last executing test programs: 3m17.088665367s ago: executing program 0 (id=34976): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x9f20, 0x49, 0x4, 0x8, 0x5}, 0xc) 3m16.897407039s ago: executing program 0 (id=34978): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x5, 0x4}, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0xc0, 0x8, 0xfffffffffffffe01, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r2}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 3m16.425993454s ago: executing program 0 (id=34985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m15.932356231s ago: executing program 0 (id=34992): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0xffe, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, 0x0}, 0x8) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x80000, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6}, 0x10, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, @alu={0x4, 0x1, 0xd, 0x5, 0x3, 0x100, 0x7fffffffffffffeb}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x0, 0x5, 0x401}, 0x10, r6, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3m15.625511652s ago: executing program 0 (id=34995): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x80, 0x8, 0x7, {{0xd, 0x4, 0x3, 0x2c, 0x34, 0x68, 0x0, 0x6f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, {[@noop, @ssrr={0x89, 0x13, 0xc3, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010102]}, @noop, @timestamp={0x44, 0x8, 0x4b, 0x0, 0xb, [0xfffffff9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x80, 0x7, 0x3, {{0x16, 0x4, 0x1, 0x37, 0x58, 0x68, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp_addr={0x44, 0x44, 0x89, 0x1, 0x9, [{@loopback, 0xfffffffc}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x785}, {@multicast2, 0xf}, {@private=0xa010100, 0x2}, {@empty, 0x424a190f}, {@private=0xa010102, 0x80000001}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xb, 0x4, 0x39, @dev={0xfe, 0x80, '\x00', 0x22}, @local, 0x7800, 0x10, 0x77, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x180, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x180}, 0x1, 0x0, 0x0, 0xc090}, 0x80) 3m4.12657888s ago: executing program 0 (id=35007): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r2, &(0x7f0000000040)='hash\x00', 0x30400, &(0x7f0000000080)={@align=0x9, {0x2, 0x0, 0x0, 0xfffffffffffffffb}}, 0x7a94, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8000}, 0x3, &(0x7f0000000500)=[{0x2, 0x5, &(0x7f0000000200)='/dev/net/tun\x00', &(0x7f0000000380)="d47dc3b441444132e50c183981428807948b4796b0e5483165c75399865a5b2c22fa73557b53e0e37ac3ac8ac6dad67d42b289c04214a66fc24cc1ecec17cacb49f714268d118122cd04bd20a7c2131fcf917eaceed05c5a12d6a8", 0x5b, 0x30}, {0x1, 0xffff, &(0x7f0000000400)='syzkaller1\x00', &(0x7f0000000440)="b6c3edde8ae7e65c94817ed5ab692c9458e0b646e19de6e1e43b9d1c221bb1a677", 0x21, 0x8}, {0x2, 0x7, &(0x7f0000000480)=':-\x00', &(0x7f00000004c0)="02bb6703b7eb5134c87ca0abb2b8e9cb2a9f71b0734f73cdeb606ed29398b23fabbce18f4c70bc1c49b6d561ae5c23a536bb010ab0d9d32663", 0x39, 0x20}]}) recvmsg$unix(r3, &(0x7f0000000980)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/244, 0xf4}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2m48.667582533s ago: executing program 32 (id=35007): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r2, &(0x7f0000000040)='hash\x00', 0x30400, &(0x7f0000000080)={@align=0x9, {0x2, 0x0, 0x0, 0xfffffffffffffffb}}, 0x7a94, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8000}, 0x3, &(0x7f0000000500)=[{0x2, 0x5, &(0x7f0000000200)='/dev/net/tun\x00', &(0x7f0000000380)="d47dc3b441444132e50c183981428807948b4796b0e5483165c75399865a5b2c22fa73557b53e0e37ac3ac8ac6dad67d42b289c04214a66fc24cc1ecec17cacb49f714268d118122cd04bd20a7c2131fcf917eaceed05c5a12d6a8", 0x5b, 0x30}, {0x1, 0xffff, &(0x7f0000000400)='syzkaller1\x00', &(0x7f0000000440)="b6c3edde8ae7e65c94817ed5ab692c9458e0b646e19de6e1e43b9d1c221bb1a677", 0x21, 0x8}, {0x2, 0x7, &(0x7f0000000480)=':-\x00', &(0x7f00000004c0)="02bb6703b7eb5134c87ca0abb2b8e9cb2a9f71b0734f73cdeb606ed29398b23fabbce18f4c70bc1c49b6d561ae5c23a536bb010ab0d9d32663", 0x39, 0x20}]}) recvmsg$unix(r3, &(0x7f0000000980)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/244, 0xf4}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x10000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2m30.961627688s ago: executing program 3 (id=35331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8895}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffff512}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048860}, 0x20040000) 2m30.878906993s ago: executing program 3 (id=35332): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 2m30.793206602s ago: executing program 3 (id=35333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000004c0)='syz0\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS, @NFTA_TABLE_USERDATA={0x0, 0x6, "6627ea28589c3056204c9d650576"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xfffffffffffffdf4, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) write$cgroup_devices(r1, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) 2m30.733355145s ago: executing program 3 (id=35334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m30.622292924s ago: executing program 3 (id=35337): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x5000000) 2m30.161673129s ago: executing program 3 (id=35339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "09c39ee9cb594dda", "121122bf58c32c1de968b8b6fe6c630e1751060583d4cfcc8a8fa3b380538e68", "295112a5", "8441ee6035380419"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x100002, r5}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "09c39ee9cb594dda", "121122bf58c32c1de968b8b6fe6c630e1751060583d4cfcc8a8fa3b380538e68", "295112a5", "8441ee6035380419"}, 0x38) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x100002, r5}) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 2m15.169198265s ago: executing program 33 (id=35339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "09c39ee9cb594dda", "121122bf58c32c1de968b8b6fe6c630e1751060583d4cfcc8a8fa3b380538e68", "295112a5", "8441ee6035380419"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x100002, r5}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "09c39ee9cb594dda", "121122bf58c32c1de968b8b6fe6c630e1751060583d4cfcc8a8fa3b380538e68", "295112a5", "8441ee6035380419"}, 0x38) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x100002, r5}) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 1m51.869069267s ago: executing program 1 (id=35715): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 1m51.610797211s ago: executing program 1 (id=35718): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0xed, 0xfe, 0x4d, 0x0, 0xa, 0x64, 0xe, 0x9, 0x3d, [0xffff, 0xfffffffd, 0xa, 0xfff, 0xd50, 0x2000009, 0x8001]}}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a000100020000000000000001fffff4573973758e7141fe76764327", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000f289000000181100001169b27a2ec3c4ed7c39c0b1e58d499026bebd615bda0b48c41b6307d00a54b1c927be59044eb1d3dadbb225ca574eb9377cc09d77ebd77d5244bac50287c5fabc", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800008f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 1m51.496336159s ago: executing program 1 (id=35719): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 1m51.413342219s ago: executing program 1 (id=35721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async) close(r0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r4, &(0x7f0000000240)}, 0x20) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001", @ANYBLOB="8f5494977f36c3ad49b055b57fbd1d6748da273c995bab3d9003da042e0bde37c6757e06040f604a0c751a9a74fc22dc1f6b2b3235d2bcb0661a65312930c33b9137b61c07e7738b93ed9fac4b47accd2ba44bfb3bd63951351fe2e0ea92219fd84e787f861ef6e4f0ff533d13987acede42f8ecec8fbc93e9aafa13f39eecd786c314805ac3"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3801000010000100000000000000ff5f64af14aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020003000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 1m51.147549454s ago: executing program 1 (id=35723): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000feff0071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m50.981897244s ago: executing program 1 (id=35727): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000002c0)={0x14, r3, 0x615}, 0x14}, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) 1m35.797581746s ago: executing program 34 (id=35727): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000002c0)={0x14, r3, 0x615}, 0x14}, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) 5.762482941s ago: executing program 6 (id=36930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000ffa1000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.503556674s ago: executing program 6 (id=36932): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61109c00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010027bd7000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="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"/781], 0x22c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) 5.293775917s ago: executing program 6 (id=36936): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000780)="a7b6b7d8ec7d59c86239222abc05ad0c3f35cf56da10b875c3851198c295af9f09ec60633698311b3a50c7bf5b6a0d38f39b37bbdc64677db683000430b52db0cd08939733f19aff30755775300f4d83743004aa12b8697280a133f5b0074324b5c69e3e2df7a0509bc58d448c12be06bcf6392ed2fcfd66d0794c8cbc1c7b224a3ed3101dbce4ee35cfa62cd5ebe547a4a0c1d16d3cd42f8529073030a606136abe15a84018a1f307d9993c67eaee00", 0xb0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.361583444s ago: executing program 7 (id=36945): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="181900000000000000dfca3b0e2247b804000000000017d9d224000000805835991ac8cc0ff458453960cbaa030000005a40c8c447d2781e750ad25ef90763b44bf0d01cb3eff4b0f23e45545179ad8e00eb9bb7fe45e8b272c08c602151e3e51caefb56c1f745644d7cbd51cc0ef5a722145babacbafa00"/132], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="c789b040", 0x4}, {&(0x7f0000000080)="78074b403375a77eff95ec79853547bee351c3e9bbc416cf734183cdb6be42f0688f760050509576b8ba69586f64e5c06a4368453dc691dfdc9413a355c56742f293a7b18b4c12ab863e454b953ff4bfa450ee1b9750ed10ee84c2a0210c68e8814ce176dd4c151de88f654bc09374a429becb072331069226c2cac75d14d51e", 0x80}, {&(0x7f0000000100)="c17ce2bb21456dc2f7793585ba29be1227a9fa387ba79c8cce79c9db5c7586d20968609111cb3df5782ffaa6f4ffeb18daf66a7d5100ae2aa392605e389fa50a7aa86d6a4bc6d78a7f8881db6f1779255d02868f2bfd858013559a82a98c30b54d0f0b3f3fdf3cf80f33218a870d56", 0x6f}, {&(0x7f0000000280)="758fa783e3ab091321e98e0071678f935c9efae2fbba9de964e8ec8b628d65b34ac9bc1e1c242fd41561215f4cbc3061b29f6eef4279c1b4ad39ab95697954ceaf7ee175a6da6cf5b6dc3bc9ef5204a276d6dad32a34ccfdda09fc786b808142f471a3cadffc2a1e898c27038ce0ee539de63c26c5c5fbf44d23c224665bf271d0766202a3ee3abedf46d9acb4ed07cbde65c17f12763b9866d364a4f9d40ef10cb8aa345af0431f0a59104357237384530a33fe4a57140c70e7059059ea28b91bd57dff255cc9f5e1d72fc996b631bb69e9b7ac46189ad79f1249d284d4774144879d2b033141c9f9fc", 0xea}, {&(0x7f0000000380)="3557906db44694343c3dda3ca106e0dd41c8c7d622a527140c94c3ede217cc2f7f9162dbc78aa4318801978831f8684b33aa94e4c50f179dd0e84a72dc23", 0x3e}, {&(0x7f00000003c0)="ab926b3b2ebeedee5d1176b39e9e57a46a4b16c8cc3661919477c8b22ecf9832f3d4dfb46663ec0a5f8e5bb57882ee4988c004cbdaa15dda75fd6c5a8103c4acb4f7ea727138b659816065477079c6759cb36a6c5a7ea9937bba373e8c519a66ac4206472e1d6cfc5e9fa4a0b11c15fa2bce5cbd425593b5cb00ffa9c6f84cab605b04b83fe97aa5858314cafe603272bbc47163f9b7c1ea79207558685272cfc875cf38be0c64701c5d6a8601ee959dd962c2fb0f79770d75afacbe2f384245515afc65cd0aedfaaa774eb425fb2066de51c9e95be22102b506b598168db3e6aa2959e8eee21c8d3c8f69e1e202e50976fce0", 0xf3}, {&(0x7f00000004c0)="cfd51a61f5c0d09d73c5db18ff2f8be6a21c596926e1f49d49c2f531229639b33f0143f8942040cf53a5b3768b55a7082f71c4b50250c084df", 0x39}, {&(0x7f0000000500)="648637490ef61e8077e9b6eae97edde45efeaed65cfac4d9e559e5e3912960ffc0a6918e5de62e96c187a6bd35f7d74f52d95c9cf76a4729f3e2d3f6cbef355bc1e7bdd4f8d8f1157ce069a16f1a9da2a436916c8a5fb2a509fc223179cded54cda7821fe6a5c30e0f", 0x69}], 0x8, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="3352f8771605d18817365aa747e01a4fa75e5a3ed39c556048b1076cc5760ad90dd7bbb3a686480aafd46dac", 0x2c}, {&(0x7f00000007c0)="9115cd80b42f7fcfbf2befdb585c9654b4a990b356847e570d9b3f40516ffebce34b845b43eda467874016927987dbf511501bc7195978a478d59bc34403856da6488ac25a33078c5f0f99b1f21c4c424a4c", 0x52}], 0x3, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14}}], 0x30}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e24, 0x2, @remote, 0x7b}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)="e3609ca6919f4527299b487159a0fdd8de3682df4cd6c8dc39a01c5534e90cd94378e66f910f3d2e857f59cc3d1fa6fec7b0fc3dea8cd72c270922a1249d9a216a", 0x41}, {&(0x7f00000009c0)="54076bb6682e9eee487f4f70bab406f7d0624ea910fc0777636d8a60bda2a879847dc1c179e2987177ba918fc46a4d59ff4db434030b201430666f7a9bbbfb26bbff80d93ca1391ddfeab458e831d71e63dd7f4a420b56170203c2a49c6adbcd8526d22157aa1f95a179a5782b9200097ea383e44d1934e8858180cb714c4120a191a580439d599b527fcc70ba373ef3d519bf5a530dfc057966eba7e5c3fad77fb0ce184dad4bc56d9c4d5315ce07dd7a68612f55468de291215b3f4d28c6a84094109faffec07b", 0xc8}, {&(0x7f0000000ac0)="a4dafd7e8caa02343c5817c7b144682da48a4e8883fde0e98987a7b668fc782d438f4cf63146ceca096974e4d848f9184b4827d5fa9f8ad0c5434719e0ceaf7faafe8cac45f113cc80c6907947cea0e69c3bb0165ee2c83def1790d4f6be62cba96149a1", 0x64}, {&(0x7f0000000b40)="429a89b7c3d1eadfbfbae5441fe25adc21e5f90837536629dd867f6c44125c16a7c7ba56f1e07c392987f43d911fcf6b4944c04ce464eebdb7682ae4748aa1f2d20d37aa3c3463212ed4f8fa512cf95afce07aa2cdde7938d70449c85adc60e2e2157eff80a51faec3b91422bf7e0a67924735491f4d214180441f893bd07243f5d19dbb5494502ff6815aa22d16762b5a7e7c9891d95337a4ed58fe517badfbd9d711361259c490570237551980852470aa", 0xb2}, {&(0x7f0000000c00)="c2f031dab00b0d5c4e4bf68efa7abdfc6fd0fc27985b3af3be40133da96cdd16895808aca510d2564e9eb4a09e09026f5910c1f1620b9a323de5363bf51c0f01", 0x40}], 0x5}}], 0x3, 0x40080) 4.216644317s ago: executing program 7 (id=36947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'geneve1\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x12}}) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES32=r2, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x0) 2.165629442s ago: executing program 2 (id=36950): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000007c0), 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(r1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010001fff03000000fdfffeff00000000175955573db56573e2651dbf800d25e2df10b69d0236bbe90e2bdf9c267552fbcc54145aac5717526d9765ed6cef46ce0624dcee2f0de0435e0c90841a29d34e15be6c558bef2f59b9e31b3eda7d79a13b9eaecb096e980c06d1f06aa2a4d8abf8d165fa9dd780c28b82d5c9ec68f83f74fab86e3e2a4f8bfe0a8518df0d5f9b60d300ae5efe1fbe3a2284066268d2ff78088bc21adc8da160a8c600bf61fed42770863343ea8b3ad004792e67df", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050009000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.126489045s ago: executing program 7 (id=36952): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x28b2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@gettaction={0x1a8, 0x32, 0x324, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x41fb}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffbc}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x1a8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)="ebd75c84f79ba945728cdd22233c692135b8776ecd9fc0584e61039943f82e133a61e96640bb1062915b73b841b4e2dd1ad3ef5b656e5bcfa8fd531a16201d64a313db08f26d8935b08a2f855bc242efe89e608eba4fb7aa5390580cea1569643ee397f27045b339e0522059a45538e1fe96919d4f4114381e8bb92ebe4fb54fe9d79a27c7947280057ed278849c68c4bd3ebaeb3f8dc93f161020dcb69cc8988034f7545de0df3151fc7dbca3ef3dd01dc7a80a05e905484e85757ace84cc3f6ebbf34a887d285fc4c1a0", 0xcb}, {&(0x7f00000008c0)="2a307bb5c6e2fa77e0e0d2764c773482f70442c137c9172e0c15c9f6dfef5f73f3c5883e568600b737371010eed94c97dfc988c4616cde0d784554dd71b21715b73a93d1943863a9027182edeecc851d68fa5212b1133c2156789c56c591ef675f101f4c93638b79a6297d14a9ce8734f234a80092fe82af33994c00730bae08ade42d89291af30cdb5ca3a428e6e3f26d7361345ddd426daf06ac7fdde189260b98a428758831b8d334f919bbd3d0e663b68384deaaa6baa2cd5fdc67ede4259f801caf7c6cd7b14db4ca878dc77e709998949aff27600d1af2a7b7dd00a5f612051deda402793d6fc3ddf681c4010e2da307", 0xf3}, {&(0x7f00000009c0)="fdb322fc41aa107eaecd4c8b049a118a77f37b2ac43faef1e1812721af71523bde35e465b07e285585d6242e58926048f3a7be80448530a33d56f5683386e3a680dd3c415e68cc05d92319decfa5aa2f13b7cc1b4d604ed05fb31a6bda604520df9d32230fe541392bad45c6eccf6112ff93196f4d1b5486c5a141cd192f1155bfd68be9826f8ba5798138c3848bf1b3b097f0ffec724d9d4b51d399bb890e21b59c524ee880c64c234d13a22bd8a32b7d03c6fd67af1821d9", 0xb9}, {&(0x7f0000000a80)="fa8e8eb643411a65906cd1fd88b3c47e8973df4319028a4bcab2f67d0d02894294f7b86eda60e7fd3ef90ce889c0608137f529b97618b86e82ffc3c7160f5b51e9b5df1547", 0x45}], 0x4, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4000004) syz_emit_ethernet(0xe, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x88ca}}}, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000200)=""/192, 0xc0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000080)="f55da65cb5072604b390e124d9573fd6f3ae502a1091ff170b60a4eef60715a9f5b3890dd85d10939ee15cbe2c04b96f2d85850b8a8a8705220f230c", &(0x7f00000000c0)=""/17, &(0x7f00000004c0)="6fb1d74433a97cafcad11a04dbb37fd7006b9c0c554dd41d56536448442d5c39eb68fd53480e424d9bd94bf748e5034dcd3c03eb6e90b0fae242dbc667f06b1d35a025c8a71386ff3a8f59506e73b41f0ef376c0305b1e2e30218ae493c0d2324781502018d5fa71fd4616077c6efd974b29ae89473bf6a218ce04a88b50300492bbf6defda304beceb5a1c2894e01692cefda9b52390c60980b6cc87b4e22116dcc68ecbbed2da2ae8086051e9896fa947d947700271585ea38a64955ad15e03798dc1963454cc7ce20bed1de0b6f61b1c012afd04d763bf4dbedfecd95e8d69b34cf84f31089edecc52f13111e8ccaec7698c7e5", &(0x7f00000005c0)="b166c83c7a62ef63f92b9131dcf99ccd53b7b74308648d552467e10b11317a2538eb191b824d5acff33e51cbe5bf0e264ac43d7c5776b794f28dc6c8e6153feb196ed36df49eb75e96ab30714cbe7cb4b3604f012b4d897d3bf52e3fe991f03e478d80c03869b377410e7ea1864818086b60b826bedc34b5674fcbcdc5a5d1b0eab84149810ef406ebfc30cfddc06c75ce8d2868a0ccdfc93f763c846c700b24df8fe4aca48446446b3d66367f2010f3ad39f7f85c8b0834fec8bec52c55972c6afe02647aed503f1633f77ff59d74fb3b6d85d0acb2090da1a23653509f", 0x1, r8}, 0x38) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000180)={0x9d, 0x10, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0]}) 2.06572305s ago: executing program 6 (id=36953): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x22020400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20048880) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_hsr\x00', {'veth0_to_bond\x00'}, 0x400}) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 2.065190469s ago: executing program 5 (id=36954): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @local}, 0x1c) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008c30000", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4) 2.015612931s ago: executing program 2 (id=36955): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105afffd00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.94049782s ago: executing program 2 (id=36956): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa703000000000000}, 0x50) 1.829193483s ago: executing program 4 (id=36957): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp-reno', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000defffffeff0000000008000a000000000014001f0000000000000000000000000000000000060002000000000006001b004e20000005002100"], 0x6c}, 0x1, 0x620b}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x60) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c9}, 0x8004) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r10], 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/98, 0x62, 0x0, &(0x7f0000000540)=""/87, 0x57}, &(0x7f0000000600)=0x40) 1.776898243s ago: executing program 2 (id=36958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002c0f07012bbd7000ffdbdf25053c03000c00018008001600", @ANYRES32=r0, @ANYBLOB="04000380"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4557}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x0, 0x2, 0x4, 0x9, 0xffffffffffffffd0, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xd6c, 0xbe, &(0x7f0000000280)=""/190, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xc, 0xce9, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x9, 0x4}, {0x3, 0x5, 0xd, 0x6}, {0x5, 0x1, 0xe, 0x4}, {0x1, 0x2, 0x3, 0xc}], 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200030300004e224e23b62a919030a885be0400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) listen(r2, 0x800) (async) accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r9, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 1.756399087s ago: executing program 6 (id=36959): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.637265861s ago: executing program 5 (id=36960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000a1ff000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.543598283s ago: executing program 6 (id=36961): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4c, 0x8, 0x1e, 0x3, 0xe9, 0x6, 0x0, 0xf0, 0xf9, 0x0, [0x10, 0x80000000, 0x401, 0x2, 0x8000, 0x6c5a324e, 0xffffffef, 0x3]}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x92c280a356567406, 0x10, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7ff}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00'}) (rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x8001) accept4(r7, 0x0, 0x0, 0x800) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 1.539332858s ago: executing program 4 (id=36962): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = socket(0x11, 0x3, 0x10000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010097", 0x7) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.277782595s ago: executing program 4 (id=36963): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) 1.167303857s ago: executing program 5 (id=36964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0b0090780100000047000000000000000011000000000000e0000002450c0001ac1414bb4e210000443c0001e000000100000000ac1414bb000000007f0000010000000000000000000000000000000000000000ac1e0001000000217976fb239e8f3f00"], 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104000000000f0000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000130140000001100010000000000000000000100000afd2de6136c5088a51604702ab112eb232a6be93a08f85cf64499abf4e81e5e07a775bbe5cfc8a5255539e8c618fd4b5915add1180b5096532763995071db"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c33e485}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008d) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={r4}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x4000000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000700)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3ffffff}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) gettid() sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.133810343s ago: executing program 4 (id=36965): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x42c, 0x1e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@typed={0x90, 0xc9, 0x0, 0x0, @binary="760e709d445825bf3164e7dc815467eeef4659bcf3fbc29f5a358d805fbf017e40b895a83fee13fd2ed0b12c5975e12a178c89efc910477244b290f91ab31d2ecea9f1a19c54bd97ba962a4d86d22a7699c212af7d23125cb8c7387fc75cd9db65683134f8c1f278d0db6c79be663deeddfd592ae1878c3bdead511ce90b0c329b888bb9cdffe099034733b8"}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x2f8, 0x2, 0x0, 0x1, [@nested={0x2f2, 0x13e, 0x0, 0x1, [@generic="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", @typed={0x8, 0x23, 0x0, 0x0, @pid=r3}, @nested={0xfd, 0x102, 0x0, 0x1, [@nested={0x4, 0xa5}, @generic="2f4b46da", @nested={0x4, 0x82}, @nested={0x4, 0x82}, @generic="3234934464f9d4ec4cc26a37a64ed7d52a3dc680f0be818257e8f21381453ffd0a69f8a306e83980ca1a3bac389f95b791cf68fe59aa611cf8d5550d5a67ca8ab897f76f9bce033508354b2163477379ae7ba478de07877c5b1ee213f22a56a2e6e70c6a684fff69cf7661a970767f940556ff971984e9016e0aed7cb631e6e8692f18e57fadf5e11ea18fd4f3a21325813e1e062d47c075650495a5f90886ed23ef75b6367f2a5d80db0f94dfba06bcaba7368d14588eb480b7d7a7ae02f2fba4faf4d1e3322d8fb2d974e9ccb5e99c1424c0626118898c083c63fd57b4ded3c64fccfdf93729221a"]}, @generic="0084adb5b7e15778091a844501b908dab6940c092be2ffc1f6f1624df2824e03c8e82260cd2f3704f76b6e8a89724eec7da99fa913ae006a36c0c6cccf07bc35b3c53b34507b15fe2fafebafe45198c918fb5c91660872f632305f2160ff9e5a074a69ed22141fbf6f3150e56bf62ab65b3dc643f992f05e0ab81d91b8d3d122c843d3ff24adfd0d5da4d61dff3cadf953eba8e17ee219a16cb0418371515dabb751888a0992f369d0905ed8970ec7d8aa1c28a73a9bb48ad7845281108359301c4d3fa8c73cb0ad7bb352b1402ef63c4d1b94e4e2e66f0fcedfec7922f4d1d8a04a13d5a398ffb7", @generic]}]}, @typed={0x4, 0x58}, @generic="3e984b5a65056f8046bd274c57db15189e12e804a7210198ef78c666d96b17a432992161ca40a7d3329337f5760eee2b3552f408a9c5ebec5672be6990f1d6c844e9dc36886f6c99ad8538ecd722d38332aebb98dbde41e6353ac4b5025f44eed76c3eb0e5518791da8b", @typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@mcast2}]}, 0x42c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000009c0)=0x5, 0x2) 831.085302ms ago: executing program 7 (id=36966): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105afffe00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 828.105471ms ago: executing program 2 (id=36967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbf198a084ce1c86dd62e6839300442fff00000000000003f9ed4bf6b84f5a8ae78100000000000000000040ff0200000000000000000000000000010c21880b0000000305000800010086dd080088be00000003120831020100000000"], 0x7e) 827.434008ms ago: executing program 4 (id=36968): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (fail_nth: 4) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 826.52074ms ago: executing program 5 (id=36969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x32, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0xb7, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x401, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x904e, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000140900000000000000d54ef81000010000000000000000780000000a58000000060a0b040000000000000000020000002c0004801800018008000100647570000c0002800800014000000015100001800b0001006c6f6f6b757000000900010073797a30000000004900020073797a32000000001400000011000100e8eb08902cd02a706a43216bc170523c9cba97d36b536e8a562f6aa7642888a9bde3b839a1d71395f9520b77c19220c6980f95f754bc9fd797001b6e59f28f"], 0x80}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000002100390d0000000000000000ac141400000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000b0ba3c69ccf7aeb4ef9ac89cf4dff6b4fe0689c651b41003e27aecbe3df51c8807f4d1df3a49407652c75a9e3b777476bc9f82e75fef8fc9ef4b2ad3a5b06c38e61e21a4d8551a2bfb49dca6cff57f8484d80e0a68ad002e27323dd227d13cb7e60b96c138f49485168c6ecaef0874e9fbf70e7b7499e02c81a595f55abafa108e91d335856edd70cc85", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) sendmsg$sock(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="135728bc200ebb69b9adfb33fdff341d9bc480167d08018bd87028dacdad09fb82780cfcbd0ef1978309f63efa1d99df1144fdf3a6d1d9342e2ecfc96387f50425187af346531fc4920844d6ebf404e7f6bca2f38387f14372d69c53fe858ee3d92d3330ee2c842723eef0cbde3a4e54c30332c149af26b6d1d58aa0a7dba01e6d4de4c4047a59a382ad9ceb80ee9bb19ae341b5bf08cb006fcbc5275c982081971c1cef37118ca46aa764970c075a75118fb3e1e40293db2d", 0xb9}, {&(0x7f0000000ac0)="0ddcb9357d98405ae5a83edcaa04c5294cd0f388a6724b1912dcdf6efcd7a3f9bd8c0e73be3ccf", 0x27}, {&(0x7f0000000b00)="ef53ede8c53e5235cbe9ed02527b936e7041c45191fe4a2b5a32e5f3ddf0eb2a3452d3da95fd38a86b75953e1aa08d22b8abb42e2aeabd72bc1352b1b1f636d7023e9ad00266d257457b0c7b9c79615438b961479195bcfa0f4609261800b2a9664cbbb58a7af6161485df5a472e5b07714240b4ae40767ae253f0b8f75bd8f834e47a65b9a2818059ae80c32c899d6647ada12f72c348669ca55342b5b4f95fab518b262f10da68b2fbf27736b7297025fb4effe2eb", 0xb6}], 0x3, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x20040080) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async, rerun: 64) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r6) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) accept4$tipc(r6, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x80800) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2cc22a20}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0xcd}}, @TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x5c}}, 0x24040084) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73352ed5955d482ee5364c4323843c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6740005804400028008000100040000000800040002000000080001000b000000080004000100000008000200ca74d04d0800010016000000080002000400000008000300010000002c00028008000300fcffffff080001001100000008000100060000000800030005000000080003006861000078000280080001000700000008000100ba0000000400040008000100ffffffff0400046d46c92900030000000800010006000000440003800800020004000000080002004a000000080002008f0600000800020005000000080002000300000008000200010100000800020007000000080001000f0000001c00068004000200080006000300000004000200080006"], 0x170}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 697.203112ms ago: executing program 7 (id=36970): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x160000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000440)={0x7fff, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r8, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) unshare(0x28000600) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000b1ddda8ac100100003057c7c780000ae079099dada47289e517ad465d29f90f827478e995b60e6d0bdf160b6bee006191e9b63bf2211657e2fd6dd331d6ff5d54dbc1fa4f8dc63329f3dbc0b02d68b00"/96, @ANYRES64=r6, @ANYRES8=r0], 0x44}}, 0x800) 275.341409ms ago: executing program 5 (id=36971): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) close(r3) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) 183.268298ms ago: executing program 7 (id=36972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e0301002abf7002ffdb9f2502180100", @ANYRES32=r2, @ANYBLOB="08000100ac141438"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 61.827545ms ago: executing program 4 (id=36973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a0", 0x6}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="b56271f6e2f56edf4bb39065bfd75fbd22e0b2a2772cd884ff2d113cfdcf4e7932b81a003acf9f2afc875f33968f735d3a7f64addeb32da5444e2e9acdbc15d9e3dd085cf6f5deca1cf1fe7a37648587afde9f9cc4a1198193dfc88b1f160cd9e748f6f1a6d34e903390c849a2dc36", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000840)="864761cc2a4fa4b53178cd021d3713212fb7e687604f4cc1aa7add4c6d4e5bdc1432719890c54decddc7b930e7743e7cbe8524d30f14cf710e263d8302bdd91ba2dbae4f8a5b6c7c89d39b129f23752d4bbb3bdd3945bf8c5ca7d53287912cce62157d3ef6dd42812b78c53c4675bab7dcd479f3c9cdb0e8a91f03e5db4effd3935023612707770d9516fabc3b30ec9b51134197ce404ee9487ed5f9bb83b75f2ebe99", 0xa3}, {&(0x7f0000000900)="b348ccb74c8ea72731cd9c970918e117dcdfa29d5d39deea148dd605a1b548d60b3200a0b3d2639bb6d3ff4cae5c6e150fca7b4d1de68249117013ae9f6fec97b2ca4b7382f2c1314a07924e37701bf17e2ea3d37d06e0f64da27250f6af9c8dc23ecae9a9d70c57be73e9999c4c737627041dee83eba804e18318d3068162b803c84f12321569838ec11e47c47e45fdd57c7ff3faf3f0f0eadf50e6debbba54530563ccacaa9cd8358df1560a51e7e608afff2a9ebd5d1f9c86272830c4a175b35ececad54267482c240956b6c43729ffe6c9f5733296ccf6", 0xd9}, {&(0x7f0000000a00)="4d3f57e70db59e0944d4226db8bcd80b02c93d47a7e55f317898160144bbd32c0fe35f7666ab7b687ad5e86cae021c3f7b5d063399a222900cae23cb6aac08bb1296e9f3d1a1aea02a5df87b6ac9f047fb83abb7b657e5900573aac359d8b4b2ee268946990ff88c8a1ab6d0c243282dafda3f8cc2af52aba61981348f8486f6fb15244896c27dd26d4ac2f5cf31807baceca47a58df2fc864e13c92df6d51883561ed8df8bae3e579a201b5dec9cb0ec5ad55b1483759", 0xb7}, {&(0x7f0000000e40)="f29f2f17a19088d5ccab9b4f2ab14299a37c09347645f2083e1790e33c5a2bbe89cd7cbcd4522334a18b9c3927cc2cbcf47040cc3e0eaf9013ed375ed8ab164390c22440567bee468a8516ddad83265ba6d448b4858e8b5d5426591cdcdc8d4692fb885b97875a8d24aac430b8fa4318bb8c2f8f760e0a49291e02c353519a0167153a1018997d713b49b5c51ae8cd5323de83478181aedb6499dc7bc1b28606abf74efd1a13a8228b23c44c6ee04d41a3975eaaecf64abd66d82fe28ecd86469e6e30f102c24acfb3f2d48e679e394e41b2022b1c", 0xd5}, {&(0x7f0000000f40)="2d0028385fdb0c4b34d683a6362131f4c3b0ad5980e39bc77df265deb900e5a376fd57730800ccfceb1325f1776b7eb144077b94abdc0a1c063ca7c265d801a3c64ada3e22a8b72390f11f7b846df58e9601555bcce532371547416555719f96", 0x60}], 0x5}}], 0x3, 0x42054) 52.598968ms ago: executing program 5 (id=36974): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000300000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 0s ago: executing program 2 (id=36975): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): ode [ 2042.092245][ T4710] syzkaller1: entered allmulticast mode [ 2042.591972][ T4740] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2042.636602][ T4742] netlink: 'syz.2.35383': attribute type 4 has an invalid length. [ 2042.645179][ T4742] netlink: 17 bytes leftover after parsing attributes in process `syz.2.35383'. [ 2042.657989][ T4742] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.35383'. [ 2044.816691][ T4695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2044.955881][ T4754] netlink: 48 bytes leftover after parsing attributes in process `syz.2.35390'. [ 2044.990391][ T4758] netlink: 'syz.1.35387': attribute type 4 has an invalid length. [ 2045.013772][ T4761] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2045.036085][ T4758] netlink: 'syz.1.35387': attribute type 4 has an invalid length. [ 2045.248744][ T4771] netlink: 'syz.5.35393': attribute type 4 has an invalid length. [ 2045.277325][ T4774] netlink: 'syz.5.35393': attribute type 4 has an invalid length. [ 2045.514829][ T4791] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 2045.527888][ T4791] syzkaller1: group set to 0 [ 2045.575388][ T4797] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2048.372815][ T4781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2048.491987][ T4818] netlink: 'syz.5.35410': attribute type 1 has an invalid length. [ 2048.564036][ T4824] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2048.611187][ T4828] netlink: 52 bytes leftover after parsing attributes in process `syz.4.35411'. [ 2048.665558][ T4818] syzkaller0: entered promiscuous mode [ 2048.671440][ T4818] syzkaller0: entered allmulticast mode [ 2048.739977][ T4818] bond1: (slave bridge1): making interface the new active one [ 2048.748428][ T4818] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2048.801484][ T4833] netlink: 1 bytes leftover after parsing attributes in process `syz.4.35413'. [ 2048.856895][ T4838] lo speed is unknown, defaulting to 1000 [ 2048.862410][ T4836] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.35415'. [ 2048.874043][ T4836] netlink: 'syz.2.35415': attribute type 1 has an invalid length. [ 2048.882416][ T4836] netlink: 224 bytes leftover after parsing attributes in process `syz.2.35415'. [ 2048.974132][ T4841] netlink: 'syz.1.35414': attribute type 16 has an invalid length. [ 2048.982275][ T4841] netlink: 'syz.1.35414': attribute type 17 has an invalid length. [ 2049.019471][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.086618][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.278911][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.286633][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.303723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.319325][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.326659][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.411453][ T4841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2049.422933][ T4841] gretap1: left promiscuous mode [ 2049.436297][ T4841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2049.445940][ T4841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2049.457224][ T4841] 8021q: adding VLAN 0 to HW filter on device eth0 [ 2049.470545][ T4841] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2049.481089][ T4841] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2049.492301][ T4841] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2049.508507][ T4841] veth3: left allmulticast mode [ 2049.518235][ T4841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2049.535186][ T4838] xfrm0 speed is unknown, defaulting to 1000 [ 2049.769742][ T4838] lo speed is unknown, defaulting to 1000 [ 2049.798897][ T4838] vxcan1 speed is unknown, defaulting to 1000 [ 2049.854373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2049.877648][ T4876] netlink: 'syz.4.35422': attribute type 1 has an invalid length. [ 2049.954797][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 2049.972277][ T4876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2049.999097][ T4878] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2050.010092][ T4878] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 2050.024541][ T4878] bond6: (slave gre1): Error -95 calling set_mac_address [ 2050.077387][ T4876] macvlan3: entered promiscuous mode [ 2050.084511][ T4876] macvlan3: entered allmulticast mode [ 2050.091187][ T4876] bond6: entered promiscuous mode [ 2050.097781][ T4876] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2050.109663][ T4876] bond6: left promiscuous mode [ 2050.575839][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2050.591828][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2050.607947][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2050.620742][ T4885] syzkaller0: entered promiscuous mode [ 2050.635050][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2050.642907][ T4885] syzkaller0: entered allmulticast mode [ 2050.650326][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2050.815621][ T4893] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.862549][ T4893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.971686][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.001657][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.038810][ T4893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2051.077148][ T4893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2051.115710][ T4893] veth1_vlan: left promiscuous mode [ 2051.150799][ T4893] veth0_vlan: left promiscuous mode [ 2051.161124][ T4893] veth0_vlan: entered promiscuous mode [ 2051.174366][ T4893] veth1_vlan: entered promiscuous mode [ 2051.196117][ T4893] veth1_macvtap: left promiscuous mode [ 2051.205823][ T4893] veth0_macvtap: left promiscuous mode [ 2051.218152][ T4893] veth1_macvtap: entered promiscuous mode [ 2051.244406][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2051.256938][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2051.269044][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2051.281847][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2051.297539][ T4893] batman_adv: batadv0: Interface activated: wlan0 [ 2051.336179][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2051.360985][ T4893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2051.377507][ T4893] veth0_macvtap: entered promiscuous mode [ 2051.398928][ T4893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2051.411847][ T4893] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2051.428120][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.436190][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2051.456879][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.464293][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2051.632895][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.646045][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.682082][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.705012][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.752648][ T51] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2051.961355][ T4892] lo speed is unknown, defaulting to 1000 [ 2051.980420][ T4850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2052.009140][ T4898] netlink: 496 bytes leftover after parsing attributes in process `syz.1.35428'. [ 2052.320857][ T4920] netlink: 'syz.5.35434': attribute type 1 has an invalid length. [ 2052.386969][ T4920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2052.390647][ T4923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35435'. [ 2052.398094][ T4892] xfrm0 speed is unknown, defaulting to 1000 [ 2052.410956][T29975] tipc: Subscription rejected, illegal request [ 2052.414868][ T4924] netlink: 'syz.4.35435': attribute type 23 has an invalid length. [ 2052.431256][ T4920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2052.446617][ T4920] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 2052.447365][ T4924] netlink: 'syz.4.35435': attribute type 23 has an invalid length. [ 2052.488806][ T4924] netlink: 'syz.4.35435': attribute type 23 has an invalid length. [ 2052.496963][ T4924] netlink: 'syz.4.35435': attribute type 23 has an invalid length. [ 2052.519600][ T4920] bond2: (slave gre1): Error -95 calling set_mac_address [ 2052.553087][ T4934] gretap1: entered promiscuous mode [ 2052.562142][ T4934] bond2: (slave gretap1): making interface the new active one [ 2052.570673][ T4934] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2052.582200][ T4892] lo speed is unknown, defaulting to 1000 [ 2052.600466][ T4892] vxcan1 speed is unknown, defaulting to 1000 [ 2052.657538][ T4937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.35436'. [ 2052.672343][ T4920] macvlan1: entered promiscuous mode [ 2052.683288][ T4920] macvlan1: entered allmulticast mode [ 2052.690244][ T4920] bond2: entered promiscuous mode [ 2052.719631][ T5617] Bluetooth: hci6: command tx timeout [ 2052.727608][ T4920] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 2052.776720][ T4920] bond2: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2052.798108][ T4920] bond2: left promiscuous mode [ 2052.940082][ T4942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2053.036799][ T4948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2053.065631][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35439'. [ 2053.110948][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35439'. [ 2053.552027][ T4979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35445'. [ 2053.832156][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.847673][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.860307][ T4892] bridge_slave_0: entered allmulticast mode [ 2053.869423][ T5000] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2053.877795][ T4892] bridge_slave_0: entered promiscuous mode [ 2053.949210][ T4892] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.988181][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.008463][ T4892] bridge_slave_1: entered allmulticast mode [ 2054.041268][ T4892] bridge_slave_1: entered promiscuous mode [ 2054.056019][ T4998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35450'. [ 2054.176342][ T4892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.179210][ T5012] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2054.208276][ T5012] xt_hashlimit: size too large, truncated to 1048576 [ 2054.219231][ T4892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.400392][ T4892] team0: Port device team_slave_0 added [ 2054.448422][ T4892] team0: Port device team_slave_1 added [ 2054.549645][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2054.589876][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.662893][ T4892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2054.704866][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2054.722747][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.757267][ T5617] Bluetooth: hci6: command tx timeout [ 2054.811186][ T5038] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2054.830721][ T4892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2054.937831][ T5040] syzkaller0: entered promiscuous mode [ 2054.951698][ T5040] syzkaller0: entered allmulticast mode [ 2055.525545][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35470'. [ 2055.595879][ T4892] hsr_slave_0: entered promiscuous mode [ 2055.618298][ T4892] hsr_slave_1: entered promiscuous mode [ 2055.636652][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35472'. [ 2055.637372][ T4892] debugfs: 'hsr0' already exists in 'hsr' [ 2055.678054][ T4892] Cannot create hsr debugfs directory [ 2055.953201][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2056.150738][ T5089] SET target dimension over the limit! [ 2056.417436][ T4892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2056.460950][ T4892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2056.485470][ T4892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2056.528043][ T4892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2056.545669][ T4892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2056.578755][ T4892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2056.610217][ T4892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2056.649164][ T4892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2056.762224][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35489'. [ 2056.835993][ T5617] Bluetooth: hci6: command tx timeout [ 2056.857762][ T5122] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 2056.881843][ T5117] team0: Port device team_slave_0 removed [ 2056.891629][ T5122] validate_nla: 62 callbacks suppressed [ 2056.891647][ T5122] netlink: 'syz.5.35492': attribute type 21 has an invalid length. [ 2056.920603][ T5122] netlink: 'syz.5.35492': attribute type 22 has an invalid length. [ 2056.956911][ T5122] netlink: 'syz.5.35492': attribute type 23 has an invalid length. [ 2056.996915][ T5122] netlink: 'syz.5.35492': attribute type 25 has an invalid length. [ 2057.009360][ T4892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.031604][ T5122] netlink: 96 bytes leftover after parsing attributes in process `syz.5.35492'. [ 2057.086921][ T4892] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.135338][T15747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.142889][T15747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.183689][T15747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.191000][T15747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.446108][ T5131] can: request_module (can-proto-0) failed. [ 2057.658546][ T5148] netlink: 'syz.2.35498': attribute type 1 has an invalid length. [ 2057.756865][ T5148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2057.820604][ T5143] bond4: (slave geneve2): making interface the new active one [ 2057.841935][ T5143] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 2058.155061][ T5169] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.35506'. [ 2058.394746][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35509'. [ 2058.499091][ T5176] syzkaller0: entered promiscuous mode [ 2058.525968][ T5176] syzkaller0: entered allmulticast mode [ 2058.671374][ T4892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2058.916442][ T5617] Bluetooth: hci6: command tx timeout [ 2059.167238][ T4892] veth0_vlan: entered promiscuous mode [ 2059.181937][ T4892] veth1_vlan: entered promiscuous mode [ 2059.218630][ T4892] veth0_macvtap: entered promiscuous mode [ 2059.229255][ T4892] veth1_macvtap: entered promiscuous mode [ 2059.259193][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.277917][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2059.294367][ T149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.312299][ T149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.337314][ T149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.360098][ T149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.430937][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.454181][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.512340][ T5764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.521776][ T5764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.589775][ T5205] netlink: 220 bytes leftover after parsing attributes in process `syz.6.35425'. [ 2059.599662][ T5205] netlink: 'syz.6.35425': attribute type 2 has an invalid length. [ 2060.022100][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35515'. [ 2060.224327][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.232091][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.302765][ T5235] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.35520'. [ 2060.505400][ T5215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2060.523547][ T5215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2060.631886][ T5247] siw: device registration error -23 [ 2060.648729][ T5247] sctp: [Deprecated]: syz.6.35521 (pid 5247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2060.648729][ T5247] Use struct sctp_sack_info instead [ 2060.817097][ T51] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2060.849840][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.871439][ T51] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2060.888882][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.958908][ T51] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2060.979103][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.004167][ T5250] mac80211_hwsim hwsim284 syzkaller0: entered promiscuous mode [ 2061.044592][ T5250] mac80211_hwsim hwsim284 syzkaller0: entered allmulticast mode [ 2061.082146][ T51] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2061.100993][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.161346][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35525'. [ 2061.185912][ T5259] netlink: 'syz.5.35525': attribute type 3 has an invalid length. [ 2061.193817][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35525'. [ 2061.203281][ T5259] netlink: 'syz.5.35525': attribute type 3 has an invalid length. [ 2061.235914][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35528'. [ 2061.236034][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35527'. [ 2061.246649][ T5266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2061.291940][ T5266] netlink: 'syz.4.35528': attribute type 4 has an invalid length. [ 2061.299925][ T5266] netlink: 152 bytes leftover after parsing attributes in process `syz.4.35528'. [ 2061.502240][ T5288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2061.639026][ T5292] rdma_rxe: rxe_newlink: failed to add lo [ 2061.754138][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35538'. [ 2061.931773][ T5309] bridge_slave_0: left allmulticast mode [ 2061.965736][ T5309] bridge_slave_0: left promiscuous mode [ 2062.001269][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35544'. [ 2062.018525][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.082528][ T5309] bridge_slave_1: left allmulticast mode [ 2062.110372][ T5309] bridge_slave_1: left promiscuous mode [ 2062.160271][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.199959][ T5309] bond0: (slave bond_slave_0): Releasing backup interface [ 2062.232649][ T5309] bond0: (slave bond_slave_1): Releasing backup interface [ 2062.288229][ T5309] team0: Port device team_slave_0 removed [ 2062.318774][ T5309] team0: Port device team_slave_1 removed [ 2062.340152][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2062.360630][ T5309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.387684][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2062.408898][ T5309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2062.429610][ T5309] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2063.233486][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.462450][ T5367] syzkaller1: entered promiscuous mode [ 2063.488895][ T5367] syzkaller1: entered allmulticast mode [ 2063.748603][ T5403] bridge2: entered promiscuous mode [ 2063.769635][ T5403] bridge2: entered allmulticast mode [ 2063.773840][ T5408] netlink: 'syz.1.35564': attribute type 12 has an invalid length. [ 2063.811777][ T5403] team0: Port device bridge2 added [ 2063.846831][ T5410] netlink: 'syz.4.35565': attribute type 10 has an invalid length. [ 2063.892569][ T5410] veth1_macvtap: left promiscuous mode [ 2063.950110][ T5414] netlink: 'syz.6.35566': attribute type 4 has an invalid length. [ 2064.177059][ T5425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.282162][ T5425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.418956][ T5435] netlink: 'syz.1.35572': attribute type 2 has an invalid length. [ 2064.420697][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.455295][ T5435] netlink: 'syz.1.35572': attribute type 2 has an invalid length. [ 2064.509797][ T5449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2064.547549][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2064.574889][ T5425] batman_adv: batadv0: Interface deactivated: wlan0 [ 2064.812413][ T5454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2065.048574][ T5476] sch_fq: defrate 0 ignored. [ 2065.196985][ T5480] __nla_validate_parse: 6 callbacks suppressed [ 2065.197006][ T5480] netlink: 28 bytes leftover after parsing attributes in process `syz.6.35583'. [ 2065.298578][ T5491] mac80211_hwsim hwsim284 syzkaller0: left promiscuous mode [ 2065.306316][ T5491] mac80211_hwsim hwsim284 syzkaller0: left allmulticast mode [ 2065.521268][ T5500] ip6t_srh: unknown srh invflags 4000 [ 2065.737085][ T5515] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.35592'. [ 2065.946421][ T5523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.055837][ T5524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.176370][ T5537] mac80211_hwsim hwsim284 syzkaller0: entered promiscuous mode [ 2066.187942][ T5537] mac80211_hwsim hwsim284 syzkaller0: entered allmulticast mode [ 2066.285161][ T5547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.354734][ T5547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.459161][ T5547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.599082][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35606'. [ 2066.671608][ T5561] team0: Port device team_slave_0 removed [ 2066.864941][ T5565] netlink: 132 bytes leftover after parsing attributes in process `syz.5.35608'. [ 2066.874623][ T5566] netlink: 132 bytes leftover after parsing attributes in process `syz.5.35608'. [ 2067.302643][ T5572] tipc: Failed to remove unknown binding: 66,0,0/0:3181440543/3181440544 [ 2067.344874][ T5572] tipc: Failed to remove unknown binding: 66,0,0/0:3181440543/3181440544 [ 2067.408543][ T5572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35611'. [ 2067.832690][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35620'. [ 2068.121039][ T5638] netlink: 'syz.2.35626': attribute type 10 has an invalid length. [ 2068.215314][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35627'. [ 2068.232443][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35626'. [ 2068.255581][ T5646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2068.359410][ T5652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2068.395248][ T5654] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2068.499565][ T5656] netlink: 'syz.4.35634': attribute type 20 has an invalid length. [ 2068.548889][ T5656] IPv6: NLM_F_CREATE should be specified when creating new route [ 2068.654543][ T5664] macvtap1: entered promiscuous mode [ 2068.665464][ T5664] vlan0: entered promiscuous mode [ 2068.678614][ T5664] vlan0: left promiscuous mode [ 2068.698504][ T5677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2068.807496][ T5677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2069.021241][ T5660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2069.051560][ T5694] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 2069.120707][ T29] audit: type=1804 audit(1782304575.565:41): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.35643" name="/newroot/277/cgroup.controllers" dev="tmpfs" ino=1422 res=1 errno=0 [ 2069.164757][T29975] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.192482][T29975] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.218686][T29975] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.227946][ T29] audit: type=1800 audit(1782304575.565:42): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.35643" name="cgroup.controllers" dev="tmpfs" ino=1422 res=0 errno=0 [ 2069.259177][T29975] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2069.422137][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35645'. [ 2069.558101][ T5744] mac80211_hwsim hwsim294 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2070.334733][ T5788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2070.798160][ T5820] syzkaller0: entered promiscuous mode [ 2070.819041][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2070.856460][ T5820] syzkaller0: entered allmulticast mode [ 2070.899775][ T5820] netlink: 'syz.4.35668': attribute type 83 has an invalid length. [ 2071.370335][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35677'. [ 2071.590640][ T5873] netlink: 128 bytes leftover after parsing attributes in process `syz.5.35684'. [ 2071.858418][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35686'. [ 2071.930185][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35686'. [ 2071.992614][ T5905] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2072.215994][ T5915] syzkaller0: entered promiscuous mode [ 2072.238441][ T5915] syzkaller0: entered allmulticast mode [ 2072.352320][ T5928] FAULT_INJECTION: forcing a failure. [ 2072.352320][ T5928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2072.386662][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.6.35695 Not tainted syzkaller #0 PREEMPT(full) [ 2072.386690][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2072.386702][ T5928] Call Trace: [ 2072.386710][ T5928] [ 2072.386718][ T5928] dump_stack_lvl+0xe8/0x150 [ 2072.386744][ T5928] should_fail_ex+0x40c/0x560 [ 2072.386766][ T5928] prepare_alloc_pages+0x230/0x650 [ 2072.386797][ T5928] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2072.386824][ T5928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2072.386853][ T5928] ? __pfx_policy_nodemask+0x10/0x10 [ 2072.386885][ T5928] alloc_pages_mpol+0x212/0x380 [ 2072.386913][ T5928] folio_alloc_mpol_noprof+0x39/0x160 [ 2072.386942][ T5928] vma_alloc_folio_noprof+0xe1/0x1e0 [ 2072.386970][ T5928] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2072.386997][ T5928] ? __pte_offset_map+0x29/0x240 [ 2072.387018][ T5928] ? lock_acquire+0x5f/0x350 [ 2072.387045][ T5928] do_pte_missing+0x1750/0x3540 [ 2072.387079][ T5928] handle_mm_fault+0x1b36/0x3080 [ 2072.387107][ T5928] ? handle_mm_fault+0xec/0x3080 [ 2072.387131][ T5928] ? __pfx_handle_mm_fault+0x10/0x10 [ 2072.387149][ T5928] ? lock_vma_under_rcu+0x45a/0x500 [ 2072.387179][ T5928] ? rcu_is_watching+0x15/0xb0 [ 2072.387199][ T5928] ? rcu_is_watching+0x15/0xb0 [ 2072.387219][ T5928] do_user_addr_fault+0xa4d/0x1340 [ 2072.387243][ T5928] ? trace_page_fault_user+0x84/0x1e0 [ 2072.387262][ T5928] exc_page_fault+0x6a/0xc0 [ 2072.387287][ T5928] asm_exc_page_fault+0x26/0x30 [ 2072.387306][ T5928] RIP: 0033:0x7f13d345e8d1 [ 2072.387324][ T5928] Code: 00 31 c0 e8 51 3b ff ff 48 8d 3d a5 3b 1d 00 e8 d5 3c ff ff 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 18 48 89 74 24 10 48 89 54 24 08 4c 8b 7c 24 18 4c 8b [ 2072.387341][ T5928] RSP: 002b:00007f13d4505f70 EFLAGS: 00010202 [ 2072.387359][ T5928] RAX: 00007f13d345e8c0 RBX: 00007f13d3815fa0 RCX: 0000000000000000 [ 2072.387372][ T5928] RDX: 000000000000002f RSI: 0000200000000300 RDI: 00002000000002c0 [ 2072.387385][ T5928] RBP: 00007f13d4507090 R08: 0000000000000000 R09: 0000000000000000 [ 2072.387397][ T5928] R10: 00002000000002c0 R11: 000000000000002f R12: 0000000000000001 [ 2072.387409][ T5928] R13: 00007f13d3816038 R14: 00007f13d3815fa0 R15: 00007fff711e2a98 [ 2072.387433][ T5928] [ 2072.387533][ T5928] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2072.596952][ T5930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2072.950411][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35700'. [ 2073.208620][ T5969] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2073.447131][ T5980] netlink: 'syz.5.35708': attribute type 1 has an invalid length. [ 2073.762291][ T6007] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 2073.772460][ T6007] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 2073.867026][ T6004] IPVS: persistence engine module ip_vs_pe_À not found [ 2074.057453][ T6020] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2074.199283][ T6022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2074.298589][ T6029] netlink: 'syz.6.35724': attribute type 1 has an invalid length. [ 2074.320851][ T6029] netlink: 228 bytes leftover after parsing attributes in process `syz.6.35724'. [ 2074.496424][ T6037] netlink: 'syz.2.35726': attribute type 2 has an invalid length. [ 2074.585573][ T6042] netlink: 6 bytes leftover after parsing attributes in process `syz.4.35725'. [ 2074.721012][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35730'. [ 2074.841283][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35732'. [ 2075.059645][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.132186][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2075.229555][ T6090] IPv6: addrconf: prefix option has invalid lifetime [ 2075.264472][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35742'. [ 2075.275607][ T6095] tipc: Started in network mode [ 2075.290895][ T6095] tipc: Node identity ac14142f, cluster identity 4711 [ 2075.304324][ T6095] tipc: Enabling of bearer rejected, failed to enable media [ 2075.324156][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 2075.415799][ T6103] syzkaller0: entered promiscuous mode [ 2075.421541][ T6103] syzkaller0: entered allmulticast mode [ 2076.556561][ T6154] netlink: set zone limit has 4 unknown bytes [ 2077.147387][ T6149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2077.157119][ T6149] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2077.179279][ T6149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2077.187734][ T6149] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2077.198597][ T6149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2077.204815][ T6149] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2077.215509][ T6149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2077.221648][ T6149] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2077.238688][ T6149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2077.244808][ T6149] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2077.256860][ T6149] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2077.262833][ T6149] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2077.273708][ T6149] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2077.279741][ T6149] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2077.596784][ T6192] syzkaller0: entered promiscuous mode [ 2077.611660][ T6192] syzkaller0: entered allmulticast mode [ 2077.619220][ T6189] __nla_validate_parse: 5 callbacks suppressed [ 2077.619240][ T6189] netlink: 156 bytes leftover after parsing attributes in process `syz.6.35766'. [ 2077.686151][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35769'. [ 2077.731598][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35769'. [ 2077.761741][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35770'. [ 2077.781263][ T6202] netlink: 'syz.4.35770': attribute type 32 has an invalid length. [ 2077.799828][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35770'. [ 2077.849103][ T6202] bond7: option coupled_control: invalid value (192) [ 2077.861066][ T6202] bond7 (unregistering): Released all slaves [ 2077.974065][ T6214] netlink: 'syz.2.35771': attribute type 17 has an invalid length. [ 2077.994208][ T6204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2077.996400][ T6211] netlink: 'syz.2.35771': attribute type 17 has an invalid length. [ 2078.015861][ T6215] netlink: 'syz.5.35772': attribute type 1 has an invalid length. [ 2078.427338][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35779'. [ 2078.524405][ T6249] netlink: 144 bytes leftover after parsing attributes in process `syz.6.35783'. [ 2078.534157][ T6247] netlink: 'syz.2.35781': attribute type 1 has an invalid length. [ 2078.542107][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35781'. [ 2078.692025][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.699609][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.966604][ T6253] team_slave_0: left promiscuous mode [ 2079.014369][ T6253] team_slave_0: left allmulticast mode [ 2079.112449][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2079.140095][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2079.282561][ T6253] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2079.324917][ T6253] gretap1: left promiscuous mode [ 2079.485934][ T5764] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.520431][ T5764] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.577679][ T5764] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.616036][ T5764] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.629378][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.35788'. [ 2079.637771][ T5764] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.668291][ T5764] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.681782][ T5764] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.737614][ T5764] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.013779][ T6302] bridge1: entered promiscuous mode [ 2080.031924][ T6302] bridge1: entered allmulticast mode [ 2080.238006][ T6313] syzkaller0: entered promiscuous mode [ 2080.260862][ T6313] syzkaller0: entered allmulticast mode [ 2080.350756][ T6319] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2080.477017][ T6321] macvtap1: entered promiscuous mode [ 2080.511369][ T6321] vlan0: entered promiscuous mode [ 2080.539829][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.599246][ T6329] netlink: 'syz.5.35800': attribute type 11 has an invalid length. [ 2080.599282][ T6330] netlink: 'syz.5.35800': attribute type 11 has an invalid length. [ 2080.620848][ T6324] xt_CT: No such helper "snmp_trap" [ 2080.632846][ T6321] vlan0: left promiscuous mode [ 2080.658420][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.440284][T15747] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.483754][T15747] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.515272][T15747] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.544001][T15747] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.571225][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35807'. [ 2081.674473][ T6371] netlink: 'syz.5.35808': attribute type 3 has an invalid length. [ 2081.736525][ T6373] syzkaller1: entered promiscuous mode [ 2081.746674][ T6373] syzkaller1: entered allmulticast mode [ 2081.894369][ T6378] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2082.514194][ T6405] sctp: [Deprecated]: syz.2.35819 (pid 6405) Use of int in max_burst socket option deprecated. [ 2082.514194][ T6405] Use struct sctp_assoc_value instead [ 2082.608447][ T6399] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 2082.664672][ T6399] netlink: 'syz.2.35819': attribute type 6 has an invalid length. [ 2082.688062][ T6399] __nla_validate_parse: 3 callbacks suppressed [ 2082.688082][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35819'. [ 2082.923242][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.35825'. [ 2082.964152][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35827'. [ 2083.329089][ T6456] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.35834'. [ 2083.556846][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.35841'. [ 2083.813841][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.35845'. [ 2083.850020][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.35845'. [ 2083.890078][ T6491] netlink: 'syz.5.35845': attribute type 2 has an invalid length. [ 2083.906530][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2083.997813][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.021822][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35850'. [ 2084.037544][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.250526][ T6519] netlink: 348 bytes leftover after parsing attributes in process `syz.4.35855'. [ 2084.396190][ T6528] syzkaller0: entered promiscuous mode [ 2084.401924][ T6528] syzkaller0: entered allmulticast mode [ 2084.628343][ T6535] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 2084.845499][ T6545] netlink: 'syz.6.35862': attribute type 1 has an invalid length. [ 2084.918708][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2084.944645][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35863'. [ 2084.954680][ T6545] bond1: (slave veth0_to_bond): making interface the new active one [ 2084.965437][ T6545] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2085.011486][ T6545] bond1: entered promiscuous mode [ 2085.025326][ T6545] veth0_to_bond: entered promiscuous mode [ 2085.032290][ T6545] bond1: entered allmulticast mode [ 2085.046350][ T6545] veth0_to_bond: entered allmulticast mode [ 2085.470519][ T6585] 8021q: VLANs not supported on lo [ 2085.701001][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2085.789240][ T6599] syzkaller0: entered promiscuous mode [ 2085.807157][ T6599] syzkaller0: entered allmulticast mode [ 2085.838472][ T6599] tipc: Started in network mode [ 2085.856021][ T6599] tipc: Node identity c6b20aca7a5e, cluster identity 4711 [ 2085.885721][ T6599] tipc: Enabled bearer , priority 5 [ 2085.921330][ T6598] tipc: Resetting bearer [ 2085.969369][ T6598] tipc: Disabling bearer [ 2086.608874][ T6633] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 2086.893393][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.967274][ T6652] bridge_slave_1 (unregistering): left allmulticast mode [ 2087.023860][ T6652] bridge_slave_1 (unregistering): left promiscuous mode [ 2087.066244][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.145867][ T6661] bridge_slave_1: left allmulticast mode [ 2087.169526][ T6661] bridge_slave_1: left promiscuous mode [ 2087.192946][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.247466][ T6661] bridge_slave_0: left allmulticast mode [ 2087.299572][ T6661] bridge_slave_0: left promiscuous mode [ 2087.342104][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2087.455785][ T6672] syzkaller0: entered promiscuous mode [ 2087.485760][ T6672] syzkaller0: entered allmulticast mode [ 2087.522557][ T6665] tipc: Enabled bearer , priority 15 [ 2087.548747][ T6655] tipc: Resetting bearer [ 2087.574942][ T6655] tipc: Disabling bearer [ 2087.726106][ T6679] vlan1: entered allmulticast mode [ 2087.748922][ T6682] __nla_validate_parse: 6 callbacks suppressed [ 2087.748943][ T6682] netlink: 48 bytes leftover after parsing attributes in process `syz.6.35900'. [ 2087.770809][ T6682] netlink: 48 bytes leftover after parsing attributes in process `syz.6.35900'. [ 2087.785967][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35899'. [ 2087.901863][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35901'. [ 2087.996551][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35903'. [ 2088.026202][ T6692] block nbd0: Unsupported socket: should be TCP or UNIX. [ 2088.070158][ T6695] tunl0: entered promiscuous mode [ 2088.091069][ T6695] netlink: 'syz.6.35904': attribute type 3 has an invalid length. [ 2088.124915][ T6695] netlink: 9 bytes leftover after parsing attributes in process `syz.6.35904'. [ 2088.298463][ T6707] netlink: 'syz.6.35907': attribute type 1 has an invalid length. [ 2088.462001][ T6707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2088.591137][ T6709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2088.605099][ T6709] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 2088.667331][ T6709] bond2: (slave gre1): Error -95 calling set_mac_address [ 2088.766450][ T6711] gretap1: entered promiscuous mode [ 2088.789239][ T6711] bond2: (slave gretap1): making interface the new active one [ 2088.800539][ T6711] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2088.824253][ T6715] syzkaller0: entered promiscuous mode [ 2088.844347][ T6715] syzkaller0: entered allmulticast mode [ 2088.910742][ T6707] macvlan2: entered promiscuous mode [ 2088.918477][ T6707] macvlan2: entered allmulticast mode [ 2088.935902][ T6707] bond2: entered promiscuous mode [ 2088.940751][ T6728] netlink: 48 bytes leftover after parsing attributes in process `syz.5.35912'. [ 2088.945541][ T6707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2088.961761][ T6707] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2088.977992][ T6707] bond2: left promiscuous mode [ 2089.023373][ T6728] netlink: 48 bytes leftover after parsing attributes in process `syz.5.35912'. [ 2089.131572][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35913'. [ 2089.769147][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.35921'. [ 2089.810789][ T6770] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2090.009509][ T6777] netlink: 'syz.6.35925': attribute type 1 has an invalid length. [ 2090.140363][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2090.150464][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2090.150852][ T6777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2090.168423][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2090.177948][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2090.189001][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2090.266266][ T6785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2090.307148][ T6785] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 2090.350446][ T6785] bond3: (slave gre1): Error -95 calling set_mac_address [ 2090.440379][ T6777] macvlan2: entered promiscuous mode [ 2090.449967][ T7973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2090.460848][ T7973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2090.467455][ T6777] macvlan2: entered allmulticast mode [ 2090.470275][ T7973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2090.482936][ T7973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2090.496786][ T7973] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2090.552304][ T6777] bond3: entered promiscuous mode [ 2090.559935][ T6777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2090.584111][ T6777] bond3: left promiscuous mode [ 2090.610343][ T6809] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 2090.982451][ T6823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2090.989773][ T6823] IPv6: NLM_F_CREATE should be set when creating new route [ 2090.997581][ T6823] IPv6: NLM_F_CREATE should be set when creating new route [ 2091.071379][ T6823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2091.559487][ T6792] lo speed is unknown, defaulting to 1000 [ 2091.659272][ T6855] syzkaller0: entered promiscuous mode [ 2091.682242][ T6855] syzkaller0: entered allmulticast mode [ 2091.829822][ T6792] xfrm0 speed is unknown, defaulting to 1000 [ 2092.138301][ T6792] lo speed is unknown, defaulting to 1000 [ 2092.157546][ T6792] vxcan1 speed is unknown, defaulting to 1000 [ 2092.415596][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2092.431198][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2092.449842][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2092.457499][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2092.593959][ T7973] Bluetooth: hci7: command tx timeout [ 2092.785927][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.793255][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.811727][ T6792] bridge_slave_0: entered allmulticast mode [ 2092.820415][ T6792] bridge_slave_0: entered promiscuous mode [ 2092.829165][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.836351][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.843880][ T6792] bridge_slave_1: entered allmulticast mode [ 2092.851534][ T6792] bridge_slave_1: entered promiscuous mode [ 2092.881267][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.894082][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.935664][ T6792] team0: Port device team_slave_0 added [ 2092.944904][ T6792] team0: Port device team_slave_1 added [ 2092.970615][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2092.977699][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2093.003951][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2093.027901][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2093.036615][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2093.108571][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2093.180902][ T6792] hsr_slave_0: entered promiscuous mode [ 2093.189256][ T6792] hsr_slave_1: entered promiscuous mode [ 2093.196890][ T6792] debugfs: 'hsr0' already exists in 'hsr' [ 2093.202760][ T6792] Cannot create hsr debugfs directory [ 2094.167262][ T6836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2094.196824][ T6792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2094.244405][ T6792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2094.266938][ T6792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2094.314148][ T6792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2094.351997][ T6792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2094.390070][ T6792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2094.418861][ T6792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2094.469294][ T6792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2094.487693][ T6904] netlink: 'syz.2.35958': attribute type 1 has an invalid length. [ 2094.559038][ T6899] syzkaller0: entered promiscuous mode [ 2094.588355][ T6899] syzkaller0: entered allmulticast mode [ 2094.641871][ T6909] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 2094.676280][ T7973] Bluetooth: hci7: command tx timeout [ 2094.680422][ T6899] tipc: Enabled bearer , priority 10 [ 2094.810188][ T6898] tipc: Resetting bearer [ 2094.866674][ T6898] tipc: Disabling bearer [ 2095.105044][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.158280][ T6939] __nla_validate_parse: 8 callbacks suppressed [ 2095.158317][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35968'. [ 2095.252332][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35968'. [ 2095.400084][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 2095.439367][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 2095.446594][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2095.515165][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.522362][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2095.650259][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35972'. [ 2095.678505][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.35972'. [ 2096.436423][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2096.478274][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35976'. [ 2096.497064][ T6986] netlink: 'syz.2.35976': attribute type 16 has an invalid length. [ 2096.520806][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35976'. [ 2096.542250][ T6988] netlink: 6 bytes leftover after parsing attributes in process `syz.2.35976'. [ 2096.787113][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35980'. [ 2096.829482][ T6792] veth0_vlan: entered promiscuous mode [ 2096.835466][ T7973] Bluetooth: hci7: command tx timeout [ 2096.881200][ T6792] veth1_vlan: entered promiscuous mode [ 2097.000370][ T6792] veth0_macvtap: entered promiscuous mode [ 2097.022928][ T6792] veth1_macvtap: entered promiscuous mode [ 2097.067873][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2097.095227][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2097.105617][ T7010] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.35982'. [ 2097.112211][ T6615] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.145489][ T6615] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.161555][ T6615] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.190347][ T5764] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.386174][ T7013] netlink: 240 bytes leftover after parsing attributes in process `syz.5.35982'. [ 2097.981137][ T6931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2098.204087][ T7017] batadv0: entered promiscuous mode [ 2098.243136][ T7017] macsec1: entered promiscuous mode [ 2098.255913][ T7017] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2098.277060][ T7017] batadv0: left promiscuous mode [ 2098.361540][ T5764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.404137][ T5764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.549819][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2098.569931][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.630248][ T7040] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2098.917792][ T7973] Bluetooth: hci7: command tx timeout [ 2099.259559][ T7069] vlan2: entered promiscuous mode [ 2099.264835][ T7069] hsr0: entered promiscuous mode [ 2099.270395][ T7069] vlan2: entered allmulticast mode [ 2099.272498][ T29] audit: type=1800 audit(1782304605.715:43): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.36001" name="memory.events" dev="tmpfs" ino=1829 res=0 errno=0 [ 2099.275536][ T7069] hsr0: entered allmulticast mode [ 2099.275554][ T7069] hsr_slave_0: entered allmulticast mode [ 2099.275568][ T7069] hsr_slave_1: entered allmulticast mode [ 2099.511248][ T7088] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2099.782174][ T7102] openvswitch: netlink: Flow actions attr not present in new flow. [ 2099.977710][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880ab4fb800: rx timeout, send abort [ 2099.990453][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880ab4fb800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2100.008309][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888076043800: rx timeout, send abort [ 2100.020110][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888076043800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2100.105776][ T7117] syzkaller0: entered promiscuous mode [ 2100.112431][ T7117] syzkaller0: entered allmulticast mode [ 2100.145873][ T7117] bridge_slave_1: entered allmulticast mode [ 2100.190364][ T7121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2100.420524][ T7132] __nla_validate_parse: 4 callbacks suppressed [ 2100.420545][ T7132] netlink: 992 bytes leftover after parsing attributes in process `syz.6.36016'. [ 2100.626941][ T7143] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2100.820345][ T7147] netlink: 'syz.6.36020': attribute type 1 has an invalid length. [ 2100.860969][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36022'. [ 2100.932840][ T7158] netlink: 'syz.7.36025': attribute type 1 has an invalid length. [ 2100.942328][ T7158] netlink: 224 bytes leftover after parsing attributes in process `syz.7.36025'. [ 2101.111945][ T7164] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2101.128419][ T7164] bond4 (unregistering): Released all slaves [ 2101.258570][ T7172] netlink: 'syz.4.36028': attribute type 7 has an invalid length. [ 2101.279226][ T7172] netlink: 'syz.4.36028': attribute type 4 has an invalid length. [ 2101.299966][ T7172] netlink: 'syz.4.36028': attribute type 4 has an invalid length. [ 2101.768561][ T7185] syzkaller0: entered promiscuous mode [ 2101.776392][ T7185] syzkaller0: entered allmulticast mode [ 2101.817941][ T7185] netlink: 144 bytes leftover after parsing attributes in process `syz.4.36030'. [ 2102.135502][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888081fe0400: rx timeout, send abort [ 2102.145383][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888081fe0400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2102.160955][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888081fe3c00: rx timeout, send abort [ 2102.170754][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888081fe3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2102.466425][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.36041'. [ 2102.919697][ T7240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.36045'. [ 2103.078469][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36048'. [ 2103.382290][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36052'. [ 2103.391699][ T7263] netlink: 'syz.4.36052': attribute type 1 has an invalid length. [ 2103.423919][ T7263] netlink: 'syz.4.36052': attribute type 2 has an invalid length. [ 2103.671536][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.5.36056'. [ 2103.798191][ T7276] syz_tun: entered allmulticast mode [ 2103.866873][ T7276] dvmrp8: entered allmulticast mode [ 2103.891868][ T7283] syzkaller0: entered promiscuous mode [ 2103.898660][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36060'. [ 2103.956939][ T7283] syzkaller0: entered allmulticast mode [ 2104.070168][ T7292] tipc: Enabled bearer , priority 0 [ 2104.124917][ T7282] tipc: Resetting bearer [ 2104.179147][ T7297] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2104.199797][ T7282] tipc: Disabling bearer [ 2104.256854][ T7305] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 2104.283030][ T7304] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 2104.386367][ T7310] syzkaller1: entered promiscuous mode [ 2104.392252][ T7310] syzkaller1: entered allmulticast mode [ 2104.409548][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88809376bc00: rx timeout, send abort [ 2104.418022][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88809c396400: rx timeout, send abort [ 2104.427864][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88809376bc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2104.438430][ T7312] netlink: set zone limit has 4 unknown bytes [ 2104.442668][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88809c396400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2104.483739][ T7312] netlink: zone id is out of range [ 2104.507414][ T7312] netlink: zone id is out of range [ 2104.519250][ T7312] netlink: zone id is out of range [ 2104.531116][ T7312] netlink: zone id is out of range [ 2104.584926][ T7312] netlink: zone id is out of range [ 2104.613594][ T7312] netlink: zone id is out of range [ 2104.637378][ T7314] netlink: 'syz.5.36069': attribute type 10 has an invalid length. [ 2104.639191][ T7312] netlink: zone id is out of range [ 2104.675961][ T7319] veth1_virt_wifi: entered allmulticast mode [ 2104.745451][ T7322] syzkaller1: entered promiscuous mode [ 2104.776848][ T7322] syzkaller1: entered allmulticast mode [ 2104.959123][ T7340] FAULT_INJECTION: forcing a failure. [ 2104.959123][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.024158][ T7340] CPU: 1 UID: 0 PID: 7340 Comm: syz.5.36075 Not tainted syzkaller #0 PREEMPT(full) [ 2105.024186][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2105.024197][ T7340] Call Trace: [ 2105.024206][ T7340] [ 2105.024214][ T7340] dump_stack_lvl+0xe8/0x150 [ 2105.024242][ T7340] should_fail_ex+0x40c/0x560 [ 2105.024265][ T7340] _copy_from_user+0x2d/0xb0 [ 2105.024290][ T7340] ___sys_sendmsg+0x1c6/0x360 [ 2105.024315][ T7340] ? rcu_is_watching+0x15/0xb0 [ 2105.024332][ T7340] ? get_pid_task+0x20/0x1f0 [ 2105.024351][ T7340] ? __pfx____sys_sendmsg+0x10/0x10 [ 2105.024381][ T7340] ? rcu_is_watching+0x15/0xb0 [ 2105.024413][ T7340] ? __fget_files+0x2a/0x420 [ 2105.024435][ T7340] ? __fget_files+0x3a2/0x420 [ 2105.024460][ T7340] __x64_sys_sendmsg+0x1b1/0x290 [ 2105.024491][ T7340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2105.024525][ T7340] ? rcu_is_watching+0x15/0xb0 [ 2105.024544][ T7340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.024564][ T7340] do_syscall_64+0x174/0x580 [ 2105.024590][ T7340] ? clear_bhb_loop+0x40/0x90 [ 2105.024612][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.024631][ T7340] RIP: 0033:0x7f24d799ce59 [ 2105.024649][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2105.024667][ T7340] RSP: 002b:00007f24d8786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2105.024688][ T7340] RAX: ffffffffffffffda RBX: 00007f24d7c15fa0 RCX: 00007f24d799ce59 [ 2105.024702][ T7340] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 2105.024715][ T7340] RBP: 00007f24d8786090 R08: 0000000000000000 R09: 0000000000000000 [ 2105.024728][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2105.024740][ T7340] R13: 00007f24d7c16038 R14: 00007f24d7c15fa0 R15: 00007fff483af4c8 [ 2105.024761][ T7340] [ 2105.422789][ T7343] syzkaller0: entered promiscuous mode [ 2105.439761][ T7359] netlink: 'syz.2.36083': attribute type 1 has an invalid length. [ 2105.452067][ T7354] __nla_validate_parse: 7 callbacks suppressed [ 2105.452103][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.36079'. [ 2105.457502][ T7343] syzkaller0: entered allmulticast mode [ 2105.501111][ T7363] nbd: couldn't find device at index 2958377 [ 2105.512272][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36085'. [ 2105.636491][ T7362] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2105.671506][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36083'. [ 2105.683783][ T7343] tipc: Enabled bearer , priority 0 [ 2105.706305][ T7363] team0: Failed to send options change via netlink (err -105) [ 2105.731114][ T7363] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 2105.742530][ T7363] team0: Port device team_slave_0 removed [ 2105.769463][ T7372] netlink: 'syz.5.36086': attribute type 21 has an invalid length. [ 2105.779225][ T7372] netlink: 128 bytes leftover after parsing attributes in process `syz.5.36086'. [ 2105.791708][ T7359] veth3: entered promiscuous mode [ 2105.806915][ T7359] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 2105.816727][ T7342] tipc: Resetting bearer [ 2105.823747][ T7366] netlink: 'syz.5.36086': attribute type 21 has an invalid length. [ 2105.843493][ T7366] netlink: 128 bytes leftover after parsing attributes in process `syz.5.36086'. [ 2105.856240][ T7342] tipc: Disabling bearer [ 2105.870060][T29975] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2105.875255][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.36086'. [ 2105.881760][ T7367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2105.975676][ T7372] netlink: 'syz.5.36086': attribute type 4 has an invalid length. [ 2106.011208][T15747] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2106.012188][ T7372] netlink: 'syz.5.36086': attribute type 5 has an invalid length. [ 2106.030045][ T7372] netlink: 3 bytes leftover after parsing attributes in process `syz.5.36086'. [ 2106.052152][ T7366] netlink: 'syz.5.36086': attribute type 4 has an invalid length. [ 2106.086518][ T7366] netlink: 'syz.5.36086': attribute type 5 has an invalid length. [ 2106.096634][ T7366] netlink: 3 bytes leftover after parsing attributes in process `syz.5.36086'. [ 2106.182439][ T7396] FAULT_INJECTION: forcing a failure. [ 2106.182439][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.209917][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.2.36092 Not tainted syzkaller #0 PREEMPT(full) [ 2106.209945][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2106.209955][ T7396] Call Trace: [ 2106.209963][ T7396] [ 2106.209971][ T7396] dump_stack_lvl+0xe8/0x150 [ 2106.210002][ T7396] should_fail_ex+0x40c/0x560 [ 2106.210027][ T7396] should_failslab+0xa8/0x100 [ 2106.210055][ T7396] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 2106.210091][ T7396] ? rcu_is_watching+0x15/0xb0 [ 2106.210113][ T7396] ? __alloc_skb+0x1d7/0x7a0 [ 2106.210137][ T7396] ? trace_irq_enable+0x3b/0x140 [ 2106.210166][ T7396] __alloc_skb+0x1d7/0x7a0 [ 2106.210189][ T7396] netlink_sendmsg+0x5d4/0xb40 [ 2106.210217][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2106.210243][ T7396] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2106.210264][ T7396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2106.210289][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2106.210327][ T7396] ____sys_sendmsg+0x9b9/0xa20 [ 2106.210355][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2106.210381][ T7396] ? lock_release+0x4b/0x3c0 [ 2106.210410][ T7396] ? import_iovec+0x73/0xa0 [ 2106.210433][ T7396] ___sys_sendmsg+0x2a5/0x360 [ 2106.210456][ T7396] ? rcu_is_watching+0x15/0xb0 [ 2106.210471][ T7396] ? get_pid_task+0x20/0x1f0 [ 2106.210491][ T7396] ? __pfx____sys_sendmsg+0x10/0x10 [ 2106.210518][ T7396] ? rcu_is_watching+0x15/0xb0 [ 2106.210550][ T7396] ? __fget_files+0x2a/0x420 [ 2106.210572][ T7396] ? __fget_files+0x3a2/0x420 [ 2106.210596][ T7396] __x64_sys_sendmsg+0x1b1/0x290 [ 2106.210623][ T7396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2106.210655][ T7396] ? rcu_is_watching+0x15/0xb0 [ 2106.210673][ T7396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.210693][ T7396] do_syscall_64+0x174/0x580 [ 2106.210719][ T7396] ? trace_irq_disable+0x3b/0x140 [ 2106.210742][ T7396] ? clear_bhb_loop+0x40/0x90 [ 2106.210761][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.210779][ T7396] RIP: 0033:0x7fe6b319ce59 [ 2106.210798][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2106.210814][ T7396] RSP: 002b:00007fe6b3ff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2106.210835][ T7396] RAX: ffffffffffffffda RBX: 00007fe6b3416090 RCX: 00007fe6b319ce59 [ 2106.210849][ T7396] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 2106.210861][ T7396] RBP: 00007fe6b3ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 2106.210873][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2106.210884][ T7396] R13: 00007fe6b3416128 R14: 00007fe6b3416090 R15: 00007fffacc5b118 [ 2106.210903][ T7396] [ 2106.237244][ T7398] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.36091'. [ 2106.264118][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.36093'. [ 2106.269553][ T7398] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2108.946319][ T7377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2109.169993][ T7413] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2109.195139][T26093] IPVS: starting estimator thread 0... [ 2109.307365][ T7418] IPVS: using max 40 ests per chain, 96000 per kthread [ 2109.419357][ T7426] syzkaller0: entered promiscuous mode [ 2109.462949][ T7426] syzkaller0: entered allmulticast mode [ 2109.530612][ T7436] tipc: Enabled bearer , priority 0 [ 2109.591777][ T7424] tipc: Resetting bearer [ 2109.621464][ T7445] netlink: 'syz.7.36106': attribute type 1 has an invalid length. [ 2109.776526][ T7424] tipc: Disabling bearer [ 2110.174579][ T7466] netlink: 'syz.5.36111': attribute type 12 has an invalid length. [ 2110.267666][ T7468] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2110.821614][ T7480] netlink: get zone limit has 4 unknown bytes [ 2110.905724][ T7481] netlink: set zone limit has 4 unknown bytes [ 2110.930190][ T7481] gre2: entered promiscuous mode [ 2112.553271][ T7438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2112.752209][ T7485] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004 [ 2112.808106][ T7488] syzkaller0: entered promiscuous mode [ 2112.823203][ T7488] syzkaller0: entered allmulticast mode [ 2112.890438][ T7488] tipc: Started in network mode [ 2112.926715][ T7488] tipc: Node identity 36a679a31077, cluster identity 4711 [ 2112.947356][ T7498] __nla_validate_parse: 2 callbacks suppressed [ 2112.947377][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.36122'. [ 2112.967797][ T7500] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2112.968716][ T7488] tipc: Enabled bearer , priority 0 [ 2113.015454][ T7487] tipc: Resetting bearer [ 2113.031219][ T7487] tipc: Disabling bearer [ 2113.091920][ T7502] netlink: 56 bytes leftover after parsing attributes in process `syz.6.36124'. [ 2113.129942][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2113.172534][ T7506] ip6tnl0: mtu less than device minimum [ 2113.244475][ T7510] syzkaller1: entered promiscuous mode [ 2113.257837][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2113.269870][ T7510] syzkaller1: entered allmulticast mode [ 2113.285416][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2113.421795][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36129'. [ 2113.584005][ T7529] IPv6: addrconf: prefix option has invalid lifetime [ 2113.591256][ T7529] IPv6: addrconf: prefix option has invalid lifetime [ 2113.809393][ T7541] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2113.985297][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.36139'. [ 2114.019725][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.36139'. [ 2114.290122][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.468337][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.36143'. [ 2114.710205][ T7555] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2115.038361][ T7593] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2115.652526][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36157'. [ 2115.682128][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36157'. [ 2116.229878][ T7621] bridge_slave_1: left allmulticast mode [ 2116.535651][ T7621] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2116.951678][ T7658] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2117.254193][ T7672] x_tables: duplicate underflow at hook 2 [ 2117.466363][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36172'. [ 2117.551289][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.574858][ T7695] netlink: 240 bytes leftover after parsing attributes in process `syz.4.36175'. [ 2117.670882][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.700298][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2118.096099][ T7722] syzkaller0: entered promiscuous mode [ 2118.122751][ T7722] syzkaller0: entered allmulticast mode [ 2118.344982][ T7737] __nla_validate_parse: 1 callbacks suppressed [ 2118.345005][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36185'. [ 2118.401484][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36186'. [ 2118.418552][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36186'. [ 2118.538898][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.36187'. [ 2118.970173][ T7759] syzkaller0: entered promiscuous mode [ 2118.987809][ T7759] syzkaller0: entered allmulticast mode [ 2119.026288][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.7.36192'. [ 2119.790553][ T7790] netlink: 33 bytes leftover after parsing attributes in process `syz.4.36198'. [ 2119.826208][ T7790] netlink: 140 bytes leftover after parsing attributes in process `syz.4.36198'. [ 2119.947552][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36199'. [ 2119.950661][ T7793] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2119.958003][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36199'. [ 2120.021775][ T7793] bond4 (unregistering): Released all slaves [ 2120.040226][ T7800] netlink: 16 bytes leftover after parsing attributes in process `syz.7.36201'. [ 2120.738143][ T7827] syz_tun (unregistering): left allmulticast mode [ 2120.980363][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2121.111315][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2121.309820][ T7856] gretap1: left promiscuous mode [ 2121.369781][ T7856] bridge2: left promiscuous mode [ 2121.391083][ T7856] bridge2: left allmulticast mode [ 2121.438607][ T7860] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2121.441600][ T6617] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2121.536299][ T6617] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.551857][ T6617] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2121.561032][ T6617] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.570198][ T6617] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2121.580098][ T6617] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.589854][ T6617] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2121.605754][ T6617] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.267612][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.275259][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.500906][ T7933] netlink: 'syz.2.36237': attribute type 1 has an invalid length. [ 2122.544913][ T7933] netlink: 'syz.2.36237': attribute type 2 has an invalid length. [ 2122.571996][ T7916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2122.627032][ T7941] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2122.635301][ T7916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2122.680036][ T7945] netlink: 'syz.2.36237': attribute type 1 has an invalid length. [ 2122.862585][ T7916] vlan2: left promiscuous mode [ 2122.872492][ T7916] hsr0: left promiscuous mode [ 2122.880149][ T7916] vlan2: left allmulticast mode [ 2122.904290][ T7916] hsr0: left allmulticast mode [ 2122.909404][ T7916] hsr_slave_0: left allmulticast mode [ 2122.917231][ T7916] hsr_slave_1: left allmulticast mode [ 2123.107885][ T7945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2123.179451][ T7947] bond0: (slave veth0_to_bond): Releasing backup interface [ 2123.240705][ T7947] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2123.293130][ T6615] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.335844][ T6615] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.372348][ T6615] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.420535][ T6615] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.481438][ T7959] __nla_validate_parse: 13 callbacks suppressed [ 2123.481462][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36240'. [ 2123.695857][ T7980] netlink: 'syz.4.36246': attribute type 30 has an invalid length. [ 2123.900992][ T7996] netlink: 'syz.7.36249': attribute type 1 has an invalid length. [ 2123.980819][ T7996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2124.025884][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36250'. [ 2124.046085][ T7996] bond1: (slave bond2): making interface the new active one [ 2124.086079][ T7996] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2124.224141][ T8003] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 2124.279402][ T8008] syzkaller0: entered promiscuous mode [ 2124.315581][ T8008] syzkaller0: entered allmulticast mode [ 2124.414014][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36257'. [ 2124.432375][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36257'. [ 2124.469928][ T8027] syzkaller0: entered promiscuous mode [ 2124.478745][ T8027] syzkaller0: entered allmulticast mode [ 2124.493867][ T8028] tunl0: left promiscuous mode [ 2124.879561][ T8028] veth1_virt_wifi: left allmulticast mode [ 2125.056141][ T8028] bridge1: left promiscuous mode [ 2125.061809][ T8028] bridge1: left allmulticast mode [ 2125.076005][ T8028] bond1: left promiscuous mode [ 2125.081543][ T8028] veth0_to_bond: left promiscuous mode [ 2125.090688][ T8028] bond1: left allmulticast mode [ 2125.098973][ T8028] veth0_to_bond: left allmulticast mode [ 2125.108537][ T8028] gretap1: left promiscuous mode [ 2125.119402][ T8027] tipc: Enabled bearer , priority 10 [ 2125.137279][ T8030] netlink: 116 bytes leftover after parsing attributes in process `syz.7.36258'. [ 2125.189454][ T149] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.212639][ T149] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.255330][ T8025] tipc: Resetting bearer [ 2125.265921][ T8025] tipc: Disabling bearer [ 2125.284259][ T149] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.319480][ T149] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.330256][ T8059] syzkaller0: entered promiscuous mode [ 2125.341716][ T8059] syzkaller0: entered allmulticast mode [ 2125.356875][ T8059] netlink: 'syz.6.36263': attribute type 1 has an invalid length. [ 2125.589321][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36266'. [ 2125.684100][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.36270'. [ 2125.781123][ T8067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.36266'. [ 2125.868916][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.36272'. [ 2126.038105][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.36273'. [ 2126.486935][ T8118] netlink: 'syz.4.36283': attribute type 11 has an invalid length. [ 2126.495345][ T8118] netlink: 'syz.4.36283': attribute type 11 has an invalid length. [ 2126.606756][ T8125] openvswitch: netlink: Flow key attr not present in new flow. [ 2126.684960][ T8128] x_tables: duplicate entry at hook 1 [ 2126.862486][ T8142] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2126.930166][ T8143] netlink: 'syz.7.36290': attribute type 10 has an invalid length. [ 2126.973258][ T8143] team0: Port device geneve1 added [ 2127.005341][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.039322][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.094628][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.139830][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.247861][ T8152] netlink: 'syz.7.36295': attribute type 2 has an invalid length. [ 2127.579166][ T8172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2127.952643][ T8192] netlink: 'syz.6.36305': attribute type 1 has an invalid length. [ 2130.892390][ T8187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2131.122567][ T8234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.177326][ T8245] netlink: zone id is out of range [ 2131.205876][ T8245] netlink: zone id is out of range [ 2131.205967][ T8234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.220016][ T8245] netlink: zone id is out of range [ 2131.244987][ T8245] netlink: zone id is out of range [ 2131.264704][ T8245] netlink: zone id is out of range [ 2131.269701][ T8234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.281592][ T8245] netlink: zone id is out of range [ 2131.281609][ T8245] netlink: zone id is out of range [ 2131.281618][ T8245] netlink: zone id is out of range [ 2131.281626][ T8245] netlink: zone id is out of range [ 2131.816536][ T8280] netlink: 'syz.7.36327': attribute type 1 has an invalid length. [ 2132.049649][ T8293] __nla_validate_parse: 7 callbacks suppressed [ 2132.049674][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.36330'. [ 2132.110759][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.7.36330'. [ 2132.359503][ T8313] netlink: 100 bytes leftover after parsing attributes in process `syz.4.36335'. [ 2132.702909][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36338'. [ 2132.792229][ T8326] net_ratelimit: 23 callbacks suppressed [ 2132.792253][ T8326] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2132.897207][ T8328] 0: reclassify loop, rule prio 0, protocol 700 [ 2133.169538][ T8338] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 2133.208806][ T8338] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 2133.283987][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2133.415972][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2133.476742][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2133.604262][ T8363] netlink: 'syz.4.36352': attribute type 1 has an invalid length. [ 2133.647838][ T8363] netlink: 'syz.4.36352': attribute type 2 has an invalid length. [ 2133.764863][ T8370] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2134.409348][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.6.36363'. [ 2134.807904][ T8439] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2134.822868][ T8433] bond8: option fail_over_mac: invalid value (16) [ 2134.846221][ T8440] netlink: 212024 bytes leftover after parsing attributes in process `syz.5.36367'. [ 2134.891349][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2134.891798][ T8433] bond8 (unregistering): Released all slaves [ 2134.948500][ T8434] bond0 (unregistering): Released all slaves [ 2134.960632][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2135.030941][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2135.240409][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36374'. [ 2135.413405][ T8476] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2135.519534][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36380'. [ 2135.593566][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36380'. [ 2135.630077][ T8482] netlink: 508 bytes leftover after parsing attributes in process `syz.5.36383'. [ 2135.657184][ T8486] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2136.199636][ T8511] siw: device registration error -23 [ 2136.513704][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 2136.542027][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 2136.929831][ T8544] bond10: entered promiscuous mode [ 2136.941814][ T8544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2137.090022][ T8549] syzkaller0: entered promiscuous mode [ 2137.108379][ T8549] syzkaller0: entered allmulticast mode [ 2137.161718][ T8549] tipc: Enabled bearer , priority 10 [ 2137.207510][ T8548] tipc: Resetting bearer [ 2137.232099][ T8548] tipc: Disabling bearer [ 2137.326747][ T8562] netlink: 'syz.4.36406': attribute type 21 has an invalid length. [ 2137.355946][ T8573] __nla_validate_parse: 2 callbacks suppressed [ 2137.355967][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.360543][ T8562] netlink: 128 bytes leftover after parsing attributes in process `syz.4.36406'. [ 2137.393630][ T8562] netlink: 3 bytes leftover after parsing attributes in process `syz.4.36406'. [ 2137.400266][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.446881][ T8583] netlink: 'syz.6.36412': attribute type 1 has an invalid length. [ 2137.468898][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.505994][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.561085][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.641055][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.722613][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.774133][ T8573] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.36408'. [ 2137.868211][ T8606] syzkaller0: entered promiscuous mode [ 2137.873737][ T8606] syzkaller0: entered allmulticast mode [ 2137.932741][ T8610] netlink: 'syz.2.36417': attribute type 1 has an invalid length. [ 2138.108061][ T8610] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2138.138350][ T8610] bond9: (slave bond10): making interface the new active one [ 2138.162028][ T8610] bond9: (slave bond10): Enslaving as an active interface with an up link [ 2138.200579][ T8615] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 2138.227653][ T8624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2138.354458][ T8627] netlink: 'syz.7.36422': attribute type 2 has an invalid length. [ 2138.432624][ T8634] bond11: option xmit_hash_policy: invalid value (64) [ 2138.470311][ T8634] bond11 (unregistering): Released all slaves [ 2138.742735][ T8646] tipc: Enabled bearer , priority 0 [ 2138.798275][ T8637] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2138.848846][ T8630] syzkaller0: entered promiscuous mode [ 2138.885577][ T8630] syzkaller0: entered allmulticast mode [ 2138.901520][ T8641] tipc: Enabled bearer , priority 10 [ 2138.952754][ T8628] tipc: Resetting bearer [ 2139.022298][ T8628] tipc: Disabling bearer [ 2139.070948][ T8637] tipc: Resetting bearer [ 2139.092170][ T8649] syzkaller0: entered promiscuous mode [ 2139.108733][ T8649] syzkaller0: entered allmulticast mode [ 2139.170196][ T8629] tipc: Resetting bearer [ 2139.204013][ T8629] tipc: Disabling bearer [ 2139.570451][ T8685] gtp1: entered allmulticast mode [ 2139.609693][ T8685] team0: Device gtp1 is of different type [ 2139.851890][ T8704] netlink: 'syz.6.36437': attribute type 21 has an invalid length. [ 2140.263882][ T8715] syzkaller0: entered promiscuous mode [ 2140.293975][ T8715] syzkaller0: entered allmulticast mode [ 2140.319728][ T8721] C: renamed from lo [ 2140.329910][ T8721] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2140.398514][ T8719] syzkaller0: entered promiscuous mode [ 2140.434273][ T8719] syzkaller0: entered allmulticast mode [ 2140.624028][ T8739] "syz.2.36447" (8739) uses obsolete ecb(arc4) skcipher [ 2140.661679][ T8730] tipc: Enabling of bearer rejected, failed to enable media [ 2140.801774][ T8743] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2140.944788][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.972100][ T8751] netlink: Unknown conntrack attr (type=2304, max=9) [ 2141.212754][ T8769] netlink: 'syz.2.36458': attribute type 1 has an invalid length. [ 2141.307048][ T8780] syzkaller0: entered promiscuous mode [ 2141.344231][ T8780] syzkaller0: entered allmulticast mode [ 2141.380415][ T8784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2141.430772][ T8780] tipc: Enabled bearer , priority 0 [ 2141.455557][ T8779] tipc: Resetting bearer [ 2141.501467][ T8779] tipc: Disabling bearer [ 2142.032661][ T8825] nbd: must specify an index to disconnect [ 2142.052191][ T8825] nbd: must specify an index to disconnect [ 2142.115550][ T8829] siw: device registration error -23 [ 2142.140375][ T8833] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2142.325562][ T8843] syzkaller0: entered promiscuous mode [ 2142.331503][ T8843] syzkaller0: entered allmulticast mode [ 2142.346160][ T8843] tipc: Enabled bearer , priority 1 [ 2142.370006][ T8841] tipc: Resetting bearer [ 2142.393604][ T8841] tipc: Disabling bearer [ 2142.547230][ T8860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2142.560024][ T8860] __nla_validate_parse: 75 callbacks suppressed [ 2142.560046][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.6.36492'. [ 2142.619475][ T8862] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2142.839552][ T8872] netlink: 80 bytes leftover after parsing attributes in process `syz.7.36498'. [ 2142.986196][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.36501'. [ 2143.104944][ T8894] netlink: 1204 bytes leftover after parsing attributes in process `syz.7.36503'. [ 2143.341200][ T8905] syzkaller0: entered promiscuous mode [ 2143.357279][ T8905] syzkaller0: entered allmulticast mode [ 2143.387707][ T8905] tipc: Enabled bearer , priority 0 [ 2143.417978][ T8909] netlink: 'syz.5.36508': attribute type 7 has an invalid length. [ 2143.426575][ T8912] netlink: 48 bytes leftover after parsing attributes in process `syz.6.36507'. [ 2143.434397][ T8909] netlink: 140 bytes leftover after parsing attributes in process `syz.5.36508'. [ 2143.445579][ T8903] tipc: Resetting bearer [ 2143.478629][ T8903] tipc: Disabling bearer [ 2143.859305][ T8925] netlink: 'syz.6.36514': attribute type 1 has an invalid length. [ 2143.898773][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36514'. [ 2143.929464][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36514'. [ 2144.236314][ T8942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2144.296236][ T8942] netlink: 'syz.2.36519': attribute type 29 has an invalid length. [ 2144.452926][ T8947] lo speed is unknown, defaulting to 1000 [ 2144.510966][ T8955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2144.875072][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36524'. [ 2145.070484][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36527'. [ 2145.121649][ T8947] xfrm0 speed is unknown, defaulting to 1000 [ 2145.440443][ T8992] syzkaller0: entered promiscuous mode [ 2145.479995][ T8992] syzkaller0: entered allmulticast mode [ 2145.525932][ T8992] tipc: Enabled bearer , priority 0 [ 2145.579961][ T8990] tipc: Resetting bearer [ 2145.647832][ T8990] tipc: Disabling bearer [ 2145.704198][ T8947] lo speed is unknown, defaulting to 1000 [ 2145.725115][ T8947] vxcan1 speed is unknown, defaulting to 1000 [ 2146.090330][ T9033] netlink: 'syz.2.36545': attribute type 1 has an invalid length. [ 2146.218041][ T9033] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2146.239921][ T9037] bond10: left promiscuous mode [ 2146.399708][ T9033] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 2146.480262][ T4960] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2146.616423][ T9049] netlink: 'syz.4.36550': attribute type 21 has an invalid length. [ 2146.736659][ T9051] netlink: 'syz.7.36553': attribute type 3 has an invalid length. [ 2146.770956][ T9053] netlink: 'syz.6.36552': attribute type 3 has an invalid length. [ 2147.275622][ T9084] netlink: 'syz.2.36561': attribute type 2 has an invalid length. [ 2147.297591][ T9084] netlink: 'syz.2.36561': attribute type 1 has an invalid length. [ 2147.466599][ T4960] IPVS: starting estimator thread 0... [ 2147.574704][ T9100] IPVS: using max 43 ests per chain, 103200 per kthread [ 2147.668971][ T9114] tipc: Enabling of bearer rejected, failed to enable media [ 2147.678744][ T9110] __nla_validate_parse: 11 callbacks suppressed [ 2147.678766][ T9110] netlink: 156 bytes leftover after parsing attributes in process `syz.5.36566'. [ 2147.708233][ T9115] team0: Device ipvlan2 is already an upper device of the team interface [ 2148.519517][ T9147] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36575'. [ 2148.634963][ T9148] syzkaller0: entered promiscuous mode [ 2148.654745][ T9148] syzkaller0: entered allmulticast mode [ 2148.786301][ T9156] tipc: Enabled bearer , priority 0 [ 2148.817790][ T9156] syzkaller0: entered promiscuous mode [ 2148.852173][ T9156] syzkaller0: entered allmulticast mode [ 2148.864872][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36580'. [ 2148.900454][ T9156] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2149.032655][ T9159] tipc: Resetting bearer [ 2149.047272][ T9169] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.36582'. [ 2149.102223][ T9169] veth0_to_bond: default FDB implementation only supports local addresses [ 2149.181071][ T9155] tipc: Resetting bearer [ 2149.279625][ T9155] tipc: Disabling bearer [ 2149.330788][ T9187] netlink: 'syz.2.36585': attribute type 1 has an invalid length. [ 2149.347107][ T9187] netlink: 84 bytes leftover after parsing attributes in process `syz.2.36585'. [ 2149.358499][ T9187] netlink: 658 bytes leftover after parsing attributes in process `syz.2.36585'. [ 2149.403789][ T9187] netlink: 'syz.2.36585': attribute type 2 has an invalid length. [ 2149.711285][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36591'. [ 2149.752310][ T9202] netlink: 50 bytes leftover after parsing attributes in process `syz.5.36591'. [ 2149.782900][ T9202] netlink: 50 bytes leftover after parsing attributes in process `syz.5.36591'. [ 2150.111271][ T9223] netlink: 'syz.5.36598': attribute type 1 has an invalid length. [ 2150.164633][ T7992] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.207430][ T7992] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.249284][ T7992] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.270428][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36599'. [ 2150.286166][ T9226] syzkaller0: entered promiscuous mode [ 2150.292395][ T9226] syzkaller0: entered allmulticast mode [ 2150.306014][ T7992] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.361351][ T9226] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2152.543444][ T9198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2152.778576][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36604'. [ 2152.787755][ T9250] xt_ipcomp: unknown flags 1D [ 2152.860635][ T9247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2153.195867][ T9284] IPv6: NLM_F_CREATE should be specified when creating new route [ 2153.224491][ T9287] openvswitch: netlink: IP tunnel dst address not specified [ 2153.287207][ T9287] bond3 (unregistering): Released all slaves [ 2153.450095][ T9296] tunl0: entered promiscuous mode [ 2153.461678][ T9296] netlink: 'syz.5.36619': attribute type 4 has an invalid length. [ 2153.496501][ T9296] netlink: 9 bytes leftover after parsing attributes in process `syz.5.36619'. [ 2153.509415][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.36618'. [ 2154.241913][ T9325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.261218][ T9325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2154.280407][ T9325] bond0 (unregistering): Released all slaves [ 2156.031111][ T9270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2156.245337][ T9346] syzkaller1: entered promiscuous mode [ 2156.286525][ T9346] syzkaller1: entered allmulticast mode [ 2156.681130][ T9363] lo speed is unknown, defaulting to 1000 [ 2156.809167][ T9371] openvswitch: netlink: IP tunnel dst address not specified [ 2157.046504][ T9380] netlink: 'syz.7.36640': attribute type 16 has an invalid length. [ 2157.050995][ T9377] batadv_slave_1: entered promiscuous mode [ 2157.128199][ T9380] netlink: 'syz.7.36640': attribute type 17 has an invalid length. [ 2157.373891][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 2157.441556][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.595153][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2157.608136][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2157.625830][ T9380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2157.649883][ T9380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2157.677315][ T9380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2157.702434][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.709650][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2157.746605][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.753784][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2157.821023][ T9363] xfrm0 speed is unknown, defaulting to 1000 [ 2158.235472][ T9363] lo speed is unknown, defaulting to 1000 [ 2158.257440][ T9363] vxcan1 speed is unknown, defaulting to 1000 [ 2158.505386][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36665'. [ 2158.892891][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.36671'. [ 2159.916702][ T9456] syzkaller0: entered promiscuous mode [ 2159.947964][ T9456] syzkaller0: entered allmulticast mode [ 2160.345745][ T9473] lo speed is unknown, defaulting to 1000 [ 2160.972627][ T9502] syzkaller0: entered promiscuous mode [ 2160.991554][ T9502] syzkaller0: entered allmulticast mode [ 2161.036887][ T9506] tipc: Enabled bearer , priority 10 [ 2161.072297][ T9501] tipc: Resetting bearer [ 2161.106437][ T9501] tipc: Disabling bearer [ 2161.167603][ T9473] xfrm0 speed is unknown, defaulting to 1000 [ 2161.220253][ T9512] netlink: 'syz.2.36704': attribute type 2 has an invalid length. [ 2161.310439][ T9512] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.36704'. [ 2161.363391][ T9512] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2161.412622][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.36705'. [ 2161.456485][ T9522] netlink: 120 bytes leftover after parsing attributes in process `syz.5.36705'. [ 2161.484932][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36705'. [ 2161.742484][ T9536] syzkaller0: entered promiscuous mode [ 2161.771404][ T9536] syzkaller0: entered allmulticast mode [ 2161.818657][ T9473] lo speed is unknown, defaulting to 1000 [ 2161.855062][ T9473] vxcan1 speed is unknown, defaulting to 1000 [ 2161.985953][ T9543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.36710'. [ 2162.379369][ T9552] syzkaller0: entered promiscuous mode [ 2162.389411][ T9552] syzkaller0: entered allmulticast mode [ 2162.402560][ T9552] tipc: Enabled bearer , priority 10 [ 2162.412572][ T9551] tipc: Resetting bearer [ 2162.451890][ T9551] tipc: Disabling bearer [ 2162.711379][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.718881][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.730284][ T9565] netlink: zone id is out of range [ 2162.739052][ T9565] netlink: zone id is out of range [ 2162.744916][ T9565] netlink: zone id is out of range [ 2162.750308][ T9565] netlink: zone id is out of range [ 2162.769416][ T9565] netlink: zone id is out of range [ 2162.797950][ T9565] netlink: zone id is out of range [ 2162.814248][ T9565] netlink: zone id is out of range [ 2162.819430][ T9565] netlink: zone id is out of range [ 2162.824653][ T9565] netlink: zone id is out of range [ 2163.281038][ T9561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.321126][ T9561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.405482][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36719'. [ 2163.422351][ T9569] macsec1: entered promiscuous mode [ 2164.216644][ T9609] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2164.484522][ T9629] netlink: 388 bytes leftover after parsing attributes in process `syz.5.36740'. [ 2164.517767][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36740'. [ 2164.659492][ T9638] syzkaller0: entered promiscuous mode [ 2164.716111][ T9638] syzkaller0: entered allmulticast mode [ 2164.744089][ T9640] tipc: Enabled bearer , priority 0 [ 2164.806078][ T9638] tipc: Resetting bearer [ 2164.871546][ T9630] tipc: Resetting bearer [ 2164.907424][ T9630] tipc: Disabling bearer [ 2165.330622][ T9676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2165.351470][ T9672] syzkaller0: entered promiscuous mode [ 2165.406277][ T9672] syzkaller0: entered allmulticast mode [ 2165.748958][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.7.36757'. [ 2166.415805][ T9729] netlink: 148 bytes leftover after parsing attributes in process `syz.2.36769'. [ 2166.776342][ T9754] netlink: 'syz.5.36774': attribute type 1 has an invalid length. [ 2166.876931][ T9754] bond3: entered promiscuous mode [ 2166.911866][ T9754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2167.086486][ T9759] bond3: (slave bridge6): making interface the new active one [ 2167.107900][ T9759] bridge6: entered promiscuous mode [ 2167.118321][ T9759] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 2167.346972][ T9773] pim6reg1: entered promiscuous mode [ 2167.354603][ T9773] pim6reg1: entered allmulticast mode [ 2167.415745][ T9795] tc action pedit unable to extract header offset for header type (0x4) [ 2167.715080][ T9803] tipc: Enabling of bearer rejected, failed to enable media [ 2167.798133][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.36788'. [ 2167.837203][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.36788'. [ 2168.268423][ T9834] x_tables: unsorted entry at hook 2 [ 2168.471569][ T9843] netlink: 260 bytes leftover after parsing attributes in process `syz.4.36799'. [ 2168.641842][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36801'. [ 2168.691029][ T9851] net_ratelimit: 45 callbacks suppressed [ 2168.691049][ T9851] openvswitch: netlink: Flow actions attr not present in new flow. [ 2168.717967][ T9855] netlink: 'syz.4.36802': attribute type 1 has an invalid length. [ 2168.754224][ T9855] netlink: 228 bytes leftover after parsing attributes in process `syz.4.36802'. [ 2168.829036][ T9858] syzkaller0: entered promiscuous mode [ 2168.852217][ T9858] syzkaller0: entered allmulticast mode [ 2169.259378][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36813'. [ 2169.267723][ T9885] netlink: 'syz.5.36811': attribute type 9 has an invalid length. [ 2170.049431][ T9927] FAULT_INJECTION: forcing a failure. [ 2170.049431][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.109340][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.6.36822 Not tainted syzkaller #0 PREEMPT(full) [ 2170.109411][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2170.109424][ T9927] Call Trace: [ 2170.109431][ T9927] [ 2170.109440][ T9927] dump_stack_lvl+0xe8/0x150 [ 2170.109467][ T9927] should_fail_ex+0x40c/0x560 [ 2170.109491][ T9927] should_failslab+0xa8/0x100 [ 2170.109519][ T9927] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 2170.109547][ T9927] ? kobject_set_name_vargs+0x61/0x110 [ 2170.109580][ T9927] kstrdup+0x42/0x100 [ 2170.109601][ T9927] kobject_set_name_vargs+0x61/0x110 [ 2170.109632][ T9927] dev_set_name+0xe2/0x140 [ 2170.109686][ T9927] ? __pfx_dev_set_name+0x10/0x10 [ 2170.109714][ T9927] ? __kmalloc_cache_noprof+0x318/0x660 [ 2170.109741][ T9927] ? tty_register_device_attr+0x2ef/0x950 [ 2170.109868][ T9927] ? __kmalloc_cache_noprof+0x157/0x660 [ 2170.109891][ T9927] tty_register_device_attr+0x3b0/0x950 [ 2170.109916][ T9927] ? __pfx_tty_register_device_attr+0x10/0x10 [ 2170.109943][ T9927] ? tty_port_register_device+0xca/0x150 [ 2170.109995][ T9927] rfcomm_dev_ioctl+0x1b6c/0x21c0 [ 2170.110027][ T9927] ? trace_irq_enable+0x3b/0x140 [ 2170.110053][ T9927] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 2170.110078][ T9927] ? rcu_is_watching+0x15/0xb0 [ 2170.110098][ T9927] ? lock_release+0x4b/0x3c0 [ 2170.110125][ T9927] ? kfree+0x1c5/0x640 [ 2170.110146][ T9927] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 2170.110176][ T9927] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2170.110212][ T9927] sock_do_ioctl+0x101/0x320 [ 2170.110236][ T9927] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2170.110260][ T9927] ? sock_ioctl+0x568/0x7e0 [ 2170.110283][ T9927] sock_ioctl+0x57a/0x7e0 [ 2170.110300][ T9927] ? lock_release+0x4b/0x3c0 [ 2170.110328][ T9927] ? __pfx_sock_ioctl+0x10/0x10 [ 2170.110348][ T9927] ? __fget_files+0x2a/0x420 [ 2170.110378][ T9927] ? __fget_files+0x3a2/0x420 [ 2170.110399][ T9927] ? __fget_files+0x2a/0x420 [ 2170.110423][ T9927] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2170.110449][ T9927] ? __pfx_sock_ioctl+0x10/0x10 [ 2170.110469][ T9927] __se_sys_ioctl+0xfc/0x170 [ 2170.110496][ T9927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.110518][ T9927] do_syscall_64+0x174/0x580 [ 2170.110545][ T9927] ? clear_bhb_loop+0x40/0x90 [ 2170.110567][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.110587][ T9927] RIP: 0033:0x7f13d359ce59 [ 2170.110606][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2170.110625][ T9927] RSP: 002b:00007f13d4507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2170.110647][ T9927] RAX: ffffffffffffffda RBX: 00007f13d3815fa0 RCX: 00007f13d359ce59 [ 2170.110660][ T9927] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 2170.110673][ T9927] RBP: 00007f13d4507090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.110685][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.110696][ T9927] R13: 00007f13d3816038 R14: 00007f13d3815fa0 R15: 00007fff711e2a98 [ 2170.110717][ T9927] [ 2170.554598][ T9927] __nla_validate_parse: 1 callbacks suppressed [ 2170.554619][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.6.36822'. [ 2170.596288][ T9938] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2170.630318][ T9942] veth1_to_bond: entered allmulticast mode [ 2170.637907][ T9942] veth1_to_bond: entered promiscuous mode [ 2170.651523][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.36829'. [ 2170.721697][ T9942] veth1_to_bond (unregistering): left allmulticast mode [ 2170.791646][ T9942] veth1_to_bond (unregistering): left promiscuous mode [ 2171.053870][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36830'. [ 2171.179411][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36831'. [ 2171.732455][ T9978] syzkaller1: entered promiscuous mode [ 2171.800151][ T9978] syzkaller1: entered allmulticast mode [ 2171.840267][ T9978] bond0: (slave gre0): refused to change device type [ 2172.265201][T10004] FAULT_INJECTION: forcing a failure. [ 2172.265201][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.342903][T10004] CPU: 1 UID: 0 PID: 10004 Comm: syz.4.36842 Not tainted syzkaller #0 PREEMPT(full) [ 2172.342932][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2172.342947][T10004] Call Trace: [ 2172.342955][T10004] [ 2172.342962][T10004] dump_stack_lvl+0xe8/0x150 [ 2172.342989][T10004] should_fail_ex+0x40c/0x560 [ 2172.343012][T10004] should_failslab+0xa8/0x100 [ 2172.343039][T10004] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 2172.343065][T10004] ? __kernfs_new_node+0xa9/0x980 [ 2172.343093][T10004] kstrdup+0x42/0x100 [ 2172.343111][T10004] __kernfs_new_node+0xa9/0x980 [ 2172.343139][T10004] ? __pfx___kernfs_new_node+0x10/0x10 [ 2172.343161][T10004] ? rcu_is_watching+0x15/0xb0 [ 2172.343181][T10004] ? kernfs_root+0x1c/0x230 [ 2172.343203][T10004] ? rcu_is_watching+0x15/0xb0 [ 2172.343220][T10004] ? kernfs_root+0x1c/0x230 [ 2172.343241][T10004] ? lock_release+0x4b/0x3c0 [ 2172.343268][T10004] ? kernfs_root+0x1c/0x230 [ 2172.343296][T10004] ? kernfs_root+0x1c/0x230 [ 2172.343321][T10004] kernfs_create_dir_ns+0xfe/0x230 [ 2172.343349][T10004] sysfs_create_dir_ns+0x12f/0x2a0 [ 2172.343373][T10004] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2172.343397][T10004] ? do_raw_spin_unlock+0xf5/0x210 [ 2172.343420][T10004] kobject_add_internal+0x622/0xcd0 [ 2172.343442][T10004] kobject_add+0x163/0x240 [ 2172.343458][T10004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2172.343481][T10004] ? rcu_is_watching+0x15/0xb0 [ 2172.343501][T10004] ? __pfx_kobject_add+0x10/0x10 [ 2172.343529][T10004] ? get_device_parent+0x366/0x3a0 [ 2172.343549][T10004] device_add+0x3fa/0xb80 [ 2172.343570][T10004] tty_register_device_attr+0x422/0x950 [ 2172.343601][T10004] ? __pfx_tty_register_device_attr+0x10/0x10 [ 2172.343632][T10004] ? tty_port_register_device+0xca/0x150 [ 2172.343659][T10004] rfcomm_dev_ioctl+0x1b6c/0x21c0 [ 2172.343688][T10004] ? trace_irq_enable+0x3b/0x140 [ 2172.343711][T10004] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 2172.343733][T10004] ? rcu_is_watching+0x15/0xb0 [ 2172.343752][T10004] ? lock_release+0x4b/0x3c0 [ 2172.343775][T10004] ? kfree+0x1c5/0x640 [ 2172.343794][T10004] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 2172.343820][T10004] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2172.343848][T10004] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2172.343876][T10004] sock_do_ioctl+0x101/0x320 [ 2172.343898][T10004] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2172.343916][T10004] ? hook_file_ioctl+0x1f0/0x5c0 [ 2172.343950][T10004] sock_ioctl+0x57a/0x7e0 [ 2172.343967][T10004] ? lock_release+0x4b/0x3c0 [ 2172.343992][T10004] ? __pfx_sock_ioctl+0x10/0x10 [ 2172.344010][T10004] ? __fget_files+0x2a/0x420 [ 2172.344030][T10004] ? __fget_files+0x3a2/0x420 [ 2172.344049][T10004] ? __fget_files+0x2a/0x420 [ 2172.344070][T10004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2172.344093][T10004] ? __pfx_sock_ioctl+0x10/0x10 [ 2172.344111][T10004] __se_sys_ioctl+0xfc/0x170 [ 2172.344135][T10004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.344154][T10004] do_syscall_64+0x174/0x580 [ 2172.344177][T10004] ? clear_bhb_loop+0x40/0x90 [ 2172.344197][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.344215][T10004] RIP: 0033:0x7f215119ce59 [ 2172.344233][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2172.344250][T10004] RSP: 002b:00007f2151fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.344271][T10004] RAX: ffffffffffffffda RBX: 00007f2151415fa0 RCX: 00007f215119ce59 [ 2172.344284][T10004] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 2172.344304][T10004] RBP: 00007f2151fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 2172.344316][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2172.344327][T10004] R13: 00007f2151416038 R14: 00007f2151415fa0 R15: 00007ffed03d1b88 [ 2172.344350][T10004] [ 2172.886278][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36842'. [ 2173.245043][T10004] kobject: kobject_add_internal failed for rfcomm24 (error: -12 parent: tty) [ 2173.316444][T10007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36844'. [ 2173.622746][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36850'. [ 2173.642714][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36850'. [ 2173.674390][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36850'. [ 2173.775898][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36850'. [ 2174.031644][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2174.108816][T10044] SET target dimension over the limit! [ 2174.255583][T10049] syzkaller0: entered promiscuous mode [ 2174.278055][T10049] syzkaller0: entered allmulticast mode [ 2174.329965][T10049] tipc: Enabled bearer , priority 3 [ 2174.351204][T10051] syzkaller1: entered promiscuous mode [ 2174.374646][T10051] syzkaller1: entered allmulticast mode [ 2174.417424][T10048] tipc: Resetting bearer [ 2174.466294][T10048] tipc: Disabling bearer [ 2174.792398][T10070] vlan2: entered promiscuous mode [ 2174.817450][T10070] bridge0: entered promiscuous mode [ 2175.526302][T10091] syzkaller0: entered promiscuous mode [ 2175.544543][T10091] syzkaller0: entered allmulticast mode [ 2175.767184][T10076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2176.189091][T10111] syzkaller0: entered promiscuous mode [ 2176.219490][T10111] syzkaller0: entered allmulticast mode [ 2176.257763][T10113] netlink: 'syz.5.36873': attribute type 1 has an invalid length. [ 2176.303759][T10113] netlink: 'syz.5.36873': attribute type 1 has an invalid length. [ 2176.502143][T10121] __nla_validate_parse: 6 callbacks suppressed [ 2176.502165][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36877'. [ 2176.544157][T10123] netlink: 'syz.6.36878': attribute type 1 has an invalid length. [ 2176.558989][T10130] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2176.759678][T10128] bond0: (slave bridge3): making interface the new active one [ 2176.790441][T10128] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 2176.870314][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36884'. [ 2177.066166][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.36888'. [ 2177.277160][T10170] openvswitch: netlink: Flow actions attr not present in new flow. [ 2177.310098][T10174] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2177.365666][T10126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2177.381051][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36894'. [ 2177.394466][T10180] netlink: 116 bytes leftover after parsing attributes in process `syz.4.36895'. [ 2177.421214][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36895'. [ 2177.649243][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36896'. [ 2177.725403][T10201] openvswitch: netlink: Multiple metadata blocks provided [ 2177.734964][ T7973] block nbd0: Receive control failed (result -1) [ 2177.755877][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36900'. [ 2177.806603][T10203] C: renamed from lo [ 2177.834566][T10203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2177.842332][T10207] netlink: 'syz.7.36904': attribute type 1 has an invalid length. [ 2177.860884][T10207] netlink: 'syz.7.36904': attribute type 1 has an invalid length. [ 2177.900872][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36903'. [ 2178.061913][T10215] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2178.131918][T10217] FAULT_INJECTION: forcing a failure. [ 2178.131918][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.178706][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.2.36907 Not tainted syzkaller #0 PREEMPT(full) [ 2178.178735][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2178.178746][T10217] Call Trace: [ 2178.178754][T10217] [ 2178.178762][T10217] dump_stack_lvl+0xe8/0x150 [ 2178.178789][T10217] should_fail_ex+0x40c/0x560 [ 2178.178813][T10217] _copy_from_user+0x2d/0xb0 [ 2178.178838][T10217] ___sys_sendmsg+0x1c6/0x360 [ 2178.178874][T10217] ? rcu_is_watching+0x15/0xb0 [ 2178.178892][T10217] ? get_pid_task+0x20/0x1f0 [ 2178.178910][T10217] ? __pfx____sys_sendmsg+0x10/0x10 [ 2178.178936][T10217] ? rcu_is_watching+0x15/0xb0 [ 2178.178970][T10217] ? __fget_files+0x2a/0x420 [ 2178.178992][T10217] ? __fget_files+0x3a2/0x420 [ 2178.179016][T10217] __x64_sys_sendmsg+0x1b1/0x290 [ 2178.179042][T10217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2178.179073][T10217] ? rcu_is_watching+0x15/0xb0 [ 2178.179093][T10217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2178.179111][T10217] do_syscall_64+0x174/0x580 [ 2178.179133][T10217] ? trace_irq_disable+0x3b/0x140 [ 2178.179156][T10217] ? clear_bhb_loop+0x40/0x90 [ 2178.179176][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2178.179193][T10217] RIP: 0033:0x7fe6b319ce59 [ 2178.179210][T10217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2178.179225][T10217] RSP: 002b:00007fe6b4011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2178.179260][T10217] RAX: ffffffffffffffda RBX: 00007fe6b3415fa0 RCX: 00007fe6b319ce59 [ 2178.179274][T10217] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 00000000000000c0 [ 2178.179286][T10217] RBP: 00007fe6b4011090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.179297][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.179309][T10217] R13: 00007fe6b3416038 R14: 00007fe6b3415fa0 R15: 00007fffacc5b118 [ 2178.179331][T10217] [ 2178.186373][T10222] 8021q: VLANs not supported on tunl0 [ 2178.669104][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36913'. [ 2178.771539][T10249] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 2178.862763][T10251] syzkaller0: entered promiscuous mode [ 2178.883797][T10251] syzkaller0: entered allmulticast mode [ 2178.909586][T10251] tipc: Enabled bearer , priority 10 [ 2178.956822][T10250] tipc: Resetting bearer [ 2178.996781][T10250] tipc: Disabling bearer [ 2179.247788][T10277] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 2179.591031][T10298] netlink: 'syz.4.36926': attribute type 2 has an invalid length. [ 2179.598979][T10294] netlink: 'syz.6.36928': attribute type 10 has an invalid length. [ 2179.641655][T10298] netlink: 'syz.4.36926': attribute type 1 has an invalid length. [ 2179.683656][T10298] netlink: 'syz.4.36926': attribute type 1 has an invalid length. [ 2179.722646][T10298] netlink: 'syz.4.36926': attribute type 2 has an invalid length. [ 2179.766521][T10307] syzkaller0: entered promiscuous mode [ 2179.772740][T10307] syzkaller0: entered allmulticast mode [ 2179.797515][T10307] tipc: Enabled bearer , priority 10 [ 2179.814498][T10305] tipc: Resetting bearer [ 2179.838982][T10305] tipc: Disabling bearer [ 2180.268714][T10323] syzkaller0: entered promiscuous mode [ 2180.305932][T10323] syzkaller0: entered allmulticast mode [ 2180.317080][T10333] bridge_slave_0: left allmulticast mode [ 2180.324778][T10333] bridge_slave_0: left promiscuous mode [ 2180.330683][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.750479][T10350] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2180.771715][T10356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2180.780919][T10350] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 2180.805161][T10354] syzkaller0: entered promiscuous mode [ 2180.819674][T10354] syzkaller0: entered allmulticast mode [ 2181.017624][T10361] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2181.470674][T10370] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 2183.240263][T10328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2183.406457][T10378] __nla_validate_parse: 7 callbacks suppressed [ 2183.406710][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36951'. [ 2183.450114][T10381] pim6reg: entered allmulticast mode [ 2183.533269][T10381] pim6reg: left allmulticast mode [ 2183.587008][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36954'. [ 2183.732227][T10396] netlink: 240 bytes leftover after parsing attributes in process `syz.7.36952'. [ 2183.746179][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.36952'. [ 2183.970840][T10409] syzkaller0: entered promiscuous mode [ 2183.991834][T10409] syzkaller0: entered allmulticast mode [ 2184.031761][T10409] tipc: Enabled bearer , priority 10 [ 2184.076852][T10408] tipc: Resetting bearer [ 2184.117385][T10408] tipc: Disabling bearer [ 2184.398230][T10427] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.36965'. [ 2184.698533][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36967'. [ 2184.735130][T10441] FAULT_INJECTION: forcing a failure. [ 2184.735130][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2184.786062][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.4.36968 Not tainted syzkaller #0 PREEMPT(full) [ 2184.786090][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2184.786101][T10441] Call Trace: [ 2184.786109][T10441] [ 2184.786116][T10441] dump_stack_lvl+0xe8/0x150 [ 2184.786142][T10441] should_fail_ex+0x40c/0x560 [ 2184.786203][T10441] _copy_from_iter+0x1d3/0x1660 [ 2184.786227][T10441] ? rcu_is_watching+0x15/0xb0 [ 2184.786249][T10441] ? __pfx__copy_from_iter+0x10/0x10 [ 2184.786270][T10441] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 2184.786297][T10441] ? netlink_sendmsg+0x650/0xb40 [ 2184.786314][T10441] ? skb_put+0x112/0x210 [ 2184.786339][T10441] netlink_sendmsg+0x6c0/0xb40 [ 2184.786361][T10441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2184.786390][T10441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2184.786407][T10441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2184.786428][T10441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2184.786452][T10441] ____sys_sendmsg+0x9b9/0xa20 [ 2184.786478][T10441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2184.786504][T10441] ? lock_release+0x4b/0x3c0 [ 2184.786530][T10441] ? import_iovec+0x73/0xa0 [ 2184.786554][T10441] ___sys_sendmsg+0x2a5/0x360 [ 2184.786578][T10441] ? rcu_is_watching+0x15/0xb0 [ 2184.786595][T10441] ? get_pid_task+0x20/0x1f0 [ 2184.786612][T10441] ? __pfx____sys_sendmsg+0x10/0x10 [ 2184.786640][T10441] ? rcu_is_watching+0x15/0xb0 [ 2184.786678][T10441] ? __fget_files+0x2a/0x420 [ 2184.786697][T10441] ? __fget_files+0x3a2/0x420 [ 2184.786719][T10441] __x64_sys_sendmsg+0x1b1/0x290 [ 2184.786743][T10441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2184.786773][T10441] ? rcu_is_watching+0x15/0xb0 [ 2184.786790][T10441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.786811][T10441] do_syscall_64+0x174/0x580 [ 2184.786835][T10441] ? trace_irq_disable+0x3b/0x140 [ 2184.786860][T10441] ? clear_bhb_loop+0x40/0x90 [ 2184.786881][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.786896][T10441] RIP: 0033:0x7f215119ce59 [ 2184.786914][T10441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2184.786930][T10441] RSP: 002b:00007f2151fbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2184.786951][T10441] RAX: ffffffffffffffda RBX: 00007f2151415fa0 RCX: 00007f215119ce59 [ 2184.786965][T10441] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000043 [ 2184.786978][T10441] RBP: 00007f2151fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 2184.786991][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2184.787004][T10441] R13: 00007f2151416038 R14: 00007f2151415fa0 R15: 00007ffed03d1b88 [ 2184.787027][T10441] [ 2185.113737][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.36970'. [ 2185.473468][ T30] INFO: task syz.3.35339:4580 blocked for more than 143 seconds. [ 2185.497856][ T30] Not tainted syzkaller #0 [ 2185.513682][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2185.532823][ T30] task:syz.3.35339 state:D stack:26280 pid:4580 tgid:4579 ppid:32682 task_flags:0x400140 flags:0x00080002 [ 2185.564448][ T30] Call Trace: [ 2185.574116][ T30] [ 2185.581946][ T30] __schedule+0x17d9/0x56c0 [ 2185.604891][ T30] ? kernel_text_address+0xa5/0xe0 [ 2185.612073][T10460] validate_nla: 1 callbacks suppressed [ 2185.612091][T10460] netlink: 'syz.2.36975': attribute type 8 has an invalid length. [ 2185.640514][ T30] ? unwind_get_return_address+0x4d/0x90 [ 2185.662422][ T30] ? stack_trace_save+0xa9/0x100 [ 2185.681297][ T30] ? __pfx___schedule+0x10/0x10 [ 2185.691400][T10460] sch_fq: defrate 0 ignored. [ 2185.699435][ T30] ? rcu_is_watching+0x15/0xb0 [ 2185.720045][ T30] ? rcu_is_watching+0x15/0xb0 [ 2185.733997][ T30] ? lock_release+0x4b/0x3c0 [ 2185.743851][ T30] ? rcu_is_watching+0x15/0xb0 [ 2185.760572][ T30] schedule+0x164/0x360 [ 2185.766424][ T30] schedule_preempt_disabled+0x13/0x30 [ 2185.777273][ T30] __mutex_lock+0x7bf/0x1550 [ 2185.792607][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2185.800041][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 2185.811764][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2185.824158][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 2185.833182][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 2185.866178][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2185.894107][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2185.911779][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 2185.927086][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2185.941082][ T30] ? bpf_lsm_capable+0x9/0x20 [ 2185.972662][ T30] ? security_capable+0x7e/0x2c0 [ 2185.987263][ T30] genl_rcv_msg+0x614/0x7a0 [ 2185.998064][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2186.010029][ T30] ? ref_tracker_free+0x689/0x830 [ 2186.021115][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 2186.036283][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 2186.047553][ T30] netlink_rcv_skb+0x226/0x4a0 [ 2186.058131][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2186.072217][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2186.085288][ T30] ? down_read+0x2be/0x330 [ 2186.096160][ T30] genl_rcv+0x28/0x40 [ 2186.105300][ T30] netlink_unicast+0x7bb/0x940 [ 2186.117189][ T30] netlink_sendmsg+0x813/0xb40 [ 2186.129733][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.142400][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2186.154169][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2186.165271][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.176989][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 2186.188602][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2186.204316][ T30] ? lock_release+0x4b/0x3c0 [ 2186.209097][ T30] ? import_iovec+0x73/0xa0 [ 2186.213728][ T30] ___sys_sendmsg+0x2a5/0x360 [ 2186.218473][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 2186.223809][ T30] ? futex_wake+0x51b/0x5f0 [ 2186.228451][ T30] ? __fget_files+0x2a/0x420 [ 2186.233072][ T30] ? __fget_files+0x3a2/0x420 [ 2186.237961][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 2186.242953][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2186.248456][ T30] ? rcu_is_watching+0x15/0xb0 [ 2186.305874][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.312184][ T30] do_syscall_64+0x174/0x580 [ 2186.316909][ T30] ? trace_irq_disable+0x3b/0x140 [ 2186.321984][ T30] ? clear_bhb_loop+0x40/0x90 [ 2186.327532][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.334349][ T30] RIP: 0033:0x7f07a259ce59 [ 2186.338974][ T30] RSP: 002b:00007f07a33cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2186.347851][ T30] RAX: ffffffffffffffda RBX: 00007f07a2815fa0 RCX: 00007f07a259ce59 [ 2186.355854][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 2186.364299][ T30] RBP: 00007f07a2632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2186.372575][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2186.380743][ T30] R13: 00007f07a2816038 R14: 00007f07a2815fa0 R15: 00007ffe41ec1448 [ 2186.388897][ T30] [ 2186.519097][ T30] INFO: lockdep is turned off. [ 2186.524077][ T30] NMI backtrace for cpu 0 [ 2186.524097][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2186.524119][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2186.524131][ T30] Call Trace: [ 2186.524139][ T30] [ 2186.524147][ T30] dump_stack_lvl+0xe8/0x150 [ 2186.524174][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2186.524196][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2186.524253][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2186.524275][ T30] sys_info+0x135/0x170 [ 2186.524292][ T30] watchdog+0xfd7/0x1030 [ 2186.524320][ T30] ? watchdog+0x1c7/0x1030 [ 2186.524348][ T30] kthread+0x388/0x470 [ 2186.524365][ T30] ? __pfx_watchdog+0x10/0x10 [ 2186.524387][ T30] ? __pfx_kthread+0x10/0x10 [ 2186.524405][ T30] ret_from_fork+0x514/0xb70 [ 2186.524426][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2186.524445][ T30] ? __switch_to+0xc89/0x1420 [ 2186.524471][ T30] ? __pfx_kthread+0x10/0x10 [ 2186.524490][ T30] ret_from_fork_asm+0x1a/0x30 [ 2186.524520][ T30] [ 2186.524528][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2186.644059][ C1] NMI backtrace for cpu 1 [ 2186.644081][ C1] CPU: 1 UID: 0 PID: 4985 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 2186.644100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2186.644110][ C1] RIP: 0010:__d_lookup+0x1a/0x790 [ 2186.644138][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 48 89 f3 48 89 7c 24 10 <49> bf 00 00 00 00 00 fc ff df e8 57 f2 7b ff 48 89 d8 48 c1 e8 03 [ 2186.644152][ C1] RSP: 0018:ffffc90002fafca8 EFLAGS: 00000282 [ 2186.644168][ C1] RAX: ffffffff824a032d RBX: ffffc90002fafe40 RCX: ffff88807d065d00 [ 2186.644180][ C1] RDX: 0000000000000000 RSI: ffffc90002fafe40 RDI: ffff8880231cd608 [ 2186.644191][ C1] RBP: 000000000000b780 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 2186.644202][ C1] R10: dffffc0000000000 R11: fffffbfff206229f R12: ffff8880231cd608 [ 2186.644214][ C1] R13: ffffffff81000130 R14: ffff8880231cd608 R15: ffffc90002fafe40 [ 2186.644226][ C1] FS: 00007f6e181a6880(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 2186.644249][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2186.644260][ C1] CR2: 00007fe6b33ea2f8 CR3: 000000007d552000 CR4: 00000000003526f0 [ 2186.644276][ C1] Call Trace: [ 2186.644282][ C1] [ 2186.644290][ C1] ? d_lookup+0x1f/0xa0 [ 2186.644310][ C1] ? rcu_is_watching+0x15/0xb0 [ 2186.644327][ C1] ? d_lookup+0x1f/0xa0 [ 2186.644345][ C1] ? trace_irq_enable+0x3b/0x140 [ 2186.644365][ C1] ? d_lookup+0x1f/0xa0 [ 2186.644383][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.644407][ C1] d_lookup+0x48/0xa0 [ 2186.644426][ C1] lookup_one_qstr_excl+0x30/0x360 [ 2186.644446][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.644461][ C1] filename_unlinkat+0x2ba/0x610 [ 2186.644482][ C1] ? lock_release+0x4b/0x3c0 [ 2186.644502][ C1] ? __might_fault+0xaf/0x130 [ 2186.644522][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 2186.644546][ C1] ? do_getname+0x151/0x250 [ 2186.644561][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.644577][ C1] __se_sys_unlink+0x2e/0x140 [ 2186.644592][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.644608][ C1] do_syscall_64+0x174/0x580 [ 2186.644629][ C1] ? clear_bhb_loop+0x40/0x90 [ 2186.644647][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.644661][ C1] RIP: 0033:0x7f6e17b15937 [ 2186.644675][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 2186.644688][ C1] RSP: 002b:00007ffd46bb3018 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 2186.644704][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f6e17b15937 [ 2186.644719][ C1] RDX: 0000000000000000 RSI: 00000000824bb680 RDI: 00005577fbc9202e [ 2186.644729][ C1] RBP: 0000000000000000 R08: 000000008253f82e R09: 3fffffffffffffff [ 2186.644740][ C1] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2186.644751][ C1] R13: 00005577fbcad100 R14: 0000000000000001 R15: 0000000000000000 [ 2186.644769][ C1] [ 2186.972743][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2186.979713][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2186.988994][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2186.999175][ T30] Call Trace: [ 2187.002491][ T30] [ 2187.005452][ T30] vpanic+0x56c/0xa60 [ 2187.009557][ T30] ? __pfx___schedule+0x10/0x10 [ 2187.014440][ T30] ? __pfx_vpanic+0x10/0x10 [ 2187.019062][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 2187.025253][ T30] panic+0xc5/0xd0 [ 2187.029101][ T30] ? __pfx_panic+0x10/0x10 [ 2187.033547][ T30] ? preempt_schedule_common+0x82/0xd0 [ 2187.039040][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 2187.044471][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2187.050658][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2187.056929][ T30] watchdog+0x1030/0x1030 [ 2187.061308][ T30] ? watchdog+0x1c7/0x1030 [ 2187.065860][ T30] kthread+0x388/0x470 [ 2187.070022][ T30] ? __pfx_watchdog+0x10/0x10 [ 2187.074745][ T30] ? __pfx_kthread+0x10/0x10 [ 2187.079405][ T30] ret_from_fork+0x514/0xb70 [ 2187.084185][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2187.089311][ T30] ? __switch_to+0xc89/0x1420 [ 2187.095046][ T30] ? __pfx_kthread+0x10/0x10 [ 2187.099641][ T30] ret_from_fork_asm+0x1a/0x30 [ 2187.104416][ T30] [ 2187.107837][ T30] Kernel Offset: disabled [ 2187.112250][ T30] Rebooting in 86400 seconds..