9b070e028872d19b1efe4d31b37aec52b78191e4ef4f60653ed5b7eb8a101b5262cc8acc6ca23c9ba592bd52dcf75e87f477388a2691430510fc8ca0d4a1461315ee9a7f92b1618e2783923acf82dc04cd25dde5505eb7b7115dfad6c26b2d00dc87a48412405f98137eefb9896f618653961461a3ed05cd793f9995f1e76a20d70a28db484c964f08ed5f5429e9113620ed6f17d5c30258d45f2710721dbc537e6f86e4f6fc3572b7fff64c49cd988647d09b21407c407d283242737f19182a162af638d14b1cc93c0b717cee9c88180bd852f9a5386723e082b881c8c00e57f0a3ec13db6331ebc0575f080946fa91eb180544f09e91ce5728bce66cfac3626894af6749d0573d2492b67c9cbffc0dc1abe2bf567a4d3779cf9d5cae69f37c5f448e7201b1022900c804eb210e150e7e92524b61a08abb1ad5decd4b186e29e04a903ec6f7f158a56afd22966008e90753df75220e3b08609b13660180b8e47c57fc30b6450792c536d640a755dfc1d6e73a380716e04d33f9135be6c054de73167c9f6dec8298bd27b0c6d6b88eecb4b2c01056f89f17bcf205342ca824a6c2ccbe36c53d5c5ad4a6183bafe0d1693bb1f6f7af14af59d884db157c2a265e83c6a154cd6bfc45918e33f66e631c191bcca9578e95d18027f33398f636d15037a8233c0e1db9d2621fb56c78be464c8b97284e647f7cefebfebd9ec2b14964aa9ab4a9de7481db1cbd4dcfb52792fc1b01f259520cca036fbec77d8f94c99fd70ff7dd305c8dae3af84833b081c2361ec11c56e36b0717489e53fcb584199663e6ce207b419557316227d1a7358f6990378086d9db0f6010e7e12ea1064c93f0056667e7f3a949f6bddcc6e0fdd370660e3ceb8026aa46787d125060c2b8429e51b396ea43a285dfe14bf05345484945bb90a320a0f1938539c895782cdb94db4f2252c1b876b6ab4f3cd4c708acf1cca0b20e858cf47da8cf8ceaa6ccf1adf0e03619380eacc2c8c84e6474eda089e4a8384541d33975752b1435edd883e3234497f1a424e4ea7d77576d72077d024d96bff90f10768e318920278a2511c4bc028c2f3a99e224dfd23af76c5b37913535cbf5261ee1ba0d5f30cce8cd51a917114ad3947ec5f60ed12bb60a17bcd5682a099d0597707e30e37a1103bed9c2da0ae4f7ba1546d76ea7a66d43a015f4be792bbebf1d0ffc7fee4884dc7a97f7fe3f9eda57210823f2d7648deead140e4fd2b4bcd2352b2319841a8b30e46a32b4f4704e9c924fab0e7d68436e75c126d4e09d254764fecd5baeae8708b16f3893d5fa679b2209970e826c5f057115d2f8bab44460fcc0e751ceb53e558fed1959b8d178439d1fb9a48f102440768ec8952b184d201", 0x1000}, {&(0x7f0000000400)="bec143524d9bc239061379", 0xb}, {&(0x7f0000000440)="be69d35f1faee6cc54895e354feea434c91dc72bb7405a6ae3fdefbcd85366b7b5b3459c4c0185b9e4d86a2fa3b33d9e3cab9bae7b71192b9bb67d69a99611264833841559f3ff", 0x47}, {&(0x7f00000004c0)="5c078c96975fefde9427a11fceb67e47d8b6617aacf79e28de65fe2df59fb555a02494967270522d62c46691e8d14c09f6312fa3340e81ca9cdbe0dbc6f66b2f9f088e0d7212467d2ca44e422b83ceb0e37afe5195fe3661b51c7cb0d031a88f3d14b63a9a3a99849627a2dc7780c351da3011866dcbc303f838055cc881aff60246cc4329a822a8eefb11d65421505e85f12ac480a46b7952e85963c28f043278694619efdd39836c6df70e6f8c91d2a58c1f280d29e2bb1f7dc677a7d22f1df311468472367f12055db6a17ba019097c84626a750f", 0xd6}], 0x4, &(0x7f0000000600)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x33, 0x6, '\x00', [@pad1, @generic={0x8, 0x13, "47b9d09f99f3dcccc3249d0acbc82f81f6c94b"}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @rthdrdstopts={{0x180, 0x29, 0x37, {0x62, 0x2c, '\x00', [@generic={0x9, 0x54, "0afec2969edb57b3d846528215dab6bae1dda17e12ea767e62183e3594be5051113a2c4561e5a066b683919250af57bea8a96cb0e188dd434c42d5f9d1733490e705f0bdf8d951507c4b58c99de14498562db89d"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xd}, @jumbo={0xc2, 0x4, 0x6dc1}, @jumbo, @generic={0x33, 0xef, "ec3f53ace74f1e36d9fba794054d89d1be4d1732d504bafa9c68aa65ba54797c530f3eea8e215af0a3df6b82fae0dc77e09678f9ff9ca608ee518e9a5b6d7d998af8a50ca66839cb4d0db3d9cfa4b5c1ca72378385bb6a647ad0269cbf223b2095de021e47da33ae584f22bd29eba4609ec4a95b15898a72d443650e5bd0f9b365da0d881151f905765a02d0c7ded06fc9c604ae03cff20b4a592d7a9bca148b2bac0a37c91f5307e2625b63ea55a5221556dd723f59ffcd835357e117630a0f4c95b7da84336d179ba9ba16b8e4e4d0e2d935e9b0075b3107d3a73b40b207b1f7f74f67c5c0aa9784235753c2ff6d"}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @enc_lim, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x15}}, @generic={0x40, 0x22, "544c4d948b2137ab6d9952f5f8682fb6ed49d86f2549fdcc1b602ed3d411edfd4e61"}]}}}], 0x248}, 0x4044040) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r7, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="646237931df741faaeb17904c8aed7a413141f2aacbe54cad907f8d97696231ede15952e7e0b464b4b84e8e2845fec1bee1eae1d23a567cbb95953c4c7c71aaf691cb51a2e2e4ec32109bda5b32fd9bf5f52b0a9fdc77b727a89cadd2fc4c0e7afc07b1279c4d42c70e9b8c0e6226aaec4aaa2ce58facfab12844affbfbf0fda5a9d", @ANYRES64=0x0], 0x20) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @empty, 0x4}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYBLOB="8f9ccb3d68f629aa7f1b91a4c0259bf7ffbe510988153fbf2a9abd128169173422eb27c22ecceecc6e0d8b5982e54816772a2b7887ada37e28971b74cf1d3fa753", @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) 2.09137607s ago: executing program 0 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8000}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8000}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) 1.94507104s ago: executing program 0 (id=2950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000001000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.886354612s ago: executing program 0 (id=2952): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=@newtclass={0x440, 0x28, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {0x33f6dc7fef1ed05f, 0x2}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x80000, 0x3, 0x0, 0x3b0df48c, 0x10000, 0x2, 0x9, 0x7, 0x40, 0x7ddb, 0x9, 0x8, 0x2, 0x401, 0x5, 0xffffb6c7, 0xcaf, 0x7, 0x4, 0x1000, 0x101, 0x5b5, 0x7, 0x7, 0x870, 0x0, 0xfff, 0x6, 0xe32, 0x3f, 0x0, 0x6, 0x9, 0x6, 0x8b38, 0x1, 0x8, 0x8, 0x0, 0x29cd, 0x5, 0x18, 0x5, 0x3, 0x5, 0x5, 0x6, 0xec, 0x5, 0xcf, 0x9, 0x5, 0xed, 0x1, 0x200, 0x4, 0x4, 0x5, 0x4, 0x3, 0xfffff83c, 0x5, 0x0, 0x8, 0x9, 0x3, 0x1, 0x4, 0xb, 0xf29e, 0x7f, 0x0, 0xffffff90, 0x5, 0x1000, 0x7ff, 0x10000, 0xffffffff, 0x2e, 0x101, 0x7, 0x6, 0x100, 0xffffffff, 0x0, 0x7d, 0x8, 0x3, 0x60, 0x1ff, 0x80000001, 0x3, 0x76, 0x8, 0x5, 0x5, 0x5, 0x1, 0x2e, 0x5, 0xffff, 0x0, 0x6, 0x4, 0x1000, 0x2, 0x4, 0x6, 0xffffffff, 0x6, 0x4, 0x7, 0x100, 0x8, 0x0, 0x6, 0x5, 0x8, 0xa, 0xa15, 0x684ba00a, 0x1, 0x6, 0x1, 0x39, 0x0, 0x2, 0x9, 0x8001, 0x18000, 0x7, 0x2, 0x5, 0x7e, 0x4, 0x6, 0x101, 0x7c, 0xfffffffa, 0x2, 0x5, 0xfffffffe, 0x8, 0x3, 0x2, 0xfff, 0x0, 0x9, 0xfffffffd, 0x3ff, 0x6, 0x4, 0x0, 0x2, 0x0, 0x1, 0x5, 0x8, 0x1, 0x2, 0x2, 0x7e55000, 0x7, 0x2, 0x800, 0x1, 0xc, 0x9, 0x2, 0x3, 0xa, 0x7ff, 0x7, 0x7, 0x8, 0x800, 0x10001, 0x9, 0x1, 0x2, 0x7d46, 0x1e55, 0x3, 0x1, 0xfffffc00, 0xffffffff, 0x80000001, 0x2, 0x2, 0x9, 0x1, 0x6, 0x6, 0x4, 0x10001, 0x9, 0x2, 0x2, 0x7fe8abc3, 0x8, 0x5, 0x184, 0x1, 0x2, 0x3, 0x4, 0x81, 0x7f, 0xffffffff, 0xd, 0x8, 0x100, 0x4, 0x66, 0xe029, 0xffffff04, 0xfffffffe, 0x100, 0xb, 0x2, 0x7, 0x8a8, 0x0, 0x7ff, 0x9, 0x4, 0x7, 0x7fff, 0x51, 0xd6, 0x6, 0x101, 0x4, 0x1, 0x5, 0xc45, 0x5, 0x2, 0x8000, 0x30a9, 0x73, 0x4, 0xb, 0x401, 0xd, 0x7, 0x2, 0x101, 0x5, 0x2, 0x0, 0x8, 0x0, 0x6, 0x8001, 0x8]}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) listen(r4, 0x1) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaab5aaff130800000087dd604dd30800180600fe800000000000000000fd0000000000000000000000aa00034001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000002040000"], 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={&(0x7f0000000040)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="0424bf953077b11393d0adb6eb741bbda065aec31714120b4294ec1d0c4ce73c38cd2662093bc9e9e492205ca277d97466a194fd6db4e7900241d567a44f00382ea00fa2e074074fddcbb0433a61f2cfb840d79c3aeed7a24d6277ef6ecd3aef1313d17a505916691a38b3ffbb0a4fd87d8a33bb4298a249ba4b62553e6d697727ceec7dc39a36950c9956acc3166312b96ab01f6df975963f9c517e0193b3ff002f2d8dd009aca9d7787bcae1b8dc7b0ec95ef1ce1106f01096a54d70dad9e17963c4", 0xc3}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000001c0)="c2832af5be27f3d9dedca0aa0d67db838c65a705ec22bd43c007dde4b99613f58c3dc4a8159e1d89ba4ce24032709368", 0x30}, {&(0x7f0000000200)="68d886e1cd0d8ebb5b0062f2b71a46bb33fa759fa5275dfc0d68cbee39e11da8096e13743f98c39837f96165e557540605336116dd375ba5e28c64846204c2c8b840939607032016059cb07d1e061623aed14031db8f5f73601c2d9d7d91e368ff4bd0309a0cb208c3349265f805772d55e542", 0x73}], 0x4}, 0x80) r7 = socket(0x25, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3, 0x1000, 0x200003a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003580)=@newtfilter={0x7c, 0x2c, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x4, 0xf}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x6a0d}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x7c}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0, 0x50, r10, 0x1000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1}, 0x120) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0) 1.789510934s ago: executing program 1 (id=2953): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1}, 0x48) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, &(0x7f00000006c0), 0x9, 0x1, 0xc49, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) 1.789333459s ago: executing program 9 (id=2954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x80, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) pipe(&(0x7f0000000180)) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.659279602s ago: executing program 9 (id=2956): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @local, 'lo\x00'}}, 0x1e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x2f, 0x0, @void}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) connect$pppoe(r2, &(0x7f0000001100)={0x18, 0x0, {0x0, @broadcast, 'lo\x00'}}, 0x1e) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x3, @random="dda55d54b10e", 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="f273f0b23956", 'wlan1\x00'}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200ddde0333c5cf29662d8c506317411f00000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000000)='geneve1\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000080)) 1.612690921s ago: executing program 0 (id=2957): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r1, 0x20, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r1, 0x20, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) 1.57897417s ago: executing program 1 (id=2959): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7f99356cb3f19549eac0223f0c1055fe1e5bf2e7627928c96a1d49dacb42d45704d24d617668c5a685fcbf68611173465136e5c36697a29cc61bc98cb20048e72cd3cfb10bc02916cdbf3ec1417e892271b0ce4d741d8ea8937ac9184561bd7a62efffaf87002f6fe070fc27ddf72575be59de9ced0554610b1864b0c9d5060e70d441818a9b24ff055a29ea03fb2db837bad81b29efae0db08f910e66326232b127dc2ed85b2646112cb14975a78926bd388111c5b32e76e35f92b168465372b904222fc97d8a050f457ac0a23b32", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aaaaaaaaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf250d000000080039000300000008003c00040000000a00090000000000010000000600280004000000080032000500000008003400950900000800310009000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x2004c800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.441505488s ago: executing program 9 (id=2961): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000001c0)=0x200000, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x700, 0xfff, 0x0, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp={0x44, 0x2c, 0xd3, 0x0, 0x9, [0x8, 0x6, 0x7ff, 0x1, 0x1, 0x1, 0x8, 0x2, 0x4, 0x8]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newchain={0xcc, 0x64, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x8}, {0x16, 0xfff1}, {0x0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_POLICE={0x64, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x3, 0x4, 0x8, {0x6, 0x0, 0x48, 0x9, 0x0, 0xd0d}, {0x2, 0x0, 0xfff8, 0x8, 0x8d2, 0x7fffffff}, 0x80000001, 0x4, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc59}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbf29}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0xffff8000, 0x1}}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffb}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x70}}, @TCA_RATE={0x6, 0x5, {0xe}}]}, 0xcc}}, 0x4c014) 1.373787519s ago: executing program 0 (id=2962): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) recvmmsg$unix(r1, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/174, 0xae}, {&(0x7f0000000240)=""/230, 0xfffffead}, {&(0x7f0000000340)=""/65, 0x41}], 0x3}}], 0x1, 0x40000142, 0x0) 1.219275701s ago: executing program 9 (id=2964): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2c}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffff80}}, @NFQA_CFG_FLAGS={0x8}]}, 0x58}}, 0x884) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 1.217445053s ago: executing program 7 (id=2965): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x800) (async) close(0x3) 1.15692903s ago: executing program 1 (id=2966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2e, 0x0, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.078476242s ago: executing program 9 (id=2967): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) socket$packet(0x11, 0x2, 0x300) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000004c0)={{r1, &(0x7f0000000100)='802.15.4 MAC\x00', 0x40200, &(0x7f0000000180)={@align=0x8000000000000000, {0x8, 0x2}}, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0xfff}, 0x1, &(0x7f0000000440)=[{0x3, 0x8, &(0x7f0000000300)='netdevsim0\x00', &(0x7f0000000340)="232b4ec199f54a1f6adc56b9f87e2d57c7dc57778c06fc40cf322ea39a1ee781edccd2ca66dd8c59b0a7adc8aa15545528eb3412af94dd5de30d674938d8c187bf6af6f258c6bc64edfc10add39da46ac7a93b567cb3fbe53fd5840bcb7bf150faa53b51a18405a768851b3a9657b5b36ba55d9d4afe58d72428f181f305808b31b77599aff319c50238dfaa6bddeb73587e4e084955645f20bf200170413c06840ad010e747c34ac72ae4c39b3e975f47e3f045844524d895b4ff411a9bb5c17134e18afe5019", 0xc7, 0x20}]}) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xb}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r12) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r13, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.060253083s ago: executing program 1 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) 858.776803ms ago: executing program 8 (id=2970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, 0x0, 0x0, 0x4000045) 829.482494ms ago: executing program 7 (id=2971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000240)="83052e10eb8730e0c3cf3c346946554e2d7e6766d4c00753f2a585e2de7c616bf90ddcc8f41a17867214ec0da4894062164e09ead028e48aadf57b85d71643b7fca266e6b73144b8ba3f215eb3850d812237c390ee3be7a3114806fc8f3a5397976f0524d573d286b5a4fa815212ddf6c911ec3be7fe8bc7b80ec7d069c9c05504ef0695165ac010000c13afbaa1829b64c91ca0f640fcf7", 0x98, 0x40000, &(0x7f0000000000)={0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) 708.390329ms ago: executing program 8 (id=2972): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x256, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x80055) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x49}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e21, 0x2, @local, 0x40}}, 0xd, 0xffff, 0x2, 0x4, 0x51, 0x770}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="dd0126bd7000fbdbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r8, &(0x7f00000003c0)=""/132, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000100004639ac22258e1592000000", @ANYRES32=r10, @ANYBLOB="841100005c0304001c0012800b0001006d616373656300000c0002800500080001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@typedef={0xd}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x30, 0x30, 0x5f]}}, &(0x7f00000002c0)=""/15, 0x45, 0xf, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x101, 0x8310, 0x7, 0xc00, r8, 0x6, '\x00', r10, r11, 0x0, 0x4, 0x0, 0x7}, 0x50) r12 = socket$kcm(0x2b, 0x1, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) setsockopt$sock_attach_bpf(r12, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r12) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x1, 0x4, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 707.65573ms ago: executing program 7 (id=2973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)="ff68ced756aedb8f6afad2c7af91f9324bd2f460d4e8245c0f30bf977fde1b2afd2880ded6475646e903f2d720f301c9930d68df5fb80c1810f1cab38ced6158478ef7a2e4504f2a6a38e62b834feb9b4f031c5ca22f8f2eb5d4f1ed41a2cc471b928f8650ac61263f1209c7b498b4434e814419a0ce47ebedb4211bee1be2096ffe150f459c9f2300fad527e46f46aa18f66cf7236d232ed30ee88a217e67cb3a288dbc046304f2dce40f113ca7b47f2e377f458d34a7f2cdbea860a2ce808006f331c6ed51bb1f4d0d6cf676617a2f46da", 0xd2}, {&(0x7f0000000d00)="9b5a247f15fdf2f208a9d50c28dbd5ce9945ec1251f8072bc2c0c6f671c92282ff24fe64d942f822b6445a29311a40d33d471c917db82f1779898abc2afb97f46e3c6d", 0x43}, {&(0x7f0000000d80)="8c9e316091dba45eb98c4d1e2c917a55e0f01443177c3aa2cd468eaed95262b3a3e4b2505c4e4845108d91fe588838904e70cc5b53bd4cf560431d1b486a587c72eb1d4177ca1198f5e4fc00364abe5248ec81ce186565c5503779091d427fb6248ca80a537b37086ec3f4d9e75b83372550e8781621e0", 0x77}, {&(0x7f0000000e00)="f4c7eb618941bed01f45d24983c11f13bb5c293ea315e1c6", 0x18}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)="8fa8176522e4377489899d8869ccaebfaa64b3dde27ef32df48912abc0824a0af22f39f32ed4859870009db15a427c6d0547d54acc3593e4d913acf568e192bd591c8f1364775d9068886566a6a7f301d0759ab06729b54f8ff8208d25acdf638c16c2b8f9d88eafb16b5297675cb25e36b271c172", 0x75}, {0x0}], 0x2, 0x0, 0x0, 0x241}}], 0x2, 0x4000045) 615.419411ms ago: executing program 7 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_emit_ethernet(0x82, &(0x7f00000015c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x872}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x80, 0x3}}}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 566.790942ms ago: executing program 1 (id=2975): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x4000040) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) 461.03549ms ago: executing program 8 (id=2976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r2, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) 403.065283ms ago: executing program 8 (id=2977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700000000000170000000c000680080004000009"], 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x60, r2, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x7}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x890d}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6002}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x30088004) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x30, 0x2) 370.287228ms ago: executing program 9 (id=2978): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x10, 0xad9, 0x9, {{0x38, 0x4, 0x2, 0xf, 0xe0, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast1, @remote, {[@generic={0x83, 0xa, "cfac25cd39a07127"}, @generic={0x90, 0x4, "d1b6"}, @rr={0x7, 0x13, 0x97, [@rand_addr=0x64010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0xf}]}, @rr={0x7, 0x1f, 0x96, [@remote, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2]}, @generic={0x82, 0xb, "f5c8d894a7102e888a"}, @generic={0x82, 0xd, "51decf43b0bd816c781b4b"}, @timestamp={0x44, 0x28, 0x77, 0x0, 0x6, [0xf7e, 0x200, 0x81, 0x6b735d9d, 0x0, 0x4, 0x5, 0x10000, 0x3]}, @cipso={0x86, 0x15, 0x3, [{0x0, 0x9, "fb2c94b51ec277"}, {0x6, 0x6, "1609e084"}]}, @timestamp={0x44, 0x28, 0xc6, 0x0, 0x5, [0xfffffffa, 0xa, 0x6, 0x100, 0x3, 0x4, 0x0, 0x5, 0x7]}, @timestamp_prespec={0x44, 0xc, 0xc1, 0x3, 0x8, [{@rand_addr=0x64010100, 0xf3}]}]}}}}}) (rerun: 32) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0x401, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x3, 0x6]}, @ah_ip4_spec={@private=0xa010102, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x7]}, 0x101, 0x3}}}) 281.476106ms ago: executing program 0 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r2, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r8, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_macvtap\x00'}]}, 0x30}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaaaa0800450000b040000000032f90780a010100e0000001a0206558009c90780100000000010000d24ec3c698682d4f8dc6750fab0984572bce2c62174962184e8904a47333156256f1c0677b74d04c7df51c871e0673bbe2d110490f55f52614f68791ab1207f1721f292cdadb95adff376aed8361f1040eae14e422a55c7d6eda17282504664d4feba0d0dc0226c601d53cfa7e43ebe8df3046afd413c0b4ef0351630fa69c1a20ed906ca87a353dd6e27f80"], 0xc2) 281.318843ms ago: executing program 7 (id=2980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in=@empty, 0x0, 0x35}, @in6=@private2, {0x0, 0x7, 0x7cc98682, 0x2}, {}, {0x3, 0x5}, 0xfffffffe, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) getsockopt(r0, 0x1, 0x3e, &(0x7f0000000000)=""/125, &(0x7f0000000080)=0x7d) socket$kcm(0x29, 0x7, 0x0) 255.169894ms ago: executing program 8 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="08000000010000000700000061ae000014180000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000000000000300000000000000000000000000000000000000c1af0c04dbf384"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000700)="a76b383b7ba70a45123f799b8c33116fc3d666b7d4ddd186d26703ba63a1b8bd1572cf142bd1fd3019e6e8d8de6467698741d8512d1188343106406b75aaa1c5aea95ae00eab3c9f9c95016c218754a852247eb732578ccf0741f58f5f941136a0fb4d27d8cc4930e64e16c6be54a093bba7d3a6d97603e78f35dc5769bb7907de1c02e7a0d00bb70de36474ea0c46896b9e149c51a4097ffc081168cfc5ac451149e89dd3d0ddb4ea22c2b89d5dcc2859bd135a36f87557801f4f2055aa7709e4b8507fc76e6edfc6705d394aa8c9314f3b3129d6b7b2d92cfdcb82d8f0a07d36", &(0x7f00000004c0)=""/104}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb3c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r9 = socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r10, &(0x7f0000002e00)=[{{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10001100000000008400000000000000", @ANYRESOCT, @ANYRES16=r5], 0x10}}], 0x2, 0x40000050) (async, rerun: 64) sendto$packet(r9, &(0x7f0000000240)="bad330fbc9b55400adb3416d622a8ccadc6821fdff77f74a734871d63782ae3a91d0da646c3ddcfcb500"/66, 0x42, 0x40, &(0x7f00000001c0)={0x11, 0xc, r8, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async, rerun: 64) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) 178.263421ms ago: executing program 1 (id=2982): close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x3, 0x10001) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, r7, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x6, [0x7fff]}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast2}, &(0x7f0000000680)=0xc) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x1, 0xfe, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xfffd, 0x88000}]}}}}}}, 0x42) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) 116.905729ms ago: executing program 7 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) 0s ago: executing program 8 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001", @ANYRESHEX=r0], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@bridge_newvlan={0x28, 0x70, 0x1, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xddc}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000080)=0xd) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r6) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0xcc, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x62, 0x0, 0xb, 0x6, 0x0, @loopback, @rand_addr=0x64010102}}}, 0x22) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x880) kernel console output (not intermixed with test programs): unicast+0x10/0x10 [ 247.725543][T12965] ? netlink_sendmsg+0x650/0xb40 [ 247.725561][T12965] ? skb_put+0x11b/0x210 [ 247.725588][T12965] netlink_sendmsg+0x813/0xb40 [ 247.725620][T12965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.725644][T12965] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.725668][T12965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.725690][T12965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.725719][T12965] ____sys_sendmsg+0xa68/0xad0 [ 247.725757][T12965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.725795][T12965] ? import_iovec+0x73/0xa0 [ 247.725826][T12965] ___sys_sendmsg+0x2a5/0x360 [ 247.725860][T12965] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.725930][T12965] ? __fget_files+0x2a/0x420 [ 247.725956][T12965] ? __fget_files+0x3a0/0x420 [ 247.725994][T12965] __x64_sys_sendmsg+0x1bd/0x2a0 [ 247.726026][T12965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.726065][T12965] ? __pfx_ksys_write+0x10/0x10 [ 247.726099][T12965] do_syscall_64+0x14d/0xf80 [ 247.726126][T12965] ? trace_irq_disable+0x3b/0x150 [ 247.726152][T12965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.726171][T12965] ? clear_bhb_loop+0x40/0x90 [ 247.726196][T12965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.726215][T12965] RIP: 0033:0x7f5b0f59c629 [ 247.726233][T12965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.726249][T12965] RSP: 002b:00007f5b10460028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.726270][T12965] RAX: ffffffffffffffda RBX: 00007f5b0f815fa0 RCX: 00007f5b0f59c629 [ 247.726283][T12965] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 247.726293][T12965] RBP: 00007f5b10460090 R08: 0000000000000000 R09: 0000000000000000 [ 247.726305][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.726316][T12965] R13: 00007f5b0f816038 R14: 00007f5b0f815fa0 R15: 00007ffee15cf708 [ 247.726350][T12965] [ 248.307476][T12980] A link change request failed with some changes committed already. Interface ªªªªª9oïß+Œü4€ may have been left with an inconsistent configuration, please check. [ 248.449020][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2110'. [ 248.503682][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2110'. [ 248.699020][T12997] unsupported nla_type 33542 [ 248.826878][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 249.152521][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 249.172044][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 249.189412][T13026] openvswitch: netlink: IP tunnel dst address not specified [ 249.189852][T13028] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 249.273940][T13032] netlink: 'syz.5.2120': attribute type 39 has an invalid length. [ 249.380490][T13036] veth0: entered promiscuous mode [ 249.403771][T13036] veth0: left promiscuous mode [ 249.602668][T13069] netlink: 'syz.1.2125': attribute type 16 has an invalid length. [ 249.632858][T13069] netlink: 'syz.1.2125': attribute type 17 has an invalid length. [ 249.777581][T13069] bond0: left allmulticast mode [ 249.792996][T13069] bond_slave_0: left allmulticast mode [ 249.802475][T13069] bond_slave_1: left allmulticast mode [ 249.810186][T13057] IPVS: persistence engine module ip_vs_pe_À not found [ 249.819548][T13069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.108257][T13126] FAULT_INJECTION: forcing a failure. [ 250.108257][T13126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.108597][T13121] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 250.139155][T13121] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 250.150079][T13126] CPU: 1 UID: 0 PID: 13126 Comm: syz.1.2131 Not tainted syzkaller #0 PREEMPT(full) [ 250.150106][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.150117][T13126] Call Trace: [ 250.150123][T13126] [ 250.150131][T13126] dump_stack_lvl+0xe8/0x150 [ 250.150165][T13126] should_fail_ex+0x412/0x560 [ 250.150193][T13126] _copy_from_user+0x2d/0xb0 [ 250.150221][T13126] core_sys_select+0x6fd/0xc30 [ 250.150261][T13126] ? __pfx_core_sys_select+0x10/0x10 [ 250.150312][T13126] ? __pfx_set_user_sigmask+0x10/0x10 [ 250.150347][T13126] __se_sys_pselect6+0x267/0x320 [ 250.150378][T13126] ? __pfx___se_sys_pselect6+0x10/0x10 [ 250.150402][T13126] ? __pfx_ksys_write+0x10/0x10 [ 250.150427][T13126] ? __x64_sys_pselect6+0x21/0xf0 [ 250.150454][T13126] do_syscall_64+0x14d/0xf80 [ 250.150481][T13126] ? trace_irq_disable+0x3b/0x150 [ 250.150507][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.150526][T13126] ? clear_bhb_loop+0x40/0x90 [ 250.150549][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.150569][T13126] RIP: 0033:0x7fc46a59c629 [ 250.150588][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.150603][T13126] RSP: 002b:00007fc46b481028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 250.150636][T13126] RAX: ffffffffffffffda RBX: 00007fc46a815fa0 RCX: 00007fc46a59c629 [ 250.150650][T13126] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 250.150662][T13126] RBP: 00007fc46b481090 R08: 0000000000000000 R09: 0000000000000000 [ 250.150673][T13126] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 250.150685][T13126] R13: 00007fc46a816038 R14: 00007fc46a815fa0 R15: 00007ffe0d16cf98 [ 250.150716][T13126] [ 250.509293][T13137] netlink: 'syz.0.2134': attribute type 4 has an invalid length. [ 250.520517][T13137] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2134'. [ 250.892545][T13153] Cannot find add_set index 0 as target [ 250.907636][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.919724][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.930939][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.948666][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 250.966832][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.975774][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.127211][T13154] lo speed is unknown, defaulting to 1000 [ 251.288897][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2144'. [ 251.386097][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 251.587056][T13188] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 251.742075][T13154] chnl_net:caif_netlink_parms(): no params data found [ 252.352439][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 253.114824][ T5842] Bluetooth: hci7: command tx timeout [ 253.400841][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.408320][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.416102][T13154] bridge_slave_0: entered allmulticast mode [ 253.423803][T13154] bridge_slave_0: entered promiscuous mode [ 253.431518][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.440159][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.447716][T13154] bridge_slave_1: entered allmulticast mode [ 253.457251][T13154] bridge_slave_1: entered promiscuous mode [ 253.572195][T13154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.620667][T13225] bond7: entered allmulticast mode [ 253.630124][T13154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.671686][T13154] team0: Port device team_slave_0 added [ 253.717259][T13225] bridge13: entered promiscuous mode [ 253.722700][T13225] bridge13: entered allmulticast mode [ 253.732450][T13225] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 253.746691][T13154] team0: Port device team_slave_1 added [ 253.788242][T13154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.796403][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.827877][T13154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.874536][T13154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.881512][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.911762][T13154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.020829][T13154] hsr_slave_0: entered promiscuous mode [ 254.028197][T13154] hsr_slave_1: entered promiscuous mode [ 254.054417][T13154] debugfs: 'hsr0' already exists in 'hsr' [ 254.060256][T13154] Cannot create hsr debugfs directory [ 254.278896][T13254] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 254.291704][T13255] netlink: 'syz.5.2169': attribute type 2 has an invalid length. [ 254.323493][T13254] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.404366][T13254] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.412251][T13254] bond11: (slave vxcan7): The slave device specified does not support setting the MAC address [ 254.442444][T13254] bond11: (slave vxcan7): Error -95 calling set_mac_address [ 254.473155][T13264] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2168'. [ 254.576345][T13258] veth9: entered promiscuous mode [ 254.584733][T13258] bond11: (slave veth9): Enslaving as an active interface with a down link [ 254.650556][T13267] bond8: Unable to set up delay as MII monitoring is disabled [ 254.660289][T13267] bond8 (unregistering): Released all slaves [ 254.694644][T13269] bond2: (slave bond_slave_1): Device is not our slave [ 254.701529][T13269] bond2: option active_slave: invalid value (bond_slave_1) [ 254.714113][T13269] bond2 (unregistering): Released all slaves [ 254.924029][T13101] veth0_to_bond: left promiscuous mode [ 254.981947][T13154] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.017491][T13154] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.047165][T13154] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.058791][T13284] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2178'. [ 255.070765][T13154] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.185058][ T5842] Bluetooth: hci7: command tx timeout [ 255.224373][T13296] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2181'. [ 255.257552][T13154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.301716][T13154] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.346658][T13302] vxcan1: entered promiscuous mode [ 255.399318][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 255.436272][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.443521][T13105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.484287][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.491437][T13098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.686613][T13307] veth1_macvtap: left promiscuous mode [ 255.698742][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 255.708469][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 255.717877][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 255.727690][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 255.738598][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 255.805775][T13310] lo speed is unknown, defaulting to 1000 [ 255.898512][T13315] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 255.919307][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.929026][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.978146][T13317] bond8: (slave bond_slave_1): Device is not our slave [ 256.002915][T13317] bond8: option active_slave: invalid value (bond_slave_1) [ 256.027799][T13317] bond8 (unregistering): Released all slaves [ 256.150102][T13154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.167725][T13326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.203095][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 256.367162][T13310] chnl_net:caif_netlink_parms(): no params data found [ 256.643684][T13310] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.651164][T13310] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.661016][T13310] bridge_slave_0: entered allmulticast mode [ 256.669432][T13310] bridge_slave_0: entered promiscuous mode [ 256.687455][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.694893][T13310] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.702200][T13310] bridge_slave_1: entered allmulticast mode [ 256.709743][T13310] bridge_slave_1: entered promiscuous mode [ 256.745305][T13310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.758230][T13310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.807689][T13310] team0: Port device team_slave_0 added [ 256.817711][T13310] team0: Port device team_slave_1 added [ 256.879347][T13154] veth0_vlan: entered promiscuous mode [ 256.892535][T13154] veth1_vlan: entered promiscuous mode [ 256.902150][T13310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.910442][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.937632][T13310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.954235][T13310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.961852][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.996982][T13310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.108213][T13310] hsr_slave_0: entered promiscuous mode [ 257.115432][T13310] hsr_slave_1: entered promiscuous mode [ 257.121619][T13310] debugfs: 'hsr0' already exists in 'hsr' [ 257.127425][T13310] Cannot create hsr debugfs directory [ 257.162485][T13154] veth0_macvtap: entered promiscuous mode [ 257.239689][T13154] veth1_macvtap: entered promiscuous mode [ 257.263157][ T5842] Bluetooth: hci7: command tx timeout [ 257.284545][T13360] bond12: (slave bond_slave_1): Device is not our slave [ 257.291521][T13360] bond12: option active_slave: invalid value (bond_slave_1) [ 257.301348][T13360] bond12 (unregistering): Released all slaves [ 257.373433][T13154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.400171][T13154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.444275][T13100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.459775][T13100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.492048][T13100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.502952][T13101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.531938][T13365] netlink: 'syz.1.2199': attribute type 13 has an invalid length. [ 257.586792][T13366] netlink: 'syz.1.2199': attribute type 16 has an invalid length. [ 257.595626][T13366] netlink: 'syz.1.2199': attribute type 17 has an invalid length. [ 257.683305][T13366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.699088][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 257.714228][T13310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 257.738451][T13310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 257.791987][T13310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.818368][T13310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.835586][ T5842] Bluetooth: hci8: command tx timeout [ 257.901748][T13373] geneve2: entered promiscuous mode [ 257.920978][T13100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.924027][T13105] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51192 - 0 [ 257.932798][T13100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.948051][T13105] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51192 - 0 [ 258.007785][T13373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.047771][T13105] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51192 - 0 [ 258.105937][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.125012][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.284625][T13310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.346861][T13310] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.366642][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.373855][T13105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.385472][T13384] netlink: 'syz.7.2137': attribute type 24 has an invalid length. [ 258.406868][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.414088][T13099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.523947][T13388] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2205'. [ 258.610823][T13392] bond12: (slave bond_slave_1): Device is not our slave [ 258.619142][T13392] bond12: option active_slave: invalid value (bond_slave_1) [ 258.636104][T13392] bond12 (unregistering): Released all slaves [ 258.841055][T13401] pimreg: entered allmulticast mode [ 258.877774][T13310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.197627][T13424] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 259.332570][T13432] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.354201][ T5842] Bluetooth: hci7: command tx timeout [ 259.369473][T13432] bond12: (slave lo): Enslaving as an active interface with an up link [ 259.374018][T13436] netlink: 'syz.7.2215': attribute type 83 has an invalid length. [ 259.395604][T13432] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 259.480501][T13373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.493595][T13373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51192 - 0 [ 259.622584][T13373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.634553][T13373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51192 - 0 [ 259.722005][T13373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.735092][T13373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51192 - 0 [ 259.759501][T13310] veth0_vlan: entered promiscuous mode [ 259.776179][T13310] veth1_vlan: entered promiscuous mode [ 259.856670][T13310] veth0_macvtap: entered promiscuous mode [ 259.880869][T13310] veth1_macvtap: entered promiscuous mode [ 259.903042][ T5842] Bluetooth: hci8: command tx timeout [ 259.927698][T13101] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 51192 - 0 [ 259.946716][T13101] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.979192][T13101] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 51192 - 0 [ 259.997303][T13447] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2220'. [ 259.999543][T13101] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.030386][T13101] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 51192 - 0 [ 260.042079][T13101] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.055117][T13310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.130617][T13310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.141518][T13098] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 51192 - 0 [ 260.154967][T13098] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.164168][T13450] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.2221'. [ 260.184707][T13450] openvswitch: netlink: Message has 6 unknown bytes. [ 260.200834][T13097] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.231939][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'. [ 260.268375][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'. [ 260.286541][T13097] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.308485][T13097] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.331071][T13097] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.512580][T13097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.529963][T13097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.592590][T13107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.615413][T13107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.379699][T13497] syzkaller1: entered promiscuous mode [ 261.386144][T13497] syzkaller1: entered allmulticast mode [ 261.441816][T13497] netlink: 'syz.0.2235': attribute type 9 has an invalid length. [ 261.598911][T13515] netlink: 'syz.1.2241': attribute type 7 has an invalid length. [ 261.607401][T13515] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2241'. [ 261.688861][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2240'. [ 261.715046][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2240'. [ 261.916006][T13527] netlink: 'syz.0.2246': attribute type 29 has an invalid length. [ 261.935894][T13528] netlink: 'syz.0.2246': attribute type 29 has an invalid length. [ 261.984056][ T5842] Bluetooth: hci8: command tx timeout [ 262.055078][T13533] x_tables: unsorted underflow at hook 2 [ 262.288456][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2252'. [ 263.027830][T13581] veth0_to_team: Caught tx_queue_len zero misconfig [ 263.691331][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2263'. [ 263.881853][T13611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2264'. [ 264.063436][ T5842] Bluetooth: hci8: command tx timeout [ 264.071534][T13619] vlan2: entered allmulticast mode [ 264.391890][T13616] IPv6: sit1: Disabled Multicast RS [ 264.423124][T13630] syzkaller0: entered allmulticast mode [ 264.969158][T13663] netlink: 'syz.7.2282': attribute type 1 has an invalid length. [ 265.019525][T13663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.115233][T13672] kthread_run failed with err -4 [ 265.148219][T13683] syzkaller0: entered promiscuous mode [ 265.153856][T13683] syzkaller0: entered allmulticast mode [ 265.269960][T13688] __nla_validate_parse: 7 callbacks suppressed [ 265.269981][T13688] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2288'. [ 265.388772][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880469bb000: Timeout. Failed to send simple message. [ 265.463713][T13693] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 266.186332][T13741] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 266.205068][T13747] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2306'. [ 266.539798][T13760] netlink: 'syz.8.2309': attribute type 1 has an invalid length. [ 266.665164][T13760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.740833][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2309'. [ 266.955417][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2316'. [ 266.974755][T13772] netlink: 13 bytes leftover after parsing attributes in process `syz.8.2316'. [ 267.050055][T13772] veth3: entered promiscuous mode [ 267.201015][T13788] syzkaller1: entered promiscuous mode [ 267.208504][T13788] syzkaller1: entered allmulticast mode [ 267.634432][T13807] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 267.688744][T13809] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.2329'. [ 267.712962][T13809] bridge_slave_1: default FDB implementation only supports local addresses [ 267.909892][T13819] FAULT_INJECTION: forcing a failure. [ 267.909892][T13819] name failslab, interval 1, probability 0, space 0, times 0 [ 267.983541][T13819] CPU: 0 UID: 0 PID: 13819 Comm: syz.0.2333 Not tainted syzkaller #0 PREEMPT(full) [ 267.983570][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.983581][T13819] Call Trace: [ 267.983588][T13819] [ 267.983595][T13819] dump_stack_lvl+0xe8/0x150 [ 267.983628][T13819] should_fail_ex+0x412/0x560 [ 267.983655][T13819] should_failslab+0xa8/0x100 [ 267.983674][T13819] ? __kernfs_new_node+0xe9/0x8e0 [ 267.983697][T13819] kmem_cache_alloc_noprof+0x87/0x650 [ 267.983726][T13819] ? kernfs_add_one+0x477/0x5c0 [ 267.983758][T13819] __kernfs_new_node+0xe9/0x8e0 [ 267.983791][T13819] ? __pfx___kernfs_new_node+0x10/0x10 [ 267.983818][T13819] ? kernfs_root+0x1c/0x230 [ 267.983850][T13819] ? kernfs_root+0x1c/0x230 [ 267.983874][T13819] ? kernfs_root+0x1c/0x230 [ 267.983895][T13819] ? kernfs_root+0x1c/0x230 [ 267.983924][T13819] kernfs_new_node+0x102/0x210 [ 267.983956][T13819] __kernfs_create_file+0x4b/0x2e0 [ 267.983980][T13819] sysfs_add_file_mode_ns+0x238/0x300 [ 267.984013][T13819] sysfs_create_file_ns+0x12b/0x1b0 [ 267.984038][T13819] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 267.984066][T13819] ? __dev_fwnode+0x50/0x80 [ 267.984094][T13819] ? device_create_file+0xf4/0x1b0 [ 267.984122][T13819] device_add+0x440/0xb70 [ 267.984156][T13819] device_create+0x269/0x300 [ 267.984180][T13819] ? timer_init_key+0x161/0x2f0 [ 267.984204][T13819] ? __pfx_device_create+0x10/0x10 [ 267.984225][T13819] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 267.984256][T13819] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 267.984302][T13819] ? __pfx_stack_trace_save+0x10/0x10 [ 267.984326][T13819] ? stack_depot_save_flags+0x33/0x810 [ 267.984367][T13819] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 267.984394][T13819] ? __kasan_kmalloc+0x93/0xb0 [ 267.984426][T13819] hwsim_new_radio_nl+0xf35/0x1bd0 [ 267.984482][T13819] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 267.984523][T13819] ? rcu_is_watching+0x15/0xb0 [ 267.984550][T13819] ? trace_kmalloc+0x2a/0x110 [ 267.984576][T13819] ? __nla_parse+0x40/0x60 [ 267.984605][T13819] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 267.984643][T13819] genl_family_rcv_msg_doit+0x22a/0x330 [ 267.984681][T13819] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 267.984724][T13819] ? bpf_lsm_capable+0x9/0x20 [ 267.984748][T13819] ? security_capable+0x7e/0x2c0 [ 267.984778][T13819] genl_rcv_msg+0x61c/0x7a0 [ 267.984814][T13819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.984840][T13819] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 267.984870][T13819] ? __lock_acquire+0x6b5/0x2cf0 [ 267.984908][T13819] netlink_rcv_skb+0x232/0x4b0 [ 267.984932][T13819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.984962][T13819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.985006][T13819] ? down_read+0x272/0x2e0 [ 267.985025][T13819] ? genl_rcv+0xd/0x40 [ 267.985055][T13819] genl_rcv+0x28/0x40 [ 267.985080][T13819] netlink_unicast+0x80f/0x9b0 [ 267.985111][T13819] ? __pfx_netlink_unicast+0x10/0x10 [ 267.985134][T13819] ? netlink_sendmsg+0x650/0xb40 [ 267.985154][T13819] ? skb_put+0x11b/0x210 [ 267.985185][T13819] netlink_sendmsg+0x813/0xb40 [ 267.985219][T13819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.985246][T13819] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.985272][T13819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.985295][T13819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.985317][T13819] ____sys_sendmsg+0xa68/0xad0 [ 267.985364][T13819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.985403][T13819] ? import_iovec+0x73/0xa0 [ 267.985434][T13819] ___sys_sendmsg+0x2a5/0x360 [ 267.985469][T13819] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.985539][T13819] ? __fget_files+0x2a/0x420 [ 267.985565][T13819] ? __fget_files+0x3a0/0x420 [ 267.985602][T13819] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.985634][T13819] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.985674][T13819] ? __pfx_ksys_write+0x10/0x10 [ 267.985708][T13819] do_syscall_64+0x14d/0xf80 [ 267.985735][T13819] ? trace_irq_disable+0x3b/0x150 [ 267.985761][T13819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.985781][T13819] ? clear_bhb_loop+0x40/0x90 [ 267.985806][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.985825][T13819] RIP: 0033:0x7f928479c629 [ 267.985844][T13819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.985860][T13819] RSP: 002b:00007f928561b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.985882][T13819] RAX: ffffffffffffffda RBX: 00007f9284a15fa0 RCX: 00007f928479c629 [ 267.985896][T13819] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 267.985908][T13819] RBP: 00007f928561b090 R08: 0000000000000000 R09: 0000000000000000 [ 267.985920][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.985932][T13819] R13: 00007f9284a16038 R14: 00007f9284a15fa0 R15: 00007fffc3a200c8 [ 267.985967][T13819] [ 268.615231][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 268.693958][T13832] netlink: 'syz.0.2336': attribute type 4 has an invalid length. [ 268.705953][T13832] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 268.993763][T13854] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 269.128708][T13863] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.181737][T13865] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 269.414147][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'. [ 269.433925][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'. [ 269.456025][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'. [ 269.848061][T13895] netlink: 'syz.1.2353': attribute type 8 has an invalid length. [ 269.985811][ T1957] block nbd1: Possible stuck request ffff888026a18000: control (read@0,1024B). Runtime 30 seconds [ 269.998149][ T1957] block nbd1: Possible stuck request ffff888026a18200: control (read@1024,1024B). Runtime 30 seconds [ 270.010200][ T1957] block nbd1: Possible stuck request ffff888026a18400: control (read@2048,1024B). Runtime 30 seconds [ 270.021213][ T1957] block nbd1: Possible stuck request ffff888026a18600: control (read@3072,1024B). Runtime 30 seconds [ 270.444470][T13928] __nla_validate_parse: 4 callbacks suppressed [ 270.444491][T13928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2359'. [ 270.468438][T13930] netlink: 'syz.8.2361': attribute type 11 has an invalid length. [ 270.498645][T13930] netlink: 'syz.8.2361': attribute type 11 has an invalid length. [ 270.499233][T13931] netlink: 'syz.7.2362': attribute type 1 has an invalid length. [ 270.506721][T13930] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2361'. [ 270.559951][T13931] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 270.937221][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 270.960831][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 270.974113][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 270.992462][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2364'. [ 271.006004][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 271.025044][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 271.100452][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2364'. [ 271.124569][T13954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2366'. [ 271.179921][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.187840][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.189283][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2366'. [ 271.235348][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2366'. [ 271.462493][T13969] netlink: 'syz.0.2368': attribute type 8 has an invalid length. [ 271.480820][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2368'. [ 271.514054][T13942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.544464][T13942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.817283][T13949] geneve2: entered promiscuous mode [ 271.833181][T13949] geneve2: entered allmulticast mode [ 271.865078][T13969] bond0: entered promiscuous mode [ 271.881459][T13969] bond_slave_0: entered promiscuous mode [ 271.900897][T13969] bond_slave_1: entered promiscuous mode [ 271.936106][T13969] bridge_slave_1: entered promiscuous mode [ 271.994334][T13969] gretap0: entered promiscuous mode [ 272.016374][T13969] bond0: left promiscuous mode [ 272.030503][T13969] bond_slave_0: left promiscuous mode [ 272.041497][T13969] bond_slave_1: left promiscuous mode [ 272.059440][T13969] bridge_slave_1: left promiscuous mode [ 272.074371][T13969] gretap0: left promiscuous mode [ 272.118256][T13946] lo speed is unknown, defaulting to 1000 [ 272.281777][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2374'. [ 272.313065][T13997] netlink: 'syz.8.2374': attribute type 7 has an invalid length. [ 272.320844][T13997] netlink: 'syz.8.2374': attribute type 8 has an invalid length. [ 272.364180][T14001] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 272.383582][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2374'. [ 272.580041][T14010] netem: change failed [ 272.808850][T14030] openvswitch: netlink: Flow key attr not present in new flow. [ 272.988307][T14036] bond13: (slave bond_slave_1): Device is not our slave [ 272.996020][T14036] bond13: option active_slave: invalid value (bond_slave_1) [ 273.009538][T14036] bond13 (unregistering): Released all slaves [ 273.099963][T14042] block nbd8: not configured, cannot reconfigure [ 273.108879][ T5842] Bluetooth: hci9: command tx timeout [ 273.147974][T14044] netlink: 'syz.7.2385': attribute type 1 has an invalid length. [ 273.189840][T14044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.204205][T13946] chnl_net:caif_netlink_parms(): no params data found [ 273.342223][T14051] bond2: (slave gretap1): making interface the new active one [ 273.377700][T14051] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 273.760065][T14071] syzkaller0: entered promiscuous mode [ 273.772273][T14071] syzkaller0: entered allmulticast mode [ 273.864422][T14082] tipc: Started in network mode [ 273.871819][T14082] tipc: Node identity 9e0445c988f2, cluster identity 4711 [ 273.905337][T14082] tipc: Enabled bearer , priority 0 [ 273.942553][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.954547][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.961978][T13946] bridge_slave_0: entered allmulticast mode [ 273.971484][T13946] bridge_slave_0: entered promiscuous mode [ 274.009343][T14085] tipc: Enabling of bearer rejected, already enabled [ 274.021898][T14082] +: renamed from syzkaller0 [ 274.064440][T14082] tipc: Disabling bearer [ 274.097514][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.111687][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.123655][T13946] bridge_slave_1: entered allmulticast mode [ 274.142242][T13946] bridge_slave_1: entered promiscuous mode [ 274.310737][T14101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.388221][T14101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.474783][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.510482][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.544228][T14107] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 274.574973][T14107] netdevsim netdevsim7: Falling back to sysfs fallback for:  [ 274.617450][T14116] FAULT_INJECTION: forcing a failure. [ 274.617450][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 274.645611][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.1.2401 Not tainted syzkaller #0 PREEMPT(full) [ 274.645639][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.645650][T14116] Call Trace: [ 274.645657][T14116] [ 274.645665][T14116] dump_stack_lvl+0xe8/0x150 [ 274.645695][T14116] should_fail_ex+0x412/0x560 [ 274.645722][T14116] should_failslab+0xa8/0x100 [ 274.645744][T14116] ? __kernfs_new_node+0xe9/0x8e0 [ 274.645769][T14116] kmem_cache_alloc_noprof+0x87/0x650 [ 274.645805][T14116] __kernfs_new_node+0xe9/0x8e0 [ 274.645836][T14116] ? __pfx___kernfs_new_node+0x10/0x10 [ 274.645860][T14116] ? kernfs_root+0x1c/0x230 [ 274.645892][T14116] ? kernfs_root+0x1c/0x230 [ 274.645916][T14116] ? kernfs_root+0x1c/0x230 [ 274.645937][T14116] ? kernfs_root+0x1c/0x230 [ 274.645968][T14116] kernfs_new_node+0x102/0x210 [ 274.646001][T14116] __kernfs_create_file+0x4b/0x2e0 [ 274.646026][T14116] sysfs_add_file_mode_ns+0x238/0x300 [ 274.646058][T14116] sysfs_merge_group+0x183/0x320 [ 274.646088][T14116] ? __pfx_sysfs_merge_group+0x10/0x10 [ 274.646116][T14116] ? kobject_put+0x516/0x560 [ 274.646143][T14116] dpm_sysfs_add+0xd2/0x270 [ 274.646169][T14116] device_add+0x4d8/0xb70 [ 274.646203][T14116] device_create+0x269/0x300 [ 274.646226][T14116] ? timer_init_key+0x161/0x2f0 [ 274.646251][T14116] ? __pfx_device_create+0x10/0x10 [ 274.646272][T14116] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 274.646303][T14116] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 274.646349][T14116] ? __pfx_stack_trace_save+0x10/0x10 [ 274.646374][T14116] ? stack_depot_save_flags+0x33/0x810 [ 274.646406][T14116] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 274.646434][T14116] ? __kasan_kmalloc+0x93/0xb0 [ 274.646467][T14116] hwsim_new_radio_nl+0xf35/0x1bd0 [ 274.646517][T14116] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 274.646565][T14116] ? rcu_is_watching+0x15/0xb0 [ 274.646591][T14116] ? trace_kmalloc+0x2a/0x110 [ 274.646618][T14116] ? __nla_parse+0x40/0x60 [ 274.646648][T14116] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 274.646687][T14116] genl_family_rcv_msg_doit+0x22a/0x330 [ 274.646724][T14116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.646767][T14116] ? bpf_lsm_capable+0x9/0x20 [ 274.646790][T14116] ? security_capable+0x7e/0x2c0 [ 274.646818][T14116] genl_rcv_msg+0x61c/0x7a0 [ 274.646849][T14116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.646877][T14116] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 274.646906][T14116] ? __lock_acquire+0x6b5/0x2cf0 [ 274.646943][T14116] netlink_rcv_skb+0x232/0x4b0 [ 274.646967][T14116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.646996][T14116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.647039][T14116] ? down_read+0x272/0x2e0 [ 274.647056][T14116] ? genl_rcv+0xd/0x40 [ 274.647084][T14116] genl_rcv+0x28/0x40 [ 274.647109][T14116] netlink_unicast+0x80f/0x9b0 [ 274.647158][T14116] ? __pfx_netlink_unicast+0x10/0x10 [ 274.647182][T14116] ? netlink_sendmsg+0x650/0xb40 [ 274.647202][T14116] ? skb_put+0x11b/0x210 [ 274.647233][T14116] netlink_sendmsg+0x813/0xb40 [ 274.647267][T14116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.647293][T14116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.647317][T14116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.647338][T14116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.647360][T14116] ____sys_sendmsg+0xa68/0xad0 [ 274.647397][T14116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.647435][T14116] ? import_iovec+0x73/0xa0 [ 274.647463][T14116] ___sys_sendmsg+0x2a5/0x360 [ 274.647497][T14116] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.647595][T14116] ? __fget_files+0x2a/0x420 [ 274.647621][T14116] ? __fget_files+0x3a0/0x420 [ 274.647667][T14116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.647699][T14116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.647739][T14116] ? __pfx_ksys_write+0x10/0x10 [ 274.647774][T14116] do_syscall_64+0x14d/0xf80 [ 274.647802][T14116] ? trace_irq_disable+0x3b/0x150 [ 274.647829][T14116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.647850][T14116] ? clear_bhb_loop+0x40/0x90 [ 274.647874][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.647894][T14116] RIP: 0033:0x7fc46a59c629 [ 274.647913][T14116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.647929][T14116] RSP: 002b:00007fc46b481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.647951][T14116] RAX: ffffffffffffffda RBX: 00007fc46a815fa0 RCX: 00007fc46a59c629 [ 274.647965][T14116] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 274.647978][T14116] RBP: 00007fc46b481090 R08: 0000000000000000 R09: 0000000000000000 [ 274.647990][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.648001][T14116] R13: 00007fc46a816038 R14: 00007fc46a815fa0 R15: 00007ffe0d16cf98 [ 274.648035][T14116] [ 274.667069][T13946] team0: Port device team_slave_0 added [ 275.141025][T13946] team0: Port device team_slave_1 added [ 275.182821][ T5842] Bluetooth: hci9: command tx timeout [ 275.319449][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.342045][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.409481][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.425554][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.432829][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.465021][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.560162][T14139] __nla_validate_parse: 7 callbacks suppressed [ 275.560184][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2405'. [ 275.578101][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2405'. [ 275.641912][T13946] hsr_slave_0: entered promiscuous mode [ 275.645467][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.659511][T13946] hsr_slave_1: entered promiscuous mode [ 275.661125][T14148] unsupported nlmsg_type 40 [ 275.674045][T13946] debugfs: 'hsr0' already exists in 'hsr' [ 275.684988][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.706311][T13946] Cannot create hsr debugfs directory [ 275.735830][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.757482][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.784550][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.820208][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.862176][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 275.876457][T14158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.903470][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2406'. [ 276.153172][T14172] FAULT_INJECTION: forcing a failure. [ 276.153172][T14172] name failslab, interval 1, probability 0, space 0, times 0 [ 276.170649][T14171] sctp: [Deprecated]: syz.0.2412 (pid 14171) Use of int in max_burst socket option. [ 276.170649][T14171] Use struct sctp_assoc_value instead [ 276.180073][T14172] CPU: 1 UID: 0 PID: 14172 Comm: syz.8.2411 Not tainted syzkaller #0 PREEMPT(full) [ 276.180099][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.180109][T14172] Call Trace: [ 276.180116][T14172] [ 276.180124][T14172] dump_stack_lvl+0xe8/0x150 [ 276.180155][T14172] should_fail_ex+0x412/0x560 [ 276.180180][T14172] should_failslab+0xa8/0x100 [ 276.180201][T14172] ? __kernfs_new_node+0xe9/0x8e0 [ 276.180225][T14172] kmem_cache_alloc_noprof+0x87/0x650 [ 276.180259][T14172] __kernfs_new_node+0xe9/0x8e0 [ 276.180289][T14172] ? __pfx___kernfs_new_node+0x10/0x10 [ 276.180313][T14172] ? kernfs_root+0x1c/0x230 [ 276.180341][T14172] ? kernfs_root+0x1c/0x230 [ 276.180362][T14172] ? kernfs_root+0x1c/0x230 [ 276.180381][T14172] ? kernfs_root+0x1c/0x230 [ 276.180407][T14172] kernfs_new_node+0x102/0x210 [ 276.180440][T14172] __kernfs_create_file+0x4b/0x2e0 [ 276.180461][T14172] sysfs_add_file_mode_ns+0x238/0x300 [ 276.180490][T14172] sysfs_merge_group+0x183/0x320 [ 276.180516][T14172] ? __pfx_sysfs_merge_group+0x10/0x10 [ 276.180539][T14172] ? kobject_put+0x516/0x560 [ 276.180571][T14172] dpm_sysfs_add+0xd2/0x270 [ 276.180592][T14172] device_add+0x4d8/0xb70 [ 276.180622][T14172] device_create+0x269/0x300 [ 276.180642][T14172] ? timer_init_key+0x161/0x2f0 [ 276.180663][T14172] ? __pfx_device_create+0x10/0x10 [ 276.180683][T14172] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 276.180711][T14172] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 276.180751][T14172] ? __pfx_stack_trace_save+0x10/0x10 [ 276.180773][T14172] ? stack_depot_save_flags+0x33/0x810 [ 276.180800][T14172] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 276.180823][T14172] ? __kasan_kmalloc+0x93/0xb0 [ 276.180852][T14172] hwsim_new_radio_nl+0xf35/0x1bd0 [ 276.180899][T14172] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 276.180934][T14172] ? rcu_is_watching+0x15/0xb0 [ 276.180956][T14172] ? trace_kmalloc+0x2a/0x110 [ 276.180979][T14172] ? __nla_parse+0x40/0x60 [ 276.181005][T14172] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 276.181038][T14172] genl_family_rcv_msg_doit+0x22a/0x330 [ 276.181070][T14172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.181107][T14172] ? bpf_lsm_capable+0x9/0x20 [ 276.181128][T14172] ? security_capable+0x7e/0x2c0 [ 276.181154][T14172] genl_rcv_msg+0x61c/0x7a0 [ 276.181184][T14172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.181207][T14172] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 276.181232][T14172] ? __lock_acquire+0x6b5/0x2cf0 [ 276.181265][T14172] netlink_rcv_skb+0x232/0x4b0 [ 276.181286][T14172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.181311][T14172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.181349][T14172] ? down_read+0x272/0x2e0 [ 276.181365][T14172] ? genl_rcv+0xd/0x40 [ 276.181389][T14172] genl_rcv+0x28/0x40 [ 276.181410][T14172] netlink_unicast+0x80f/0x9b0 [ 276.181438][T14172] ? __pfx_netlink_unicast+0x10/0x10 [ 276.181458][T14172] ? netlink_sendmsg+0x650/0xb40 [ 276.181475][T14172] ? skb_put+0x11b/0x210 [ 276.181502][T14172] netlink_sendmsg+0x813/0xb40 [ 276.181532][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.181562][T14172] ? aa_sock_msg_perm+0xf1/0x1b0 [ 276.181584][T14172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.181604][T14172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.181623][T14172] ____sys_sendmsg+0xa68/0xad0 [ 276.181657][T14172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.181690][T14172] ? import_iovec+0x73/0xa0 [ 276.181717][T14172] ___sys_sendmsg+0x2a5/0x360 [ 276.181747][T14172] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.181807][T14172] ? __fget_files+0x2a/0x420 [ 276.181830][T14172] ? __fget_files+0x3a0/0x420 [ 276.181864][T14172] __x64_sys_sendmsg+0x1bd/0x2a0 [ 276.181890][T14172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.181924][T14172] ? __pfx_ksys_write+0x10/0x10 [ 276.181954][T14172] do_syscall_64+0x14d/0xf80 [ 276.181977][T14172] ? trace_irq_disable+0x3b/0x150 [ 276.182000][T14172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.182017][T14172] ? clear_bhb_loop+0x40/0x90 [ 276.182039][T14172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.182055][T14172] RIP: 0033:0x7fa060b9c629 [ 276.182072][T14172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.182086][T14172] RSP: 002b:00007fa05edf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.182106][T14172] RAX: ffffffffffffffda RBX: 00007fa060e15fa0 RCX: 00007fa060b9c629 [ 276.182119][T14172] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 276.182130][T14172] RBP: 00007fa05edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.182140][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.182150][T14172] R13: 00007fa060e16038 R14: 00007fa060e15fa0 R15: 00007ffeeec4c6c8 [ 276.182180][T14172] [ 277.220180][T13946] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 277.263053][ T5842] Bluetooth: hci9: command tx timeout [ 277.270318][T13946] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 277.279087][T14211] netlink: 'syz.7.2421': attribute type 2 has an invalid length. [ 277.318670][T13946] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 277.351859][T14204] lo speed is unknown, defaulting to 1000 [ 277.352256][T13946] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 277.394715][T14219] sctp: [Deprecated]: syz.1.2422 (pid 14219) Use of int in max_burst socket option deprecated. [ 277.394715][T14219] Use struct sctp_assoc_value instead [ 277.460561][T14223] FAULT_INJECTION: forcing a failure. [ 277.460561][T14223] name failslab, interval 1, probability 0, space 0, times 0 [ 277.485669][T14223] CPU: 1 UID: 0 PID: 14223 Comm: syz.7.2423 Not tainted syzkaller #0 PREEMPT(full) [ 277.485698][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.485709][T14223] Call Trace: [ 277.485717][T14223] [ 277.485726][T14223] dump_stack_lvl+0xe8/0x150 [ 277.485759][T14223] should_fail_ex+0x412/0x560 [ 277.485798][T14223] should_failslab+0xa8/0x100 [ 277.485824][T14223] __kmalloc_cache_noprof+0x88/0x660 [ 277.485843][T14223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.485872][T14223] ? kobject_uevent_env+0x28c/0x9e0 [ 277.485899][T14223] ? __pfx_dev_uevent_name+0x10/0x10 [ 277.485921][T14223] kobject_uevent_env+0x28c/0x9e0 [ 277.485955][T14223] device_add+0x557/0xb70 [ 277.485989][T14223] device_create+0x269/0x300 [ 277.486011][T14223] ? timer_init_key+0x161/0x2f0 [ 277.486036][T14223] ? __pfx_device_create+0x10/0x10 [ 277.486056][T14223] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 277.486086][T14223] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 277.486131][T14223] ? __pfx_stack_trace_save+0x10/0x10 [ 277.486155][T14223] ? stack_depot_save_flags+0x33/0x810 [ 277.486185][T14223] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 277.486211][T14223] ? __kasan_kmalloc+0x93/0xb0 [ 277.486243][T14223] hwsim_new_radio_nl+0xf35/0x1bd0 [ 277.486297][T14223] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 277.486334][T14223] ? rcu_is_watching+0x15/0xb0 [ 277.486357][T14223] ? trace_kmalloc+0x2a/0x110 [ 277.486379][T14223] ? __nla_parse+0x40/0x60 [ 277.486409][T14223] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 277.486446][T14223] genl_family_rcv_msg_doit+0x22a/0x330 [ 277.486480][T14223] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 277.486522][T14223] ? bpf_lsm_capable+0x9/0x20 [ 277.486546][T14223] ? security_capable+0x7e/0x2c0 [ 277.486600][T14223] genl_rcv_msg+0x61c/0x7a0 [ 277.486634][T14223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.486666][T14223] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 277.486694][T14223] ? __lock_acquire+0x6b5/0x2cf0 [ 277.486732][T14223] netlink_rcv_skb+0x232/0x4b0 [ 277.486755][T14223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.486784][T14223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.486835][T14223] ? down_read+0x272/0x2e0 [ 277.486852][T14223] ? genl_rcv+0xd/0x40 [ 277.486881][T14223] genl_rcv+0x28/0x40 [ 277.486904][T14223] netlink_unicast+0x80f/0x9b0 [ 277.486935][T14223] ? __pfx_netlink_unicast+0x10/0x10 [ 277.486957][T14223] ? netlink_sendmsg+0x650/0xb40 [ 277.486977][T14223] ? skb_put+0x11b/0x210 [ 277.487007][T14223] netlink_sendmsg+0x813/0xb40 [ 277.487039][T14223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.487065][T14223] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.487088][T14223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.487109][T14223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.487129][T14223] ____sys_sendmsg+0xa68/0xad0 [ 277.487166][T14223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.487205][T14223] ? import_iovec+0x73/0xa0 [ 277.487235][T14223] ___sys_sendmsg+0x2a5/0x360 [ 277.487269][T14223] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.487335][T14223] ? __fget_files+0x2a/0x420 [ 277.487361][T14223] ? __fget_files+0x3a0/0x420 [ 277.487396][T14223] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.487427][T14223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.487464][T14223] ? __pfx_ksys_write+0x10/0x10 [ 277.487496][T14223] do_syscall_64+0x14d/0xf80 [ 277.487523][T14223] ? trace_irq_disable+0x3b/0x150 [ 277.487547][T14223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.487577][T14223] ? clear_bhb_loop+0x40/0x90 [ 277.487600][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.487618][T14223] RIP: 0033:0x7f6ab4d9c629 [ 277.487638][T14223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.487654][T14223] RSP: 002b:00007f6ab5cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.487673][T14223] RAX: ffffffffffffffda RBX: 00007f6ab5015fa0 RCX: 00007f6ab4d9c629 [ 277.487686][T14223] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 277.487697][T14223] RBP: 00007f6ab5cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.487708][T14223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.487718][T14223] R13: 00007f6ab5016038 R14: 00007f6ab5015fa0 R15: 00007ffeb0dd1018 [ 277.487750][T14223] [ 278.300950][T14243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.382472][T14248] netlink: 'syz.7.2427': attribute type 1 has an invalid length. [ 278.393118][T14246] netlink: 'syz.7.2427': attribute type 1 has an invalid length. [ 278.535125][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.552396][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.569807][T14257] netlink: 'syz.1.2429': attribute type 8 has an invalid length. [ 278.611226][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.667370][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.674637][T13097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.739528][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.746774][T13097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.299910][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.347539][ T5842] Bluetooth: hci9: command tx timeout [ 279.580583][T14300] netlink: 'syz.0.2442': attribute type 8 has an invalid length. [ 279.592857][T14301] netlink: 'syz.8.2441': attribute type 1 has an invalid length. [ 279.625753][T14300] bond0: entered promiscuous mode [ 279.630851][T14300] bond_slave_0: entered promiscuous mode [ 279.658328][T14300] bond_slave_1: entered promiscuous mode [ 279.679340][T14300] bridge_slave_1: entered promiscuous mode [ 279.692307][T14300] gretap0: entered promiscuous mode [ 279.705131][T14300] bond0: left promiscuous mode [ 279.709951][T14300] bond_slave_0: left promiscuous mode [ 279.717778][T14300] bond_slave_1: left promiscuous mode [ 279.743048][T14300] bridge_slave_1: left promiscuous mode [ 279.760162][T14300] gretap0: left promiscuous mode [ 279.938668][T14315] FAULT_INJECTION: forcing a failure. [ 279.938668][T14315] name failslab, interval 1, probability 0, space 0, times 0 [ 279.965739][T13946] veth0_vlan: entered promiscuous mode [ 279.980077][T14315] CPU: 0 UID: 0 PID: 14315 Comm: syz.8.2446 Not tainted syzkaller #0 PREEMPT(full) [ 279.980104][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.980114][T14315] Call Trace: [ 279.980122][T14315] [ 279.980130][T14315] dump_stack_lvl+0xe8/0x150 [ 279.980164][T14315] should_fail_ex+0x412/0x560 [ 279.980198][T14315] should_failslab+0xa8/0x100 [ 279.980223][T14315] __kmalloc_cache_noprof+0x88/0x660 [ 279.980243][T14315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.980273][T14315] ? kobject_uevent_env+0x28c/0x9e0 [ 279.980297][T14315] ? __pfx_dev_uevent_name+0x10/0x10 [ 279.980319][T14315] kobject_uevent_env+0x28c/0x9e0 [ 279.980352][T14315] device_add+0x557/0xb70 [ 279.980384][T14315] device_create+0x269/0x300 [ 279.980407][T14315] ? timer_init_key+0x161/0x2f0 [ 279.980431][T14315] ? __pfx_device_create+0x10/0x10 [ 279.980451][T14315] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 279.980482][T14315] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 279.980526][T14315] ? __pfx_stack_trace_save+0x10/0x10 [ 279.980551][T14315] ? stack_depot_save_flags+0x33/0x810 [ 279.980580][T14315] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 279.980607][T14315] ? __kasan_kmalloc+0x93/0xb0 [ 279.980647][T14315] hwsim_new_radio_nl+0xf35/0x1bd0 [ 279.980701][T14315] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 279.980740][T14315] ? rcu_is_watching+0x15/0xb0 [ 279.980767][T14315] ? trace_kmalloc+0x2a/0x110 [ 279.980794][T14315] ? __nla_parse+0x40/0x60 [ 279.980822][T14315] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 279.980858][T14315] genl_family_rcv_msg_doit+0x22a/0x330 [ 279.980892][T14315] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 279.980932][T14315] ? bpf_lsm_capable+0x9/0x20 [ 279.980954][T14315] ? security_capable+0x7e/0x2c0 [ 279.980984][T14315] genl_rcv_msg+0x61c/0x7a0 [ 279.981020][T14315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.981047][T14315] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 279.981077][T14315] ? __lock_acquire+0x6b5/0x2cf0 [ 279.981115][T14315] netlink_rcv_skb+0x232/0x4b0 [ 279.981140][T14315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.981170][T14315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.981214][T14315] ? down_read+0x272/0x2e0 [ 279.981232][T14315] ? genl_rcv+0xd/0x40 [ 279.981261][T14315] genl_rcv+0x28/0x40 [ 279.981286][T14315] netlink_unicast+0x80f/0x9b0 [ 279.981316][T14315] ? __pfx_netlink_unicast+0x10/0x10 [ 279.981339][T14315] ? netlink_sendmsg+0x650/0xb40 [ 279.981360][T14315] ? skb_put+0x11b/0x210 [ 279.981388][T14315] netlink_sendmsg+0x813/0xb40 [ 279.981423][T14315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.981450][T14315] ? aa_sock_msg_perm+0xf1/0x1b0 [ 279.981475][T14315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.981498][T14315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.981521][T14315] ____sys_sendmsg+0xa68/0xad0 [ 279.981560][T14315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.981599][T14315] ? import_iovec+0x73/0xa0 [ 279.981639][T14315] ___sys_sendmsg+0x2a5/0x360 [ 279.981673][T14315] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.981743][T14315] ? __fget_files+0x2a/0x420 [ 279.981769][T14315] ? __fget_files+0x3a0/0x420 [ 279.981808][T14315] __x64_sys_sendmsg+0x1bd/0x2a0 [ 279.981840][T14315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.981877][T14315] ? __pfx_ksys_write+0x10/0x10 [ 279.981910][T14315] do_syscall_64+0x14d/0xf80 [ 279.981935][T14315] ? trace_irq_disable+0x3b/0x150 [ 279.981959][T14315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.981976][T14315] ? clear_bhb_loop+0x40/0x90 [ 279.981999][T14315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.982017][T14315] RIP: 0033:0x7fa060b9c629 [ 279.982038][T14315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.982054][T14315] RSP: 002b:00007fa05edf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.982074][T14315] RAX: ffffffffffffffda RBX: 00007fa060e15fa0 RCX: 00007fa060b9c629 [ 279.982087][T14315] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 279.982099][T14315] RBP: 00007fa05edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.982110][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.982121][T14315] R13: 00007fa060e16038 R14: 00007fa060e15fa0 R15: 00007ffeeec4c6c8 [ 279.982154][T14315] [ 280.419245][T13946] veth1_vlan: entered promiscuous mode [ 280.475604][T13946] veth0_macvtap: entered promiscuous mode [ 280.531225][T14317] syzkaller0: entered promiscuous mode [ 280.567820][T14317] syzkaller0: entered allmulticast mode [ 280.580266][T13946] veth1_macvtap: entered promiscuous mode [ 280.772154][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.840875][T13946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.908337][T13105] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.934164][T13105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.966935][T13105] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.980395][T13105] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.111034][T14348] netlink: 'syz.8.2456': attribute type 8 has an invalid length. [ 281.136709][T14348] __nla_validate_parse: 33 callbacks suppressed [ 281.136727][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2456'. [ 281.156822][T13097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.193220][T13097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.214364][T14348] bond0: entered promiscuous mode [ 281.219539][T14348] bond_slave_0: entered promiscuous mode [ 281.225831][T14348] bond_slave_1: entered promiscuous mode [ 281.239070][T14348] gretap0: entered promiscuous mode [ 281.248720][T14348] bond0: left promiscuous mode [ 281.253973][T14348] bond_slave_0: left promiscuous mode [ 281.259704][T14348] bond_slave_1: left promiscuous mode [ 281.267810][T14348] gretap0: left promiscuous mode [ 281.318432][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.344453][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.417127][T13099] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 281.737265][T14374] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 281.755859][T14374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.797177][T14375] syzkaller0: entered promiscuous mode [ 281.811749][T14375] syzkaller0: entered allmulticast mode [ 282.049993][T14392] netlink: 'syz.0.2469': attribute type 8 has an invalid length. [ 282.070744][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 282.091348][T14392] bond0: entered promiscuous mode [ 282.096604][T14392] bond_slave_0: entered promiscuous mode [ 282.103871][T14392] bond_slave_1: entered promiscuous mode [ 282.109954][T14392] bridge_slave_1: entered promiscuous mode [ 282.117957][T14392] gretap0: entered promiscuous mode [ 282.124312][T14392] bond0: left promiscuous mode [ 282.129253][T14392] bond_slave_0: left promiscuous mode [ 282.135047][T14392] bond_slave_1: left promiscuous mode [ 282.140775][T14392] bridge_slave_1: left promiscuous mode [ 282.148544][T14392] gretap0: left promiscuous mode [ 284.268620][T14354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.519543][T14413] IPVS: length: 239 != 24 [ 284.531189][T14411] pimreg: left allmulticast mode [ 284.558651][T14411] dvmrp8: left allmulticast mode [ 284.711691][T14428] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2478'. [ 284.887006][T14432] netlink: 'syz.0.2481': attribute type 8 has an invalid length. [ 285.012542][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 285.073023][T14432] bond0: entered promiscuous mode [ 285.078427][T14432] bond_slave_0: entered promiscuous mode [ 285.085533][T14432] bond_slave_1: entered promiscuous mode [ 285.091663][T14432] bridge_slave_1: entered promiscuous mode [ 285.102269][T14432] gretap0: entered promiscuous mode [ 285.110090][T14432] bond0: left promiscuous mode [ 285.118637][T14432] bond_slave_0: left promiscuous mode [ 285.125167][T14432] bond_slave_1: left promiscuous mode [ 285.132666][T14432] bridge_slave_1: left promiscuous mode [ 285.140627][T14432] gretap0: left promiscuous mode [ 285.416774][T14457] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 285.575909][T14459] netlink: 'syz.8.2492': attribute type 1 has an invalid length. [ 285.670154][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'. [ 285.712561][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'. [ 285.826159][T14469] –: renamed from vxcan1 (while UP) [ 286.484528][T14497] Cannot find add_set index 0 as target [ 286.634397][T14503] lo: entered allmulticast mode [ 286.640170][T14503] lo: left allmulticast mode [ 286.724867][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2508'. [ 286.744830][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2508'. [ 287.488565][T14543] netlink: 'syz.9.2519': attribute type 8 has an invalid length. [ 287.504959][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2519'. [ 287.556539][T14543] bond0: entered promiscuous mode [ 287.571942][T14543] bond_slave_0: entered promiscuous mode [ 287.605081][T14543] bond_slave_1: entered promiscuous mode [ 287.630656][T14543] gretap0: entered promiscuous mode [ 287.659308][T14543] bond0: left promiscuous mode [ 287.679142][T14543] bond_slave_0: left promiscuous mode [ 287.687745][T14543] bond_slave_1: left promiscuous mode [ 287.719112][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'. [ 287.746893][T14543] gretap0: left promiscuous mode [ 287.771091][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2521'. [ 287.799230][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2521'. [ 288.349354][T13099] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.376977][T13099] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.413148][T13099] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.444085][T13099] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.516130][T14595] netlink: 'syz.7.2537': attribute type 8 has an invalid length. [ 288.524724][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2537'. [ 288.542498][T14595] bond0: entered promiscuous mode [ 288.553685][T14595] bond_slave_0: entered promiscuous mode [ 288.559682][T14595] bond_slave_1: entered promiscuous mode [ 288.569353][T14595] gretap0: entered promiscuous mode [ 288.590376][T14595] bond0: left promiscuous mode [ 288.602419][T14595] bond_slave_0: left promiscuous mode [ 288.612141][T14595] bond_slave_1: left promiscuous mode [ 288.635189][T14595] gretap0: left promiscuous mode [ 288.654982][T13099] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 288.655691][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2539'. [ 288.670672][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2539'. [ 288.907250][T14611] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2542'. [ 288.961448][T14612] openvswitch: netlink: Multiple metadata blocks provided [ 289.039597][T14615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.484487][T14638] netlink: 'syz.9.2550': attribute type 8 has an invalid length. [ 289.499290][T14638] bond0: entered promiscuous mode [ 289.504668][T14638] bond_slave_0: entered promiscuous mode [ 289.510492][T14638] bond_slave_1: entered promiscuous mode [ 289.519569][T14638] gretap0: entered promiscuous mode [ 289.526587][T14638] bond0: left promiscuous mode [ 289.532272][T14638] bond_slave_0: left promiscuous mode [ 289.538048][T14638] bond_slave_1: left promiscuous mode [ 289.544949][T14638] gretap0: left promiscuous mode [ 291.509557][T14596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.756121][T14667] FAULT_INJECTION: forcing a failure. [ 291.756121][T14667] name failslab, interval 1, probability 0, space 0, times 0 [ 291.786234][T14667] CPU: 0 UID: 0 PID: 14667 Comm: syz.8.2555 Not tainted syzkaller #0 PREEMPT(full) [ 291.786263][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.786274][T14667] Call Trace: [ 291.786281][T14667] [ 291.786289][T14667] dump_stack_lvl+0xe8/0x150 [ 291.786322][T14667] should_fail_ex+0x412/0x560 [ 291.786352][T14667] should_failslab+0xa8/0x100 [ 291.786377][T14667] __kmalloc_cache_noprof+0x88/0x660 [ 291.786399][T14667] ? kobject_uevent_env+0x28c/0x9e0 [ 291.786419][T14667] ? queue_work_on+0x117/0x1d0 [ 291.786448][T14667] ? __pfx_dev_uevent_name+0x10/0x10 [ 291.786472][T14667] kobject_uevent_env+0x28c/0x9e0 [ 291.786502][T14667] device_bind_driver+0x4f/0x60 [ 291.786522][T14667] mac80211_hwsim_new_radio+0x485/0x5330 [ 291.786573][T14667] ? __pfx_stack_trace_save+0x10/0x10 [ 291.786597][T14667] ? stack_depot_save_flags+0x33/0x810 [ 291.786623][T14667] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 291.786645][T14667] ? __kasan_kmalloc+0x93/0xb0 [ 291.786670][T14667] hwsim_new_radio_nl+0xf35/0x1bd0 [ 291.786715][T14667] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.786747][T14667] ? rcu_is_watching+0x15/0xb0 [ 291.786768][T14667] ? trace_kmalloc+0x2a/0x110 [ 291.786790][T14667] ? __nla_parse+0x40/0x60 [ 291.786813][T14667] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 291.786844][T14667] genl_family_rcv_msg_doit+0x22a/0x330 [ 291.786872][T14667] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.786906][T14667] ? bpf_lsm_capable+0x9/0x20 [ 291.786925][T14667] ? security_capable+0x7e/0x2c0 [ 291.786949][T14667] genl_rcv_msg+0x61c/0x7a0 [ 291.786977][T14667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.786997][T14667] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.787021][T14667] ? __lock_acquire+0x6b5/0x2cf0 [ 291.787050][T14667] netlink_rcv_skb+0x232/0x4b0 [ 291.787069][T14667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.787093][T14667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.787127][T14667] ? down_read+0x272/0x2e0 [ 291.787141][T14667] ? genl_rcv+0xd/0x40 [ 291.787163][T14667] genl_rcv+0x28/0x40 [ 291.787183][T14667] netlink_unicast+0x80f/0x9b0 [ 291.787207][T14667] ? __pfx_netlink_unicast+0x10/0x10 [ 291.787225][T14667] ? netlink_sendmsg+0x650/0xb40 [ 291.787242][T14667] ? skb_put+0x11b/0x210 [ 291.787266][T14667] netlink_sendmsg+0x813/0xb40 [ 291.787293][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.787314][T14667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.787334][T14667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.787352][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.787369][T14667] ____sys_sendmsg+0xa68/0xad0 [ 291.787400][T14667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.787430][T14667] ? import_iovec+0x73/0xa0 [ 291.787455][T14667] ___sys_sendmsg+0x2a5/0x360 [ 291.787481][T14667] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.787543][T14667] ? __fget_files+0x2a/0x420 [ 291.787563][T14667] ? __fget_files+0x3a0/0x420 [ 291.787594][T14667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.787618][T14667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.787649][T14667] ? __pfx_ksys_write+0x10/0x10 [ 291.787675][T14667] do_syscall_64+0x14d/0xf80 [ 291.787697][T14667] ? trace_irq_disable+0x3b/0x150 [ 291.787719][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.787734][T14667] ? clear_bhb_loop+0x40/0x90 [ 291.787754][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.787769][T14667] RIP: 0033:0x7fa060b9c629 [ 291.787784][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.787797][T14667] RSP: 002b:00007fa05edf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.787816][T14667] RAX: ffffffffffffffda RBX: 00007fa060e15fa0 RCX: 00007fa060b9c629 [ 291.787827][T14667] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 291.787837][T14667] RBP: 00007fa05edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.787847][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.787856][T14667] R13: 00007fa060e16038 R14: 00007fa060e15fa0 R15: 00007ffeeec4c6c8 [ 291.787883][T14667] [ 292.162134][T14681] netlink: 'syz.7.2559': attribute type 1 has an invalid length. [ 292.204376][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.212173][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.477388][T14698] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 292.784965][T14721] netlink: 'syz.7.2568': attribute type 21 has an invalid length. [ 292.814601][T14721] __nla_validate_parse: 3 callbacks suppressed [ 292.814622][T14721] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2568'. [ 292.940656][T14727] FAULT_INJECTION: forcing a failure. [ 292.940656][T14727] name failslab, interval 1, probability 0, space 0, times 0 [ 292.974606][T14727] CPU: 1 UID: 0 PID: 14727 Comm: syz.1.2570 Not tainted syzkaller #0 PREEMPT(full) [ 292.974634][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.974646][T14727] Call Trace: [ 292.974653][T14727] [ 292.974661][T14727] dump_stack_lvl+0xe8/0x150 [ 292.974694][T14727] should_fail_ex+0x412/0x560 [ 292.974724][T14727] should_failslab+0xa8/0x100 [ 292.974749][T14727] __kmalloc_noprof+0xe8/0x760 [ 292.974768][T14727] ? kobject_get_path+0xc5/0x2f0 [ 292.974786][T14727] ? __kasan_kmalloc+0x93/0xb0 [ 292.974812][T14727] kobject_get_path+0xc5/0x2f0 [ 292.974829][T14727] ? kobject_uevent_env+0x28c/0x9e0 [ 292.974856][T14727] kobject_uevent_env+0x2a1/0x9e0 [ 292.974885][T14727] device_bind_driver+0x4f/0x60 [ 292.974900][T14727] mac80211_hwsim_new_radio+0x485/0x5330 [ 292.974935][T14727] ? __pfx_stack_trace_save+0x10/0x10 [ 292.974957][T14727] ? stack_depot_save_flags+0x33/0x810 [ 292.974988][T14727] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 292.975009][T14727] ? __kasan_kmalloc+0x93/0xb0 [ 292.975033][T14727] hwsim_new_radio_nl+0xf35/0x1bd0 [ 292.975074][T14727] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.975105][T14727] ? rcu_is_watching+0x15/0xb0 [ 292.975126][T14727] ? trace_kmalloc+0x2a/0x110 [ 292.975145][T14727] ? __nla_parse+0x40/0x60 [ 292.975167][T14727] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 292.975197][T14727] genl_family_rcv_msg_doit+0x22a/0x330 [ 292.975225][T14727] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.975259][T14727] ? bpf_lsm_capable+0x9/0x20 [ 292.975278][T14727] ? security_capable+0x7e/0x2c0 [ 292.975301][T14727] genl_rcv_msg+0x61c/0x7a0 [ 292.975328][T14727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.975349][T14727] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.975378][T14727] ? __lock_acquire+0x6b5/0x2cf0 [ 292.975407][T14727] netlink_rcv_skb+0x232/0x4b0 [ 292.975425][T14727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.975447][T14727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.975479][T14727] ? down_read+0x272/0x2e0 [ 292.975493][T14727] ? genl_rcv+0xd/0x40 [ 292.975514][T14727] genl_rcv+0x28/0x40 [ 292.975533][T14727] netlink_unicast+0x80f/0x9b0 [ 292.975557][T14727] ? __pfx_netlink_unicast+0x10/0x10 [ 292.975574][T14727] ? netlink_sendmsg+0x650/0xb40 [ 292.975589][T14727] ? skb_put+0x11b/0x210 [ 292.975613][T14727] netlink_sendmsg+0x813/0xb40 [ 292.975639][T14727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.975659][T14727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.975678][T14727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.975694][T14727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.975711][T14727] ____sys_sendmsg+0xa68/0xad0 [ 292.975740][T14727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.975769][T14727] ? import_iovec+0x73/0xa0 [ 292.975794][T14727] ___sys_sendmsg+0x2a5/0x360 [ 292.975823][T14727] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.975875][T14727] ? __fget_files+0x2a/0x420 [ 292.975896][T14727] ? __fget_files+0x3a0/0x420 [ 292.975925][T14727] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.975948][T14727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.975977][T14727] ? __pfx_ksys_write+0x10/0x10 [ 292.976003][T14727] do_syscall_64+0x14d/0xf80 [ 292.976023][T14727] ? trace_irq_disable+0x3b/0x150 [ 292.976043][T14727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.976058][T14727] ? clear_bhb_loop+0x40/0x90 [ 292.976077][T14727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.976092][T14727] RIP: 0033:0x7fc46a59c629 [ 292.976106][T14727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.976119][T14727] RSP: 002b:00007fc46b481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.976136][T14727] RAX: ffffffffffffffda RBX: 00007fc46a815fa0 RCX: 00007fc46a59c629 [ 292.976147][T14727] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 292.976157][T14727] RBP: 00007fc46b481090 R08: 0000000000000000 R09: 0000000000000000 [ 292.976166][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.976174][T14727] R13: 00007fc46a816038 R14: 00007fc46a815fa0 R15: 00007ffe0d16cf98 [ 292.976200][T14727] [ 293.276211][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2573'. [ 293.412901][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 293.439987][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2573'. [ 293.489648][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 293.537907][T14745] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 293.793268][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2577'. [ 293.802410][T14762] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 293.843451][T14765] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 293.851229][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 294.027075][T14776] ipvlan2: entered allmulticast mode [ 294.032424][T14776] batadv_slave_1: entered allmulticast mode [ 294.072594][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2582'. [ 294.085561][T14776] batman_adv: batadv0: Adding interface: ipvlan2 [ 294.091936][T14776] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.122047][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2578'. [ 294.131964][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.147565][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.158175][T14776] batman_adv: batadv0: Interface activated: ipvlan2 [ 294.171975][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2582'. [ 294.193772][T14784] xfrm1: entered promiscuous mode [ 294.199008][T14784] xfrm1: entered allmulticast mode [ 294.425975][T14798] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 295.094104][T14826] netlink: 'syz.1.2596': attribute type 12 has an invalid length. [ 295.105993][T14834] can: request_module (can-proto-4) failed. [ 295.115706][T14826] netlink: 'syz.1.2596': attribute type 39 has an invalid length. [ 295.170474][T14841] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 295.559330][T14852] xt_ipcomp: unknown flags 1D [ 295.966555][T14864] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 296.200441][T14881] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 296.391539][T14890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 296.480598][T14895] netlink: 'syz.0.2613': attribute type 3 has an invalid length. [ 296.578978][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.599899][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.615484][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.663551][T14899] netlink: 'syz.1.2617': attribute type 16 has an invalid length. [ 297.279913][T10741] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.292150][T14897] infiniband syz2: set down [ 297.308744][T14897] infiniband syz2: added ip6_vti0 [ 297.310630][T14929] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 297.518673][T14897] RDS/IB: syz2: added [ 297.537506][T14897] smc: adding ib device syz2 with port count 1 [ 297.544115][T14897] smc: ib device syz2 port 1 has no pnetid [ 297.560277][ T796] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.587588][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.693881][T14945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.708933][T14948] netlink: 'syz.9.2630': attribute type 8 has an invalid length. [ 297.726868][T14947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.761839][T14948] bond0: entered promiscuous mode [ 297.772883][T14948] bond_slave_0: entered promiscuous mode [ 297.788972][T14948] bond_slave_1: entered promiscuous mode [ 297.826884][T14948] gretap0: entered promiscuous mode [ 297.847801][T14948] bond0: left promiscuous mode [ 297.863139][T14948] bond_slave_0: left promiscuous mode [ 297.878253][T14954] netlink: 'syz.0.2632': attribute type 11 has an invalid length. [ 297.886975][T14948] bond_slave_1: left promiscuous mode [ 297.897483][T14948] gretap0: left promiscuous mode [ 297.915694][T14956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.109169][T14966] __nla_validate_parse: 13 callbacks suppressed [ 298.109189][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 298.138494][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.159216][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 298.212473][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2636'. [ 298.229172][T14975] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 298.239146][T14970] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2638'. [ 298.434132][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 298.462080][T14980] tipc: Started in network mode [ 298.478367][T14980] tipc: Node identity 82846fff826f, cluster identity 4711 [ 298.493327][T14980] tipc: Enabled bearer , priority 0 [ 298.510576][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 298.561485][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 298.583365][T14980] syzkaller0: entered promiscuous mode [ 298.589221][T14980] syzkaller0: entered allmulticast mode [ 298.616042][T14980] tipc: Resetting bearer [ 298.667749][T14991] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2644'. [ 298.789191][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.858901][T15004] netlink: 'syz.1.2646': attribute type 8 has an invalid length. [ 298.877242][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 298.982134][T15007] Cannot find del_set index 0 as target [ 299.044603][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 299.247219][T15014] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 299.285334][T14979] tipc: Resetting bearer [ 299.373704][T14979] tipc: Disabling bearer [ 299.505935][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.517645][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.526825][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.539312][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.555048][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.708919][ T29] audit: type=1800 audit(1771649172.821:5): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2653" name="memory.events" dev="tmpfs" ino=563 res=0 errno=0 [ 299.740104][T15019] lo speed is unknown, defaulting to 1000 [ 299.746857][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 299.850294][T15027] nbd: couldn't find a device at index 0 [ 300.067525][ T1957] block nbd1: Possible stuck request ffff888026a18000: control (read@0,1024B). Runtime 60 seconds [ 300.079305][ T1957] block nbd1: Possible stuck request ffff888026a18200: control (read@1024,1024B). Runtime 60 seconds [ 300.092281][ T1957] block nbd1: Possible stuck request ffff888026a18400: control (read@2048,1024B). Runtime 60 seconds [ 300.104488][ T1957] block nbd1: Possible stuck request ffff888026a18600: control (read@3072,1024B). Runtime 60 seconds [ 300.141565][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.408170][T15019] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.604434][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.845368][T15019] chnl_net:caif_netlink_parms(): no params data found [ 301.010065][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.281829][T15019] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.312245][T15019] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.329987][T15019] bridge_slave_0: entered allmulticast mode [ 301.342008][T15019] bridge_slave_0: entered promiscuous mode [ 301.367240][T15019] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.378179][T15019] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.391572][T15019] bridge_slave_1: entered allmulticast mode [ 301.400353][T15019] bridge_slave_1: entered promiscuous mode [ 301.409723][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.593955][T15019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.637886][T15019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.656604][T15077] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 301.667053][ T5842] Bluetooth: hci5: command tx timeout [ 301.696684][T15083] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 301.755491][T15019] team0: Port device team_slave_0 added [ 301.775739][T15019] team0: Port device team_slave_1 added [ 301.920533][T15019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.933091][T15019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.144213][T15019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.185893][T15019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.214184][T15019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.309748][T15105] netlink: 'syz.9.2676': attribute type 6 has an invalid length. [ 302.325017][T15019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.355030][T15105] netlink: 'syz.9.2676': attribute type 6 has an invalid length. [ 302.358791][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.498523][T15019] hsr_slave_0: entered promiscuous mode [ 302.517025][T15019] hsr_slave_1: entered promiscuous mode [ 302.530423][T15019] debugfs: 'hsr0' already exists in 'hsr' [ 302.552820][T15019] Cannot create hsr debugfs directory [ 302.967791][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.285955][T15019] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51192 - 0 [ 303.299844][T15019] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.461189][T15019] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51192 - 0 [ 303.503742][T15019] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.587028][T15019] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51192 - 0 [ 303.606630][T15019] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.647442][T14897] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.707132][T15019] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51192 - 0 [ 303.726422][T15019] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.744848][ T5842] Bluetooth: hci5: command tx timeout [ 303.823987][T15155] sctp: [Deprecated]: syz.9.2691 (pid 15155) Use of int in max_burst socket option deprecated. [ 303.823987][T15155] Use struct sctp_assoc_value instead [ 303.964761][T15159] netlink: 'syz.8.2692': attribute type 8 has an invalid length. [ 303.974012][T15159] __nla_validate_parse: 6 callbacks suppressed [ 303.974029][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2692'. [ 304.029028][T15159] bond0: entered promiscuous mode [ 304.041764][T15159] bond_slave_0: entered promiscuous mode [ 304.063115][T15159] bond_slave_1: entered promiscuous mode [ 304.073200][T15159] gretap0: entered promiscuous mode [ 304.096693][T15159] bond0: left promiscuous mode [ 304.101526][T15159] bond_slave_0: left promiscuous mode [ 304.121823][T15159] bond_slave_1: left promiscuous mode [ 304.151529][T15159] gretap0: left promiscuous mode [ 304.318498][T15019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.347040][T15019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.398509][T15019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.433507][T15019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.438101][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2697'. [ 304.451604][T15171] xt_ipcomp: unknown flags 1D [ 304.522197][T15180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2697'. [ 304.565724][T15174] netlink: 'syz.9.2698': attribute type 24 has an invalid length. [ 304.771913][T15019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.865764][T15019] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.898092][T13098] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.905382][T13098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.911445][T15195] x_tables: unsorted underflow at hook 2 [ 304.975572][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.982836][T13098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.079106][T15205] siw: device registration error -23 [ 305.155177][T15210] netlink: 'syz.7.2708': attribute type 1 has an invalid length. [ 305.204039][T15210] netlink: 'syz.7.2708': attribute type 4 has an invalid length. [ 305.234325][T15210] netlink: 9422 bytes leftover after parsing attributes in process `syz.7.2708'. [ 305.258867][T15214] netlink: 'syz.7.2708': attribute type 1 has an invalid length. [ 305.291344][T15214] netlink: 'syz.7.2708': attribute type 4 has an invalid length. [ 305.300654][T15214] netlink: 9422 bytes leftover after parsing attributes in process `syz.7.2708'. [ 305.322879][T15223] veth1_macvtap: left promiscuous mode [ 305.516464][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2712'. [ 305.543858][T15231] xt_ipcomp: unknown flags 1D [ 305.617678][T15240] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2712'. [ 305.823646][ T5842] Bluetooth: hci5: command tx timeout [ 305.877676][T15019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.097060][T15019] veth0_vlan: entered promiscuous mode [ 306.162119][T15019] veth1_vlan: entered promiscuous mode [ 306.294117][T15019] veth0_macvtap: entered promiscuous mode [ 306.375852][T15019] veth1_macvtap: entered promiscuous mode [ 306.462448][T15019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.500055][T15019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.551667][T13101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.607605][T13101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.642026][T13101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.669122][T13101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.676400][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2728'. [ 306.728203][T15288] xt_ipcomp: unknown flags 1D [ 306.809981][T15288] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2728'. [ 307.032260][T13100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.073153][T13100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.098447][T15301] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2731'. [ 307.179395][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.198216][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.369686][T13101] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 307.562577][T15327] netlink: 'syz.1.2649': attribute type 10 has an invalid length. [ 307.581213][T15327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.606137][T15329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.903495][ T51] Bluetooth: hci5: command tx timeout [ 309.183699][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 310.197826][T15308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.456556][T15343] __nla_validate_parse: 2 callbacks suppressed [ 310.456586][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 310.516726][T15341] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 310.527492][T15343] xt_ipcomp: unknown flags 1D [ 310.594027][T15348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2741'. [ 310.685640][T15350] netlink: 'syz.8.2743': attribute type 83 has an invalid length. [ 310.751014][T15350] netlink: 'syz.8.2743': attribute type 10 has an invalid length. [ 310.791610][T15350] batman_adv: batadv0: Adding interface: netdevsim0 [ 310.798605][T15350] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.825366][T15350] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 311.100355][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2750'. [ 311.125727][T13100] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 311.790357][T15395] bridge0: port 2(veth0_to_bridge) entered blocking state [ 311.798783][T15395] bridge0: port 2(veth0_to_bridge) entered disabled state [ 311.806342][T15395] veth0_to_bridge: entered allmulticast mode [ 311.816397][T15395] veth0_to_bridge: entered promiscuous mode [ 311.910097][T15399] xt_ipcomp: unknown flags 1D [ 311.965470][T15399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2756'. [ 313.964590][T15373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.456952][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2763'. [ 314.694369][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.711728][T15431] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 314.722652][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.743207][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.759011][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.769300][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.909284][T15429] lo speed is unknown, defaulting to 1000 [ 314.982456][T15429] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.272202][T15453] netlink: 'syz.8.2772': attribute type 8 has an invalid length. [ 315.298411][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2772'. [ 315.349523][T15453] bond0: entered promiscuous mode [ 315.354986][T15453] bond_slave_0: entered promiscuous mode [ 315.369026][T15453] bond_slave_1: entered promiscuous mode [ 315.400467][T15453] gretap0: entered promiscuous mode [ 315.426818][T15453] bond0: left promiscuous mode [ 315.431788][T15453] bond_slave_0: left promiscuous mode [ 315.451100][T15453] bond_slave_1: left promiscuous mode [ 315.469230][T15453] gretap0: left promiscuous mode [ 315.504660][T15464] netlink: 81 bytes leftover after parsing attributes in process `syz.9.2775'. [ 315.694738][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2776'. [ 315.716813][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2777'. [ 315.744524][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2777'. [ 315.874450][T15479] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 315.967653][T15482] º: renamed from veth1_vlan (while UP) [ 316.062416][T15429] chnl_net:caif_netlink_parms(): no params data found [ 316.427161][T15506] netlink: 'syz.7.2785': attribute type 8 has an invalid length. [ 316.466574][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2785'. [ 316.547025][T15506] bond0: entered promiscuous mode [ 316.571599][T15506] bond_slave_0: entered promiscuous mode [ 316.583313][T15506] bond_slave_1: entered promiscuous mode [ 316.604404][T15506] gretap0: entered promiscuous mode [ 316.658695][T15506] bond0: left promiscuous mode [ 316.674652][T15506] bond_slave_0: left promiscuous mode [ 316.680340][T15506] bond_slave_1: left promiscuous mode [ 316.726515][T15506] gretap0: left promiscuous mode [ 316.753281][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.761990][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.786002][T15429] bridge_slave_0: entered allmulticast mode [ 316.796957][T15429] bridge_slave_0: entered promiscuous mode [ 316.835458][T15521] bond1: (slave bond_slave_1): Device is not our slave [ 316.842635][T15521] bond1: option active_slave: invalid value (bond_slave_1) [ 316.865322][ T51] Bluetooth: hci0: command tx timeout [ 316.875541][T15521] bond1 (unregistering): Released all slaves [ 316.969035][T15528] netlink: 'syz.1.2791': attribute type 3 has an invalid length. [ 316.980484][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.987925][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.995765][T15429] bridge_slave_1: entered allmulticast mode [ 317.004796][T15429] bridge_slave_1: entered promiscuous mode [ 317.145996][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.258218][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.362988][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.372099][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.441729][T15539] syzkaller0: entered promiscuous mode [ 317.443579][T15546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2795'. [ 317.465200][T15539] syzkaller0: entered allmulticast mode [ 317.576872][T15429] team0: Port device team_slave_0 added [ 317.589297][T15554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2796'. [ 317.662670][T15555] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 317.863370][T15560] netlink: 'syz.7.2799': attribute type 2 has an invalid length. [ 318.953359][ T51] Bluetooth: hci0: command tx timeout [ 319.205385][T15429] team0: Port device team_slave_1 added [ 319.315041][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.351952][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.407845][T15572] netlink: 'syz.1.2801': attribute type 8 has an invalid length. [ 319.434840][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.452541][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'. [ 319.475731][T15572] bond0: entered promiscuous mode [ 319.480818][T15572] bond_slave_0: entered promiscuous mode [ 319.490677][T15572] bond_slave_1: entered promiscuous mode [ 319.497564][T15578] netlink: 'syz.7.2804': attribute type 1 has an invalid length. [ 319.503572][T15572] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 319.506474][T15578] netlink: 9188 bytes leftover after parsing attributes in process `syz.7.2804'. [ 319.529653][T15572] gretap0: entered promiscuous mode [ 319.548405][T15579] netlink: 'syz.7.2804': attribute type 1 has an invalid length. [ 319.556859][T15572] bond0: left promiscuous mode [ 319.561951][T15579] netlink: 9188 bytes leftover after parsing attributes in process `syz.7.2804'. [ 319.571272][T15572] bond_slave_0: left promiscuous mode [ 319.577532][T15572] bond_slave_1: left promiscuous mode [ 319.586136][T15572] mac80211_hwsim hwsim60 wlan1: left promiscuous mode [ 319.603069][T15572] gretap0: left promiscuous mode [ 319.629717][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.638066][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.722834][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.801035][T15589] netlink: 'syz.9.2806': attribute type 33 has an invalid length. [ 319.931437][T15429] hsr_slave_0: entered promiscuous mode [ 320.004178][T15429] hsr_slave_1: entered promiscuous mode [ 320.010756][T15429] debugfs: 'hsr0' already exists in 'hsr' [ 320.070685][T15429] Cannot create hsr debugfs directory [ 320.141759][T15607] netlink: 'syz.7.2812': attribute type 1 has an invalid length. [ 320.160321][T15608] geneve2: entered promiscuous mode [ 320.428498][T15624] netlink: 'syz.1.2817': attribute type 8 has an invalid length. [ 320.435486][T15622] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 320.470274][T15624] bond0: entered promiscuous mode [ 320.475601][T15624] bond_slave_0: entered promiscuous mode [ 320.481632][T15624] bond_slave_1: entered promiscuous mode [ 320.489258][T15624] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 320.501736][T15624] gretap0: entered promiscuous mode [ 320.509415][T15624] bond0: left promiscuous mode [ 320.515060][T15624] bond_slave_0: left promiscuous mode [ 320.525613][T15624] bond_slave_1: left promiscuous mode [ 320.531369][T15624] mac80211_hwsim hwsim60 wlan1: left promiscuous mode [ 320.564121][T15624] gretap0: left promiscuous mode [ 320.651614][T15622] bridge_slave_0: left allmulticast mode [ 320.682961][T15622] bridge_slave_0: left promiscuous mode [ 320.688875][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.764887][T15622] bridge_slave_1: left allmulticast mode [ 320.775211][T15638] __nla_validate_parse: 9 callbacks suppressed [ 320.775231][T15638] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2822'. [ 320.794152][T15622] bridge_slave_1: left promiscuous mode [ 320.804675][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.829486][T15622] bond0: (slave bond_slave_0): Releasing backup interface [ 320.840476][T15622] bond0: (slave bond_slave_1): Releasing backup interface [ 320.852288][T15622] team0: Port device team_slave_0 removed [ 320.861868][T15622] team0: Port device team_slave_1 removed [ 320.876040][T15622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.884138][T15622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.892058][T15622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.920034][T15639] pim6reg: entered allmulticast mode [ 320.997773][T15429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.020130][T15429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.033404][ T51] Bluetooth: hci0: command tx timeout [ 321.053914][T15429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52643 - 0 [ 321.090239][T15429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 321.228141][T15429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.241992][T15429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.259903][T15429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52643 - 0 [ 321.277378][T15429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 321.278894][T15656] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2827'. [ 321.370429][T15429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.382186][T15429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.395191][T15429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52643 - 0 [ 321.406919][T15429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 321.562444][T15429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.574348][T15429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.589181][T15429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52643 - 0 [ 321.616194][T15429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 321.825897][T15679] netlink: 'syz.8.2832': attribute type 8 has an invalid length. [ 321.842402][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2832'. [ 321.893894][T15679] bond0: entered promiscuous mode [ 321.909400][T15679] bond_slave_0: entered promiscuous mode [ 321.923364][T15679] bond_slave_1: entered promiscuous mode [ 321.949161][T15679] gretap0: entered promiscuous mode [ 321.965474][T15679] bond0: left promiscuous mode [ 321.977796][T15679] bond_slave_0: left promiscuous mode [ 321.988037][T15679] bond_slave_1: left promiscuous mode [ 321.999075][T15679] gretap0: left promiscuous mode [ 322.067931][T15429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.100719][T15429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.123567][T15429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.141504][T15429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.193147][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2835'. [ 322.206754][T15692] xt_ipcomp: unknown flags 1D [ 322.280290][T15704] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2835'. [ 322.547427][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.618668][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.637373][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 322.660724][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.664095][T15715] block nbd2: Unsupported socket: should be TCP or UNIX. [ 322.667945][T13097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.696621][T15717] block nbd2: Unsupported socket: should be TCP or UNIX. [ 322.748305][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.755538][T13099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.994716][T15732] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 323.013832][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 323.025807][T15735] netlink: 272 bytes leftover after parsing attributes in process `syz.9.2846'. [ 323.103993][ T51] Bluetooth: hci0: command tx timeout [ 323.171761][T15740] FAULT_INJECTION: forcing a failure. [ 323.171761][T15740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.188791][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.8.2848 Not tainted syzkaller #0 PREEMPT(full) [ 323.188820][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.188830][T15740] Call Trace: [ 323.188838][T15740] [ 323.188848][T15740] dump_stack_lvl+0xe8/0x150 [ 323.188880][T15740] should_fail_ex+0x412/0x560 [ 323.188909][T15740] _copy_from_user+0x2d/0xb0 [ 323.188937][T15740] bpf_test_init+0xd8/0x150 [ 323.188964][T15740] bpf_prog_test_run_skb+0x36f/0x1c90 [ 323.189000][T15740] ? __fget_files+0x2a/0x420 [ 323.189026][T15740] ? __fget_files+0x3a0/0x420 [ 323.189050][T15740] ? __fget_files+0x2a/0x420 [ 323.189082][T15740] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 323.189105][T15740] bpf_prog_test_run+0x2c7/0x340 [ 323.189128][T15740] __sys_bpf+0x643/0x950 [ 323.189159][T15740] ? __pfx___sys_bpf+0x10/0x10 [ 323.189205][T15740] ? ksys_write+0x242/0x270 [ 323.189227][T15740] ? __pfx_ksys_write+0x10/0x10 [ 323.189255][T15740] __x64_sys_bpf+0x7c/0x90 [ 323.189282][T15740] do_syscall_64+0x14d/0xf80 [ 323.189310][T15740] ? trace_irq_disable+0x3b/0x150 [ 323.189337][T15740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.189357][T15740] ? clear_bhb_loop+0x40/0x90 [ 323.189380][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.189400][T15740] RIP: 0033:0x7fa060b9c629 [ 323.189419][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.189434][T15740] RSP: 002b:00007fa05edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.189456][T15740] RAX: ffffffffffffffda RBX: 00007fa060e15fa0 RCX: 00007fa060b9c629 [ 323.189470][T15740] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 323.189483][T15740] RBP: 00007fa05edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.189494][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.189506][T15740] R13: 00007fa060e16038 R14: 00007fa060e15fa0 R15: 00007ffeeec4c6c8 [ 323.189539][T15740] [ 323.477941][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.488145][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 323.540663][T15746] xt_ipcomp: unknown flags 1D [ 323.600513][T15747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2849'. [ 323.616091][T15429] veth0_vlan: entered promiscuous mode [ 323.658686][T15429] veth1_vlan: entered promiscuous mode [ 323.756423][T15429] veth0_macvtap: entered promiscuous mode [ 323.778029][T15754] vlan2: entered promiscuous mode [ 323.783366][T15754] geneve1: entered promiscuous mode [ 323.788872][T15754] vlan2: entered allmulticast mode [ 323.796128][T15754] geneve1: entered allmulticast mode [ 323.813565][T15429] veth1_macvtap: entered promiscuous mode [ 323.854661][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.877186][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.900555][T13097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.921741][T13097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.942616][T13097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.965460][T13097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.079331][T13099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.102816][T13099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.225210][T13097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.237318][T15772] FAULT_INJECTION: forcing a failure. [ 324.237318][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 324.254029][T13097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.262062][T15772] CPU: 1 UID: 0 PID: 15772 Comm: syz.7.2859 Not tainted syzkaller #0 PREEMPT(full) [ 324.262089][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.262100][T15772] Call Trace: [ 324.262107][T15772] [ 324.262116][T15772] dump_stack_lvl+0xe8/0x150 [ 324.262148][T15772] should_fail_ex+0x412/0x560 [ 324.262175][T15772] should_failslab+0xa8/0x100 [ 324.262200][T15772] __kmalloc_noprof+0xe8/0x760 [ 324.262221][T15772] ? sk_prot_alloc+0xe7/0x210 [ 324.262252][T15772] sk_prot_alloc+0xe7/0x210 [ 324.262282][T15772] ? sk_alloc+0x27/0x390 [ 324.262323][T15772] sk_alloc+0x3a/0x390 [ 324.262351][T15772] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 324.262386][T15772] ? __fget_files+0x2a/0x420 [ 324.262410][T15772] ? __fget_files+0x3a0/0x420 [ 324.262432][T15772] ? __fget_files+0x2a/0x420 [ 324.262461][T15772] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 324.262483][T15772] bpf_prog_test_run+0x2c7/0x340 [ 324.262504][T15772] __sys_bpf+0x643/0x950 [ 324.262533][T15772] ? __pfx___sys_bpf+0x10/0x10 [ 324.262573][T15772] ? ksys_write+0x242/0x270 [ 324.262594][T15772] ? __pfx_ksys_write+0x10/0x10 [ 324.262622][T15772] __x64_sys_bpf+0x7c/0x90 [ 324.262647][T15772] do_syscall_64+0x14d/0xf80 [ 324.262673][T15772] ? trace_irq_disable+0x3b/0x150 [ 324.262697][T15772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.262717][T15772] ? clear_bhb_loop+0x40/0x90 [ 324.262739][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.262757][T15772] RIP: 0033:0x7f6ab4d9c629 [ 324.262775][T15772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.262789][T15772] RSP: 002b:00007f6ab5cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.262811][T15772] RAX: ffffffffffffffda RBX: 00007f6ab5015fa0 RCX: 00007f6ab4d9c629 [ 324.262825][T15772] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 324.262837][T15772] RBP: 00007f6ab5cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 324.262849][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.262861][T15772] R13: 00007f6ab5016038 R14: 00007f6ab5015fa0 R15: 00007ffeb0dd1018 [ 324.262893][T15772] [ 324.602012][T15778] xt_ipcomp: unknown flags 1D [ 325.791782][T15826] FAULT_INJECTION: forcing a failure. [ 325.791782][T15826] name failslab, interval 1, probability 0, space 0, times 0 [ 325.809039][T15826] CPU: 0 UID: 0 PID: 15826 Comm: syz.0.2873 Not tainted syzkaller #0 PREEMPT(full) [ 325.809067][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.809078][T15826] Call Trace: [ 325.809087][T15826] [ 325.809095][T15826] dump_stack_lvl+0xe8/0x150 [ 325.809128][T15826] should_fail_ex+0x412/0x560 [ 325.809156][T15826] should_failslab+0xa8/0x100 [ 325.809182][T15826] __kmalloc_noprof+0xe8/0x760 [ 325.809203][T15826] ? security_sk_alloc+0x52/0x360 [ 325.809235][T15826] security_sk_alloc+0x52/0x360 [ 325.809264][T15826] sk_prot_alloc+0x101/0x210 [ 325.809288][T15826] ? sk_alloc+0x27/0x390 [ 325.809315][T15826] sk_alloc+0x3a/0x390 [ 325.809344][T15826] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 325.809379][T15826] ? __fget_files+0x2a/0x420 [ 325.809405][T15826] ? __fget_files+0x3a0/0x420 [ 325.809430][T15826] ? __fget_files+0x2a/0x420 [ 325.809461][T15826] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 325.809485][T15826] bpf_prog_test_run+0x2c7/0x340 [ 325.809508][T15826] __sys_bpf+0x643/0x950 [ 325.809540][T15826] ? __pfx___sys_bpf+0x10/0x10 [ 325.809585][T15826] ? ksys_write+0x242/0x270 [ 325.809607][T15826] ? __pfx_ksys_write+0x10/0x10 [ 325.809645][T15826] __x64_sys_bpf+0x7c/0x90 [ 325.809672][T15826] do_syscall_64+0x14d/0xf80 [ 325.809701][T15826] ? trace_irq_disable+0x3b/0x150 [ 325.809727][T15826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.809747][T15826] ? clear_bhb_loop+0x40/0x90 [ 325.809771][T15826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.809791][T15826] RIP: 0033:0x7f1be539c629 [ 325.809810][T15826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.809826][T15826] RSP: 002b:00007f1be62ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.809847][T15826] RAX: ffffffffffffffda RBX: 00007f1be5615fa0 RCX: 00007f1be539c629 [ 325.809861][T15826] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 325.809874][T15826] RBP: 00007f1be62ec090 R08: 0000000000000000 R09: 0000000000000000 [ 325.809885][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.809897][T15826] R13: 00007f1be5616038 R14: 00007f1be5615fa0 R15: 00007ffc37f94618 [ 325.809929][T15826] [ 325.827480][T15829] __nla_validate_parse: 4 callbacks suppressed [ 325.827498][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2872'. [ 325.850324][T15827] netlink: 'syz.8.2868': attribute type 12 has an invalid length. [ 326.064253][T15827] netlink: 190972 bytes leftover after parsing attributes in process `syz.8.2868'. [ 326.262462][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2876'. [ 326.280120][T15837] xt_ipcomp: unknown flags 1D [ 326.358931][T15845] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2876'. [ 327.910613][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 328.092853][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2881'. [ 328.346439][T15881] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.355515][T15881] syzkaller0: entered promiscuous mode [ 328.361054][T15881] syzkaller0: entered allmulticast mode [ 328.491674][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2891'. [ 328.534493][T15890] netlink: 'syz.8.2892': attribute type 8 has an invalid length. [ 328.545025][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2892'. [ 328.554557][T15887] xt_ipcomp: unknown flags 1D [ 328.560305][T15892] bridge1: entered promiscuous mode [ 328.574568][T15892] bridge1: entered allmulticast mode [ 328.600455][T15890] bond0: entered promiscuous mode [ 328.612968][T15890] bond_slave_0: entered promiscuous mode [ 328.623839][T15890] bond_slave_1: entered promiscuous mode [ 328.631057][T15895] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2891'. [ 328.650813][T15890] gretap0: entered promiscuous mode [ 329.339255][T15890] bond0: left promiscuous mode [ 329.352818][T15890] bond_slave_0: left promiscuous mode [ 329.358375][T15890] bond_slave_1: left promiscuous mode [ 329.663909][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 330.145092][ T1957] block nbd1: Possible stuck request ffff888026a18000: control (read@0,1024B). Runtime 90 seconds [ 330.155817][ T1957] block nbd1: Possible stuck request ffff888026a18200: control (read@1024,1024B). Runtime 90 seconds [ 330.166940][ T1957] block nbd1: Possible stuck request ffff888026a18400: control (read@2048,1024B). Runtime 90 seconds [ 330.178020][ T1957] block nbd1: Possible stuck request ffff888026a18600: control (read@3072,1024B). Runtime 90 seconds [ 331.336653][T15890] gretap0: left promiscuous mode [ 331.511371][T15907] 8021q: VLANs not supported on ip_vti0 [ 331.658258][T15918] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1 [ 331.660031][T15910] xt_CT: No such helper "pptp" [ 331.753769][T15925] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2901'. [ 331.851797][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2904'. [ 331.896618][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2905'. [ 331.908192][T15935] xt_ipcomp: unknown flags 1D [ 331.967072][T15940] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2905'. [ 332.121972][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2907'. [ 332.178972][T15949] netlink: 'syz.7.2908': attribute type 8 has an invalid length. [ 332.188891][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'. [ 332.212210][T15949] bond0: entered promiscuous mode [ 332.220353][T15949] gretap0: entered promiscuous mode [ 332.228676][T15949] bridge_slave_1: entered promiscuous mode [ 332.237151][T15949] debugfs: 'hsr1' already exists in 'hsr' [ 332.243402][T15949] Cannot create hsr debugfs directory [ 332.249020][T15949] hsr1: entered promiscuous mode [ 332.336815][T15955] netlink: 'syz.7.2911': attribute type 21 has an invalid length. [ 332.348076][T15955] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2911'. [ 332.731982][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2917'. [ 332.767729][T15980] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2919'. [ 332.777695][T15972] xt_ipcomp: unknown flags 1D [ 332.792565][T15980] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2919'. [ 332.877264][ T29] audit: type=1800 audit(1771649205.981:6): pid=15983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2921" name="memory.events" dev="tmpfs" ino=230 res=0 errno=0 [ 333.216126][T16004] netlink: 'syz.7.2931': attribute type 21 has an invalid length. [ 333.307663][T16009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.437367][T16018] netlink: 'syz.1.2935': attribute type 6 has an invalid length. [ 333.561834][T16018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.790059][T16038] xt_ipcomp: unknown flags 1D [ 333.878559][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.886396][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.965529][T16054] netlink: 'syz.8.2942': attribute type 18 has an invalid length. [ 334.199121][T16032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.221389][T16032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.352936][T13105] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.362829][T13105] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.374963][T13105] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.385611][T13105] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.557659][T16069] tipc: Enabled bearer , priority 0 [ 334.564057][T16073] netlink: 'syz.9.2948': attribute type 7 has an invalid length. [ 334.573994][T16069] syzkaller0: entered promiscuous mode [ 334.579646][T16069] syzkaller0: entered allmulticast mode [ 334.591042][T16073] netlink: 'syz.9.2948': attribute type 7 has an invalid length. [ 334.596200][T16069] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 334.611655][T16075] tipc: Can't bind to reserved service type 1 [ 334.658078][T16069] tipc: Resetting bearer [ 334.669620][T16078] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 334.708546][T16067] tipc: Resetting bearer [ 334.763897][T16067] tipc: Disabling bearer [ 334.871072][T16084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 335.100988][T16097] xt_ipcomp: unknown flags 1D [ 335.360077][T16112] "syz.0.2962" (16112) uses obsolete ecb(arc4) skcipher [ 335.891740][T16139] IPv6: addrconf: prefix option has invalid lifetime [ 335.898540][T16139] IPv6: addrconf: prefix option has invalid lifetime [ 335.975498][T16128] syzkaller0: entered promiscuous mode [ 335.981571][T16128] syzkaller0: entered allmulticast mode [ 336.006280][T16139] macsec0: entered promiscuous mode [ 336.547878][ T30] INFO: task syz.3.1368:10533 blocked for more than 143 seconds. [ 336.562301][ T30] Not tainted syzkaller #0 [ 336.571063][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.588651][ T30] task:syz.3.1368 state:D stack:27144 pid:10533 tgid:10530 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 336.618261][ T30] Call Trace: [ 336.621609][ T30] [ 336.625847][ T30] __schedule+0x1585/0x5340 [ 336.630439][ T30] ? __pfx___schedule+0x10/0x10 [ 336.636572][ T30] ? schedule+0x90/0x360 [ 336.640877][ T30] schedule+0x164/0x360 [ 336.657426][ T30] schedule_preempt_disabled+0x13/0x30 [ 336.664329][ T30] __mutex_lock+0x7fe/0x1300 [ 336.669081][ T30] ? __mutex_lock+0x5ac/0x1300 [ 336.674280][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 336.680166][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 336.699037][T16177] netlink: 'syz.8.2984': attribute type 1 has an invalid length. [ 336.704834][ T30] ? __nlmsg_put+0xef/0x1b0 [ 336.712020][ T30] ? genlmsg_put+0x137/0x2e0 [ 336.717523][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 336.724470][ T30] ? kmem_cache_free+0x187/0x630 [ 336.729511][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 336.737444][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 336.743244][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 336.749023][ T30] ? __asan_memcpy+0x40/0x70 [ 336.757650][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.764264][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 336.769513][ T30] genl_rcv_msg+0x61c/0x7a0 [ 336.775703][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.780932][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 336.787714][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 336.794806][ T30] netlink_rcv_skb+0x232/0x4b0 [ 336.799733][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.805526][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.812808][ T30] ? down_read+0x272/0x2e0 [ 336.818137][ T30] ? genl_rcv+0xd/0x40 [ 336.822211][ T30] genl_rcv+0x28/0x40 [ 336.826560][ T30] netlink_unicast+0x80f/0x9b0 [ 336.831442][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 336.842523][ T30] ? netlink_sendmsg+0x650/0xb40 [ 336.848030][ T30] ? skb_put+0x11b/0x210 [ 336.852807][ T30] netlink_sendmsg+0x813/0xb40 [ 336.858842][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.864873][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.869926][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.875610][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.881005][ T30] ____sys_sendmsg+0xa68/0xad0 [ 336.885970][ T30] ? futex_unqueue+0x211/0x240 [ 336.890951][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.892036][T16177] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 336.896674][ T30] ? import_iovec+0x73/0xa0 [ 336.896717][ T30] ___sys_sendmsg+0x2a5/0x360 [ 336.896756][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.896793][ T30] ? futex_wait+0x29a/0x380 [ 336.896852][ T30] ? __fget_files+0x2a/0x420 [ 336.896881][ T30] ? __fget_files+0x3a0/0x420 [ 336.896921][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 336.896954][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.896995][ T30] ? rcu_is_watching+0x15/0xb0 [ 336.897039][ T30] do_syscall_64+0x14d/0xf80 [ 336.897068][ T30] ? trace_irq_disable+0x3b/0x150 [ 336.897096][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.897117][ T30] ? clear_bhb_loop+0x40/0x90 [ 336.897144][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.897165][ T30] RIP: 0033:0x7f539539c629 [ 336.897186][ T30] RSP: 002b:00007f539617c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.897210][ T30] RAX: ffffffffffffffda RBX: 00007f5395615fa0 RCX: 00007f539539c629 [ 336.897227][ T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 336.897242][ T30] RBP: 00007f5395432b39 R08: 0000000000000000 R09: 0000000000000000 [ 336.897256][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.897269][ T30] R13: 00007f5395616038 R14: 00007f5395615fa0 R15: 00007ffea4acb4f8 [ 336.897305][ T30] [ 336.897993][ T30] [ 336.897993][ T30] Showing all locks held in the system: [ 336.972761][T16177] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 336.976576][ T30] 1 lock held by khungtaskd/30: [ 337.000713][T16177] bond3: (slave vcan1): making interface the new active one [ 337.004922][ T30] #0: [ 337.017633][T16177] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 337.021302][ T30] ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 337.092989][ T30] 2 locks held by getty/5580: [ 337.097677][ T30] #0: ffff8880326390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 337.108172][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 337.118345][ T30] 1 lock held by udevd/5837: [ 337.123070][ T30] #0: ffff8880268f7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 337.132377][ T30] 2 locks held by syz.4.1344/10457: [ 337.137836][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.146555][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 337.156896][ T30] 2 locks held by syz.3.1368/10533: [ 337.162104][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.170594][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 337.180804][ T30] 2 locks held by syz.6.1952/12477: [ 337.187652][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.196497][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 337.206887][ T30] 2 locks held by syz.2.2029/12715: [ 337.212125][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.220452][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 337.230999][ T30] 2 locks held by syz.5.2181/13296: [ 337.236307][ T30] #0: ffff888059dd63c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 337.246633][ T30] #1: ffff888044957260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb1/0x7e0 [ 337.257090][ T30] 1 lock held by syz.9.2978/16154: [ 337.262212][ T30] #0: ffff888046666f48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 337.275175][ T30] 2 locks held by syz.0.2979/16155: [ 337.280390][ T30] #0: ffff888059f34148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 337.290871][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 337.301893][ T30] 2 locks held by syz.1.2982/16168: [ 337.307380][ T30] #0: ffff88804651f508 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 337.317830][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 337.328888][ T30] 1 lock held by syz.8.2984/16176: [ 337.334099][ T30] #0: ffff8880585aaa48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 337.344794][ T30] [ 337.347142][ T30] ============================================= [ 337.347142][ T30] [ 337.356321][ T30] NMI backtrace for cpu 0 [ 337.356350][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.356372][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.356383][ T30] Call Trace: [ 337.356391][ T30] [ 337.356399][ T30] dump_stack_lvl+0xe8/0x150 [ 337.356432][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 337.356456][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 337.356484][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 337.356511][ T30] sys_info+0x135/0x170 [ 337.356530][ T30] watchdog+0xfd9/0x1030 [ 337.356563][ T30] ? watchdog+0x21a/0x1030 [ 337.356597][ T30] kthread+0x388/0x470 [ 337.356617][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.356642][ T30] ? __pfx_kthread+0x10/0x10 [ 337.356663][ T30] ret_from_fork+0x51e/0xb90 [ 337.356689][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 337.356710][ T30] ? __switch_to+0xc7d/0x1450 [ 337.356736][ T30] ? __pfx_kthread+0x10/0x10 [ 337.356756][ T30] ret_from_fork_asm+0x1a/0x30 [ 337.356800][ T30] [ 337.356808][ T30] Sending NMI from CPU 0 to CPUs 1: [ 337.468178][ C1] NMI backtrace for cpu 1 [ 337.468198][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 337.468216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.468225][ C1] RIP: 0010:ttwu_do_activate+0x8f/0x660 [ 337.468247][ C1] Code: 4c 89 e7 74 21 49 8d 9c 24 28 0e 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e8 1f 9b 00 48 8b 3b 48 83 c7 60 ff ff ff ff e8 17 7f 18 0a 85 c0 0f 84 90 03 00 00 49 8d 9f ac [ 337.468260][ C1] RSP: 0018:ffffc90000a08e88 EFLAGS: 00000082 [ 337.468295][ C1] RAX: 0000000000000000 RBX: ffff8880b873bbc0 RCX: ffffc90000a08f18 [ 337.468306][ C1] RDX: 0000000000000000 RSI: ffff888027da5ac0 RDI: ffff8880b873ade0 [ 337.468317][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 337.468326][ C1] R10: dffffc0000000000 R11: fffff520001411c4 R12: ffff8880b873ad80 [ 337.468337][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888027da5ac0 [ 337.468348][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 337.468361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.468371][ C1] CR2: 00007fa060be9d40 CR3: 00000000780a2000 CR4: 00000000003526f0 [ 337.468387][ C1] Call Trace: [ 337.468394][ C1] [ 337.468403][ C1] ? _update_idle_rq_clock_pelt+0x256/0x450 [ 337.468423][ C1] sched_ttwu_pending+0x255/0x5e0 [ 337.468443][ C1] __flush_smp_call_function_queue+0x85d/0xa90 [ 337.468464][ C1] __sysvec_call_function_single+0x9a/0x430 [ 337.468482][ C1] sysvec_call_function_single+0x9e/0xc0 [ 337.468503][ C1] [ 337.468509][ C1] [ 337.468515][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 337.468531][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 337.468558][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 337.468570][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 337.468582][ C1] RAX: 00000000001034f3 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 337.468592][ C1] RDX: 0000000000000001 RSI: ffffffff8def1a4d RDI: ffffffff8c27a480 [ 337.468602][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 337.468613][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0 [ 337.468624][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 337.468635][ C1] ? do_idle+0x1bd/0x500 [ 337.468660][ C1] default_idle+0x9/0x20 [ 337.468674][ C1] default_idle_call+0x72/0xb0 [ 337.468690][ C1] do_idle+0x1bd/0x500 [ 337.468708][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.468730][ C1] ? __pfx_do_idle+0x10/0x10 [ 337.468753][ C1] cpu_startup_entry+0x43/0x60 [ 337.468772][ C1] start_secondary+0x101/0x110 [ 337.468789][ C1] common_startup_64+0x13e/0x147 [ 337.468811][ C1] [ 337.770703][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 337.777612][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.786745][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.796895][ T30] Call Trace: [ 337.800175][ T30] [ 337.803107][ T30] vpanic+0x56c/0xa60 [ 337.807111][ T30] ? __pfx___schedule+0x10/0x10 [ 337.811978][ T30] ? __pfx_vpanic+0x10/0x10 [ 337.816498][ T30] ? __pfx_console_unlock+0x10/0x10 [ 337.821698][ T30] panic+0xc5/0xd0 [ 337.825421][ T30] ? __pfx_panic+0x10/0x10 [ 337.829872][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 337.835268][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 337.841514][ T30] watchdog+0x1023/0x1030 [ 337.845849][ T30] ? watchdog+0x21a/0x1030 [ 337.850265][ T30] kthread+0x388/0x470 [ 337.854336][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.859034][ T30] ? __pfx_kthread+0x10/0x10 [ 337.863631][ T30] ret_from_fork+0x51e/0xb90 [ 337.868221][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 337.873334][ T30] ? __switch_to+0xc7d/0x1450 [ 337.878030][ T30] ? __pfx_kthread+0x10/0x10 [ 337.882612][ T30] ret_from_fork_asm+0x1a/0x30 [ 337.887397][ T30] [ 337.890897][ T30] Kernel Offset: disabled [ 337.895237][ T30] Rebooting in 86400 seconds..