last executing test programs: 5.582172138s ago: executing program 4 (id=3346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0xa30, 0x0, 0x23a7, 0x0, 0x32}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="faa26880d32bcfbafc694fe85236015efcf9f51e9fca7fa0b9e9eb8bda77f1e6f25eab5a65a0ed68d5c6ce553a442e590606eb61a7a4a39fe13814e20c6430c9ee01de0f28a76e6d1f86957ce28457324b30e699dc2e95e65f2973d6c6e230cac2a79ff74e52fc2c1311db829a881d1a911caf3c29b5e238f2b953ef7fdc20586ee7e031c839afa98d203b13440622f8a16d90814a6fa8f94823f824814a1694bd71bb72126265aa8255a106734d5754b3e4e8f2a9f0832f91d3c9c59c94cd68e5c62c5a5d778c0662be5352b858846c663de9cdcb5f2df4036e8fd727df63b4", 0xe0}], 0x1, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x48}, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000000)='\t', 0x34000, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000540)) 5.154699464s ago: executing program 4 (id=3351): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001100010027bd7000fbdbdf256c72772d63616d656c6c69612d61736d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200"/213], 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @void}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) close(r4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) (async) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x0, 0x200000d0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000100)) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r7}, 0x20) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000340)={0x8001, 0x800d, 0xffffffff, 0xff, r7}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r7, 0xfff8}, &(0x7f0000000140)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210000000000000010"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r4], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008840) 4.317753743s ago: executing program 2 (id=3362): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="7f45", @ANYRESOCT=r1, @ANYRES32], 0x138) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000003c0)=0xffffffff) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x4006, 0x60, 0x6, 0x804804}]}) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x5, 0x2, 0x0, 0xff, '\x00\x00@', 0x80000}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x40000000}}, 0x200000, 0x6, 0x0, 0x0, 0xce, 0x800}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000032202280f57b00000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900dd00000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="00000000000fb7300408003c48e8a3b74efa00000000001300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)="8cb23089a8773d9210f8d2d5aa4acb5105d961e37e4e594719dd4885ea7a2f001716c6e8ae4900ab8e0b3341557e761d03a8be16eff254d114c08683f97a976307f0539657af8cc74d5d2751b4efa870285570c4b59c4d73f1167b080898077a1276f1075d4968a0fd3d1b9c25318e81b32762a264653b45e0fbc295a547e1d723999c613860f06766cfcd2534055ea1b396eb752011fe479812dc4d82", &(0x7f0000000f40)="42a252901c9438d60f8643cc13b0ebf1ddeae93d520dd4f8c674912b27bd4434fc7d629546ce50258d76181d4eafa48453aaf0c5c7c3b751667dc4a4233ba9b46a21e03b0260ca907994d440e70c49858bef62b3aa138d938e0d414846bc1c9f63f6ae1d3740dda72ba94938d541ed5716c55e99d922df5f92a7fd719f0470d4d89844546c056e32aa45f2d430f4bc5ee52c36968909636c44d1", 0xb, r5, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)="aaa17b31e0be4779a5eb3f0bd82005e17a6b431b8beafc269a02b09a9eb53dadc067315686a0bfacc2c23e98468631d2f418cb37fd0ee9ffe65eb502b13db0201f84d022cb81197813bfb1c764965c05f02a573120e071b2137d714d1d797017a7b475c3b6146ec3f2a2974523e86038a6ec7eed4053538ad1afb96e8c0a1ec3f6046a42ad6c033a3ada70153e2af23500"/172, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0xffffffffffffff78) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000002c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="1807000000000000000000000080000085100000030000009500007b00000000850000f32a73a4b035df11883da15600130000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x50}, 0x94) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000010c0)="9d827cb13031dc42ee8eaa478d65590ea8282bb04997881f45e025dafed20f2b4fa8c2e223b445764ca4a62747e8019a194e00fdb80cb3a034155582eac3184b07135cf011fdaad138f7b2007eaf4bdd011a463f7ddf1e39aef457ce55b5baf51e2416c6e27404f396220ebfbda0782c3a0b28da1a63e36dbc98065834aba7763923219f4e9dcdb4c9b11420298bcdbab7ac23b07e1e4624c73f8e374847a11644bdcf616666faf2f00343eff49c9400c895571f3b7f1df1d71045b21ca22d8808a9958a8fd038bd68e7ab5c7050daf1bcbed0030ebc15515294e86e09cbf0c324f5c74c022a8d1d43064d76a0e07d283af0ce2f5f7f1e6a5913f75783c4239e0221a3ddd62df3308f2533587b37efebffea13882a5c5f4ad7fc50d4f23ae2bc2f016d675dbbb3f4ca31d9a988c75b78c961abf2ef0893ce383d8baa9cd9793f16d334262056dee2e02dd831eea196298abeb167a7da350b0dc315b11f876ad13776", 0x162, 0x4840, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0x28, 0x20, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x0, 0xb, 0x6}, 0xe) socket$inet6(0xa, 0x2, 0x0) 4.137293694s ago: executing program 4 (id=3367): bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getqdisc={0x38, 0x26, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0x9, 0xfff1}, {0x10, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "0101f0"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x34}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettaction={0x1c, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) close(r0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) 3.579676605s ago: executing program 2 (id=3372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003500)=@newtfilter={0x4fc, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xd, 0xfff1}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4b8, 0x2, [@TCA_U32_SEL={0x4b4, 0x5, {0x2, 0xf9, 0xe, 0x3ff, 0xd25, 0x9, 0x1, 0x3, [{0x0, 0x9, 0x0, 0x5}, {0xffff0000, 0x101, 0x7, 0x1ff}, {0x40, 0x4be3, 0x8, 0x7f}, {0x8, 0x401, 0x3, 0x1289}, {0x2, 0x0, 0x6, 0x2}, {0x5, 0x727cf3b0, 0xe3b9}, {0xfffffffb, 0xfffffff9, 0x80000000, 0x6}, {0x6, 0xb09, 0x80}, {0x3, 0x3, 0x0, 0x2}, {0x80000000, 0x4, 0xaf, 0x29}, {0x2, 0x36d, 0x8001, 0x4}, {0x0, 0x948, 0x1, 0x2}, {0xffffffff, 0x253a, 0x3}, {0x75f1, 0x1ff, 0x7ff, 0x1}, {0x10000, 0x7, 0x80000001, 0xfffffff7}, {0x3, 0x568, 0x7ff, 0x4}, {0x9, 0x8, 0x1, 0x1}, {0x5, 0xfffffffa, 0x9, 0x6}, {0x8, 0x9, 0x8, 0xff}, {0x7ff, 0x200, 0x1, 0x3}, {0x6, 0x6, 0xa869, 0xfffffff7}, {0x80000001, 0x4, 0x1345, 0x10001}, {0x7ff, 0x1, 0x3, 0x2}, {0x200, 0xeb, 0x5, 0xf}, {0xc9ee, 0x2, 0x7fffffff, 0x2}, {0xfffff674, 0x73d3, 0x5, 0xae}, {0x10000, 0x6, 0x5, 0x4}, {0x7fff, 0xdc, 0x100, 0x7}, {0x8, 0x6, 0xe3, 0x7}, {0xffffff37, 0x4, 0xc, 0x8}, {0x1, 0x4, 0x9, 0x771}, {0x3adf4f83, 0xe, 0x10001, 0xa}, {0x40000000, 0x6, 0xb, 0x9}, {0x9, 0x6, 0xe3, 0x1ff}, {0x2, 0x6, 0x1, 0x9}, {0xd, 0x7fff, 0xf}, {0x7, 0x5, 0x6, 0x6}, {0x8, 0x3, 0x7, 0xa}, {0x40, 0x6, 0x7ff, 0x7}, {0x4, 0x1, 0xfff, 0x7}, {0x2, 0x0, 0xd}, {0xd5cb, 0x38a512f0, 0xb, 0xf}, {0x8, 0x0, 0xc44, 0x401}, {0x7, 0x7, 0x101, 0x1}, {0x6, 0x9, 0xfffffff8, 0x4}, {0x5, 0x8db4366, 0x2, 0x1}, {0x46d, 0x2, 0x5}, {0x2, 0x2779, 0x401, 0x9}, {0x0, 0x8, 0x5, 0x899b}, {0x8, 0x2ed, 0x49f4, 0x2}, {0x80000000, 0x1322, 0x1, 0x8}, {0x3, 0x1ff, 0x1, 0x6}, {0x400, 0x0, 0xfff, 0x8}, {0x5d6a4918, 0x33a, 0x5, 0x5}, {0x3, 0x3, 0x6, 0x6}, {0x7, 0x5, 0xfff, 0x8}, {0x3, 0x400, 0x8, 0x4000000}, {0xe, 0x7, 0x4, 0xaec}, {0x100, 0x3, 0x40000000, 0x1000}, {0x2349, 0x4, 0x0, 0x2}, {0x69f8, 0x7, 0x5, 0x5c}, {0x80000001, 0x7, 0x5}, {0xbf0, 0x2556, 0x15, 0x5}, {0x8, 0x7, 0x7f, 0x1}, {0x3, 0x8, 0xffffffff, 0x5}, {0x8, 0x1, 0x9, 0x9}, {0x9dff934f, 0x2, 0x5, 0x40}, {0x2, 0x5, 0x2, 0xfff}, {0xffffffff, 0x80000000, 0x1a55, 0x4}, {0x9, 0x3ff, 0x7ff, 0x3}, {0x40, 0x217, 0x2}, {0x6, 0x6ce, 0xfffffffc, 0xff}, {0xd, 0x6}, {0x6, 0x5, 0x0, 0xe}]}}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x40}, 0x2) (fail_nth: 7) 3.457573784s ago: executing program 1 (id=3373): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e49", 0x4}], 0x1}, 0x2004c854) sendfile(r3, r4, 0x0, 0xffffffff000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a", @ANYRES32=0x0, @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6, 0xa27}, &(0x7f0000000080)=0x8) 3.357272565s ago: executing program 2 (id=3374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010029bd70000000100002202000000000000020000008000100ac1414aa"], 0x24}}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.901921958s ago: executing program 4 (id=3378): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0xec07f000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80800) mmap(&(0x7f00009f5000/0x3000)=nil, 0x3000, 0x0, 0xc3072, r0, 0x2000) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x5}, {0x0, 0xfffffffffffffff5, 0xfffffffffffffffd}, 0xffffffff, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3506, 0x0, 0x0, 0x4}}, 0xe8) socket$can_raw(0x1d, 0x3, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000280)={{0x0, 0x4, 0x6, 0x1, 0x2, 0xffffffffffffffff, 0xc000000, 0x80, 0x4, 0x5, 0x9, 0xe6, 0x1, 0x40, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001280)={r3, 0xffff}) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4ca31, r1, 0x95bbc000) 2.757032106s ago: executing program 3 (id=3379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000014010000002300000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000000006e9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000014010000002300000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000000006e9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.710243887s ago: executing program 0 (id=3381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_delroute={0x38, 0x19, 0x1, 0x0, 0x25dfdbfa, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x3, 0xfd, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0xffffffff}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r2, 0x1, 0xffffdffc, 0x0, {0x7}}, 0x14}}, 0x0) 2.709545087s ago: executing program 3 (id=3382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010324bd7002ffdbdf2501000000a59934c5e911ace8cb17a62295acb218a057deda077c915ae406397858f3fcf04473293ce3a674e0590c2e27deec561244fb870d3fc26ed57a00e159714c73da4279d8faa0d063f7215f552ab0f00337dcfbf7adfcfd4256374b7b563df7bfd570b82d3a73457dafa7b35ffef01964b3d81be2d6e60ee3f2c24816f4"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000400000000000000000000f3850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES64=r3, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$sock(r4, &(0x7f0000002580)={&(0x7f0000002380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000002400)="17a9b4b8e5d0f5fe6bf85306d5e4", 0xe}], 0x1}, 0x400) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4) close(r3) accept4(r2, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x81c00) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="08000000010000", 0x7) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x23, 0x0}, 0x10) 2.675197973s ago: executing program 4 (id=3383): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000240)) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x2, 0x0, 0x0) close(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4, 0xf, 0x11, 0x7], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x82f4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x2c, 0x0, 0x8001]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) 2.541524681s ago: executing program 1 (id=3384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003500)=@newtfilter={0x4fc, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xd, 0xfff1}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4b8, 0x2, [@TCA_U32_SEL={0x4b4, 0x5, {0x2, 0xf9, 0xe, 0x3ff, 0xd25, 0x9, 0x1, 0x3, [{0x0, 0x9, 0x0, 0x5}, {0xffff0000, 0x101, 0x7, 0x1ff}, {0x40, 0x4be3, 0x8, 0x7f}, {0x8, 0x401, 0x3, 0x1289}, {0x2, 0x0, 0x6, 0x2}, {0x5, 0x727cf3b0, 0xe3b9}, {0xfffffffb, 0xfffffff9, 0x80000000, 0x6}, {0x6, 0xb09, 0x80}, {0x3, 0x3, 0x0, 0x2}, {0x80000000, 0x4, 0xaf, 0x29}, {0x2, 0x36d, 0x8001, 0x4}, {0x0, 0x948, 0x1, 0x2}, {0xffffffff, 0x253a, 0x3}, {0x75f1, 0x1ff, 0x7ff, 0x1}, {0x10000, 0x7, 0x80000001, 0xfffffff7}, {0x3, 0x568, 0x7ff, 0x4}, {0x9, 0x8, 0x1, 0x1}, {0x5, 0xfffffffa, 0x9, 0x6}, {0x8, 0x9, 0x8, 0xff}, {0x7ff, 0x200, 0x1, 0x3}, {0x6, 0x6, 0xa869, 0xfffffff7}, {0x80000001, 0x4, 0x1345, 0x10001}, {0x7ff, 0x1, 0x3, 0x2}, {0x200, 0xeb, 0x5, 0xf}, {0xc9ee, 0x2, 0x7fffffff, 0x2}, {0xfffff674, 0x73d3, 0x5, 0xae}, {0x10000, 0x6, 0x5, 0x4}, {0x7fff, 0xdc, 0x100, 0x7}, {0x8, 0x6, 0xe3, 0x7}, {0xffffff37, 0x4, 0xc, 0x8}, {0x1, 0x4, 0x9, 0x771}, {0x3adf4f83, 0xe, 0x10001, 0xa}, {0x40000000, 0x6, 0xb, 0x9}, {0x9, 0x6, 0xe3, 0x1ff}, {0x2, 0x6, 0x1, 0x9}, {0xd, 0x7fff, 0xf}, {0x7, 0x5, 0x6, 0x6}, {0x8, 0x3, 0x7, 0xa}, {0x40, 0x6, 0x7ff, 0x7}, {0x4, 0x1, 0xfff, 0x7}, {0x2, 0x0, 0xd}, {0xd5cb, 0x38a512f0, 0xb, 0xf}, {0x8, 0x0, 0xc44, 0x401}, {0x7, 0x7, 0x101, 0x1}, {0x6, 0x9, 0xfffffff8, 0x4}, {0x5, 0x8db4366, 0x2, 0x1}, {0x46d, 0x2, 0x5}, {0x2, 0x2779, 0x401, 0x9}, {0x0, 0x8, 0x5, 0x899b}, {0x8, 0x2ed, 0x49f4, 0x2}, {0x80000000, 0x1322, 0x1, 0x8}, {0x3, 0x1ff, 0x1, 0x6}, {0x400, 0x0, 0xfff, 0x8}, {0x5d6a4918, 0x33a, 0x5, 0x5}, {0x3, 0x3, 0x6, 0x6}, {0x7, 0x5, 0xfff, 0x8}, {0x3, 0x400, 0x8, 0x4000000}, {0xe, 0x7, 0x4, 0xaec}, {0x100, 0x3, 0x40000000, 0x1000}, {0x2349, 0x4, 0x0, 0x2}, {0x69f8, 0x7, 0x5, 0x5c}, {0x80000001, 0x7, 0x5}, {0xbf0, 0x2556, 0x15, 0x5}, {0x8, 0x7, 0x7f, 0x1}, {0x3, 0x8, 0xffffffff, 0x5}, {0x8, 0x1, 0x9, 0x9}, {0x9dff934f, 0x2, 0x5, 0x40}, {0x2, 0x5, 0x2, 0xfff}, {0xffffffff, 0x80000000, 0x1a55, 0x4}, {0x9, 0x3ff, 0x7ff, 0x3}, {0x40, 0x217, 0x2}, {0x6, 0x6ce, 0xfffffffc, 0xff}, {0xd, 0x6}, {0x6, 0x5, 0x0, 0xe}]}}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x40}, 0x2) (fail_nth: 8) 2.540991965s ago: executing program 3 (id=3385): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf250000f867", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 2.319797598s ago: executing program 0 (id=3386): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000026c0)={0xffffffffffffffff, &(0x7f00000025c0)='\xaa\xaa\xaa\xaa\xaa', 0x800, &(0x7f0000002600)={@align=0x1, {0x9, 0x3ff, 0xfffffff5, 0x7}}, 0x5, &(0x7f0000002640)={@_ha_fsid}, &(0x7f0000002680)=0x2000}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r3, @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c00050000071400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002700)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002800)=0xe8) r8 = getgid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r10, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xc2}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f26e5b74640001000000100500000094dfa033fe5312e4beb85181b07f2654a39f", 0x24}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x2, 0xc044) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000002580)=[{&(0x7f0000000300)={0xec, 0x39, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0xda, 0x51, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="fb152269218ea1569c54cf3ab801db65f034494670aaef6a8f2dab301d8315c1ff03f9d9251a736f0708d25c8ca7a1acd4b17e274b8da34e2019276c42d7e6c5a0b51e1de6d5f21060e265f07b3b9592fb13dfb84378547b0865741b7fc6358ea76ddc8bec5344548fd50471a910520c2df6636c984a4211611a561b0c2682180cf58e0700545b03f0be467dffe5e331716c66198e1274976040f628b5be74290591deb69f7f606e07f0e58aca611f15b82d6a321d5d87307774ee86d53945200fc122841459517e648752d88e9f", @nested={0x4, 0x127}]}]}, 0xec}, {&(0x7f0000000a00)={0x560, 0x30, 0x20, 0x70bd29, 0x25dfdbfc, "", [@nested={0x95, 0x61, 0x0, 0x1, [@typed={0xc, 0x56, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xd8}, @generic="cbe8e7345a76ba2df91c55502a754c9825b9aa87c9e3772fcd49ce236adcd87cda3eefdccabe7d64222590a98d5ed4765c4f930f2c03e78d61ad8ed25e49ace68b1bdf3f91d2b544185bbcb066d4fb", @nested={0x4, 0xd0}, @typed={0x8, 0x4, 0x0, 0x0, @str='wg0\x00'}, @generic="7e97db3787c0fa4d75bf385538ce6aeffa8451d43e681e0986ded8f12441468e502a", @nested={0x4, 0xb3}]}, @generic="da8cd0900f6643a767b4e58dc5c51368ef03d5d58712e17de2df7ab7489f8630370b439925096fbb98d83baa1c6412ff31f9c1eef782626f7ae1143fbb6cd7b885613cd64a7a4eed5dbf2e3c221ce67045e2c9f1cff51fdd82f1c580d41e70a1262dd060d8f9c537ef812630e28f9ac5fe4475555467114c62ebba218e3b1f4a94270fdb3af53ef2955357c7016ef193e7b90daceb9f048fac331d3bb213aeec75cdf9a36349e404c3f252e1d819cff49c511b498a70af56ca05185fb5898cef6e27", @typed={0x8, 0x5c, 0x0, 0x0, @pid}, @typed={0xef, 0x7b, 0x0, 0x0, @binary="c9b054ca504bae223373d8cddda4dd39894d136698921dd27aa46fb2951684cdebc3ad01c2827de97bf204ecedeae62b72692a7fc0da1cccc667c4f3f3931b0411c7601351e71d622d98a4ce6b838f4ebf2d2fc1decd88d20492609f01b2d4824dc38e909941aaed893540b5d8b1c5d04f87327dcff05fa6313fc2c3465143a783beb63ad86235c93885b91bf62910886cae7d45ee388048ba966db4ebb135ea9b23a0929b084dee55729008948ec2f5a458510c0c303253c2ae0200af125e70d4237457e077cf9d596768a893c121638dd05eace318a6c6bf1ebf84384fa3012add4fe75b68892ad62515"}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @generic="98adb272abdebb3cf9b10d14f4ef009205976147e06c9d477e4a8c432c7e8bf7fb97abf0a369e138b8c355a02fe65803a9abf6642b87eb6a846939f09cdd5020870177dcefa8f367b87edadb5241ddcb7a84a0c60ddd4a03ac01541a6d918e88ad238ab4f968bfc4b2e3c9b02101e011c40990bbd857d3062af97c2b086696fdb9bebe5f63c31d732ae92b0a46f6efc3c51e791fc7230c4696bf0a1d5caaf0286aaec18176850c5a988bcdc8c889e252db04be4aabeed5fd43c3b30151b51bcef4621cf9d59596ad260fd42d8b7d261ae59f9b1e65a4815b4af1da35840e9dc9773e55f54fa7959a372b1bd1b24b5af1554d6727143019a6d168dda2f2bb", @nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x1d5, 0x42, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="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", @generic="dace303913252b8d9bbfec454afc826aa822f5f8c7320d8a85420dd9f2a32661b1b7e0384c0fbc8676398a95c99f2009310ed36aae681f0de72ed6fd7d11e9658fa2dfe6f7e727ee88cfbe2dea582dc1bd8abc272339ceec4d1543d1c0795279b98e1fa4a9b9ddc942099075361d3edef475c84efb058689aa8790f943c26103f344d75643aec4", @generic="33776f7ad108178f1174d40b4bd38cc71076a5c16dd97af555620cb753eec7743ebcfd7bdf96f3d681edaa131673b9093b7e0400d5", @nested={0x4, 0xee}, @typed={0x9, 0x11a, 0x0, 0x0, @str='\'\\:)\x00'}, @typed={0x4, 0x101}]}]}, 0x560}, {&(0x7f0000003cc0)={0x1138, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0xd2}, @generic="9900d3622f69f0f3f480b701b8d875910904cec71dbb087b630bc3ce820dfde35571fb79583d2898ca20f994025096da4b9dbcaa5ce3d4ec0398c8e0d798ea4fabe3d0256c6d1868bcce08a45bf6ec43257cf76fb75543419bb76a1b988a2d5348b3d1d8f9cc68e4061f39910e0529586c1eae1bf20debbc8bccf0b4fe386f2776eda0", @typed={0x8, 0x24, 0x0, 0x0, @fd}, @nested={0x103b, 0xc6, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xfd}, @typed={0x4, 0x11f}, @generic="7a8133ecc8b1c7ab7f51deb9aaa3d2", @typed={0xc, 0x145, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x15}, @nested={0x4, 0x12b}, @generic="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", @typed={0x4, 0x10d}]}, @generic="0410554876361f589114acf030125bb28196520514ae39d0b8c41cea23453d9c22d98eb5c7cf3fe2accf68099d1106d964ee45847d14e90b6000b5c4", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x4}]}, 0x1138}, {&(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800e900", @ANYRES32=r6, @ANYBLOB="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"], 0x958}], 0x4, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r9, r11, 0xffffffffffffffff]}}], 0xd0, 0x40}, 0x40000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r14) sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r16, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r18 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r13, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_PID={0x8, 0x1c, r18}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x890) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002e00)=0x0) r20 = getgid() sendmsg$netlink(r0, &(0x7f0000002ec0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc, &(0x7f0000002d80)=[{&(0x7f0000000180)={0x120, 0x17, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="cec6256728f23021b21f4d6da5477315173b5e0a93abe60dd37fce8e9099b696a7173ad5644dbde402d36f26648aacebe2a779e53987b9ee5a0c20eb711131d19cc3f76ef8f0eb976133fd05cc0a0b1b508c44a7a95a4f86ea8e64a961383d6db0a9fec15617f417d2373f23ddca64dd9207245fa2d55de93a043142795e711999f45525d109c687dd32273785aefc12", @generic="145dc76e2e951639d1583da0d696a02de7b4179da20b98aee73d7ccfbf8a149e74d67ee2ad94d96174eff656de31a02fb2b2cbb845876030cca50c9bd260f0aee77448fe8711e8a9f6dca4bec8815c84457d1ed458d86e51a96aa1718f0ad88923c5378444beff585454f3e2bd55bf77426bde7d919c8ea2ec1dcf2d68a328"]}, 0x120}, {&(0x7f00000002c0)={0x170, 0x2d, 0x800, 0x70bd26, 0x25dfdbff, "", [@generic="1e073a86a827a33282cdb81adf37a1c70bbd43567c4d15a9837c15d174d8b79438c23ae5999286e3515d415dff13135f69b85c36091d9cf3c737ecc32deaa01292bf4b55f168bb1addb0a3cc909cbe75db2c4d3aeef6e4c06de0fc99f29f8bb3dcca4cdc1bbf4cc0c9486c2ef63cdb646838dcd6e1885536da88eba99d25ad5ada292fa66ea3cc269dbcb4f928ac7a45579241e88c74bfab7f63994b88f4a6c6d51be1934fc11251971f7bbc50706e3800ccc42bd3eab30299e8f5ad5eb5792731174b6f90031733680bc2a0b8adf7706c319a0fa3f06f53", @generic="8225983008776dd80c22b7017fc44833f1a4ecdb086f56360d06981cd2ccef295a36fc807c3d8541fb9043a92ad285d168034f21be551ce07bcb66720f", @generic="dae5d69966407f49993964ac5d2f15e04762439fdcfc61b56a064bb2d450f7a5b472164e716afd644343dd9c6a8157d1a35ad401dae7f60c083af43c2b41423b50b77344385b15b40628"]}, 0x170}, {&(0x7f0000000440)={0x10e4, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x6, 0x12b, 0x0, 0x0, @str='#\x00'}, @typed={0xd, 0x133, 0x0, 0x0, @str='\\]%x^@{\\\x00'}, @nested={0xa8, 0x7a, 0x0, 0x1, [@generic="32596900edd3f1269584f455a60ee62ee9129c9bc61aa688915f42c195e443af7cbd37cad1c8ae749360573860ba2a389151a917324c6955cfc405dd89f0e49f35951781c5c8a893e823b75805c1bba4165469b2fad43d2742f80e28aae11b5364bf8a65cb640a7a2c973b9611a8ac5dc62bd6f24f494ce50eb0056ce412f18457b930699a5100f9c3fdbd115c0582f17df151aa", @nested={0x4, 0x20}, @nested={0x4, 0x146}, @typed={0x8, 0x9d, 0x0, 0x0, @u32=0x4}]}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="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"]}, 0x10e4}, {&(0x7f0000001580)={0x17a0, 0x24, 0x800, 0x70bd25, 0x25dfdbff, "", [@nested={0x1234, 0x52, 0x0, 0x1, [@generic="c20436d2e3fc246a9713ef398ef75e24f1d21b8fbe331d45cd46e36ad016edd447c0fd498a0c4f52bef0c8be61a01ccafdf71a4a3cf6fd06f8e5be331c6351f61d0fbb0d1df9a9e568d126852728134cede7bae1e5855a9716c7d6ba9ce3f46b31437fa2bee190e59027ee5faf3dfaa9e5de329e65fb1e31a707d1555af6ab5ed11ee9f3bcbabbb0f3117f403c0058cd6a0b0e92e9a17f9f7ce9568ab06e94c574718ad91e6815e7f9c9ecafa6e8acf79ad6d807d82b1d042808ff16b86a32a275a8bfc7fa4b57ee83bbb1df0a02d720dab3eaaed0cc514139da1c", @generic="6bd2a62fda530eac6e15859026a78d68659d5523acb6586ebdfc68ef077bd30ac2e77e8fbb1a013d3c0174974bb17824e635288c25e977b4f6427d0d2f905642498c1e431a8f1f4881e799d6", @typed={0x69, 0x148, 0x0, 0x0, @binary="052d8183f6a275902bd4bda3374c8fe985f36e3c19257fa0343ce34b22444e6acb4299147d24804c6e6d53bb33472448f6d47ac7e33d08f1e16d6e4b49a40065d5aa3627086dcbb03195e1b7e05ec3c13d4f373ca130a67b940f40c6eabd3566415a239542"}, @generic="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", @nested={0x4, 0xcf}, @typed={0x64, 0xda, 0x0, 0x0, @binary="1944f1e60799f0a04356de654120ffd854bdb2d3c70e166be7b3e62c4404da1fabc36de7dd47863f6d0ed69d296897f5fb641303964455a5ed18251bfc5104ff4f84633c440c93c5652b3fb75760af3d684313b4994d32c4247db0ef8076a6d7"}, @generic="e05786523b5294b4bd44a6541aa78927d0a0b046d0cc97d4d44b3fb3974f6e99ffe9a308080968f1607ee835c74384098680432b04"]}, @nested={0x2aa, 0x106, 0x0, 0x1, [@generic="9226dda2ba1c8b66e2c70429ffb331c570a13dc1ea18b757c291c544790c3d7225b3553a424c368fb5b23ea5e4e86a2d6e87dd4f56c8c3a1f7a159cb2c4519d012f8b7274215a5da935c6c814888a7dfccc2f4868c38c989141749e1c6c0b2d70fd691d18fb37307112961ea723eea8d52839e28569318ce68bf6e42e1d98758249b896ce1e77f35008776dd66f968b715fdf2c88545b521075a6361131d727f29308c44459be505c52f89f55790904738dfb306c13c4c2934df390469ad4a77b49f602e0cb8a415517ce0ffb7204666bb2158155cc72e48f7c177e1e901", @generic="3c1c683a9fef7c98c77f1abf85dc911ac06952e7bec32e6ef39fcc667d006876b08a8aa810c4d5473d84b3f687f69ab4d69c4ea010e1bb7720372c1f785ec8088130a073e3dcd15b9db4554f087b560888d46b32cf04154c7750", @generic="48d757ce0427551b55f22ac486d2da21951210ac8079beff8c4037de4b71e52a751d6611de5953a9e3e4f15ea1c919abd3b31eebf97823f248ec5421c76666dbc17163c38b3787fa46d71dfc6c92ff9577b543ceb3affd5274b2b7cab0a705971d63280e6f8559b4b231b18bb6de115886a072beecec5d8a8ccb0c5f202939ad6ff68959de8c5b7fee20f143f5a4ec1c9376bbb9797fd9cf268cf29802206cc6f7e48f24b94e10c1db31df3c161dce012728bdac401bb7be022bc1a55a4480ebc594e97b6fa7ba2ad278c8bc2564f0e42ef0e8ed5661df869179ae7d1ddc3949c2492f6994e1f4f52a88459ef1d8dd65492a5fdd567cdf", @nested={0x4, 0xf8}, @generic="96479a56fdd06391fb3eb149cd9d4ba0e2e51b07387245bbff2738ed4e3a9649656f073c074b2517f0e6bfa3d3c8710b01a675b7a21bd6561ef96773263bc55a82fe9f92c7ac4fd10830f94112e1004a9c3e7977c799d7186589aefbf5f5c5a22d080f234bf830", @typed={0x8, 0x163, 0x0, 0x0, @pid}, @nested={0x4, 0x142}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid=r7}, @nested={0x29e, 0xe2, 0x0, 0x1, [@generic, @nested={0x4, 0xea}, @generic="b311608e3756cd9f62640e3086fb9769a24181b86cb4f9320ee7751649b31b80a5040e39a733cc5e8594ff417ed3fe9fe9b92a08180ee0e4eff4643640bf063a713640c021fa28ee4a9cd80cab27518914b9812711da64f595487202f4e7a87e6792e5c5b1ccf1c1bb4aa3ddc45104eb176dfdf97b62bf695f5542abd008345ad8f798541d125d7492dbfee690beb8262fcc1c9612a1b3c145a89eb8ec21f66ecad8c4a2efe314f03579b3f81cb33ebb86e79e224521a260ecb81b980cc2b87a4c24c9fb6994045d781f9cf048d8901e0b8070e38719569163f2", @typed={0x46, 0x51, 0x0, 0x0, @binary="7b62f495b99c9af8e4661ea16ed6fc2aa87cd0af89b8b829f2d8b685662a6d9ab1c1aec3c97622a4247f20c0b06c7a31581a9fd840cc5fc449573a77dbebcec97c3e"}, @nested={0x4, 0x118}, @generic="1d123e2f8e9cc4601e983ccad61a87a81ef84fb43b23239cf22a68c127aa240a56a075afe281f7c7478aacac1e15dd2b5da511f4bf7b93456c2a7cd655631fbe2c6a84620370dbbe8804cc0f424593f256af91a033affbc4b9121f908768152e8c0e82071d0f025df9d8", @generic="1a497d7145c01d232ca626356e55b892b9b574c8ea7732e927b2b80e722f2efdeb8b4a34205bd495c2b42bc98dfe58c4ffe6e1866ebd3bc21c9d8fa88fbbced3e2f81c7edbbdc4ae2727894bce10df8c62e7bba646fb70d45245a9de22a648645768efdcd4c8a2e6a04779c7912561099414a69e23c1c55d28901562c52fa6ea2b206f0d77c2e3c0fac6abcbfbc438fc712c53d82e35890bc8c013e45ca95af9c561e2ed1f3b92c08e4c50a3c0722fe12ae27a4fbd59c6a08efed6ae52b8a018f44a876f65d0fcaa79eb9a08c84319601848eb13d2bc5ba7dbfc394a7b64230a22c1a4522bac03350110", @typed={0x8, 0x25, 0x0, 0x0, @u32}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}, @typed={0x8, 0x6, 0x0, 0x0, @fd=r0}]}, 0x17a0}, {&(0x7f0000002d40)={0x18, 0x33, 0x300, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0xfd, 0x0, 0x0, @u32=0x8}]}, 0x18}], 0x5, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}], 0x48, 0x4040880}, 0x400c084) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000080018000bac0f00040019"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.290116332s ago: executing program 2 (id=3387): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000002000000112006558"], 0xfdef) 1.608735834s ago: executing program 3 (id=3388): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000002900)=""/4118, 0x1016}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000480)=""/61, 0x3d}], 0x5}, 0x7}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/14, 0xe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f00000039c0)=""/15, 0xf}, {&(0x7f0000003a00)=""/86, 0x56}, {&(0x7f0000003a80)=""/104, 0x68}, {&(0x7f0000003b00)=""/47, 0x2f}], 0x8, &(0x7f0000003bc0)=""/227, 0xe3}, 0x3}, {{&(0x7f0000003cc0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/149, 0x95}, {&(0x7f0000004e00)=""/90, 0x5a}, {&(0x7f0000004e80)}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000740)=""/237, 0xed}], 0x6, &(0x7f0000004f00)=""/4096, 0x1000}, 0x1}], 0x5, 0x12000, 0x0) 1.210391511s ago: executing program 1 (id=3389): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg$unix(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/119, 0x77}, {&(0x7f00000015c0)=""/231, 0xe7}], 0x3, &(0x7f0000001700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001800)=""/34, 0x22}, {&(0x7f0000001840)=""/176, 0xb0}, {&(0x7f0000001900)=""/67, 0x43}], 0x3, &(0x7f00000019c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001ac0)=""/246, 0xf6}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/91, 0x5b}, {&(0x7f0000001c80)=""/237, 0xed}], 0x4}}], 0x3, 0x40, &(0x7f0000001e80)={0x77359400}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d0000000000201040000000000000000cca18928140ad718a1d56d0a000000440001800c00028005000100210000002c00018014000300200100000000000000000000000000011400040000000000000000000000ffffac1414aa06000340000200003c0003800c00028005000100000000002c00018014000300fc000000000000720000f7ffffffffffff13000400fe8100000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe80000000"], 0xd0}}, 0x0) 1.077868083s ago: executing program 1 (id=3390): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="280000000000000017010000020000000d000000262f188c369dcd1800"], 0x28}], 0x1, 0x40800) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d0011"], 0x70}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x1403, 0x1, 0x70bd2a, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000eb7717681c1430c29f001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c0002800800014000000004240001000280080002400000000c08000100000000000000010073797a30000000000900020073797a32000000001400000011000100000000"], 0x94}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket(0x11, 0x800000003, 0x0) bind$packet(r11, &(0x7f0000000d00)={0x11, 0x0, r10, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x5, 0x0, 0x80000000], 0x0, 0x0}, 0x78) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x3}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cfee09b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34864774}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x91) 959.718633ms ago: executing program 0 (id=3391): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/time\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x4c}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000019) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f00000000c0)={0x7cd18589, 0x6, 0x2b24, 0x0, 0x8f6, 0x3, 0x0, &(0x7f0000000000)=[{0x0, 0xfe, 0xba01}, {0xb39ba3a3108e9d4f, 0x1ff, 0x7}, {0x1, 0x1ff, 0x8}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a18130000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000dc812128010000180090001006c617374110000003800018008000100647570002c000280080002400000000108000240000000080800024000000008080002400000000108000240000000052c0001800900010068617368000000001c00028008000540ffffff4008000240000000080800054000010000bc0001800b0001007461726765740000ac000280980003002c43892cc03facd5850a7063e075057638af0b64b4f970b90731529fe17d6d3dc6c7ed49a441d52c8bcab9cf18c548af6e226413b77031b65f411d486a30368afdde33d683ecf528e1d896a87e65b984cd801b08ae740bf53a64ad1523d0c9716b7fc6274e9fe7c56d6c1dff112dd091370898d72700715da75d7818d680fe9ea5a8a3b50d09f61d7a74466e6ce0a8ee3be49ef608000240000000030800024000000001d01001800b0001007461726765740000c0100280b0000300dd4a7d10b61a75995386610a2db36b485b1d1f3d6054e1d7473c7036a69702d96a385991c94f9b03694bb7022dbf24e6269756fe51cedee96dcf97c13686c04eb325269552d36c0650ce3e382ed0fcd0655dd9554f3472bae64add338f464a7a595eae8a5045954c3e25cd04b5f07cbcb90893f447ed9181297bf7bb9932245fa33dd22df7d00f60d83345d71fd441769887971e412203c6000cdde8788687c48ed38854da2a5cfda2c1de580700010043540000041003002c2fb388765199ff5da44c07364c3c4687f33a8d11688ec9f6750ffd99c985b64533aa41bc2706388893727876ced8e42111d09627425ac77b4f51ddd8b96671e70414c5466ca8320719c68167df7cfb4eb4d62e1e8800cacd8d8a64dfe8c135d5e27d18c5a9a0f39a1e0f2ef05192af767aac2209fedff7f8604a9112b2ad63e486fc3b09558e1bf6c2b891cb754e17cdf3f5438cc89d496af522323c4524a38c13feee9153137185ee9e81ef30309ad8a3130de8ea70f7dc03e317ca2c6b0b4c61060c646c7c116985c15b5f4f9c8260179c3776d04b776010907476a15373287452fbeb48e093d4c32cb4dba76de24372d591e858dc67fcca040b38603edf566d5bc810aa6b69ff5fd9eabebb1d7ab5025b3e523021b2c5a653bb299b5ff4b6b9aa99ce2eb1f8f92c000ddccca009a33a5c8c1952cf859d411740f891d787582d060bfad4587d9744c0bd5c9ee0b510cfc98132636cb95fd7aafe8900b7a4fcbf117e8c97a0d64acb2b2f0c829dce3fcb00f88c0b170cd3420d4a128f485a6dd50dd6cc0e602d538b65ab11cc23c552a883c690aebf8ef8d295945731240603b9fbb2e6af494926b47333e956bbbdf71275091b44bf5bcca20edbe1431107e2141449b480ec4a62155c74e01ac76e743e4845732490623700dbbfad2e2e85ef2faf5d6dfc91992a863725c74a0e59c3f7b38a2abb45b0f9329c82030f1927c98d5009212fa356c05b788f5c7df68a1e7c3b607e0027282308f2cd32ab4d9ea471f916d885548055027981b3f9aabfcde9ff81b9a36f279081c31e4efed06609b0184404a0da941470c96c1a23eed429190b5fd883564a18bc3b8e9133120de4c35740d3cc63ca5dabdee04ac6463e98364c23e61a60964c5ac9c5f99239e302e90cbd1f93439fa046bb8319eb73696b3e6c341826d5db7da5683e65773d0bc9676dca3339e0c7a7be53fc74d32d73bad9e81a3ae77917d7b018531baa8c91a0742a3ab3bc375979dcd0fe2d73f288828e371e489377e5abaca76f278e7dacf47079519a023f8625f092a635dc45fb78e5733b250a46fb8f45b9736bebed9a6cc2e644de3d2dca9f97b38bb233a9f1cbdc9b38f491277f59a47243bbc78842eb25899fccfa1291aee563521dcf2eadb5406870e724fdb491e677ef22066cd3331fe5eaca9a3644eabd359ec5bce113d9df42009de007d65f197c01cc5803444285e21b0a44ed56a9f1a7f94aaeadc8104002aa70f47e2971b166087baabbfdf842d01b5297135ac24c67a592999bdd1d5f752610ef18e1e1b787b315f072cc97724a660970a46d203e62c5dc462d4dda93e8a02ea0f2409f51bcddfd2b772933cc5875b2dabec4e203e025d6b979cb5da16cb746cbc80b9c8626e38e75cd605e9064032ca8c1cb701058b83b4b53d05478370a005a903758ba84e9d85a0248b5749759ea6f546daf0380a2ca27a9e5ace1cc02889d98fa6dad7395cfc43b8b06e0264fb8e1dc8995b618535d8336fd81346afcc35d5d4a9189a411804b551edc649ed66d78be273bc90c3e39305f30cbe6aa10a50f4b3077863f39aedee4aaa029e963304036c831d8a9d87ec2e321c17de5611b316c105e9cbfdaa5974c52fa0a57db2fc575d42cea331a01266a88e6f8c48abec2bea4dc866ab5a46200a58e36a37ac6ea842d52aa23a2d703c59be6a2d122ea5fbbbc2a5bcdf3f8ef53121132d4bc6c926a50eb7e3207a3436a0f607fef3e8f13710a1eacc8dab7109c7bb56a5e8b4a8a6b6852570a40ce02df399fcac57d2a02833f70d94fbd3078561d37c2436a43e12137f6acb7f9bc05cdbd229e8fd24164862c1ec8569c4c56b84a59d71c7fbebff712d63eaca008c24dbe1a3dfe6ee330c687363c253fe1db2f2b6dfa8605ff03e3823a2330da0ec547ce03509fc4e1b3734d75f43c782a27cbccf2b12a884dd3daeac82a12f26d57d0af873c61ddf557c08f6ca31c65a00705ce464a1db25c2dc31bf5c2eeddaad3440292637a3eff2d7a06bba3d956206ef99ea7cce28f25f506a96112252f728676d984d037415acec0e346ceacf0fbda480720c8bddc66d7b564aed25517a2a6b8645214dc44b0eabcdb025286aeb25f406352319b41d6a36d345685515b7353edbadb2b906f7b636b4c20d90b203041ce76ace931ceedce70a47dd39e2b035dc630b12062720b3621c189b389b425342e00897a1341acff28692fffee2c55c62216ebc68e624a87cb9499fd223a16d623ab4e7e412b16a5fb37988ef5608a35ab84a4a405865f8f3b3c3dbf0c0834100efd429baa8a3335212351f697079fd30c78aebfb4b326e6cd47983bc0e1b6a8e3d68fae8b1abfd2e1554585f77ae8d6048603b147e10fb97754a49ad36e28fff221663039e7b6bd54b5cfc7e213877f9fc48552dc889e70257d2fa14bd30e563117036e3467819096f2bcf0a72ab3defc0a850629d80ed3e813006eacfbafeff8b36ea9ef0c0925bfe8c5366c88d41ce8275b17bb5a0395474abac13bf5bd74f87cf07fa55759ff90bdf7447be224f5dcb4187d0c1b2da98b9b004ac6961b576fd76285dcce0575870d40bbbb2cf890438e8079b9a3541e094715f8d9a63cf142d7804a51d9ecb6ef1deba43df13cf50fc27513fb6b2d9ae46b10e74c25d9e152e246e70f496781c731e8f4b8c90d01ce309bd16debeeba6140eca792e35d581d6650ca3e73731ef9a38644dcc8a40366fe148d1d6e4a855917926bc4d8551802718189b646e4f33bb178d574e13470cdf67206f51a9b2a0bcaa90c3f0c3b524c9276b0da2a5b785beea84294b92bdf05b853654c2abf41200396d8554731b8ad4354a2b88606d1eeddd5ef4b57cff4f18a16e9e8ef39832c7a8b9f8c8cf7ceba90f43ea6e04f0a3ea85cdff1ad7c344d7c4c27c000261ae3d78ca33476bd6cfdfd7dd65a73f2e30d396d5562693dd4bcc2eb3fca8cb9c1508a5fc7696d8c38f496bf1cba8f46c25260cd67534df92aab1d0310b9cd3c580210f6f7c46e320a6cbbaca7e1e93a9e3f613fae1350829f110403a85a1a7f894250e571a8defd3c0257abaf121aea1724913fdbd4e7a97f6e092cde2d89fa3eb293a1a87ff29fc7afb57c55b9331445bdf1a687cb4f0d009ca616861015d6202f797185dea8f2426e10911c912950bd4e5cc04113dfdf48cafa512b63011128c0f32968244a620fb69567df7f0bfca09666888d533d1e353fb0f49b83c73f7e259378a95d7456c11658bb50d19fac8e39fb426db2130c96933fe2d0c7445075886e4aa8b30003ad4b51eb818f4190bd0c9fc733cde755ba768204a7af6847daf60ea71a51115835872a6bdb4bd4b278a916c0cc4f3e8a746050ad7b76be248d0c0d21095d11c1f1a69c9ca86812cccd15f95472dae8640fbf8439b8c20f92c53a3fac06452fa8f277748adf775f900696820ca09ea16f41cb82d164526738f45f3a89188111d9ec57ee537eb81940ea5c9e37de9abce8ae8925c878c198cef8b1cdd9f3aca43160e3e28e26cf78979e52186d294eecaac07309e1ff077fe3b2fd3b0452247137fdae1ac5909ed6200acc47380631c84ec80dca23844ec99156b729d14d65a85621a7c039abe268bb7b309e69ed8a92e424b7885eb06b6dcab858e3088179ee6558290af0bcfb22bdac6331b0de61dedf09669fb637ab4e82b1c0a2781d7bffa002fdcb25bc2db53936b8ccfdf272200649c09e1454ca8558def334b54c59470c4404548e535cc5c9623669ed12b6d9450f6ef3c35ca88e2cafa4a29c88e99755610d3c5b932bb5f2a0fea8950e6f820364b463b4556c3021e190f549750e2ad963d78b9e8cf498298b542ca1dc667b3b85095aff0c4bf47142fb5295fb4cccc7546a36ccaa62fb850e5af07bec432f444365e68be9414f01d9ee378a16084c28ac181eb8f41af29707433c16d93acef1a507dbf9f21a9915d29d6df0b7f9d090fe7e8a20dcb8620f4e475eb19d9d73a9f2c7be474ac1b988eaf4a12447967dd5523449a5efd9bb2a191519241c60593630537a3553be0c4b7e9f8d9ad429c4ed959fcd7e3542a8ee1917492fcb5a9a35dfb3f267a8846c335fca31755b66c8e11ca17befe6f3771391da35a2686065dea084e6255598ad3b51d08012a012ba8690605975529d394c394f6cd56a703e51cce311e30afb7390e9aea6c3e620c7b88b8f203eff291ea9caf751c219b4989e3ab38406154a182535987535feee276ce221a503681f18c1873c4fc56fe3b0dc86d9a4ee8fbaf5c0bf4d06f7c11beb21bbb7efc60248d156975cfbd828b7778df32fea830a5b53e6f742cd5598ea13ba49945a5ab10b5a847170d44c8a73e17f1a234703e1c3875ac11b21515d42ced48dd556e417c25857da0362cb7233403e485c1649ac6fbd6e2854196c498d9757e54a180bd42ade1617c6d793cb9d788dfa60c252ccffd4fea643e8969574b1bbdca0ed9d49113fe864fd331f00ed4bec99a5002c5a53bd2f6c75e2b61c56c6be07aa74a3207856599f82815f747ef2c3ed30169120a020ea0cdbc889516a10414f9708cd10c035a949b6ab9935062610782aa374098481fc9cffad9d1be1c1dda28e42d862db137b5c9f8588ecd83337dbd6e402acf74bc86629d9d8af063912e9c234381a44ad95bf67e31566441f50d51e6c4532336ab3e78da671e65391db657ece7677a385df3a23e3a9bb132698c4a39367a5a67d9d7fc405d098573a35ea50eff165dc4995b5b1970e948d86113974613f2667c33246128d78d3bf5ced5767150a639f07c5b1656bf3a6187f3d5ec0440a256e3fb1b484b68f8d9c2d760b85809f0a2e0e224604f48533081ea3839ae8375e029a2adc05217bb57ec29e20e24af006167ed6458599ff17758cf61182e0c8612dc3d5f82c1c5689386c8763baae4cd4c98f3901550a94e4ec9ff0f441ffb1527df494737b2c0700fde843b2f3198967809813d7d2a115fd81bf616188b498710f16654cddb1259aa65fc497354b379fe5438417d3ff4448ed5805f6faa63e348dd59744662bc9362dfcaadff55c6b6e50dc34aa384f40257ef1cb8fea85e3c090c9bb77b059e297e38008b969a6fb86be6805dace8974b44933c10e8e3e7eac5a9d08e2bba8592980af41c9293a6388f8bd5a8e41eab5304b4d4f1d41eb2066b785fe077eba04ddbad3c8d1b91af51680f2b02189d041026e1c4899528862629189cf3e675552c702dcab79d97ffff9b75a742d3fd094aff6bc0bfa362bf75fc485a62b5ff1e38dafcd71412a8db4f24044db9bd0c0e8f302c566e8250c7b4ba8c7367ceaec9f0895a87c90e2de48c391655892a79a2cf44cea81e8b22074dd25b00489b989be6bc440c70bd62cd410c768b5e7cd3c25a48c6a4cf4aec66cd8c0cf4f60e05c51ae592fa79dffc8b7fe69361e4df00060d05d3e74d5836a65f0f04d793458d66b21e65b945ad1c2e7bed40c255afd3846bacb1a5cde9e6b52f2d286ce2fb3a7387bed5c1c8342c659c359f05d70c5d10f9d49d18460356e6c97f2aba5e835b2d008c227b2ceebb763c3ec96c022eb2876180352976c6520c09c941d7274275969983da306988944ed3eac263e81d675eadf4e14161fdb19a567bce9a086bab7a4540be414730f418f966789360b965298fb0ced2c328534b32331f1f85f525f4d852178d0ec68c517aa59cb0d3a717020a827392c1778193d4b5dbb425db32250abb7ea0a6433a2278b5bfbf58a22b9a034f8ba5249eb9f8d02d49c61e20423c65d1014cd07a2fa440001800a0001006c696d6974000000340002800c00024000000000000001ba0c00024000000000000000030c00024000000000000000010c00024000000000000214841000018007ff010064796e73657400002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3100000000480001800e000100636f6e6e6c696d69740000003400028008000140fffffff70800024000000000080001400000034a0800024000000000080001400000cdfb080001400000000708000340000001"], 0x1340}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 957.371472ms ago: executing program 3 (id=3392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x5}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0x8, [@fwd={0xe}, @union={0x0, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x1}, {0x3, 0x4, 0x7000}, {0x0, 0x0, 0x9}, {0x10, 0x3, 0xb}]}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x2}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x2c, 0x7}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0xffffffff, [{0x6, 0x1, 0x1}, {0x2, 0x0, 0x3}, {0x6, 0x2, 0xe0}]}, @struct={0x3, 0x7, 0x0, 0x4, 0x1, 0x9, [{0xe, 0x5, 0x2}, {0x2, 0x0, 0xd}, {0x2, 0x0, 0x1}, {0x6, 0x1, 0xa011}, {0x8, 0x1, 0x4}, {0x8, 0x2, 0x72}, {0xe, 0x4, 0x8}]}, @union={0xc, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x36261e042923a48d, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/121, 0x14c, 0x79, 0x0, 0x2390ad84}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r1}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x3d}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x6fa54fc7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x127}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="7fddb1ab3ac794f837f0b74c6f42d0c7e2b43c4213f8b6f8fd5d1001186155b0c8edbd682999464cd9e2f34eb1e5e3d174188e094d7b13be3a28eb4041b9c1c0f166216e5c1910f9cbef7a4444f16e7a0a210e035c07c880ade16cc05e94b117272bb9173ff5ba2923", 0x69}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0xd118, @local, 0x51e1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="614191d8ad2e2999672bc6db6d2c27f6ba68822e1e5616113bab9e2dfac34be02c6c82289f3566824f7fe4a0743c9887f240bb638f13c6aabc89ed198aae88b77045d8d46a250ce75bca9a349f213e077c8feb6c3cc277b79c2ab23a7568276119180adb65d422cf4e7ea1e9f543940bc90e2ad0a58c20f260faf2af67df6b27b76e68599b3d1d225e45c3c4a4960a75e092d535ec699061feaf77e3a52f22bd3d4f655fc41067a18230835159777459d3fefbab39cb8b05e14de287", 0xbc}, {&(0x7f0000000340)="08d5ec49144e5c00c1f8e06f9edcabe51de51d2ff0ebc3f64cef3662123e3dfd0884f3099d10e0071cc8d15a30bf796e8604c07722380675458368b7b41998eda1cbd1fdb3da0b4d6f6f12ea14ac6af95ddd5263cdcaff1895fe3fa2b93cd71157c1d4f2c980bd487ac07d0a2058468ca66fce53d7b4a67ef4b31f08130735948601562414f8a297746c2f7eff242c60eb491c2d62e15183f7db056f2f26e406af6af17fdb24d01e0998fff5a4363a82d37df4e3eb55e9ae5a9863245352e8aaf3e64560b2a44ea8ab4f3c851d4dd018baf88a8bc1a001d7441fc66285296e38c74006378f18", 0xe6}, {&(0x7f0000000440)="85d0be92f369", 0x6}], 0x3, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}, @rthdr={{0x68, 0x29, 0x39, {0x84, 0xa, 0x1, 0x9, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x38}, @loopback]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="3b5b18860c6af3c1a9f4d931faf4770b53507a52725c060a7a8dd48cb632c8d8d2168d0b13b7749afcb490dd6e0425a635e8d72296553b", 0x37}, {&(0x7f0000000580)="a3019ba981bd84f2c38232867a97e47334d8bd00da8169cc066d2c20487b4ff3bf1a395a809754335fbaf3c4ae97a1856892d74d8ac7e8c22cda", 0x3a}, {&(0x7f00000005c0)="0aeaea22a1e1dc5c4ddbc018ed209e323be25ab5372df067811bae40001d8321bc6bfdda7d049990ea709d33a2a8efc56bf865343d5510ccd5888900d15ff6e6ade8330fbafb01a66776b5572c7374519092e731370a34fa1bcae798d56457b920fc7dd0d572e4cd929c3a7584bafaccd4ff2f780534769b64bdde293074fe92e7d93a233567bfcd3c4bc369aa6779dc", 0x90}, {&(0x7f0000000680)="5b0015f08bebf478aa7de6d07a5a622c255c82536beb65264f76feab27910f5cdab61440fdafe0a703d6206114755bf594007b4aaf0bc31b06071281183290f9710613dae77fc509e6cd1f436781b4ac448f097c7a49086d8d7d906527bec0d25b76cf52f26e391f055d6ececffc07109752a684b88324c51490a8bfdaa99fe82ac55a1eb36da59c950ab6a05b7ab5a3d7c0578536f4288a7d94d7d129a0b01f1ce2910b", 0xa4}, {&(0x7f0000000840)="63e5feaaac96b414e780e4dc51bf10a5b6b2b8f60e22e1e9710dd6246aa9c3652be919f053ce98af36ad2092e1994c9379d333bedd192bbc62dc1122dbdd90f237130510768ddd3e838087cd9a83c0ffda966fa24b945f12a9982bc584c72b1814e269ccb098ee0557cc2aee6cfce7aae5e304e4e443e9c56fdcdb3860681fc89130383feeea7c94c03206a0c02ef8a9b51f4d78936f3a553d11a32358", 0x9d}, {&(0x7f0000000900)="1c653933e248f76c01c64124efeeac9a07c44b3154c864195b466fc16d2fcdc7743bd328c94f62131743c2892c2e48f9ffe276ac655613e58eb9af3d15ba2628c5fbca42dab48dc20def58cf3c1f87c8abd8c2e89d3bb4fc8661f8a4bb5ab83d158b10e60d89d17f4d8d252441049464f41c06fb277c6c27f8b4138116c643cba08286b826862716600c72930393da3864bed0f32b7604006f04ea6b564b43b40c55254763391941aceec8059a865b76c3b26d673c9bea6092ee6cedf4e9fabeaa01277ffe264b7453a6470c6d879e4b7a2858c5c24598695007d7ee097203fa2bfe1595dd564a", 0xe7}], 0x6, &(0x7f0000000a80)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x6c, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xb, 0x8, [0x7, 0x7, 0xe, 0x5]}}]}}}], 0x78}}, {{&(0x7f0000000b00)={0xa, 0x4e22, 0x4, @private0, 0x8be}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="a76e68c93c491c19a0e24cbb09f24267abd6ba9e1e6c0d0f846231c1d45afbaa11f4b0adc0bb0a136c1d81551e35848290097296ebc52d9a05969c792ae9f7050892844a98a7c091496c49cc4d6329fced2cfbbf919d0aedf720ec7d34607c7de1d852ac4a064734c59b23be5cc15c1afef1afd1e176cabeac058fb07063f836a1e010bc8229cbb1b531edc9359319ab935af5cf177199b98756057dcd5fbcf3ae0812addab178377dd2", 0xaa}, {&(0x7f0000000c00)="1109287aca71fc0699091693ce4c861f7e7e29a2ab0190a2d3f504a46d76427d20b912d8317ff26a1aa8b762d2ae65385fc6512e0345fc9b1248157c7dcbccb4a10fa4734736d0ec9feef8180c53783f18a1", 0x52}, {&(0x7f0000000c80)="d776b6948037", 0x6}, {&(0x7f0000000cc0)="2e42028a3bf39eda6a907e6e0b084d7d54805424972f10f016e58d2d7a3e5229a6fca782c5f97308c8f182453642b416803894e2ead8a3ee00509a0342542bbf6175f52bd2ba95549239f076fcb1d034f4a50f4bc638a12982208941c548b05d010944478a06b357a0396f2a89385a0018db62bc84976b18a786f5f7e184efd02f33f61c1fbdc8f770c9f4bcce459069518805874421975a64d301dcf005cb0a12d2f2a7202cc749bf9ba2b713bed949fc20c07846c3652a03ea7286fd008d8df78846fd7d4fed1f5437eadf638c42b9f16bd5e57b58709bd0f94208b12966ccda634df4a3a87801e553f8b38a5cb2bcd7c5", 0xf2}, {&(0x7f0000000dc0)="d6eccd470b69affd45c49561541c26ed057d107fa63671c3951d75a91ba443ceb58e3cca24dae4580f87a2d736ed3f3e16bdd0282599a18b7d79d69276b2304e66082ea116286c59df05d4e2a9babbae6b1148df5d2fbab24d660889b8cea0d340225e90db550a17dffd8c3ee7e777f79df23f47ef2d99c5277a71325c05ef587eb760185c438397a6b9b01f4e60e54d8e0901046db38ffc782169fb182bfc25b141128f188986053a8e5db6b5b10274711d56eb01deefd410f1493f734f7089f87f7394c6e3d67cafe197a5bd7dda773773360c7ab53033028f3dfe5b817c9e5e60aaa17e029c9594790bee85848079d64d3fb34193fc90072fe39a", 0xfc}], 0x5, &(0x7f0000000f40)=[@dstopts_2292={{0x160, 0x29, 0x4, {0x3b, 0x28, '\x00', [@generic={0x0, 0xe8, "ce8f09c648e8d3e0147f42cc924ab4e0d346c998060db3529b3a15310c5ff2cad5b61bff3580a6e5cc91462abdecda36fc3f6d425bba6b3a6daf1e0948458a348656a4969dd91a4105218566327d13fb4bd052b44287fe73dd66aa8e40954a8c420a93711b8cef0e4a6112655c510c920c7fa7088d0825d41da8d81851206ed9dfcae8cc8780519aa17ac64cbd3ae8b4304abdf17c0a529f71f6e4283782dff044fdb6ba05d34b7f8f8637d66f8302c501783a159aa0777543a338846df25284bad9773c501fad04f06c0fd7affa73077a0272e3501bbd017297b522d3be71f577a03a6655d17496"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x3, [0x8, 0x3, 0x100, 0x1]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x0, [0x3]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@padn, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x198}}], 0x5, 0x20e8086) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001240)={0x89, 0x10, 0x2, 0x2, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @local]}, 0x88) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r7, &(0x7f0000000140)={0x2d, 0x0, 0x0, 0x2b}, 0x39) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x10, 0x9, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x7f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000411}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 855.810434ms ago: executing program 2 (id=3393): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 853.140987ms ago: executing program 4 (id=3394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000480)={0x20, r3, 0xa01, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xd98e6161ce3c5512}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[], 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000480)={0x20, r3, 0xa01, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x40000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xd98e6161ce3c5512}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)=ANY=[], 0x6e) (async) 701.02432ms ago: executing program 0 (id=3395): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) (async) r1 = socket$inet(0x2, 0x200000003, 0x6) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f00000000c0)) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000001000000090000000c00038008000100ff000000"], 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 700.570179ms ago: executing program 1 (id=3396): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2) sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x400}, 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x70b, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000040) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010026bd7000f5ffffff070001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 485.868257ms ago: executing program 0 (id=3397): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff2f00, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc}]}}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000000)=0x8) 474.22991ms ago: executing program 1 (id=3398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x804) socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @exit, @alu={0x7, 0x0, 0xc, 0x0, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x2b, &(0x7f00000007c0)=""/43, 0x41000, 0x28, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r4, r5, r6, r5, r6], &(0x7f0000000880)=[{0x5, 0x1, 0x6, 0x1}, {0x0, 0x2, 0x3, 0x2}, {0x4, 0x4, 0x4, 0x5}], 0x10, 0x7}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000980)=r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r6, 0x5e2d1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x23, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xde3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x8011) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r9) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083004000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8a00fe00000000bfa200000000000007021cf0f7ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 428.758454ms ago: executing program 2 (id=3399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003500)=@newtfilter={0x4fc, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xd, 0xfff1}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4b8, 0x2, [@TCA_U32_SEL={0x4b4, 0x5, {0x2, 0xf9, 0xe, 0x3ff, 0xd25, 0x9, 0x1, 0x3, [{0x0, 0x9, 0x0, 0x5}, {0xffff0000, 0x101, 0x7, 0x1ff}, {0x40, 0x4be3, 0x8, 0x7f}, {0x8, 0x401, 0x3, 0x1289}, {0x2, 0x0, 0x6, 0x2}, {0x5, 0x727cf3b0, 0xe3b9}, {0xfffffffb, 0xfffffff9, 0x80000000, 0x6}, {0x6, 0xb09, 0x80}, {0x3, 0x3, 0x0, 0x2}, {0x80000000, 0x4, 0xaf, 0x29}, {0x2, 0x36d, 0x8001, 0x4}, {0x0, 0x948, 0x1, 0x2}, {0xffffffff, 0x253a, 0x3}, {0x75f1, 0x1ff, 0x7ff, 0x1}, {0x10000, 0x7, 0x80000001, 0xfffffff7}, {0x3, 0x568, 0x7ff, 0x4}, {0x9, 0x8, 0x1, 0x1}, {0x5, 0xfffffffa, 0x9, 0x6}, {0x8, 0x9, 0x8, 0xff}, {0x7ff, 0x200, 0x1, 0x3}, {0x6, 0x6, 0xa869, 0xfffffff7}, {0x80000001, 0x4, 0x1345, 0x10001}, {0x7ff, 0x1, 0x3, 0x2}, {0x200, 0xeb, 0x5, 0xf}, {0xc9ee, 0x2, 0x7fffffff, 0x2}, {0xfffff674, 0x73d3, 0x5, 0xae}, {0x10000, 0x6, 0x5, 0x4}, {0x7fff, 0xdc, 0x100, 0x7}, {0x8, 0x6, 0xe3, 0x7}, {0xffffff37, 0x4, 0xc, 0x8}, {0x1, 0x4, 0x9, 0x771}, {0x3adf4f83, 0xe, 0x10001, 0xa}, {0x40000000, 0x6, 0xb, 0x9}, {0x9, 0x6, 0xe3, 0x1ff}, {0x2, 0x6, 0x1, 0x9}, {0xd, 0x7fff, 0xf}, {0x7, 0x5, 0x6, 0x6}, {0x8, 0x3, 0x7, 0xa}, {0x40, 0x6, 0x7ff, 0x7}, {0x4, 0x1, 0xfff, 0x7}, {0x2, 0x0, 0xd}, {0xd5cb, 0x38a512f0, 0xb, 0xf}, {0x8, 0x0, 0xc44, 0x401}, {0x7, 0x7, 0x101, 0x1}, {0x6, 0x9, 0xfffffff8, 0x4}, {0x5, 0x8db4366, 0x2, 0x1}, {0x46d, 0x2, 0x5}, {0x2, 0x2779, 0x401, 0x9}, {0x0, 0x8, 0x5, 0x899b}, {0x8, 0x2ed, 0x49f4, 0x2}, {0x80000000, 0x1322, 0x1, 0x8}, {0x3, 0x1ff, 0x1, 0x6}, {0x400, 0x0, 0xfff, 0x8}, {0x5d6a4918, 0x33a, 0x5, 0x5}, {0x3, 0x3, 0x6, 0x6}, {0x7, 0x5, 0xfff, 0x8}, {0x3, 0x400, 0x8, 0x4000000}, {0xe, 0x7, 0x4, 0xaec}, {0x100, 0x3, 0x40000000, 0x1000}, {0x2349, 0x4, 0x0, 0x2}, {0x69f8, 0x7, 0x5, 0x5c}, {0x80000001, 0x7, 0x5}, {0xbf0, 0x2556, 0x15, 0x5}, {0x8, 0x7, 0x7f, 0x1}, {0x3, 0x8, 0xffffffff, 0x5}, {0x8, 0x1, 0x9, 0x9}, {0x9dff934f, 0x2, 0x5, 0x40}, {0x2, 0x5, 0x2, 0xfff}, {0xffffffff, 0x80000000, 0x1a55, 0x4}, {0x9, 0x3ff, 0x7ff, 0x3}, {0x40, 0x217, 0x2}, {0x6, 0x6ce, 0xfffffffc, 0xff}, {0xd, 0x6}, {0x6, 0x5, 0x0, 0xe}]}}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x40}, 0x2) (fail_nth: 9) 34.496966ms ago: executing program 0 (id=3400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket(0x23, 0x80805, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) listen(r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3274"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 3 (id=3401): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x11, 0x40, 0xf5, 0x7, {{0x3c, 0x4, 0x2, 0x12, 0xf0, 0x66, 0x0, 0x80, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010102, @multicast2, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x17, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@multicast2, 0xfffffff4}, {@local, 0xffffff33}, {@rand_addr=0x64010101, 0x2}, {@private=0xa010101, 0xc62b}, {@local, 0x7ff}]}, @rr={0x7, 0x17, 0x2c, [@private=0xa010101, @broadcast, @rand_addr=0x64010102, @empty, @private=0xa010101]}, @end, @noop, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x8}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x6}, {@loopback, 0xffffffff}]}, @lsrr={0x83, 0x27, 0xa3, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty]}, @rr={0x7, 0x7, 0x4d, [@multicast1]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040100fbffffff000000000000", @ANYRES32=r8, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @local}}}], 0x20}}], 0x1, 0x24000000) kernel console output (not intermixed with test programs): 752] veth0_vlan: left promiscuous mode [ 303.207355][T13752] veth0_vlan: entered promiscuous mode [ 303.219737][T13752] veth1_vlan: entered promiscuous mode [ 303.247525][T13752] veth1_macvtap: left promiscuous mode [ 303.258370][T13752] veth0_macvtap: left promiscuous mode [ 303.269135][T13752] veth0_macvtap: entered promiscuous mode [ 303.279211][T13752] veth1_macvtap: entered promiscuous mode [ 303.297098][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.307376][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.316868][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.327464][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.336359][T13752] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 303.462203][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.471422][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.506761][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.516798][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.060682][T13791] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 305.506156][T13849] xt_hashlimit: max too large, truncated to 1048576 [ 305.535689][T13849] __nla_validate_parse: 6 callbacks suppressed [ 305.535709][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 305.712041][T13855] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2096'. [ 305.759531][T13851] veth5: entered allmulticast mode [ 305.782712][T13851] bond9: (slave veth5): Enslaving as an active interface with an up link [ 305.799832][T13853] bond9 (unregistering): (slave veth5): Releasing backup interface [ 305.823023][T13853] bond9 (unregistering): Released all slaves [ 306.490796][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 306.535935][T13880] veth1_to_team: left promiscuous mode [ 306.556177][T13880] dummy0: left promiscuous mode [ 306.616587][T13889] sctp: [Deprecated]: syz.3.2107 (pid 13889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.616587][T13889] Use struct sctp_sack_info instead [ 306.728151][T13886] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 306.847850][T13893] syzkaller1: entered promiscuous mode [ 306.853779][T13893] syzkaller1: entered allmulticast mode [ 307.092373][T13909] syzkaller0: entered promiscuous mode [ 307.098077][T13909] syzkaller0: entered allmulticast mode [ 307.109059][T13909] tipc: Enabled bearer , priority 0 [ 307.125476][T13908] tipc: Resetting bearer [ 307.181344][T13908] tipc: Disabling bearer [ 307.352547][T13917] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2116'. [ 307.433511][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 307.546495][T13917] 0ªX¹¦À: renamed from batadv0 [ 307.554639][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 307.652756][T13917] 0ªX¹¦À: entered allmulticast mode [ 307.683875][T13917] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 307.733397][T13917] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.035044][T13944] xt_bpf: check failed: parse error [ 308.189243][T13951] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 308.323638][T13951] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.332088][T13949] syzkaller1: entered promiscuous mode [ 308.337834][T13949] syzkaller1: entered allmulticast mode [ 308.887350][T13981] xt_bpf: check failed: parse error [ 309.280822][T14001] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 309.311249][T14001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.888914][T14028] xt_bpf: check failed: parse error [ 310.073930][T14035] netlink: 'syz.1.2152': attribute type 11 has an invalid length. [ 310.221597][T14046] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 310.367694][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2158'. [ 310.433576][T14057] syzkaller0: entered promiscuous mode [ 310.445584][T14057] syzkaller0: entered allmulticast mode [ 310.457083][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 310.474632][T14057] tipc: Enabled bearer , priority 0 [ 310.515923][T14056] tipc: Resetting bearer [ 310.622581][T14056] tipc: Disabling bearer [ 310.677905][T14058] sch_tbf: burst 19872 is lower than device bond_slave_1 mtu (32783) ! [ 310.880830][T14076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.913739][T14076] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.930226][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'. [ 311.065920][T14076] bridge0: port 3(vlan3) entered blocking state [ 311.072482][T14076] bridge0: port 3(vlan3) entered forwarding state [ 311.095289][T14076] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 311.112221][T14076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 311.134620][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.142099][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.174565][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.181883][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.201384][ T6435] bridge0: port 3(vlan3) entered disabled state [ 311.223927][ T6435] bridge0: port 3(vlan3) entered blocking state [ 311.230473][ T6435] bridge0: port 3(vlan3) entered forwarding state [ 311.304103][ T8965] syz1: Port: 1 Link ACTIVE [ 311.509250][T14102] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2172'. [ 311.726956][T14112] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 311.818235][T14112] syzkaller0: entered promiscuous mode [ 311.824758][T14112] syzkaller0: entered allmulticast mode [ 311.844775][T14091] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 312.373395][T14146] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2187'. [ 312.483800][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 312.598276][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2187'. [ 312.659887][T14153] sctp: [Deprecated]: syz.4.2187 (pid 14153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.659887][T14153] Use struct sctp_sack_info instead [ 313.085219][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 313.808565][T14185] netlink: 'syz.2.2196': attribute type 9 has an invalid length. [ 313.823360][T14186] netlink: 'syz.2.2196': attribute type 9 has an invalid length. [ 313.982552][T14192] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 314.071037][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2197'. [ 314.154461][T14192] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.205975][ T5631] block nbd2: Receive control failed (result -32) [ 314.639469][T14235] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 314.795967][T14246] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2210'. [ 314.824505][T14236] bond9: entered allmulticast mode [ 314.836962][T14247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2209'. [ 314.882387][T14249] bridge0: entered allmulticast mode [ 314.913385][T14252] vlan3: left allmulticast mode [ 314.926936][T14252] geneve0: left allmulticast mode [ 314.938653][T14252] vlan3: left promiscuous mode [ 314.948924][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 314.954609][T14252] geneve0: left promiscuous mode [ 314.967634][T14252] bridge0: port 3(vlan3) entered disabled state [ 314.991030][T14252] bridge_slave_1: left allmulticast mode [ 314.996936][T14252] bridge_slave_1: left promiscuous mode [ 315.003244][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.043404][T14252] bridge_slave_0: left allmulticast mode [ 315.056556][T14252] bridge_slave_0: left promiscuous mode [ 315.070905][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.212577][T14267] x_tables: duplicate entry at hook 3 [ 315.577812][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2220'. [ 315.807295][ T5631] Bluetooth: hci4: link tx timeout [ 315.812916][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 316.575792][T14334] __nla_validate_parse: 1 callbacks suppressed [ 316.575816][T14334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 316.752823][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 316.784469][T14342] xt_hashlimit: size too large, truncated to 1048576 [ 316.795853][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 316.823510][T14341] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 316.830146][T14343] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 316.875857][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 316.909441][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 317.165331][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.359480][T14374] netlink: 'syz.3.2244': attribute type 32 has an invalid length. [ 317.486422][T14379] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2245'. [ 317.525125][T14374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2244'. [ 317.619246][T14382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2245'. [ 317.869316][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2252'. [ 317.881833][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 317.891146][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2252'. [ 319.573152][T14461] bond10 (unregistering): Released all slaves [ 319.830695][T14459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.136264][T14472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 320.505165][T14503] netlink: 'syz.4.2277': attribute type 61 has an invalid length. [ 320.526432][T14503] netlink: 'syz.4.2277': attribute type 62 has an invalid length. [ 321.218479][T14533] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 321.243167][T14533] bond14 (unregistering): Released all slaves [ 321.697309][T14561] __nla_validate_parse: 6 callbacks suppressed [ 321.697332][T14561] netlink: 393 bytes leftover after parsing attributes in process `syz.3.2292'. [ 321.737280][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 322.022493][T14570] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2294'. [ 322.105025][T14575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2296'. [ 322.114332][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 322.714452][T14593] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2299'. [ 322.877329][T14598] xt_bpf: check failed: parse error [ 322.985160][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2302'. [ 323.225027][T14622] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2308'. [ 323.503742][T14638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2313'. [ 323.615085][T14642] syzkaller1: entered promiscuous mode [ 323.620961][T14642] syzkaller1: entered allmulticast mode [ 323.714689][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 323.807382][T14647] xt_bpf: check failed: parse error [ 324.334993][T14679] xt_l2tp: invalid flags combination: 8 [ 324.363354][T14681] xt_bpf: check failed: parse error [ 324.566265][T14688] netlink: 'syz.4.2332': attribute type 15 has an invalid length. [ 324.579877][T14688] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 324.588428][T14688] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.113972][T14727] xt_bpf: check failed: parse error [ 326.152521][T14786] netlink: 'syz.1.2361': attribute type 1 has an invalid length. [ 326.177398][T14787] netlink: 'syz.3.2360': attribute type 21 has an invalid length. [ 326.200955][T14787] netlink: 'syz.3.2360': attribute type 6 has an invalid length. [ 326.717163][T14808] raw_sendmsg: syz.3.2368 forgot to set AF_INET. Fix it! [ 326.930136][T14819] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 327.143216][T14822] __nla_validate_parse: 11 callbacks suppressed [ 327.143238][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 327.224893][T14819] veth9: entered allmulticast mode [ 327.259731][T14819] bond14: (slave veth9): Enslaving as a backup interface with a down link [ 327.426341][T14844] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.709875][T14842] vlan2: entered allmulticast mode [ 329.715277][T14842] bond0: entered allmulticast mode [ 329.720547][T14842] bond_slave_0: entered allmulticast mode [ 329.726387][T14842] bond_slave_1: entered allmulticast mode [ 329.746186][T14844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.755455][T14844] bond_slave_0: left allmulticast mode [ 329.763440][T14844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.776948][T14844] bond_slave_1: left allmulticast mode [ 329.784448][T14844] bond0 (unregistering): Released all slaves [ 329.805240][T14849] gre1: entered promiscuous mode [ 329.922777][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 330.846385][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2387'. [ 331.109450][T14891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2388'. [ 331.642043][T14896] xt_CT: No such helper "syz1" [ 331.874033][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2391'. [ 331.903730][T14911] netlink: 'syz.0.2391': attribute type 3 has an invalid length. [ 331.931019][T14911] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2391'. [ 332.151245][T14919] netlink: 'syz.0.2394': attribute type 4 has an invalid length. [ 332.221663][T14919] netlink: 'syz.0.2394': attribute type 4 has an invalid length. [ 332.277186][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 332.383378][T14927] netlink: 'syz.1.2396': attribute type 8 has an invalid length. [ 332.405401][T14927] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2396'. [ 332.429201][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 332.615120][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 332.787961][T14942] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 332.841320][T14942] nbd: must specify at least one socket [ 332.865869][T14944] syzkaller0: entered promiscuous mode [ 332.894030][T14944] syzkaller0: entered allmulticast mode [ 332.924389][T14944] tipc: Enabled bearer , priority 0 [ 332.956779][T14943] tipc: Resetting bearer [ 332.983593][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 333.074805][T14943] tipc: Disabling bearer [ 333.427447][T14954] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 333.461885][T14954] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 333.515515][T14954] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 333.699094][T14965] nft_compat: unsupported protocol 0 [ 334.101396][T14984] netlink: 'syz.0.2413': attribute type 1 has an invalid length. [ 334.226301][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 334.269292][T14984] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 334.288499][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 334.309694][T14984] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 334.323111][T14984] bond6: (slave vxcan1): making interface the new active one [ 334.331739][T14984] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 334.638898][T14991] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 334.676341][T14991] bond6: (slave vxcan3): Enslaving as a backup interface with an up link [ 334.716860][T15002] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2417'. [ 334.784923][T15004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2418'. [ 335.321574][T15016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2423'. [ 335.524485][T15034] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 335.539280][T15034] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 336.258009][T15068] pimreg: entered allmulticast mode [ 336.327004][T15063] dvmrp8: entered allmulticast mode [ 336.384940][T15060] pimreg: left allmulticast mode [ 337.188534][T15102] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 337.415672][T15112] __nla_validate_parse: 9 callbacks suppressed [ 337.415695][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 337.486809][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'. [ 337.532920][T15119] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2453'. [ 337.562092][T15119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2453'. [ 337.949892][T15128] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 338.039643][T15128] 8021q: adding VLAN 0 to HW filter on device bond15 [ 338.070803][T15132] bond15: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 338.086812][T15132] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 338.174392][T15133] bond15: (slave ip6gretap1): making interface the new active one [ 338.199452][T15133] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 338.475594][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2458'. [ 338.492219][T15140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.586140][T15144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2458'. [ 338.601879][T15144] nbd: nbd64 already in use [ 338.756976][ T5651] udevd[5651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 338.968281][T15155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2463'. [ 339.232820][T15168] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2465'. [ 339.351874][T15172] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 339.477268][T15179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2468'. [ 339.856759][T15195] syz_tun: left allmulticast mode [ 339.862062][T15195] syz_tun: left promiscuous mode [ 339.867550][T15195] bridge0: port 1(syz_tun) entered disabled state [ 339.898952][T15195] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 339.927676][T15195] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 339.937766][T15197] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 340.068302][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 340.163604][T15207] openvswitch: netlink: IPv6 tunnel dst address is zero [ 340.327124][T15209] macsec1: entered allmulticast mode [ 340.340735][T15209] bond0: entered allmulticast mode [ 340.351063][T15209] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 340.431971][T15209] bond0: left allmulticast mode [ 340.601350][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 340.843631][T15234] tipc: Enabling of bearer rejected, already enabled [ 341.533755][T15249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.918631][ T6435] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.948471][ T6435] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.967802][T15261] netlink: 'syz.4.2493': attribute type 1 has an invalid length. [ 341.979406][ T6435] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.043281][T15261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.051399][ T6435] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.075934][T15261] bond0: (slave dummy0): making interface the new active one [ 342.086186][T15261] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 342.098193][T15261] netlink: 'syz.4.2493': attribute type 10 has an invalid length. [ 342.116918][T15264] tipc: Enabling of bearer rejected, already enabled [ 342.155297][T15261] dummy0: entered promiscuous mode [ 342.186688][T15261] bond0: (slave dummy0): Releasing active interface [ 342.365971][T15279] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 342.382597][T15276] 0ªî{X¹¦: renamed from gretap0 [ 342.406356][T15276] 0ªî{X¹¦: entered allmulticast mode [ 342.421861][T15276] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 342.467557][T15279] bond16: entered promiscuous mode [ 342.473481][T15279] 8021q: adding VLAN 0 to HW filter on device bond16 [ 342.485129][T15285] __nla_validate_parse: 12 callbacks suppressed [ 342.485150][T15285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2499'. [ 342.693759][T15295] openvswitch: netlink: IP tunnel dst address not specified [ 342.896995][T15304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2507'. [ 343.277516][T15333] xt_bpf: check failed: parse error [ 343.292728][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 343.301408][T15327] syzkaller0: entered promiscuous mode [ 343.323258][T15327] syzkaller0: entered allmulticast mode [ 343.394839][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 343.416203][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 343.514270][T15341] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 343.780649][T15358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2523'. [ 343.797849][T15361] tipc: Enabled bearer , priority 0 [ 343.844530][T15357] syzkaller0: entered promiscuous mode [ 343.870937][T15357] syzkaller0: entered allmulticast mode [ 343.884552][T15364] netlink: 'syz.3.2523': attribute type 39 has an invalid length. [ 344.015658][T15357] tipc: Resetting bearer [ 344.088615][T15357] tipc: Disabling bearer [ 344.393855][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 344.549920][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'. [ 344.580050][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2527'. [ 344.617371][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2532'. [ 345.245482][T15415] bridge_slave_0: left allmulticast mode [ 345.251839][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.363905][T15415] bridge_slave_1: left allmulticast mode [ 345.389611][T15415] bridge_slave_1: left promiscuous mode [ 345.428536][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.507830][T15415] bond0: (slave bond_slave_0): Releasing backup interface [ 345.572782][T15415] bond0: (slave bond_slave_1): Releasing backup interface [ 345.615640][T15415] team0: Port device team_slave_0 removed [ 345.650875][T15415] team0: Port device team_slave_1 removed [ 345.669597][T15415] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 345.688177][T15415] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 345.704271][T15415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.770546][T15418] syzkaller1: entered promiscuous mode [ 345.795615][T15418] syzkaller1: entered allmulticast mode [ 345.817236][ T8958] syz1: Port: 1 Link DOWN [ 345.836952][ T6435] bridge0: port 3(vlan3) entered disabled state [ 345.897211][T15439] xt_bpf: check failed: parse error [ 346.294395][T15456] sctp: [Deprecated]: syz.4.2547 (pid 15456) Use of int in maxseg socket option. [ 346.294395][T15456] Use struct sctp_assoc_value instead [ 346.524553][T15471] xt_bpf: check failed: parse error [ 346.936910][T15487] gretap0: entered promiscuous mode [ 346.965821][T15488] macsec0: entered promiscuous mode [ 347.107483][T15488] macsec0 (unregistering): left promiscuous mode [ 347.525474][T15508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.689056][T15508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.737329][T15508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.824651][T15508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.934483][ T1350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.972129][ T1350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.002595][ T6439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.025445][ T6439] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.237810][T15551] __nla_validate_parse: 5 callbacks suppressed [ 349.237826][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'. [ 349.298991][T15551] veth15: entered allmulticast mode [ 349.308396][T15551] bond10: (slave veth15): Enslaving as an active interface with an up link [ 350.110188][T15494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.515376][T15573] syzkaller1: entered promiscuous mode [ 350.537330][T15573] syzkaller1: entered allmulticast mode [ 350.601169][T15577] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 350.621440][T15577] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2584'. [ 350.922002][T15589] bridge0: entered allmulticast mode [ 351.143181][T15598] block nbd4: Unsupported socket: should be TCP or UNIX. [ 351.148621][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 351.298438][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 351.696960][T15626] FAULT_INJECTION: forcing a failure. [ 351.696960][T15626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.725301][T15626] CPU: 1 UID: 0 PID: 15626 Comm: syz.3.2597 Not tainted syzkaller #0 PREEMPT(full) [ 351.725348][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.725374][T15626] Call Trace: [ 351.725383][T15626] [ 351.725392][T15626] dump_stack_lvl+0xe8/0x150 [ 351.725423][T15626] should_fail_ex+0x412/0x560 [ 351.725452][T15626] _copy_from_user+0x2d/0xb0 [ 351.725477][T15626] kstrtouint_from_user+0xd6/0x180 [ 351.725506][T15626] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 351.725563][T15626] proc_fail_nth_write+0x8e/0x210 [ 351.725591][T15626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 351.725625][T15626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 351.725653][T15626] vfs_write+0x29a/0xb90 [ 351.725692][T15626] ? __pfx_vfs_write+0x10/0x10 [ 351.725723][T15626] ? __fget_files+0x2a/0x420 [ 351.725753][T15626] ? __fget_files+0x3a0/0x420 [ 351.725777][T15626] ? __fget_files+0x2a/0x420 [ 351.725812][T15626] ksys_write+0x150/0x270 [ 351.725840][T15626] ? __pfx_ksys_write+0x10/0x10 [ 351.725884][T15626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.725907][T15626] do_syscall_64+0x174/0xf80 [ 351.725929][T15626] ? trace_irq_disable+0x3b/0x140 [ 351.725958][T15626] ? clear_bhb_loop+0x40/0x90 [ 351.725985][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.726005][T15626] RIP: 0033:0x7fc790d5d68e [ 351.726025][T15626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.726042][T15626] RSP: 002b:00007fc791b75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.726064][T15626] RAX: ffffffffffffffda RBX: 00007fc791b766c0 RCX: 00007fc790d5d68e [ 351.726079][T15626] RDX: 0000000000000001 RSI: 00007fc791b760a0 RDI: 0000000000000006 [ 351.726090][T15626] RBP: 00007fc791b76090 R08: 0000000000000000 R09: 0000000000000000 [ 351.726102][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.726114][T15626] R13: 00007fc791016128 R14: 00007fc791016090 R15: 00007ffe288790a8 [ 351.726149][T15626] [ 352.182435][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 352.345671][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 352.454116][T15653] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 352.474504][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2606'. [ 352.685566][T15657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2607'. [ 352.753849][T15653] 8021q: adding VLAN 0 to HW filter on device bond12 [ 352.782239][T15653] bond11: (slave bond12): making interface the new active one [ 352.805703][T15653] bond11: (slave bond12): Enslaving as an active interface with an up link [ 352.842728][T15651] ip6erspan1: entered allmulticast mode [ 353.114917][T15670] syzkaller1: entered promiscuous mode [ 353.129432][T15670] syzkaller1: entered allmulticast mode [ 353.633377][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 353.654496][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 354.303120][T15730] syzkaller1: entered promiscuous mode [ 354.310245][T15730] syzkaller1: entered allmulticast mode [ 354.421389][T15738] __nla_validate_parse: 32 callbacks suppressed [ 354.421412][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 354.457767][T15732] ip6gre1: entered promiscuous mode [ 354.468224][T15735] : renamed from bond0 [ 354.481137][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 354.627788][T15738] team1: entered promiscuous mode [ 354.651106][T15738] team1: entered allmulticast mode [ 354.667199][T15738] 8021q: adding VLAN 0 to HW filter on device team1 [ 354.687985][T15739] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 354.734697][T15739] team2: entered promiscuous mode [ 354.739958][T15739] team2: entered allmulticast mode [ 354.756075][T15739] 8021q: adding VLAN 0 to HW filter on device team2 [ 354.819118][T15758] ip6_vti0: entered allmulticast mode [ 354.867829][T15757] syz_tun: entered allmulticast mode [ 354.898732][T15749] dvmrp8: entered allmulticast mode [ 354.909686][T15748] syz_tun: left allmulticast mode [ 355.121888][T15768] macsec1: entered allmulticast mode [ 355.132328][T15768] bond0: entered allmulticast mode [ 355.138717][T15768] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 355.153711][T15768] bond0: left allmulticast mode [ 355.361135][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 355.574656][T15794] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2638'. [ 355.619804][T15790] bond10 (unregistering): Released all slaves [ 355.689882][T15796] syz_tun: mtu less than device minimum [ 355.879316][T15807] netlink: 'syz.3.2645': attribute type 1 has an invalid length. [ 355.899461][T15807] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2645'. [ 355.916458][T15807] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2645'. [ 355.931888][T15807] netlink: 'syz.3.2645': attribute type 1 has an invalid length. [ 355.963944][T15807] netlink: 634 bytes leftover after parsing attributes in process `syz.3.2645'. [ 356.085650][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 357.095591][T15850] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2657'. [ 358.452914][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'. [ 360.218102][T15858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.670154][T15924] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 360.699238][T15924] __nla_validate_parse: 1 callbacks suppressed [ 360.699258][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2670'. [ 361.417422][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'. [ 361.440783][T15963] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 361.458776][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 361.834720][T15978] x_tables: duplicate underflow at hook 1 [ 361.901652][T15978] x_tables: duplicate underflow at hook 1 [ 361.914719][T15978] x_tables: duplicate underflow at hook 1 [ 361.946514][T15988] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2686'. [ 362.147670][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'. [ 362.176509][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'. [ 362.326019][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2685'. [ 362.338548][T16011] xt_bpf: check failed: parse error [ 362.396867][T16016] macsec0: entered promiscuous mode [ 362.408925][T16016] macsec0: entered allmulticast mode [ 362.539208][T16023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.549426][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 362.609623][T16023] veth15: entered promiscuous mode [ 362.781776][ T5631] block nbd4: Receive control failed (result -32) [ 362.784685][ T5648] block nbd4: Receive control failed (result -32) [ 363.007054][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 363.137735][T16053] netlink: 'syz.1.2704': attribute type 62 has an invalid length. [ 363.171241][T16053] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2704'. [ 363.797438][T16074] vlan5: entered allmulticast mode [ 363.809451][T16074] bond0: entered allmulticast mode [ 363.923764][T16074] bond0 (unregistering): Released all slaves [ 364.501673][T16100] tun0: tun_chr_ioctl cmd 1074812118 [ 364.524014][T16101] syzkaller0: entered promiscuous mode [ 364.546506][T16101] syzkaller0: entered allmulticast mode [ 364.648216][T16101] tipc: Enabled bearer , priority 0 [ 364.669962][T16099] tipc: Resetting bearer [ 364.754128][T16099] tipc: Disabling bearer [ 364.947480][T16109] block nbd0: NBD_DISCONNECT [ 364.985174][T16109] block nbd0: Send disconnect failed -32 [ 364.994646][T16109] block nbd0: shutting down sockets [ 365.048253][T16127] netlink: 'syz.0.2721': attribute type 12 has an invalid length. [ 365.097382][ T1350] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.124417][ T1350] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.172595][ T1350] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.235985][ T1350] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.406047][T16136] bond10: option packets_per_slave: invalid value (1048582) [ 365.414158][T16136] bond10: option packets_per_slave: allowed values 0 - 65535 [ 365.428926][T16136] bond10 (unregistering): Released all slaves [ 365.560062][T16151] netlink: 'syz.3.2728': attribute type 83 has an invalid length. [ 365.807456][T16167] __nla_validate_parse: 9 callbacks suppressed [ 365.807476][T16167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 365.823499][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 366.378550][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 366.505310][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 366.586385][T16202] xt_l2tp: invalid flags combination: 8 [ 366.683652][T16212] gre0: entered promiscuous mode [ 366.703185][T16212] gre0: entered allmulticast mode [ 366.961752][T16222] xt_bpf: check failed: parse error [ 367.071715][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.087973][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.099863][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.122411][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.133096][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.422512][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 368.544529][T16275] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2756'. [ 368.579089][T16275] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 369.160557][ T5631] Bluetooth: hci5: command tx timeout [ 369.841502][T16225] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.849052][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.858250][T16225] bridge_slave_0: entered allmulticast mode [ 369.867852][T16225] bridge_slave_0: entered promiscuous mode [ 369.881334][T16225] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.888795][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.897213][T16225] bridge_slave_1: entered allmulticast mode [ 369.907065][T16225] bridge_slave_1: entered promiscuous mode [ 369.961809][T16225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.977892][T16225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.048998][T16225] team0: Port device team_slave_0 added [ 370.073000][T16225] team0: Port device team_slave_1 added [ 370.140817][T16225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.148188][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.220489][T16225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.246759][T16225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.266698][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.384664][T16225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.563004][T16225] hsr_slave_0: entered promiscuous mode [ 370.569960][T16225] hsr_slave_1: entered promiscuous mode [ 370.577453][T16225] debugfs: 'hsr0' already exists in 'hsr' [ 370.583912][T16225] Cannot create hsr debugfs directory [ 370.889959][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 370.917817][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2774'. [ 370.968448][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 371.006520][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2774'. [ 371.172813][T16360] hmac(sha224: entered promiscuous mode [ 371.246084][ T5631] Bluetooth: hci5: command tx timeout [ 371.279243][T16374] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2781'. [ 371.372799][T16377] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2782'. [ 371.926247][T16417] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2786'. [ 372.139612][ T6435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.148101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.210030][T16417] gretap0: entered promiscuous mode [ 372.219327][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.227879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.257534][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.266020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.295072][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.303485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.332875][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.612723][T16425] netlink: 'syz.4.2788': attribute type 1 has an invalid length. [ 372.783593][T16225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.823881][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.832316][T16225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.845038][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.856164][T16225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.885416][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.901536][T16225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.942481][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.996542][T16444] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 373.075464][T16444] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 373.272637][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.320832][ T5631] Bluetooth: hci5: command tx timeout [ 373.425270][T16225] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.453541][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 373.504381][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.511665][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.529220][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.536642][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.568947][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 373.603981][T16473] net_ratelimit: 5 callbacks suppressed [ 373.604003][T16473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.174352][T16491] vlan1: entered promiscuous mode [ 374.179706][T16491] geneve1: entered promiscuous mode [ 374.185801][T16491] vlan1: entered allmulticast mode [ 374.191566][T16491] geneve1: entered allmulticast mode [ 374.273206][T16494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2799'. [ 374.902271][T16524] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 375.030824][T16524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.101659][T16225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.207877][T16530] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 375.304448][T16530] bond0: (slave batadv2): Opening slave failed [ 375.412049][ T5631] Bluetooth: hci5: command tx timeout [ 375.486112][T16225] veth0_vlan: entered promiscuous mode [ 375.540116][T16225] veth1_vlan: entered promiscuous mode [ 375.633065][T16225] veth0_macvtap: entered promiscuous mode [ 375.677249][T16225] veth1_macvtap: entered promiscuous mode [ 375.687883][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.748731][T16544] syzkaller0: entered promiscuous mode [ 375.765941][T16544] syzkaller0: entered allmulticast mode [ 375.804243][T16225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.874799][T16544] tipc: Enabled bearer , priority 0 [ 375.895046][T16551] netlink: 'syz.1.2814': attribute type 3 has an invalid length. [ 375.911932][T16542] tipc: Resetting bearer [ 376.006263][T16542] tipc: Disabling bearer [ 376.027193][T16557] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 376.055627][T16557] netlink: 'syz.3.2817': attribute type 9 has an invalid length. [ 376.072641][T16225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.078893][T16557] __nla_validate_parse: 1 callbacks suppressed [ 376.078937][T16557] netlink: 187400 bytes leftover after parsing attributes in process `syz.3.2817'. [ 376.114255][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.140173][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.188722][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.209498][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.288202][T16569] 0ªî{X¹¦: left promiscuous mode [ 376.335468][T16569] 8021q: adding VLAN 0 to HW filter on device  [ 376.345300][T16569] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.389742][T16569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.484737][T16579] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 376.502389][T16569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.528259][T16569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.560087][T16569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.588882][T16569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.613745][T16569] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 376.647510][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.654957][ T6445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.666186][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.673429][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.902231][T16599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2830'. [ 377.091321][T16599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2830'. [ 377.156219][T16599] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2830'. [ 377.174500][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.189458][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.254774][ T6439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.272275][ T6439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.776254][T16622] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 377.797480][T16621] atomic_op ffff88802b752998 conn xmit_atomic 0000000000000000 [ 377.807779][T16622] netlink: 'syz.4.2838': attribute type 2 has an invalid length. [ 377.830295][T16622] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 377.860552][T16622] netlink: 'syz.4.2838': attribute type 2 has an invalid length. [ 378.153065][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 378.604127][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.776409][T16667] geneve0: entered promiscuous mode [ 378.792922][ T6439] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.813041][ T6439] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.832817][ T6439] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.868288][ T6439] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.915970][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 378.989831][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2851'. [ 379.406208][T16697] netlink: 'syz.2.2858': attribute type 4 has an invalid length. [ 379.435363][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2858'. [ 379.565822][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 379.603103][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'. [ 379.650603][T16704] netlink: 'syz.3.2861': attribute type 12 has an invalid length. [ 379.679251][T16704] netlink: 'syz.3.2861': attribute type 13 has an invalid length. [ 379.861399][T16719] netlink: 'syz.2.2864': attribute type 4 has an invalid length. [ 380.665697][T16747] bond17: entered promiscuous mode [ 380.687497][T16747] 8021q: adding VLAN 0 to HW filter on device bond17 [ 380.769328][T16752] 8021q: adding VLAN 0 to HW filter on device bond17 [ 380.811855][T16752] bond17: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 380.849226][T16752] bond17: (slave ip6gre2): Error -95 calling set_mac_address [ 380.945542][T16760] syzkaller0: entered promiscuous mode [ 380.952394][T16760] syzkaller0: entered allmulticast mode [ 380.976707][T16760] tipc: Started in network mode [ 380.990471][T16760] tipc: Node identity 3e176a9c2379, cluster identity 4711 [ 381.003557][T16760] tipc: Enabled bearer , priority 0 [ 381.013752][T16763] tipc: Enabled bearer , priority 0 [ 381.024410][T16759] tipc: Resetting bearer [ 381.073425][T16759] tipc: Disabling bearer [ 381.106367][T16763] syzkaller0: entered promiscuous mode [ 381.115986][T16763] syzkaller0: entered allmulticast mode [ 381.163488][T16763] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 381.208330][T16762] tipc: Resetting bearer [ 381.269348][T16762] tipc: Disabling bearer [ 381.564845][T16792] __nla_validate_parse: 3 callbacks suppressed [ 381.564867][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 381.681133][T16795] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2884'. [ 381.746713][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2886'. [ 381.777714][T16803] netlink: 'syz.4.2884': attribute type 7 has an invalid length. [ 381.793140][T16794] veth1_vlan: left promiscuous mode [ 381.816540][T16794] veth0_vlan: left promiscuous mode [ 381.827826][T16794] veth0_vlan: entered promiscuous mode [ 381.883006][T16794] veth1_vlan: entered promiscuous mode [ 381.923307][T16794] veth1_macvtap: left promiscuous mode [ 381.942074][T16794] veth0_macvtap: left promiscuous mode [ 381.959003][T16794] veth0_macvtap: entered promiscuous mode [ 381.998019][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.008313][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.020095][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.033698][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.045985][T16794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.085879][T16794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.118009][T16794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.140825][T16794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.150141][T16794] syz_tun: entered promiscuous mode [ 382.160945][T16794] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 382.224537][T16803] : entered promiscuous mode [ 382.229666][ T136] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.244103][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.258217][ T136] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.267722][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.308980][ T8962] syz1: Port: 1 Link ACTIVE [ 382.314455][ T1350] bridge0: port 3(vlan3) entered blocking state [ 382.320914][ T1350] bridge0: port 3(vlan3) entered forwarding state [ 382.382233][ T136] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.413550][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.427055][ T136] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.460479][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.518982][ T5769] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 382.645041][T16832] syzkaller1: entered promiscuous mode [ 382.650942][T16832] syzkaller1: entered allmulticast mode [ 383.001002][ T5767] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 383.321575][ T6439] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 384.361373][ T6439] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 384.372873][ T6439] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 384.540807][ T8965] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 384.663161][T16814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.897431][T16845] syzkaller0: entered promiscuous mode [ 384.909216][T16845] syzkaller0: entered allmulticast mode [ 384.939675][T16845] bond0: Error: Cannot enslave bond to itself. [ 385.084981][T16856] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 385.221512][T16862] netlink: 'syz.1.2898': attribute type 3 has an invalid length. [ 385.253791][T16856] 8021q: adding VLAN 0 to HW filter on device bond18 [ 385.276755][T16864] syzkaller1: entered promiscuous mode [ 385.285131][T16864] syzkaller1: entered allmulticast mode [ 388.120532][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 388.485604][T16878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.846620][T16918] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2915'. [ 388.863687][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 388.874699][T16918] 0·: renamed from hsr0 (while UP) [ 388.908949][T16918] 0·: entered allmulticast mode [ 388.936423][T16918] hsr_slave_0: entered allmulticast mode [ 388.959579][T16918] hsr_slave_1: entered allmulticast mode [ 388.974341][T16919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2916'. [ 388.975544][T16918] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 389.085605][T16923] netlink: 'syz.2.2916': attribute type 15 has an invalid length. [ 389.602034][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 389.616034][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 389.627987][T16944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 389.644603][T16953] syzkaller1: entered promiscuous mode [ 389.659240][T16953] syzkaller1: entered allmulticast mode [ 390.006321][T16964] syzkaller1: entered promiscuous mode [ 390.024673][T16964] syzkaller1: entered allmulticast mode [ 390.281690][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.299609][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.311393][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.320967][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.328701][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.667734][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.850990][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.876310][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.936896][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.032524][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.048374][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.103637][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.223720][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.349244][T17004] syzkaller0: entered promiscuous mode [ 391.376284][T17004] syzkaller0: entered allmulticast mode [ 391.432878][T17004] tipc: Enabled bearer , priority 0 [ 391.445758][T17004] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2941'. [ 391.475470][T17003] tipc: Resetting bearer [ 391.597015][T17003] tipc: Disabling bearer [ 392.034915][T17039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2950'. [ 392.363696][ T5631] Bluetooth: hci2: command tx timeout [ 392.483674][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 392.507919][ T36] gretap1: left allmulticast mode [ 392.518030][ T36] gretap1: left promiscuous mode [ 392.539184][ T36] bridge0: port 3(gretap1) entered disabled state [ 392.563935][ T36] bridge_slave_1: left promiscuous mode [ 392.580155][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.599717][ T36] bridge_slave_0: left allmulticast mode [ 392.618062][ T36] bridge_slave_0: left promiscuous mode [ 392.632808][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.657697][ T36] dvmrp8: left allmulticast mode [ 392.664051][ T36] pimreg9: left allmulticast mode [ 392.991793][T17077] nbd: must specify a size in bytes for the device [ 392.999196][T17077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2957'. [ 393.009890][T17077] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2957'. [ 393.089491][ T36] bond3 (unregistering): (slave erspan1): Releasing active interface [ 393.097820][ T36] erspan1 (unregistering): left promiscuous mode [ 393.315412][ T36] bond7 (unregistering): (slave bridge1): Releasing active interface [ 393.323889][ T36] bridge1 (unregistering): left promiscuous mode [ 393.332194][ T36] bridge1 (unregistering): left allmulticast mode [ 393.367135][ T36]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.376050][ T36] bond_slave_0: left promiscuous mode [ 393.381782][ T36] bond_slave_0: left allmulticast mode [ 393.389879][ T36]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.399902][ T36] bond_slave_1: left promiscuous mode [ 393.407251][ T36] bond_slave_1: left allmulticast mode [ 393.419376][ T36]  (unregistering): Released all slaves [ 393.430712][ T36] bond1 (unregistering): Released all slaves [ 393.446910][ T36] bond2 (unregistering): Released all slaves [ 393.464313][ T36] bond3 (unregistering): Released all slaves [ 393.490562][ T36] bond4 (unregistering): Released all slaves [ 393.506997][ T36] bond5 (unregistering): Released all slaves [ 393.526191][ T36] bond6 (unregistering): (slave veth3): Releasing backup interface [ 393.536034][ T36] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 393.551504][ T36] bond6 (unregistering): Released all slaves [ 393.575375][ T36] bond7 (unregistering): Released all slaves [ 393.592775][ T36] bond8 (unregistering): Released all slaves [ 393.616966][ T36] bond9 (unregistering): Released all slaves [ 393.636231][ T36] bond10 (unregistering): Released all slaves [ 393.655513][ T36] bond0 (unregistering): Released all slaves [ 394.217703][ T36] tipc: Left network mode [ 394.442790][ T5631] Bluetooth: hci2: command tx timeout [ 394.491863][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2965'. [ 394.999344][T16968] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.027391][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 395.045903][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.063518][T16968] bridge_slave_0: entered allmulticast mode [ 395.093055][T16968] bridge_slave_0: entered promiscuous mode [ 395.124349][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 395.148958][T16968] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.167855][T16968] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.172765][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 395.176951][T16968] bridge_slave_1: entered allmulticast mode [ 395.204814][T16968] bridge_slave_1: entered promiscuous mode [ 395.591698][T16968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.682186][T16968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.850438][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'. [ 395.880655][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 395.983909][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.041599][T16968] team0: Port device team_slave_0 added [ 396.069552][T16968] team0: Port device team_slave_1 added [ 396.283870][T16968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.307302][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.416496][T16968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.456658][T16968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.485132][T16968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.529178][ T5631] Bluetooth: hci2: command tx timeout [ 396.589333][T16968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.642634][T17177] netlink: 'syz.4.2980': attribute type 3 has an invalid length. [ 397.018116][T17173] bridge0: port 3(vlan3) entered disabled state [ 397.108274][T17197] netlink: 'syz.2.2983': attribute type 7 has an invalid length. [ 397.129691][T17198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2985'. [ 397.195552][T17201] sctp: [Deprecated]: syz.1.2985 (pid 17201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.195552][T17201] Use struct sctp_sack_info instead [ 397.228442][T17197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'. [ 397.522521][ T1350] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 397.531770][ T1350] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 397.658077][T17219] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 398.028474][ T9637] syz1: Port: 1 Link DOWN [ 398.043366][ T6439] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.052393][ T6439] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.066451][ T6439] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.077996][ T6439] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.091358][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.195125][ T6439] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.220529][ T6439] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.240726][ T6439] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.260631][ T6439] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.323517][T16968] hsr_slave_0: entered promiscuous mode [ 398.331521][T16968] hsr_slave_1: entered promiscuous mode [ 398.370765][T17229] macsec0: entered promiscuous mode [ 398.376279][T17229] veth1: entered promiscuous mode [ 398.383609][T17229] macsec0: entered allmulticast mode [ 398.389077][T17229] veth1: entered allmulticast mode [ 398.396327][T17229] veth1: left allmulticast mode [ 398.420206][T17229] veth1: left promiscuous mode [ 398.600490][ T5631] Bluetooth: hci2: command tx timeout [ 399.252006][T17274] xt_hashlimit: max too large, truncated to 1048576 [ 399.261750][T17275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 399.818477][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 400.040219][T17304] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.368199][T17304] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.603864][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 400.686822][T17304] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.898608][ T36] hsr_slave_0: left promiscuous mode [ 400.916006][ T36] hsr_slave_1: left promiscuous mode [ 400.938722][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.946920][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.957477][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.976587][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.122976][ T36] team0 (unregistering): Port device team_slave_1 removed [ 402.146048][ T36] team0 (unregistering): Port device team_slave_0 removed [ 402.332249][T17304] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.425288][T17347] tipc: Enabling of bearer rejected, failed to enable media [ 402.722833][T17397] xt_bpf: check failed: parse error [ 402.844820][ T76] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.037058][T17394] syzkaller0: entered promiscuous mode [ 403.046192][T17394] syzkaller0: entered allmulticast mode [ 403.067247][T17412] tipc: Enabled bearer , priority 0 [ 403.082004][ T1350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.102755][ T1350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.180112][T17391] tipc: Resetting bearer [ 403.222992][T17391] tipc: Disabling bearer [ 403.238135][T16968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.257238][T16968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.266867][ T1350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.276608][T16968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.316767][T16968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.339478][T16968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.401762][T16968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.418375][T16968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.444215][ T36] IPVS: stop unused estimator thread 0... [ 403.464180][T16968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.830718][T16968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.903095][T16968] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.944693][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.951939][ T1350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.992565][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.999827][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.021404][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 404.054800][T17447] netlink: 'syz.1.3025': attribute type 5 has an invalid length. [ 404.117150][T17447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3025'. [ 404.585751][T17470] tipc: Enabling of bearer rejected, already enabled [ 404.860658][T17486] xt_bpf: check failed: parse error [ 405.042665][T17494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3036'. [ 405.618610][T17524] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 405.630242][T16968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.637818][T17524] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3045'. [ 405.730620][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3047'. [ 405.753614][T17529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3047'. [ 405.896421][T16968] veth0_vlan: entered promiscuous mode [ 405.931414][T17537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3048'. [ 405.945972][T16968] veth1_vlan: entered promiscuous mode [ 406.032971][T16968] veth0_macvtap: entered promiscuous mode [ 406.049066][T16968] veth1_macvtap: entered promiscuous mode [ 406.096105][T16968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.127143][T16968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.243627][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.283723][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.310133][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.327900][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.542767][T17554] FAULT_INJECTION: forcing a failure. [ 406.542767][T17554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.573607][T17554] CPU: 0 UID: 0 PID: 17554 Comm: syz.4.3052 Not tainted syzkaller #0 PREEMPT(full) [ 406.573633][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.573644][T17554] Call Trace: [ 406.573651][T17554] [ 406.573659][T17554] dump_stack_lvl+0xe8/0x150 [ 406.573686][T17554] should_fail_ex+0x412/0x560 [ 406.573799][T17554] _copy_to_user+0x31/0xb0 [ 406.573872][T17554] simple_read_from_buffer+0xe1/0x170 [ 406.573904][T17554] proc_fail_nth_read+0x1bb/0x230 [ 406.573932][T17554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.573959][T17554] ? rw_verify_area+0x2a6/0x4d0 [ 406.573986][T17554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.574014][T17554] vfs_read+0x20c/0xa70 [ 406.574046][T17554] ? __pfx___mutex_lock+0x10/0x10 [ 406.574110][T17554] ? __pfx_vfs_read+0x10/0x10 [ 406.574140][T17554] ? __fget_files+0x2a/0x420 [ 406.574170][T17554] ? __fget_files+0x3a0/0x420 [ 406.574192][T17554] ? __fget_files+0x2a/0x420 [ 406.574226][T17554] ksys_read+0x150/0x270 [ 406.574257][T17554] ? __pfx_ksys_read+0x10/0x10 [ 406.574294][T17554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.574317][T17554] do_syscall_64+0x174/0xf80 [ 406.574362][T17554] ? trace_irq_disable+0x3b/0x140 [ 406.574393][T17554] ? clear_bhb_loop+0x40/0x90 [ 406.574419][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.574462][T17554] RIP: 0033:0x7f36e435d68e [ 406.574482][T17554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.574499][T17554] RSP: 002b:00007f36e51c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.574519][T17554] RAX: ffffffffffffffda RBX: 00007f36e51c96c0 RCX: 00007f36e435d68e [ 406.574534][T17554] RDX: 000000000000000f RSI: 00007f36e51c90a0 RDI: 0000000000000004 [ 406.574546][T17554] RBP: 00007f36e51c9090 R08: 0000000000000000 R09: 0000000000000000 [ 406.574558][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.574568][T17554] R13: 00007f36e4616038 R14: 00007f36e4615fa0 R15: 00007ffc4d02c6b8 [ 406.574599][T17554] [ 406.840252][T17558] xt_hashlimit: size too large, truncated to 1048576 [ 406.928393][T17560] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 407.107192][T17572] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3055'. [ 407.127452][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.158461][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.181068][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3055'. [ 407.267362][T17572] 8021q: adding VLAN 0 to HW filter on device bond14 [ 407.333046][T17573] macvlan8: entered promiscuous mode [ 407.365189][T17573] macvlan8: entered allmulticast mode [ 407.449700][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.475803][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.005258][T17609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 408.178089][T17620] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 408.228350][T17620] netlink: 'syz.0.3065': attribute type 2 has an invalid length. [ 408.305307][T17620] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 408.341552][T17620] netlink: 'syz.0.3065': attribute type 3 has an invalid length. [ 408.362365][T17631] netlink: 'syz.3.3067': attribute type 58 has an invalid length. [ 408.505415][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.527140][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.538799][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.554026][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.565715][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.620197][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 408.632065][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 408.699461][ T76] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.712428][ T76] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.730733][ T76] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.749201][ T76] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.814151][T17689] bond19: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 409.823474][T17689] bond19: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 410.529400][T17716] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3089'. [ 410.566617][T17719] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3090'. [ 410.680636][ T5648] Bluetooth: hci4: command tx timeout [ 410.884895][T17734] netlink: 'syz.1.3094': attribute type 58 has an invalid length. [ 410.947008][T17738] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3093'. [ 410.971253][T17738] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3093'. [ 411.043150][T17734] bond20: entered promiscuous mode [ 411.062472][T17734] 8021q: adding VLAN 0 to HW filter on device bond20 [ 411.107072][T17746] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 411.212976][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.230523][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.259898][T17632] bridge_slave_0: entered allmulticast mode [ 411.314129][T17632] bridge_slave_0: entered promiscuous mode [ 411.353234][T17753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 411.396839][T17753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 411.439020][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.464942][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.482065][T17632] bridge_slave_1: entered allmulticast mode [ 411.496036][T17632] bridge_slave_1: entered promiscuous mode [ 411.664635][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.686406][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.876579][T17632] team0: Port device team_slave_0 added [ 411.925167][T17632] team0: Port device team_slave_1 added [ 412.030240][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.064604][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.142654][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.177589][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.207554][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.316973][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.534090][T17632] hsr_slave_0: entered promiscuous mode [ 412.541875][T17632] hsr_slave_1: entered promiscuous mode [ 412.548446][T17632] debugfs: 'hsr0' already exists in 'hsr' [ 412.554708][T17632] Cannot create hsr debugfs directory [ 412.761391][ T5648] Bluetooth: hci4: command tx timeout [ 412.852015][T17632] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.873436][T17632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.024141][T17822] FAULT_INJECTION: forcing a failure. [ 413.024141][T17822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.038216][T17822] CPU: 0 UID: 0 PID: 17822 Comm: syz.0.3113 Not tainted syzkaller #0 PREEMPT(full) [ 413.038244][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.038257][T17822] Call Trace: [ 413.038265][T17822] [ 413.038273][T17822] dump_stack_lvl+0xe8/0x150 [ 413.038303][T17822] should_fail_ex+0x412/0x560 [ 413.038330][T17822] _copy_from_user+0x2d/0xb0 [ 413.038357][T17822] ___sys_sendmsg+0x1c6/0x360 [ 413.038466][T17822] ? __lock_acquire+0x6b5/0x2cf0 [ 413.038493][T17822] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.038555][T17822] ? __fget_files+0x2a/0x420 [ 413.038580][T17822] ? __fget_files+0x3a0/0x420 [ 413.038615][T17822] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.038644][T17822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.038679][T17822] ? __pfx_ksys_write+0x10/0x10 [ 413.038717][T17822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.038740][T17822] do_syscall_64+0x174/0xf80 [ 413.038762][T17822] ? trace_irq_disable+0x3b/0x140 [ 413.038796][T17822] ? clear_bhb_loop+0x40/0x90 [ 413.038822][T17822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.038842][T17822] RIP: 0033:0x7efe26f9ce59 [ 413.038862][T17822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.038879][T17822] RSP: 002b:00007efe27f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.038901][T17822] RAX: ffffffffffffffda RBX: 00007efe27215fa0 RCX: 00007efe26f9ce59 [ 413.038916][T17822] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000003 [ 413.038929][T17822] RBP: 00007efe27f34090 R08: 0000000000000000 R09: 0000000000000000 [ 413.038954][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.038966][T17822] R13: 00007efe27216038 R14: 00007efe27215fa0 R15: 00007ffdfb383598 [ 413.038998][T17822] [ 413.225751][T17632] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.237298][T17632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.343631][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 413.354263][T17632] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.365012][T17632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.512508][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 413.542686][T17830] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3110'. [ 413.555019][T17632] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.581964][T17632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.892438][T17846] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 414.229681][T17632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.252860][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.263364][T17632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.284407][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.292839][T17632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.312180][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.327804][T17632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.393281][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.841804][ T5631] Bluetooth: hci4: command tx timeout [ 414.928371][T17632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.088071][T17632] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.131141][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.138380][ T6439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.168665][T17910] IPv6: Can't replace route, no match found [ 415.190096][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.197335][ T6439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.226574][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3127'. [ 415.707937][T17927] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3131'. [ 416.007321][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 416.049369][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 416.080166][T17943] gtp0: entered promiscuous mode [ 416.105553][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3135'. [ 416.107207][T17943] gtp0: entered allmulticast mode [ 416.153351][T17943] team0: Device gtp0 is of different type [ 416.481245][T17966] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 416.528196][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.680229][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.708809][T17966] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.733828][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.766816][T17966] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.808124][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 416.920879][ T5631] Bluetooth: hci4: command 0x0419 tx timeout [ 417.267522][T17632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.757751][T18020] xt_bpf: check failed: parse error [ 417.961152][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.122870][T18036] netlink: 'syz.2.3156': attribute type 4 has an invalid length. [ 418.423778][T18050] ip6gre2: entered promiscuous mode [ 418.435256][T18050] ip6gre2: entered allmulticast mode [ 418.628488][T17632] veth0_vlan: entered promiscuous mode [ 418.690184][T17632] veth1_vlan: entered promiscuous mode [ 418.748480][T18057] tipc: Enabling of bearer rejected, already enabled [ 418.884630][T17632] veth0_macvtap: entered promiscuous mode [ 418.943810][T17632] veth1_macvtap: entered promiscuous mode [ 419.000517][ T5648] Bluetooth: hci4: command 0x0419 tx timeout [ 419.016395][T18068] xt_bpf: check failed: parse error [ 419.078606][T17632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.155129][T17632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.214661][ T6441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.260454][ T6441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.315716][ T6441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.363277][ T6441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.606540][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.653828][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.976205][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.000515][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.207040][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.217406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.337620][T18115] syzkaller0: entered promiscuous mode [ 420.363469][T18115] syzkaller0: entered allmulticast mode [ 420.414206][T18115] tipc: Enabled bearer , priority 0 [ 420.440212][T18114] tipc: Resetting bearer [ 420.501914][T18114] tipc: Disabling bearer [ 420.629581][T18125] netlink: 'syz.2.3175': attribute type 10 has an invalid length. [ 420.764173][T18125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 420.966885][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.979097][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.989559][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.006278][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.026035][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.038314][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.497015][T18145] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 421.739753][T18169] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 421.746622][T18172] __nla_validate_parse: 9 callbacks suppressed [ 421.746676][T18172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3185'. [ 421.785194][T18172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3185'. [ 421.985982][T18179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3186'. [ 422.021002][T18179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.052408][T18183] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3186'. [ 422.101903][T18184] Bluetooth: MGMT ver 1.23 [ 422.134839][T18184] netlink: 'syz.3.3187': attribute type 4 has an invalid length. [ 422.151501][T18184] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3187'. [ 422.960021][T18202] gretap0: entered promiscuous mode [ 423.080517][ T5631] Bluetooth: hci0: command tx timeout [ 423.786775][T18248] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 423.844602][T18248] netlink: 'syz.3.3199': attribute type 2 has an invalid length. [ 423.862443][T18248] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 423.895196][T18248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3199'. [ 424.044973][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.201781][ T5648] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 424.505896][T18279] pim6reg99999991: entered allmulticast mode [ 424.528607][T18280] syzkaller0: entered promiscuous mode [ 424.542049][T18280] syzkaller0: entered allmulticast mode [ 424.863517][T18298] C: renamed from veth1_to_team (while UP) [ 424.892955][T18298] netlink: 'syz.4.3207': attribute type 1 has an invalid length. [ 424.903650][T18298] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3207'. [ 424.915773][T18298] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 424.933815][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.943849][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.951855][T18135] bridge_slave_0: entered allmulticast mode [ 424.960207][T18135] bridge_slave_0: entered promiscuous mode [ 425.017365][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.027276][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.036041][T18135] bridge_slave_1: entered allmulticast mode [ 425.045349][T18135] bridge_slave_1: entered promiscuous mode [ 425.125496][T18135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.138020][T18135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.161502][ T5648] Bluetooth: hci0: command 0x041b tx timeout [ 425.177344][T18135] team0: Port device team_slave_0 added [ 425.185629][T18135] team0: Port device team_slave_1 added [ 425.212910][T18135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.219892][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.246316][T18135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.260641][T18135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.267647][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.295829][T18135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.344245][T18135] hsr_slave_0: entered promiscuous mode [ 425.350775][T18135] hsr_slave_1: entered promiscuous mode [ 425.357002][T18135] debugfs: 'hsr0' already exists in 'hsr' [ 425.362975][T18135] Cannot create hsr debugfs directory [ 425.482729][T18135] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.493021][T18135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.551661][T18135] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.562273][T18135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.598543][T18135] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.608467][T18135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.647123][T18135] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.657050][T18135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.777937][T18135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.788075][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.796043][T18135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.806225][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.814317][T18135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.825634][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.833654][T18135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.845336][T18135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.918659][T18135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.944975][T18135] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.958867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.966039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.973487][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.981941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.999458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.006618][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.364299][T18135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.414570][T18135] veth0_vlan: entered promiscuous mode [ 426.427644][T18135] veth1_vlan: entered promiscuous mode [ 426.459212][T18135] veth0_macvtap: entered promiscuous mode [ 426.468760][T18135] veth1_macvtap: entered promiscuous mode [ 426.489539][T18135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.503795][T18135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.518984][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.528233][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.538432][ T5767] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 426.557300][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.568831][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.651685][ T6437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.665216][ T6437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.696106][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.704347][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.081528][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.240977][ T5648] Bluetooth: hci0: command 0x041b tx timeout [ 429.320618][ T5648] Bluetooth: hci0: command 0x041b tx timeout [ 429.829902][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.839996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.118058][ T136] bond8 (unregistering): (slave gretap1): Releasing active interface [ 430.129023][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.247126][ T136] bond1 (unregistering): Released all slaves [ 430.262855][ T136] bond2 (unregistering): Released all slaves [ 430.278400][ T136] bond3 (unregistering): Released all slaves [ 430.299857][ T136] bond4 (unregistering): Released all slaves [ 430.316444][ T136] bond5 (unregistering): Released all slaves [ 430.334521][ T136] bond6 (unregistering): Released all slaves [ 430.352991][ T136] bond7 (unregistering): (slave veth7): Releasing active interface [ 430.362755][ T136] bond7 (unregistering): Released all slaves [ 430.390779][ T136] bond8 (unregistering): Released all slaves [ 430.408587][ T136] bond9 (unregistering): Released all slaves [ 430.431767][ T136] bond0 (unregistering): Released all slaves [ 430.454558][ T136] bond10 (unregistering): (slave veth15): Releasing backup interface [ 430.466328][ T136] bond10 (unregistering): Released all slaves [ 430.482665][ T136] bond11 (unregistering): (slave bond12): Releasing backup interface [ 430.492383][ T136] bond11 (unregistering): Released all slaves [ 430.509120][ T136] bond12 (unregistering): Released all slaves [ 430.526293][ T136] bond13 (unregistering): Released all slaves [ 430.547199][ T136] bond14 (unregistering): Released all slaves [ 430.750251][ T136] : left promiscuous mode [ 430.886196][ T136] tipc: Left network mode [ 431.400994][ T5648] Bluetooth: hci0: command 0x041b tx timeout [ 431.523805][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.531677][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.733444][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.741932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.820063][ T136] team0 (unregistering): Port device team_slave_1 removed [ 431.836827][ T136] team0 (unregistering): Port device team_slave_0 removed [ 432.200006][ T136] IPVS: stop unused estimator thread 0... [ 433.165645][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.480520][ T5648] Bluetooth: hci0: command 0x041b tx timeout [ 434.928977][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.937479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.202877][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.482738][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.491306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.240942][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.047474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.052301][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.682713][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.691240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.280919][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.521013][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.529325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.264951][T18324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3212'. [ 444.311935][T18329] syzkaller0: entered promiscuous mode [ 444.329348][T18329] syzkaller0: entered allmulticast mode [ 444.397385][T18332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3213'. [ 444.494281][T18332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.575488][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.589558][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.607714][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.621105][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.634454][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.782570][T18345] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3217'. [ 445.322168][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.459714][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 445.558899][T18382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3226'. [ 445.699065][T18385] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 445.716593][T18385] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 446.353896][T18398] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3232'. [ 446.363784][T18398] openvswitch: netlink: Key type 769 is out of range max 32 [ 446.445415][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.453958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.681765][ T5631] Bluetooth: hci1: command tx timeout [ 446.724867][T18404] IPv6: addrconf: prefix option has invalid lifetime [ 446.778968][T18408] Cannot find add_set index 0 as target [ 446.792226][T18408] Cannot find add_set index 0 as target [ 446.898683][ T76] vlan3: left allmulticast mode [ 446.921530][ T76] veth0_to_team: left allmulticast mode [ 446.937397][ T76] vlan3: left promiscuous mode [ 446.948089][ T76] veth0_to_team: left promiscuous mode [ 446.973074][ T76] bridge0: port 3(vlan3) entered disabled state [ 447.100100][ T76] pimreg: left allmulticast mode [ 447.251484][T18433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3242'. [ 447.281070][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3242'. [ 447.427518][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 447.440086][T18440] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 447.644844][ T76] bond4 (unregistering): (slave erspan1): Releasing active interface [ 447.958572][ T76] team0: Port device bridge2 removed [ 448.002254][ T76] bond0 (unregistering): Released all slaves [ 448.017860][ T76] bond1 (unregistering): Released all slaves [ 448.037818][ T76] bond2 (unregistering): Released all slaves [ 448.080287][ T76] bond3 (unregistering): Released all slaves [ 448.101143][ T76] bond4 (unregistering): Released all slaves [ 448.123116][ T76] bond5 (unregistering): Released all slaves [ 448.142329][ T76] bond6 (unregistering): (slave vxcan1): Releasing backup interface [ 448.163005][ T76] bond6 (unregistering): (slave vxcan3): Releasing backup interface [ 448.171864][ T76] bond6 (unregistering): Released all slaves [ 448.188325][ T76] bond7 (unregistering): Released all slaves [ 448.242263][T18445] gretap0: entered promiscuous mode [ 448.281084][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 448.369865][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.378301][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.519595][ T76] tipc: Left network mode [ 448.725279][T18480] netlink: 'syz.3.3253': attribute type 3 has an invalid length. [ 448.733336][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 448.770630][ T5631] Bluetooth: hci1: command tx timeout [ 448.944902][T18461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.057129][T18480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 449.231856][T18500] netlink: 'syz.4.3256': attribute type 32 has an invalid length. [ 449.242890][T18461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.353982][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.376419][T18337] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.403524][T18337] bridge_slave_0: entered allmulticast mode [ 449.430165][T18337] bridge_slave_0: entered promiscuous mode [ 449.444643][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.460478][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.479927][T18337] bridge_slave_1: entered allmulticast mode [ 449.500170][T18337] bridge_slave_1: entered promiscuous mode [ 449.790763][T18461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.907943][T18510] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3256'. [ 450.086781][T18337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.145919][T18520] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3258'. [ 450.229355][T18461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.364867][T18337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.667966][T18337] team0: Port device team_slave_0 added [ 450.702313][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.763685][T18337] team0: Port device team_slave_1 added [ 450.840599][ T5631] Bluetooth: hci1: command tx timeout [ 450.872982][ T76] hsr_slave_0: left promiscuous mode [ 450.887730][ T76] hsr_slave_1: left promiscuous mode [ 451.404126][ T10] net_ratelimit: 2 callbacks suppressed [ 451.404162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.724125][ T6441] smbdirect: ib_dev[syz1] removed [ 451.875923][ T76] smc: removing net device lo with user defined pnetid SYZ2 [ 451.913562][ T6437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.923584][T18538] syzkaller0: entered promiscuous mode [ 451.929745][T18538] syzkaller0: entered allmulticast mode [ 451.997320][T18337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.005386][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.036954][T18337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.059151][T18544] gretap0: entered promiscuous mode [ 452.200843][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.209254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.246262][T18337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.296435][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.422698][T18337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.463181][ T6441] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.615188][ T6439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.806448][ T6437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.826448][T18576] netlink: 'syz.3.3270': attribute type 11 has an invalid length. [ 452.885103][ T76] IPVS: stop unused estimator thread 0... [ 452.905333][T18337] hsr_slave_0: entered promiscuous mode [ 452.922398][ T5631] Bluetooth: hci1: command tx timeout [ 452.939004][T18337] hsr_slave_1: entered promiscuous mode [ 452.971466][T18337] debugfs: 'hsr0' already exists in 'hsr' [ 452.987599][T18337] Cannot create hsr debugfs directory [ 453.135975][T18576] geneve2: entered promiscuous mode [ 453.240777][ T6441] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 56179 - 0 [ 453.385240][ T6441] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 56179 - 0 [ 453.429916][ T6441] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 56179 - 0 [ 453.482904][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.491319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.658182][ T6441] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 56179 - 0 [ 453.845384][T18604] syz.3.3275 (18604) used obsolete PPPIOCDETACH ioctl [ 454.089522][T18617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3277'. [ 454.448407][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.471469][T18625] block nbd0: server does not support multiple connections per device. [ 454.507056][T18625] block nbd0: shutting down sockets [ 455.045732][T18646] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 455.102150][T18646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 455.302412][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 456.857010][ T76] nci: nci_ntf_packet: unknown ntf opcode 0xb20 [ 456.959149][T18707] syzkaller1: entered promiscuous mode [ 456.991927][T18707] syzkaller1: entered allmulticast mode [ 457.007633][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 457.205420][T18337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.293420][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.339657][T18337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.423412][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.520917][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.545090][T18337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.576013][T18721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3300'. [ 457.616207][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.697789][T18337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.784057][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.963530][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.973492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.063044][T18741] syzkaller0: entered promiscuous mode [ 458.084426][T18741] syzkaller0: entered allmulticast mode [ 458.138938][T18741] tipc: Enabled bearer , priority 0 [ 458.169773][T18740] tipc: Resetting bearer [ 458.234353][T18740] tipc: Disabling bearer [ 458.883088][T18754] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 458.957092][T18754] bond2 (unregistering): Released all slaves [ 459.227849][T18786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3312'. [ 459.257015][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.267897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.576720][T18790] syzkaller1: entered promiscuous mode [ 459.592104][T18790] syzkaller1: entered allmulticast mode [ 459.938595][T18337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.073010][T18337] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.132456][T18804] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3316'. [ 460.163363][T18800] syzkaller0: entered promiscuous mode [ 460.180133][T18800] syzkaller0: entered allmulticast mode [ 460.219677][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.229834][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.237157][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 460.324173][T18800] tipc: Started in network mode [ 460.340228][T18800] tipc: Node identity 2a2873292711, cluster identity 4711 [ 460.374501][T18800] tipc: Enabled bearer , priority 0 [ 460.410958][T18811] syzkaller0: entered promiscuous mode [ 460.422835][T18811] syzkaller0: entered allmulticast mode [ 460.454759][T18798] tipc: Resetting bearer [ 460.512596][T18798] tipc: Disabling bearer [ 460.603018][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.684770][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 460.695705][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 460.733067][T18824] GUP no longer grows the stack in syz.3.3320 (18824): 200000003000-20000000a000 (200000001000) [ 460.749239][T18776] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.757357][T18776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.802323][T18824] CPU: 0 UID: 0 PID: 18824 Comm: syz.3.3320 Not tainted syzkaller #0 PREEMPT(full) [ 460.802352][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.802370][T18824] Call Trace: [ 460.802379][T18824] [ 460.802393][T18824] dump_stack_lvl+0xe8/0x150 [ 460.802424][T18824] __get_user_pages+0x2378/0x2720 [ 460.802454][T18824] ? __gup_longterm_locked+0xc4e/0x1630 [ 460.802496][T18824] ? __gup_longterm_locked+0xc4e/0x1630 [ 460.802521][T18824] ? down_read_killable+0x1bb/0x340 [ 460.802629][T18824] __gup_longterm_locked+0xdcf/0x1630 [ 460.802660][T18824] ? lock_acquire+0x106/0x350 [ 460.802701][T18824] gup_fast_fallback+0x1d84/0x20d0 [ 460.802762][T18824] ? __pfx_gup_fast_fallback+0x10/0x10 [ 460.802798][T18824] ? is_valid_gup_args+0x11f/0x200 [ 460.802825][T18824] ? get_user_pages_fast+0x4d/0xb0 [ 460.802862][T18824] __iov_iter_get_pages_alloc+0x370/0xa10 [ 460.802930][T18824] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 460.802963][T18824] iov_iter_get_pages2+0x5e/0xa0 [ 460.802991][T18824] __se_sys_vmsplice+0x7c7/0x1620 [ 460.803038][T18824] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 460.803068][T18824] ? __pfx_futex_wake+0x10/0x10 [ 460.803103][T18824] ? fdget+0x148/0x1e0 [ 460.803145][T18824] ? 0xffffffffff600000 [ 460.803196][T18824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.803219][T18824] do_syscall_64+0x174/0xf80 [ 460.803241][T18824] ? clear_bhb_loop+0x40/0x90 [ 460.803267][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.803287][T18824] RIP: 0033:0x7f8b1259ce59 [ 460.803304][T18824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.803322][T18824] RSP: 002b:00007f8b1341f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 460.803344][T18824] RAX: ffffffffffffffda RBX: 00007f8b12815fa0 RCX: 00007f8b1259ce59 [ 460.803359][T18824] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 460.803371][T18824] RBP: 00007f8b12632d6f R08: 0000000000000000 R09: 0000000000000000 [ 460.803384][T18824] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 460.803396][T18824] R13: 00007f8b12816038 R14: 00007f8b12815fa0 R15: 00007ffe9fecf288 [ 460.803429][T18824] [ 461.218783][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 461.446540][T18845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3323'. [ 461.509110][T18845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3323'. [ 461.630813][T18850] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 462.066350][T18869] Cannot find add_set index 0 as target [ 462.354316][T18889] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3332'. [ 462.366004][T18889] netlink: 'syz.4.3332': attribute type 15 has an invalid length. [ 462.410732][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'. [ 462.427568][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 462.532144][T18889] netlink: 'syz.4.3332': attribute type 15 has an invalid length. [ 462.540209][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 462.550703][ T6441] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.564005][ T6441] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.598033][ T6441] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.622578][ T6441] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.674827][T18337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.908920][T18337] veth0_vlan: entered promiscuous mode [ 462.961154][T18337] veth1_vlan: entered promiscuous mode [ 462.971873][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3335'. [ 463.040711][T18337] veth0_macvtap: entered promiscuous mode [ 463.053070][T18916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3334'. [ 463.083458][T18337] veth1_macvtap: entered promiscuous mode [ 463.121149][T18337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.170946][T18337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.212815][T18776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.268432][T18776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.294251][T18776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.338836][T18776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.463029][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.482478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.546624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.554767][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.741144][ T8965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.752848][T18776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.761582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.828147][T18936] veth1: entered promiscuous mode [ 463.854827][T18936] veth1: entered allmulticast mode [ 464.490132][T18954] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 464.687657][T18966] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 464.697889][T18966] bond1: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 464.710409][T18966] bond1: (slave vxcan5): making interface the new active one [ 464.718646][T18966] bond1: (slave vxcan5): Enslaving as an active interface with an up link [ 464.897327][T18954] bond1 (unregistering): (slave vxcan5): Releasing backup interface [ 464.917434][T18954] bond1 (unregistering): Released all slaves [ 465.074191][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.082619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.599430][T19004] xt_l2tp: invalid flags combination: 8 [ 465.761490][T19020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 466.849172][ T8965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.230198][T19081] netlink: 'syz.3.3385': attribute type 11 has an invalid length. [ 467.533366][T19094] FAULT_INJECTION: forcing a failure. [ 467.533366][T19094] name failslab, interval 1, probability 0, space 0, times 0 [ 467.556257][T19094] CPU: 0 UID: 0 PID: 19094 Comm: syz.1.3384 Not tainted syzkaller #0 PREEMPT(full) [ 467.556285][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.556298][T19094] Call Trace: [ 467.556306][T19094] [ 467.556315][T19094] dump_stack_lvl+0xe8/0x150 [ 467.556343][T19094] should_fail_ex+0x412/0x560 [ 467.556370][T19094] should_failslab+0xa8/0x100 [ 467.556390][T19094] ? skb_clone+0x212/0x3a0 [ 467.556526][T19094] kmem_cache_alloc_noprof+0x87/0x650 [ 467.556562][T19094] skb_clone+0x212/0x3a0 [ 467.556591][T19094] __netlink_deliver_tap+0x404/0x850 [ 467.556656][T19094] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.556682][T19094] netlink_deliver_tap+0x19c/0x1b0 [ 467.556708][T19094] netlink_sendskb+0x68/0x140 [ 467.556732][T19094] netlink_rcv_skb+0x2b6/0x4b0 [ 467.556757][T19094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.556805][T19094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.556843][T19094] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.556867][T19094] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.556896][T19094] netlink_unicast+0x75c/0x8e0 [ 467.556927][T19094] netlink_sendmsg+0x813/0xb40 [ 467.556963][T19094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.556992][T19094] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.557071][T19094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.557102][T19094] ____sys_sendmsg+0x972/0x9f0 [ 467.557135][T19094] ? __might_fault+0xaf/0x130 [ 467.557168][T19094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.557201][T19094] ? import_iovec+0x73/0xa0 [ 467.557230][T19094] ___sys_sendmsg+0x2a5/0x360 [ 467.557253][T19094] ? __lock_acquire+0x6b5/0x2cf0 [ 467.557281][T19094] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.557342][T19094] ? __fget_files+0x2a/0x420 [ 467.557366][T19094] ? __fget_files+0x3a0/0x420 [ 467.557402][T19094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.557429][T19094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.557462][T19094] ? __pfx_ksys_write+0x10/0x10 [ 467.557500][T19094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.557522][T19094] do_syscall_64+0x174/0xf80 [ 467.557542][T19094] ? trace_irq_disable+0x3b/0x140 [ 467.557571][T19094] ? clear_bhb_loop+0x40/0x90 [ 467.557596][T19094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.557616][T19094] RIP: 0033:0x7fc538f9ce59 [ 467.557635][T19094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.557653][T19094] RSP: 002b:00007fc5371d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.557674][T19094] RAX: ffffffffffffffda RBX: 00007fc539216180 RCX: 00007fc538f9ce59 [ 467.557688][T19094] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000006 [ 467.557700][T19094] RBP: 00007fc5371d5090 R08: 0000000000000000 R09: 0000000000000000 [ 467.557712][T19094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.557723][T19094] R13: 00007fc539216218 R14: 00007fc539216180 R15: 00007ffe2d9994c8 [ 467.557769][T19094] [ 467.623100][T19083] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 467.923146][T19083] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 467.951264][T19090] v: renamed from erspan0 (while UP) [ 468.537782][T19109] __nla_validate_parse: 15 callbacks suppressed [ 468.537803][T19109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3389'. [ 468.557920][T19093] syzkaller1: entered promiscuous mode [ 468.572470][T19093] syzkaller1: entered allmulticast mode [ 468.664198][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3390'. [ 468.772784][T19112] netlink: 'syz.1.3390': attribute type 4 has an invalid length. [ 468.783395][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'. [ 468.847390][T19117] ip6erspan0: entered promiscuous mode [ 468.854787][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'. [ 468.866334][T19119] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 468.874541][T19117] ip6erspan0: entered allmulticast mode [ 468.924525][T19119] bond1: entered promiscuous mode [ 468.929902][T19119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.033445][T19119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3393'. [ 469.064776][T19119] bond1: entered allmulticast mode [ 469.109260][T19119] bond1: (slave bridge2): making interface the new active one [ 469.116989][T19119] bridge2: entered promiscuous mode [ 469.143131][T19119] bridge2: entered allmulticast mode [ 469.151422][T19119] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 469.348707][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3398'. [ 469.360418][T19140] netlink: 'syz.1.3398': attribute type 7 has an invalid length. [ 469.384829][T19140] netlink: 'syz.1.3398': attribute type 8 has an invalid length. [ 469.392749][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3398'. [ 469.493194][T18776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.501824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.588026][T19147] FAULT_INJECTION: forcing a failure. [ 469.588026][T19147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.668962][T19147] CPU: 0 UID: 0 PID: 19147 Comm: syz.2.3399 Not tainted syzkaller #0 PREEMPT(full) [ 469.668991][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.669004][T19147] Call Trace: [ 469.669012][T19147] [ 469.669021][T19147] dump_stack_lvl+0xe8/0x150 [ 469.669050][T19147] should_fail_ex+0x412/0x560 [ 469.669077][T19147] _copy_to_user+0x31/0xb0 [ 469.669104][T19147] simple_read_from_buffer+0xe1/0x170 [ 469.669134][T19147] proc_fail_nth_read+0x1bb/0x230 [ 469.669164][T19147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.669192][T19147] ? rw_verify_area+0x2a6/0x4d0 [ 469.669219][T19147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.669245][T19147] vfs_read+0x20c/0xa70 [ 469.669278][T19147] ? __pfx___mutex_lock+0x10/0x10 [ 469.669302][T19147] ? __pfx_vfs_read+0x10/0x10 [ 469.669331][T19147] ? __fget_files+0x2a/0x420 [ 469.669359][T19147] ? __fget_files+0x3a0/0x420 [ 469.669381][T19147] ? __fget_files+0x2a/0x420 [ 469.669413][T19147] ksys_read+0x150/0x270 [ 469.669443][T19147] ? __pfx_ksys_read+0x10/0x10 [ 469.669485][T19147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.669525][T19147] do_syscall_64+0x174/0xf80 [ 469.669547][T19147] ? trace_irq_disable+0x3b/0x140 [ 469.669577][T19147] ? clear_bhb_loop+0x40/0x90 [ 469.669602][T19147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.669622][T19147] RIP: 0033:0x7f103255d68e [ 469.669642][T19147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.669660][T19147] RSP: 002b:00007f10307f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.669682][T19147] RAX: ffffffffffffffda RBX: 00007f10307f66c0 RCX: 00007f103255d68e [ 469.669697][T19147] RDX: 000000000000000f RSI: 00007f10307f60a0 RDI: 0000000000000007 [ 469.669709][T19147] RBP: 00007f10307f6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.669721][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.669732][T19147] R13: 00007f1032816218 R14: 00007f1032816180 R15: 00007ffe58c226c8 [ 469.669765][T19147] [ 469.954207][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.038902][T19154] sctp: [Deprecated]: syz.0.3400 (pid 19154) Use of int in max_burst socket option deprecated. [ 470.038902][T19154] Use struct sctp_assoc_value instead [ 470.786522][T18776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.794839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.046026][T19140] dummy0: entered promiscuous mode [ 472.076864][T19140] team0: entered promiscuous mode [ 472.081953][T19140] team_slave_0: entered promiscuous mode [ 472.088032][T19140] team_slave_1: entered promiscuous mode [ 472.097233][T19140] erspan0: entered promiscuous mode [ 472.103315][T19140] debugfs: 'hsr1' already exists in 'hsr' [ 472.109090][T19140] Cannot create hsr debugfs directory [ 472.131570][ T29] [ 472.133963][ T29] ====================================================== [ 472.141004][ T29] WARNING: possible circular locking dependency detected [ 472.148065][ T29] syzkaller #0 Not tainted [ 472.152498][ T29] ------------------------------------------------------ [ 472.159540][ T29] kworker/1:1/29 is trying to acquire lock: [ 472.165449][ T29] ffff8880441d9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 472.175412][ T29] [ 472.175412][ T29] but task is already holding lock: [ 472.182797][ T29] ffff888033068ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 472.191980][ T29] [ 472.191980][ T29] which lock already depends on the new lock. [ 472.191980][ T29] [ 472.202386][ T29] [ 472.202386][ T29] the existing dependency chain (in reverse order) is: [ 472.211395][ T29] [ 472.211395][ T29] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 472.219120][ T29] _raw_spin_lock_bh+0x36/0x50 [ 472.224415][ T29] hsr_dev_xmit+0x237/0x360 [ 472.229436][ T29] dev_hard_start_xmit+0x2cd/0x830 [ 472.235130][ T29] __dev_queue_xmit+0x14d9/0x3950 [ 472.240677][ T29] NF_HOOK+0x33a/0x3c0 [ 472.245313][ T29] arp_xmit+0x16c/0x270 [ 472.249988][ T29] arp_solicit+0xbe0/0xe40 [ 472.254914][ T29] __neigh_event_send+0xf05/0x14d0 [ 472.260571][ T29] neigh_resolve_output+0x198/0x750 [ 472.266280][ T29] ip_finish_output2+0xca9/0x1070 [ 472.271858][ T29] ip_output+0x29f/0x450 [ 472.276640][ T29] iptunnel_xmit+0x621/0xd10 [ 472.281767][ T29] ip_tunnel_xmit+0x193a/0x1f20 [ 472.287156][ T29] __gre_xmit+0x19e/0x240 [ 472.292036][ T29] erspan_xmit+0xa41/0x14d0 [ 472.297097][ T29] dev_hard_start_xmit+0x2cd/0x830 [ 472.302765][ T29] sch_direct_xmit+0x251/0x4c0 [ 472.308075][ T29] __dev_queue_xmit+0x180f/0x3950 [ 472.313645][ T29] alb_send_lp_vid+0x348/0x550 [ 472.319032][ T29] alb_send_learning_packets+0x12c/0x300 [ 472.325188][ T29] bond_alb_monitor+0x3d5/0x17e0 [ 472.330652][ T29] process_scheduled_works+0xb5d/0x1860 [ 472.336726][ T29] worker_thread+0xa53/0xfc0 [ 472.341834][ T29] kthread+0x389/0x470 [ 472.346424][ T29] ret_from_fork+0x514/0xb70 [ 472.351535][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.356823][ T29] [ 472.356823][ T29] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 472.365075][ T29] __lock_acquire+0x15a5/0x2cf0 [ 472.370444][ T29] lock_acquire+0x106/0x350 [ 472.375462][ T29] _raw_spin_lock+0x2e/0x40 [ 472.380510][ T29] sch_direct_xmit+0x15f/0x4c0 [ 472.385786][ T29] __dev_queue_xmit+0x180f/0x3950 [ 472.391364][ T29] hsr_forward_skb+0x167e/0x2a80 [ 472.396847][ T29] hsr_dev_xmit+0x242/0x360 [ 472.401882][ T29] dev_hard_start_xmit+0x2cd/0x830 [ 472.407527][ T29] __dev_queue_xmit+0x14d9/0x3950 [ 472.413126][ T29] ip6_output+0x340/0x550 [ 472.418105][ T29] NF_HOOK+0x177/0x4f0 [ 472.422763][ T29] mld_sendpack+0x8b4/0xe40 [ 472.427829][ T29] mld_ifc_work+0x835/0xe70 [ 472.432879][ T29] process_scheduled_works+0xb5d/0x1860 [ 472.438958][ T29] worker_thread+0xa53/0xfc0 [ 472.444068][ T29] kthread+0x389/0x470 [ 472.448660][ T29] ret_from_fork+0x514/0xb70 [ 472.453780][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.459069][ T29] [ 472.459069][ T29] other info that might help us debug this: [ 472.459069][ T29] [ 472.469293][ T29] Possible unsafe locking scenario: [ 472.469293][ T29] [ 472.476737][ T29] CPU0 CPU1 [ 472.482095][ T29] ---- ---- [ 472.487459][ T29] lock(&hsr->seqnr_lock); [ 472.491967][ T29] lock(&qdisc_xmit_lock_key#4); [ 472.499538][ T29] lock(&hsr->seqnr_lock); [ 472.506556][ T29] lock(&qdisc_xmit_lock_key#4); [ 472.511583][ T29] [ 472.511583][ T29] *** DEADLOCK *** [ 472.511583][ T29] [ 472.519720][ T29] 11 locks held by kworker/1:1/29: [ 472.524832][ T29] #0: ffff88803223bd40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 472.535578][ T29] #1: ffffc90000a57c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 472.548751][ T29] #2: ffff88803c6c7530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 472.557979][ T29] #3: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 472.567216][ T29] #4: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 472.576272][ T29] #5: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 472.586189][ T29] #6: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 472.595328][ T29] #7: ffff888033068ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 472.604810][ T29] #8: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 472.614296][ T29] #9: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 472.624218][ T29] #10: ffff888044588228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 472.636917][ T29] [ 472.636917][ T29] stack backtrace: [ 472.642811][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 472.642835][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.642851][ T29] Workqueue: mld mld_ifc_work [ 472.642876][ T29] Call Trace: [ 472.642886][ T29] [ 472.642896][ T29] dump_stack_lvl+0xe8/0x150 [ 472.642931][ T29] print_circular_bug+0x2e1/0x300 [ 472.642958][ T29] check_noncircular+0x12e/0x150 [ 472.642985][ T29] __lock_acquire+0x15a5/0x2cf0 [ 472.643017][ T29] ? sch_direct_xmit+0x15f/0x4c0 [ 472.643035][ T29] lock_acquire+0x106/0x350 [ 472.643053][ T29] ? sch_direct_xmit+0x15f/0x4c0 [ 472.643078][ T29] _raw_spin_lock+0x2e/0x40 [ 472.643125][ T29] ? sch_direct_xmit+0x15f/0x4c0 [ 472.643143][ T29] sch_direct_xmit+0x15f/0x4c0 [ 472.643165][ T29] ? __pfx_sch_direct_xmit+0x10/0x10 [ 472.643189][ T29] __dev_queue_xmit+0x180f/0x3950 [ 472.643214][ T29] ? mld_sendpack+0x8b4/0xe40 [ 472.643242][ T29] ? __dev_queue_xmit+0x2b6/0x3950 [ 472.643274][ T29] ? __pfx___dev_queue_xmit+0x10/0x10 [ 472.643315][ T29] ? __copy_skb_header+0xa3/0x4a0 [ 472.643343][ T29] ? hsr_addr_subst_dest+0x30d/0xa90 [ 472.643368][ T29] ? skb_clone+0x246/0x3a0 [ 472.643391][ T29] hsr_forward_skb+0x167e/0x2a80 [ 472.643419][ T29] ? ret_from_fork_asm+0x1a/0x30 [ 472.643445][ T29] ? hsr_forward_skb+0xbb/0x2a80 [ 472.643473][ T29] ? __pfx_hsr_forward_skb+0x10/0x10 [ 472.643499][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.643527][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.643553][ T29] ? __pfx_netif_skb_features+0x10/0x10 [ 472.643577][ T29] ? hsr_dev_xmit+0x237/0x360 [ 472.643602][ T29] hsr_dev_xmit+0x242/0x360 [ 472.643639][ T29] ? hsr_dev_xmit+0x2d/0x360 [ 472.643663][ T29] dev_hard_start_xmit+0x2cd/0x830 [ 472.643693][ T29] __dev_queue_xmit+0x14d9/0x3950 [ 472.643721][ T29] ? __dev_queue_xmit+0x2b6/0x3950 [ 472.643751][ T29] ? __pfx___dev_queue_xmit+0x10/0x10 [ 472.643775][ T29] ? neigh_connected_output+0x1ea/0x460 [ 472.643795][ T29] ? eth_header+0x11b/0x200 [ 472.643895][ T29] ? __asan_memcpy+0x40/0x70 [ 472.643929][ T29] ? ip6_output+0x126/0x550 [ 472.643952][ T29] ip6_output+0x340/0x550 [ 472.643977][ T29] ? __pfx_ip6_output+0x10/0x10 [ 472.644000][ T29] NF_HOOK+0x177/0x4f0 [ 472.644025][ T29] ? __pfx_NF_HOOK+0x10/0x10 [ 472.644050][ T29] ? __pfx_dst_output+0x10/0x10 [ 472.644073][ T29] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.644093][ T29] ? __local_bh_enable_ip+0xd0/0x130 [ 472.644131][ T29] ? icmp6_dst_alloc+0x3a6/0x440 [ 472.644184][ T29] mld_sendpack+0x8b4/0xe40 [ 472.644217][ T29] ? mld_sendpack+0x213/0xe40 [ 472.644242][ T29] ? __pfx_mld_sendpack+0x10/0x10 [ 472.644276][ T29] mld_ifc_work+0x835/0xe70 [ 472.644314][ T29] ? process_scheduled_works+0xa70/0x1860 [ 472.644335][ T29] process_scheduled_works+0xb5d/0x1860 [ 472.644369][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.644391][ T29] ? assign_work+0x3d5/0x5e0 [ 472.644410][ T29] worker_thread+0xa53/0xfc0 [ 472.644443][ T29] kthread+0x389/0x470 [ 472.644466][ T29] ? __pfx_worker_thread+0x10/0x10 [ 472.644485][ T29] ? __pfx_kthread+0x10/0x10 [ 472.644508][ T29] ret_from_fork+0x514/0xb70 [ 472.644530][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 472.644549][ T29] ? __switch_to+0xc79/0x1410 [ 472.644577][ T29] ? __pfx_kthread+0x10/0x10 [ 472.644600][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.644636][ T29] [ 473.010525][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.601000][ T6435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.609767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.044564][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.522313][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.531285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.092176][ T8962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.640848][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.649205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog