last executing test programs: 2m57.838942766s ago: executing program 0 (id=7115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0xb8, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x88, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_MPLS_OPTS={0x40, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x818f}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xb}}]}}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0xb8}}, 0x80) 2m57.76169754s ago: executing program 0 (id=7119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1be4ffffffffffffff0000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6, @in6=@mcast1}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) r6 = socket(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4890) getsockname$packet(r6, 0x0, &(0x7f0000001480)) sendmsg$can_j1939(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, r5, 0x3, {0x0, 0xf0, 0x1}, 0xfe}, 0x18, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x40090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000020000000080000bafa4d38762e81f12aead699"], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m57.604585917s ago: executing program 0 (id=7122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x22) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xa8, 0x1, 0x2, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, 'RAS\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x64}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) shutdown(r0, 0x0) 2m57.597732325s ago: executing program 0 (id=7124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r3) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10001, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x100001}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x4, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0xc, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0xe7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xf, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x9}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2eb, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x8}, {0xffffffff, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x8}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x7f, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x6, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x9, 0x5}, {0x6, 0xfffffff7, 0x5, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbd, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7fb, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) 2m57.353540536s ago: executing program 0 (id=7130): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x28}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7606}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {0x2}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x0, 0xb59}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x7fffffff, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0xc}, {}, {0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r6, &(0x7f0000000500)="39c394f705916c4516999da208000b15ae4c84674b726f26dc2f9876b8beea848cc1", 0x22, 0x40810, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r12) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r14 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r13], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_ADD(r12, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000128bd7000fbdbdf250200000005000400010000001400020070696d3672656730000000000000000005000400020000000900010073797a310000000014000200766574683100000000000000000000000900010073797a300000000057d6dcfab164a58a86dd1ee1fbd9526ba6830c4d17454e31145ed522a04217114c3fed76941e8cb63fb65101a532568683175417bc2ced93753e289b9560b06ab84eadae75da"], 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 2m57.215352889s ago: executing program 0 (id=7132): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f0000000340)="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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m42.215118649s ago: executing program 32 (id=7132): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f0000000340)="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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m36.848376435s ago: executing program 5 (id=7438): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', r0, 0x80, 0x80, 0x400, 0x5, {{0x11, 0x4, 0x1, 0x32, 0x44, 0x67, 0x0, 0x9, 0x0, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x13, 0xd0, [@empty, @rand_addr=0x64010101, @multicast2, @empty]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0x7, [{@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast1, 0xfffffffd}]}]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0x4d, 0x5, 0x81}, 0x9c) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000100)={0x0, @phonet={0x23, 0x81, 0x4, 0x1}, @llc={0x1a, 0x3, 0x0, 0x2, 0x2, 0xa, @broadcast}, @llc={0x1a, 0xcc35056a76ce2d2c, 0x8, 0x3, 0x7, 0x78, @random="00de0e7525c2"}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='wlan1\x00', 0x8, 0x2, 0x3403}) 2m36.720133003s ago: executing program 5 (id=7480): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/69, 0x45}, {&(0x7f0000001ec0)=""/169, 0xa9}, {&(0x7f0000001f80)=""/244, 0xf4}, {&(0x7f0000002080)=""/3, 0x3}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000002200)=""/155, 0x9b}, {&(0x7f00000022c0)=""/140, 0x8c}, {&(0x7f0000002380)=""/241, 0xf1}], 0xa, &(0x7f0000002540)=""/43, 0x2b}, 0x5}, {{&(0x7f0000002580)=@alg, 0x80, &(0x7f0000002780)=[{&(0x7f0000002600)=""/49, 0x31}, {&(0x7f0000002640)=""/95, 0x5f}, {&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000002700)=""/86, 0x56}], 0x4, &(0x7f00000027c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f00000037c0)=""/41, 0x29}, {&(0x7f0000003800)=""/254, 0xfe}, {&(0x7f0000003900)}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/163, 0xa3}, {&(0x7f0000004a00)=""/119, 0x77}, {&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/194, 0xc2}, {&(0x7f0000004c40)=""/172, 0xac}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0xa, &(0x7f0000000780)=""/187, 0xbb}, 0xc0}, {{&(0x7f0000005e80)=@isdn, 0x80, &(0x7f0000007900)=[{&(0x7f0000005f00)=""/42, 0x2a}, {&(0x7f0000005f40)=""/44, 0x2c}, {&(0x7f0000005f80)=""/111, 0x6f}, {&(0x7f0000006000)=""/160, 0xa0}, {&(0x7f00000060c0)=""/198, 0xc6}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/89, 0x59}, {&(0x7f0000007840)=""/167, 0xa7}], 0x8}, 0x3}], 0x5, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000020a0101000000000000000000008cd80900010073797a31000000000900010073797a300000000004000600340000000c0a01010000000000000000010000060900020073797a31000000000900010073797a30000000000800038004000080140000001100010000000000000000000100000a7e2067a0f61f00509f3f71c44145427a8bd4dbd8d96ed5b9b1dc26f15c976671ca"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0x1, 0x8}, {0xfff3, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0xc0000, 0x2, 0x3, 0x2, 0x2, 0x4000009}, [@TCA_NETEM_RATE={0x14, 0x6, {0xa3, 0x15, 0x448, 0xfffffff8}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0xdd, 0x5}}, @TCA_NETEM_ECN={0x8, 0x7, 0x41}, @TCA_NETEM_RATE64={0xc, 0x8, 0xaad771c350348b8e}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_LATENCY64={0x2, 0xa, 0x3}, @TCA_NETEM_RATE={0x14, 0x6, {0x81, 0xb, 0xc, 0x3}}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.787002142s ago: executing program 5 (id=7502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000400007012bbd70000000af00017c0000040042801400018010000400cab1893a00b8d2a93521800a1c0002801800118014001c"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b400000000009000100"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x4, 0x9c0a, 0xfffffffc, 0x9030, 0xf]}, &(0x7f0000000200)=0x54) 2m35.638531086s ago: executing program 5 (id=7507): r0 = socket(0x10, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1e, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xa, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e26, 0x9, @local, 0x100006}}]}, 0x70}, 0x1, 0x7}, 0x44840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x18, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0xd, 0x7, 0x3, 0x28b9e3371b36ee5, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x8080, &(0x7f00000001c0)={@align=0x2, {0x3, 0x2, 0x5, 0x9}}, 0x7, 0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x457, 0x4, 0x80000000, 0x1ff, 0x3, 0x9, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)={r7, 0x7, 0x9, [0x8, 0xc, 0x2, 0xffff, 0x3, 0x3, 0xbb51, 0x3, 0x3ff]}, &(0x7f00000001c0)=0x1a) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000104000000000000dd1738c84946", @ANYRES32=0x0, @ANYBLOB="004200004200020008000500", @ANYRES32=0x0, @ANYBLOB="140012800b0001006c6f7770616e000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) socket$inet6(0xa, 0x1, 0x7) 2m19.819259802s ago: executing program 33 (id=7507): r0 = socket(0x10, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1e, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xa, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e26, 0x9, @local, 0x100006}}]}, 0x70}, 0x1, 0x7}, 0x44840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x18, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0xd, 0x7, 0x3, 0x28b9e3371b36ee5, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x8080, &(0x7f00000001c0)={@align=0x2, {0x3, 0x2, 0x5, 0x9}}, 0x7, 0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x457, 0x4, 0x80000000, 0x1ff, 0x3, 0x9, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)={r7, 0x7, 0x9, [0x8, 0xc, 0x2, 0xffff, 0x3, 0x3, 0xbb51, 0x3, 0x3ff]}, &(0x7f00000001c0)=0x1a) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000104000000000000dd1738c84946", @ANYRES32=0x0, @ANYBLOB="004200004200020008000500", @ANYRES32=0x0, @ANYBLOB="140012800b0001006c6f7770616e000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) socket$inet6(0xa, 0x1, 0x7) 10.221969256s ago: executing program 3 (id=9215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x60600) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000080018000dac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080084004400000008001b0000000000"], 0x30}}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x800) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) (async) r6 = socket(0x25, 0x4, 0xf) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000001500)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x20, &(0x7f0000001580)={r7, r8+10000000}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 10.108432878s ago: executing program 3 (id=9218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) 10.087062455s ago: executing program 3 (id=9220): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, 0x1, 0x1, 0xc03, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}}, 0x54) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x440, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_RATE64={0xc, 0x4, 0x8a9bcefe2e05c2e0}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x98, 0x168, 0xfeffffff, 0x98, 0x98, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xc40, @port=0x4e28}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 9.893835523s ago: executing program 3 (id=9224): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) (async) socket$kcm(0x23, 0x2, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x40011e40) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}, {0x0}], 0x2, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af92347514f", 0x8a}], 0x1}, 0x20004000) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002e00090027bd700000000000040000000443c843d0ca20f630aae349bba792001d00a198e0d95ea407ce178d7040e5b6285cc6ae39c126c0e359b49e288972017e6c24499b7b15b3bcc062b3721f9a919d43084329d61d96ae250f0e593d74d27841b62ff939d6ed30d1b572224a833c58c821048bff932f35ba63ad7c1e6409000000e0070000002d4497fbba0aba5be32a6df6"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) 5.716897406s ago: executing program 1 (id=9273): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="3c000380"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x101040, &(0x7f0000000080)={@align=0x1, {0x0, 0x6, 0x1, 0x2}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xf}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000ff5c72026fc2e136d80004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) 5.678719319s ago: executing program 1 (id=9274): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x107}}], 0x18}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r3}, 0x10) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) (async) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x107}}], 0x18}, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r3}, 0x10) (async) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1) (async) 5.584503179s ago: executing program 1 (id=9275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="0800030000000000"], 0x40}}, 0x8000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = socket(0x18, 0x5, 0x3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000100)={"e9916d27e1be72769c51e907bdbbfabb", 0x0, 0x0, {0x800, 0x3}, {0xf472, 0x3}, 0x6, [0xb0, 0x2, 0x1ff, 0x7, 0x7, 0x2, 0x2, 0x8000000000000000, 0x9, 0x6, 0x8001, 0x32, 0x2, 0x4, 0x9]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0xfffffef4}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x110}}, 0x24000000) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r3) 5.509768331s ago: executing program 1 (id=9277): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e6a7d088aee587bcf22454a0719df800000058b28502aebdbd055c774a00"/54], 0x50) pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4008840) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, r2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4b9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000008000000800004788b36b84000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r7, r8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "50b82a61641e535b", "c358af365ff0b4eada5e3b2588d8319d", "02b12d1b", "b9e36b52a0b097d0"}, 0x28) 5.112597559s ago: executing program 1 (id=9279): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.111510648s ago: executing program 1 (id=9280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100fefffffffbdbdf25017c00001d0042800c00018006004600800a00000c0002800800178004001f809e880c495c4750daca0ac037e5501a5dc12fe87ae1fa6fbfe6bd06929ea12907ba27019dc83078421008340ffe98af597c851a03e1d34540"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xfe, 0xf, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x40, 0x6, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x1, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008040}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112ba000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000ffdbdf25020000002c402580050001000000000006000300bcc400000500050008000000050005000600000005975a2f210b28000100000000000800"], 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x1) 4.121026186s ago: executing program 2 (id=9297): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x1000, 0x7ffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x10}, {0x10, 0x9}}}, 0x24}}, 0x20044000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x38, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x1c, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0x38, 0x0, 0x1, [@typed={0x4, 0x7f, 0x0, 0x0, @binary}]}]}]}, 0x38}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fb0681cdeb809cfd000000000000000008000200640100fd"], 0x24}}, 0x20000050) 4.086727181s ago: executing program 2 (id=9299): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000002e000186000000000000000005001980340011802e"], 0x48}, {&(0x7f0000000380)={0xb0, 0x22, 0x10, 0x70bd27, 0x25dfdbff, "", [@nested={0x4, 0x139}, @typed={0x42, 0x83, 0x0, 0x0, @binary="c0ec293a2c00e65b193c1347501ee4bacaf2132ab5d47d3ca44462cf808a91fe24c52a4d5ebb0e5fbba310654ff7b1aefea6ff35cf77897c94af8d143121"}, @generic="5c18894769f6dc05fa2a17286817eb31b14656146a7da2ca9a08467e3d3e63ebca1aa5693bf4dcaa57c3f4870587dc9cdb7f0862cd5b85cdb4efc9b922c3c16f2cf5a80893a4bf2c41ed6553c5fadbcbf25e82dd09"]}, 0xb0}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="180000009a7344842af6b12ce36e9c00"/31], 0x18}], 0x3, 0x0, 0x0, 0x84}, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000000)=0x2100) 3.885142416s ago: executing program 2 (id=9305): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) unshare(0x20400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000000}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006110000000000000d3000000a100000095000b0001000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r5 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000180)=0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019640)={0x6, 0x9, &(0x7f00000197c0)=ANY=[@ANYBLOB="18012d00002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff07200085000000060000009580000000000000554f658a2c7b"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x33, &(0x7f0000000500)=""/51, 0x41000, 0x12, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000019580)={0x3, 0xb, 0x7, 0xfffffff7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000195c0)=[{0x1, 0x3, 0x9, 0xc}, {0x5, 0x3, 0x4, 0x6}, {0x0, 0x1, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x9}, {0x3, 0x1, 0xe, 0x2}, {0x5, 0x5, 0xf, 0x2}]}, 0x94) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000019700)=r7) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="200445ae", 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70020000", @ANYRES16=r10, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000019780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000019880)={&(0x7f0000019740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000019840)={&(0x7f00000198c0)=ANY=[@ANYBLOB="2ff352dc161065cbbf48780d469f60000000", @ANYRES16=r10, @ANYBLOB="040025bd7000fedbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0a00240000038b24020100000400cc0008000d000700000008006b000104000020002400810b8536e0059660a498838cb6b69be282b00b9685850c0cb09624920400cc00"], 0x60}, 0x1, 0x0, 0x0, 0x24000010}, 0x4040841) 3.256468231s ago: executing program 4 (id=9309): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x84, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0xc}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x20048044) 3.255435882s ago: executing program 2 (id=9310): pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0xfffffffffffffe58) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x80000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000440)=0x2, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 3.253505256s ago: executing program 6 (id=9311): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}, 0xe}], 0x1, 0x2021, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000248000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c800480180001800d00010073796e70686f78790000000004000280140000001e00010000aeec6eec80411c31d41078370825c48cd2fe4ba738"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x20046814) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.252541705s ago: executing program 4 (id=9312): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x188, 0x2c0, 0x390, 0x0, 0x390, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x5, 0x3, 0x0, 0x0, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x43}, [0xffffff00, 0x0, 0xffffff], [0x0, 0xffffffff, 0xff000000], [], 0x24, 0x810}}, @common=@inet=@ecn={{0x28}, {0x70, 0x20, 0xf1, 0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xffffff00], 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x800, 0x3], 0x1000, 0x30}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0x0, 0x2}, {0x0, 0x4}, 0x300, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0x9e5cedeefe11c265, 0xffffff00], 'bridge0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x3, 0x4, 0x45}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x24}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x6, 0x1, 0x6}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f00000001c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000000000000ff01000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000b526cfbc00000008ab060000000000", 0x24) 3.164475285s ago: executing program 4 (id=9313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xe10440}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="18800000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf2512000000050029000c00000006001401100000000600120155000000050074000100000006001200018000000600ed007903000006001a01020000002c00810005000200070000000500010005000000050002000c00000005000100040000000500010004000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', r7, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x8000, 0x700, 0x2, 0x2aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r9, 0x0, 0x82, 0x64, 0x1ac9ee85, 0x0, @mcast1, @empty, 0x0, 0x1, 0xd, 0xa174}}) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000) 3.162651428s ago: executing program 6 (id=9314): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x3, 0x33) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x88, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x10}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x5, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x0, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_REPLIED, @CTA_TIMEOUT_GRE_REPLIED={0x0, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0x3f25}, @CTA_TIMEOUT_GRE_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x0, 0x2, 0x1, 0x0, 0x134f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_REPLIED={0x0, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}]}, 0x88}}, 0x4000050) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x15, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r3, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) close(0xffffffffffffffff) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) (async) close(r3) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 3.108465018s ago: executing program 6 (id=9315): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="757597a3bb0f4204da925ecfcce9c8da942e12f8a31c468b9c48f743ecdf0ba87ead4583a79338a200000000000000068e0d9de1732766b793a47445c124031963aed3430530237f136eeaa819b3677bba2076b7dde17e45e20701ad4f2d95eff0786b6c14ca408482516a282736d00db85e2c2af72da4e5e906ee5114685a11565f19cf09650b21924346377079cb1dafd1393894f751062e2831ecca6518f3b4fd05a05b74ddff604072df71180adc4090e85418e5c9fb8236b375cf0e8a620928a6c2"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x1, 0x10003) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2000c800, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000009000000000000000000000085000000140000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000300009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.080230916s ago: executing program 4 (id=9316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x211, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000218000000000c20000000000000087007500000085000000080ea33695a016115be5a9672a7700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) socket(0x10, 0x803, 0x0) 3.028448705s ago: executing program 2 (id=9317): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x70bd2d, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000240)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r6, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) close(r6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb, 0x8, 0x6}}]}}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x20, 0x40, 0xf01f, 0x0, {{0x2e, 0x4, 0x0, 0x37, 0xb8, 0x66, 0x0, 0x3, 0x2f, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@multicast1, 0xfff}]}, @ssrr={0x89, 0x2b, 0xc, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, @empty, @multicast2]}, @timestamp_addr={0x44, 0x54, 0xb7, 0x1, 0x1, [{@rand_addr=0x64010101, 0xfffffffd}, {@local, 0xa}, {@loopback, 0x6a826722}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x8001}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0xd3f}, {@rand_addr=0x64010100, 0x7}, {@empty, 0xd}]}, @timestamp={0x44, 0x10, 0x1c, 0x0, 0xd, [0x2, 0x81, 0x9]}]}}}}}) sendto$packet(r0, &(0x7f0000000600)="f8e32b20c7e9c9c162905fdca080792213ee20d3eb49055e9becc0febfc5577e4a85665bb55949d95e5eb0670aae5ebe1bfc9a9dc4c2e9f9efa334e6a71235311d7b9c57e7f157734f4285e57f1447a541ed8e2e576fd5f5de54f1d3b3496117e2706f46bead2c72c9e167ec0456b3a15b28f111f8365ed956284efff698fe5a", 0x80, 0x830, &(0x7f0000000440)={0x11, 0x7, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000580)) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r13, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4b}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x355}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5ba}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 2.985015732s ago: executing program 4 (id=9318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd70000000000001010008", @ANYBLOB="080002800400338008000900", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast1, @in=@local}}, {{@in=@initdev}}}, &(0x7f0000000500)=0xe8) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r6, 0x12) 2.929697109s ago: executing program 4 (id=9319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x0, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x8}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0xfffffffe, 0x0, 0xffffffff}, 0x10}, 0x94) 2.73246204s ago: executing program 6 (id=9320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x90) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0x800, 0x30b929, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xffffff00, 0xffffff00, 0x9966e7adf2589b7b]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x90) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0x800, 0x30b929, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xffffff00, 0xffffff00, 0x9966e7adf2589b7b]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) 2.69962776s ago: executing program 6 (id=9321): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d616328736861323234"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback={0xfec0ffffffffffff}, 0xffee}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x88, @private=0xa011102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="69ecf85770b3824c16f92559ad5e9df4f5562f398176b5a848004133db40f9c34235faedf0710d7cae2254a5baaed8c09ec0458ba31c20e866ef1336d5a9e1127aa25027342cb0c1d76e4c6025f82cebf67bee116eaa2b9fad4c9da6df3063d586f105afbc8207cdc52ce0e06c49c2bc9cdd1f627f84b69bb8afa8c106686c74c7914681e1c080cb05c46cf0f832966192e307bc07490a06f31db11eab", @ANYRES16=r6, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.27280847s ago: executing program 3 (id=9322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000840)=""/93, 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/218, 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/6, 0x6}], 0x1}}], 0x3, 0x40000200, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000500)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f00000005c0)={0x0, 0x48}, 0x2, 0x0, 0x0, 0x24040040}, 0x3000c091) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket(0x14, 0x6, 0x5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xf0, 0x278, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0xffffff00, 'pim6reg\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 0x1, 0x0, [0x1d, 0x18, 0x18, 0x2e, 0x17, 0x1e, 0xe, 0x18, 0x28, 0x40, 0x22, 0x2c, 0x17, 0x0, 0xe, 0x8], 0x1, 0x7, 0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xff000000, 'bond0\x00', 'netdevsim0\x00', {}, {}, 0x4, 0x2, 0x41}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [0x0, 0xff, 0xffffff00], @ipv4=@loopback, [0xff, 0xff000000, 0xff, 0xffffffff], @ipv6=@private2, [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], @ipv6=@loopback, [0xff, 0xff000000, 0xff, 0xffffff00], 0x0, 0x1ff, 0x3a, 0x4e23, 0x4e23, 0x4e23, 0x4e24, 0x954, 0x206}, 0xc0, 0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xf, 0x7, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f00000008c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="08000500090000001400040064766d72703000"/28], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r11) 1.319103ms ago: executing program 6 (id=9323): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001740)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003010000800000000000000002"], 0x0, 0x56}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 613.075µs ago: executing program 2 (id=9324): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffb, 0x4, 0x3, 0x0, 0x6, 0x800}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) 0s ago: executing program 3 (id=9325): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xb4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000000)={{0xffffffffffffffff, &(0x7f0000000140)='/proc/qys/net/ip]\x11tiox_control\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfa1\xc9g\xa5\xec\xf0Y\x97\a\x15ot\x8f\x7fH_\x8f@O\x82i\x8b\x1c\x04\x01X\xe2q\xa6\x99\x80h\xa1\x13\xc7\x93m\xfc\x92\xdb\x11\xbc\t\x00\x00\x00\xef\xb7\xf6\xea|U\x18\x80\xf3X\x80?g\xfa~/\xe6\xc3\xeb\"/*O\r\xe7\xae4\x03v\x98j\xca>\x15\x9dx^\\+s\x94\xc0%N\xd3\xedU\xc5\xea\xb4\x81\b\xa5\xb6\x1d\xdaV\xde\fSqG\xb7\xd8\x80\xc3\xc5Q\xe4\xb0\x1c\xc35\x15\xd2F\'\xc7\xd5j\xb5\xf4u\x14K\"I\xb9\xb9F\xaf\xf1\v\xe6\xd9\x02\xf67\x1ac\xfc\xe2GJv\x9d\xb6\xb9?l\xd1\xa2\xaa\xc0\xfd\x1bro\xab\xaf9\x11', 0x24200, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): ][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.487189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.437385][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 691.517265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.557250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.597214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.637407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.687207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.717242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.757212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.797209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.837196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.877271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.052711][T12315] lo: left allmulticast mode [ 701.106395][T12315] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 701.137247][T12315] bond9 (unregistering): (slave vti1): Releasing backup interface [ 701.145099][T12315] vti1 (unregistering): left promiscuous mode [ 701.194057][T12315] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 701.202407][T12315] bridge8 (unregistering): left allmulticast mode [ 701.216284][T12315] bond0 (unregistering): Released all slaves [ 701.224481][T12315] bond1 (unregistering): Released all slaves [ 701.234239][T12315] bond2 (unregistering): Released all slaves [ 701.243407][T12315] bond3 (unregistering): Released all slaves [ 701.253443][T12315] bond4 (unregistering): Released all slaves [ 701.262437][T12315] bond5 (unregistering): Released all slaves [ 701.271399][T12315] bond6 (unregistering): Released all slaves [ 701.280424][T12315] bond7 (unregistering): Released all slaves [ 701.290312][T12315] bond8 (unregistering): left allmulticast mode [ 701.309396][T12315] bond8 (unregistering): Released all slaves [ 701.320450][T12315] bond9 (unregistering): Released all slaves [ 701.365463][T12315] 5nè‹Ò: left promiscuous mode [ 701.410344][T12315] tipc: Disabling bearer [ 701.415966][T12315] tipc: Disabling bearer [ 701.421448][T12315] tipc: Left network mode [ 701.752870][T12315] hsr_slave_0: left promiscuous mode [ 701.759400][T12315] hsr_slave_1: left promiscuous mode [ 701.768133][T12315] veth1_macvtap: left promiscuous mode [ 701.773606][T12315] veth0_macvtap: left promiscuous mode [ 701.779305][T12315] veth1_vlan: left promiscuous mode [ 701.784534][T12315] veth0_vlan: left promiscuous mode [ 701.917182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.171638][T12315] IPVS: stop unused estimator thread 0... [ 702.957205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.997245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.237332][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 705.037208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.077248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.117203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.157210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.197229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.237224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.277579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.317279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.357192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.397210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.437204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.477206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.517218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.557223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.597368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.466078][ T2981] gre0: left allmulticast mode [ 720.500578][ T2981] 0ªî{X¹¦: left allmulticast mode [ 720.510336][ T2990] netlink: 'syz.3.7826': attribute type 4 has an invalid length. [ 720.540859][ T2990] netlink: 'syz.3.7826': attribute type 8 has an invalid length. [ 720.560588][ T5633] Bluetooth: hci6: link tx timeout [ 720.565874][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 720.570286][ T2990] __nla_validate_parse: 5 callbacks suppressed [ 720.570300][ T2990] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7826'. [ 720.575113][ T5633] Bluetooth: hci6: link tx timeout [ 720.594323][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 720.637176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.877394][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.194503][ T3028] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 721.228196][ T2981] tipc: Resetting bearer [ 721.404768][ T2981] team1: left allmulticast mode [ 721.450672][ T2981] dummy0: left promiscuous mode [ 721.457704][ T2981] ip6gre2: left allmulticast mode [ 721.471813][ T2981] bridge6: port 3(veth5) entered disabled state [ 721.478253][ T2981] bridge6: port 1(veth3) entered disabled state [ 721.506546][ T2981] bridge7: left allmulticast mode [ 721.514293][ T2981] bridge8: left promiscuous mode [ 721.519749][ T2981] bridge8: left allmulticast mode [ 721.525791][ T2981] gre1: left promiscuous mode [ 721.542515][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.557336][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.593265][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.608410][ T3047] sctp: [Deprecated]: syz.4.7834 (pid 3047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.608410][ T3047] Use struct sctp_sack_info instead [ 721.631556][ T3051] openvswitch: netlink: EtherType 50a is less than min 600 [ 721.639802][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.661283][ T3047] nbd: must specify a device to reconfigure [ 721.663268][ T3051] IPv6: addrconf: prefix option has invalid lifetime [ 721.677251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.775244][ T3063] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7838'. [ 721.785218][ T5633] Bluetooth: hci6: link tx timeout [ 721.790940][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 721.798813][ T5633] Bluetooth: hci6: link tx timeout [ 721.803976][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 721.806074][ T3068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7842'. [ 721.833737][ T3069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7842'. [ 721.872706][ T3068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.935842][ T3080] IPv6: NLM_F_REPLACE set, but no existing node found! [ 721.992601][ T3090] syzkaller0: entered promiscuous mode [ 722.002835][ T3090] syzkaller0: entered allmulticast mode [ 722.034333][ T3090] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 722.056005][ T3090] bond7 (unregistering): Released all slaves [ 722.060202][ T3098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 722.072761][ T3099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7848'. [ 722.094427][ T5633] Bluetooth: hci6: link tx timeout [ 722.103305][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 722.111161][ T5633] Bluetooth: hci6: link tx timeout [ 722.116342][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.124184][ T5633] Bluetooth: hci6: link tx timeout [ 722.129675][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 722.137451][ T5633] Bluetooth: hci6: link tx timeout [ 722.142629][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.157567][ T3099] team0: Cannot enslave team device to itself [ 722.279003][ T5633] block nbd8: Receive control failed (result -32) [ 722.279003][ T5623] block nbd8: Receive control failed (result -32) [ 722.309429][ T3121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7858'. [ 722.372711][ T3121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7858'. [ 722.385946][ T3133] netlink: 404 bytes leftover after parsing attributes in process `syz.6.7861'. [ 722.395601][ T3133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7861'. [ 722.445463][ T3131] netlink: 'syz.2.7862': attribute type 21 has an invalid length. [ 722.460352][ T3127] netlink: 'syz.3.7858': attribute type 5 has an invalid length. [ 722.470635][ T5633] Bluetooth: hci6: link tx timeout [ 722.475802][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 722.484489][ T5633] Bluetooth: hci6: link tx timeout [ 722.490397][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.498236][ T5633] Bluetooth: hci6: link tx timeout [ 722.503400][ T5633] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 722.511430][ T5633] Bluetooth: hci6: link tx timeout [ 722.516580][ T5633] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.543349][ T3142] netlink: 'syz.6.7864': attribute type 1 has an invalid length. [ 722.595233][ T3148] IPv6: addrconf: prefix option has invalid lifetime [ 722.637529][ T5633] Bluetooth: hci6: command 0x0406 tx timeout [ 722.717191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.891456][ T5633] block nbd9: Receive control failed (result -32) [ 722.956813][ T3187] openvswitch: netlink: IPv4 tun info is not correct [ 723.540717][ T3225] ip6gretap0: entered promiscuous mode [ 723.608133][ T3232] bond1: entered allmulticast mode [ 723.757172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.855785][ T3249] lo: entered allmulticast mode [ 723.877644][ T3249] lo: left allmulticast mode [ 724.036254][T10524] IPVS: starting estimator thread 0... [ 724.137285][ T3259] IPVS: using max 53 ests per chain, 127200 per kthread [ 724.206537][ T3267] netlink: 'syz.4.7895': attribute type 4 has an invalid length. [ 724.324668][ T3273] tipc: Resetting bearer [ 724.336402][ T3273] tipc: Resetting bearer [ 724.487982][ T3281] 8021q: adding VLAN 0 to HW filter on device bond13 [ 724.496544][ T3281] netlink: 'syz.2.7898': attribute type 2 has an invalid length. [ 724.504794][ T3283] netlink: 'syz.2.7898': attribute type 2 has an invalid length. [ 724.718010][ T5633] Bluetooth: hci6: command 0x0406 tx timeout [ 724.807178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.358767][ T3318] netlink: 'syz.6.7909': attribute type 1 has an invalid length. [ 725.837175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.929917][ T3371] netlink: 'syz.3.7925': attribute type 13 has an invalid length. [ 725.961648][ T3371] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 725.976634][ T3371] syzkaller0: entered promiscuous mode [ 725.983517][ T3371] syzkaller0: entered allmulticast mode [ 726.052552][ T3378] __nla_validate_parse: 19 callbacks suppressed [ 726.052567][ T3378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7925'. [ 726.084361][ T3378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7925'. [ 726.379874][ T3395] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 726.604680][ T50] block nbd10: Receive control failed (result -32) [ 726.611321][ T5633] block nbd10: Receive control failed (result -32) [ 726.787785][ T3399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7933'. [ 726.797484][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 726.926874][ T3414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 726.999824][ T3421] xfrm0 speed is unknown, defaulting to 1000 [ 727.080684][ T3425] netlink: 'syz.6.7939': attribute type 1 has an invalid length. [ 727.105800][ T3421] lo speed is unknown, defaulting to 1000 [ 727.210572][ T3421] lo speed is unknown, defaulting to 1000 [ 727.443703][ T3449] netlink: 'syz.3.7948': attribute type 3 has an invalid length. [ 727.583728][ T3453] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7949'. [ 727.639273][ T3457] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7949'. [ 727.912542][ T3458] tipc: Resetting bearer [ 727.923384][ T3476] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 728.039528][ T3490] pim6reg1: entered promiscuous mode [ 728.046789][ T3490] pim6reg1: entered allmulticast mode [ 728.126604][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7964'. [ 728.174759][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7962'. [ 728.197376][ T3497] netlink: 'syz.6.7963': attribute type 49 has an invalid length. [ 728.213112][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7962'. [ 728.525073][ T3458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 728.544460][ T3458] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 728.600364][ T3544] x_tables: duplicate underflow at hook 1 [ 728.691301][ T3458] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 728.704823][ T3458] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 729.029589][ T3568] netlink: 'syz.1.7974': attribute type 1 has an invalid length. [ 729.133741][ T3568] bond7: entered promiscuous mode [ 729.149398][ T3568] 8021q: adding VLAN 0 to HW filter on device bond7 [ 729.257351][ T3558] bond7: (slave bridge10): making interface the new active one [ 729.265529][ T3558] bridge10: entered promiscuous mode [ 729.276145][ T3558] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 729.283694][ T3576] netlink: 'syz.2.7976': attribute type 1 has an invalid length. [ 729.329746][ T3565] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 729.357451][ T3565] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 729.410881][ T3576] bond14: entered promiscuous mode [ 729.416366][ T3576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 729.474895][ T3574] 8021q: adding VLAN 0 to HW filter on device bond15 [ 729.502486][ T3574] bond14: (slave bond15): making interface the new active one [ 729.510111][ T3574] bond15: entered promiscuous mode [ 729.515999][ T3574] bond14: (slave bond15): Enslaving as an active interface with an up link [ 729.540380][ T3586] batman_adv: batadv0: Adding interface: dummy0 [ 729.550174][ T3586] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.589619][ T3586] batman_adv: batadv0: Interface activated: dummy0 [ 729.599318][ T3578] pim6reg1: entered promiscuous mode [ 729.604791][ T3578] pim6reg1: entered allmulticast mode [ 729.812643][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7979'. [ 729.851008][ T3598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7982'. [ 729.862394][ T3596] batadv0: mtu less than device minimum [ 729.878903][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.889871][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.900882][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.911854][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.922836][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.933753][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.944745][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.955703][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 729.966698][ T3596] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 730.135103][ T3604] netlink: 'syz.6.7983': attribute type 6 has an invalid length. [ 730.155590][ T3606] netlink: 'syz.2.7985': attribute type 25 has an invalid length. [ 730.256346][ T3613] vlan0: entered promiscuous mode [ 730.290844][ T3615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.314309][ T3615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.140396][ T3655] __nla_validate_parse: 6 callbacks suppressed [ 731.140415][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7997'. [ 731.336858][ T3662] netlink: 3800 bytes leftover after parsing attributes in process `syz.1.8000'. [ 731.495152][ T3676] netlink: 'syz.1.8003': attribute type 11 has an invalid length. [ 731.498565][ T3680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8004'. [ 731.512458][ T3680] batman_adv: batadv0: Interface deactivated: gretap1 [ 731.519667][ T3680] batman_adv: batadv0: Removing interface: gretap1 [ 731.621845][ T3681] netlink: 'syz.1.8003': attribute type 11 has an invalid length. [ 731.627332][ T3688] netlink: 'syz.3.8007': attribute type 8 has an invalid length. [ 731.637810][ T3681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8003'. [ 731.737407][ T3692] netlink: 'syz.3.8009': attribute type 21 has an invalid length. [ 731.752499][ T3692] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8009'. [ 731.763784][ T3697] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 731.795216][ T3692] netlink: 'syz.3.8009': attribute type 4 has an invalid length. [ 731.821354][ T3692] netlink: 'syz.3.8009': attribute type 5 has an invalid length. [ 731.833215][ T3692] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8009'. [ 731.967071][ T3709] netlink: 'syz.4.8014': attribute type 62 has an invalid length. [ 732.008643][ T3709] netlink: 'syz.4.8014': attribute type 12 has an invalid length. [ 732.323196][ T3726] ip6gre2: entered promiscuous mode [ 732.333612][ T3726] ip6gre2: entered allmulticast mode [ 732.362292][ T3726] netlink: 'syz.4.8020': attribute type 2 has an invalid length. [ 732.415713][ T3728] syzkaller0: entered allmulticast mode [ 732.560558][ T3750] syzkaller1: entered promiscuous mode [ 732.566158][ T3750] syzkaller1: entered allmulticast mode [ 732.590626][ T3756] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8031'. [ 732.599884][ T3756] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8031'. [ 732.678687][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8033'. [ 732.909102][ T3795] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8041'. [ 733.206986][ T3825] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 733.245691][ T3826] xt_CT: No such helper "syz1" [ 734.103942][ T3881] netlink: 'syz.6.8069': attribute type 2 has an invalid length. [ 734.241585][ T3895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.345463][ T3906] netlink: 'syz.6.8076': attribute type 4 has an invalid length. [ 734.387784][ T3906] netlink: 'syz.6.8076': attribute type 4 has an invalid length. [ 734.518471][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.525963][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.614347][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.629998][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.808751][ T3923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 734.839692][ T3933] bond5: (slave batadv2): Opening slave failed [ 734.850722][T22695] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.867931][T22695] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.887594][T22695] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.922704][T22695] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.996081][ T3953] xt_hashlimit: size too large, truncated to 1048576 [ 735.024803][ T3955] x_tables: duplicate underflow at hook 1 [ 735.191683][ T3968] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 735.201329][ T3968] net_ratelimit: 11 callbacks suppressed [ 735.201344][ T3968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 735.268117][ T29] audit: type=1800 audit(1781924653.066:23): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8097" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2325 res=0 errno=0 [ 735.656462][ T3982] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 735.675408][ T3984] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 735.692294][ T3984] bond2 (unregistering): Released all slaves [ 735.725548][ T3982] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 735.776695][ T3985] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.826277][ T3997] macsec2: entered promiscuous mode [ 735.832288][ T3997] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 735.841598][ T3997] mac80211_hwsim hwsim94 wlan1: left promiscuous mode [ 736.063825][ T4035] xfrm0 speed is unknown, defaulting to 1000 [ 736.094015][ T4041] bond0: (slave wlan0): Opening slave failed [ 736.172866][ T4035] lo speed is unknown, defaulting to 1000 [ 736.274497][ T4035] lo speed is unknown, defaulting to 1000 [ 736.405289][ T4063] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 736.416353][ T4063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.460524][ T4068] __nla_validate_parse: 30 callbacks suppressed [ 736.460542][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8123'. [ 736.478646][ T4068] hsr_slave_0: left promiscuous mode [ 736.484883][ T4068] hsr_slave_1: left promiscuous mode [ 736.514555][ T4069] tipc: Enabling of bearer rejected, failed to enable media [ 736.657870][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8125'. [ 736.706023][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8126'. [ 736.955932][ T4100] IPv6: Can't replace route, no match found [ 736.992769][ T4104] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 737.044506][ T4114] validate_nla: 3 callbacks suppressed [ 737.044525][ T4114] netlink: 'syz.6.8138': attribute type 1 has an invalid length. [ 737.179123][ T4120] tipc: Enabling of bearer rejected, failed to enable media [ 737.195090][ T4120] netlink: 'syz.6.8141': attribute type 1 has an invalid length. [ 737.277583][ T4140] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 737.291597][ T4138] netlink: 'syz.2.8147': attribute type 4 has an invalid length. [ 737.308331][ T4138] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8147'. [ 737.354196][ T4138] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8147'. [ 737.386559][ T4149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8150'. [ 737.410443][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8151'. [ 737.497413][ T4161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8154'. [ 737.507375][ T4161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.538953][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8153'. [ 737.716629][ T4175] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8159'. [ 737.799151][ T4188] netlink: 'syz.2.8162': attribute type 10 has an invalid length. [ 737.819728][ T4188] team0: entered promiscuous mode [ 737.836663][ T4188] team0: entered allmulticast mode [ 737.846016][ T4188] bridge0: port 1(team0) entered blocking state [ 737.852757][ T4188] bridge0: port 1(team0) entered disabled state [ 737.865915][ T4193] tipc: Enabling of bearer rejected, already enabled [ 737.944032][ T4195] syzkaller0: entered promiscuous mode [ 737.957565][ T4195] syzkaller0: entered allmulticast mode [ 738.010330][ T4206] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 738.130520][ T4213] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 738.157250][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.216493][ T4228] netlink: 'syz.3.8177': attribute type 1 has an invalid length. [ 738.384914][ T4242] xfrm0 speed is unknown, defaulting to 1000 [ 738.522672][ T4242] lo speed is unknown, defaulting to 1000 [ 738.633761][ T4242] lo speed is unknown, defaulting to 1000 [ 738.887687][ T29] audit: type=1800 audit(1781924656.676:24): pid=4259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8187" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2253 res=0 errno=0 [ 739.031660][ T4264] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 739.132428][ T4273] netlink: 'syz.1.8191': attribute type 2 has an invalid length. [ 739.526543][ T4307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.559961][T10535] lo speed is unknown, defaulting to 1000 [ 739.565914][ T4305] netlink: 'syz.6.8199': attribute type 12 has an invalid length. [ 739.583837][T10535] syz2: Port: 1 Link DOWN [ 739.589966][ T4305] netlink: 'syz.6.8199': attribute type 29 has an invalid length. [ 739.599367][ T4305] netlink: 'syz.6.8199': attribute type 1 has an invalid length. [ 739.689683][ T4316] syzkaller1: entered allmulticast mode [ 739.893346][ T4328] tipc: New replicast peer: 255.255.255.255 [ 739.909304][ T4328] tipc: Enabled bearer , priority 26 [ 739.943129][ T4328] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.046670][ T4347] netlink: 'syz.1.8213': attribute type 6 has an invalid length. [ 740.091695][ T4349] 8021q: adding VLAN 0 to HW filter on device bond17 [ 740.116090][ T4355] syzkaller1: entered promiscuous mode [ 740.139435][ T4355] syzkaller1: entered allmulticast mode [ 740.449876][ T4389] syzkaller0: entered promiscuous mode [ 740.473143][ T4389] syzkaller0: entered allmulticast mode [ 740.499871][ T4389] tc action pedit offset 4096 out of bounds [ 740.616300][ T4398] syzkaller0: entered promiscuous mode [ 740.628445][ T4398] syzkaller0: entered allmulticast mode [ 741.191763][ T4423] xfrm0 speed is unknown, defaulting to 1000 [ 741.473710][ T4459] bond9: option arp_missed_max: invalid value (0) [ 741.490598][ T4459] bond9: option arp_missed_max: allowed values 1 - 255 [ 741.526603][ T4459] bond9 (unregistering): Released all slaves [ 741.536016][T10535] IPVS: starting estimator thread 0... [ 741.637268][ T4473] IPVS: using max 53 ests per chain, 127200 per kthread [ 741.665504][ T4435] syzkaller0: entered promiscuous mode [ 741.680829][ T4435] syzkaller0: entered allmulticast mode [ 741.692316][ T4423] lo speed is unknown, defaulting to 1000 [ 741.889476][ T4423] lo speed is unknown, defaulting to 1000 [ 742.148987][ T4494] __nla_validate_parse: 15 callbacks suppressed [ 742.149004][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8252'. [ 742.260013][ T4496] validate_nla: 4 callbacks suppressed [ 742.260029][ T4496] netlink: 'syz.4.8255': attribute type 1 has an invalid length. [ 742.295887][ T4498] netlink: 'syz.6.8253': attribute type 1 has an invalid length. [ 742.378726][ T4496] 8021q: adding VLAN 0 to HW filter on device bond38 [ 742.543361][ T4498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.602415][ T4502] bond38: (slave veth13): Enslaving as an active interface with a down link [ 742.630929][ T4503] bond2: (slave veth5): Enslaving as an active interface with a down link [ 742.659956][ T4505] bond2 (unregistering): (slave veth5): Releasing active interface [ 742.668598][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8256'. [ 742.681607][ T4505] bond2 (unregistering): Released all slaves [ 742.697079][ T4496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8255'. [ 742.729102][ T4509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 742.748101][ T4509] bond38: (slave batadv1): making interface the new active one [ 742.774849][ T4509] batadv1: entered promiscuous mode [ 742.789344][ T4509] bond38: (slave batadv1): Enslaving as an active interface with an up link [ 742.820364][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8258'. [ 742.863850][ T4523] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 743.328907][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8265'. [ 743.347107][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8265'. [ 743.390802][ T4548] netlink: 'syz.2.8266': attribute type 2 has an invalid length. [ 743.406146][ T4548] netlink: 'syz.2.8266': attribute type 1 has an invalid length. [ 744.234529][ T4617] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 745.206010][ T4636] SET target dimension over the limit! [ 745.213937][ T4637] SET target dimension over the limit! [ 745.669141][ T4654] netlink: 'syz.3.8295': attribute type 1 has an invalid length. [ 745.681713][ T4654] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 745.702046][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8294'. [ 745.752714][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8297'. [ 745.761969][ T4670] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8293'. [ 745.787415][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8297'. [ 745.840535][ T4670] netlink: 'syz.1.8293': attribute type 1 has an invalid length. [ 745.865560][ T4678] IPVS: Scheduler module ip_vs_sip not found [ 746.075906][ T4697] syzkaller0: entered promiscuous mode [ 746.084660][ T4697] syzkaller0: entered allmulticast mode [ 746.088885][ T4689] netlink: 'syz.1.8302': attribute type 1 has an invalid length. [ 746.096573][ T4697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.112828][ T4689] bond9: entered promiscuous mode [ 746.118260][ T4689] bond9: entered allmulticast mode [ 746.123727][ T4689] 8021q: adding VLAN 0 to HW filter on device bond9 [ 746.198870][ T4709] lo: Caught tx_queue_len zero misconfig [ 746.894280][ T4730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.947716][ T4736] netlink: 'syz.2.8313': attribute type 2 has an invalid length. [ 746.966249][ T4736] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 747.137415][ T4745] block nbd11: server does not support multiple connections per device. [ 747.146797][ T4745] block nbd11: shutting down sockets [ 747.181353][ T4751] __nla_validate_parse: 6 callbacks suppressed [ 747.181369][ T4751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8318'. [ 747.196618][ T4751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8318'. [ 747.376802][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8320'. [ 747.479448][ T4772] sctp: [Deprecated]: syz.4.8324 (pid 4772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.479448][ T4772] Use struct sctp_sack_info instead [ 747.563542][ T4774] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 747.706624][ T4781] syzkaller0: entered promiscuous mode [ 747.719040][ T4781] syzkaller0: entered allmulticast mode [ 747.755909][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8330'. [ 747.783456][ T4797] netlink: 'syz.2.8330': attribute type 10 has an invalid length. [ 747.792749][ T4797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8330'. [ 747.998667][ T4806] xt_CT: No such helper "snmp_trap" [ 748.541767][ T4823] netlink: 'syz.2.8337': attribute type 2 has an invalid length. [ 748.819326][ T4833] xfrm0: Caught tx_queue_len zero misconfig [ 748.868272][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8345'. [ 748.891372][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 748.923930][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 749.029062][ T4859] macsec1: entered allmulticast mode [ 749.034921][ T4859] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 749.108853][ T4878] batadv_slave_0: entered promiscuous mode [ 749.116789][ T4877] batadv_slave_0: left promiscuous mode [ 749.241404][ T4889] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8355'. [ 749.272041][ T4889] netlink: 'syz.3.8355': attribute type 1 has an invalid length. [ 749.378602][ T4907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8358'. [ 749.576658][ T4927] netlink: 'syz.4.8367': attribute type 3 has an invalid length. [ 749.842120][ T4964] netlink: 'syz.3.8377': attribute type 1 has an invalid length. [ 749.956318][ T4979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.186757][ T4991] ip6gre1: entered promiscuous mode [ 750.199620][ T4991] ip6gre1: entered allmulticast mode [ 750.300887][ T5003] netlink: 'syz.1.8383': attribute type 62 has an invalid length. [ 750.371537][ T5008] 5nè: entered promiscuous mode [ 750.547565][ T5022] netlink: 'syz.6.8391': attribute type 2 has an invalid length. [ 750.566172][ T5022] netlink: 'syz.6.8391': attribute type 8 has an invalid length. [ 750.605166][ T5022] netlink: 'syz.6.8391': attribute type 2 has an invalid length. [ 750.624483][ T5022] netlink: 'syz.6.8391': attribute type 8 has an invalid length. [ 750.881365][ T5043] ip6tnl0: Caught tx_queue_len zero misconfig [ 750.975578][ T5043] bond7: (slave bridge6): making interface the new active one [ 750.988518][ T5043] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 751.210395][ T5086] pim6reg: entered allmulticast mode [ 751.240148][ T5088] tipc: Started in network mode [ 751.249239][ T5088] tipc: Node identity ac14140f, cluster identity 4711 [ 751.256546][ T5088] tipc: Enabled bearer , priority 26 [ 751.264759][ T5086] pim6reg: left allmulticast mode [ 751.395248][ T5101] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 751.454552][ T5103] IPVS: Scheduler module ip_vs_sip not found [ 751.483033][ T5103] bond2: entered promiscuous mode [ 751.489391][ T5103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.566583][ T5118] ip6gretap0: left promiscuous mode [ 751.576159][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.584552][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.595586][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.634653][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.643645][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.660014][ T5118] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 751.696655][T22687] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.703832][T22687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.722327][ T5126] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 751.740194][T22687] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.747353][T22687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.085195][ T5141] syzkaller0: entered promiscuous mode [ 752.092633][ T5141] syzkaller0: entered allmulticast mode [ 752.222179][ T5161] __nla_validate_parse: 26 callbacks suppressed [ 752.222198][ T5161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8432'. [ 752.247458][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8422'. [ 752.260852][ T5161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8432'. [ 752.326531][ T5174] bridge0: port 1(team0) entered disabled state [ 752.385959][ T5174] bond4: (slave bond5): Releasing backup interface [ 752.401831][ T5174] bond9: (slave bond10): Releasing backup interface [ 752.410807][ T5174] team0: Port device bridge3 removed [ 752.417732][ T5174] bond12: (slave ip6gretap2): Releasing active interface [ 752.429188][ T5174] bond14: (slave bond15): Releasing backup interface [ 752.436628][ T5174] bond15: left promiscuous mode [ 752.450205][ T5851] tipc: Node number set to 2886997007 [ 752.463201][ T5179] team0: Mode changed to "loadbalance" [ 752.604677][ T5197] tc action pedit offset must be on 32 bit boundaries [ 752.770831][ T5210] xt_CT: No such helper "netbios-ns" [ 752.849514][ T5226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.932572][ T5235] netlink: 181256 bytes leftover after parsing attributes in process `syz.4.8453'. [ 753.073463][ T5245] nbd: nbd4 already in use [ 753.092759][ T5245] block nbd4: NBD_DISCONNECT [ 753.104130][ T5245] block nbd4: Send disconnect failed -32 [ 753.258703][ T5235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 753.299937][T10778] lo speed is unknown, defaulting to 1000 [ 753.320561][T10778] syz2: Port: 1 Link ACTIVE [ 753.402204][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8462'. [ 753.546391][ T5291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8467'. [ 753.708845][ T5313] tipc: Enabling of bearer rejected, already enabled [ 753.762195][ T8163] batadv1: left promiscuous mode [ 753.859079][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8477'. [ 753.872618][T22689] tipc: Subscription rejected, illegal request [ 753.960638][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8478'. [ 753.980580][ T5328] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 754.039517][ T5329] nbd1: detected capacity change from 0 to 63 [ 754.052310][ T5340] block nbd1: NBD_DISCONNECT [ 754.058336][ T5340] block nbd1: Disconnected due to user request. [ 754.064686][ T5340] block nbd1: shutting down sockets [ 754.075074][ C1] blk_print_req_error: 138 callbacks suppressed [ 754.075091][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.090456][ C1] buffer_io_error: 138 callbacks suppressed [ 754.090471][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.104116][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.113194][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.120954][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.130031][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 754.137798][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.146892][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 754.155202][ T3461] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.173170][ T3461] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.181747][ T3461] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.191617][ T3461] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.199513][ T3461] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.208845][ T3461] Buffer I/O error on dev nbd1, logical block 2, async page read [ 754.216661][ T3461] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.225959][ T3461] Buffer I/O error on dev nbd1, logical block 3, async page read [ 754.233902][ T3461] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.242715][ T5360] validate_nla: 4 callbacks suppressed [ 754.242729][ T5360] netlink: 'syz.2.8481': attribute type 1 has an invalid length. [ 754.243496][ T3461] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.264253][ T3461] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.273412][ T3461] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.284565][ T3461] ldm_validate_partition_table(): Disk read failed. [ 754.292703][ T3461] Dev nbd1: unable to read RDB block 0 [ 754.292744][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8481'. [ 754.299411][ T3461] nbd1: unable to read partition table [ 754.321717][ T5361] vlan3: entered promiscuous mode [ 754.323531][ T3461] ldm_validate_partition_table(): Disk read failed. [ 754.337470][ T5361] bridge0: entered promiscuous mode [ 754.382249][ T3461] Dev nbd1: unable to read RDB block 0 [ 754.391212][ T3461] nbd1: unable to read partition table [ 754.461618][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8485'. [ 754.627370][ T5399] netlink: 'syz.2.8488': attribute type 7 has an invalid length. [ 754.785720][ T5410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.191734][ T5452] x_tables: duplicate underflow at hook 1 [ 755.705786][ T5469] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 755.722886][ T5469] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 756.280711][ T5515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.371555][ T5517] xt_bpf: check failed: parse error [ 756.456578][ T5529] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 756.511105][ T5541] veth1_to_bond: entered allmulticast mode [ 756.532663][ T5540] veth1_to_bond: left allmulticast mode [ 756.864550][ T5573] nbd: must specify at least one socket [ 757.026245][ T5578] bond8: Removing last arp target with arp_interval on [ 757.151892][ T5583] syzkaller0: entered promiscuous mode [ 757.169008][ T5583] syzkaller0: entered allmulticast mode [ 757.224494][ T5583] bond3: option broadcast_neighbor: invalid value (30) [ 757.242098][ T5583] bond3 (unregistering): Released all slaves [ 757.357252][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 757.549510][ T5605] __nla_validate_parse: 17 callbacks suppressed [ 757.549526][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8549'. [ 757.639949][ T5609] can: request_module (can-proto-0) failed. [ 757.671215][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8550'. [ 757.785842][ T5629] SET target dimension over the limit! [ 757.803450][ T5632] nbd: socks must be embedded in a SOCK_ITEM attr [ 757.811889][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8553'. [ 757.824452][ T5630] syzkaller0: entered promiscuous mode [ 757.838877][ T5630] syzkaller0: entered allmulticast mode [ 757.876815][ T5630] 0: reclassify loop, rule prio 0, protocol 800 [ 758.027453][ T5647] bridge2: entered allmulticast mode [ 758.074394][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8567'. [ 758.196799][ T5656] netlink: 'syz.1.8567': attribute type 1 has an invalid length. [ 758.327668][ T5684] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8570'. [ 758.357297][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8570'. [ 758.409398][ T5691] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8572'. [ 758.423546][ T5651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8566'. [ 758.448173][ T5691] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8572'. [ 758.458091][ T5691] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8572'. [ 758.870991][ T5743] dvmrp0: entered allmulticast mode [ 759.116964][ T5758] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 759.152357][ T5758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.238439][ T5766] bridge8: entered promiscuous mode [ 759.257318][ T5766] bridge8: entered allmulticast mode [ 759.350834][ T5780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.609723][ T5802] vlan3: entered allmulticast mode [ 759.625365][ T5813] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 759.625365][ T5813] Please contact the netfilter-devel mailing list or update your nftables rules. [ 759.633997][ T5802] bond0: entered allmulticast mode [ 759.786713][ T5825] syzkaller0: entered promiscuous mode [ 759.799470][ T5824] netlink: 'syz.3.8598': attribute type 1 has an invalid length. [ 759.800686][ T5825] syzkaller0: entered allmulticast mode [ 759.883872][ T5824] bond10: entered promiscuous mode [ 759.893781][ T5824] 8021q: adding VLAN 0 to HW filter on device bond10 [ 759.949527][ T5824] ip6tnl2: entered allmulticast mode [ 759.960757][ T1116] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 760.066407][ T5860] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 760.142506][ T5867] netlink: 'syz.4.8610': attribute type 1 has an invalid length. [ 760.149289][ T5870] netlink: 'syz.6.8611': attribute type 1 has an invalid length. [ 760.160338][ T5870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.169446][ T5871] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 760.178710][ T5877] netlink: 'syz.2.8608': attribute type 1 has an invalid length. [ 760.248079][ T5877] bond18: option mode: invalid value (8) [ 760.256543][ T5877] bond18 (unregistering): Released all slaves [ 760.618687][ T5917] syzkaller1: entered promiscuous mode [ 760.634130][ T5917] syzkaller1: entered allmulticast mode [ 760.720575][ T5919] block nbd1: server does not support multiple connections per device. [ 760.729525][ T5919] block nbd1: shutting down sockets [ 760.881272][ T5938] FAULT_INJECTION: forcing a failure. [ 760.881272][ T5938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.897571][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: syz.6.8628 Not tainted syzkaller #0 PREEMPT(full) [ 760.897594][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.897605][ T5938] Call Trace: [ 760.897611][ T5938] [ 760.897619][ T5938] dump_stack_lvl+0xe8/0x150 [ 760.897644][ T5938] should_fail_ex+0x40c/0x560 [ 760.897664][ T5938] _copy_from_user+0x2d/0xb0 [ 760.897685][ T5938] ___sys_sendmsg+0x1c6/0x360 [ 760.897709][ T5938] ? rcu_is_watching+0x15/0xb0 [ 760.897726][ T5938] ? get_pid_task+0x20/0x1f0 [ 760.897742][ T5938] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.897765][ T5938] ? rcu_is_watching+0x15/0xb0 [ 760.897791][ T5938] ? __fget_files+0x2a/0x420 [ 760.897809][ T5938] ? __fget_files+0x3a2/0x420 [ 760.897830][ T5938] __x64_sys_sendmsg+0x1b1/0x290 [ 760.897852][ T5938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.897878][ T5938] ? rcu_is_watching+0x15/0xb0 [ 760.897894][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.897910][ T5938] do_syscall_64+0x174/0x580 [ 760.897932][ T5938] ? trace_irq_disable+0x3b/0x140 [ 760.897955][ T5938] ? clear_bhb_loop+0x40/0x90 [ 760.897972][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.897987][ T5938] RIP: 0033:0x7fe93719ce59 [ 760.898003][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.898016][ T5938] RSP: 002b:00007fe9380ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.898035][ T5938] RAX: ffffffffffffffda RBX: 00007fe937415fa0 RCX: 00007fe93719ce59 [ 760.898047][ T5938] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 760.898057][ T5938] RBP: 00007fe9380ba090 R08: 0000000000000000 R09: 0000000000000000 [ 760.898066][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.898076][ T5938] R13: 00007fe937416038 R14: 00007fe937415fa0 R15: 00007ffe0917a0c8 [ 760.898094][ T5938] [ 761.170673][ T5950] erspan1: entered allmulticast mode [ 761.204799][ T5940] bridge8: entered promiscuous mode [ 761.210075][ T5940] bridge8: entered allmulticast mode [ 761.311199][ T5961] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 761.322954][ T5961] bond11 (unregistering): Released all slaves [ 761.363672][ T5965] tipc: New replicast peer: 255.255.255.255 [ 761.375350][ T5965] tipc: Enabled bearer , priority 26 [ 761.781320][ T6006] netlink: zone id is out of range [ 762.079545][ T6030] can: request_module (can-proto-0) failed. [ 762.154399][ T6043] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 762.216598][ T6050] netlink: 'syz.2.8661': attribute type 4 has an invalid length. [ 762.327623][ T6062] xt_hashlimit: size too large, truncated to 1048576 [ 762.517201][T10778] tipc: Node number set to 1623015461 [ 762.692621][ T6097] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 762.726328][ T6103] netlink: 'syz.3.8676': attribute type 1 has an invalid length. [ 762.827253][ T6103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 762.860031][ T6123] __nla_validate_parse: 128 callbacks suppressed [ 762.860049][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8679'. [ 762.942854][ T6131] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode [ 762.969710][ T6131] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode [ 763.016334][ T6143] FAULT_INJECTION: forcing a failure. [ 763.016334][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.033430][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.3.8685 Not tainted syzkaller #0 PREEMPT(full) [ 763.033455][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.033474][ T6143] Call Trace: [ 763.033481][ T6143] [ 763.033488][ T6143] dump_stack_lvl+0xe8/0x150 [ 763.033508][ T6143] should_fail_ex+0x40c/0x560 [ 763.033527][ T6143] _copy_from_iter+0x1d3/0x1660 [ 763.033546][ T6143] ? rcu_is_watching+0x15/0xb0 [ 763.033562][ T6143] ? trace_kmem_cache_alloc+0x29/0xe0 [ 763.033580][ T6143] ? __build_skb+0x62/0x440 [ 763.033599][ T6143] ? kmem_cache_alloc_noprof+0x303/0x650 [ 763.033617][ T6143] ? __build_skb+0x62/0x440 [ 763.033633][ T6143] ? __pfx__copy_from_iter+0x10/0x10 [ 763.033652][ T6143] ? __build_skb+0x2a2/0x440 [ 763.033670][ T6143] ? netlink_sendmsg+0x650/0xb40 [ 763.033693][ T6143] ? skb_put+0x112/0x210 [ 763.033712][ T6143] netlink_sendmsg+0x6c0/0xb40 [ 763.033737][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.033760][ T6143] ? aa_sock_msg_perm+0xf1/0x1b0 [ 763.033778][ T6143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 763.033797][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.033818][ T6143] ____sys_sendmsg+0x9b9/0xa20 [ 763.033843][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.033865][ T6143] ? lock_release+0x4b/0x3c0 [ 763.033887][ T6143] ? import_iovec+0x73/0xa0 [ 763.033908][ T6143] ___sys_sendmsg+0x2a5/0x360 [ 763.033927][ T6143] ? rcu_is_watching+0x15/0xb0 [ 763.033942][ T6143] ? get_pid_task+0x20/0x1f0 [ 763.033958][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.033980][ T6143] ? rcu_is_watching+0x15/0xb0 [ 763.034005][ T6143] ? __fget_files+0x2a/0x420 [ 763.034020][ T6143] ? __fget_files+0x3a2/0x420 [ 763.034040][ T6143] __x64_sys_sendmsg+0x1b1/0x290 [ 763.034062][ T6143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.034086][ T6143] ? rcu_is_watching+0x15/0xb0 [ 763.034102][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.034118][ T6143] do_syscall_64+0x174/0x580 [ 763.034136][ T6143] ? trace_irq_disable+0x3b/0x140 [ 763.034155][ T6143] ? clear_bhb_loop+0x40/0x90 [ 763.034171][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.034186][ T6143] RIP: 0033:0x7f0042b9ce59 [ 763.034201][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.034213][ T6143] RSP: 002b:00007f0040df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.034232][ T6143] RAX: ffffffffffffffda RBX: 00007f0042e15fa0 RCX: 00007f0042b9ce59 [ 763.034244][ T6143] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 763.034254][ T6143] RBP: 00007f0040df6090 R08: 0000000000000000 R09: 0000000000000000 [ 763.034263][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.034272][ T6143] R13: 00007f0042e16038 R14: 00007f0042e15fa0 R15: 00007ffc3c7b7d38 [ 763.034291][ T6143] [ 763.386091][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8688'. [ 763.396553][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8688'. [ 763.407286][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8690'. [ 763.457564][ T6155] syzkaller0: entered promiscuous mode [ 763.463106][ T6155] syzkaller0: entered allmulticast mode [ 763.588609][ T6169] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode [ 763.596132][ T6169] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode [ 763.605900][ T6169] tipc: Enabling of bearer rejected, already enabled [ 763.632391][ T6174] FAULT_INJECTION: forcing a failure. [ 763.632391][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 763.673827][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.3.8698 Not tainted syzkaller #0 PREEMPT(full) [ 763.673851][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.673861][ T6174] Call Trace: [ 763.673868][ T6174] [ 763.673875][ T6174] dump_stack_lvl+0xe8/0x150 [ 763.673898][ T6174] should_fail_ex+0x40c/0x560 [ 763.673926][ T6174] should_failslab+0xa8/0x100 [ 763.673949][ T6174] __kmalloc_noprof+0xe8/0x750 [ 763.673969][ T6174] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 763.673989][ T6174] ? is_bpf_text_address+0x26/0x2b0 [ 763.674013][ T6174] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 763.674032][ T6174] ? __kernel_text_address+0xd/0x30 [ 763.674050][ T6174] genl_family_rcv_msg_doit+0xda/0x340 [ 763.674069][ T6174] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 763.674090][ T6174] ? apparmor_capable+0x126/0x170 [ 763.674190][ T6174] ? bpf_lsm_capable+0x9/0x20 [ 763.674205][ T6174] ? security_capable+0x7e/0x2c0 [ 763.674231][ T6174] genl_rcv_msg+0x614/0x7a0 [ 763.674252][ T6174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.674269][ T6174] ? __pfx_ethnl_set_features+0x10/0x10 [ 763.674326][ T6174] ? __netlink_lookup+0xc6/0x8b0 [ 763.674340][ T6174] ? rcu_is_watching+0x15/0xb0 [ 763.674363][ T6174] netlink_rcv_skb+0x226/0x4a0 [ 763.674385][ T6174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.674403][ T6174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.674428][ T6174] ? down_read+0x2be/0x330 [ 763.674451][ T6174] genl_rcv+0x28/0x40 [ 763.674467][ T6174] netlink_unicast+0x7bb/0x940 [ 763.674488][ T6174] netlink_sendmsg+0x813/0xb40 [ 763.674511][ T6174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.674532][ T6174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 763.674548][ T6174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 763.674566][ T6174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.674588][ T6174] ____sys_sendmsg+0x9b9/0xa20 [ 763.674612][ T6174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.674632][ T6174] ? lock_release+0x4b/0x3c0 [ 763.674654][ T6174] ? import_iovec+0x73/0xa0 [ 763.674676][ T6174] ___sys_sendmsg+0x2a5/0x360 [ 763.674696][ T6174] ? rcu_is_watching+0x15/0xb0 [ 763.674711][ T6174] ? get_pid_task+0x20/0x1f0 [ 763.674726][ T6174] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.674748][ T6174] ? rcu_is_watching+0x15/0xb0 [ 763.674773][ T6174] ? __fget_files+0x2a/0x420 [ 763.674788][ T6174] ? __fget_files+0x3a2/0x420 [ 763.674809][ T6174] __x64_sys_sendmsg+0x1b1/0x290 [ 763.674829][ T6174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.674854][ T6174] ? rcu_is_watching+0x15/0xb0 [ 763.674870][ T6174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.674887][ T6174] do_syscall_64+0x174/0x580 [ 763.674906][ T6174] ? trace_irq_disable+0x3b/0x140 [ 763.674933][ T6174] ? clear_bhb_loop+0x40/0x90 [ 763.674951][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.674965][ T6174] RIP: 0033:0x7f0042b9ce59 [ 763.674981][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.674994][ T6174] RSP: 002b:00007f0040df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.675012][ T6174] RAX: ffffffffffffffda RBX: 00007f0042e15fa0 RCX: 00007f0042b9ce59 [ 763.675023][ T6174] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 763.675034][ T6174] RBP: 00007f0040df6090 R08: 0000000000000000 R09: 0000000000000000 [ 763.675044][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.675054][ T6174] R13: 00007f0042e16038 R14: 00007f0042e15fa0 R15: 00007ffc3c7b7d38 [ 763.675074][ T6174] [ 764.084463][ T6179] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 764.108876][ T6179] bond10 (unregistering): Released all slaves [ 764.395235][ T6203] bridge12: entered promiscuous mode [ 764.401065][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 764.411270][ T6203] bridge12: entered allmulticast mode [ 764.558656][ T6214] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8711'. [ 764.599444][ T6221] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8712'. [ 764.624241][ T6223] FAULT_INJECTION: forcing a failure. [ 764.624241][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 764.649956][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.2.8713 Not tainted syzkaller #0 PREEMPT(full) [ 764.649978][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.649988][ T6223] Call Trace: [ 764.649995][ T6223] [ 764.650002][ T6223] dump_stack_lvl+0xe8/0x150 [ 764.650024][ T6223] should_fail_ex+0x40c/0x560 [ 764.650043][ T6223] should_failslab+0xa8/0x100 [ 764.650066][ T6223] __kmalloc_noprof+0xe8/0x750 [ 764.650086][ T6223] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 764.650108][ T6223] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 764.650130][ T6223] genl_family_rcv_msg_doit+0xda/0x340 [ 764.650150][ T6223] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 764.650171][ T6223] ? apparmor_capable+0x126/0x170 [ 764.650191][ T6223] ? bpf_lsm_capable+0x9/0x20 [ 764.650206][ T6223] ? security_capable+0x7e/0x2c0 [ 764.650231][ T6223] genl_rcv_msg+0x614/0x7a0 [ 764.650250][ T6223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.650265][ T6223] ? ref_tracker_free+0x689/0x830 [ 764.650412][ T6223] ? __pfx_ethnl_set_features+0x10/0x10 [ 764.650433][ T6223] ? __pfx_ref_tracker_free+0x10/0x10 [ 764.650452][ T6223] netlink_rcv_skb+0x226/0x4a0 [ 764.650473][ T6223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.650489][ T6223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.650514][ T6223] ? down_read+0x2be/0x330 [ 764.650537][ T6223] genl_rcv+0x28/0x40 [ 764.650550][ T6223] netlink_unicast+0x7bb/0x940 [ 764.650573][ T6223] netlink_sendmsg+0x813/0xb40 [ 764.650597][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.650620][ T6223] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.650636][ T6223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.650655][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.650677][ T6223] ____sys_sendmsg+0x9b9/0xa20 [ 764.650702][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.650725][ T6223] ? lock_release+0x4b/0x3c0 [ 764.650748][ T6223] ? import_iovec+0x73/0xa0 [ 764.650770][ T6223] ___sys_sendmsg+0x2a5/0x360 [ 764.650791][ T6223] ? rcu_is_watching+0x15/0xb0 [ 764.650816][ T6223] ? get_pid_task+0x20/0x1f0 [ 764.650831][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.650852][ T6223] ? rcu_is_watching+0x15/0xb0 [ 764.650879][ T6223] ? __fget_files+0x2a/0x420 [ 764.650896][ T6223] ? __fget_files+0x3a2/0x420 [ 764.650917][ T6223] __x64_sys_sendmsg+0x1b1/0x290 [ 764.650939][ T6223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.650965][ T6223] ? rcu_is_watching+0x15/0xb0 [ 764.650982][ T6223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.650999][ T6223] do_syscall_64+0x174/0x580 [ 764.651019][ T6223] ? trace_irq_disable+0x3b/0x140 [ 764.651038][ T6223] ? clear_bhb_loop+0x40/0x90 [ 764.651071][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.651086][ T6223] RIP: 0033:0x7f4187f9ce59 [ 764.651100][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.651113][ T6223] RSP: 002b:00007f4188dcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.651130][ T6223] RAX: ffffffffffffffda RBX: 00007f4188215fa0 RCX: 00007f4187f9ce59 [ 764.651145][ T6223] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 764.651155][ T6223] RBP: 00007f4188dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 764.651164][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.651174][ T6223] R13: 00007f4188216038 R14: 00007f4188215fa0 R15: 00007ffea6dd7c98 [ 764.651192][ T6223] [ 764.695721][ T6229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8716'. [ 765.005738][ T6236] syzkaller0: entered promiscuous mode [ 765.011478][ T6236] syzkaller0: entered allmulticast mode [ 765.099682][ T6234] tipc: Enabled bearer , priority 0 [ 765.114874][ T6230] tipc: Resetting bearer [ 765.137064][ T6230] tipc: Disabling bearer [ 765.161454][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8722'. [ 765.170864][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8722'. [ 765.190507][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8723'. [ 765.706453][ T6301] netlink: 'syz.1.8739': attribute type 4 has an invalid length. [ 766.017317][ T6325] bond3: option lacp_rate: invalid value (128) [ 766.025588][ T6325] bond3 (unregistering): Released all slaves [ 766.040948][ T6329] netlink: 'syz.1.8750': attribute type 8 has an invalid length. [ 766.126024][ T6337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.243926][ T6349] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 766.459725][ T6374] netlink: 'syz.2.8760': attribute type 1 has an invalid length. [ 766.483963][ T6374] bond18: entered promiscuous mode [ 766.492707][ T6374] 8021q: adding VLAN 0 to HW filter on device bond18 [ 766.517424][ T6380] syzkaller0: entered promiscuous mode [ 766.538937][ T6380] syzkaller0: entered allmulticast mode [ 766.625826][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.633242][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.715934][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.726348][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.803110][ T6400] team1: entered promiscuous mode [ 766.808414][ T6400] team1: entered allmulticast mode [ 766.814030][ T6400] 8021q: adding VLAN 0 to HW filter on device team1 [ 766.822941][ T6401] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 766.849355][ T6401] team2: entered promiscuous mode [ 766.863500][ T6401] team2: entered allmulticast mode [ 766.871800][ T6403] netlink: 'syz.6.8767': attribute type 10 has an invalid length. [ 766.880245][ T6401] 8021q: adding VLAN 0 to HW filter on device team2 [ 766.906248][ T6403] geneve2: entered promiscuous mode [ 766.920420][T22689] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 52777 - 0 [ 766.933795][ T6406] geneve0: entered promiscuous mode [ 766.943018][T22689] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 52777 - 0 [ 766.970999][T22689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 52777 - 0 [ 766.981679][T22689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 52777 - 0 [ 767.001302][T22689] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.011155][T22689] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.019664][T22689] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.034529][T22689] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.055072][ T6414] mac80211_hwsim hwsim101 wlan0: Caught tx_queue_len zero misconfig [ 767.183708][ T6433] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 767.201699][ T6435] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 767.355606][ T6454] netlink: 'syz.4.8780': attribute type 1 has an invalid length. [ 767.683675][ T6484] openvswitch: netlink: Message has 4 unknown bytes. [ 767.768741][ T6490] vlan4: entered promiscuous mode [ 767.773870][ T6490] bridge0: entered promiscuous mode [ 767.789959][ T6492] syzkaller0: entered promiscuous mode [ 767.807521][ T6492] syzkaller0: entered allmulticast mode [ 767.825053][ T6492] tipc: Enabled bearer , priority 0 [ 767.858557][ T6491] tipc: Resetting bearer [ 768.475408][ T6491] tipc: Disabling bearer [ 768.486041][ T6494] tipc: Enabling of bearer rejected, already enabled [ 768.654107][ T6519] gretap0: entered promiscuous mode [ 768.698947][ T6524] block nbd1: Unsupported socket: should be TCP or UNIX. [ 768.840673][ T6539] vlan5: entered promiscuous mode [ 768.845846][ T6539] bond0: entered promiscuous mode [ 768.882292][ T6543] bond19: option tlb_dynamic_lb: invalid value (115) [ 768.892926][ T6543] bond19 (unregistering): Released all slaves [ 768.912462][ T6545] __nla_validate_parse: 27 callbacks suppressed [ 768.912479][ T6545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8808'. [ 768.953088][ T6549] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 769.013605][ T6558] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8812'. [ 769.018903][ T6561] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8813'. [ 769.089407][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.120332][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8813'. [ 769.281220][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8816'. [ 769.482071][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8820'. [ 769.603359][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8822'. [ 769.613396][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8822'. [ 769.858100][ T6619] netlink: 'syz.2.8827': attribute type 1 has an invalid length. [ 769.918327][ T6619] bond19: (slave geneve3): making interface the new active one [ 769.935775][ T6619] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 769.952514][T22687] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 769.967825][T22687] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 769.985984][T22687] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.002744][T22687] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.078816][ T6624] pim6reg1: entered allmulticast mode [ 770.551657][ T6640] syzkaller0: entered promiscuous mode [ 770.567751][ T6640] syzkaller0: entered allmulticast mode [ 770.575604][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8836'. [ 770.600493][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8836'. [ 770.693086][ T6652] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 770.847093][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 770.855109][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 770.864407][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 770.873118][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 770.880721][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 770.969704][ T6680] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 770.986135][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 770.995410][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 771.003989][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 771.014225][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 771.025693][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 771.038755][ T8163] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.059315][ T8163] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.144236][ T6692] netlink: 'syz.3.8845': attribute type 1 has an invalid length. [ 771.177662][ T8163] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.192059][ T8163] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.298798][ T6692] 8021q: adding VLAN 0 to HW filter on device bond13 [ 771.307378][ T6692] bond12: (slave bond13): making interface the new active one [ 771.315496][ T6692] bond12: (slave bond13): Enslaving as an active interface with an up link [ 771.446696][ T6723] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 771.500814][ T6727] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 771.538038][ T6666] xfrm0 speed is unknown, defaulting to 1000 [ 771.728234][ T6666] lo speed is unknown, defaulting to 1000 [ 771.912949][ T6765] netlink: 'syz.1.8858': attribute type 10 has an invalid length. [ 771.939127][ T6666] lo speed is unknown, defaulting to 1000 [ 771.945911][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.269911][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.287339][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.294663][ T6666] bridge_slave_0: entered allmulticast mode [ 772.301790][ T6666] bridge_slave_0: entered promiscuous mode [ 772.310114][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.318760][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.325971][ T6666] bridge_slave_1: entered allmulticast mode [ 772.333998][ T6666] bridge_slave_1: entered promiscuous mode [ 772.401103][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.422479][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.466647][ T6666] team0: Port device team_slave_0 added [ 772.480261][ T6666] team0: Port device team_slave_1 added [ 772.511902][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.519188][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.545477][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.559081][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.566167][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.594874][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.655456][ T6816] vti1: entered promiscuous mode [ 772.665106][ T6666] hsr_slave_0: entered promiscuous mode [ 772.673932][ T6666] hsr_slave_1: entered promiscuous mode [ 772.681098][ T6666] debugfs: 'hsr0' already exists in 'hsr' [ 772.686846][ T6666] Cannot create hsr debugfs directory [ 772.773348][ T6826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.817551][ T6666] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.831252][ T6666] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.883624][ T6666] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.895894][ T6666] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.962579][ T6666] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.985243][ T6666] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 773.009026][ T6843] xt_bpf: check failed: parse error [ 773.015140][ T6843] netlink: 'syz.3.8874': attribute type 29 has an invalid length. [ 773.082899][ T6666] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.106712][ T6666] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 773.117613][ T5633] Bluetooth: hci7: command tx timeout [ 773.298426][ T6666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 773.322569][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.340556][ T6666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.357296][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 773.371451][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.381339][ T6666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.396561][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.423012][ T6666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.439626][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.458636][ T6891] macsec2: entered allmulticast mode [ 773.470361][ T6891] gretap0: entered allmulticast mode [ 773.486127][ T6891] gretap0: left allmulticast mode [ 773.507957][ T6887] syzkaller1: entered allmulticast mode [ 773.599932][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.619392][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.659078][T22689] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.666198][T22689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.681105][T22689] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.688231][T22689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.701038][ T6916] netlink: 'syz.3.8897': attribute type 3 has an invalid length. [ 773.710629][ T6919] netlink: 'syz.4.8898': attribute type 21 has an invalid length. [ 773.721646][ T6916] netlink: 'syz.3.8897': attribute type 3 has an invalid length. [ 773.729739][ T6919] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.742247][ T6919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.742695][ T6666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.749498][ T6919] IPv6: NLM_F_CREATE should be set when creating new route [ 773.749533][ T6919] IPv6: NLM_F_CREATE should be set when creating new route [ 773.749551][ T6919] IPv6: NLM_F_CREATE should be set when creating new route [ 773.758600][ T6919] netlink: 'syz.4.8898': attribute type 21 has an invalid length. [ 773.811067][ T6919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.179607][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.282257][ T6666] veth0_vlan: entered promiscuous mode [ 774.294040][ T6666] veth1_vlan: entered promiscuous mode [ 774.324016][ T6666] veth0_macvtap: entered promiscuous mode [ 774.342638][ T6666] veth1_macvtap: entered promiscuous mode [ 774.364335][ T6949] netlink: 'syz.6.8903': attribute type 28 has an invalid length. [ 774.394220][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.410051][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.460920][ T8163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.476817][ T8163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.519918][ T8163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.538883][ T8163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.616163][ T8163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.637758][ T8163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.671026][T22689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.688634][T22689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.707760][ T6970] __nla_validate_parse: 28 callbacks suppressed [ 774.707777][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8909'. [ 774.820746][ T6987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8913'. [ 774.830607][ T6987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8913'. [ 774.906444][ T6997] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 774.980057][ T7001] xt_hashlimit: size too large, truncated to 1048576 [ 775.118865][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8915'. [ 775.174530][ T6993] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 775.197716][ T5633] Bluetooth: hci7: command tx timeout [ 775.216503][ T7016] netlink: 'syz.6.8920': attribute type 1 has an invalid length. [ 775.278670][ T7016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.371005][ T7025] Cannot find add_set index 1 as target [ 775.372015][ T7019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8921'. [ 775.492697][ T7036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8928'. [ 775.559674][ T7038] tipc: Resetting bearer [ 775.570494][ T7032] netlink: 'syz.6.8926': attribute type 16 has an invalid length. [ 775.588151][ T7032] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8926'. [ 775.617857][T10523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 775.712568][ T5851] lo speed is unknown, defaulting to 1000 [ 775.971615][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.973794][ T7053] sctp: [Deprecated]: syz.2.8931 (pid 7053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.973794][ T7053] Use struct sctp_sack_info instead [ 776.002981][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 776.013105][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 776.021201][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 776.040477][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 776.079826][ T7060] sctp: [Deprecated]: syz.2.8931 (pid 7060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.079826][ T7060] Use struct sctp_sack_info instead [ 776.388314][ T7070] ip6t_srh: unknown srh match flags 4000 [ 776.399135][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.406115][ T7074] netlink: zone id is out of range [ 776.412129][ T7074] netlink: zone id is out of range [ 776.423757][ T7074] netlink: zone id is out of range [ 776.442240][ T7074] netlink: zone id is out of range [ 776.457382][ T7074] netlink: zone id is out of range [ 776.470033][ T7074] netlink: zone id is out of range [ 776.486590][ T7074] netlink: zone id is out of range [ 776.644579][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 776.700276][ T7087] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.8939'. [ 776.725413][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8939'. [ 776.782335][ T7052] lo speed is unknown, defaulting to 1000 [ 776.828881][ T7094] netlink: 'syz.1.8941': attribute type 1 has an invalid length. [ 776.866995][ T7094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 776.930352][ T7100] bond10: (slave veth11): Enslaving as an active interface with a down link [ 776.943700][ T7052] lo speed is unknown, defaulting to 1000 [ 777.055538][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8946'. [ 777.055585][ T29] audit: type=1804 audit(1781924694.846:25): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8946" name="/newroot/5/cgroup.controllers" dev="tmpfs" ino=45 res=1 errno=0 [ 777.105063][ T7113] vlan2: entered allmulticast mode [ 777.117519][ T29] audit: type=1800 audit(1781924694.846:26): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8946" name="cgroup.controllers" dev="tmpfs" ino=45 res=0 errno=0 [ 777.128725][ T7113] bond0: entered allmulticast mode [ 777.151982][ T7113] bond_slave_0: entered allmulticast mode [ 777.157932][ T7113] bond_slave_1: entered allmulticast mode [ 777.249181][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.256340][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.264127][ T7052] bridge_slave_0: entered allmulticast mode [ 777.271166][ T7052] bridge_slave_0: entered promiscuous mode [ 777.277336][ T5633] Bluetooth: hci7: command tx timeout [ 777.279794][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.289925][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.297160][ T7052] bridge_slave_1: entered allmulticast mode [ 777.304170][ T7052] bridge_slave_1: entered promiscuous mode [ 777.332021][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.343975][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.372824][ T7052] team0: Port device team_slave_0 added [ 777.382102][ T7052] team0: Port device team_slave_1 added [ 777.403828][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.411124][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.438446][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.450952][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.458027][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.485186][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.532745][ T7052] hsr_slave_0: entered promiscuous mode [ 777.537268][ T7140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 777.539470][ T7052] hsr_slave_1: entered promiscuous mode [ 777.555598][ T7052] debugfs: 'hsr0' already exists in 'hsr' [ 777.561561][ T7052] Cannot create hsr debugfs directory [ 777.583711][ T7138] netlink: 'syz.2.8951': attribute type 1 has an invalid length. [ 777.591512][ T7138] netlink: 'syz.2.8951': attribute type 2 has an invalid length. [ 777.720956][ T7052] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.798432][ T7160] netlink: 'syz.2.8956': attribute type 10 has an invalid length. [ 777.849814][ T7160] geneve2: entered promiscuous mode [ 777.861336][ T7052] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.875422][T22695] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47639 - 0 [ 777.884743][T22695] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47639 - 0 [ 777.894862][T22695] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47639 - 0 [ 777.930902][T22695] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47639 - 0 [ 777.945304][ T7052] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.982734][ T7167] netlink: 'syz.3.8958': attribute type 14 has an invalid length. [ 778.032249][ T7052] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.033392][ T7178] netlink: 'syz.6.8961': attribute type 2 has an invalid length. [ 778.051616][ T7179] mac80211_hwsim hwsim128 »»»»»»: renamed from wlan0 (while UP) [ 778.077751][ T5633] Bluetooth: hci0: command tx timeout [ 778.140678][ T7052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 778.150885][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.159010][ T7052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 778.168564][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.183714][ T7052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 778.195591][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.197049][ T7187] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20002 [ 778.211919][ T7052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 778.234444][ T7052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.331495][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.360408][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.380832][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.387948][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.413985][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.421144][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.436859][ T7210] netlink: 'syz.6.8971': attribute type 1 has an invalid length. [ 778.467429][ T7210] bond4: entered promiscuous mode [ 778.472799][ T7210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 778.508347][ T7210] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 778.521318][ T7210] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 778.531945][ T7210] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 778.567481][ T29] audit: type=1107 audit(1781924696.356:27): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.586574][ T29] audit: type=1107 audit(1781924696.356:28): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.599193][ T29] audit: type=1107 audit(1781924696.356:29): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.611946][ T29] audit: type=1107 audit(1781924696.356:30): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.624386][ T29] audit: type=1107 audit(1781924696.356:31): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.636662][ T29] audit: type=1107 audit(1781924696.356:32): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.655320][ T29] audit: type=1107 audit(1781924696.356:33): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 778.692716][ T29] audit: type=1107 audit(1781924696.356:34): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 779.006220][ T7255] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 779.024093][ T7255] bond14 (unregistering): Released all slaves [ 779.091815][ T7264] syzkaller0: entered promiscuous mode [ 779.097464][ T7264] syzkaller0: entered allmulticast mode [ 779.185605][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.275339][ T7277] netlink: 'syz.6.8986': attribute type 4 has an invalid length. [ 779.293942][ T7277] .`: renamed from bond0 [ 779.357837][ T5633] Bluetooth: hci7: command tx timeout [ 779.382118][ T7282] bond0: entered promiscuous mode [ 779.387428][ T7282] bond0: entered allmulticast mode [ 779.392770][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.433521][ T7052] veth0_vlan: entered promiscuous mode [ 779.444115][ T7052] veth1_vlan: entered promiscuous mode [ 779.464194][ T7290] bond14: entered allmulticast mode [ 779.499282][ T7052] veth0_macvtap: entered promiscuous mode [ 779.509088][ T7052] veth1_macvtap: entered promiscuous mode [ 779.527012][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.542677][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.556871][ T1116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.565862][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.579699][ T1116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.588577][ T1116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.635692][T22687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.654977][T22687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.679718][ T8163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.688247][ T8163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.700983][ T7298] netlink: 'syz.6.8992': attribute type 10 has an invalid length. [ 779.711361][ T7298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.720769][ T7298] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 779.806959][ T7302] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 779.818913][ T7302] bond5 (unregistering): Released all slaves [ 779.885869][ T7306] __nla_validate_parse: 48 callbacks suppressed [ 779.885884][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8994'. [ 780.098182][ T7326] netlink: 'syz.2.8998': attribute type 3 has an invalid length. [ 780.141946][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8999'. [ 780.157616][ T5633] Bluetooth: hci0: command tx timeout [ 780.216925][ T7335] IPVS: set_ctl: invalid protocol: 60 172.20.20.52:20002 [ 780.365598][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.372915][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.380557][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.390295][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.399264][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.482894][ T7347] xt_CT: No such helper "netbios-ns" [ 780.496358][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9008'. [ 780.781861][ T7379] ipvlan1: entered promiscuous mode [ 780.875517][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9016'. [ 780.881988][ T7342] xfrm0 speed is unknown, defaulting to 1000 [ 780.915278][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9016'. [ 780.957926][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9018'. [ 781.011532][ T7398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9019'. [ 781.128201][ T7342] lo speed is unknown, defaulting to 1000 [ 781.140372][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9021'. [ 781.151217][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9021'. [ 781.379971][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9026'. [ 781.428162][ T7342] lo speed is unknown, defaulting to 1000 [ 781.845834][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.853175][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.860912][ T7342] bridge_slave_0: entered allmulticast mode [ 781.868077][ T7342] bridge_slave_0: entered promiscuous mode [ 781.875758][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.883331][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.890817][ T7342] bridge_slave_1: entered allmulticast mode [ 781.899842][ T7342] bridge_slave_1: entered promiscuous mode [ 781.923455][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.935291][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.960106][ T7342] team0: Port device team_slave_0 added [ 781.968925][ T7342] team0: Port device team_slave_1 added [ 781.995697][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.008422][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.075033][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.104291][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.123072][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.150279][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.236910][ T7342] hsr_slave_0: entered promiscuous mode [ 782.239670][ T5633] Bluetooth: hci0: command tx timeout [ 782.252299][ T7342] hsr_slave_1: entered promiscuous mode [ 782.264786][ T7342] debugfs: 'hsr0' already exists in 'hsr' [ 782.274943][ T7342] Cannot create hsr debugfs directory [ 782.310097][ T7486] validate_nla: 2 callbacks suppressed [ 782.310115][ T7486] netlink: 'syz.2.9041': attribute type 1 has an invalid length. [ 782.464217][ T7487] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 782.480873][ T5633] Bluetooth: hci2: command tx timeout [ 782.838316][ T7342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.847021][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.860331][ T7524] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 782.870559][ T7524] net_ratelimit: 25 callbacks suppressed [ 782.870594][ T7524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.911901][ T7342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.922166][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.941082][ T7342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.955348][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.971606][ T7342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.999416][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.102318][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.122815][ T7342] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.133824][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.140963][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.181943][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.189099][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.274776][ T7558] tipc: Enabling of bearer rejected, failed to enable media [ 783.342334][ T7558] veth13: entered promiscuous mode [ 783.436813][ T7567] netlink: 'syz.6.9060': attribute type 12 has an invalid length. [ 783.454590][ T7567] netlink: 'syz.6.9060': attribute type 11 has an invalid length. [ 783.497046][ T7576] netlink: 'syz.2.9062': attribute type 1 has an invalid length. [ 783.656713][ T7587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.739633][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.743695][ T7600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 783.810092][ T7342] veth0_vlan: entered promiscuous mode [ 783.823426][ T7342] veth1_vlan: entered promiscuous mode [ 783.862391][ T7342] veth0_macvtap: entered promiscuous mode [ 783.873986][ T7342] veth1_macvtap: entered promiscuous mode [ 783.893837][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.908995][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.923945][T22695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.934057][T22695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.956356][T22695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.965530][T22695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.018587][T22695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.037560][T22695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.062740][T22689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.065002][ T7618] syzkaller0: entered promiscuous mode [ 784.070732][T22689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.085552][ T7618] syzkaller0: entered allmulticast mode [ 784.246184][ T7630] xfrm0 speed is unknown, defaulting to 1000 [ 784.317567][ T5633] Bluetooth: hci0: command tx timeout [ 784.436248][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 784.445801][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 784.453370][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 784.461515][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 784.469023][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 784.558640][ T50] Bluetooth: hci2: command tx timeout [ 784.632216][ T7654] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.712185][ T7662] block nbd4: NBD_DISCONNECT [ 784.793332][ T7665] syzkaller0: entered promiscuous mode [ 784.826964][ T7665] syzkaller0: entered allmulticast mode [ 784.851593][ T7630] lo speed is unknown, defaulting to 1000 [ 785.014068][ T7630] lo speed is unknown, defaulting to 1000 [ 785.014224][ T7644] xfrm0 speed is unknown, defaulting to 1000 [ 785.033724][ T7676] __nla_validate_parse: 13 callbacks suppressed [ 785.033741][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9087'. [ 785.222829][ T7644] lo speed is unknown, defaulting to 1000 [ 785.231699][ T7686] netlink: 'syz.6.9091': attribute type 10 has an invalid length. [ 785.377333][ T7644] lo speed is unknown, defaulting to 1000 [ 785.686397][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9097'. [ 785.809386][ T7706] xfrm0 speed is unknown, defaulting to 1000 [ 786.121515][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.148548][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.185002][ T7644] bridge_slave_0: entered allmulticast mode [ 786.199087][ T7644] bridge_slave_0: entered promiscuous mode [ 786.214818][ T7706] lo speed is unknown, defaulting to 1000 [ 786.223080][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.241487][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.255417][ T7644] bridge_slave_1: entered allmulticast mode [ 786.262820][ T7644] bridge_slave_1: entered promiscuous mode [ 786.342428][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.368426][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.398939][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9101'. [ 786.449284][ T7644] team0: Port device team_slave_0 added [ 786.458747][T22695] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.474034][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9101'. [ 786.495240][T22695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.535062][ T7644] team0: Port device team_slave_1 added [ 786.553555][ T7706] lo speed is unknown, defaulting to 1000 [ 786.567465][ T50] Bluetooth: hci1: command tx timeout [ 786.578625][T22695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.592399][T22695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.650041][ T50] Bluetooth: hci2: command tx timeout [ 786.736859][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.750649][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.763840][ T7759] netlink: 10 bytes leftover after parsing attributes in process `syz.6.9105'. [ 786.789805][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.814446][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.831504][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.888064][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.904931][ T7769] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9108'. [ 787.009924][ T7765] syzkaller0: entered promiscuous mode [ 787.015582][ T7765] syzkaller0: entered allmulticast mode [ 787.061885][ T7644] hsr_slave_0: entered promiscuous mode [ 787.089736][ T7644] hsr_slave_1: entered promiscuous mode [ 787.106389][ T7644] debugfs: 'hsr0' already exists in 'hsr' [ 787.115620][ T7644] Cannot create hsr debugfs directory [ 787.266797][ T7787] netlink: 'syz.4.9109': attribute type 1 has an invalid length. [ 787.463183][ T7794] rdma_rxe: rxe_newlink: failed to add lo [ 787.682857][ T7813] netlink: 'syz.4.9112': attribute type 1 has an invalid length. [ 787.701198][ T7813] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9112'. [ 787.716959][ T7813] netlink: 'syz.4.9112': attribute type 1 has an invalid length. [ 787.730747][ T7813] netlink: 638 bytes leftover after parsing attributes in process `syz.4.9112'. [ 787.747352][ T7813] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9112'. [ 787.783256][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9114'. [ 787.785343][ T7801] veth1_to_batadv: entered promiscuous mode [ 787.832846][ T7821] ip6gre1: entered promiscuous mode [ 787.842416][ T7821] ip6gre1: entered allmulticast mode [ 787.896612][ T7644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 787.918996][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.141660][ T7644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.158530][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.170069][ T7644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.184593][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.239356][ T7840] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 788.253727][ T7844] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 788.263948][ T7844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 788.292180][ T7644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.306286][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.482205][ T7872] xfrm0 speed is unknown, defaulting to 1000 [ 788.560619][ T7888] veth2: entered allmulticast mode [ 788.638342][ T50] Bluetooth: hci1: command tx timeout [ 788.653771][ T7894] netlink: 'syz.3.9128': attribute type 13 has an invalid length. [ 788.714844][ T7894] netlink: 'syz.3.9128': attribute type 17 has an invalid length. [ 788.729432][ T50] Bluetooth: hci2: command tx timeout [ 788.743606][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.751062][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.874790][ T7892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.887736][ T7892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.991150][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.999184][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.009874][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.029208][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.036294][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.046776][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.053882][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.072315][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.082195][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.106835][ T7894] veth1_vlan: left promiscuous mode [ 789.113245][ T7894] veth0_vlan: left promiscuous mode [ 789.119901][ T7894] veth0_vlan: entered promiscuous mode [ 789.128710][ T7894] veth1_vlan: entered promiscuous mode [ 789.139480][ T7894] veth1_macvtap: left promiscuous mode [ 789.145912][ T7894] veth0_macvtap: left promiscuous mode [ 789.153845][ T7894] veth0_macvtap: entered promiscuous mode [ 789.169553][ T7894] veth1_macvtap: entered promiscuous mode [ 789.180467][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.192624][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.205556][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.218649][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.254951][ T7872] lo speed is unknown, defaulting to 1000 [ 789.272122][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.306857][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.339416][T22687] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.346550][T22687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.386511][T22687] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.393672][T22687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.470636][ T7918] xfrm0 speed is unknown, defaulting to 1000 [ 789.499057][ T7872] lo speed is unknown, defaulting to 1000 [ 789.764068][ T7919] xfrm0 speed is unknown, defaulting to 1000 [ 789.978819][ T7919] lo speed is unknown, defaulting to 1000 [ 790.105817][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.136999][ T7918] lo speed is unknown, defaulting to 1000 [ 790.173198][ T7919] lo speed is unknown, defaulting to 1000 [ 790.185628][ T7644] veth0_vlan: entered promiscuous mode [ 790.289392][ T7644] veth1_vlan: entered promiscuous mode [ 790.368741][ T7644] veth0_macvtap: entered promiscuous mode [ 790.389132][ T7644] veth1_macvtap: entered promiscuous mode [ 790.405410][ T7918] lo speed is unknown, defaulting to 1000 [ 790.418980][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.494601][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.553276][ T7979] netlink: 'syz.2.9145': attribute type 12 has an invalid length. [ 790.563362][ T7979] __nla_validate_parse: 2 callbacks suppressed [ 790.563379][ T7979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9145'. [ 790.707685][T22672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.717367][ T50] Bluetooth: hci1: command tx timeout [ 790.723661][T22672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.749612][T22672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.775365][T22672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.796342][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9146'. [ 790.987333][ T8163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.002729][ T8163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.134698][T12315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.146208][ T8008] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9152'. [ 791.157082][T12315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.270847][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9078'. [ 791.280706][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.359458][ T8030] openvswitch: netlink: Unknown nsh attribute 0 [ 791.365922][ T8030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.456439][ T8038] netlink: 'syz.4.9157': attribute type 1 has an invalid length. [ 791.533807][ T8039] netlink: 'syz.6.9155': attribute type 2 has an invalid length. [ 791.534780][ T8038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.541852][ T8039] netlink: 'syz.6.9155': attribute type 1 has an invalid length. [ 791.556815][ T8039] netlink: 'syz.6.9155': attribute type 1 has an invalid length. [ 791.648314][ T8038] bond1: (slave veth3): Enslaving as an active interface with a down link [ 791.667598][ T8038] netlink: 'syz.4.9157': attribute type 10 has an invalid length. [ 791.675514][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9157'. [ 791.686606][ T8038] dummy0: entered promiscuous mode [ 791.743111][ T8056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9163'. [ 791.764371][ T8054] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 792.797650][ T50] Bluetooth: hci1: command tx timeout [ 794.315371][ T8024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.440730][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9175'. [ 794.473112][ T8099] netlink: 'syz.3.9172': attribute type 4 has an invalid length. [ 794.499639][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9172'. [ 794.685374][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9172'. [ 794.751067][ T8110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9178'. [ 794.814392][ T8119] team0: Failed to send options change via netlink (err -105) [ 794.831239][ T8119] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 794.851630][ T8119] team0: Port device team_slave_0 removed [ 794.902079][ T8110] syzkaller0: entered promiscuous mode [ 794.908387][ T8110] syzkaller0: entered allmulticast mode [ 795.001618][ T8131] sctp: [Deprecated]: syz.2.9181 (pid 8131) Use of int in max_burst socket option. [ 795.001618][ T8131] Use struct sctp_assoc_value instead [ 795.154079][ T8137] netlink: 'syz.2.9183': attribute type 8 has an invalid length. [ 795.350321][ T8146] x_tables: duplicate entry at hook 2 [ 795.522840][ T8159] IPVS: set_ctl: invalid protocol: 136 172.20.20.30:20002 [ 795.620921][ T8171] tipc: Invalid UDP bearer configuration [ 795.620958][ T8171] tipc: Enabling of bearer rejected, failed to enable media [ 795.659949][ T8171] __nla_validate_parse: 7 callbacks suppressed [ 795.659968][ T8171] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9191'. [ 795.727021][ T8179] x_tables: duplicate underflow at hook 1 [ 795.764433][ T8179] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 795.856329][ T8186] veth1_to_bond: entered allmulticast mode [ 795.891948][ T8185] veth1_to_bond: left allmulticast mode [ 795.943578][ T8197] netlink: 388 bytes leftover after parsing attributes in process `syz.6.9200'. [ 796.062938][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.071956][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.148828][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9205'. [ 796.176054][ T8216] bridge2: entered promiscuous mode [ 796.185656][ T8216] bridge2: entered allmulticast mode [ 796.191970][ T8219] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 796.220433][ T8219] bond2: option lp_interval: invalid value (0) [ 796.227007][ T8219] bond2: option lp_interval: allowed values 1 - 2147483647 [ 796.236547][ T8219] bond2 (unregistering): Released all slaves [ 796.239770][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9210'. [ 796.259692][ T8225] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 796.275827][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9210'. [ 796.331077][ T8233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9212'. [ 796.343854][ T8233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9212'. [ 796.528725][ T8246] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 796.582882][ T8256] syzkaller0: entered promiscuous mode [ 796.584236][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9221'. [ 796.589783][ T8256] syzkaller0: entered allmulticast mode [ 796.616941][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9220'. [ 796.642438][ T8258] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 796.648983][ T8265] netlink: 49 bytes leftover after parsing attributes in process `syz.1.9223'. [ 796.814799][ T8269] team0 (unregistering): Port device team_slave_0 removed [ 796.828801][ T8269] team0 (unregistering): Port device team_slave_1 removed [ 796.939181][ T8279] gretap1: entered allmulticast mode [ 797.105208][ T8299] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 797.115329][ T8299] bridge1: entered promiscuous mode [ 797.495424][ T8329] bond0: left promiscuous mode [ 797.506087][ T8329] bond0: left allmulticast mode [ 797.524484][ T8340] netlink: 'syz.4.9245': attribute type 1 has an invalid length. [ 797.594224][ T8340] bond2: entered promiscuous mode [ 797.618719][ T8340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.440436][ T8347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.463853][ T8347] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 799.474672][ T8347] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 799.488116][ T8347] bond2: (slave vti0): making interface the new active one [ 799.496197][ T8347] vti0: entered promiscuous mode [ 799.509851][ T8347] bond2: (slave vti0): Enslaving as an active interface with an up link [ 799.519833][ T8349] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 799.524390][ T8354] veth1_to_hsr: entered promiscuous mode [ 799.560325][ T8354] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 799.640016][ T8362] xt_CT: No such helper "syz1" [ 799.659862][ T8362] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 799.761023][ T8378] netlink: 'syz.4.9253': attribute type 2 has an invalid length. [ 799.836788][ T8385] netlink: 'syz.2.9257': attribute type 1 has an invalid length. [ 799.845213][ T8385] netlink: 'syz.2.9257': attribute type 2 has an invalid length. [ 799.853580][ T8385] netlink: 'syz.2.9257': attribute type 1 has an invalid length. [ 799.963102][ T8396] tipc: Started in network mode [ 799.968688][ T8396] tipc: Node identity be3b4ddb9c0d, cluster identity 4711 [ 799.975950][ T8396] tipc: Enabled bearer , priority 0 [ 799.984499][ T8397] syzkaller0: entered promiscuous mode [ 799.998216][ T8397] syzkaller0: entered allmulticast mode [ 800.043717][ T8400] veth5: entered allmulticast mode [ 800.056308][ T8397] tipc: Resetting bearer [ 800.064180][ T8394] tipc: Resetting bearer [ 800.076204][ T8394] tipc: Disabling bearer [ 800.087946][ T8400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.099856][ T8400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.113693][ T8400] bond0 (unregistering): Released all slaves [ 800.186694][ T8404] mac80211_hwsim hwsim130 syzkaller0: entered promiscuous mode [ 800.194653][ T8404] mac80211_hwsim hwsim130 syzkaller0: entered allmulticast mode [ 800.363168][ T8412] xfrm0 speed is unknown, defaulting to 1000 [ 800.418114][ T8412] lo speed is unknown, defaulting to 1000 [ 800.474026][ T8412] lo speed is unknown, defaulting to 1000 [ 801.031821][ T8453] __nla_validate_parse: 44 callbacks suppressed [ 801.031850][ T8453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9275'. [ 801.065122][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9275'. [ 801.074365][ T8453] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9275'. [ 801.140732][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9277'. [ 801.150541][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9277'. [ 801.159832][ T8459] netlink: 'syz.1.9277': attribute type 11 has an invalid length. [ 801.191379][ T8459] GUP no longer grows the stack in syz.1.9277 (8459): 200000003000-20000000a000 (200000001000) [ 801.213854][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.1.9277 Not tainted syzkaller #0 PREEMPT(full) [ 801.213880][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.213891][ T8459] Call Trace: [ 801.213899][ T8459] [ 801.213907][ T8459] dump_stack_lvl+0xe8/0x150 [ 801.213932][ T8459] __get_user_pages+0x238c/0x2720 [ 801.213952][ T8459] ? __gup_longterm_locked+0xc3b/0x15c0 [ 801.213971][ T8459] ? rcu_is_watching+0x15/0xb0 [ 801.213992][ T8459] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 801.214052][ T8459] __gup_longterm_locked+0xd52/0x15c0 [ 801.214073][ T8459] ? gup_fast_fallback+0xbc4/0x20d0 [ 801.214090][ T8459] ? rcu_is_watching+0x15/0xb0 [ 801.214107][ T8459] ? rcu_is_watching+0x15/0xb0 [ 801.214124][ T8459] gup_fast_fallback+0x1d82/0x20d0 [ 801.214155][ T8459] ? __pfx_gup_fast_fallback+0x10/0x10 [ 801.214174][ T8459] ? __fget_files+0x2a/0x420 [ 801.214192][ T8459] ? is_valid_gup_args+0x11f/0x200 [ 801.214209][ T8459] ? get_user_pages_fast+0x4d/0xb0 [ 801.214227][ T8459] __iov_iter_get_pages_alloc+0x378/0xa40 [ 801.214250][ T8459] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 801.214272][ T8459] iov_iter_get_pages2+0x5e/0xa0 [ 801.214293][ T8459] __se_sys_vmsplice+0x7b5/0x1660 [ 801.214322][ T8459] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 801.214340][ T8459] ? __pfx_futex_wake+0x10/0x10 [ 801.214394][ T8459] ? rcu_is_watching+0x15/0xb0 [ 801.214409][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.214426][ T8459] do_syscall_64+0x174/0x580 [ 801.214447][ T8459] ? trace_irq_disable+0x3b/0x140 [ 801.214469][ T8459] ? clear_bhb_loop+0x40/0x90 [ 801.214486][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.214502][ T8459] RIP: 0033:0x7f275eb9ce59 [ 801.214518][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.214533][ T8459] RSP: 002b:00007f275cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 801.214551][ T8459] RAX: ffffffffffffffda RBX: 00007f275ee15fa0 RCX: 00007f275eb9ce59 [ 801.214563][ T8459] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 801.214573][ T8459] RBP: 00007f275ec32e6f R08: 0000000000000000 R09: 0000000000000000 [ 801.214584][ T8459] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 801.214594][ T8459] R13: 00007f275ee16038 R14: 00007f275ee15fa0 R15: 00007ffcfdd7cf98 [ 801.214613][ T8459] [ 801.546702][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9278'. [ 801.565836][ T8469] openvswitch: netlink: Key type 70 is out of range max 32 [ 801.580681][ T8463] netlink: 'syz.4.9278': attribute type 1 has an invalid length. [ 801.604541][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.614800][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9278'. [ 801.663490][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9281'. [ 801.678465][ T8475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9281'. [ 801.690186][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9281'. [ 801.855556][ T8480] xfrm0 speed is unknown, defaulting to 1000 [ 801.970420][ T8491] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 802.061877][ T8480] lo speed is unknown, defaulting to 1000 [ 802.095206][T22654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.107100][T22654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.199714][ T8480] lo speed is unknown, defaulting to 1000 [ 802.202470][ T8505] netlink: 'syz.2.9290': attribute type 1 has an invalid length. [ 802.241556][ T8505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.301495][ T8505] bond2: (slave veth0_to_bond): making interface the new active one [ 802.327090][ T8505] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 802.364092][ T8508] bond2: entered promiscuous mode [ 802.369458][ T8508] veth0_to_bond: entered promiscuous mode [ 802.375320][ T8508] bond2: entered allmulticast mode [ 802.381095][ T8508] veth0_to_bond: entered allmulticast mode [ 802.477690][ T5713] page_pool_release_retry() stalled pool shutdown: id 326, 1 inflight 60 sec [ 802.707030][ T8549] Cannot find set identified by id 65534 to match [ 802.793531][ T8555] block nbd0: Unsupported socket: should be TCP or UNIX. [ 802.819653][ T8555] sock: sock_timestamping_bind_phc: sock not bind to device [ 802.842378][ T8555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 802.844005][ T8558] gretap0: entered promiscuous mode [ 802.923996][ T8558] bridge0: entered promiscuous mode [ 802.931799][ T8558] 8021q: adding VLAN 0 to HW filter on device .` [ 802.940287][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.951547][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.969690][ T8562] netlink: 'syz.4.9304': attribute type 10 has an invalid length. [ 802.990066][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.000653][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.012172][ T8558] veth1_vlan: left promiscuous mode [ 803.018520][ T8558] veth0_vlan: left promiscuous mode [ 803.024224][ T8558] veth0_vlan: entered promiscuous mode [ 803.031767][ T8558] veth1_vlan: entered promiscuous mode [ 803.041437][ T8558] veth1_macvtap: left promiscuous mode [ 803.047854][ T8558] veth0_macvtap: left promiscuous mode [ 803.054065][ T8558] veth0_macvtap: entered promiscuous mode [ 803.060732][ T8558] veth1_macvtap: entered promiscuous mode [ 803.069823][ T8558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.078868][ T8558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.086605][ T8558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.095080][ T8558] ip6gretap0: entered promiscuous mode [ 803.102292][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.126878][ T8558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.136043][ T8558] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 803.169271][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.176405][ T8163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.195738][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.202873][ T8163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.250848][T12315] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 803.264690][T12315] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 803.280051][T12315] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 803.290083][T12315] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 803.396620][ T8572] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 803.595814][ T8593] bond3: entered promiscuous mode [ 803.602380][ T8593] bond3: entered allmulticast mode [ 803.608271][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.674538][ T8591] xfrm0 speed is unknown, defaulting to 1000 [ 803.761632][ T8591] lo speed is unknown, defaulting to 1000 [ 803.817524][ T8591] lo speed is unknown, defaulting to 1000 [ 806.585592][ T8593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.642021][ T30] INFO: task syz.5.7507:1642 blocked for more than 143 seconds. [ 806.667734][ T30] Not tainted syzkaller #0 [ 806.675294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 806.696249][ T30] task:syz.5.7507 state:D stack:26880 pid:1642 tgid:1641 ppid:1330 task_flags:0x400040 flags:0x00080002 [ 806.716740][ T30] Call Trace: [ 806.721197][ T30] [ 806.724209][ T30] __schedule+0x17d9/0x56c0 [ 806.736018][ T30] ? trace_irq_enable+0x3b/0x140 [ 806.741985][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 806.749621][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 806.762452][ T30] ? genl_rcv+0x28/0x40 [ 806.770058][ T30] ? __pfx___schedule+0x10/0x10 [ 806.774971][ T30] ? rcu_is_watching+0x15/0xb0 [ 806.780348][ T30] ? rcu_is_watching+0x15/0xb0 [ 806.785230][ T30] ? lock_release+0x4b/0x3c0 [ 806.790380][ T30] ? rcu_is_watching+0x15/0xb0 [ 806.795227][ T30] schedule+0x164/0x360 [ 806.799942][ T30] schedule_preempt_disabled+0x13/0x30 [ 806.805481][ T30] __mutex_lock+0x7bf/0x1550 [ 806.810670][ T30] ? __mutex_lock+0x5d4/0x1550 [ 806.815739][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 806.822309][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 806.828419][ T30] ? __nlmsg_put+0xef/0x1b0 [ 806.833017][ T30] ? genlmsg_put+0x137/0x2e0 [ 806.837944][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 806.843568][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 806.850219][ T30] ? __nla_parse+0x40/0x60 [ 806.854718][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 806.861476][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 806.868563][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 806.874145][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 806.880697][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 806.885893][ T30] genl_rcv_msg+0x614/0x7a0 [ 806.890473][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.895501][ T30] ? ref_tracker_free+0x689/0x830 [ 806.900819][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 806.906915][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 806.912661][ T30] netlink_rcv_skb+0x226/0x4a0 [ 806.917514][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.922570][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.927915][ T30] ? down_read+0x2be/0x330 [ 806.932336][ T30] genl_rcv+0x28/0x40 [ 806.936300][ T30] netlink_unicast+0x7bb/0x940 [ 806.941563][ T30] netlink_sendmsg+0x813/0xb40 [ 806.946359][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.951706][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.956642][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.962086][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.967697][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 806.972840][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.978225][ T30] ? lock_release+0x4b/0x3c0 [ 806.982844][ T30] ? import_iovec+0x73/0xa0 [ 806.987534][ T30] ___sys_sendmsg+0x2a5/0x360 [ 806.992251][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.997705][ T30] ? futex_wake+0x51b/0x5f0 [ 807.002212][ T30] ? __fget_files+0x2a/0x420 [ 807.006785][ T30] ? __fget_files+0x3a2/0x420 [ 807.011532][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 807.016481][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.022040][ T30] ? rcu_is_watching+0x15/0xb0 [ 807.026823][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.033126][ T30] do_syscall_64+0x174/0x580 [ 807.038196][ T30] ? trace_irq_disable+0x3b/0x140 [ 807.043248][ T30] ? clear_bhb_loop+0x40/0x90 [ 807.047980][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.053874][ T30] RIP: 0033:0x7fe8fdf9ce59 [ 807.058617][ T30] RSP: 002b:00007fe8fef2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.067045][ T30] RAX: ffffffffffffffda RBX: 00007fe8fe215fa0 RCX: 00007fe8fdf9ce59 [ 807.075390][ T30] RDX: 0000000004008010 RSI: 0000200000000140 RDI: 0000000000000003 [ 807.083406][ T30] RBP: 00007fe8fe032e6f R08: 0000000000000000 R09: 0000000000000000 [ 807.091809][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.100016][ T30] R13: 00007fe8fe216038 R14: 00007fe8fe215fa0 R15: 00007ffee943e1a8 [ 807.108583][ T30] [ 807.111761][ T30] INFO: lockdep is turned off. [ 807.116653][ T30] NMI backtrace for cpu 1 [ 807.116668][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 807.116686][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.116695][ T30] Call Trace: [ 807.116702][ T30] [ 807.116710][ T30] dump_stack_lvl+0xe8/0x150 [ 807.116733][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 807.116804][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 807.116843][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 807.116862][ T30] sys_info+0x135/0x170 [ 807.116877][ T30] watchdog+0xfd7/0x1030 [ 807.116904][ T30] ? watchdog+0x1c7/0x1030 [ 807.116932][ T30] kthread+0x388/0x470 [ 807.116948][ T30] ? __pfx_watchdog+0x10/0x10 [ 807.116966][ T30] ? __pfx_kthread+0x10/0x10 [ 807.116981][ T30] ret_from_fork+0x514/0xb70 [ 807.117008][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 807.117024][ T30] ? __switch_to+0xc89/0x1420 [ 807.117045][ T30] ? __pfx_kthread+0x10/0x10 [ 807.117060][ T30] ret_from_fork_asm+0x1a/0x30 [ 807.117084][ T30] [ 807.117091][ T30] Sending NMI from CPU 1 to CPUs 0: [ 807.233626][ C0] NMI backtrace for cpu 0 [ 807.233643][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 807.233661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.233671][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 807.233698][ C0] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 807.233712][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 807.233730][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 807.233742][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 807.233754][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 807.233766][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 807.233778][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 807.233790][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 807.233803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.233815][ C0] CR2: 00007fe9373ea2f8 CR3: 0000000028fbc000 CR4: 00000000003526f0 [ 807.233829][ C0] Call Trace: [ 807.233836][ C0] [ 807.233842][ C0] default_idle+0x9/0x20 [ 807.233864][ C0] default_idle_call+0x72/0xb0 [ 807.233887][ C0] do_idle+0x2e0/0x540 [ 807.233911][ C0] ? __pfx_do_idle+0x10/0x10 [ 807.233934][ C0] ? do_idle+0x4cb/0x540 [ 807.233957][ C0] cpu_startup_entry+0x43/0x60 [ 807.233979][ C0] rest_init+0x2de/0x300 [ 807.233993][ C0] start_kernel+0x38a/0x3e0 [ 807.234112][ C0] x86_64_start_reservations+0x24/0x30 [ 807.234164][ C0] x86_64_start_kernel+0x137/0x1b0 [ 807.234181][ C0] common_startup_64+0x13e/0x157 [ 807.234208][ C0] [ 807.420265][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 807.427144][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 807.436248][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.446311][ T30] Call Trace: [ 807.449573][ T30] [ 807.452488][ T30] vpanic+0x56c/0xa60 [ 807.456475][ T30] ? __pfx___schedule+0x10/0x10 [ 807.461309][ T30] ? __pfx_vpanic+0x10/0x10 [ 807.465790][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 807.471926][ T30] panic+0xc5/0xd0 [ 807.475635][ T30] ? __pfx_panic+0x10/0x10 [ 807.480028][ T30] ? preempt_schedule_common+0x82/0xd0 [ 807.485471][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 807.490830][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 807.496960][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 807.503088][ T30] watchdog+0x1030/0x1030 [ 807.507400][ T30] ? watchdog+0x1c7/0x1030 [ 807.511798][ T30] kthread+0x388/0x470 [ 807.515842][ T30] ? __pfx_watchdog+0x10/0x10 [ 807.520496][ T30] ? __pfx_kthread+0x10/0x10 [ 807.525065][ T30] ret_from_fork+0x514/0xb70 [ 807.529631][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 807.534715][ T30] ? __switch_to+0xc89/0x1420 [ 807.539374][ T30] ? __pfx_kthread+0x10/0x10 [ 807.543940][ T30] ret_from_fork_asm+0x1a/0x30 [ 807.548686][ T30] [ 807.551974][ T30] Kernel Offset: disabled [ 807.556281][ T30] Rebooting in 86400 seconds..