last executing test programs: 5m25.675674285s ago: executing program 0 (id=2874): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x6) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x281}) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) 5m25.307232593s ago: executing program 0 (id=2880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) unshare(0x22020600) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wlan1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) close(0x3) 5m25.000638134s ago: executing program 0 (id=2882): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000000a05000100070000820073797a30000000000500050005000000050004000000000012000300686173683a6e65742c706f7274000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000040)=0x9) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000140)=ANY=[@ANYBLOB="dbac028f0cee195a96", @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="01002bbd7000fcdbdf250400000008000400ffffffff08000100", @ANYBLOB="05000a000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x80) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5m23.847610517s ago: executing program 0 (id=2893): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x585840, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c080000a250dc561317cfa36929033d6e55989fa26e85b7efa9f64e0640f4f206f3c9e2fe3a5b1cb5f67a3056f3ecd88bbe1482e30e24007b7f7908009b57411f7512bba23cbf79e25d", @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf250100000006000a0001000000050007000a00000006000800a0aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294", 0x31}, {&(0x7f0000000900)}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000e00)=@ethtool_cmd={0x32, 0x1, 0x5, 0x0, 0xe, 0xc, 0x5, 0x10, 0x4, 0x9, 0x4, 0x3, 0x8, 0x9, 0x7, 0xf6, [0x4, 0x1]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d05b7a31848f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b3722107205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000c80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000e40)="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", 0x15d}, {&(0x7f0000000400)="771a08d972135af11325c8634ee354c7a9dd52c0073d6bac87c7b763cbfeec12c8cee7e1f8adceccbb02f945e364815cda745db69ee00c0f9e9cb5d6c75e5ec47331ccf47be48787a83db5c2353f166204385f07f2e9cecafbbc203ffc5e79f719d006d5a3184aa64d7af21cb202cddc940bc97d129403791262267bd84024", 0x7f}, {&(0x7f0000000840)="5493e4c9e20431b52d776cfaf8dde3c1fdbcae48a11b5ffbb88f549028d808f4c97fa4a255a6a4b0cdcfd4d915f395bdee72f344f5ead778fd43b924731586543d01c218339c44c9f641b4ee8965e5eee6ff24314ea843904d58515382d9f61f4ec44332ae78ee90bb27", 0x6a}, {&(0x7f00000008c0)="d1050cd585804d3a05862e447eb718c345fbe187edb1ddd7cf1c5f592d0d124483c56b8c2164e5405cb7350f6c8f95ac9af5be589294aa48149a555c9234f9aa1abfbd8e7e4208a6e073f1344353ddaf146fc42359a4c0fb8b2af69c3b467b3f108a9a1f7fdb7b449fdb4f8c9653a6bbf69391f46f88db1b8925f34719e290a05a1b5c75a8cad2e70f45ec5b5a476bf3cb", 0x91}, {&(0x7f0000000a00)="13bcd2609ea645ed971bb5b3c21fe40fda8dfb3bd16e3e464062a6fc62f73a2c8c44f0a77f9f3ae6b3a7c91755a790f3b31d03aa36f6856f2b60ec74645a3bbcba03660279b57a007148e49997b9dbb2a03b18f9a2208c0962d457fce631163d843ace2e5fa1d03e", 0x68}], 0x5, 0x0, 0x0, 0x20000810}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000600), &(0x7f0000000340)=0x8) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) 5m22.770812141s ago: executing program 0 (id=2902): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x42901, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000283"], 0xfce) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/17, 0x11}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 5m21.395290644s ago: executing program 3 (id=2914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000c000080000000000000000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x2a, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="ab93b534cedbdbc8f7f32ecedb6801d99fff51dd7d7036a9873cce2be38de7496bcf1f2bb7c1dd418d88188838d222ffcfe14bdac2d29ca0a4f461a62d0278d31a10b0952be9b20019f8c4dd9adbf29a5d7e6607346a480415ca93235063ae834bd4bfb3", @ANYRES64=0x0], 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0xd, @private2={0xfc, 0x2, '\x00', 0xfc}, @loopback, 0x40, 0x7800, 0xfffffffc, 0xea1d}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5m21.101486407s ago: executing program 4 (id=2915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003300000000000000ffffffff000000000000000000000078703948000000000000000100000002000000000000000000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a01010101"], 0x13c}, 0x1, 0x0, 0x5000000, 0x1}, 0x0) 5m20.783498423s ago: executing program 4 (id=2916): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x23, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x9]}}) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000140)={&(0x7f0000000000)=0x6, 0x2, &(0x7f0000000040)=[{}], &(0x7f0000000100)}) 5m20.593741095s ago: executing program 1 (id=2917): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb(cipher_null))\x00'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x1c}}, 0x20000004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb(cipher_null))\x00'}, 0x58) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x1c}}, 0x20000004) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 5m20.451971234s ago: executing program 4 (id=2918): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200b00006a001b0c2bbd7000fbdbdf2502000000000000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xac, &(0x7f0000001240)=""/172, 0x40f00, 0x4b}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x110, 0x330, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@multicast1, @rand_addr=0x64010100, 0xff, 0xffffffff, 0x7, 0x3, {@mac=@random="b85391192d27", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x7ff, 0x2, 0x7fff, 0x9, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x227}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @broadcast, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0xff, 0xffffff00, 0x8, 0xa, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x21, 0xa, 0x62, 0x4005, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x2c8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @rand_addr=0x64010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x110, 0x330, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@multicast1, @rand_addr=0x64010100, 0xff, 0xffffffff, 0x7, 0x3, {@mac=@random="b85391192d27", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x7ff, 0x2, 0x7fff, 0x9, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x227}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @broadcast, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0xff, 0xffffff00, 0x8, 0xa, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x21, 0xa, 0x62, 0x4005, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x2c8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @rand_addr=0x64010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003004469746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008e00000005c05000500020000000500010006000000"], 0x6c}}, 0x8000) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf2525f537b38ced0000000e0001006e657464655873696dfe00000f0002006e657464657673"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 5m20.326019137s ago: executing program 3 (id=2919): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x8040600) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback, r1, 0x2f}, 0x20) unshare(0x20040400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000048004240000000200000000e1627f0001edff0001009c0e37b70000000000000000dd00020000"], &(0x7f0000000640)=""/204, 0x3e, 0xcc, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000400) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/86, 0x56}], 0x1, &(0x7f0000000140)=""/59, 0x3b}}, {{&(0x7f0000000180)=@caif=@dbg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/241, 0xf1}], 0x2, &(0x7f00000003c0)=""/89, 0x59}, 0x9}], 0x2, 0x40, &(0x7f00000004c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYRES8=r6, @ANYRES32=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES8=r3, @ANYBLOB="08002600940900000800b70099", @ANYRES8=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}]}, 0xffffffffffffff11}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) 5m20.059826561s ago: executing program 1 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) 5m19.895837135s ago: executing program 4 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="08080000000000000710000000010202c500ffff0000000000000102000005020002072800000003080402f302000000000000002e70e29000000000000400"/80], 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x78, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}, @TCA_FLOWER_KEY_MPLS_OPTS={0x48, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xe4f2, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x5}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x67}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6, 0x0, 0x1}}]}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="9ae08314e58e"}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)=0x44b) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x10c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffff5ea}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c021) 5m19.845666738s ago: executing program 3 (id=2922): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x4e22, 0x9, 0x4e22, 0x1000, 0x2, 0x20, 0x0, 0x6, 0x0, r3}, {0x80, 0xffffc, 0x9a11, 0x7, 0x4, 0x2, 0x7, 0x5}, {0x1000, 0xff, 0x1000, 0x353bac47}, 0x200, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x51}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x5a, 0x9, 0xb4f5, 0xffffffff}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e2e2e569295195221fbba0685dbae1ec2183709fbbc49b98a646f15d90e37dacc5904958ac3b06024c9a4c389a", @ANYRES16=r7, @ANYBLOB="020026bd7000fddbdf250d000000050017000500000006000800ffff000006000800a0aa0000050019008000000005001d0010000000"], 0x3c}}, 0x4044) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000440)={0x0, 'vlan0\x00', {0x4}, 0x5b32}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @mss={0x2, 0x4, 0xfe}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 5m19.41092986s ago: executing program 1 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31dff2020000000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014002200110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48084}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[], 0x1}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x6e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0xffffff00, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x29, 0x0, 0x3}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x5, 0x1}, {0x6, 0x4}, {0xf, 0xfff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) 5m19.25193968s ago: executing program 3 (id=2924): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x1, 0x0, 0x1, 0xa, 0x6, 0x2}, &(0x7f00000000c0)=0x20) socketpair(0x8, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x2220020) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f00000001c0)) 5m19.120313292s ago: executing program 1 (id=2925): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xc, 0xf989, "4870669d7821c471"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0xe, [0x1, 0x0, 0xfffffffa]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}, @fastopen={0x22, 0x6, "c6592e7d"}]}}}}}}}}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000c540)=[{0x0}, {&(0x7f000000b540)="920ca227df656121a7da9d", 0xb}], 0x2}, 0x20000890) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) 5m18.931265574s ago: executing program 4 (id=2926): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000002580000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m18.818950383s ago: executing program 1 (id=2927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r1, r2, 0x2f, 0x2000, 0x4, @value=r4}, 0x20) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847", 0xc0}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6}, 0x94) 5m18.354401247s ago: executing program 1 (id=2928): unshare(0x20000000) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r1, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4004042}, 0x4000000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, &(0x7f0000001640)) close(r4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000050a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x10, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xa}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x4, [0xb, 0x3, 0xfffa, 0x7, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0x7, 0x3, 0x5, 0x3, 0xd, 0xff], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m17.942846839s ago: executing program 4 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001800080025bd7000fddbdf251dea56000c000b00030000a00100008005000d009500000015000400030000e005000000183744d7868b7f890200000015000300000000a0000000007f80af59d205b8592d69175301040000001500020002000020050300005027078baa1f5f6c05000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8dc00000104010800000000000000000700000a080004400500000005000100010000000a000200000000a6f374ddc9"], 0x30}, 0x1, 0x0, 0x0, 0x801670806bbf220e}, 0x4810) 5m17.474952396s ago: executing program 3 (id=2930): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x670, 0x230, 0x4b0, 0x230, 0x118, 0x4b0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xb, 0x1, 0x1, [0x764b, 0x500f, 0x184, 0x0, 0x3, 0x5, 0x7, 0xf801, 0x6, 0x9, 0x0, 0x8, 0xc8ea, 0xaa, 0x7, 0x1000], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7f}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x2, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@empty, 0x1a, 0x39, 0x500}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x7f}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x32, 0x22, 0xb271}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00], 'veth1_to_team\x00', 'dummy0\x00', {}, {}, 0x62, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, 0x25, 0x22, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) listen(r0, 0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="db3486e919a65dfa469a7fbc6f76e7a9d97687655e7a40797e27769e315c12cdf566fff91e36e2fdb034f82e10d500551f68c5d71691e5d6d6a6ae32ff1d8592a1bb1aadf40a691c40c24c5eea18fe4c70757b55566f773bf8fd7f6dc2ae8719efac28dd4d4c8a66e7f41a8bde8246b335c79e8f0940be8b18801a17b3ba06d4d26955b61706cdfc1b4f4d2e1a35cf16d0606394722a421745e25aec83fa0d73378cf1f6e6afc81c3bb7ce111c3889c6d9e4c39897dbaa01011599265ecfe84d6ef13854f61166ca44e9444877c0dc71f1b85ff5b2") sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x280}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240048d1) 5m17.31654634s ago: executing program 3 (id=2931): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x1}}}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000010002", @ANYBLOB], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280", @ANYRESHEX=r5, @ANYRES8=r6, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRESHEX=r0, @ANYRESDEC=r7], 0x24}}, 0x800) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f00000001c0)=""/237, &(0x7f00000002c0)=0xed) 5m16.39283228s ago: executing program 0 (id=2932): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000e0ffff0002000418fdffffff"], 0x68}}], 0x2, 0x4040005) (async, rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000240)=0x409, 0x4) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)={0x7, {{0xa, 0x4e20, 0x2, @remote, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4285}}, {{0xa, 0x4e22, 0x6a, @local, 0x1000}}]}, 0x190) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf252e0000001800018014000200776c616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x100000000, 0x9, 0xfffffffffffffffa, 0xffffffffffffffff, 0x6}, {0x8001, 0x2, 0x4, 0x479f, 0x63ab}], 0x2, 0x28, 0xf, 0x8000000000000001}) socket$inet(0x2, 0x80000, 0x668) (async) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0xe73, 0x4) 5m2.718461072s ago: executing program 32 (id=2928): unshare(0x20000000) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r1, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4004042}, 0x4000000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, &(0x7f0000001640)) close(r4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000050a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x10, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xa}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x4, [0xb, 0x3, 0xfffa, 0x7, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0x7, 0x3, 0x5, 0x3, 0xd, 0xff], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m2.654777824s ago: executing program 33 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001800080025bd7000fddbdf251dea56000c000b00030000a00100008005000d009500000015000400030000e005000000183744d7868b7f890200000015000300000000a0000000007f80af59d205b8592d69175301040000001500020002000020050300005027078baa1f5f6c05000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8dc00000104010800000000000000000700000a080004400500000005000100010000000a000200000000a6f374ddc9"], 0x30}, 0x1, 0x0, 0x0, 0x801670806bbf220e}, 0x4810) 5m2.178784126s ago: executing program 34 (id=2931): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x1}}}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000010002", @ANYBLOB], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280", @ANYRESHEX=r5, @ANYRES8=r6, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRESHEX=r0, @ANYRESDEC=r7], 0x24}}, 0x800) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f00000001c0)=""/237, &(0x7f00000002c0)=0xed) 5m1.124319032s ago: executing program 35 (id=2932): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000e0ffff0002000418fdffffff"], 0x68}}], 0x2, 0x4040005) (async, rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000240)=0x409, 0x4) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)={0x7, {{0xa, 0x4e20, 0x2, @remote, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4285}}, {{0xa, 0x4e22, 0x6a, @local, 0x1000}}]}, 0x190) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf252e0000001800018014000200776c616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x100000000, 0x9, 0xfffffffffffffffa, 0xffffffffffffffff, 0x6}, {0x8001, 0x2, 0x4, 0x479f, 0x63ab}], 0x2, 0x28, 0xf, 0x8000000000000001}) socket$inet(0x2, 0x80000, 0x668) (async) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0xe73, 0x4) 5.438749099s ago: executing program 5 (id=5251): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x20000000, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0x24b0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r12, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x20000000) 3.875680309s ago: executing program 8 (id=5268): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000500)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}], 0x10}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$qrtr(r3, &(0x7f00000015c0)={&(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x2001c092}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000001680)={r1, &(0x7f0000000180)='\x00', 0x10200, &(0x7f00000001c0)={@align=0x305, {0xa, 0x0, 0x83, 0xfffffffffffffffa}}, 0x1, &(0x7f0000001600)={@_ha_fsid}, &(0x7f0000001640)=0x10}) 3.491017225s ago: executing program 8 (id=5269): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10026, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_emit_ethernet(0x59, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x1f, 0x4b, 0x68, 0x0, 0x9, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x2, 0x8, 0x8, 0x67, 0x31a, 0x36, 0xf4, 0x5, @multicast1, @broadcast, {[@end, @cipso={0x86, 0x6, 0x1}, @timestamp={0x44, 0x8, 0x90, 0x0, 0xa, [0x8b70619]}]}}, "a2279d8f94d46f"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r8, 0x1) 2.219338758s ago: executing program 5 (id=5271): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000772e3bb201000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000400)={r11, 0x7ff, 0xfff, 0x3, 0xf1d5, 0xd, 0x6c, 0x6e1, {r11, @in6={{0xa, 0x4e23, 0x80f7, @private1, 0x3}}, 0x8, 0x9, 0x7, 0x4}}, &(0x7f00000004c0)=0xb0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000580)=0x7, 0x4) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r6, 0x8f5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x200}}}}}}}, 0x0) write$cgroup_devices(r6, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) write(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x2d, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x2, 0x5, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.198047437s ago: executing program 8 (id=5274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0xf2ff, 0x0, 0x4008081}, 0x0) 2.093402891s ago: executing program 6 (id=5275): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x3, 0x4) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x5, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xffffffff}, 0x0) 2.020457477s ago: executing program 6 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.921377099s ago: executing program 2 (id=5278): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe100100007109ef32842c1cf1101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a0100000000000000937b7b22a1319130feaab952ac4703caae4be68907eb47fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e742937b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9eff0cbb4b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd131d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb4020", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cd", 0x6b}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="91790da0bd1c560e30633259f42abd712cb00cd5f83f5f8fd4be4ff744c36a3b11e84fb8d6e6ca9d8831796fb98a386d3ad837a9e92affe1ba18adfbe1ea97dfdc3e665f3d20948ea7a1f32fc8b737b8dbbad63cfea88639ec022f58243597a6a8f892a5bc1680da9111e2eefeaaa73f48fd9cb40256f609234533d1860d9694bdef8fb9152b0d6387dbbf25b8dbc5daf811a32c6dabce201eecc67cc65a2b6a95c7d696bb6087d6b2f347adf0a15f0d61cc543e33b70bd51768ef036cc9fe1513dfdf4e2668bc05d99df6e75a76a3cb006d987aca0b729f67008428a161d4adc05a8065b609a0b1303258ecbcecfaee5d", 0xf1}, {&(0x7f00000002c0)="88deadb29a8d529be1a943d58d6e4e86dfd54f4020e334a38ffffcec69ff4e37184205ea57d5afc9409421ba8943ccd8d1e768b8edc1ed5477a5", 0x3a}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0xf7}) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe100100007109ef32842c1cf1101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a0100000000000000937b7b22a1319130feaab952ac4703caae4be68907eb47fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e742937b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9eff0cbb4b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd131d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb4020", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cd", 0x6b}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="91790da0bd1c560e30633259f42abd712cb00cd5f83f5f8fd4be4ff744c36a3b11e84fb8d6e6ca9d8831796fb98a386d3ad837a9e92affe1ba18adfbe1ea97dfdc3e665f3d20948ea7a1f32fc8b737b8dbbad63cfea88639ec022f58243597a6a8f892a5bc1680da9111e2eefeaaa73f48fd9cb40256f609234533d1860d9694bdef8fb9152b0d6387dbbf25b8dbc5daf811a32c6dabce201eecc67cc65a2b6a95c7d696bb6087d6b2f347adf0a15f0d61cc543e33b70bd51768ef036cc9fe1513dfdf4e2668bc05d99df6e75a76a3cb006d987aca0b729f67008428a161d4adc05a8065b609a0b1303258ecbcecfaee5d", 0xf1}, {&(0x7f00000002c0)="88deadb29a8d529be1a943d58d6e4e86dfd54f4020e334a38ffffcec69ff4e37184205ea57d5afc9409421ba8943ccd8d1e768b8edc1ed5477a5", 0x3a}], 0x2}}], 0x3, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0xf7}) (async) 1.738923179s ago: executing program 7 (id=5279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x15c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff01}, {0x6, 0x11, 0x87c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf480}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0xe677}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7e46}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x33}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8800}, 0x20008000) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x15c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff01}, {0x6, 0x11, 0x87c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf480}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0xe677}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7e46}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x33}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8800}, 0x20008000) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000400)={{0x2, 0x4e23, @multicast2}, {0x306}, 0x70, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 'wlan1\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '{)'}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000600), r2) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000880)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r2, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x8, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x67, 0x0, 0x41, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0xf, 0xc1, [@multicast1, @broadcast, @private=0xa010100]}, @timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@multicast1, 0xffff}, {@rand_addr=0x64010102, 0x1}, {@local, 0x226eb13c}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xd5}, {@multicast1, 0x100}, {@broadcast, 0xb}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x9, 0xa578, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x1, 0xd9}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000c40)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000f40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001000)={'ip6gre0\x00', &(0x7f0000000f80)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x9, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa0, 0x7, 0x4, 0xd7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001000)={'ip6gre0\x00', &(0x7f0000000f80)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x9, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa0, 0x7, 0x4, 0xd7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001040)={@private, @broadcast, 0x0}, &(0x7f0000001080)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001140)={'ip6gre0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x0, 0x8, 0x9, @mcast1, @mcast2, 0x10, 0x700, 0xffff, 0xa859}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x10, 0x8010, 0x8, 0x4, {{0x3b, 0x4, 0x1, 0x14, 0xec, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @empty, {[@rr={0x7, 0x1b, 0x65, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_prespec={0x44, 0x44, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@local, 0xfff}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x2}, {@private=0xa010102, 0xf47e}, {@empty, 0xfff}, {@remote, 0x1}, {@private=0xa010102, 0x4}]}, @timestamp={0x44, 0x1c, 0x5a, 0x0, 0x3, [0x8, 0x5, 0x4, 0x101, 0xffffc4e4, 0x0]}, @noop, @rr={0x7, 0x1b, 0x6, [@remote, @local, @private=0xa010100, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_addr={0x44, 0x24, 0xb, 0x1, 0x3, [{@multicast1, 0x97}, {@multicast2, 0x1}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x8000}]}, @lsrr={0x83, 0x1b, 0xde, [@multicast2, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x36, 0xef, 0x78, @loopback, @mcast2, 0x7800, 0x10, 0x100, 0x93}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x36, 0xef, 0x78, @loopback, @mcast2, 0x7800, 0x10, 0x100, 0x93}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001ec0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001480)={0x9d0, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xf8, 0x7, 0xeec}, {0x5, 0x9, 0x1}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x9, 0x9, 0x1d}, {0x4, 0x18, 0x2, 0x1}, {0x3, 0x2, 0x2, 0x7fffffff}, {0x0, 0x2, 0x40, 0x4}, {0x4, 0xf7, 0x4, 0x1}, {0x9, 0xd4, 0x10, 0xa}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6da8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4c62}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}]}}]}, 0x9d0}}, 0x20048800) 1.620137538s ago: executing program 6 (id=5280): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) unshare(0x2c020400) tee(r0, r3, 0x8f5, 0xb) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 1.518663461s ago: executing program 8 (id=5281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x5c}}, 0x24000800) 1.459477022s ago: executing program 7 (id=5282): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x82, &(0x7f0000000200)={0x2, 0x1e3, 0x1e0, 0x8001}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0xd, 0x4, 0x1, 0x22, 0x3c, 0x66, 0x0, 0x60, 0x2, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop, @rr={0x7, 0x13, 0xd8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x1, [{@loopback, 0xffffff53}]}]}}, "14f3305280f125e6"}}, 0x4a) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2029}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.277432438s ago: executing program 5 (id=5283): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000100000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000000)="2e000300010003", 0x7) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {0x9, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1]}]}}]}, 0x45c}}, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x4f7, 0x4) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) sendmsg(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4) (async) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 1.130442582s ago: executing program 2 (id=5284): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.042736158s ago: executing program 8 (id=5285): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @multicast}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @multicast}, 0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x18, &(0x7f0000000600)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}, @jmp={0x5, 0x1, 0x6dcf8dd8dc183f77, 0x1, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="c1ff6374e67c721383171139106467875d02686798458e89a9fb4b61fbe6906616f69d4afe20f588038f323ffb109c8eb819a3336d37dbbd8e781b075c10bcc531ee9bb03974424ac8e6f694ff7c6c9bde86e956ff404cc01820d1e41f1f9f42fcd85308dd650489a91a8b2a37f636306cc2780da033cd1b09253a78f6de8ba2814a01cdfd2291a6cfeca47c72cd280402588e812941cb1e5e92bec899b290f630d421072f8e7be4c296692b2503b839a0efc93e2f18126c803041fa9c93c19d2fc0651a2af1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000b72000000500fdffffffffffffff00"/28], 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="c1ff6374e67c721383171139106467875d02686798458e89a9fb4b61fbe6906616f69d4afe20f588038f323ffb109c8eb819a3336d37dbbd8e781b075c10bcc531ee9bb03974424ac8e6f694ff7c6c9bde86e956ff404cc01820d1e41f1f9f42fcd85308dd650489a91a8b2a37f636306cc2780da033cd1b09253a78f6de8ba2814a01cdfd2291a6cfeca47c72cd280402588e812941cb1e5e92bec899b290f630d421072f8e7be4c296692b2503b839a0efc93e2f18126c803041fa9c93c19d2fc0651a2af1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000b72000000500fdffffffffffffff00"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) recvfrom$packet(r0, &(0x7f0000000500)=""/247, 0xf7, 0x2102, 0x0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0cf00000000000000000000000000000000000000000000d9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000001f850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20400) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x300, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x3e, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20040000}, 0x4000) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200fff904f0bf00080008000100000080004000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x6, 0x3, 0x3, 0xffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, r7}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @alu={0x4, 0x1, 0x4, 0x1, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x72, &(0x7f00000000c0)=""/114, 0x41100, 0x34, '\x00', r2, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x7fff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r3, r4, r5, r6, r13], &(0x7f00000003c0)=[{0x0, 0x2, 0xb, 0xc}, {0x0, 0x5, 0x10, 0xf}], 0x10, 0x3}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4) (async) setsockopt$sock_int(r15, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4) 1.028253513s ago: executing program 5 (id=5286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6f0b0024f8245400c7f833"], 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6f0b0024f8245400c7f833"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getpid() socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2102, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0x80b, 0x3, 0x5, 0x5, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffd, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r12, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 950.556365ms ago: executing program 2 (id=5287): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000413520004001d000800170002000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 759.56156ms ago: executing program 7 (id=5288): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000004007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 671.944214ms ago: executing program 2 (id=5289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 612.991457ms ago: executing program 6 (id=5290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f00000002c0)=0x84) 532.088423ms ago: executing program 7 (id=5291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0xffe4, 0x0, 0x4008081}, 0x0) 440.482582ms ago: executing program 5 (id=5292): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000100180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x6, &(0x7f0000000040)=""/6, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 429.461891ms ago: executing program 2 (id=5293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x2}) (async) 331.425678ms ago: executing program 6 (id=5294): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x82&\x00', 0x40700, &(0x7f0000000240)={@align=0xf2, {0xfff, 0x0, 0x7, 0xfffffffffffffffb}}, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x40f00, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800e0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x82&\x00', 0x40700, &(0x7f0000000240)={@align=0xf2, {0xfff, 0x0, 0x7, 0xfffffffffffffffb}}, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x40f00, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800e0}, 0x94) (async) 274.6946ms ago: executing program 8 (id=5295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r3 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43b"], 0x340a) 248.544002ms ago: executing program 5 (id=5296): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000900)={{r7}, "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"}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e9b3d1b610292b9a2cd3d6d4fe0570007e03dd65193dfb6c575963f86ddf06712e9000911e1ed3ddfcc70fd5c355a3fb4b308ea2d086a7a7af9317409a9b8ef126c4bc252599a0bf8aef442a0b02d55dd2df6e505333a182785f96f03708f006a8af1c94d6a7c1064970a7c65", 0x6d}, {&(0x7f0000002580)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9af7deee6b05e3387473", 0x2a}], 0x2) bind$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x2}, 0xc) 200.132025ms ago: executing program 7 (id=5297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 176.73287ms ago: executing program 2 (id=5298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000feffffff0000005949054138ef25ccc473161f9d51c764a52edd43f76c7b982d246ab04cd438d49a8fa339d652d2877a71aa8eeaedbaed9ba8c1916cfa5dfc2c2b582a343d4a35ba9ae2923f0ed3fece1f8c8e33de10217ae224ab67ea8ac566af3c192101dfb1377d", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"/281], 0x128}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x19c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "34a6d208e734abb48567b6fd0e8615b60f4d37276b0cc68a83f1a456a74507fc803dd16b7f54f12b8cfae26e8870166925bf655134ba7e9b0af5feeb9f3dff223a236a56a85ac9d12d993b6ca1b04154ee4f2b9f7529eac41339ebf994c431328e46d2c92b38532dacd701756cbfb3d825f06dc3150afcdc00087191"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "75e590ef3a8153641cbef2cc5a47d168a2f0f7eaff"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "566f8c84fe199aa30403d38158469d112b5531b9a04e6ac962860b2f0f06f98a33d86860113ee779fcb8534ad1b9c7257338015f2f429a18826e40994763f48d2fccde2405da71bf7f5ee52f7c5542ebc14c78763d18afe4a94e52fd739944645641df28b0172ab67c3479871cff464ed5adcaf55b924082abf4eb030a1c000ac1921ba78f229edbe3fb81c6f2a9f2d86b709bf589567144ebbdc855fc1b9fbc72381e0e45a7548b4f4d274e8e42468e22f18f1d19221e098da89f6e02ba22002880b9357d683874fc75370e8387f5d716430c"}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) 58.360019ms ago: executing program 7 (id=5299): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x80bc, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 0s ago: executing program 6 (id=5300): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) unshare(0x2c020400) tee(r0, r4, 0x8f5, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000070940000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x6f8, 0x4d8, 0x250, 0xffffffff, 0x250, 0x250, 0x628, 0x628, 0xffffffff, 0x628, 0x628, 0x5, &(0x7f0000000280), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xead500b1260380f1, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xff], 'gre0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x35, 0x0, 0x2, 0x18}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x10000, 0x5], 0x2, 0x1, 0x1, [@loopback, @loopback, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @local, @loopback, @local, @rand_addr=' \x01\x00', @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x3}}, @common=@mh={{0x28}, {"a367"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010101, @ipv4=@loopback, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0x0, 0xff], 'wlan1\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x9}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x16, 0x4}}, @common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@broadcast, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x85, 0xffffffff], 0x3}}, @common=@hl={{0x28}, {0x3, 0xdd}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xb, @ipv6=@private1, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x64, @port=0x4e23}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d2], 0x2, 0x71, 0x2}}, @common=@frag={{0x30}, {[0xfffffbff, 0xf1c], 0x8, 0x5, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xc, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e20, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) write(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 210][T22171] xt_hashlimit: invalid rate [ 587.428529][T22170] hsr_slave_1 (unregistering): left promiscuous mode [ 587.566488][T22174] 8021q: VLANs not supported on syzkaller1 [ 588.120268][ T5286] 8021q: adding VLAN 0 to HW filter on device eth13 [ 588.746482][T22243] netlink: 'syz.5.3942': attribute type 39 has an invalid length. [ 588.823239][T22238] lo speed is unknown, defaulting to 1000 [ 588.878656][T22244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 589.697173][ T5286] 8021q: adding VLAN 0 to HW filter on device eth14 [ 589.775119][T22286] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 589.808977][T22238] lo speed is unknown, defaulting to 1000 [ 590.453545][T22341] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 590.453545][T22341] Please contact the netfilter-devel mailing list or update your nftables rules. [ 590.546657][T22349] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3959'. [ 590.574753][T22347] netlink: 39 bytes leftover after parsing attributes in process `syz.8.3960'. [ 590.618088][T22349] netlink: 'syz.6.3959': attribute type 21 has an invalid length. [ 590.746487][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3962'. [ 590.801314][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3962'. [ 590.859674][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3963'. [ 590.878627][T22363] netlink: 'syz.6.3959': attribute type 3 has an invalid length. [ 591.224079][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15 [ 591.360931][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3966'. [ 591.402583][T22386] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3967'. [ 591.564693][T22393] netlink: 'syz.8.3969': attribute type 7 has an invalid length. [ 591.601787][T22393] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3969'. [ 591.628287][T22393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.736810][T22405] netlink: 'syz.7.3972': attribute type 1 has an invalid length. [ 591.944862][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 591.982955][T22405] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 592.177298][T22426] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3975'. [ 592.456083][T22442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.640761][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16 [ 592.931120][T22466] vxcan0: entered promiscuous mode [ 592.948036][T22466] vxcan0: entered allmulticast mode [ 593.212800][T22477] pim6reg: entered allmulticast mode [ 593.290822][T22487] pim6reg: left allmulticast mode [ 593.602985][T22503] xt_hashlimit: invalid rate [ 594.418488][T22542] netlink: 'syz.8.4001': attribute type 7 has an invalid length. [ 594.577721][T22545] bond0 (unregistering): Released all slaves [ 594.606927][T22548] netlink: 'syz.2.4003': attribute type 5 has an invalid length. [ 594.973011][T22576] netlink: 'syz.2.4007': attribute type 1 has an invalid length. [ 595.575926][T22605] __nla_validate_parse: 24 callbacks suppressed [ 595.575944][T22605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4014'. [ 595.782920][T22610] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4015'. [ 595.838838][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4019'. [ 595.857271][T22619] lo speed is unknown, defaulting to 1000 [ 595.863041][T22622] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 596.017042][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4020'. [ 596.027204][T22629] openvswitch: netlink: Message has 4 unknown bytes. [ 596.118501][T22631] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 596.294097][T22634] bond3: entered promiscuous mode [ 596.328416][T22638] vcan2: entered promiscuous mode [ 596.335401][T22638] vcan2: entered allmulticast mode [ 596.342067][T22638] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 596.353587][T22638] bond3: (slave vcan2): Error -95 calling set_mac_address [ 596.477961][T22619] lo speed is unknown, defaulting to 1000 [ 596.639949][T22656] netlink: 'syz.2.4029': attribute type 13 has an invalid length. [ 596.668273][T22656] netlink: 'syz.2.4029': attribute type 27 has an invalid length. [ 596.741689][T22655] vxcan2: entered allmulticast mode [ 596.756773][T22662] netlink: 'syz.6.4031': attribute type 1 has an invalid length. [ 596.767629][T22662] netlink: 'syz.6.4031': attribute type 2 has an invalid length. [ 597.074254][T22678] xt_HMARK: spi-set and port-set can't be combined [ 597.086378][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4034'. [ 597.113137][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4034'. [ 597.294821][T22688] netlink: 'syz.6.4036': attribute type 21 has an invalid length. [ 597.309114][T22688] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4036'. [ 597.924329][T22688] netlink: 'syz.6.4036': attribute type 4 has an invalid length. [ 597.934862][T22688] netlink: 'syz.6.4036': attribute type 5 has an invalid length. [ 597.943658][T22688] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4036'. [ 600.037751][T22712] syzkaller0: entered promiscuous mode [ 600.055614][T22712] syzkaller0: entered allmulticast mode [ 600.676821][T22756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.758596][T22758] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4049'. [ 600.861936][T22761] syzkaller0: entered promiscuous mode [ 600.870416][T22761] syzkaller0: entered allmulticast mode [ 601.020059][T22768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4053'. [ 601.247554][T22779] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 601.282176][T22779] team0: Port device dummy0 added [ 601.297351][T22779] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 601.324351][T22779] team0: Port device dummy0 removed [ 601.326019][T22781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4058'. [ 601.339059][T22781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4058'. [ 601.353053][T22781] gretap0: entered promiscuous mode [ 601.361977][T22781] gretap0: left promiscuous mode [ 601.462502][T22785] gtp1: entered promiscuous mode [ 601.481109][T22785] gtp1: entered allmulticast mode [ 601.507829][T22787] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4060'. [ 601.517807][T22787] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4060'. [ 601.586661][T22787] lo speed is unknown, defaulting to 1000 [ 601.708745][T22787] lo speed is unknown, defaulting to 1000 [ 603.522582][T22759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.532113][T22773] netlink: 'syz.8.4055': attribute type 1 has an invalid length. [ 603.541550][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4055'. [ 603.715582][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4061'. [ 603.756257][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4061'. [ 603.795567][T22801] syzkaller0: entered promiscuous mode [ 603.814177][T22798] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4061'. [ 603.820415][T22801] syzkaller0: entered allmulticast mode [ 604.047798][T22819] ip6gre3: entered promiscuous mode [ 604.054676][T22819] ip6gre3: entered allmulticast mode [ 604.294295][T22835] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.308356][T22839] netlink: 'syz.6.4070': attribute type 16 has an invalid length. [ 604.314364][T22835] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.324762][T22839] netlink: 'syz.6.4070': attribute type 17 has an invalid length. [ 604.579998][T22844] ªªªªª: renamed from virt_wifi0 [ 605.018122][T22870] syzkaller0: entered promiscuous mode [ 605.026194][T22870] syzkaller0: entered allmulticast mode [ 605.122742][T22873] macvlan0: entered promiscuous mode [ 605.128125][T22873] macvlan0: entered allmulticast mode [ 605.135013][T22873] bond4: (slave macvlan0): Opening slave failed [ 605.147115][T22877] nbd: must specify at least one socket [ 605.159400][T22876] batadv_slave_0: entered promiscuous mode [ 605.316360][T22875] batadv_slave_0: left promiscuous mode [ 605.622760][T22894] netlink: 'syz.6.4091': attribute type 1 has an invalid length. [ 606.400671][T22918] __nla_validate_parse: 7 callbacks suppressed [ 606.400689][T22918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4100'. [ 607.301191][T22972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4111'. [ 607.337210][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4111'. [ 607.366371][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4112'. [ 607.408253][T22978] netlink: 'syz.7.4113': attribute type 1 has an invalid length. [ 607.434259][T22980] bridge2: entered promiscuous mode [ 607.557384][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4115'. [ 607.583244][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4113'. [ 607.621084][T22990] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.670853][T22990] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4116'. [ 607.901953][T22992] @: option downdelay: invalid value (18446744073709547007) [ 607.915799][T22992] @: option downdelay: allowed values 0 - 2147483647 [ 607.927435][T22992] @ (unregistering): Released all slaves [ 607.957845][T22990] 0ªX¹¦À: renamed from batadv0 [ 607.965179][T22990] 0ªX¹¦À: entered allmulticast mode [ 607.974069][T22990] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 607.982265][T22990] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 608.228713][T23012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.259025][T23012] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4121'. [ 608.426104][T23017] geneve3: entered promiscuous mode [ 608.453402][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4124'. [ 608.505756][ T7121] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 37973 - 0 [ 608.537363][ T7121] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 37973 - 0 [ 608.651645][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4124'. [ 608.702126][ T7121] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 37973 - 0 [ 608.723906][ T7121] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 37973 - 0 [ 608.901057][T23048] netlink: 'syz.7.4130': attribute type 1 has an invalid length. [ 609.073967][T23048] bond5: entered promiscuous mode [ 609.085010][T23048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.191858][T23063] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.234577][T23063] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 609.258398][T23063] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 609.279949][T23063] bond5: (slave ip6gre1): making interface the new active one [ 609.287557][T23063] ip6gre1: entered promiscuous mode [ 609.299120][T23063] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 609.554229][T23074] pim6reg: entered allmulticast mode [ 609.572633][T23077] netlink: 'syz.5.4138': attribute type 1 has an invalid length. [ 609.584632][T23082] pim6reg: left allmulticast mode [ 609.610723][T23084] netlink: 'syz.7.4140': attribute type 1 has an invalid length. [ 609.626573][T23077] netlink: 'syz.5.4138': attribute type 1 has an invalid length. [ 611.026420][T23151] syzkaller0: entered promiscuous mode [ 611.067207][T23151] syzkaller0: entered allmulticast mode [ 611.186385][T23166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.637630][T23189] netlink: 'syz.5.4167': attribute type 1 has an invalid length. [ 611.932882][T23204] openvswitch: netlink: Key type 29 is not supported [ 611.964373][T23206] syzkaller0: entered promiscuous mode [ 611.984056][T23206] syzkaller0: entered allmulticast mode [ 612.003795][T23208] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 612.265452][T23225] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 612.426649][T23232] __nla_validate_parse: 7 callbacks suppressed [ 612.426664][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4181'. [ 612.455860][T23230] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4179'. [ 612.747030][T23251] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 612.781290][T23250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 612.815005][T23259] ip6gre1: entered promiscuous mode [ 613.143852][T23272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4192'. [ 613.154570][T23272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.174115][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 613.184246][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4192'. [ 613.201531][T23272] netlink: 'syz.5.4192': attribute type 19 has an invalid length. [ 613.218986][T23272] netlink: 'syz.5.4192': attribute type 20 has an invalid length. [ 613.298748][T23277] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4193'. [ 613.322961][T23277] netlink: 'syz.6.4193': attribute type 9 has an invalid length. [ 613.342904][T23277] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4193'. [ 613.370434][T23277] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4193'. [ 613.658406][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4197'. [ 613.681669][T23293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.853309][T23303] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 613.906913][T23303] netlink: 'syz.6.4200': attribute type 12 has an invalid length. [ 613.918586][T23303] netlink: 'syz.6.4200': attribute type 29 has an invalid length. [ 613.927099][T23303] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4200'. [ 614.121152][T23308] veth3: entered allmulticast mode [ 614.155455][T23308] bond5: (slave veth3): Enslaving as an active interface with an up link [ 614.185327][T23315] netem: change failed [ 614.237237][T23313] bond5 (unregistering): (slave veth3): Releasing backup interface [ 614.279057][T23313] bond5 (unregistering): Released all slaves [ 614.365977][T23325] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 614.401465][T23325] gretap1: entered promiscuous mode [ 614.414498][T23325] gretap1: entered allmulticast mode [ 614.668318][T23342] team1: entered promiscuous mode [ 614.685749][T23342] team1: entered allmulticast mode [ 614.706014][T23342] 8021q: adding VLAN 0 to HW filter on device team1 [ 614.761488][T23349] netlink: 'syz.5.4214': attribute type 1 has an invalid length. [ 614.785897][T23349] netlink: 'syz.5.4214': attribute type 1 has an invalid length. [ 614.794767][T23350] team2: entered promiscuous mode [ 614.807456][T23350] team2: entered allmulticast mode [ 614.826293][T23350] 8021q: adding VLAN 0 to HW filter on device team2 [ 614.904605][T23356] lo speed is unknown, defaulting to 1000 [ 615.195222][T23364] bond1: entered promiscuous mode [ 615.280859][T23364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.336780][T23374] bond1: (slave vti0): refused to change device type [ 615.977365][T23415] macsec1: entered promiscuous mode [ 615.995189][T23415] batadv0: entered promiscuous mode [ 616.010133][T23415] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 616.027952][T23415] batadv0: left promiscuous mode [ 616.060762][T23356] lo speed is unknown, defaulting to 1000 [ 616.060780][T23360] lo speed is unknown, defaulting to 1000 [ 616.771262][T23360] lo speed is unknown, defaulting to 1000 [ 617.504737][T23453] rdma_op ffff8880465071f0 conn xmit_rdma 0000000000000000 [ 618.173757][T23475] __nla_validate_parse: 13 callbacks suppressed [ 618.173777][T23475] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4241'. [ 618.561560][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4246'. [ 618.941331][ T29] audit: type=1800 audit(1778069197.805:12): pid=23504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4250" name="memory.events" dev="tmpfs" ino=1600 res=0 errno=0 [ 619.105520][T23512] xt_policy: output policy not valid in PREROUTING and INPUT [ 619.483327][T23519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.513648][T23519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.557493][T23523] netlink: 'syz.2.4256': attribute type 1 has an invalid length. [ 619.673479][T23528] netlink: 'syz.7.4254': attribute type 9 has an invalid length. [ 619.692174][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4257'. [ 619.807334][T23537] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 619.867986][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4258'. [ 619.973575][T23519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.999272][T23519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.010442][T23542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4259'. [ 620.020119][T23519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.035258][T23519] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 620.054280][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4259'. [ 620.285983][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'. [ 620.438908][T23557] netlink: 'syz.7.4262': attribute type 1 has an invalid length. [ 620.523410][T23565] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4264'. [ 620.898376][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4269'. [ 620.995581][T23573] lo speed is unknown, defaulting to 1000 [ 621.101914][T23590] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 621.816068][T23618] syzkaller0: entered promiscuous mode [ 621.819309][T23623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4282'. [ 621.830117][T23618] syzkaller0: entered allmulticast mode [ 621.844097][T23573] lo speed is unknown, defaulting to 1000 [ 621.914289][T23618] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.983679][T23627] netlink: 'syz.5.4283': attribute type 8 has an invalid length. [ 623.221324][T23674] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 623.263137][T23674] bond4 (unregistering): Released all slaves [ 623.435131][T23691] __nla_validate_parse: 2 callbacks suppressed [ 623.435149][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4300'. [ 623.486591][T23699] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4302'. [ 623.518206][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4301'. [ 623.553083][T23699] xt_cgroup: xt_cgroup: no path or classid specified [ 623.586126][T23695] openvswitch: netlink: Flow key attr not present in new flow. [ 623.646135][T23693] syzkaller0: entered promiscuous mode [ 623.654905][T23693] syzkaller0: entered allmulticast mode [ 623.705059][T23706] tipc: Started in network mode [ 623.713635][T23706] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 623.728419][T23706] tipc: Enabling of bearer rejected, failed to enable media [ 624.113194][T23718] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4306'. [ 624.273650][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.574332][T23725] bond5: option lacp_active: invalid value (8) [ 626.630676][T23725] bond5 (unregistering): Released all slaves [ 626.923121][T23746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4313'. [ 626.958310][T23753] netlink: 'syz.2.4315': attribute type 7 has an invalid length. [ 627.005826][ T5986] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.014878][T23753] netlink: 'syz.2.4315': attribute type 7 has an invalid length. [ 627.034683][ T5986] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.048446][ T5986] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.071890][ T5986] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.174720][T23759] netlink: 'syz.2.4317': attribute type 8 has an invalid length. [ 627.192030][T23760] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4316'. [ 627.204465][T23760] netlink: 'syz.5.4316': attribute type 1 has an invalid length. [ 627.215169][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4317'. [ 627.220562][T23760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4316'. [ 627.269835][T23759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4317'. [ 627.328796][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4318'. [ 627.916564][T23785] netlink: 'syz.7.4325': attribute type 1 has an invalid length. [ 627.952784][T23785] netlink: 'syz.7.4325': attribute type 1 has an invalid length. [ 627.974009][T23792] netlink: 'syz.8.4327': attribute type 1 has an invalid length. [ 628.011137][T23792] bond5: entered promiscuous mode [ 628.016913][T23792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.343621][T23808] xt_hashlimit: size too large, truncated to 1048576 [ 628.411653][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.419134][ T29] audit: type=1107 audit(1778069207.275:13): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 628.534207][T23820] netlink: 'syz.8.4331': attribute type 1 has an invalid length. [ 628.589081][T23825] __nla_validate_parse: 4 callbacks suppressed [ 628.589099][T23825] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4331'. [ 628.600838][T23820] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4331'. [ 628.619807][T23812] vlan2 (unregistering): left allmulticast mode [ 628.636830][T23812] bridge_slave_0 (unregistering): left allmulticast mode [ 628.654270][T23812] vlan2 (unregistering): left promiscuous mode [ 628.668581][T23812] bridge0: port 3(vlan2) entered disabled state [ 628.717461][T23814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4333'. [ 628.727336][T23814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4333'. [ 629.687446][T23878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4341'. [ 629.851210][T23883] netlink: 'syz.8.4343': attribute type 1 has an invalid length. [ 630.100836][T23893] lo speed is unknown, defaulting to 1000 [ 630.146760][T23895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4345'. [ 630.193873][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4345'. [ 630.256552][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 630.394219][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 630.687023][T23902] lo speed is unknown, defaulting to 1000 [ 630.705837][T23893] lo speed is unknown, defaulting to 1000 [ 630.904009][T23924] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4352'. [ 631.163773][T23902] lo speed is unknown, defaulting to 1000 [ 632.185882][T23945] lo speed is unknown, defaulting to 1000 [ 632.308117][T23975] netlink: 'syz.6.4363': attribute type 1 has an invalid length. [ 632.736252][T23991] netlink: 'syz.8.4367': attribute type 13 has an invalid length. [ 632.778643][T23991] netlink: 'syz.8.4367': attribute type 12 has an invalid length. [ 632.931020][T24001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.580255][T23945] lo speed is unknown, defaulting to 1000 [ 633.878772][T24034] __nla_validate_parse: 10 callbacks suppressed [ 633.878790][T24034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4377'. [ 633.899840][T24034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4377'. [ 633.921226][T24034] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4377'. [ 634.561546][T24051] lo speed is unknown, defaulting to 1000 [ 634.778319][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4384'. [ 635.233873][T24078] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 635.251444][T24078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.465979][T24051] lo speed is unknown, defaulting to 1000 [ 635.467732][T24075] lo speed is unknown, defaulting to 1000 [ 635.552327][T24102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4393'. [ 635.569865][T24100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4393'. [ 635.831793][T24111] veth1_vlan: entered allmulticast mode [ 636.026762][T24075] lo speed is unknown, defaulting to 1000 [ 636.223541][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4396'. [ 636.876967][T24154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4405'. [ 636.891341][T24154] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4405'. [ 637.168366][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4406'. [ 637.315413][T24168] netlink: 'syz.5.4407': attribute type 3 has an invalid length. [ 637.856419][T24190] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 638.228113][T24210] bridge_slave_0: default FDB implementation only supports local addresses [ 638.612216][T24232] hsr_slave_1 (unregistering): left promiscuous mode [ 638.891729][T24250] netlink: 'syz.6.4433': attribute type 1 has an invalid length. [ 638.926348][T24250] __nla_validate_parse: 7 callbacks suppressed [ 638.926466][T24250] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4433'. [ 638.958578][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4433'. [ 639.004790][T24255] veth1_vlan: left promiscuous mode [ 639.011732][T24255] veth0_vlan: left promiscuous mode [ 639.017887][T24255] veth0_vlan: entered promiscuous mode [ 639.036416][T24255] veth1_vlan: entered promiscuous mode [ 639.048032][T24255] veth1_macvtap: left promiscuous mode [ 639.056144][T24255] veth0_macvtap: left promiscuous mode [ 639.063911][T24255] veth0_macvtap: entered promiscuous mode [ 639.071727][T24255] veth1_macvtap: entered promiscuous mode [ 639.086512][T24255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 639.102500][T24255] bond2: left promiscuous mode [ 639.107305][T24255] vcan1: left promiscuous mode [ 639.115624][T24255] 8021q: adding VLAN 0 to HW filter on device eth0 [ 639.123341][T24255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 639.131736][T24255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 639.142858][T24255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 639.151423][T24255] ip6erspan0: left allmulticast mode [ 639.160599][T24255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.169966][T24255] bridge2: left promiscuous mode [ 639.176590][T24255] gretap1: left promiscuous mode [ 639.181595][T24255] gretap1: left allmulticast mode [ 639.190069][T24256] tipc: Started in network mode [ 639.195098][T24256] tipc: Node identity ac14140f, cluster identity 4711 [ 639.202649][T24256] tipc: New replicast peer: 172.20.20.170 [ 639.208821][T24256] tipc: Enabled bearer , priority 10 [ 639.249580][ T5998] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.261423][ T5998] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.333071][ T5998] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.335030][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4437'. [ 639.352833][ T5998] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.483144][T24279] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4440'. [ 639.494931][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4440'. [ 639.519931][T24279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input8 [ 639.533780][T24275] netlink: 'syz.2.4439': attribute type 1 has an invalid length. [ 639.563670][T24275] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4439'. [ 639.822618][T24287] bridge0: entered allmulticast mode [ 639.920323][T24298] netlink: 'syz.2.4445': attribute type 1 has an invalid length. [ 639.995580][T24298] bond0: entered promiscuous mode [ 640.003616][T24298] bond0: entered allmulticast mode [ 640.009135][T24298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.053833][T24299] erspan2: entered allmulticast mode [ 640.086919][T24299] bond0: (slave erspan2): making interface the new active one [ 640.112742][T24299] erspan2: entered promiscuous mode [ 640.153483][T24299] bond0: (slave erspan2): Enslaving as an active interface with an up link [ 640.165199][T24311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4449'. [ 640.385459][T15800] tipc: Node number set to 2886997007 [ 640.422578][T24318] netlink: 'syz.5.4451': attribute type 30 has an invalid length. [ 640.450755][T24318] tipc: Enabling of bearer rejected, failed to enable media [ 640.603718][T24327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4453'. [ 640.768625][T24329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 641.151781][T24336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4456'. [ 641.434348][T24353] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4461'. [ 641.731924][T24366] bond4: option all_slaves_active: invalid value (5) [ 641.794485][T24366] bond4 (unregistering): Released all slaves [ 643.657419][T24423] netlink: 'syz.6.4480': attribute type 13 has an invalid length. [ 644.322201][T24304] Set syz1 is full, maxelem 65536 reached [ 644.341644][T24443] __nla_validate_parse: 5 callbacks suppressed [ 644.341664][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4487'. [ 644.528159][T24445] vlan3: entered promiscuous mode [ 644.536784][T24445] bridge0: entered promiscuous mode [ 644.715216][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4492'. [ 644.879097][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4495'. [ 644.948211][T24472] bond0: entered promiscuous mode [ 644.961298][T24472] bond_slave_0: entered promiscuous mode [ 645.143403][T24475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.147361][T24477] x_tables: ip6_tables: REDIRECT target: only valid in nat table, not syz1 [ 645.763888][T24493] pim6reg1: entered promiscuous mode [ 645.787244][T24493] pim6reg1: entered allmulticast mode [ 645.848403][T24496] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4505'. [ 645.878302][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4505'. [ 646.132894][T24509] xt_hashlimit: overflow, rate too high: 0 [ 646.139155][T24506] IPv6: sit1: Disabled Multicast RS [ 646.163674][T24510] netlink: 'syz.7.4510': attribute type 3 has an invalid length. [ 646.187591][T24510] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4510'. [ 646.554200][ T50] Bluetooth: hci8: link tx timeout [ 646.562493][ T50] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 646.913070][T24541] No such timeout policy "syz1" [ 647.216468][T24553] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4520'. [ 647.407469][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4522'. [ 647.421111][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4522'. [ 647.576854][T24568] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4523'. [ 648.088118][T24581] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 648.208538][T24589] openvswitch: netlink: Invalid VLAN frame [ 648.320121][T24593] macvlan2: entered allmulticast mode [ 648.328570][T24593] hsr0: entered allmulticast mode [ 648.334679][T24593] hsr_slave_0: entered allmulticast mode [ 648.368873][T24593] hsr_slave_1: entered allmulticast mode [ 648.393098][T24593] hsr0: entered promiscuous mode [ 648.413186][T24599] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 648.442715][T24599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.602970][T20052] Bluetooth: hci8: command 0x0405 tx timeout [ 648.656222][T24608] syzkaller0: entered promiscuous mode [ 648.680252][T24608] syzkaller0: entered allmulticast mode [ 649.171629][T24635] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 649.177399][T24635] dvmrp1: linktype set to 804 [ 649.345578][T24644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.730632][ T7124] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.744782][ T7124] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.768668][ T7124] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.802310][ T7124] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.923497][T24663] netlink: 'syz.2.4550': attribute type 11 has an invalid length. [ 650.221959][T24672] team0: entered promiscuous mode [ 650.243071][T24672] team_slave_0: entered promiscuous mode [ 650.254261][T24672] team_slave_1: entered promiscuous mode [ 650.262423][T24672] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.273901][T24672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 650.307213][T24667] lo speed is unknown, defaulting to 1000 [ 650.700679][T24691] __nla_validate_parse: 7 callbacks suppressed [ 650.700696][T24691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4559'. [ 650.848940][T24694] tipc: Enabled bearer , priority 0 [ 650.953865][T24694] syzkaller0: entered promiscuous mode [ 650.970932][T24694] syzkaller0: entered allmulticast mode [ 650.982292][T24694] tipc: Resetting bearer [ 651.032129][T24693] tipc: Resetting bearer [ 651.186622][T24708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 651.512593][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4563'. [ 653.538132][T24693] tipc: Disabling bearer [ 653.546774][T24667] lo speed is unknown, defaulting to 1000 [ 653.898285][T24720] netlink: 'syz.6.4566': attribute type 3 has an invalid length. [ 654.005018][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4567'. [ 654.046185][T24724] Cannot find add_set index 4 as target [ 654.250535][T24735] lo speed is unknown, defaulting to 1000 [ 654.364497][T24743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4571'. [ 654.392278][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 654.410468][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 654.644117][T24753] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4573'. [ 654.674618][T24753] FAULT_INJECTION: forcing a failure. [ 654.674618][T24753] name failslab, interval 1, probability 0, space 0, times 0 [ 654.716360][T24753] CPU: 1 UID: 0 PID: 24753 Comm: syz.2.4573 Not tainted syzkaller #0 PREEMPT(full) [ 654.716386][T24753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.716397][T24753] Call Trace: [ 654.716404][T24753] [ 654.716412][T24753] dump_stack_lvl+0xe8/0x150 [ 654.716439][T24753] should_fail_ex+0x412/0x560 [ 654.716468][T24753] should_failslab+0xa8/0x100 [ 654.716496][T24753] __kmalloc_noprof+0xe8/0x760 [ 654.716521][T24753] ? fib_nl2rule+0x2e9/0x1a00 [ 654.716549][T24753] fib_nl2rule+0x2e9/0x1a00 [ 654.716578][T24753] ? __pfx_fib_nl2rule+0x10/0x10 [ 654.716603][T24753] ? __nla_parse+0x40/0x60 [ 654.716630][T24753] fib_delrule+0x328/0x1d70 [ 654.716652][T24753] ? kasan_quarantine_put+0xbb/0x1f0 [ 654.716675][T24753] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.716699][T24753] ? nlmon_xmit+0xb0/0x100 [ 654.716719][T24753] ? kmem_cache_free+0x182/0x650 [ 654.716755][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 654.716778][T24753] ? __pfx_fib_delrule+0x10/0x10 [ 654.716799][T24753] ? __dev_queue_xmit+0x2b6/0x3950 [ 654.716860][T24753] ? __pfx_fib_nl_delrule+0x10/0x10 [ 654.716889][T24753] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 654.716914][T24753] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 654.716934][T24753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 654.716953][T24753] ? ref_tracker_free+0x693/0x840 [ 654.716978][T24753] ? __pfx_ref_tracker_free+0x10/0x10 [ 654.717011][T24753] netlink_rcv_skb+0x232/0x4b0 [ 654.717035][T24753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 654.717057][T24753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.717091][T24753] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.717112][T24753] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.717139][T24753] netlink_unicast+0x75c/0x8e0 [ 654.717169][T24753] netlink_sendmsg+0x813/0xb40 [ 654.717201][T24753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.717226][T24753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.717250][T24753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.717277][T24753] ____sys_sendmsg+0x972/0x9f0 [ 654.717300][T24753] ? __might_fault+0xaf/0x130 [ 654.717329][T24753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.717360][T24753] ? import_iovec+0x73/0xa0 [ 654.717388][T24753] ___sys_sendmsg+0x2a5/0x360 [ 654.717409][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 654.717432][T24753] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.717460][T24753] ? kstrtouint+0x6e/0xe0 [ 654.717505][T24753] ? __fget_files+0x2a/0x420 [ 654.717525][T24753] ? __fget_files+0x3a0/0x420 [ 654.717555][T24753] __sys_sendmmsg+0x27c/0x4e0 [ 654.717583][T24753] ? __pfx___sys_sendmmsg+0x10/0x10 [ 654.717604][T24753] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 654.717649][T24753] ? ksys_write+0x242/0x270 [ 654.717675][T24753] ? __pfx_ksys_write+0x10/0x10 [ 654.717706][T24753] __x64_sys_sendmmsg+0xa0/0xc0 [ 654.717729][T24753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.717747][T24753] do_syscall_64+0x15f/0xf80 [ 654.717767][T24753] ? trace_irq_disable+0x3b/0x140 [ 654.717793][T24753] ? clear_bhb_loop+0x40/0x90 [ 654.717814][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.717832][T24753] RIP: 0033:0x7fce7719cdd9 [ 654.717849][T24753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.717869][T24753] RSP: 002b:00007fce780b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 654.717889][T24753] RAX: ffffffffffffffda RBX: 00007fce77415fa0 RCX: 00007fce7719cdd9 [ 654.717901][T24753] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 654.717913][T24753] RBP: 00007fce780b3090 R08: 0000000000000000 R09: 0000000000000000 [ 654.717924][T24753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.717934][T24753] R13: 00007fce77416038 R14: 00007fce77415fa0 R15: 00007ffdae504ce8 [ 654.717964][T24753] [ 655.275504][T24763] netlink: 'syz.7.4577': attribute type 15 has an invalid length. [ 655.502079][T24772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.530162][T24774] netlink: 'syz.5.4580': attribute type 1 has an invalid length. [ 655.677196][T24774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.802222][T24735] lo speed is unknown, defaulting to 1000 [ 656.015717][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4587'. [ 656.334204][T24814] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4592'. [ 656.508480][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4595'. [ 656.699548][T24830] ipvlan0: left allmulticast mode [ 656.721247][T24830] bond2: left allmulticast mode [ 656.735784][T24830] bridge0: left allmulticast mode [ 656.764664][T24830] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 656.801785][T24830] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 657.151828][T24850] netlink: 'syz.7.4604': attribute type 15 has an invalid length. [ 657.216850][T24854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4603'. [ 657.472613][T24855] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4604'. [ 657.524958][T24855] netlink: 236 bytes leftover after parsing attributes in process `syz.7.4604'. [ 657.597704][T24866] lo speed is unknown, defaulting to 1000 [ 657.611999][T24870] netlink: 'syz.2.4610': attribute type 1 has an invalid length. [ 657.620908][T24870] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 657.631287][T24863] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4608'. [ 657.659182][T24863] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4608'. [ 657.669180][T24863] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4608'. [ 657.681102][T24875] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4611'. [ 657.916262][T24866] lo speed is unknown, defaulting to 1000 [ 658.097943][T24890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.237492][T24897] syzkaller0: entered promiscuous mode [ 658.253298][T24897] syzkaller0: entered allmulticast mode [ 658.485213][T24904] FAULT_INJECTION: forcing a failure. [ 658.485213][T24904] name failslab, interval 1, probability 0, space 0, times 0 [ 658.509397][T24904] CPU: 0 UID: 0 PID: 24904 Comm: syz.7.4618 Not tainted syzkaller #0 PREEMPT(full) [ 658.509422][T24904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.509432][T24904] Call Trace: [ 658.509439][T24904] [ 658.509447][T24904] dump_stack_lvl+0xe8/0x150 [ 658.509473][T24904] should_fail_ex+0x412/0x560 [ 658.509509][T24904] should_failslab+0xa8/0x100 [ 658.509537][T24904] __kmalloc_noprof+0xe8/0x760 [ 658.509561][T24904] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 658.509595][T24904] tomoyo_realpath_from_path+0xe3/0x5d0 [ 658.509620][T24904] ? tomoyo_domain+0xd7/0x130 [ 658.509648][T24904] ? tomoyo_path_number_perm+0x219/0x630 [ 658.509669][T24904] tomoyo_path_number_perm+0x246/0x630 [ 658.509691][T24904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 658.509711][T24904] ? __lock_acquire+0x6b5/0x2cf0 [ 658.509746][T24904] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 658.509787][T24904] ? __fget_files+0x2a/0x420 [ 658.509811][T24904] ? __fget_files+0x2a/0x420 [ 658.509830][T24904] ? __fget_files+0x3a0/0x420 [ 658.509847][T24904] ? __fget_files+0x2a/0x420 [ 658.509872][T24904] security_file_ioctl+0xc3/0x2a0 [ 658.509892][T24904] __se_sys_ioctl+0x47/0x170 [ 658.509916][T24904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.509935][T24904] do_syscall_64+0x15f/0xf80 [ 658.509955][T24904] ? trace_irq_disable+0x3b/0x140 [ 658.509979][T24904] ? clear_bhb_loop+0x40/0x90 [ 658.510002][T24904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.510019][T24904] RIP: 0033:0x7fa8de99cdd9 [ 658.510036][T24904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.510050][T24904] RSP: 002b:00007fa8df87a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.510068][T24904] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99cdd9 [ 658.510080][T24904] RDX: 0000200000000500 RSI: 00000000000089f0 RDI: 0000000000000003 [ 658.510089][T24904] RBP: 00007fa8df87a090 R08: 0000000000000000 R09: 0000000000000000 [ 658.510098][T24904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.510108][T24904] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff00480358 [ 658.510135][T24904] [ 658.510153][T24904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 658.528822][T24907] netlink: 'syz.8.4621': attribute type 83 has an invalid length. [ 659.004615][T24924] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 659.608435][ T29] audit: type=1804 audit(1778069238.465:14): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4630" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1760 res=1 errno=0 [ 659.712975][ T29] audit: type=1800 audit(1778069238.465:15): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4630" name="cgroup.controllers" dev="tmpfs" ino=1760 res=0 errno=0 [ 660.381645][T24975] lo speed is unknown, defaulting to 1000 [ 660.464014][ T29] audit: type=1800 audit(1778069239.325:16): pid=24993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4641" name="memory.events" dev="tmpfs" ino=1766 res=0 errno=0 [ 660.596577][T25001] netlink: 'syz.2.4643': attribute type 4 has an invalid length. [ 660.963996][T24975] lo speed is unknown, defaulting to 1000 [ 661.096020][T25015] netlink: 'syz.2.4648': attribute type 2 has an invalid length. [ 661.348946][T25032] __nla_validate_parse: 8 callbacks suppressed [ 661.348962][T25032] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4652'. [ 661.425333][T25039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4653'. [ 661.567759][T25046] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4655'. [ 661.581060][T25046] FAULT_INJECTION: forcing a failure. [ 661.581060][T25046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.596195][T25046] CPU: 0 UID: 0 PID: 25046 Comm: syz.6.4655 Not tainted syzkaller #0 PREEMPT(full) [ 661.596218][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.596229][T25046] Call Trace: [ 661.596236][T25046] [ 661.596243][T25046] dump_stack_lvl+0xe8/0x150 [ 661.596270][T25046] should_fail_ex+0x412/0x560 [ 661.596298][T25046] _copy_to_user+0x31/0xb0 [ 661.596326][T25046] simple_read_from_buffer+0xe1/0x170 [ 661.596353][T25046] proc_fail_nth_read+0x1bb/0x230 [ 661.596378][T25046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.596402][T25046] ? rw_verify_area+0x2a6/0x4d0 [ 661.596424][T25046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.596448][T25046] vfs_read+0x20c/0xa70 [ 661.596477][T25046] ? __pfx___mutex_lock+0x10/0x10 [ 661.596499][T25046] ? __pfx_vfs_read+0x10/0x10 [ 661.596524][T25046] ? __fget_files+0x2a/0x420 [ 661.596549][T25046] ? __fget_files+0x3a0/0x420 [ 661.596568][T25046] ? __fget_files+0x2a/0x420 [ 661.596597][T25046] ksys_read+0x150/0x270 [ 661.596621][T25046] ? __pfx_ksys_read+0x10/0x10 [ 661.596652][T25046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.596671][T25046] do_syscall_64+0x15f/0xf80 [ 661.596691][T25046] ? trace_irq_disable+0x3b/0x140 [ 661.596716][T25046] ? clear_bhb_loop+0x40/0x90 [ 661.596738][T25046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.596755][T25046] RIP: 0033:0x7f565d75d60e [ 661.596772][T25046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.596787][T25046] RSP: 002b:00007f565e63bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.596808][T25046] RAX: ffffffffffffffda RBX: 00007f565e63c6c0 RCX: 00007f565d75d60e [ 661.596821][T25046] RDX: 000000000000000f RSI: 00007f565e63c0a0 RDI: 0000000000000004 [ 661.596832][T25046] RBP: 00007f565e63c090 R08: 0000000000000000 R09: 0000000000000000 [ 661.596843][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.596853][T25046] R13: 00007f565da16038 R14: 00007f565da15fa0 R15: 00007ffde1cd9668 [ 661.596884][T25046] [ 661.998589][T25058] netlink: 424 bytes leftover after parsing attributes in process `syz.8.4659'. [ 662.009844][T25058] netlink: 'syz.8.4659': attribute type 1 has an invalid length. [ 662.120613][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4662'. [ 662.167517][T25063] netlink: 'syz.5.4663': attribute type 1 has an invalid length. [ 662.205591][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 662.232545][T25069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4663'. [ 662.255143][T25068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4662'. [ 662.278808][T25068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4662'. [ 662.285254][T25072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4663'. [ 662.361109][T25063] bond6: entered promiscuous mode [ 662.366643][T25063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 662.465705][T25077] bond6: (slave bridge4): making interface the new active one [ 662.488764][T25077] bridge4: entered promiscuous mode [ 662.514295][T25077] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 663.570701][T25115] block nbd0: server does not support multiple connections per device. [ 663.623454][T25115] block nbd0: shutting down sockets [ 664.272542][T25152] netlink: 'syz.8.4685': attribute type 8 has an invalid length. [ 666.061017][T25183] netlink: 'syz.2.4692': attribute type 1 has an invalid length. [ 666.072405][T25183] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 666.716851][T25210] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 666.898418][T25219] __nla_validate_parse: 3 callbacks suppressed [ 666.898436][T25219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4702'. [ 666.967013][T25219] bridge4: port 1(veth11) entered blocking state [ 666.974748][T25219] bridge4: port 1(veth11) entered disabled state [ 666.981446][T25219] veth11: entered allmulticast mode [ 666.987716][T25219] veth11: entered promiscuous mode [ 666.994124][T25219] bridge4: port 1(veth11) entered blocking state [ 667.000588][T25219] bridge4: port 1(veth11) entered forwarding state [ 667.022350][T25227] bridge4: port 2(veth13) entered blocking state [ 667.039380][T25227] bridge4: port 2(veth13) entered disabled state [ 667.047828][T25227] veth13: entered allmulticast mode [ 667.059915][T25227] veth13: entered promiscuous mode [ 667.090438][T25227] bridge4: port 2(veth13) entered blocking state [ 667.096855][T25227] bridge4: port 2(veth13) entered forwarding state [ 667.184179][T25236] batadv_slave_0: entered promiscuous mode [ 667.191809][T25236] debugfs: 'hsr1' already exists in 'hsr' [ 667.197584][T25236] Cannot create hsr debugfs directory [ 667.252542][T25239] x_tables: duplicate underflow at hook 1 [ 667.265568][T25239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4707'. [ 667.546776][T25255] FAULT_INJECTION: forcing a failure. [ 667.546776][T25255] name failslab, interval 1, probability 0, space 0, times 0 [ 667.584970][T25255] CPU: 0 UID: 0 PID: 25255 Comm: syz.2.4712 Not tainted syzkaller #0 PREEMPT(full) [ 667.584996][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 667.585007][T25255] Call Trace: [ 667.585015][T25255] [ 667.585022][T25255] dump_stack_lvl+0xe8/0x150 [ 667.585048][T25255] should_fail_ex+0x412/0x560 [ 667.585075][T25255] should_failslab+0xa8/0x100 [ 667.585102][T25255] __kmalloc_noprof+0xe8/0x760 [ 667.585126][T25255] ? tomoyo_encode+0x28b/0x550 [ 667.585155][T25255] tomoyo_encode+0x28b/0x550 [ 667.585179][T25255] tomoyo_realpath_from_path+0x58d/0x5d0 [ 667.585202][T25255] ? tomoyo_domain+0xd7/0x130 [ 667.585227][T25255] ? tomoyo_path_number_perm+0x219/0x630 [ 667.585245][T25255] tomoyo_path_number_perm+0x246/0x630 [ 667.585271][T25255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 667.585290][T25255] ? __lock_acquire+0x6b5/0x2cf0 [ 667.585323][T25255] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 667.585364][T25255] ? __fget_files+0x2a/0x420 [ 667.585387][T25255] ? __fget_files+0x2a/0x420 [ 667.585406][T25255] ? __fget_files+0x3a0/0x420 [ 667.585423][T25255] ? __fget_files+0x2a/0x420 [ 667.585447][T25255] security_file_ioctl+0xc3/0x2a0 [ 667.585468][T25255] __se_sys_ioctl+0x47/0x170 [ 667.585492][T25255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.585510][T25255] do_syscall_64+0x15f/0xf80 [ 667.585529][T25255] ? trace_irq_disable+0x3b/0x140 [ 667.585560][T25255] ? clear_bhb_loop+0x40/0x90 [ 667.585581][T25255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.585597][T25255] RIP: 0033:0x7fce7719cdd9 [ 667.585614][T25255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.585629][T25255] RSP: 002b:00007fce78092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.585648][T25255] RAX: ffffffffffffffda RBX: 00007fce77416090 RCX: 00007fce7719cdd9 [ 667.585660][T25255] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 667.585670][T25255] RBP: 00007fce78092090 R08: 0000000000000000 R09: 0000000000000000 [ 667.585681][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.585691][T25255] R13: 00007fce77416128 R14: 00007fce77416090 R15: 00007ffdae504ce8 [ 667.585719][T25255] [ 667.585747][T25255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.824556][T23863] bridge4: port 1(veth11) entered disabled state [ 667.884471][T23863] bridge4: port 2(veth13) entered disabled state [ 667.917038][T25268] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4718'. [ 667.968650][T25270] xt_nfacct: accounting object `syz0' does not exist [ 668.128777][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4722'. [ 668.139846][T25284] netlink: 'syz.2.4723': attribute type 27 has an invalid length. [ 668.150782][T25282] syzkaller0: entered promiscuous mode [ 668.158644][T25282] syzkaller0: entered allmulticast mode [ 668.325110][T25296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4725'. [ 668.335276][T25298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 668.591478][T25311] netlink: 'syz.6.4729': attribute type 1 has an invalid length. [ 668.595633][T25312] sctp: [Deprecated]: syz.8.4727 (pid 25312) Use of int in max_burst socket option. [ 668.595633][T25312] Use struct sctp_assoc_value instead [ 668.599551][T25311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4729'. [ 668.793306][T25318] xt_hashlimit: size too large, truncated to 1048576 [ 668.872038][T25321] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.906939][T25321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.914263][T25321] IPv6: NLM_F_CREATE should be set when creating new route [ 668.921573][T25321] IPv6: NLM_F_CREATE should be set when creating new route [ 668.928826][T25321] IPv6: NLM_F_CREATE should be set when creating new route [ 668.961981][T25327] netlink: 'syz.5.4730': attribute type 1 has an invalid length. [ 669.043293][T25327] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4730'. [ 669.523970][T25355] x_tables: duplicate underflow at hook 2 [ 669.566141][T25355] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 669.961442][T25371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4740'. [ 670.072933][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4741'. [ 670.258465][T25387] rdma_op ffff888055b141f0 conn xmit_rdma 0000000000000000 [ 670.267381][T25384] FAULT_INJECTION: forcing a failure. [ 670.267381][T25384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.284160][T25384] CPU: 1 UID: 0 PID: 25384 Comm: syz.2.4742 Not tainted syzkaller #0 PREEMPT(full) [ 670.284183][T25384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.284195][T25384] Call Trace: [ 670.284203][T25384] [ 670.284210][T25384] dump_stack_lvl+0xe8/0x150 [ 670.284237][T25384] should_fail_ex+0x412/0x560 [ 670.284265][T25384] _copy_to_user+0x31/0xb0 [ 670.284291][T25384] simple_read_from_buffer+0xe1/0x170 [ 670.284321][T25384] proc_fail_nth_read+0x1bb/0x230 [ 670.284346][T25384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.284372][T25384] ? rw_verify_area+0x2a6/0x4d0 [ 670.284394][T25384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.284417][T25384] vfs_read+0x20c/0xa70 [ 670.284445][T25384] ? __pfx___mutex_lock+0x10/0x10 [ 670.284466][T25384] ? __pfx_vfs_read+0x10/0x10 [ 670.284490][T25384] ? __fget_files+0x2a/0x420 [ 670.284515][T25384] ? __fget_files+0x3a0/0x420 [ 670.284533][T25384] ? __fget_files+0x2a/0x420 [ 670.284561][T25384] ksys_read+0x150/0x270 [ 670.284586][T25384] ? __pfx_ksys_read+0x10/0x10 [ 670.284616][T25384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.284636][T25384] do_syscall_64+0x15f/0xf80 [ 670.284655][T25384] ? trace_irq_disable+0x3b/0x140 [ 670.284679][T25384] ? clear_bhb_loop+0x40/0x90 [ 670.284701][T25384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.284718][T25384] RIP: 0033:0x7fce7715d60e [ 670.284734][T25384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.284748][T25384] RSP: 002b:00007fce780b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.284766][T25384] RAX: ffffffffffffffda RBX: 00007fce780b36c0 RCX: 00007fce7715d60e [ 670.284778][T25384] RDX: 000000000000000f RSI: 00007fce780b30a0 RDI: 0000000000000008 [ 670.284789][T25384] RBP: 00007fce780b3090 R08: 0000000000000000 R09: 0000000000000000 [ 670.284799][T25384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.284808][T25384] R13: 00007fce77416038 R14: 00007fce77415fa0 R15: 00007ffdae504ce8 [ 670.284837][T25384] [ 671.356048][T25418] tipc: Enabling of bearer rejected, failed to enable media [ 671.484308][T25418] bond5: option lacp_active: invalid value (8) [ 671.516160][T25418] bond5 (unregistering): Released all slaves [ 672.205814][T25473] __nla_validate_parse: 4 callbacks suppressed [ 672.205832][T25473] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4762'. [ 672.451132][T25481] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4766'. [ 672.556493][T25483] dvmrp6: entered allmulticast mode [ 672.623566][T25486] syzkaller0: entered promiscuous mode [ 672.652443][T25486] syzkaller0: entered allmulticast mode [ 672.745611][T25490] nbd2: detected capacity change from 0 to 63 [ 672.807750][ T50] block nbd2: Receive control failed (result -32) [ 672.809777][T21036] block nbd2: Send control failed (result -32) [ 672.899963][T21036] block nbd2: Request send failed, requeueing [ 672.907657][T25501] netlink: 'syz.5.4772': attribute type 1 has an invalid length. [ 672.924312][T25499] FAULT_INJECTION: forcing a failure. [ 672.924312][T25499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.949099][ T2284] block nbd2: Dead connection, failed to find a fallback [ 672.962605][ T2284] block nbd2: shutting down sockets [ 672.969083][ T2284] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.982595][ T2284] Buffer I/O error on dev nbd2, logical block 0, async page read [ 672.992739][T25499] CPU: 0 UID: 0 PID: 25499 Comm: syz.6.4771 Not tainted syzkaller #0 PREEMPT(full) [ 672.992761][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 672.992771][T25499] Call Trace: [ 672.992778][T25499] [ 672.992793][T25499] dump_stack_lvl+0xe8/0x150 [ 672.992818][T25499] should_fail_ex+0x412/0x560 [ 672.992844][T25499] _copy_from_user+0x2d/0xb0 [ 672.992868][T25499] ___sys_sendmsg+0x1c6/0x360 [ 672.992891][T25499] ? __lock_acquire+0x6b5/0x2cf0 [ 672.992914][T25499] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.992968][T25499] ? __fget_files+0x2a/0x420 [ 672.992988][T25499] ? __fget_files+0x3a0/0x420 [ 672.993018][T25499] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.993042][T25499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.993075][T25499] ? __pfx_ksys_write+0x10/0x10 [ 672.993106][T25499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.993126][T25499] do_syscall_64+0x15f/0xf80 [ 672.993146][T25499] ? trace_irq_disable+0x3b/0x140 [ 672.993172][T25499] ? clear_bhb_loop+0x40/0x90 [ 672.993194][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.993211][T25499] RIP: 0033:0x7f565d79cdd9 [ 672.993227][T25499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.993242][T25499] RSP: 002b:00007f565e63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.993261][T25499] RAX: ffffffffffffffda RBX: 00007f565da15fa0 RCX: 00007f565d79cdd9 [ 672.993274][T25499] RDX: 0000000004002064 RSI: 0000200000000240 RDI: 0000000000000007 [ 672.993285][T25499] RBP: 00007f565e63c090 R08: 0000000000000000 R09: 0000000000000000 [ 672.993296][T25499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.993307][T25499] R13: 00007f565da16038 R14: 00007f565da15fa0 R15: 00007ffde1cd9668 [ 672.993335][T25499] [ 673.175398][T21036] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.192255][T21036] Buffer I/O error on dev nbd2, logical block 1, async page read [ 673.222796][T21036] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.248981][T21036] Buffer I/O error on dev nbd2, logical block 2, async page read [ 673.296984][T21036] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.381297][T21036] Buffer I/O error on dev nbd2, logical block 3, async page read [ 673.428821][T25501] 8021q: adding VLAN 0 to HW filter on device bond7 [ 673.450833][T21036] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.496135][T21036] Buffer I/O error on dev nbd2, logical block 0, async page read [ 673.541980][T21036] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.580999][T21036] Buffer I/O error on dev nbd2, logical block 1, async page read [ 673.591807][T25502] bond7: (slave veth7): Enslaving as an active interface with an up link [ 673.618175][T21036] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.657494][T21036] Buffer I/O error on dev nbd2, logical block 2, async page read [ 673.689183][T21036] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.733813][T21036] Buffer I/O error on dev nbd2, logical block 3, async page read [ 673.768221][T21036] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.814189][T21036] Buffer I/O error on dev nbd2, logical block 0, async page read [ 673.844753][T21036] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.873152][T21036] Buffer I/O error on dev nbd2, logical block 1, async page read [ 673.957460][T21036] ldm_validate_partition_table(): Disk read failed. [ 674.011477][T21036] Dev nbd2: unable to read RDB block 0 [ 674.040794][T21036] nbd2: unable to read partition table [ 674.106306][T21036] ldm_validate_partition_table(): Disk read failed. [ 674.136146][T21036] Dev nbd2: unable to read RDB block 0 [ 674.144420][T21036] nbd2: unable to read partition table [ 674.146440][T25528] bond5 (unregistering): Released all slaves [ 674.533016][T25552] FAULT_INJECTION: forcing a failure. [ 674.533016][T25552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.597461][T25552] CPU: 1 UID: 0 PID: 25552 Comm: syz.8.4786 Not tainted syzkaller #0 PREEMPT(full) [ 674.597487][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.597496][T25552] Call Trace: [ 674.597503][T25552] [ 674.597510][T25552] dump_stack_lvl+0xe8/0x150 [ 674.597536][T25552] should_fail_ex+0x412/0x560 [ 674.597563][T25552] _copy_from_user+0x2d/0xb0 [ 674.597589][T25552] __copy_msghdr+0x3c5/0x5b0 [ 674.597625][T25552] ___sys_sendmsg+0x213/0x360 [ 674.597647][T25552] ? __lock_acquire+0x6b5/0x2cf0 [ 674.597670][T25552] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.597726][T25552] ? __fget_files+0x2a/0x420 [ 674.597746][T25552] ? __fget_files+0x3a0/0x420 [ 674.597775][T25552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.597800][T25552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.597828][T25552] ? __pfx_ksys_write+0x10/0x10 [ 674.597857][T25552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.597874][T25552] do_syscall_64+0x15f/0xf80 [ 674.597895][T25552] ? trace_irq_disable+0x3b/0x140 [ 674.597918][T25552] ? clear_bhb_loop+0x40/0x90 [ 674.597937][T25552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.597953][T25552] RIP: 0033:0x7f982cb9cdd9 [ 674.597969][T25552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.597984][T25552] RSP: 002b:00007f982d975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.598003][T25552] RAX: ffffffffffffffda RBX: 00007f982ce15fa0 RCX: 00007f982cb9cdd9 [ 674.598016][T25552] RDX: 0000000004002064 RSI: 0000200000000240 RDI: 0000000000000007 [ 674.598027][T25552] RBP: 00007f982d975090 R08: 0000000000000000 R09: 0000000000000000 [ 674.598037][T25552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.598047][T25552] R13: 00007f982ce16038 R14: 00007f982ce15fa0 R15: 00007fff568f1e48 [ 674.598074][T25552] [ 675.474294][T25581] netlink: 'syz.5.4792': attribute type 16 has an invalid length. [ 676.188527][T25598] FAULT_INJECTION: forcing a failure. [ 676.188527][T25598] name failslab, interval 1, probability 0, space 0, times 0 [ 676.236800][T25598] CPU: 0 UID: 0 PID: 25598 Comm: syz.6.4798 Not tainted syzkaller #0 PREEMPT(full) [ 676.236825][T25598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.236836][T25598] Call Trace: [ 676.236842][T25598] [ 676.236849][T25598] dump_stack_lvl+0xe8/0x150 [ 676.236875][T25598] should_fail_ex+0x412/0x560 [ 676.236902][T25598] should_failslab+0xa8/0x100 [ 676.236930][T25598] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 676.236955][T25598] ? __alloc_skb+0x186/0x7d0 [ 676.236974][T25598] ? __alloc_skb+0x1d0/0x7d0 [ 676.236991][T25598] ? __local_bh_enable_ip+0xd0/0x130 [ 676.237015][T25598] __alloc_skb+0x1d0/0x7d0 [ 676.237040][T25598] netlink_sendmsg+0x5d4/0xb40 [ 676.237072][T25598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.237097][T25598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.237125][T25598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.237152][T25598] ____sys_sendmsg+0x972/0x9f0 [ 676.237184][T25598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.237215][T25598] ? import_iovec+0x73/0xa0 [ 676.237243][T25598] ___sys_sendmsg+0x2a5/0x360 [ 676.237264][T25598] ? __lock_acquire+0x6b5/0x2cf0 [ 676.237288][T25598] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.237345][T25598] ? __fget_files+0x2a/0x420 [ 676.237364][T25598] ? __fget_files+0x3a0/0x420 [ 676.237394][T25598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.237421][T25598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.237451][T25598] ? __pfx_ksys_write+0x10/0x10 [ 676.237484][T25598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.237503][T25598] do_syscall_64+0x15f/0xf80 [ 676.237524][T25598] ? trace_irq_disable+0x3b/0x140 [ 676.237548][T25598] ? clear_bhb_loop+0x40/0x90 [ 676.237571][T25598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.237588][T25598] RIP: 0033:0x7f565d79cdd9 [ 676.237605][T25598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.237619][T25598] RSP: 002b:00007f565e63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.237637][T25598] RAX: ffffffffffffffda RBX: 00007f565da15fa0 RCX: 00007f565d79cdd9 [ 676.237649][T25598] RDX: 0000000004002064 RSI: 0000200000000240 RDI: 0000000000000007 [ 676.237660][T25598] RBP: 00007f565e63c090 R08: 0000000000000000 R09: 0000000000000000 [ 676.237671][T25598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.237681][T25598] R13: 00007f565da16038 R14: 00007f565da15fa0 R15: 00007ffde1cd9668 [ 676.237717][T25598] [ 676.512036][T25602] tipc: New replicast peer: 255.255.255.255 [ 676.540048][T25602] tipc: Enabled bearer , priority 10 [ 676.701596][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4801'. [ 676.741116][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.781391][T25610] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4801'. [ 676.854603][T23857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.385754][T25633] tipc: Enabled bearer , priority 0 [ 677.415825][T25633] syzkaller0: entered promiscuous mode [ 677.438385][T25633] syzkaller0: entered allmulticast mode [ 677.548264][T25639] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4809'. [ 677.555930][T25633] tipc: Resetting bearer [ 677.649160][T25631] tipc: Resetting bearer [ 677.790624][T12405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.815891][T25631] tipc: Disabling bearer [ 677.824631][T25652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4811'. [ 677.853932][ T24] tipc: Node number set to 1073741825 [ 677.859954][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4813'. [ 677.869642][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4813'. [ 677.870441][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4811'. [ 677.893049][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.904497][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.929332][T25652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4811'. [ 678.019100][T23863] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.048903][T23863] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.084585][T23863] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.102041][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 678.137223][T23863] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.568791][T25678] openvswitch: netlink: Actions may not be safe on all matching packets [ 678.618925][T25684] xt_hashlimit: size too large, truncated to 1048576 [ 678.652957][T25684] xt_hashlimit: max too large, truncated to 1048576 [ 678.780729][T25684] ipt_REJECT: TCP_RESET invalid for non-tcp [ 678.810998][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4825'. [ 679.167973][T25705] bond0: (slave ipvlan0): Device is not bonding slave [ 679.186459][T25705] bond0: option active_slave: invalid value (ipvlan0) [ 679.386312][T25717] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4828'. [ 679.475669][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.488371][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.505047][T25724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.594185][T25728] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4835'. [ 679.664322][T25735] FAULT_INJECTION: forcing a failure. [ 679.664322][T25735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.685252][T25735] CPU: 1 UID: 0 PID: 25735 Comm: syz.8.4837 Not tainted syzkaller #0 PREEMPT(full) [ 679.685279][T25735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.685289][T25735] Call Trace: [ 679.685296][T25735] [ 679.685304][T25735] dump_stack_lvl+0xe8/0x150 [ 679.685330][T25735] should_fail_ex+0x412/0x560 [ 679.685365][T25735] _copy_from_iter+0x1d3/0x1670 [ 679.685392][T25735] ? rcu_is_watching+0x15/0xb0 [ 679.685420][T25735] ? __pfx__copy_from_iter+0x10/0x10 [ 679.685450][T25735] ? netlink_sendmsg+0x650/0xb40 [ 679.685471][T25735] ? skb_put+0x11b/0x210 [ 679.685495][T25735] netlink_sendmsg+0x6c0/0xb40 [ 679.685525][T25735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.685551][T25735] ? aa_sock_msg_perm+0xf1/0x1b0 [ 679.685576][T25735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.685602][T25735] ____sys_sendmsg+0x972/0x9f0 [ 679.685632][T25735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.685664][T25735] ? import_iovec+0x73/0xa0 [ 679.685691][T25735] ___sys_sendmsg+0x2a5/0x360 [ 679.685711][T25735] ? __lock_acquire+0x6b5/0x2cf0 [ 679.685732][T25735] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.685787][T25735] ? __fget_files+0x2a/0x420 [ 679.685808][T25735] ? __fget_files+0x3a0/0x420 [ 679.685839][T25735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 679.685865][T25735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.685897][T25735] ? __pfx_ksys_write+0x10/0x10 [ 679.685931][T25735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.685951][T25735] do_syscall_64+0x15f/0xf80 [ 679.685971][T25735] ? trace_irq_disable+0x3b/0x140 [ 679.685995][T25735] ? clear_bhb_loop+0x40/0x90 [ 679.686017][T25735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.686034][T25735] RIP: 0033:0x7f982cb9cdd9 [ 679.686049][T25735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.686064][T25735] RSP: 002b:00007f982d975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.686082][T25735] RAX: ffffffffffffffda RBX: 00007f982ce15fa0 RCX: 00007f982cb9cdd9 [ 679.686095][T25735] RDX: 0000000004002064 RSI: 0000200000000240 RDI: 0000000000000007 [ 679.686105][T25735] RBP: 00007f982d975090 R08: 0000000000000000 R09: 0000000000000000 [ 679.686115][T25735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.686126][T25735] R13: 00007f982ce16038 R14: 00007f982ce15fa0 R15: 00007fff568f1e48 [ 679.686154][T25735] [ 679.998589][T25744] netlink: 300 bytes leftover after parsing attributes in process `syz.7.4840'. [ 680.265970][T25762] netlink: 'syz.5.4842': attribute type 3 has an invalid length. [ 680.391087][T25767] vlan2: entered allmulticast mode [ 680.396348][T25767] team0: entered allmulticast mode [ 680.402411][T25767] team_slave_0: entered allmulticast mode [ 680.408323][T25767] team_slave_1: entered allmulticast mode [ 680.837836][T25787] FAULT_INJECTION: forcing a failure. [ 680.837836][T25787] name failslab, interval 1, probability 0, space 0, times 0 [ 680.867575][T25787] CPU: 1 UID: 0 PID: 25787 Comm: syz.7.4851 Not tainted syzkaller #0 PREEMPT(full) [ 680.867599][T25787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.867610][T25787] Call Trace: [ 680.867616][T25787] [ 680.867624][T25787] dump_stack_lvl+0xe8/0x150 [ 680.867650][T25787] should_fail_ex+0x412/0x560 [ 680.867677][T25787] should_failslab+0xa8/0x100 [ 680.867705][T25787] __kmalloc_noprof+0xe8/0x760 [ 680.867730][T25787] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 680.867765][T25787] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 680.867792][T25787] ? kernel_text_address+0xa5/0xe0 [ 680.867822][T25787] genl_family_rcv_msg_doit+0xd9/0x330 [ 680.867849][T25787] ? __asan_memcpy+0x40/0x70 [ 680.867874][T25787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 680.867908][T25787] ? apparmor_capable+0x126/0x170 [ 680.867937][T25787] ? bpf_lsm_capable+0x9/0x20 [ 680.867953][T25787] ? security_capable+0x7e/0x2c0 [ 680.867981][T25787] genl_rcv_msg+0x61c/0x7a0 [ 680.868014][T25787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.868038][T25787] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 680.868056][T25787] ? __pfx_nl802154_set_max_frame_retries+0x10/0x10 [ 680.868076][T25787] ? __pfx_nl802154_post_doit+0x10/0x10 [ 680.868107][T25787] netlink_rcv_skb+0x232/0x4b0 [ 680.868129][T25787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.868155][T25787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.868201][T25787] ? down_read+0x270/0x2e0 [ 680.868221][T25787] ? genl_rcv+0xd/0x40 [ 680.868246][T25787] genl_rcv+0x28/0x40 [ 680.868269][T25787] netlink_unicast+0x75c/0x8e0 [ 680.868299][T25787] netlink_sendmsg+0x813/0xb40 [ 680.868331][T25787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.868357][T25787] ? aa_sock_msg_perm+0xf1/0x1b0 [ 680.868378][T25787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.868404][T25787] ____sys_sendmsg+0x972/0x9f0 [ 680.868435][T25787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.868464][T25787] ? import_iovec+0x73/0xa0 [ 680.868491][T25787] ___sys_sendmsg+0x2a5/0x360 [ 680.868511][T25787] ? __lock_acquire+0x6b5/0x2cf0 [ 680.868531][T25787] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.868586][T25787] ? __fget_files+0x2a/0x420 [ 680.868610][T25787] ? __fget_files+0x3a0/0x420 [ 680.868640][T25787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 680.868665][T25787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.868698][T25787] ? __pfx_ksys_write+0x10/0x10 [ 680.868728][T25787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.868748][T25787] do_syscall_64+0x15f/0xf80 [ 680.868766][T25787] ? trace_irq_disable+0x3b/0x140 [ 680.868790][T25787] ? clear_bhb_loop+0x40/0x90 [ 680.868811][T25787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.868829][T25787] RIP: 0033:0x7fa8de99cdd9 [ 680.868846][T25787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.868860][T25787] RSP: 002b:00007fa8df87a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.868880][T25787] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99cdd9 [ 680.868892][T25787] RDX: 0000000004002064 RSI: 0000200000000240 RDI: 0000000000000007 [ 680.868902][T25787] RBP: 00007fa8df87a090 R08: 0000000000000000 R09: 0000000000000000 [ 680.868913][T25787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.868923][T25787] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff00480358 [ 680.868953][T25787] [ 680.883930][T25789] syzkaller0: entered promiscuous mode [ 681.249267][T25789] syzkaller0: entered allmulticast mode [ 681.775020][T25828] netlink: 'syz.2.4859': attribute type 4 has an invalid length. [ 681.982910][T25838] FAULT_INJECTION: forcing a failure. [ 681.982910][T25838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.996915][T25838] CPU: 0 UID: 0 PID: 25838 Comm: syz.7.4864 Not tainted syzkaller #0 PREEMPT(full) [ 681.996938][T25838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.996947][T25838] Call Trace: [ 681.996955][T25838] [ 681.996962][T25838] dump_stack_lvl+0xe8/0x150 [ 681.996988][T25838] should_fail_ex+0x412/0x560 [ 681.997016][T25838] _copy_to_user+0x31/0xb0 [ 681.997043][T25838] simple_read_from_buffer+0xe1/0x170 [ 681.997068][T25838] proc_fail_nth_read+0x1bb/0x230 [ 681.997093][T25838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.997118][T25838] ? rw_verify_area+0x2a6/0x4d0 [ 681.997141][T25838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.997164][T25838] vfs_read+0x20c/0xa70 [ 681.997192][T25838] ? __pfx___mutex_lock+0x10/0x10 [ 681.997214][T25838] ? __pfx_vfs_read+0x10/0x10 [ 681.997238][T25838] ? __fget_files+0x2a/0x420 [ 681.997259][T25838] ? __fget_files+0x3a0/0x420 [ 681.997275][T25838] ? __fget_files+0x2a/0x420 [ 681.997300][T25838] ksys_read+0x150/0x270 [ 681.997324][T25838] ? __pfx_ksys_read+0x10/0x10 [ 681.997351][T25838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.997370][T25838] do_syscall_64+0x15f/0xf80 [ 681.997387][T25838] ? trace_irq_disable+0x3b/0x140 [ 681.997410][T25838] ? clear_bhb_loop+0x40/0x90 [ 681.997431][T25838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.997447][T25838] RIP: 0033:0x7fa8de95d60e [ 681.997464][T25838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 681.997479][T25838] RSP: 002b:00007fa8df879fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.997497][T25838] RAX: ffffffffffffffda RBX: 00007fa8df87a6c0 RCX: 00007fa8de95d60e [ 681.997510][T25838] RDX: 000000000000000f RSI: 00007fa8df87a0a0 RDI: 0000000000000009 [ 681.997521][T25838] RBP: 00007fa8df87a090 R08: 0000000000000000 R09: 0000000000000000 [ 681.997532][T25838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.997542][T25838] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff00480358 [ 681.997572][T25838] [ 682.269533][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 682.578683][T25853] __nla_validate_parse: 15 callbacks suppressed [ 682.578702][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4871'. [ 685.030482][T25859] syzkaller0: entered promiscuous mode [ 685.036031][T25859] syzkaller0: entered allmulticast mode [ 685.299927][T25886] tc_dump_action: action bad kind [ 685.420704][T25893] tipc: Enabling of bearer rejected, already enabled [ 685.465224][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 685.520686][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4882'. [ 685.604046][T25902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.632225][T25900] xt_l2tp: v2 sid > 0xffff: 8388608 [ 685.647600][T25905] netlink: 'syz.5.4886': attribute type 21 has an invalid length. [ 685.658906][T25905] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4886'. [ 685.672957][T25905] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4886'. [ 685.716306][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.871986][T25912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4889'. [ 686.281523][T25936] IPVS: sed: FWM 3 0x00000003 - no destination available [ 686.681292][T25958] lo speed is unknown, defaulting to 1000 [ 686.747013][T25961] IPVS: sed: FWM 3 0x00000003 - no destination available [ 687.057408][T25970] netlink: 'syz.7.4907': attribute type 6 has an invalid length. [ 687.277160][T25973] syzkaller1: entered promiscuous mode [ 687.297878][T25973] syzkaller1: entered allmulticast mode [ 687.436092][T25958] lo speed is unknown, defaulting to 1000 [ 687.908207][T25997] x_tables: duplicate underflow at hook 1 [ 687.935628][T25997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4916'. [ 687.979251][T25997] nbd: must specify a size in bytes for the device [ 688.017825][T26001] netlink: 'syz.5.4917': attribute type 14 has an invalid length. [ 688.352306][T26014] netlink: 'syz.7.4921': attribute type 1 has an invalid length. [ 688.676820][T26028] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4925'. [ 688.738345][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4928'. [ 688.770447][T26033] ip6tnl1: entered allmulticast mode [ 688.942382][T26041] syzkaller0: entered promiscuous mode [ 688.970968][T26041] syzkaller0: entered allmulticast mode [ 689.152950][T26056] bond0: left promiscuous mode [ 689.169581][T26056] bond_slave_0: left promiscuous mode [ 689.176377][T26056] bond_slave_1: left promiscuous mode [ 689.184888][T26056] 0ªX¹¦À: left allmulticast mode [ 689.204002][T26056] batadv_slave_0: left promiscuous mode [ 689.217383][T26056] batadv_slave_0: left allmulticast mode [ 689.225737][T26056] xfrm0: left allmulticast mode [ 689.248849][T26056] bond1: left promiscuous mode [ 689.261637][T26056] bridge1: left promiscuous mode [ 689.283598][T26056] bond2: left promiscuous mode [ 689.292130][T26056] bridge0: left promiscuous mode [ 689.332962][T26056] ip6gre1: left promiscuous mode [ 689.347846][T26056] ip6gre1: left allmulticast mode [ 689.361339][T26056] ip6gre2: left promiscuous mode [ 689.366952][T26056] ip6gre2: left allmulticast mode [ 689.399731][T26056] vxcan0: left promiscuous mode [ 689.407827][T26056] vxcan0: left allmulticast mode [ 689.420449][T26056] gtp1: left promiscuous mode [ 689.425568][T26056] gtp1: left allmulticast mode [ 689.431970][T26056] ip6gre3: left promiscuous mode [ 689.444802][T26056] ip6gre3: left allmulticast mode [ 689.453417][T26056] veth3: left allmulticast mode [ 689.482812][T26056] bond6: left promiscuous mode [ 689.490480][T26056] bridge4: left promiscuous mode [ 689.614021][ T24] lo speed is unknown, defaulting to 1000 [ 689.628464][ T24] syz2: Port: 1 Link DOWN [ 689.645448][T26059] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 689.661233][T26059] bond6 (unregistering): Released all slaves [ 689.759017][ T7121] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.774903][ T7121] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.912009][ T7121] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.935291][ T7121] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.017434][T26086] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 690.032175][T26087] sock: sock_timestamping_bind_phc: sock not bind to device [ 690.042767][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4936'. [ 690.053169][T26086] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 690.898935][T26113] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4946'. [ 690.979320][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4947'. [ 691.177644][T26121] netlink: 'syz.5.4946': attribute type 1 has an invalid length. [ 691.268683][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4947'. [ 691.397907][T26121] 8021q: adding VLAN 0 to HW filter on device bond8 [ 691.483164][T26132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4949'. [ 691.586176][T26131] bond8: (slave gretap3): making interface the new active one [ 691.617673][T26131] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 692.775302][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4960'. [ 692.789131][T26185] netlink: 'syz.7.4961': attribute type 61 has an invalid length. [ 692.858848][T26185] netlink: 'syz.7.4961': attribute type 4 has an invalid length. [ 692.882299][T26185] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4961'. [ 693.113940][T26203] FAULT_INJECTION: forcing a failure. [ 693.113940][T26203] name failslab, interval 1, probability 0, space 0, times 0 [ 693.128619][T26203] CPU: 0 UID: 0 PID: 26203 Comm: syz.8.4966 Not tainted syzkaller #0 PREEMPT(full) [ 693.128643][T26203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.128653][T26203] Call Trace: [ 693.128661][T26203] [ 693.128669][T26203] dump_stack_lvl+0xe8/0x150 [ 693.128710][T26203] should_fail_ex+0x412/0x560 [ 693.128739][T26203] should_failslab+0xa8/0x100 [ 693.128764][T26203] ? dst_alloc+0x105/0x170 [ 693.128789][T26203] kmem_cache_alloc_noprof+0x87/0x650 [ 693.128810][T26203] ? __pfx_find_exception+0x10/0x10 [ 693.128835][T26203] ? __pfx_stack_trace_save+0x10/0x10 [ 693.128865][T26203] dst_alloc+0x105/0x170 [ 693.128895][T26203] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 693.128928][T26203] ? ip_route_output_key_hash+0xd8/0x2a0 [ 693.128963][T26203] ip_route_output_key_hash+0x18d/0x2a0 [ 693.128986][T26203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.129009][T26203] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 693.129032][T26203] ? __lock_acquire+0x6b5/0x2cf0 [ 693.129068][T26203] ip_route_output_flow+0x2a/0x150 [ 693.129095][T26203] do_output_route4+0xe9/0x240 [ 693.129118][T26203] ? __pfx_do_output_route4+0x10/0x10 [ 693.129136][T26203] ? do_raw_spin_lock+0x12b/0x2f0 [ 693.129167][T26203] ? __kmalloc_cache_noprof+0x31c/0x660 [ 693.129197][T26203] ? __ip_vs_get_out_rt+0x36e/0x1430 [ 693.129217][T26203] __ip_vs_get_out_rt+0x3ba/0x1430 [ 693.129244][T26203] ? __pfx___ip_vs_get_out_rt+0x10/0x10 [ 693.129262][T26203] ? udp_conn_schedule+0x3be/0x7a0 [ 693.129299][T26203] ip_vs_dr_xmit+0xd9/0x9f0 [ 693.129320][T26203] ? __local_bh_enable_ip+0xd0/0x130 [ 693.129343][T26203] ? __pfx_ip_vs_dr_xmit+0x10/0x10 [ 693.129362][T26203] ip_vs_in_hook+0xd88/0x1bf0 [ 693.129391][T26203] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 693.129435][T26203] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 693.129458][T26203] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 693.129480][T26203] nf_hook_slow+0xc5/0x220 [ 693.129506][T26203] ? __pfx_dst_output+0x10/0x10 [ 693.129528][T26203] nf_hook+0x22a/0x3a0 [ 693.129554][T26203] ? nf_hook+0xa1/0x3a0 [ 693.129575][T26203] ? __pfx_nf_hook+0x10/0x10 [ 693.129599][T26203] ? __pfx_dst_output+0x10/0x10 [ 693.129628][T26203] ? __ip_local_out+0x152/0x6a0 [ 693.129654][T26203] __ip_local_out+0x558/0x6a0 [ 693.129681][T26203] ? __pfx_dst_output+0x10/0x10 [ 693.129706][T26203] ip_local_out+0x2a/0x190 [ 693.129731][T26203] ip_send_skb+0x45/0xc0 [ 693.129761][T26203] udp_send_skb+0x7e4/0xf70 [ 693.129800][T26203] udp_sendmsg+0x1937/0x21a0 [ 693.129832][T26203] ? string+0x279/0x2b0 [ 693.129864][T26203] ? __pfx_udp_sendmsg+0x10/0x10 [ 693.129900][T26203] ? format_decode+0x5a3/0xe10 [ 693.129923][T26203] ? look_up_lock_class+0x57/0x110 [ 693.129951][T26203] ? __lock_acquire+0x6b5/0x2cf0 [ 693.129993][T26203] ? get_random_u32+0x4ce/0x8b0 [ 693.130023][T26203] udpv6_sendmsg+0x996/0x25c0 [ 693.130058][T26203] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 693.130077][T26203] ? udp_lib_get_port+0x177a/0x1c60 [ 693.130110][T26203] ? ip6_datagram_release_cb+0x7c/0x550 [ 693.130148][T26203] ? inet_send_prepare+0x1b9/0x270 [ 693.130173][T26203] ? inet_send_prepare+0x1b9/0x270 [ 693.130200][T26203] ? inet_send_prepare+0x1b9/0x270 [ 693.130221][T26203] ? __local_bh_enable_ip+0xd0/0x130 [ 693.130240][T26203] ? inet_send_prepare+0x1b9/0x270 [ 693.130268][T26203] ? inet6_sendmsg+0xe4/0x120 [ 693.130297][T26203] ____sys_sendmsg+0x5c7/0x9f0 [ 693.130332][T26203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.130362][T26203] ? import_iovec+0x73/0xa0 [ 693.130390][T26203] ___sys_sendmsg+0x2a5/0x360 [ 693.130413][T26203] ? __lock_acquire+0x6b5/0x2cf0 [ 693.130434][T26203] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.130490][T26203] ? __fget_files+0x2a/0x420 [ 693.130511][T26203] ? __fget_files+0x3a0/0x420 [ 693.130538][T26203] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.130563][T26203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.130593][T26203] ? __pfx_ksys_write+0x10/0x10 [ 693.130625][T26203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.130644][T26203] do_syscall_64+0x15f/0xf80 [ 693.130666][T26203] ? trace_irq_disable+0x3b/0x140 [ 693.130689][T26203] ? clear_bhb_loop+0x40/0x90 [ 693.130710][T26203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.130727][T26203] RIP: 0033:0x7f982cb9cdd9 [ 693.130745][T26203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.130760][T26203] RSP: 002b:00007f982d975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.130781][T26203] RAX: ffffffffffffffda RBX: 00007f982ce15fa0 RCX: 00007f982cb9cdd9 [ 693.130794][T26203] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 693.130804][T26203] RBP: 00007f982d975090 R08: 0000000000000000 R09: 0000000000000000 [ 693.130814][T26203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.130824][T26203] R13: 00007f982ce16038 R14: 00007f982ce15fa0 R15: 00007fff568f1e48 [ 693.130855][T26203] [ 694.461120][T26229] syzkaller0: entered promiscuous mode [ 694.470034][T26229] syzkaller0: entered allmulticast mode [ 694.767967][T26251] __nla_validate_parse: 4 callbacks suppressed [ 694.767986][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4978'. [ 694.952113][T26257] netlink: 'syz.6.4979': attribute type 1 has an invalid length. [ 695.297573][T26273] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4983'. [ 695.339969][T26279] syzkaller1: entered promiscuous mode [ 695.345709][T26279] syzkaller1: entered allmulticast mode [ 695.492305][T26276] geneve2: entered promiscuous mode [ 695.507365][T26276] geneve2: entered allmulticast mode [ 695.532496][ T7124] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 695.556789][ T7124] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 695.586164][ T7124] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 695.648105][ T7124] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 695.679123][T26286] lo speed is unknown, defaulting to 1000 [ 695.874584][T26301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4988'. [ 695.903416][T26301] netlink: 'syz.2.4988': attribute type 21 has an invalid length. [ 695.926564][T26301] netlink: 'syz.2.4988': attribute type 22 has an invalid length. [ 695.943993][T26301] netlink: 'syz.2.4988': attribute type 23 has an invalid length. [ 696.002074][T26301] netlink: 'syz.2.4988': attribute type 25 has an invalid length. [ 696.050591][T26301] netlink: 'syz.2.4988': attribute type 26 has an invalid length. [ 696.099963][T26301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4988'. [ 696.518164][T26286] lo speed is unknown, defaulting to 1000 [ 696.565685][T26315] syzkaller0: entered promiscuous mode [ 696.596471][T26315] syzkaller0: entered allmulticast mode [ 697.301056][T26333] syzkaller0: entered promiscuous mode [ 697.316904][T26333] syzkaller0: entered allmulticast mode [ 697.352263][T26341] team0: entered promiscuous mode [ 697.381861][T26341] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5000'. [ 697.401827][T26341] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 697.466032][T26345] block nbd0: Unsupported socket: should be TCP or UNIX. [ 697.700679][T26351] netlink: 'syz.2.5004': attribute type 4 has an invalid length. [ 697.804867][T26356] vlan0: entered allmulticast mode [ 697.815769][T26356] bond0: entered allmulticast mode [ 697.824157][T26356] bond_slave_0: entered allmulticast mode [ 697.832132][T26356] bond_slave_1: entered allmulticast mode [ 697.886717][T26354] lo speed is unknown, defaulting to 1000 [ 697.994049][T26369] tipc: Enabled bearer , priority 10 [ 698.004963][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5008'. [ 698.163298][T26374] can: request_module (can-proto-3) failed. [ 698.197349][T26377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 698.500203][T26404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5013'. [ 698.581973][T26354] lo speed is unknown, defaulting to 1000 [ 699.012400][T26381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.065288][T26413] bond9: option updelay: invalid value (18446744073709518847) [ 699.073218][T26413] bond9: option updelay: allowed values 0 - 2147483647 [ 699.088556][T26413] bond9 (unregistering): Released all slaves [ 699.402610][T26432] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5021'. [ 699.535261][T26428] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 699.583806][T26428] bond6 (unregistering): Released all slaves [ 699.614915][T26432] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5021'. [ 699.965584][T26435] syzkaller0: entered promiscuous mode [ 699.981408][T26435] syzkaller0: entered allmulticast mode [ 700.244700][T26471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5030'. [ 700.634107][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5033'. [ 702.834020][T26476] netlink: 'syz.2.5031': attribute type 12 has an invalid length. [ 702.842739][T26476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5031'. [ 702.863712][T26464] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 702.903790][T26464] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 702.974786][T26464] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 703.041501][T26464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 703.421261][T26512] netlink: 'syz.7.5042': attribute type 1 has an invalid length. [ 703.458761][T26512] netlink: 'syz.7.5042': attribute type 3 has an invalid length. [ 703.483414][T26512] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5042'. [ 703.528572][T26526] syzkaller0: entered promiscuous mode [ 703.535987][T26526] syzkaller0: entered allmulticast mode [ 703.709025][T26535] IPVS: sed: FWM 3 0x00000003 - no destination available [ 703.823485][T26542] syzkaller0: entered promiscuous mode [ 703.841385][T26542] syzkaller0: entered allmulticast mode [ 704.278650][T26561] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5058'. [ 704.358786][T26562] netlink: 'syz.7.5057': attribute type 4 has an invalid length. [ 704.391471][T26562] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5057'. [ 704.427248][T26567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5058'. [ 704.490932][T26572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5061'. [ 704.513830][T26575] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 704.557057][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5063'. [ 704.566134][T26577] netlink: 'syz.7.5063': attribute type 3 has an invalid length. [ 704.583131][T26577] siw: device registration error -23 [ 704.680866][T26584] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5066'. [ 704.695620][T26584] bond0: left promiscuous mode [ 704.701660][T26584] bond_slave_0: left promiscuous mode [ 704.707901][T26584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.724911][T26584] veth1_vlan: left promiscuous mode [ 704.730471][T26584] veth1_vlan: left allmulticast mode [ 704.737361][T26584] veth0_vlan: left promiscuous mode [ 704.747080][T26584] veth0_vlan: entered promiscuous mode [ 704.761924][T26584] veth1_vlan: entered promiscuous mode [ 704.771033][T26584] veth1_macvtap: left promiscuous mode [ 704.777378][T26584] veth0_macvtap: left promiscuous mode [ 704.784748][T26584] veth0_macvtap: entered promiscuous mode [ 704.791714][T26584] veth1_macvtap: entered promiscuous mode [ 704.802845][T26584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.811837][T26584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.820666][T26584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.828723][T26584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.836713][T26584] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 704.843616][T26584] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 704.854463][T26584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.862986][T26584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.870859][T26584] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 704.887419][T26581] syzkaller0: entered promiscuous mode [ 704.893442][T26581] syzkaller0: entered allmulticast mode [ 704.900580][T26585] mac80211_hwsim hwsim44 ªªªªª;: renamed from wlan0 [ 704.923914][T23859] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.936220][T23859] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 704.945947][T23859] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.955539][T23859] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 705.008688][T23859] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.040144][T23859] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 705.056985][T23859] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.088204][T23859] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 705.461167][T26609] __nla_validate_parse: 65 callbacks suppressed [ 705.461185][T26609] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5072'. [ 705.487266][T26612] bond4: entered allmulticast mode [ 705.657289][T26619] netlink: 'syz.6.5074': attribute type 13 has an invalid length. [ 705.685736][T26619] netlink: 'syz.6.5074': attribute type 17 has an invalid length. [ 705.823286][T26619] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.888355][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.898642][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.906835][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.915008][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.929033][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.938323][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.946482][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.963967][T26631] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5077'. [ 705.973503][T22316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.996066][T26619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.006987][T26619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.032752][T26619] veth1_vlan: left promiscuous mode [ 706.039149][T26619] veth0_vlan: left promiscuous mode [ 706.046717][T26619] veth0_vlan: entered promiscuous mode [ 706.055787][T26619] veth1_vlan: entered promiscuous mode [ 706.065363][T26619] veth1_macvtap: left promiscuous mode [ 706.072925][T26619] veth0_macvtap: left promiscuous mode [ 706.086064][T26619] veth0_macvtap: entered promiscuous mode [ 706.100992][T26619] veth1_macvtap: entered promiscuous mode [ 706.112822][T26619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.126353][T26619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.135670][T26619] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 706.145275][T26619] 8021q: adding VLAN 0 to HW filter on device eth0 [ 706.157409][T26619] 8021q: adding VLAN 0 to HW filter on device eth1 [ 706.168747][T26619] 8021q: adding VLAN 0 to HW filter on device eth2 [ 706.180410][T26619] 8021q: adding VLAN 0 to HW filter on device eth3 [ 706.202528][T26619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.223077][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5076'. [ 706.324601][T23863] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.331794][T23863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.346086][T23863] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.353274][T23863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.430397][T26629] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 706.442751][T26629] bond6 (unregistering): Released all slaves [ 706.468046][T26630] tipc: Enabling of bearer rejected, already enabled [ 706.477126][T23859] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.486501][T23859] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.521679][ T7124] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.548570][ T7124] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.677709][T26642] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5080'. [ 706.733417][T26648] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5082'. [ 706.747598][T26639] lo speed is unknown, defaulting to 1000 [ 707.244121][T26669] netlink: 'syz.8.5086': attribute type 1 has an invalid length. [ 707.433588][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5086'. [ 707.473249][T26669] bond6: entered promiscuous mode [ 707.484843][T26669] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.509988][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5086'. [ 707.727547][ T50] block nbd5: Receive control failed (result -32) [ 707.747126][T26669] bond6: (slave bridge7): making interface the new active one [ 707.773061][T26665] nbd5: detected capacity change from 0 to 63 [ 707.789774][T26669] bridge7: entered promiscuous mode [ 707.796026][T26667] block nbd5: NBD_DISCONNECT [ 707.796130][T21036] block nbd5: Dead connection, failed to find a fallback [ 707.809889][T21036] block nbd5: shutting down sockets [ 707.810668][T26667] block nbd5: Send disconnect failed -32 [ 707.815567][T21036] blk_print_req_error: 138 callbacks suppressed [ 707.815580][T21036] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.838263][T26669] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 707.839885][T21036] buffer_io_error: 138 callbacks suppressed [ 707.839899][T21036] Buffer I/O error on dev nbd5, logical block 0, async page read [ 707.863112][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5089'. [ 707.866178][ T4956] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 707.890288][ T4956] Buffer I/O error on dev nbd5, logical block 1, async page read [ 707.901215][ T4956] Buffer I/O error on dev nbd5, logical block 2, async page read [ 707.909077][ T4956] Buffer I/O error on dev nbd5, logical block 3, async page read [ 707.918764][T21036] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.927928][T21036] Buffer I/O error on dev nbd5, logical block 0, async page read [ 707.936461][T21036] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.945766][T21036] Buffer I/O error on dev nbd5, logical block 1, async page read [ 707.953933][T21036] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.963987][T21036] Buffer I/O error on dev nbd5, logical block 2, async page read [ 708.004179][T26686] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 708.027734][T21036] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.048254][T21036] Buffer I/O error on dev nbd5, logical block 3, async page read [ 708.067936][T21036] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.081214][T26686] bond6 (unregistering): Released all slaves [ 708.083727][T21036] Buffer I/O error on dev nbd5, logical block 0, async page read [ 708.095997][T21036] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.108346][T21036] Buffer I/O error on dev nbd5, logical block 1, async page read [ 708.117293][T21036] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.130030][T21036] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 708.150872][T26639] lo speed is unknown, defaulting to 1000 [ 708.166345][T21036] ldm_validate_partition_table(): Disk read failed. [ 708.185914][T21036] Dev nbd5: unable to read RDB block 0 [ 708.216264][T21036] nbd5: unable to read partition table [ 708.303778][T21036] ldm_validate_partition_table(): Disk read failed. [ 708.343627][T21036] Dev nbd5: unable to read RDB block 0 [ 708.384874][T21036] nbd5: unable to read partition table [ 708.547884][T26713] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.5096'. [ 709.157964][T26745] netlink: 'syz.5.5104': attribute type 11 has an invalid length. [ 709.169488][T26745] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.5104'. [ 709.179097][T26746] netlink: 'syz.5.5104': attribute type 11 has an invalid length. [ 709.528098][T26759] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 709.771763][T26778] vlan0: entered promiscuous mode [ 710.013657][T26784] netlink: 'syz.7.5114': attribute type 11 has an invalid length. [ 710.102729][T26791] syzkaller1: entered promiscuous mode [ 710.121047][T26791] syzkaller1: entered allmulticast mode [ 710.161456][T26793] netlink: 'syz.2.5118': attribute type 1 has an invalid length. [ 710.460659][T26806] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 710.583045][T26813] netlink: 'syz.2.5129': attribute type 39 has an invalid length. [ 710.618164][T26813] __nla_validate_parse: 9 callbacks suppressed [ 710.618190][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5129'. [ 710.818090][T26816] rdma_op ffff88804c9819f0 conn xmit_rdma 0000000000000000 [ 711.007704][T26837] netlink: 'syz.6.5133': attribute type 30 has an invalid length. [ 711.154720][T26847] syzkaller0: entered promiscuous mode [ 711.187049][T26847] syzkaller0: entered allmulticast mode [ 711.236819][T26852] tipc: Enabled bearer , priority 10 [ 711.696178][T26879] syz.6.5145: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 711.736808][T26879] CPU: 0 UID: 0 PID: 26879 Comm: syz.6.5145 Not tainted syzkaller #0 PREEMPT(full) [ 711.736836][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.736859][T26879] Call Trace: [ 711.736867][T26879] [ 711.736876][T26879] dump_stack_lvl+0xe8/0x150 [ 711.736907][T26879] warn_alloc+0x249/0x340 [ 711.736940][T26879] ? stack_trace_save+0xa9/0x100 [ 711.736973][T26879] ? __pfx_warn_alloc+0x10/0x10 [ 711.737011][T26879] ? kasan_save_track+0x4f/0x80 [ 711.737038][T26879] ? kasan_save_track+0x3e/0x80 [ 711.737063][T26879] ? __kasan_kmalloc+0x93/0xb0 [ 711.737089][T26879] ? __kmalloc_cache_noprof+0x31c/0x660 [ 711.737115][T26879] ? xskq_create+0x56/0x170 [ 711.737136][T26879] ? xsk_setsockopt+0x54c/0x990 [ 711.737166][T26879] ? do_sock_setsockopt+0x17c/0x1b0 [ 711.737190][T26879] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 711.737213][T26879] ? do_syscall_64+0x15f/0xf80 [ 711.737243][T26879] __vmalloc_node_range_noprof+0x132/0x1750 [ 711.737299][T26879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 711.737332][T26879] ? __kasan_kmalloc+0x93/0xb0 [ 711.737363][T26879] vmalloc_user_noprof+0xad/0xe0 [ 711.737392][T26879] ? xskq_create+0xbf/0x170 [ 711.737415][T26879] xskq_create+0xbf/0x170 [ 711.737440][T26879] xsk_init_queue+0x8a/0xe0 [ 711.737463][T26879] xsk_setsockopt+0x54c/0x990 [ 711.737499][T26879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 711.737531][T26879] ? __pfx_aa_sk_perm+0x10/0x10 [ 711.737560][T26879] ? aa_sock_opt_perm+0xff/0x1a0 [ 711.737591][T26879] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 711.737618][T26879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 711.737653][T26879] do_sock_setsockopt+0x17c/0x1b0 [ 711.737687][T26879] __x64_sys_setsockopt+0x13d/0x1b0 [ 711.737716][T26879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.737740][T26879] do_syscall_64+0x15f/0xf80 [ 711.737764][T26879] ? trace_irq_disable+0x3b/0x140 [ 711.737796][T26879] ? clear_bhb_loop+0x40/0x90 [ 711.737823][T26879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.737851][T26879] RIP: 0033:0x7f565d79cdd9 [ 711.737872][T26879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.737890][T26879] RSP: 002b:00007f565e63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 711.737912][T26879] RAX: ffffffffffffffda RBX: 00007f565da15fa0 RCX: 00007f565d79cdd9 [ 711.737928][T26879] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 711.737941][T26879] RBP: 00007f565d832d69 R08: 0000000000000004 R09: 0000000000000000 [ 711.737955][T26879] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.737969][T26879] R13: 00007f565da16038 R14: 00007f565da15fa0 R15: 00007ffde1cd9668 [ 711.738004][T26879] [ 712.006587][T26879] Mem-Info: [ 712.010400][T26879] active_anon:4145 inactive_anon:214 isolated_anon:0 [ 712.010400][T26879] active_file:4349 inactive_file:2273 isolated_file:0 [ 712.010400][T26879] unevictable:768 dirty:146 writeback:0 [ 712.010400][T26879] slab_reclaimable:7331 slab_unreclaimable:220221 [ 712.010400][T26879] mapped:27972 shmem:807 pagetables:2023 [ 712.010400][T26879] sec_pagetables:0 bounce:0 [ 712.010400][T26879] kernel_misc_reclaimable:0 [ 712.010400][T26879] free:1215313 free_pcp:26477 free_cma:0 [ 712.056300][T26879] Node 0 active_anon:16576kB inactive_anon:856kB active_file:16864kB inactive_file:8772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:38148kB dirty:580kB writeback:0kB shmem:1692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16276kB pagetables:7956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 712.091185][T26879] Node 1 active_anon:4kB inactive_anon:0kB active_file:532kB inactive_file:320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73740kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 712.124965][T26879] Node 0 DMA free:11244kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 712.155908][T26879] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 712.162303][T26879] Node 0 DMA32 free:1362596kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16576kB inactive_anon:856kB active_file:16864kB inactive_file:8772kB unevictable:1536kB writepending:580kB zspages:4200kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:41412kB local_pcp:21152kB free_cma:0kB [ 712.197098][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 712.202771][T26879] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 712.233480][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 712.240821][T26879] Node 1 Normal free:3487408kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:532kB inactive_file:320kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64484kB local_pcp:30940kB free_cma:0kB [ 712.273382][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 712.279114][T26879] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11244kB [ 712.295956][T26879] Node 0 DMA32: 7943*4kB (UME) 7029*8kB (UME) 4032*16kB (UME) 1195*32kB (UME) 1067*64kB (UME) 1039*128kB (UME) 711*256kB (UME) 410*512kB (UM) 277*1024kB (UM) 142*2048kB (UM) 1*4096kB (U) = 1362532kB [ 712.315826][T26879] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 712.328506][T26879] Node 1 Normal: 42*4kB (UM) 23*8kB (UM) 21*16kB (UM) 22*32kB (UM) 13*64kB (UM) 14*128kB (UM) 7*256kB (UM) 6*512kB (U) 9*1024kB (UM) 2*2048kB (U) 846*4096kB (UM) = 3487408kB [ 712.362253][T26896] tipc: Resetting bearer [ 712.403278][T26879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.414931][T26879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.426060][T26879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.436871][T26879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.471797][T26879] 7939 total pagecache pages [ 712.480006][T26879] 514 pages in swap cache [ 712.487158][T26879] Free swap = 111204kB [ 712.492654][T26896] tipc: Resetting bearer [ 712.524821][T26879] Total swap = 124996kB [ 712.536594][T26879] 2097051 pages RAM [ 712.554693][T26879] 0 pages HighMem/MovableOnly [ 712.571567][T26879] 427099 pages reserved [ 712.584180][T26879] 0 pages cma reserved [ 712.953662][T26928] netlink: 'syz.6.5159': attribute type 4 has an invalid length. [ 712.986713][T26928] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5159'. [ 712.990258][T26930] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 713.007820][T26930] pim6reg0: persist disabled [ 713.021597][T26928] net_ratelimit: 1 callbacks suppressed [ 713.021613][T26928] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 713.076733][T26933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5159'. [ 713.094265][T26933] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5159'. [ 713.142440][T26935] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5160'. [ 713.165475][T26934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5160'. [ 713.368512][T26942] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5163'. [ 713.462987][T26948] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5165'. [ 713.464149][T26950] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5163'. [ 713.776271][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5168'. [ 714.017926][T26982] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 714.102501][T26982] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 714.381189][T26988] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.388625][T26988] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.395363][ T7140] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.417988][ T7140] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.450722][ T7140] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.465972][T27023] xt_hashlimit: size too large, truncated to 1048576 [ 715.482102][ T7140] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.944137][T27044] __nla_validate_parse: 5 callbacks suppressed [ 715.944156][T27044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 716.018704][T27044] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5187'. [ 716.059840][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5187'. [ 716.062145][T27044] openvswitch: netlink: Missing key (keys=40, expected=80) [ 716.412681][T27059] tipc: Enabled bearer , priority 0 [ 716.421461][T27059] syzkaller0: entered promiscuous mode [ 716.427118][T27059] syzkaller0: entered allmulticast mode [ 716.554251][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.570240][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.601351][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.632834][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.647820][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.673729][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 716.687743][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 716.709992][T27061] team0: left promiscuous mode [ 716.722764][T27061] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.817858][T27061] mac80211_hwsim hwsim42 syzkaller0: left promiscuous mode [ 716.829150][T27061] mac80211_hwsim hwsim42 syzkaller0: left allmulticast mode [ 716.840872][T27061] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 716.861964][T27069] tipc: Resetting bearer [ 716.885613][T27078] tap0: tun_chr_ioctl cmd 1074025681 [ 717.055647][T27084] netlink: 'syz.6.5197': attribute type 1 has an invalid length. [ 717.127084][T27084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 717.144224][T27056] tipc: Resetting bearer [ 717.232604][T27056] tipc: Disabling bearer [ 717.325452][T27094] netlink: 'syz.8.5200': attribute type 30 has an invalid length. [ 717.346162][T27091] netlink: 'syz.6.5197': attribute type 1 has an invalid length. [ 717.358412][T27094] netem: change failed [ 717.466885][T27091] bond4: (slave batadv0): Opening slave failed [ 717.515830][T27103] IPVS: sed: FWM 3 0x00000003 - no destination available [ 717.711849][T27105] bond7: entered promiscuous mode [ 717.736564][T27105] bond7: entered allmulticast mode [ 717.770651][T27105] 8021q: adding VLAN 0 to HW filter on device bond7 [ 717.867037][T27095] netlink: 'syz.2.5201': attribute type 1 has an invalid length. [ 718.090532][T27127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 718.100052][T27131] netlink: 'syz.6.5208': attribute type 3 has an invalid length. [ 718.564715][T27144] bond5 (unregistering): Released all slaves [ 719.535643][T27192] lo speed is unknown, defaulting to 1000 [ 719.634787][T27196] af_packet: tpacket_rcv: packet too big, clamped from 188 to 4294967272. macoff=96 [ 720.127274][T27209] openvswitch: netlink: Flow actions attr not present in new flow. [ 720.563821][T27192] lo speed is unknown, defaulting to 1000 [ 720.802106][T27197] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 721.038831][T27237] No such timeout policy "syz0" [ 721.081179][T27233] __nla_validate_parse: 72 callbacks suppressed [ 721.081197][T27233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5236'. [ 721.202840][T27245] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 721.235482][T27246] ip6erspan0: entered promiscuous mode [ 721.242958][T27246] ip6erspan0: entered allmulticast mode [ 721.536131][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5248'. [ 721.591633][T27266] netlink: 'syz.7.5248': attribute type 1 has an invalid length. [ 721.648389][T27266] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5248'. [ 721.702369][T27273] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 721.724077][T27273] syzkaller1: linktype set to 805 [ 721.873167][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5254'. [ 721.934432][T27285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5254'. [ 721.946507][T27285] bridge_slave_0: left allmulticast mode [ 721.955063][T27285] bridge_slave_0: left promiscuous mode [ 721.962422][T27285] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.973442][T27285] bridge_slave_1: left allmulticast mode [ 721.980089][T27285] bridge_slave_1: left promiscuous mode [ 721.986156][T27285] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.000067][T27285] bond0: (slave 30): Releasing backup interface [ 722.009927][T27285] bond0: (slave bond_slave_1): Releasing backup interface [ 722.025945][T27285] team0: Port device team_slave_1 removed [ 722.034503][T27285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 722.717274][T27324] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5265'. [ 724.744497][T27277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.943154][T27350] netlink: 'syz.6.5272': attribute type 1 has an invalid length. [ 724.978078][T27350] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 725.054017][T27363] netlink: 'syz.5.5271': attribute type 8 has an invalid length. [ 725.131397][T27367] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 725.527080][T27374] veth0_macvtap: left promiscuous mode [ 725.850691][T27374] veth0_macvtap: entered promiscuous mode [ 726.246908][T27417] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5286'. [ 726.995929][T27457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5296'. [ 727.055183][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5298'. [ 727.103194][T27463] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 727.150241][ T7141] unregister_netdevice: waiting for bond10 to become free. Usage count = 2