last executing test programs: 20m28.027833921s ago: executing program 3 (id=1858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000500)={0x2, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e23, 0xec, @loopback, 0x1}}, 0x3, 0x4, 0x5, 0x8, 0x80000001}, &(0x7f0000000640)=0x98) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001400010025bd7000f9dbdf2500000006", @ANYRESDEC, @ANYBLOB="1588000301040008001b00000000000c0016800800018004000c80"], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000680)=0x10, 0x80800) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000006c0)=""/5, &(0x7f0000000780)=0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) shutdown(r0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) unshare(0x22020600) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) pread64(r5, 0x0, 0x0, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x800, @multicast2}]}, &(0x7f00000000c0)=0x10) r7 = socket$inet(0x2, 0x2, 0x3d14a723) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, 0x0) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r6, 0x3d4}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r6, 0x2013, 0x30, 0xffff, 0x6b6db423}, &(0x7f0000000040)=0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r8, &(0x7f0000000340)="507b7d0260cb3495751830657b831b23e4ee31550ba8963b104e0ab2f92178f3201d4b82ba779d0b8854a7df41c3f47c", &(0x7f0000000380)=""/221}, 0x20) 20m27.865464449s ago: executing program 3 (id=1860): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000880)={0x1148, 0x36, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@nested={0x1096, 0x129, 0x0, 0x1, [@generic="104da606caa736fe96e710ec13fd0d3820d3a80aadc9c01bfe98d528eb6f41aba2651caf570f784bcdedca27be90ef4effc694e07841e9ade911de6d599d69e06be4046bd491769896f170395382ccb41f7e73ddd14d5270cc8e3ba017e9fd69e81b5bc06867e8b2285d1d4905b9bd8f106fbee7e0c176756178", @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@local}, @generic="ac178509755256cbf290f3bcf8e78de315209abda372640ff2ddd039122b93a524839063cc6f5a2710b5131e4f0e0060d25da25e9c64d1e237a831a334b0135a3166df51eaa3b35107a46bf34b291c4e3ff67ed67ac234e599f11233fe28e6cda157c2b28450cc7ea334c68725805d71941878203a9afad401ee58d3d345f7d70110a6b3531b3cbe3cfa1ee56f8fad5bcbee66c5e7b2c496885442b562503b0c9b56b2dfd4d09babcaff2d5dfe40b8864dd2478359494d8c3cee9d9578c784f22a3acb450160b2161a074346d475efe602da447cd22b47f11449f10ecd860aec544d6eacfac639dee4a10295c9d2fd721e26ce2f7a23641f4721efe1a64b5d805fa5622681f9f8d6583bdf67310fac7805524bde962095d3d1a0604ea3dde56afd4fecff6ba986135c8f61eb8b1687caf78310deeee413f9e96194988ee675f4e085b0280f9ee44e27409a68f75c0060f0b1b698890dc4f0ad8594e5b033021a6a2e3c563a76f256e6c58059acb9ab393371f9ad102738b4aa67a89bce7dd45cdfb5bd19c287763ddd01c993e399d58d74962dc21c7bb2893bb6f4fb16050fe241f9b5c3288d74af169b64b5be2e31f51fa7f326967d1a168bcf654f41f371f291bca0d5c2fb14d0d43dd217bf5c9cd212e780b3c011ae591de4ae79456b5c00d216d752b5f2fff0fbc112b129cc1fe01540bdb0589c2c568e3cb07ae096c0c79adcb6bd7d7ae9f9ffc063d98f905d3bedb843cc07ecdefd412dcc5500c8011db258d51792b59f09b1a2eeb2be6f6b210a1439e96854c5e1d4c5f74a9eb473a414fc3ccd6eff53d1e0ca230b0eef5f7d66d4339625cfdaa31ed31ec7ad0183ac7875ba2beadfd9b681a0418dcc3e16173b04ebdfc89e85e434b7fe9384405fcfbdc4d5c51d6b4e496abe86f8a9cfdda6b981135a7d936aade50fa4fe44f7f407f453e71865d0ccb92ea6a9402432544ed9c0d02f855d730ea129ce62dea4fbd34de15a777663fbbd4a51568bd09f64060a09dcda6fbdd016be2c10a65cb7339ee3b99ad3cffdd0eb533bca1e09f2c627ef39dbbe04798988443e77750165d8ba36c7209281f447f655bb99aebb981d0e9ae1601006ca0625e79d55dba113838776b8fe452db902f9048573a0caf0ae04f7f6d4a743daa7b452a3b0bc39c95bc06f79c133b0a133a982d65ac11c9b2691cbe22cb7f0d21e9af2d0abca566b70be23c9fbb48f1ea533defd3b4fd75a7a88ffc454504c80b3aa57e1efe46ab1a81367270357894fb1e27495a289aa0b0b5653cea2c4a9306437abff5714de1ec3be2c6aa923f862e191ee7f779c5b4457e4b9abec712629c07a3ec38b5a73274dbe7c15160aa577b35ad322827b1c89de2f44468f6a9eaf17a625f2ed2408a5fb43bbc7239e62e6faad1788c0f4403244a834107bb74f82870ba14836e02318d50821a4fc044c79289f23a8f335a3335bf7612aeeb60f9b0ad3c5ba0bdba22d8aafca3bb6220b1b9ada63bab515373ee6966ef76cbf56db131fddb3ffb80c26f1811acf498a9a43caa2766454da8858aa70002c291acfdcf8c1e533513a58dd63c06e819fa931dacb1e5a56aa3a5ab4a75d77669502a16e1ce760ab523c18d8772ce0d4dbe706ec89654d4694ae54d6d3b228a0106cab4f3185a76be0403e1db01f528f9b10c3fc014402ce0a65043d9c2a926000cff3d306ff650c47259ddef1cf5a73d7d750ffe0421b805158988a3f88c267f5dea92b5be711d1b607bc7b599cf31a0bacd6edf98264abeb96f3e54cb5c5cf21a132cc94dfbdbc8704eb343a39fb1c29e1871c3cb6b24b885b137867aec8f2d48161c087cac8f20bd1da9e06a8d8bba1651a0b5855241b45dc7a063395b8a71626dfdb315907746012cc6bdcc94f09ca3cbc27c6675ba8d109abd24ee0baf68e4e0323cb0ee1edda56406012e13821beab0e17d24d7c7fe10cd375ebfda2ce91a67437ffb3bcb0314b4edd3b1e1676acc3bca367206dd34c1d2cc6dd6f23b57b1fc1ada0db08fd02cd78af96422cead3c00edef9b45c012dfddc65ae7b017f478ce3e296f415ad9861d074fbbff38e1590ee9806e4fda05c1f7f1766f093aec4235803aa38240a64bc0a409ea6b0c6bf7e2e5a0dcf7db45b6013c7d1ac6a96deb4dc3a25a481bbbfc9b5b7a3781f6ef31a03135e825f3458e2484319f3e4e88d4f0b48967b793ea6fb836036e3c3defd79f9151a5aec4b6d285bb9ce4bef6826401532b17d4812404d81754aef5ddc46780cd98949e2c768a045111310dacac01abe443368af9288f52281db6f85b7fadac72cc2eeb7d4237d8a9b57740b27d8ce4618ea9708885a843a5e24b63958f09dc10f12636d71c568893474aa158335029ecfc345d46c8c58431d47f73e6c3f15628c5016405dd88a262220976e5604a39d069fdfe7ad3c85da40251dfda1287866ae00f04abfe7f31577d173268991b6fe0a80668f50dc74f8f74447c46f95ca0fe169f77eb9b9b892ddf3c647c0326acd5fe0b53b5df49a7dc3e6243c06a7a1b0de7f27738c20c40651e136d8203ee6ed0913c38fa65af6c03a127367bbbfdd4eeb8bb1fbca963e86c2e9f94bb8bda6a455fd2c2ca2522aa3b555c165fa15fc2d0eb4162833a83433ce2a0fbf7f7d7845a0b8460569cc54d5804a0f2c03ac4836fafae5b337ed9c6d892fa36159395c9b4ff68be0c2a6fd1c90433030ac8cf2d99f6e0fb34e64d58a6ef3dd5e4f7ed078f2681ad7ce8491d465fdc3b4dfbff22a65361eeda575382b92fe02eeccbb43382d9b32041ab318ea380359b82d0112bb6f531c5ec9ba10fac63ec8eb8f479db06662bca07b0a36d15195e8e9d24c4d5a662bed3adb6d093bd56667fd408e5778b0bd71f580863168282020b01b814048c6133db6685ad1ff2c3fe8a383928a8347d394d40beef1380210d5c5eeb02c7ff3ee1064ecc5d90e272aa6222bde17e1f823afbc5f87a17f246999bf0a37eb01b2257be0880265f17562bf5844aff13752b236d1e8fc5debd7464a7eb399808ca323177b5e4c1497ee732ef8ba52b791cd757424593371fda36df3825fd33272b5aae3d74eea01b7ebdc329857eda1248b1db621f39ce64ad55e51b9a4c78ba9023c4be23f6ec9a3e876d78e75fa7d365dcee5b0769a97b9060284b9e9a7836ffb1b520627983db341ac0e8090fb482ba6075ca4b94df46e1f7d7720dc2c08acc3c9cf2e66e4946a45fcab6b1fd5eb1d1eabff59c634b12782cca5d43d55f1e4c9c6fececd0aac5489bf8e76b5bf1f46e8a6faeaf3ee351224493c89ccfcf93984371d53bcff04690a76375f56a4af3600597d604060bdd1526fee16b8f6eef94bf0a1687618197f73ebb15af175054be26761d8d5228029d89a9fc5ffe560d0b67925c3f2ac03afcd0e1f6abc99868a9f67b2bed5540c4faa62dbe9b898a1a31d7f713fbb98b934e69cb8ac4005788770e2d78529788eb70dac422dad531ab0d9a146e9ca27cfb475e51dd0361d0d2b624841b5ae944449edf8a3da3abe31783143821d9e120820e9aa64def24643d26687fc15ad25b5cef771ddbb0d82d4e89ab5bbaa098ed86362fddbc69faca5fb15dda19db2f8b9fa6708b08a2a11ff50543c98a4cffe5f432584bb728f808e1e7ffbca1882e6f4e557e377bb77c87a8f9a0404c4a403e9fb50ed34cbd169ac609b41d8995ef2d056fff25f09aba4ff1561ed9359cd4a9b9237ba6c2ea50f6f9eb6bce522efa881419f939cccdc32bdcc5e1f1eca33a721ac68c13e23588969a7a34a4e31b1e4e506c0a3d30d1ae8197978afcb9e84af623479518406c8cf7a9ac6cc3cd1c65c18dd9d805cc3e32c062aadebc25f888f6a0419cc0586dc9f8a6d6210732fe62813a7fbc064d169b7a9b14f7ac3a001c32b33bd1cf05d2df14ffeeea567dc500f10ab8ddc2cc3b124b8f97d495e4affaedca0aa2a0a34a8afa75f0550d7af46efd9adc1b3b6808e2b55a73760bfe10c7c9ba1703f962685a8485c1e3aed0e3f66b86545aa3ea41912f08a3ad202f2b1bf993692666308b7c0f42097f6a9be1199720878c80d10f8d916702a6b703e7ef25c1552aa5d7ede96c11dc161475a8d7e711e5fdd8eaa8496f43965b58bb22c9cfc0a012d09518bfb79a672590911b868b946f6a44b0b1f52c2eedfc19d0b30b64def7cf7022ab2ca1f19d3f6100cff4281b5a368673dfdb7c9c58a6835b2e9dfdb8bc84fda4d38e977e8920ec4988208b8439eb892046c3d7041e788d365dbead7e1b61b2a206bef414918013999f40e12d6959806a8f6ce946c7e5fe422740944f64846896dc829ac28db54cf88c38d65e94ded58b887c35f81014b3aa1d716a44f93df84ed9d9c57b8f079166d7551c58899141ad0e4b6207a9fa1578c214787a10faa8830ea5de5571136e7af17678e91a86f22718a8ba88ed652a0b24ceafcd505548fadbd9ed52b4dcb08223637edc41e03358890dde7165a59051759edc297a31b4f1e2a12b5733430cd0d98218154ed79e9811a068a14aa771dae15a1640a332a701c75ccb35e2fb75afcfd010c4ce1db00adceb1df8007674fde569bd5b96f10960d4c6c5680826f8b255a6a217a1e641bb780f6b5d507b0d8f73fa4b52004dddbeb8dd6e4138b35b98549c1f09784892945098469baf9e4a0bd4957428b271a9fce7870685b39ba30aa7f8ce7e277a4096d99ce5459149eb357182e917fb6527335571230c291747a20c9eabda00ff7b0eda4474da632b4191730a18482a4897247c234b50e1f077da79c31f3157e3c6d3954a35662a07081e65ef40739bcb2a3ca2032ebaddfae01e7a22597be89bcd41ed912450d8c0dac159ed1d95d04b529ba30d83a06504768457e11520741e1bf69311b9def4637227fcd325814ba5181a0410e26210a54352f4888aaddd2413b69f58b3cdec9a0f6d9ee5a165ef73f5adf4490cea1e14fc1dd5cc8ba3496feba1ba441a5bb350d22b7c1567523a828b6a6b2f99c272f11c29060f8eaabc550e8fb3e50c4c4d42940ea3b97b06d8e86b4db0f289e3db009f1a0ffca0ce6f38f579d864135f2c46f6c198a5b18b03152f2425611b7e668d8363660d07130384956df72c754174a65d9560ba1cb73bb39181bdde69166a86b4d0e2543771a1baa32681656a0336d042af1b1e0283c5c07aa356301cc31b670f94574c4dd5526146a2b8d80b3edf91950d9fd47742b9d0daa72ba30ca3686a27b2266645a72721e850d715052daa7a8d3898c06b362b2ca11aac61772af262de73ae65bc40083ddc30c2ce99dfd74ab068119455db03161eff807cbb78aa9d2c32d11db1f35622cc8eabc2ca728fae7671bca1f5f5e50e51ce52e59b5daec031bbbd943ab639c92a9d0ad3d0d479e4cc0d832c4031ed6366c5dc7f2aff47c2f263eeb47e492498f34828cefa9a6a400e7483bd4837cf78a9da409dcc2b7624f94c784abd637154c0972380be7be9640cf75da15f1760d1335e4b557dbe04c04ea2317fb384ffde47f21a047a08a4b4828976568ce9f35ba79aad87eb1daed9daeaa7e99c29fe065744404b75be0cf6ac81173064494a79949c23ebd42456174391ac3bbe783224efb4fba08d6fdeaa0baacc3ebe7fffce4664741265f72e1245070bb801b319f1f03664d1c791320a814462eee9480b227a7e43f18977cab7693a9a7b104e66d067fc80b4dd8449856e762ffea3923ea8be7f8c3f732f770632ce52d1d26a13f0f4e4e01cb49fb120f82e8ed315765b51e33ebdfd45f189bd47b0860dca2d560129f", @generic="d0789472"]}, @typed={0x94, 0x62, 0x0, 0x0, @binary="8bf666de4410f609197ab1a541e5af98f7c58407551dface7f5fcbf3bc6cd53316d059d1306ec5c1b7c6f60f7435791bb00a8def25bac868c7d6b1c08e4a3f8451933ce92861724ec22e8c5700ec0e7176495ab739059749f3f1d3a8ca55bb9dc3b805a028e2e5377cdefe79bc8a92d58daa3bcb44bb8f2fa3bd3b69d8364b6e7e6838aedfef3b0502a92e4c7c9ee259"}, @typed={0x8, 0x80, 0x0, 0x0, @uid=r0}]}, 0x1148}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x148, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0x148}}, 0x200080d4) 20m27.67389754s ago: executing program 3 (id=1863): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="f000200010000100feffffbf00010000fe8000000000000000000000000000bb00000000000000000000ffffac1414bb000103944e2003ff000000003a000000627e58649199698b042a", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc010000000000000000000000000000000004d66c000000ac1414bb000000000000000000000000fdffffffffffffff09000000000000000600100000000000ffff0000000000001c250800000000000900000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a00010e2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x841}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 20m26.631890192s ago: executing program 3 (id=1869): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800001b0093033077adc8250ac2b07d25b00e35b2", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252800000005002b00000000000a0001007770616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="1b000000000000000000000000c0465a122ae5435657cff5b60005", @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES16=r0, @ANYRESDEC=r1], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060017001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 20m24.630818104s ago: executing program 3 (id=1873): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f00000001c0)='/:&{,-\xaa:.\xa3--\x00', 0x4882, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x3]}, {0x3, 0x81, 0x59, 0x9}}, 0xfff, &(0x7f0000000280), &(0x7f00000002c0)=0xf}) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x0, 0xe, 0x0, &(0x7f0000000800)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000c80)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000cc0)='ns/time_for_children\x00') mkdirat$cgroup(r10, &(0x7f0000000d00)='syz0\x00', 0x1ff) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001d0000012dbd7000fbdbdf250c0015005a073500050000000c000f200900000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x20}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000450900010073797a30000000000900020073797a320000000094000000060a010400000000000000000100000208000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000008008000440000000220500020003000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000300900010073797a3000000000140000001100010000000000000000000700000a056ea90c0a0654b2852bff5ec34d5d10c309b3e31ffdfb36588e018539b5070059e0c573ca481607a972f28afe2eb86185d9ab697cc55f1eafc022dcd4a5d218dbc5b8b87be5c90caf667f163e7f5b2ae3d891ddaa7a36b81c838da171e6c65ce27d4fc576ede4"], 0x108}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd7010ebffffff040000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 20m23.807567384s ago: executing program 3 (id=1876): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x711101, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0x3]}, {0x2, 0x5, 0x2, 0xa4}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40}, {[0x7, 0xfffffffd, 0x8, 0x5]}, 0x9, 0xda, &(0x7f00000002c0)=""/218}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000640)='?', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xa8}}, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="1c", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x301, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40845}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x711101, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0x3]}, {0x2, 0x5, 0x2, 0xa4}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40}, {[0x7, 0xfffffffd, 0x8, 0x5]}, 0x9, 0xda, &(0x7f00000002c0)=""/218}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000100), 0x10) (async) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000640)='?', 0x1}], 0x1) (async) accept4$unix(r1, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xa8}}, 0x0) (async) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) (async) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="1c", 0x1}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x301, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40845}, 0x0) (async) 20m8.415025953s ago: executing program 32 (id=1876): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x711101, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0x3]}, {0x2, 0x5, 0x2, 0xa4}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40}, {[0x7, 0xfffffffd, 0x8, 0x5]}, 0x9, 0xda, &(0x7f00000002c0)=""/218}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000640)='?', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xa8}}, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="1c", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x301, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40845}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x711101, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0x3]}, {0x2, 0x5, 0x2, 0xa4}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40}, {[0x7, 0xfffffffd, 0x8, 0x5]}, 0x9, 0xda, &(0x7f00000002c0)=""/218}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000100), 0x10) (async) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000640)='?', 0x1}], 0x1) (async) accept4$unix(r1, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xa8}}, 0x0) (async) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000000880)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) (async) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="1c", 0x1}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x301, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40845}, 0x0) (async) 3.830967797s ago: executing program 4 (id=9268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000050601010000000000000000050005040900030073797a31000000000900020073797a3000000000050001000700000005000100070000000900030073797a3100000000090003"], 0x6c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="44f41de0c3437b8fe8372eaf541d0020144e5cbe32f997e250503d0deeb3a07096ff14f1148685d2c0accd4e39e10d5cb8b67f373b861b9a0dd8fc6641eb2663c10f8540da7b239000"/88, @ANYRES64=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f00000003c0), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r4) 3.034199067s ago: executing program 2 (id=9277): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="440002804079"], 0x60}, 0x1, 0x400000000000000}, 0x40810) 2.803768327s ago: executing program 4 (id=9279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000ec0)=""/250, 0xfa}, {&(0x7f0000000e00)=""/145, 0x91}, {&(0x7f00000000c0)=""/31, 0x10}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/44, 0xb756d85cdf1364b2}, {&(0x7f0000000c40)=""/173, 0xb2}, {&(0x7f0000000d00)=""/114, 0x9f}], 0x7, 0x0, 0xffffffffffffff0c}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x24040850) sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a80000000050a010100000000000000000a00000a0900010073797a31000021000c00024000000000000000022c000480"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "db58b33c0418547b", "b790b884f2baf2e5e27e7ab262e9c196", "b2f1d23e", '\x00\x00\x00\x00\x00\b\x00'}, 0x28) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000005c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fb}}}, {&(0x7f0000000040)=""/125, 0x7d}, &(0x7f00000003c0), 0xd}, 0xa0) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000740)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000780), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000280)=r3, 0x4) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)='?', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000004c0)=0xffff1884, 0x4) 2.69312943s ago: executing program 2 (id=9280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61123000000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xe9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000023000000000000000900000018110000", @ANYRES32, @ANYBLOB="000000000000000064bb3061e4ec43c8fa7b3000fa03e0f4b702000014000000b7030000000700008500000086000000bf09000000000000a4090100410000009500000000000000bd00020000000000bf90ffffffdd"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="2e9b7d0007e03dd65193dfb6c575963f86ddaf62a6de000000000368a60a0165d83d00009d90491ceaebfd26d4eef23248000000f8", 0x35}, {&(0x7f0000000200)="73ec500447db", 0x6}, {&(0x7f0000000940)="1082fdf637f3139d7b39e2d1d9fe45b502541e36843b60d08736795646348926f76577897efa579606be14710e09b20333ca7b4d3a573ac211ed1a1d792c888776a57239dcbbbce68612181ca43e2e7f6fdab10d5d36e84a3b55ff9f3c22a973e062e08cd4778a1b6a7cff027c57517dddbe74ac54fdfb7b836511f3901e745abd613b6bca2e6a2d8c382802098975548b24cd93ef29394afbf7a35eb06348c02778e33360c895e0a445f966c89c22", 0xaf}, {&(0x7f0000000d40)="01fd8561dbc1ba4cddd9eb608e7bb57a32c3ce97929875d36e1d3ef99ce6f621b069d7481a5c4d4c0db9f058df15c0d79f06c51f8f063422faffb33f6c377119292f9ed36a7dc4990f06baf6a1ac4e6f4ce2c6a8cb3f2f1789cf9d5433c822e5ee358f82b20ee1195365aceaf9a80d1c616cdec6f7254f17e947568dd60c56f565d7da3f29a1f3f55cad0a069ec7c577b84dad89a31fdcb6d67a2fd480cbcab39103defeef6f76d791192e962f4fef96162f88f3000da4668ee74bb47e3aaa3cbc33346bd21fe6c1e0645dc56ad7754b42dd9deb670aa6fbb522b31cbc20a953a1e7495ab27a2d265ebc527f2ad27c28e8c5", 0xf2}], 0x4) 2.452039882s ago: executing program 1 (id=9281): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xff7ff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x5, 0x2, 0x5e, 0x41, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x4, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x3, {0x2, 0xff, 0x2}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0xffffffffffffffff, {0x2, 0x1, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xff7ff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x5, 0x2, 0x5e, 0x41, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x4, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000001c0)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) (async) connect$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x3, {0x2, 0xff, 0x2}, 0xfe}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0xffffffffffffffff, {0x2, 0x1, 0x4}, 0xff}, 0x18) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) (async) 2.227289021s ago: executing program 5 (id=9282): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x18, &(0x7f0000000300)=""/24, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x83, 0xd, 0xc}], 0x10, 0x3}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000440)={0xe29, 0x9, 0xdc, 0x3, 0x9, 0x7}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x9, 0x6, "77d9f5a349"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2c4, 0xe, 0xa, 0x807, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x26c, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8fe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa459}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "4df2a42cccfb9e6f598dbdbbfb10429a9e5e901f4e57d7c77690437d6e91de6dcec6d8a6b819bc90e8f0c541f71646d34265d906e62084d0bba7d62084016fc615e51d20aef87ecb2610d4f87325c5b0a232d86ecf4af8c6354d8b8ed2d8d2f576dc75c64874883bb6b119c6ac8a5ce66d190c197b426bf704c82036119fefd633b2f4f02bd350738ed15ebf9337a6d3971ad9406d8f122fe1376f90f1a9f1eace2f79ae537a9119ec94aea6bc5a66167a6b1a11b8f5f4f0433d40caff7aacddfda7cda47c6fd4c957"}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "8844661a2ec469ee1e401df8ead9cb3839f8ff5127ae533f6c19dbdc19c162219117138f26840138ca60fbe2467b05110952e57b50d385a1acc5fa97d880b3090f23e07d1bf1c87ad36a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x9, 0x6, "77d9f5a349"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2c4, 0xe, 0xa, 0x807, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x26c, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8fe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa459}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "4df2a42cccfb9e6f598dbdbbfb10429a9e5e901f4e57d7c77690437d6e91de6dcec6d8a6b819bc90e8f0c541f71646d34265d906e62084d0bba7d62084016fc615e51d20aef87ecb2610d4f87325c5b0a232d86ecf4af8c6354d8b8ed2d8d2f576dc75c64874883bb6b119c6ac8a5ce66d190c197b426bf704c82036119fefd633b2f4f02bd350738ed15ebf9337a6d3971ad9406d8f122fe1376f90f1a9f1eace2f79ae537a9119ec94aea6bc5a66167a6b1a11b8f5f4f0433d40caff7aacddfda7cda47c6fd4c957"}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "8844661a2ec469ee1e401df8ead9cb3839f8ff5127ae533f6c19dbdc19c162219117138f26840138ca60fbe2467b05110952e57b50d385a1acc5fa97d880b3090f23e07d1bf1c87ad36a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) close(r1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000040)="d9b604") (async) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000040)="d9b604") 2.181563717s ago: executing program 5 (id=9283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xfffffffd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xa53f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @generic={0x81, 0x6, 0x4, 0x8}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.049278612s ago: executing program 2 (id=9284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000340)={0x40000013}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4076cbba9945d516, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x28a) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b0000000000000000000000c94480000000f3dc1b8e80ebb71d5c29", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000000200"/28], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000cc0)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x20, &(0x7f0000000ec0)={&(0x7f0000000d40)=""/82, 0x52, 0x0, &(0x7f0000000dc0)=""/241, 0xf1}}, 0x10) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0x0, 0x4, 0x18}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0x0, 0xeb}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x12, 0x25, &(0x7f0000000a80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x2, 0x2, 0x6, 0x8, 0x0, 0x18, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc6b3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @printk={@lu}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000bc0)='syzkaller\x00', 0x9, 0x5c, &(0x7f0000000c00)=""/92, 0x1f00, 0x20, '\x00', r3, @cgroup_sock_addr=0xb1da96f72255a1b4, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x3, 0xa, 0x6, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)=[r7, r2, r8], &(0x7f0000001000)=[{0x4, 0x4, 0x3, 0xb}, {0x0, 0x1, 0xd, 0x7}, {0x5, 0x2, 0xd, 0x6}, {0x2, 0x1, 0x6, 0x2a577438a95886c9}, {0x5, 0x1, 0xa, 0xc}, {0x4, 0x4, 0x4, 0xc}, {0x3, 0x5, 0x0, 0x9}, {0x4, 0x4, 0xa}], 0x10, 0x200}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRESOCT=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) bind$nfc_llcp(r2, &(0x7f0000000980)={0x27, r9, 0x1, 0x4, 0x5, 0x9, "8fae645099f4d8b67a2f6911ab878e38548564877b13efff3ec8ebe3584f1f2b47b009458a024f8cab2cc351034b1a313f06f82f7752155ac24c1fa4372c78", 0x39}, 0x60) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r10}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20) (async) r11 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x470, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r12, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0xfffffffa, 0x3, 0x19b, 0xc8c, 0xffdffffd, 0x6, 0x4, 0xff, 0x9, 0x2, 0x2, 0x9, 0x58, 0x7, 0x1, 0x0, 0xd, 0x1a59, 0x9, 0x3, 0x6, 0x5, 0x0, 0x8, 0x10000, 0x6ea, 0x38679f6d, 0x0, 0x6, 0x7, 0x101, 0x2, 0x25b, 0x7, 0x5, 0x80000001, 0x6, 0x7, 0x8, 0x2, 0x1, 0x8, 0x8001, 0x7ff, 0xa, 0xff, 0xfffffffb, 0x3, 0x83e, 0x51fc6ceb, 0x10, 0xa, 0x7, 0xfffffeff, 0x4, 0x4, 0x7, 0x4272, 0x2000, 0x4, 0x7, 0x5, 0x8000, 0x9, 0xdd, 0x5, 0x3, 0x1, 0x7, 0x2, 0xfffffffd, 0x400, 0x2, 0x401, 0x7, 0xffffffff, 0x4, 0x0, 0xffffffff, 0x5, 0x8, 0x4e8, 0x6, 0x0, 0x9, 0x2, 0x1000, 0x2, 0xffffffff, 0x3, 0xd, 0x4, 0x812, 0x7, 0x10001, 0x8000, 0x6, 0x0, 0x3ff, 0x200, 0x700, 0x4, 0x7d, 0xe5, 0x4, 0x0, 0x8, 0x4, 0x7fff, 0x1000, 0x1, 0x3, 0xaf, 0x8, 0x7, 0x7, 0x6, 0x5a, 0x1406e324, 0xedf5, 0x5, 0x80000001, 0x2, 0x2, 0x1000, 0x1, 0x5, 0x5e, 0x3, 0x7, 0x4, 0x2, 0x8, 0x9, 0x630a, 0x1, 0x5, 0x1, 0x6d, 0x3, 0x9, 0x1000, 0x400, 0x10000, 0x2, 0x4, 0x3, 0xfffff405, 0x8, 0xccb, 0x21f223c, 0x397d81b2, 0x7f, 0x0, 0x9, 0x6, 0x6, 0x86, 0x2, 0x7fffffff, 0xe0, 0x9, 0x31, 0x10001, 0x1000, 0x400, 0x8, 0x5, 0x7c, 0x5, 0x1, 0xe, 0x1, 0x5, 0xc, 0xfffffc01, 0xc6c, 0x3, 0x80000000, 0xb23, 0x8001, 0xffffffff, 0x2, 0x7, 0xffffffff, 0x2, 0x9, 0x8fc, 0x9, 0x4, 0x2, 0x0, 0xfffff787, 0xfffffffa, 0xffffff2c, 0x1, 0x1, 0x2, 0x1000, 0x0, 0x0, 0x201, 0x4, 0xff, 0x6, 0x0, 0x7ffffffd, 0x8, 0x8, 0xd5, 0x9, 0x9, 0x51e75395, 0x7ffffffc, 0x7, 0x6, 0xfffffc00, 0xc170, 0xb, 0x3, 0xfffffffa, 0x600, 0xfffff03b, 0x7, 0x8001, 0x4, 0x3, 0x2e5a967f, 0xc, 0x8000, 0x40, 0x6, 0x8000, 0x5, 0x2, 0xa, 0x10000000, 0x7, 0xffff, 0x3, 0x80000001, 0x1, 0x0, 0x6, 0x8, 0x4, 0x6, 0x8, 0x6, 0xb, 0x7fff, 0x4, 0x7ff, 0x6883, 0x1]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0xa34, 0x0, r4, 0x8, '\x00', r3, r5, 0x1, 0x0, 0x2}, 0x50) (async) r13 = socket(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f0000000940), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x2, @local}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x38) 1.968302803s ago: executing program 5 (id=9285): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x2c, 0x807, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f14003000f77f0b000100697036746e6c00002000028000000100", @ANYRES32=0x0, @ANYBLOB="14000200fc02000000000000000000000000000108000a00", @ANYRES32=r5, @ANYBLOB], 0x58}}, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xec, 0x0, 0xd, 0x100, 0x1, 0x6, '\x00', r5, r6, 0x2, 0x4, 0x1, 0xd}, 0x50) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="0027b92b5a"], 0xe) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.900137386s ago: executing program 1 (id=9286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d80080002007f00000114000500ff02000000000000000000000000000108000200ac1e01011400050000000000000000000000ffffffffffff08000200e0000001140004002001000005000000000000000000000214000380060002004e200000060001004e200000080001"], 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x84}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 1.80276482s ago: executing program 2 (id=9287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x1, 0x40000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000500)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x300, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.714467696s ago: executing program 1 (id=9288): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000001c0)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois', 0xff81) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.713210373s ago: executing program 5 (id=9289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, 0x20000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f0ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d980000000000004f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f0ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d980000000000004f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080)={'ip6erspan0', 0x32, 0x34}, 0xd) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001e80)={r0, &(0x7f0000000000)="22648be35f240bc5e7e12ea5275bc55b7f3159d96f193b30853025fb07ce8808ef455a93fa5ab45fe1a81dc7583f94976058", &(0x7f0000000e80)=""/4096, 0x4}, 0x20) 1.711824059s ago: executing program 0 (id=9290): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="ea6576681159", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @broadcast, @remote, @loopback}}}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="b3", 0x1}], 0x1}}], 0x1, 0x44) (async) listen(r0, 0x100101) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000280)=0x1, 0x4) (async) accept(r0, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0x8}, 0x28) 1.595475232s ago: executing program 4 (id=9291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) 1.594426524s ago: executing program 2 (id=9292): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) close(r0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x8, r2, 0x30}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="720c554bfb3983be70167ae2079bdad4952e047c4fed346a51f93bf78ba99574bb6695f0f0a64a0113e809b3e86fd4dad91ecc64e92ec1eff8ecfd8e57a0d7494f0274f4311ae38c6488b15736c6446dca1c71ea3363c13a92117e07d10e6f006b876967633b7f89cc33cac005bd101c7e59679c18fced9ff46e6c2bf78034284a4c35ba191c1b46fe85642ad5bfbff7f9e4da01c0393125dca108488230c986f8b5f556da656a4169459ddb6235cfc243f84b1f9f5bcfdf4500be57283cced4be00ee535e7f13034424e0b31289e2a8e64642212f407b170bde88e634efc64ac0099913f247f976943e3d37e6ae8f3073", 0xf1}, {&(0x7f0000000380)="7a727d53e336fb7cd4b72423fed64e13c63635efae4756fa2d98f70c511e828f399c742e5a751dcfd7ca54253884c12d42956249be51c192526c9dd6694396dd511c5190e9e612eff2cecf21c5d4fcc0a35c9a6e4f3b0d099307b86f325c75ad6853cc5f4854b3ddd7089371462955acfd0b2b1cd2ec6952438a583e67187f1238bc144c2c0eeddd89f919aad86979aff0fe598fb91a8828a3dfdf3daf1667785fb41706c448bfcdd4124f7b462bdd64f1ae13394d339f1177fbccf047ac60f7e4214c769721917f9b5f961a2be45f6ef6fe458cea408df871fe7d83282b5973db14e2a8808be791856a9903", 0xec}], 0x2}, 0x8800) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0x40) r8 = socket(0xa, 0x5, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x1a, r10, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) readv(r9, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {&(0x7f0000000480)=""/178, 0xb2}], 0x5) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x8, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) close(r6) 1.560935875s ago: executing program 1 (id=9293): r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440014001000010429bd15bc9af6010000100200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280080005000200000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000ffdbdf25010000000000000001410000001900170000f86f13f515a936c431c892c6"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) (async) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0021040000000000000000003b49166f34af7201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r8], &(0x7f0000000700), 0x10, 0x10}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e22, 0x762e7e93, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x0, {[0x8000, 0x800008, 0x0, 0x4, 0x8, 0x4, 0x7, 0x2c0]}}, 0x5c) (async) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(0x3) 1.509586807s ago: executing program 5 (id=9294): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) (async) unshare(0x22020600) (async, rerun: 64) r2 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async, rerun: 32) sendmmsg$alg(r2, &(0x7f0000000180), 0x492492492492627, 0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fcffffff73013f0000000000950000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xb0000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.44829097s ago: executing program 0 (id=9295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0xb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x20, 0x10, 0x4, 0xfffff02c}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'syz_tun\x00'}) 1.440216665s ago: executing program 4 (id=9296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) unshare(0x2c060000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') (async) 1.178586841s ago: executing program 0 (id=9297): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES64=0x0, @ANYRESOCT=0x0], 0xbc}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES64=0x0, @ANYRESOCT=0x0], 0xbc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.120850077s ago: executing program 4 (id=9298): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000001}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PI', 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x22040085) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000440), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0xffffffffffffff78, 0x9, 0x5f8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1d}, @in={0x2, 0x4e22, @multicast2}], 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x13, @mcast2, 0x80000000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffe, 0x10}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r8) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r9, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 1.051865482s ago: executing program 2 (id=9299): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd70a}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffc01}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000803) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004441400000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001814038028100080100001800c00010000fff5000000000014100a800c000100f81f3fe70a58a077041001"], 0x14f0}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x122, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000180)=0x15, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) syz_emit_ethernet(0xc20, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc12, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xbfe, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000100)=""/69, 0x45}], 0x1) 973.638352ms ago: executing program 0 (id=9300): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "69a0a0aa300d6e3d", "14f35ec872ab27e468247d5d8ae87b8992c36a1c11cdfe89e0578c7fb814ccf5", "3a8ad846", "27d9c805038010da"}, 0x38) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000000180)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r1, 0xb6acd000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r6, 0x1, 0x0, 0xffffffff, {{0x2}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="692ecdd3ce670b9796bcce15e320002cbd7000f8b63aeb58092d7ce6dbbe62e106b7000800a000", @ANYRES32=r8, @ANYBLOB="0c0099007a000000290000000500080003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x10) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000170000001600000000000000180000000000000029000000370000002e00000000000000"], 0x30}, 0x3400c8d4) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "69a0a0aa300d6e3d", "14f35ec872ab27e468247d5d8ae87b8992c36a1c11cdfe89e0578c7fb814ccf5", "3a8ad846", "27d9c805038010da"}, 0x38) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000000180)=0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r1, 0xb6acd000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r6, 0x1, 0x0, 0xffffffff, {{0x2}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="692ecdd3ce670b9796bcce15e320002cbd7000f8b63aeb58092d7ce6dbbe62e106b7000800a000", @ANYRES32=r8, @ANYBLOB="0c0099007a000000290000000500080003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x10) (async) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000170000001600000000000000180000000000000029000000370000002e00000000000000"], 0x30}, 0x3400c8d4) (async) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040)) (async) 538.861375ms ago: executing program 0 (id=9301): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}, {0x85, 0x0, 0x0, 0x72}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8000, 0x10, 0x0, 0x7ff, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x27, 0xd1, [@rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x94, 0x8, "57d768e0aa14"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x1, 0x0, 0x5, 0x7f, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x10, 0x0, 0x8, [0x4, 0xca, 0x1, 0x30be, 0x40, 0xffffffab]}, @ssrr={0x89, 0x1b, 0x92, [@empty, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @broadcast]}]}}}}}) 432.15775ms ago: executing program 1 (id=9302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x1, 0x40000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000500)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x4}, 0x50) 431.18616ms ago: executing program 5 (id=9303): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000540)={0x2, 0x0, @rand_addr=0x640100ff}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="83", 0x1}], 0x1}}], 0x1, 0x41) (async) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000680)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r8}, 0x20) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x895}, 0x8000) (async) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r11 = socket$inet6(0xa, 0x80000, 0xfffffff7) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000000)=0x200, 0x4) (async, rerun: 64) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) (async, rerun: 64) sendmsg$can_raw(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "149e1edff2a00619"}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x40e0) 314.775951ms ago: executing program 1 (id=9304): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x49) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000008d0001002abd7000fbdbdf25020000000000000064a0fe8adf5ff21f76b24dfbf98781f1bf89fa852b3ad6f0df0f2f"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x4, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003340)={0x6, 0x3, &(0x7f0000003400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003440)={0xd, 0x10, &(0x7f0000003500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003540)=ANY=[], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003580)={0x6, 0x3, &(0x7f0000003640)=ANY=[], &(0x7f0000003680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000036c0)={r3, 0x5, 0xb68, 0x4, &(0x7f0000003740)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x10, 0x16, &(0x7f0000003840)=ANY=[], &(0x7f0000003940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x4c}}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r11, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options, @NL80211_ATTR_MESH_ID={0xa}]}, 0x20}}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="642700e7", @ANYRES16=r11, @ANYBLOB="00022dbd7000fedbdf254a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2764}, 0x1, 0x0, 0x0, 0x24000080}, 0x4040) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, 0x0, &(0x7f0000000a80)='GPL\x00', 0xa, 0xde, &(0x7f0000000ac0)=""/222, 0x0, 0x8}, 0x94) 74.606499ms ago: executing program 4 (id=9305): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x60}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfb}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000820) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0xee24, 0xfffb, 0x4e22, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0x2, 0x6, 0x0, 0x200000003, 0x80009}, {0x2}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@remote, 0x4d3, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r6, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv4_getnexthop={0x38, 0x6a, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x8, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x3f, 0xa, r7}]}, 0x44}}, 0x48001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_delroute={0x34, 0x19, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x3b, 0x97b1eb44c146a130, 0x2, 0xc8, 0x5, 0x200}, [@RTA_IIF={0x8}, @RTA_PREF={0x5, 0x14, 0xa}, @RTA_IIF={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48850}, 0x4000040) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000000080102000000000000000005000001090001007379e6530000000006000240001900000500030006000000050003003a0000001c00048008000140000000020800024080160b45598f5d4e00000108ecc320c4ae77eb0dd16dd3a580aa8c88a381df3a49ec6f359ce182039a6f616d261a16c621a018e6e24b7483b26f6b7f0dc1bed5b1a5be597a3ea8f47199244c000b532fa88e09e2569f3a1c83d30951b487c2a92738e50720c28bd24f5651df3e5c8cae8525dac8451299dd51ba0ff7a0a7506e4adeb9afb766b02ab3000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000e00), 0x0) close(r8) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000e40)="5766b1b827f6003300", 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e80), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000b00)={r4, &(0x7f0000000a00)='macvtap\x00', 0x200040, &(0x7f0000000a40)={@align=0x400, {0x2c, 0x8, 0x9, 0x5}}, 0x2, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x800}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x200, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x7}, {0xc, 0x8f, 0xc33}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000000}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffff9e2}, {0xc, 0x90, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0x1ff}}]}, 0x200}}, 0x84) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00'}, 0x18) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x10, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x24}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@generic={0x2, 0x0, 0x7, 0xb, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) 0s ago: executing program 0 (id=9306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000600)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005df2e9bee0012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfb1, "490bc5835cf98383e1a169e0d6367c51e44c7666f196d37c6fe1de3903620019c03d63efb2afad4c8e6536fabd0b18d64f0257af10c923fab8b4c1d414fafbf8a3b1a234500b74d2c835cef4e952289cb2ccd6391b2a38dabbedfd4920a954eb209f8cbcc096cc9589df7acfc106fd9ec22bc68fabb31041c843cd4692de8db25521d2ffb109289a6e6903e8fb11d5f2a1062723653f121cf5a9c371782262c698269189685c9faae085ac643e4ad48e187616f4e1964d9ee729bc71f316d9bcc90a6c6f7437d0716a9c62a81794a0b4de0c6c3158c38fced1f3b442390eda48ffcc89d59b6fd84ed510acf4d9094e87dac21a06a2109ca2803803a4b80d13b37d89b6c73407e6acfeac1a095960d6a9e8049196938baaeda34a2ef009ffcdb5f035c36b7ed05f4c2a3969ba416c6a6ad629512981eb31de05d1a47858ace26809845bda12820ad6361d0212ce1722f6c4560d8e4f766c295da9dd49d66dfb1e9b6a35b150a970abbb8c59c57a93d16eab2a7166864134d17b4d4f090d22cc3d85e8797bfc1b466ff4766034411ec0a96643fec02222560e5ae236f18277c00ccd34a8377eb45d6c36e3e1678c9aa008a5d263edfd3e0e452f2cc1cc362225e415dc61a444e8988c526e0f865eac6afa77447a8240339631cfe1afe46f805c48baac370203c2e2c6bc4a78caf6c577e4393026a7811728f4c0ec68e7e9067de2146fdf2c0a3108a94574a8ea6091a3d7221d38a3e05e30214e716f8e47c719702a9e35705bb02bc25ad604be7a9a38a76aa412c46e7fc29bbdcd5ca210512cff6565529ae7788b15aa3598812a95befb8bf7b26b793ac2fa5fda252c7f78736c028ada6a88d2fa4ecac78ab38053bedf6a11d127472325e08d99c55d277aad91ac0f192416338ec336b2480d1425f91b40dd978a442015fe24b64a752f3c17645a09774ecb96f41e4428d72043aa1372d9a46ec362b78e195a342d0210e086c1a7328e2483c9d39724aafb83d334c1e810db6b0d57552960d020b5a265eb5ebf1b49442c8b69cd059bd2caaaf64473fd4fe1d09c4216ded77080bbf1ec598c100bcbba8e0320c108796d50a731be9595582b63c1c258cfefd201e59c003a4e6de18f8caddbb1d09bbeb11a8622e87cf77c97d08d34ea7ffdb60e183ecd55e33874f479ad3347cd98ab69c135ab5ed907c27f6bf5ab841a0b4eadd9518f3e493c8541bee77260e6c0a77ae37e8d55215b7194206df532c09d98f8b794b24d08ae152e7d50f7a7704f19f65407ca92e483bbfe389b0f48129395db2aa1baf68e03a09cb7a90d4ff64b1b27c9188d5233dcba6897c6c538c052c82272ad8d3fc9afdd0e55be6cd26249a5b3f9a796e14f31ec19991466b89b4fe574b309a69f7246d0895668289dc51dd73054f7c02595c503190a664ee27828e7d2c44c22b6514032f7194f509f8215ba52e7488b8d6131e26fb8b7cd1266f1343b3987ca56a2aa72bad0a8a95be5215ee28843486b34c5b25c11cce071e29f7d6d9589077f3136a3b399d45016b13b472ed80f04443a1d689b9cfac55b3b8e841450ab3c2841ee77a2ac7626b32e6080f6973ae233166b59bee59e46a381353116082b46a6c64cfaa6057c1e21f41a749db7322febf5735227f2ebcfba422d1d75996558f69249e80d9820139b5dbcc92e5d553778f219fa530731e3cf4a55264153489100be366694d31f99bf878a1953d6f3004c1f33c0af369de291b2efe36b1021224373fb40053daf48f47cd2012e81c82f9fbbb32367149b883e9cead421a68433d88af0ce7a67d5fd4200bc51bef208f736292ae5a0ba7b06deb8dd49e854f729114f096371933c81a0a98b9c30be0dbc8b3eb286dec727fed2bcb5411484ed2fa72a4f0ff6889d36ae767e7247188bce7a7d80177450dcea2fed21bb0320c568905545e82229a01b8763b5fbd5bc8269d1be9a1ada636fcef6a301616592987531a0f8fae56bc150173e40e74c9d2b13c29d43e3cb3339679d1faa298ddb848812236a68ccd526329c52ee97dfaa44c332fd54c9540343a42da6ac69a37fec9480b4785bb93b7a91ca8ff1d009bfe19eb25c30ca8702c9515a5d1f82d1e7894109fb34623dff2d4552e1cce63872dbb307c72ef979a04df75a8811ad2ccf3bbfbda35b4fdb1021eb7e8ab7119d3a33d666b4455966412d0ebd95c9dfc36c8047c0e506393a5e264d68285e904390ebd978433b22fc85f9f41cf08fff503964ac2fd20f3cdd46f0c5c3f093e6960b4512c56d2e69195cd67faed65e5036933a421fbbaf7730c3a17b6d44a873a34cab53cac237b4a0d9f6b2817998f0355c86d90c7b3154ea830dcbb31701e3eaa9db04a9f752540cb24b3232b6bbad7dd5a5ab45f941f77d9f844f18d967d9019ce0c9c22f8c0504c69a816e2bd603e88be66d042075f775ca29f7d28e26a201de621faaec0d364158821e1300c108d935068764fe57d6cf0421eb4674d1bd39041774367d4d5b5429cee88780ff417f9dcbd14651b03c9299b4e8551751400b8206b4b1d79daf570cf4f035d4b0f865e6cb33959c1bda2c86daec9548ae1db5b66dcc66f4a5b670d840b800570cc9a164b22e4d74834060acceee70eef1bd8118680468e2f6765079ce2e61aec4b48c1a3e1d9db53ca8d1ef5a19806a271d433e8b706b4aa04f32acc980344a8e91c89a75bda2d326a848dd5a975b0c15c8af42191118bf020f1c1281df8769591567d7d9822ff90649dca9e8faa9b12802c508a31f28c510b547598ab33d39956af9c705701e0818af2fa4e222e52326acbf6af5b82c9e3a4f5be599209ad3f08c349a5394c0a2e7f3a102a8995c53e70da50549c824a8e2220a096bbf0af19d5f99be8c2998a1e51a317b5c6b3a7617deecc461fdcf9b1a043fd63de28f0181f5bff8168769293356ead29ebe7f27a4bab846847d90c567a3dcf5d83549b5ca7f053ef776c89a56e3b59e1d939acc3d453b7c18baf67b6efce1ada42976829c1e8cbdd726a7c431d18772644db819bf62efbff0a5d2e20fa2eafefe17ae494aeb89c3854c557284dbae59f932a992dbd121b474ed01ddf6232e41d17788ea0c650213ef48e427fcdf550cd845cf1a4fef21acea9eef5d6320a5b32896d007025e96004bc3dbd73d4179e9d5f7f7e6ad38b6a51bcf3356bdb9882656649b7e145c08454401335df325d368b04d379cb7da35109efd8b13f7f3a5ed35db4f180064e24ab08ec2669f60c28e58839871cb9ffb79874f5925a6e9e0ccfdca961179ff69d331651e449290cf69cd1070b6a483d32218c174766075af6cf0b1be412f7defbecee97ce79c37a7fee11fa91b7304831cb32ef315f6ab0d8386a5139a0ebde3064e5e0ba6b800969695fa40c8c3a7a0927189fe457389de7b629a2169122548baf38642edbc3b29c5eb93605d66ffa2f690ec41fb28f4b3ef12fa89b55b7c36d3e2c162851e56cffd30426579a78e7d6b17582bda9e4d58243b39f394cfdb0960ca87542b05340f00cda801f725459d2270b60e7c276fee43690941867776d32c63bda259ff0596e3beb270b047c39f22575dc1366c0f37544737b690b21eb10f92cdf7925cd49d8ee7df8c781ac66d866ad854d31ce7ba4c4196bd2edcc46701eaa65772d4d68ec3eee2eebdbd396a5f8b5e045994ed75688968e46042d91d27b6d8635b6a017857054c04a64ed5823887f3915f0aa64012bdeb10477a0cc310464ccfd92f272769efc01c2a78fa8144041ef925abf7d7d47825fbc1be82a0b61adbb3319c5e5b7d3ae2c2c623ca6ccc37834baa91993101fa35492add6b3d9a6d588797dedd92d182acc6c7fb97f94e8dd93dd08100037426a6c50297344b5591be1d5dac25bfbd71f453b3f6bf9bfa059c6963cef0320e187cf24be2ae09226ec5289257d5c8e875129c1d57982a481a649b987c2e47685b469d7d1549d68f6b3b84bd15c21c0f991752067fd3cb9bae822a5ab20288c524b8e68ed7b1c7b84a46b0911495d09044397c6b67936a82d01dfc152b5dfce4278961031ac67eae60bfbbf77e675626b5c1059b3a78e9bc2441eb5a4f0fefad325565050a312032c7495930c0cd359996565ddce776854a60a07176c310f3243486d29529e2cdb3aa22628cb67a61a5e4e8dba04491a5b8778e5213a64bca4b2ef923f24312893ab6b46be7e138971221a450bc2f6188f1c8616e7d43ec6119779546d585de9d48ad997ff5d11796996e666f88aa38c6bdde8f0390e68ba12158935d65d83e798e80488a269ff7b51da178da594a85a5990fafc151870bc4dbe2ffc8f79a8d6c0d097ce9b9ee4b2b77abc1c0440b93b4eee79616230b6ee758498dab22e28934952302ad308ec202556e26b00bd474d3376e58c2d70103d9399a86bff3e23abfcd407376fc1ac241ba969839a8c6b9e8d60b22f52807b5bc9d5e6c52b8baec877c891cd3482eec9dd78cbfcd80cc78b88a0b1b1c75187b19773053853aa04f786ff1b812454c51d3e10723438fce94415911ae7bf77a2ce2eb0dc9491d7962b85b91dbe9bc151ea2d098339f71c7c64b102d4714768e224b55fe32ebcbc9f371ce3d983a9ea56a5650d993c0bfcf0622a166a7bf2aeda8ec0ebe6a282d0b4aeee19891c19fef4108dc031a598130450bb112ccf21bbfd0f9af52eba3b7c5881f12f296479f2e19dd4687a9c7c38e93dcfae6474d6bbaf2bf511e70c3587957e846ad04f3c249ca2c584c9c40a2e17d8439328d667c20c1d01ad2607193badd9742fd97ea19accaeb4e4c36a3178b0c83da32db0cf22a612a9c0133154ff19d48541290e00beb24c456b5b072d28c858735feb476864ab6b2c28f734da431933002d0bcac310be80b5eb0acbeecce0ad1488ceecd3ea24936fa6b68265e564d42a218cda6f95fd05298ad13658396621edd9d7c3639cb04ccd425fd38aaa2e7f913598778d443c3bce1ac5b0ed3424e3ed16eae0ffeaf998f8ad6ac29eaa29dbaccc3c93375a44f4dd0f7990a6dbfb002666feaa467eab98c36d5260c9d94b97fc1657eb4d45457e31a53a3a8d2184d79e77361148b8c8f3354dcce7e4ca22cdc8993663c1e83508b2eb88df96d904015c6d6b095d94debec84ebaa0219e15a0c0582bcb30573d5df7293acbabc185f77a6f2bee8712571a5cd4e142e3da4f71a8c561c95fa3e55d8d55dc17821e2a68b30ea28b3eb7ad27c0ee361d3545bc01bab38ace505484c0c20e83f7f211905cb9f5a9293ae34e522a5e46f9fa1278ed811bc03eae700e304cd93a410ed183f244ec40ef6aeaf1b6eb004ffcb1f6f1edea8f971c4652669db5994f37d05225a72052e76fd90505d3aec353196ae22babe2f8a80f45c4f827b96ae1a3cf77ee4f6cc7b3fc0ada2873a5b9a40b783cf780c934259a7b9868d8a256a7498d463dfc9ad0979f442f79fade14c3f6f71c68a1bb680aeffbaf6e2e00de79d8e4e52c5ce4230529029c66f5f4998e0bb04b87e21ae579750841b56c7f09f442b325eec0c1fd275d873d66d85325d36647f443772693d3a5e178b02b82d7715d8bdd180f101d3a3874fedfea7f7462119f179caed3834ddebfdb6a62bc8ab2303b5d2e0fa4d389e2805c61867df815ad23affb048c83645ac40781f336edc87872badaa680bedc8f515482b"}, &(0x7f0000001740)=0xfb9) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r6, 0x20, &(0x7f0000001980)={&(0x7f0000001780)=""/201, 0xc9, 0x0, &(0x7f0000001880)=""/227, 0xe3}}, 0x10) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000270000008500000050000000b723ee0ac0c821035a9818f2828758476b644ac056ded0762166ff6048f1faec569b52cf85e138459a917006460ae744aef084cf484c209889950416563c9cc1a66064d466e492777b15b2edec2f414eadb5276d129ef5efd70cb0153a099afb4715cfb3529a25519889297e852d627165b114207210d2bafa0cf532157745bc41fae2782124629cde8770b05354dca8814a2f26f62f9b8d4bc7bf6b2dbab4c4b737cea7bda8b7bf5bb6b52923829326cd8df8101564aa3dc6fbacff2aac8e7d67aa4effb4369737cfe86deeadf1ec19300268b9"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000007}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): l address not yet configured! [ 1531.651533][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1531.696553][T11724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1531.725413][T25229] bond1: (slave bridge1): failed to get link speed/duplex [ 1531.828386][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1532.018437][ T9964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1532.144742][ T9976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1532.234861][ T9984] tc_dump_action: action bad kind [ 1532.249585][ T2569] bond1: (slave bridge1): failed to get link speed/duplex [ 1532.426624][ T989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1532.443635][ T9995] tipc: Enabled bearer , priority 0 [ 1532.693644][ T9997] syzkaller0: entered promiscuous mode [ 1532.693679][ T9997] syzkaller0: entered allmulticast mode [ 1532.699246][ T9997] tipc: Resetting bearer [ 1532.739331][ T9993] tipc: Resetting bearer [ 1535.739654][ T9993] tipc: Disabling bearer [ 1535.756902][T10021] vlan2: entered promiscuous mode [ 1535.756919][T10021] bridge0: entered promiscuous mode [ 1535.768881][T10032] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1535.800048][ T989] tipc: Node number set to 3647795698 [ 1535.829086][T10039] tipc: Enabling of bearer rejected, failed to enable media [ 1536.158298][ T2571] net_ratelimit: 5 callbacks suppressed [ 1536.158318][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.252219][T10087] netlink: Setting conntrack mark requires 'commit' flag. [ 1536.252275][T10087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.273223][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.386292][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.477631][T10104] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1536.481599][T10104] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1536.507754][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.616495][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.729284][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.837080][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1536.843168][T10130] netlink: 'syz.1.8310': attribute type 1 has an invalid length. [ 1536.843190][T10130] __nla_validate_parse: 5 callbacks suppressed [ 1536.843204][T10130] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1536.843281][T10131] netlink: 'syz.1.8310': attribute type 1 has an invalid length. [ 1536.843297][T10131] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1537.520393][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8318'. [ 1537.520421][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8318'. [ 1538.207889][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8326'. [ 1538.285006][T10182] veth9: entered allmulticast mode [ 1538.532099][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8330'. [ 1538.810592][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8335'. [ 1538.812028][T10218] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1539.323847][T10242] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1539.729971][ T989] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 1539.729993][ T989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1539.734528][T10256] dummy0 speed is unknown, defaulting to 1000 [ 1539.763291][T10256] lo speed is unknown, defaulting to 1000 [ 1539.866332][ T3643] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1540.326723][ T3638] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1540.895506][T10305] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8351'. [ 1541.203865][T10317] netlink: 'syz.5.8355': attribute type 1 has an invalid length. [ 1541.237407][T13383] net_ratelimit: 36 callbacks suppressed [ 1541.237429][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1541.387100][T10317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1541.447937][T10316] bridge1: entered promiscuous mode [ 1541.510863][T10331] bond0: Device is already in use. [ 1541.521634][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1541.523595][T10331] bond0: Device is already in use. [ 1541.653655][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1541.707716][T10337] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8361'. [ 1541.757584][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1541.762332][T10339] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1541.852236][T10350] __nla_validate_parse: 2 callbacks suppressed [ 1541.852259][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1541.852296][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1541.853719][T10346] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8362'. [ 1541.855753][T10348] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1541.883914][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1541.997327][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1542.109199][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1542.216406][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1542.244055][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8366'. [ 1542.244190][T10371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.414601][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8370'. [ 1542.470550][T10371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.617959][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8372'. [ 1542.726164][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1542.800483][T10391] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8372'. [ 1542.829079][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1543.008827][T10399] netlink: 'syz.5.8376': attribute type 3 has an invalid length. [ 1543.008850][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1543.238083][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8374'. [ 1543.321335][T10420] geneve2: entered promiscuous mode [ 1543.321360][T10420] geneve2: entered allmulticast mode [ 1543.467584][T21577] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 1543.988108][T10435] batman_adv: batadv0: Adding interface: syzkaller0 [ 1543.988128][T10435] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.988172][T10435] batman_adv: batadv0: Interface activated: syzkaller0 [ 1544.074684][T10444] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1544.203246][T10444] batman_adv: batadv0: Removing interface: syzkaller0 [ 1545.153911][T10490] dummy0 speed is unknown, defaulting to 1000 [ 1545.155657][T10490] lo speed is unknown, defaulting to 1000 [ 1545.813269][T10508] netlink: 'syz.5.8407': attribute type 1 has an invalid length. [ 1546.274772][ T2567] net_ratelimit: 20 callbacks suppressed [ 1546.274794][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.352594][T10532] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 1546.376239][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.478001][ T31] audit: type=1800 audit(1791701996.752:38): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8415" name="memory.events" dev="tmpfs" ino=2420 res=0 errno=0 [ 1546.566100][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.566830][ T31] audit: type=1804 audit(1791701996.842:39): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8415" name="/newroot/470/memory.events" dev="tmpfs" ino=2420 res=1 errno=0 [ 1546.676488][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.789052][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.872131][T10553] __nla_validate_parse: 9 callbacks suppressed [ 1546.872151][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8416'. [ 1546.897307][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1546.980629][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8417'. [ 1547.006127][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1547.082804][T10566] netlink: 'syz.0.8419': attribute type 1 has an invalid length. [ 1547.193616][T10566] bond11: entered promiscuous mode [ 1547.194662][T10566] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1547.213591][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1547.246873][T10569] macvtap0: entered allmulticast mode [ 1547.274217][T10566] macvtap1: entered allmulticast mode [ 1547.337741][T10566] bond11: (slave bridge7): making interface the new active one [ 1547.337770][T10566] bridge7: entered promiscuous mode [ 1547.344226][T10566] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 1547.369278][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1547.506274][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1547.633215][T10579] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1547.633255][T10579] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1547.633297][T10579] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1547.753781][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8424'. [ 1547.896848][T10600] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8429'. [ 1547.902742][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 1547.903531][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 1548.141745][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8433'. [ 1548.229809][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8434'. [ 1548.240640][T10611] FAULT_INJECTION: forcing a failure. [ 1548.240640][T10611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.240735][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.2.8434 Not tainted syzkaller #0 PREEMPT(full) [ 1548.240794][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1548.240824][T10611] Call Trace: [ 1548.240850][T10611] [ 1548.240870][T10611] dump_stack_lvl+0xe8/0x150 [ 1548.240969][T10611] should_fail_ex+0x410/0x560 [ 1548.241082][T10611] _copy_from_user+0x2d/0xb0 [ 1548.241163][T10611] ___sys_sendmsg+0x1c6/0x360 [ 1548.241219][T10611] ? __lock_acquire+0x747/0x2de0 [ 1548.241292][T10611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1548.241422][T10611] ? __fget_files+0x2a/0x420 [ 1548.241497][T10611] ? __fget_files+0x3a2/0x420 [ 1548.241611][T10611] __x64_sys_sendmsg+0x1b1/0x290 [ 1548.241675][T10611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1548.241782][T10611] do_syscall_64+0x166/0x520 [ 1548.241843][T10611] ? trace_irq_disable+0x3b/0x140 [ 1548.241912][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.241968][T10611] ? clear_bhb_loop+0x70/0xc0 [ 1548.242033][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.242097][T10611] RIP: 0033:0x7effb1d9e1d9 [ 1548.242143][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.242189][T10611] RSP: 002b:00007effb2cb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1548.242253][T10611] RAX: ffffffffffffffda RBX: 00007effb2025fa0 RCX: 00007effb1d9e1d9 [ 1548.242288][T10611] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1548.242322][T10611] RBP: 00007effb2cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.242356][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.242396][T10611] R13: 00007effb2026038 R14: 00007effb2025fa0 R15: 00007fff8ecbb068 [ 1548.242479][T10611] [ 1548.331334][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8435'. [ 1548.486526][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1548.544158][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8436'. [ 1548.650371][T10628] batadv_slave_1: entered promiscuous mode [ 1548.665932][T10628] batadv_slave_1: left promiscuous mode [ 1549.236883][T10653] netlink: 'syz.4.8449': attribute type 1 has an invalid length. [ 1549.310460][T10653] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1549.854234][T10695] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1550.022395][T10699] bond9: option primary_reselect: invalid value (6) [ 1550.024141][T10699] bond9 (unregistering): Released all slaves [ 1550.410461][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1550.442623][T10724] tipc: Enabled bearer , priority 0 [ 1550.443298][T10724] syzkaller0: entered promiscuous mode [ 1550.443319][T10724] syzkaller0: entered allmulticast mode [ 1550.468896][T10724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1550.537129][T10724] tipc: Resetting bearer [ 1550.588670][T10729] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1550.611863][T10723] tipc: Resetting bearer [ 1550.720304][T10723] tipc: Disabling bearer [ 1551.235050][T10763] netlink: 'syz.5.8476': attribute type 25 has an invalid length. [ 1551.283644][ T2570] net_ratelimit: 30 callbacks suppressed [ 1551.283668][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.426148][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.536653][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.646504][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.757093][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.866197][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1551.976462][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1552.120144][T10797] bond6: (slave bond0): Releasing active interface [ 1552.170019][T10797] bridge_slave_0: left allmulticast mode [ 1552.170048][T10797] bridge_slave_0: left promiscuous mode [ 1552.170267][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.236725][T10797] bridge_slave_1: left allmulticast mode [ 1552.236755][T10797] bridge_slave_1: left promiscuous mode [ 1552.236992][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.283499][T10797] bond0: (slave bond_slave_0): Releasing backup interface [ 1552.305657][T10797] bond0: (slave bond_slave_1): Releasing backup interface [ 1552.315524][T10805] __nla_validate_parse: 16 callbacks suppressed [ 1552.315570][T10805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1552.345139][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1552.383132][T10797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1552.410539][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1552.414934][T10797] xt_l2tp: unknown flags: e7 [ 1552.453857][T10793] tipc: Enabling of bearer rejected, failed to enable media [ 1552.517623][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1552.645507][T10815] tipc: Cannot configure node identity twice [ 1552.670773][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8487'. [ 1552.761605][T10828] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8492'. [ 1552.849815][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1552.849852][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1552.849870][T10833] netlink: 'syz.0.8493': attribute type 4 has an invalid length. [ 1552.882547][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1553.167695][T10851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8498'. [ 1553.287133][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 1553.804797][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1553.805302][T10881] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 1553.952203][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.018386][T10890] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8505'. [ 1554.632326][T10909] netlink: 'syz.1.8510': attribute type 1 has an invalid length. [ 1554.806404][T10901] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1555.386414][T10944] syzkaller1: entered promiscuous mode [ 1555.386439][T10944] syzkaller1: entered allmulticast mode [ 1555.570100][T10959] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 1555.776745][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.777141][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.777460][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.778461][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.779961][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.780287][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.780584][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.848937][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.849316][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1555.849631][T10970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1556.203496][T10992] netlink: 'syz.0.8537': attribute type 1 has an invalid length. [ 1556.356636][T25231] net_ratelimit: 32 callbacks suppressed [ 1556.356658][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1556.506184][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1556.616121][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1556.728289][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1556.836461][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1556.948010][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1557.058257][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1557.167459][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1557.263458][T11046] netlink: 'syz.5.8547': attribute type 1 has an invalid length. [ 1557.276857][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1557.396309][T15358] bond1: (slave bridge1): failed to get link speed/duplex [ 1557.445272][T11054] tc_dump_action: action bad kind [ 1557.710397][T11060] dummy0 speed is unknown, defaulting to 1000 [ 1557.712401][T11060] lo speed is unknown, defaulting to 1000 [ 1557.863927][T11074] __nla_validate_parse: 17 callbacks suppressed [ 1557.863949][T11074] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8558'. [ 1558.238903][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1558.688186][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8563'. [ 1558.726135][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1559.099646][T11115] syzkaller0: entered promiscuous mode [ 1559.099672][T11115] syzkaller0: entered allmulticast mode [ 1559.170459][T11115] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8568'. [ 1559.529724][T11133] FAULT_INJECTION: forcing a failure. [ 1559.529724][T11133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.529759][T11133] CPU: 0 UID: 0 PID: 11133 Comm: syz.2.8572 Not tainted syzkaller #0 PREEMPT(full) [ 1559.529782][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1559.529795][T11133] Call Trace: [ 1559.529804][T11133] [ 1559.529814][T11133] dump_stack_lvl+0xe8/0x150 [ 1559.529848][T11133] should_fail_ex+0x410/0x560 [ 1559.529881][T11133] _copy_from_user+0x2d/0xb0 [ 1559.529912][T11133] __sys_bpf+0x2e7/0xd90 [ 1559.529967][T11133] ? __pfx___sys_bpf+0x10/0x10 [ 1559.530007][T11133] ? __fget_files+0x2a/0x420 [ 1559.530061][T11133] ? ksys_write+0x242/0x270 [ 1559.530088][T11133] ? __pfx_ksys_write+0x10/0x10 [ 1559.530117][T11133] __x64_sys_bpf+0xba/0xd0 [ 1559.530145][T11133] do_syscall_64+0x166/0x520 [ 1559.530175][T11133] ? trace_irq_disable+0x3b/0x140 [ 1559.530200][T11133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.530224][T11133] ? clear_bhb_loop+0x70/0xc0 [ 1559.530252][T11133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.530274][T11133] RIP: 0033:0x7effb1d9e1d9 [ 1559.530306][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.530325][T11133] RSP: 002b:00007effb2cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1559.530351][T11133] RAX: ffffffffffffffda RBX: 00007effb2025fa0 RCX: 00007effb1d9e1d9 [ 1559.530368][T11133] RDX: 000000000000000c RSI: 0000200000000a00 RDI: 000000000000000a [ 1559.530383][T11133] RBP: 00007effb2cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.530398][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.530412][T11133] R13: 00007effb2026038 R14: 00007effb2025fa0 R15: 00007fff8ecbb068 [ 1559.530448][T11133] [ 1560.662038][T11147] ip6gre1: entered promiscuous mode [ 1560.935294][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8581'. [ 1560.935330][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8581'. [ 1561.079242][T11163] syzkaller0: entered promiscuous mode [ 1561.079268][T11163] syzkaller0: entered allmulticast mode [ 1561.541526][T11182] syzkaller1: entered promiscuous mode [ 1561.541549][T11182] syzkaller1: entered allmulticast mode [ 1561.547397][ T2574] net_ratelimit: 18 callbacks suppressed [ 1561.547416][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1564.156125][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1564.229964][T11211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1564.268224][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1564.358371][T11223] netlink: 852 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1564.358617][T11224] netlink: 852 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1564.420576][T11219] netlink: 'syz.5.8595': attribute type 22 has an invalid length. [ 1564.420600][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8595'. [ 1564.457164][T11219] netlink: 'syz.5.8595': attribute type 22 has an invalid length. [ 1564.457187][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8595'. [ 1564.598016][ T3638] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1564.600113][T11231] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1564.623924][T11238] syzkaller0: entered promiscuous mode [ 1564.623983][T11238] syzkaller0: entered allmulticast mode [ 1564.718710][T15340] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.718765][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1564.718800][T15340] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.718839][T15340] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.718876][T15340] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.882702][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1564.996223][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1565.106379][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1565.236247][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1565.346721][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1565.456920][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1565.566817][T11263] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8609'. [ 1565.631791][T11285] FAULT_INJECTION: forcing a failure. [ 1565.631791][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.631824][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.4.8614 Not tainted syzkaller #0 PREEMPT(full) [ 1565.631847][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1565.631861][T11285] Call Trace: [ 1565.631870][T11285] [ 1565.631879][T11285] dump_stack_lvl+0xe8/0x150 [ 1565.631915][T11285] should_fail_ex+0x410/0x560 [ 1565.631948][T11285] should_failslab+0xa8/0x100 [ 1565.631979][T11285] __kmalloc_noprof+0xfe/0x720 [ 1565.632001][T11285] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1565.632023][T11285] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1565.632054][T11285] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1565.632085][T11285] genl_family_rcv_msg_doit+0xda/0x340 [ 1565.632114][T11285] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1565.632140][T11285] ? __pfx_genl_get_cmd+0x10/0x10 [ 1565.632171][T11285] ? __dev_queue_xmit+0x29b/0x3920 [ 1565.632302][T11285] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1565.632355][T11285] ? __pfx_ethnl_default_start+0x10/0x10 [ 1565.632385][T11285] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1565.632414][T11285] ? __pfx_ethnl_default_done+0x10/0x10 [ 1565.632458][T11285] genl_rcv_msg+0x614/0x7a0 [ 1565.632486][T11285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.632507][T11285] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1565.632559][T11285] netlink_rcv_skb+0x226/0x4a0 [ 1565.632589][T11285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.632612][T11285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1565.632655][T11285] ? down_read+0x2be/0x330 [ 1565.632690][T11285] genl_rcv+0x28/0x40 [ 1565.632708][T11285] netlink_unicast+0x7bd/0x940 [ 1565.632745][T11285] netlink_sendmsg+0x813/0xb40 [ 1565.632783][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.632820][T11285] ? apparmor_socket_sendmsg+0x98/0x360 [ 1565.632849][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.632876][T11285] sock_sendmsg_nosec+0x14e/0x190 [ 1565.632908][T11285] ____sys_sendmsg+0x54e/0x850 [ 1565.632936][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1565.632968][T11285] ? import_iovec+0x73/0xa0 [ 1565.633003][T11285] ___sys_sendmsg+0x2a5/0x360 [ 1565.633024][T11285] ? __lock_acquire+0x747/0x2de0 [ 1565.633050][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 1565.633110][T11285] ? __fget_files+0x2a/0x420 [ 1565.633140][T11285] ? __fget_files+0x3a2/0x420 [ 1565.633182][T11285] __x64_sys_sendmsg+0x1b1/0x290 [ 1565.633208][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1565.633252][T11285] do_syscall_64+0x166/0x520 [ 1565.633279][T11285] ? trace_irq_disable+0x3b/0x140 [ 1565.633301][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.633323][T11285] ? clear_bhb_loop+0x70/0xc0 [ 1565.633349][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.633371][T11285] RIP: 0033:0x7f41d039e1d9 [ 1565.633390][T11285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.633408][T11285] RSP: 002b:00007f41d1210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1565.633431][T11285] RAX: ffffffffffffffda RBX: 00007f41d0625fa0 RCX: 00007f41d039e1d9 [ 1565.633447][T11285] RDX: 0000000000000014 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1565.633461][T11285] RBP: 00007f41d1210090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.633474][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.633487][T11285] R13: 00007f41d0626038 R14: 00007f41d0625fa0 R15: 00007ffdb075c1b8 [ 1565.633529][T11285] [ 1565.912559][T11260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1565.943163][T11263] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1566.011512][T11266] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1566.078384][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8617'. [ 1566.220781][T11297] netlink: 'syz.1.8618': attribute type 4 has an invalid length. [ 1566.220804][T11297] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1566.269118][T11297] .`: renamed from bond0 [ 1566.361085][T11303] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8621'. [ 1566.736411][T13383] net_ratelimit: 10 callbacks suppressed [ 1566.736433][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1566.846149][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1566.960452][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.040302][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1567.078417][ T31] audit: type=1800 audit(1791702017.352:40): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8623" name="memory.events" dev="tmpfs" ino=2801 res=0 errno=0 [ 1567.118174][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.230850][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.338301][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.400759][T11352] x_tables: duplicate underflow at hook 2 [ 1567.451023][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.478594][T11352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.483685][T11352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.560597][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.679397][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.788065][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1567.874509][T11357] netlink: 'syz.2.8633': attribute type 212 has an invalid length. [ 1568.716960][T11408] netlink: 'syz.5.8651': attribute type 16 has an invalid length. [ 1568.716986][T11408] netlink: 'syz.5.8651': attribute type 17 has an invalid length. [ 1568.742625][ T3652] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1568.790215][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.793051][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.816788][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.889417][T11408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.896381][T11408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1568.896406][T11408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1568.929887][T11408] veth1_vlan: left promiscuous mode [ 1568.937431][T11408] veth0_vlan: left promiscuous mode [ 1568.949217][T11408] veth0_vlan: entered promiscuous mode [ 1568.981003][T11408] veth1_vlan: entered promiscuous mode [ 1568.999552][T11408] veth1_macvtap: left promiscuous mode [ 1569.001841][T11408] veth0_macvtap: left promiscuous mode [ 1569.005385][T11408] veth0_macvtap: entered promiscuous mode [ 1569.030792][T11408] veth1_macvtap: entered promiscuous mode [ 1569.125781][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1569.145735][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1569.164144][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1569.185318][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1569.200600][T11408] ip6tnl1: left allmulticast mode [ 1569.227892][T11724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1569.334049][T11408] geneve2: left promiscuous mode [ 1569.334066][T11408] geneve2: left allmulticast mode [ 1569.335811][T11408] ip6gre1: left promiscuous mode [ 1569.355298][ T3652] s`z1: Port: 1 Link ACTIVE [ 1569.364667][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.364841][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.384098][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.384204][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.526684][T25231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.526718][T25231] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1569.527039][T25231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.527069][T25231] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1569.527105][T25231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.527132][T25231] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1569.527167][T25231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.527203][T25231] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1569.880418][T11459] __nla_validate_parse: 10 callbacks suppressed [ 1569.880440][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8662'. [ 1570.083898][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1570.084856][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1570.133368][T11473] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8667'. [ 1570.252366][ T3652] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1570.454352][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8674'. [ 1570.834560][T11505] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1570.895832][T11505] bond8 (unregistering): Released all slaves [ 1571.020685][T11506] ipvlan2: entered promiscuous mode [ 1571.034239][T11506] team0: Device ipvlan2 failed to register rx_handler [ 1571.219651][T11527] nbd6: detected capacity change from 0 to 32 [ 1571.221176][T21577] block nbd6: Receive control failed (result -22) [ 1571.243391][ T1713] block nbd6: Dead connection, failed to find a fallback [ 1571.243417][ T1713] block nbd6: shutting down sockets [ 1571.243433][ T1713] blk_print_req_error: 92 callbacks suppressed [ 1571.243446][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.243475][ T1713] buffer_io_error: 138 callbacks suppressed [ 1571.243487][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.247598][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.247687][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.248291][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.248371][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.248729][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.248794][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.249128][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.249191][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.249543][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.249683][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.250154][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.250224][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.250569][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.250640][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.250756][T11327] ldm_validate_partition_table(): Disk read failed. [ 1571.252846][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.252919][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.253222][ T1713] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.253296][ T1713] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1571.254067][T11327] Dev nbd6: unable to read RDB block 0 [ 1571.261633][T11327] nbd6: unable to read partition table [ 1571.493272][T11327] ldm_validate_partition_table(): Disk read failed. [ 1571.494031][T11327] Dev nbd6: unable to read RDB block 0 [ 1571.495130][T11327] nbd6: unable to read partition table [ 1571.976274][T25229] net_ratelimit: 25 callbacks suppressed [ 1571.976295][T25229] bond1: (slave bridge1): failed to get link speed/duplex [ 1571.992470][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1571.998896][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1572.080333][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8687'. [ 1572.116457][ T2567] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.248395][ T2574] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.356189][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.359317][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8693'. [ 1572.486294][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.597099][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.706493][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.787465][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8700'. [ 1572.790435][T21577] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1572.816530][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1572.928150][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1573.056456][T15340] bond1: (slave bridge1): failed to get link speed/duplex [ 1573.278185][T11626] tipc: Enabling of bearer rejected, failed to enable media [ 1573.467141][T11637] netlink: 'syz.4.8710': attribute type 3 has an invalid length. [ 1573.467167][T11637] netlink: 'syz.4.8710': attribute type 2 has an invalid length. [ 1573.613665][T11649] netlink: 'syz.0.8713': attribute type 16 has an invalid length. [ 1574.010373][T11673] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1574.419535][T11689] netlink: 'syz.0.8728': attribute type 1 has an invalid length. [ 1574.768522][T11708] netlink: 'syz.5.8734': attribute type 3 has an invalid length. [ 1574.804630][T11708] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1574.817626][T11708] batman_adv: batadv0: Adding interface: macvlan2 [ 1574.817646][T11708] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.817679][T11708] batman_adv: batadv0: Interface activated: macvlan2 [ 1574.887544][T11711] __nla_validate_parse: 8 callbacks suppressed [ 1574.887565][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8733'. [ 1575.329587][T11734] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1575.365164][T11742] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1575.895004][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1575.895035][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1575.924398][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1575.945693][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8744'. [ 1576.429394][T11786] vxcan0: entered allmulticast mode [ 1576.493685][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8749'. [ 1576.859863][T11802] netlink: 'syz.4.8758': attribute type 11 has an invalid length. [ 1576.878384][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8758'. [ 1576.959453][T11807] xt_MASQUERADE: bad rangesize 20224 [ 1577.049204][T25231] net_ratelimit: 31 callbacks suppressed [ 1577.049225][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.156441][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.268605][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.387554][T25231] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.496479][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.646158][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.667434][T11841] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8767'. [ 1577.721698][T11845] netlink: 'syz.0.8768': attribute type 4 has an invalid length. [ 1577.769887][T11845] netlink: 'syz.0.8768': attribute type 4 has an invalid length. [ 1577.818943][ T2571] bond1: (slave bridge1): failed to get link speed/duplex [ 1577.926316][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1577.929980][T25229] bond1: (slave bridge1): failed to get link speed/duplex [ 1578.036105][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1578.146381][ T2570] bond1: (slave bridge1): failed to get link speed/duplex [ 1578.780554][T11907] ip6tnl2: entered allmulticast mode [ 1578.782814][ T2571] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1578.783061][ T2571] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1578.807203][ T989] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1579.172534][ T989] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1579.269030][T11929] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1579.414822][T11930] dummy0 speed is unknown, defaulting to 1000 [ 1579.436941][T11930] lo speed is unknown, defaulting to 1000 [ 1579.686672][ T3652] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1579.812295][T11947] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 1580.097011][T11958] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 1580.273124][T11962] batman_adv: batadv0: Adding interface: syzkaller0 [ 1580.273146][T11962] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.275795][T11962] batman_adv: batadv0: Interface activated: syzkaller0 [ 1580.308816][T11964] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1580.374882][T11958] ip_vti0: left promiscuous mode [ 1580.415025][T11958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.449024][T11968] __nla_validate_parse: 73 callbacks suppressed [ 1580.449046][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1580.869388][T11958] bond1: left promiscuous mode [ 1580.869413][T11958] bridge1: left promiscuous mode [ 1580.869589][T11958] bridge2: left promiscuous mode [ 1580.869806][T11958] bridge3: left promiscuous mode [ 1580.904963][T11958] ip6erspan0: left promiscuous mode [ 1580.939524][T11958] ip6gre1: left promiscuous mode [ 1580.941760][T11958] bond3: left promiscuous mode [ 1580.941781][T11958] bond4: left promiscuous mode [ 1580.958729][T11724] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1580.984058][T11958] ip6gre2: left promiscuous mode [ 1581.003811][T11958] virt_wifi0: entered promiscuous mode [ 1581.003827][T11958] virt_wifi0: entered allmulticast mode [ 1581.003992][T11958] macsec2: left promiscuous mode [ 1581.022992][T11958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.047194][T11724] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1581.076554][T11724] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1581.134643][T11956] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1581.205496][T11956] batman_adv: batadv0: Removing interface: syzkaller0 [ 1581.277090][T11724] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1581.833685][T12014] tipc: Enabling of bearer rejected, failed to enable media [ 1582.166863][T12030] siw: device registration error -23 [ 1582.186450][T13383] net_ratelimit: 45 callbacks suppressed [ 1582.186469][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1582.297217][T21303] bond1: (slave bridge1): failed to get link speed/duplex [ 1582.345113][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8812'. [ 1582.449163][ T2565] bond1: (slave bridge1): failed to get link speed/duplex [ 1582.603919][T12051] netlink: 'syz.1.8816': attribute type 8 has an invalid length. [ 1582.603944][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8816'. [ 1582.688425][T13383] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.688462][T13383] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1582.694093][T12040] dummy0 speed is unknown, defaulting to 1000 [ 1582.698244][T13386] bond1: (slave bridge1): failed to get link speed/duplex [ 1582.751690][T12040] lo speed is unknown, defaulting to 1000 [ 1582.807510][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1582.966167][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1582.979978][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1583.086986][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1583.196778][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1583.198809][T12070] syzkaller0: entered promiscuous mode [ 1583.198829][T12070] syzkaller0: entered allmulticast mode [ 1583.306481][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1583.418316][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1583.514297][T12078] bond0: option fail_over_mac: invalid value (127) [ 1583.561854][T12078] bond0 (unregistering): Released all slaves [ 1583.702417][T12085] netlink: 'syz.4.8824': attribute type 21 has an invalid length. [ 1583.851211][T12085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8824'. [ 1583.851256][T12085] netlink: 'syz.4.8824': attribute type 1 has an invalid length. [ 1584.000609][T12078] bond0: option fail_over_mac: invalid value (127) [ 1584.080968][T12096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1584.913009][T12078] bond0 (unregistering): Released all slaves [ 1585.035480][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8828'. [ 1586.172601][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8829'. [ 1586.246972][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1586.300798][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1586.404562][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8836'. [ 1586.425023][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8836'. [ 1586.445481][T12129] netlink: 'syz.4.8834': attribute type 10 has an invalid length. [ 1586.445745][T12129] syz_tun: entered promiscuous mode [ 1586.511661][T12129] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1586.640571][T12137] warn_alloc: 2 callbacks suppressed [ 1586.640983][T12137] syz.4.8837: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1586.641121][T12137] CPU: 0 UID: 0 PID: 12137 Comm: syz.4.8837 Not tainted syzkaller #0 PREEMPT(full) [ 1586.641145][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1586.641170][T12137] Call Trace: [ 1586.641178][T12137] [ 1586.641187][T12137] dump_stack_lvl+0xe8/0x150 [ 1586.641239][T12137] warn_alloc+0x24d/0x270 [ 1586.641265][T12137] ? kasan_save_track+0x4f/0x80 [ 1586.641290][T12137] ? kasan_save_track+0x3e/0x80 [ 1586.641317][T12137] ? __pfx_warn_alloc+0x10/0x10 [ 1586.641337][T12137] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1586.641358][T12137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.641399][T12137] __vmalloc_node_range_noprof+0x127/0x1540 [ 1586.641442][T12137] ? rcu_is_watching+0x16/0xb0 [ 1586.641475][T12137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1586.641497][T12137] ? __kmalloc_cache_noprof+0x321/0x600 [ 1586.641522][T12137] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1586.641544][T12137] ? xskq_create+0x56/0x220 [ 1586.641655][T12137] xskq_create+0x148/0x220 [ 1586.641682][T12137] ? xsk_init_queue+0x8a/0xe0 [ 1586.641709][T12137] xsk_init_queue+0x8a/0xe0 [ 1586.641738][T12137] xsk_setsockopt+0x52a/0x960 [ 1586.641763][T12137] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1586.641789][T12137] ? __pfx_aa_sk_perm+0x10/0x10 [ 1586.641829][T12137] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1586.641859][T12137] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1586.641884][T12137] do_sock_setsockopt+0x17c/0x1b0 [ 1586.641923][T12137] __x64_sys_setsockopt+0x13d/0x1b0 [ 1586.641977][T12137] do_syscall_64+0x166/0x520 [ 1586.642008][T12137] ? trace_irq_disable+0x3b/0x140 [ 1586.642032][T12137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.642056][T12137] ? clear_bhb_loop+0x70/0xc0 [ 1586.642085][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.642108][T12137] RIP: 0033:0x7f41d039e1d9 [ 1586.642129][T12137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.642149][T12137] RSP: 002b:00007f41d1210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1586.642173][T12137] RAX: ffffffffffffffda RBX: 00007f41d0625fa0 RCX: 00007f41d039e1d9 [ 1586.642190][T12137] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1586.642204][T12137] RBP: 00007f41d0435888 R08: 0000000000000004 R09: 0000000000000000 [ 1586.642219][T12137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.642234][T12137] R13: 00007f41d0626038 R14: 00007f41d0625fa0 R15: 00007ffdb075c1b8 [ 1586.642271][T12137] [ 1586.643157][T12137] Mem-Info: [ 1586.643171][T12137] active_anon:8786 inactive_anon:0 isolated_anon:0 [ 1586.643171][T12137] active_file:19 inactive_file:44022 isolated_file:0 [ 1586.643171][T12137] unevictable:0 dirty:155 writeback:0 [ 1586.643171][T12137] slab_reclaimable:12950 slab_unreclaimable:134202 [ 1586.643171][T12137] mapped:33748 shmem:3537 pagetables:3490 [ 1586.643171][T12137] sec_pagetables:0 bounce:0 [ 1586.643171][T12137] kernel_misc_reclaimable:0 [ 1586.643171][T12137] free:1225525 free_pcp:9346 free_cma:0 [ 1586.643225][T12137] Node 0 active_anon:35144kB inactive_anon:0kB active_file:76kB inactive_file:175888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134992kB dirty:620kB writeback:0kB shmem:14148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18272kB pagetables:13836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1586.643279][T12137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1586.643331][T12137] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.643389][T12137] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1586.643429][T12137] Node 0 DMA32 free:943972kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35144kB inactive_anon:0kB active_file:76kB inactive_file:175888kB unevictable:0kB writepending:620kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:37384kB local_pcp:21092kB free_cma:0kB [ 1586.643492][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 1586.643530][T12137] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.643587][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 1586.643625][T12137] Node 1 Normal free:3942768kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.643711][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 1586.643750][T12137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1586.643892][T12137] Node 0 DMA32: 2383*4kB (UME) 771*8kB (UME) 657*16kB (UME) 814*32kB (UM) 193*64kB (UME) 570*128kB (UME) 468*256kB (UME) 213*512kB (UM) 56*1024kB (UME) 4*2048kB (UE) 125*4096kB (UM) = 943972kB [ 1586.644083][T12137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1586.644193][T12137] Node 1 Normal: 2*4kB (M) 1*8kB (M) 2*16kB (UM) 4*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3942768kB [ 1586.644369][T12137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.644388][T12137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1586.644406][T12137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.644424][T12137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1586.644442][T12137] 47574 total pagecache pages [ 1586.644452][T12137] 0 pages in swap cache [ 1586.644461][T12137] Free swap = 124996kB [ 1586.644470][T12137] Total swap = 124996kB [ 1586.644480][T12137] 2097051 pages RAM [ 1586.644488][T12137] 0 pages HighMem/MovableOnly [ 1586.644497][T12137] 433508 pages reserved [ 1586.644505][T12137] 0 pages cma reserved [ 1586.745226][T12141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1587.259120][T25226] net_ratelimit: 9 callbacks suppressed [ 1587.259169][T25226] bond1: (slave bridge1): failed to get link speed/duplex [ 1587.360351][ T2565] bond1: (slave bridge1): failed to get link speed/duplex [ 1587.468650][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1587.581362][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1587.601295][T12155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8842'. [ 1587.746701][T21303] bond1: (slave bridge1): failed to get link speed/duplex [ 1587.946392][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1588.012402][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1588.024226][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1588.033237][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1588.043267][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1588.043974][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1588.440521][T12107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1588.875728][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8848'. [ 1588.944688][T12186] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1589.446172][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1590.095748][ T52] Bluetooth: hci2: command tx timeout [ 1591.208088][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1591.366143][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1591.436106][T21303] bond1: (slave bridge1): failed to get link speed/duplex [ 1591.438632][T12217] syzkaller0: entered promiscuous mode [ 1591.438654][T12217] syzkaller0: entered allmulticast mode [ 1591.481392][T12217] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1591.696272][T13383] bond1: (slave bridge1): failed to get link speed/duplex [ 1591.939024][T12241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1591.939055][T12241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1591.994609][T12250] netlink: 'syz.5.8861': attribute type 10 has an invalid length. [ 1592.005284][T12244] siw: device registration error -23 [ 1592.095583][T12241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1592.117620][T12241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1592.125540][T12241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1592.132323][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8861'. [ 1592.163840][T21303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.163934][T21303] bridge0: port 2(bridge_slave_1) entered listening state [ 1592.166973][ T52] Bluetooth: hci2: command tx timeout [ 1592.265299][T12250] team0 (unregistering): Port device team_slave_0 removed [ 1592.329535][T12250] team0 (unregistering): Port device team_slave_1 removed [ 1592.459139][ T2565] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1592.483649][T12168] dummy0 speed is unknown, defaulting to 1000 [ 1592.491876][T12168] lo speed is unknown, defaulting to 1000 [ 1592.498711][T15330] net_ratelimit: 3 callbacks suppressed [ 1592.498729][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1592.521047][ T2565] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1592.521109][ T2565] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1592.523782][ T2565] bond7: active interface up! [ 1592.525746][T12230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.606238][ T2565] bond1: (slave bridge1): failed to get link speed/duplex [ 1592.716468][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1592.827048][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1592.892146][T12279] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8871'. [ 1592.932557][T12279] bridge0: port 3(veth0) entered blocking state [ 1592.932653][T12279] bridge0: port 3(veth0) entered disabled state [ 1592.932857][T12279] veth0: entered allmulticast mode [ 1592.963663][T12279] veth0: entered promiscuous mode [ 1592.964359][T12279] bridge0: port 3(veth0) entered blocking state [ 1592.964470][T12279] bridge0: port 3(veth0) entered forwarding state [ 1592.977718][T15356] bond1: (slave bridge1): failed to get link speed/duplex [ 1593.086624][T15356] bond1: (slave bridge1): failed to get link speed/duplex [ 1593.197113][ T2568] bond1: (slave bridge1): failed to get link speed/duplex [ 1593.307216][ T2565] bond1: (slave bridge1): failed to get link speed/duplex [ 1593.416263][ T2565] bond1: (slave bridge1): failed to get link speed/duplex [ 1593.494493][T12307] siw: device registration error -23 [ 1593.606817][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 1593.735374][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.747022][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.751565][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.753320][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.771448][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.808577][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1593.821576][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1594.080210][T12168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.080374][T12168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.080491][T12168] bridge_slave_0: entered allmulticast mode [ 1594.082272][T12168] bridge_slave_0: entered promiscuous mode [ 1594.090406][T12168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.090565][T12168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.090686][T12168] bridge_slave_1: entered allmulticast mode [ 1594.094913][T12168] bridge_slave_1: entered promiscuous mode [ 1594.215354][T12329] tc action pedit offset must be on 32 bit boundaries [ 1594.247019][ T52] Bluetooth: hci2: command tx timeout [ 1594.298027][T12168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.358340][T12168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.574765][T12168] team0: Port device team_slave_0 added [ 1594.589117][T12168] team0: Port device team_slave_1 added [ 1594.691778][T12360] netlink: 'syz.4.8884': attribute type 5 has an invalid length. [ 1594.791505][T12168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.791524][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.791551][T12168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.827861][T12168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.827900][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.827965][T12168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.916465][T12362] netlink: 'syz.2.8885': attribute type 1 has an invalid length. [ 1594.979263][T12362] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1595.034184][T12362] bond8: (slave veth0_to_bond): making interface the new active one [ 1595.050969][T12362] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1595.053541][T12366] netlink: 'syz.4.8886': attribute type 1 has an invalid length. [ 1595.134480][T12168] hsr_slave_0: entered promiscuous mode [ 1595.147809][T12168] hsr_slave_1: entered promiscuous mode [ 1595.148760][T12168] debugfs: 'hsr0' already exists in 'hsr' [ 1595.148780][T12168] Cannot create hsr debugfs directory [ 1595.186647][T12363] bond8: entered promiscuous mode [ 1595.186665][T12363] veth0_to_bond: entered promiscuous mode [ 1595.186839][T12363] bond8: entered allmulticast mode [ 1595.186851][T12363] veth0_to_bond: entered allmulticast mode [ 1595.270484][T12362] macvlan0: entered promiscuous mode [ 1595.270526][T12362] macvlan0: entered allmulticast mode [ 1595.275757][T12362] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1595.311385][T12362] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1595.371844][T12378] vxcan1: tx drop: invalid sa for name 0x0000010000000000 [ 1595.381525][T12378] netlink: 'syz.5.8888': attribute type 219 has an invalid length. [ 1595.721275][T12168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.721990][T12168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1595.756433][T12395] netlink: 'syz.1.8892': attribute type 15 has an invalid length. [ 1595.877103][T12168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.877162][T12168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1595.999636][T12168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.999669][T12168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1596.232952][T12412] netlink: 'syz.1.8897': attribute type 1 has an invalid length. [ 1596.306813][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.326675][ T52] Bluetooth: hci2: command tx timeout [ 1596.335865][T12416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.351910][T12416] bond0: (slave geneve4): making interface the new active one [ 1596.352639][T12416] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 1596.447546][T21298] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1596.449378][T12168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1596.475512][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1596.480463][ T2568] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1596.493667][T13383] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1596.505300][T12168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1596.529528][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1596.533494][T12418] batadv_slave_0: entered promiscuous mode [ 1596.566549][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1596.580962][T12418] ipvlan2: entered promiscuous mode [ 1596.649361][T12168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1596.663778][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1596.712839][T12168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1596.738248][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1596.835560][T12419] batadv_slave_0: left promiscuous mode [ 1596.938438][T13383] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1596.957425][T12168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.991870][T12168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.011992][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.012094][T15356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.045755][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.045853][T15356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.271129][T12168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1597.461480][T12462] __nla_validate_parse: 61 callbacks suppressed [ 1597.461505][T12462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8905'. [ 1597.547748][ T2573] net_ratelimit: 21 callbacks suppressed [ 1597.547770][ T2573] bond1: (slave bridge1): failed to get link speed/duplex [ 1597.676906][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1597.679618][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8908'. [ 1597.733046][T12481] netlink: 'syz.1.8909': attribute type 2 has an invalid length. [ 1597.857838][T15330] bond1: (slave bridge1): failed to get link speed/duplex [ 1597.898338][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8911'. [ 1597.920114][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8911'. [ 1597.967662][T15356] bond1: (slave bridge1): failed to get link speed/duplex [ 1598.076861][T21298] bond1: (slave bridge1): failed to get link speed/duplex [ 1598.127406][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1598.172470][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8913'. [ 1598.226522][T15356] bond1: (slave bridge1): failed to get link speed/duplex [ 1598.344723][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1598.344745][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1598.946007][T12506] virt_wifi0: left allmulticast mode [ 1599.074687][T12168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.127306][ T2565] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.127973][ T2565] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.128016][ T2565] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.128055][ T2565] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.214267][T12529] netlink: 'syz.4.8919': attribute type 1 has an invalid length. [ 1599.214291][T12529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1599.335510][T12168] veth0_vlan: entered promiscuous mode [ 1599.378632][T12168] veth1_vlan: entered promiscuous mode [ 1599.527525][T12168] veth0_macvtap: entered promiscuous mode [ 1599.551506][T12549] openvswitch: netlink: Key type 2054 is out of range max 32 [ 1599.553605][T12168] veth1_macvtap: entered promiscuous mode [ 1599.606031][T12168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.644666][T12168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.707932][ T2565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.709245][ T2565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.709300][ T2565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.709353][ T2565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.866572][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8924'. [ 1600.134087][T15356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.134111][T15356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.220622][T21298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.220646][T21298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.473855][T12579] netlink: 'syz.1.8931': attribute type 2 has an invalid length. [ 1600.498573][T12579] ¿: entered promiscuous mode [ 1601.171935][ T52] Bluetooth: hci5: connection err: -111 [ 1601.729123][T12631] bond9: entered promiscuous mode [ 1601.729146][T12631] bond9: entered allmulticast mode [ 1601.939569][T12647] bridge_slave_0: left allmulticast mode [ 1601.939594][T12647] bridge_slave_0: left promiscuous mode [ 1601.939774][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.020649][T12647] bridge_slave_1: left allmulticast mode [ 1602.020676][T12647] bridge_slave_1: left promiscuous mode [ 1602.020965][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.083291][T12647] bond0: (slave bond_slave_0): Releasing backup interface [ 1602.109695][T12647] bond0: (slave bond_slave_1): Releasing backup interface [ 1602.142140][T12647] team0: Port device team_slave_0 removed [ 1602.160453][T21577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1602.163185][T12647] team0: Port device team_slave_1 removed [ 1602.165642][T21577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1602.169681][T21577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1602.181658][T21577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1602.183170][T21577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1602.217395][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.217445][T12647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.220912][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.220931][T12647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.268014][T12661] sctp: [Deprecated]: syz.1.8949 (pid 12661) Use of int in max_burst socket option deprecated. [ 1602.268014][T12661] Use struct sctp_assoc_value instead [ 1602.272792][T12647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1602.748781][T13383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.748818][T13383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.748856][T13383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1602.864869][T12672] IPVS: Unknown mcast interface: pim6reg0 [ 1602.985189][T12682] netlink: 'syz.5.8951': attribute type 2 has an invalid length. [ 1603.011742][T13383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1603.011777][T13383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.011802][T13383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1603.070086][T12682] : entered promiscuous mode [ 1603.083738][T12678] syzkaller1: entered promiscuous mode [ 1603.083760][T12678] syzkaller1: entered allmulticast mode [ 1603.269417][T13383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1603.269452][T13383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.269477][T13383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1603.485545][T13383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1603.485585][T13383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.485613][T13383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1603.541871][T12717] ip_tables: iptables: counters copy to user failed while replacing table [ 1603.642333][T12653] dummy0 speed is unknown, defaulting to 1000 [ 1603.652531][T12653] lo speed is unknown, defaulting to 1000 [ 1603.999604][T12735] __nla_validate_parse: 7 callbacks suppressed [ 1603.999625][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8963'. [ 1604.167881][T12735] hsr_slave_1 (unregistering): left promiscuous mode [ 1604.210145][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8968'. [ 1604.260321][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8967'. [ 1604.327285][T21577] Bluetooth: hci3: command tx timeout [ 1604.346065][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8967'. [ 1604.596668][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8969'. [ 1604.633102][T13383] vlan0: left promiscuous mode [ 1604.634440][T13383] bridge0: port 3(vlan0) entered disabled state [ 1604.661472][T13383] bridge_slave_1: left promiscuous mode [ 1604.661708][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.684004][T13383] bridge_slave_0: left promiscuous mode [ 1604.684205][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.190871][T12784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1605.260513][T13383] erspan0 (unregistering): left promiscuous mode [ 1605.290720][T13383] gretap0 (unregistering): left promiscuous mode [ 1605.374000][T13383] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1605.533439][T13383] bond5 (unregistering): (slave macvlan2): Releasing active interface [ 1605.549790][T13383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.550201][T13383] bond_slave_0: left promiscuous mode [ 1605.550323][T13383] bond_slave_0: left allmulticast mode [ 1605.552671][T13383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.553175][T13383] bond_slave_1: left promiscuous mode [ 1605.553377][T13383] bond_slave_1: left allmulticast mode [ 1605.554424][T13383] bond0 (unregistering): Released all slaves [ 1605.612455][T13383] bond1 (unregistering): Released all slaves [ 1605.629391][T13383] bond2 (unregistering): Released all slaves [ 1605.646036][T13383] bond3 (unregistering): Released all slaves [ 1605.663503][T13383] bond4 (unregistering): Released all slaves [ 1605.687834][T13383] bond5 (unregistering): Released all slaves [ 1605.702154][T13383] bond6 (unregistering): Released all slaves [ 1605.718794][T13383] bond7 (unregistering): (slave veth5): Removing an active aggregator [ 1605.719257][T13383] bond7 (unregistering): (slave veth5): Releasing backup interface [ 1605.720744][T13383] bond7 (unregistering): Released all slaves [ 1605.756628][T13383] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1605.756654][T13383] veth0_to_bond: left promiscuous mode [ 1605.756780][T13383] veth0_to_bond: left allmulticast mode [ 1605.758297][T13383] bond8 (unregistering): Released all slaves [ 1605.813813][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8975'. [ 1605.840628][T12771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1605.876878][T12788] syzkaller0: entered promiscuous mode [ 1605.876900][T12788] syzkaller0: entered allmulticast mode [ 1606.114352][T12799] team0 (unregistering): Port device team_slave_0 removed [ 1606.189081][T13383] : left promiscuous mode [ 1606.296602][T12805] x_tables: duplicate underflow at hook 1 [ 1606.315735][T13383] tipc: Left network mode [ 1606.414183][T21577] Bluetooth: hci3: command tx timeout [ 1606.520060][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1606.582519][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1606.582670][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1607.102306][T12853] ip_tables: iptables: counters copy to user failed while replacing table [ 1607.165336][T12851] netlink: 'syz.1.8989': attribute type 3 has an invalid length. [ 1607.350333][T13383] hsr_slave_0: left promiscuous mode [ 1607.350971][T13383] hsr_slave_1: left promiscuous mode [ 1607.351725][T13383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.351741][T13383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.385019][ T1315] aoe: packet could not be sent on veth0_macvtap. consider increasing tx_queue_len [ 1607.483395][T13383] veth1_macvtap: left promiscuous mode [ 1608.489225][T21577] Bluetooth: hci3: command tx timeout [ 1610.578025][ T52] Bluetooth: hci3: command tx timeout [ 1610.609433][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1610.752945][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.753135][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.753273][T12653] bridge_slave_0: entered allmulticast mode [ 1610.777916][T12653] bridge_slave_0: entered promiscuous mode [ 1610.789246][T12653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.789346][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.789523][T12653] bridge_slave_1: entered allmulticast mode [ 1610.791408][T12653] bridge_slave_1: entered promiscuous mode [ 1610.824029][T12901] __nla_validate_parse: 31 callbacks suppressed [ 1610.824047][T12901] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9000'. [ 1610.843992][T12905] netlink: 'syz.1.9002': attribute type 10 has an invalid length. [ 1610.847753][T12901] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9000'. [ 1610.881088][T12905] .`: (slave netdevsim1): Releasing backup interface [ 1610.894483][T12905] netlink: 'syz.1.9002': attribute type 10 has an invalid length. [ 1610.955236][T12913] netlink: 'syz.1.9002': attribute type 10 has an invalid length. [ 1610.955358][T12910] netlink: 'syz.1.9002': attribute type 10 has an invalid length. [ 1610.970821][T12905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1610.974683][T12905] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1610.992838][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.088545][T12913] .`: (slave netdevsim1): Releasing backup interface [ 1611.109748][T12910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1611.124793][T12910] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1611.139144][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.924058][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1612.106175][T12948] netlink: 'syz.0.9006': attribute type 4 has an invalid length. [ 1612.162565][T12949] netlink: 'syz.0.9006': attribute type 4 has an invalid length. [ 1613.950004][T12653] team0: Port device team_slave_0 added [ 1613.950091][T12921] netlink: 766 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1613.956813][T13383] IPVS: stop unused estimator thread 0... [ 1613.993377][T12944] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1613.994983][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1614.079804][T12653] team0: Port device team_slave_1 added [ 1614.173805][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.173824][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.173851][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.194485][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.194531][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.194612][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.491696][T12653] hsr_slave_0: entered promiscuous mode [ 1614.492698][T12653] hsr_slave_1: entered promiscuous mode [ 1614.493458][T12653] debugfs: 'hsr0' already exists in 'hsr' [ 1614.493476][T12653] Cannot create hsr debugfs directory [ 1614.591984][T12975] bond10 (unregistering): Released all slaves [ 1615.363763][T12987] dummy0 speed is unknown, defaulting to 1000 [ 1615.400306][T13007] netlink: 598 bytes leftover after parsing attributes in process `syz.5.9017'. [ 1615.435210][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.452164][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1615.468873][T12987] lo speed is unknown, defaulting to 1000 [ 1616.264706][T13027] ip_tables: iptables: counters copy to user failed while replacing table [ 1616.519803][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9019'. [ 1616.520136][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9019'. [ 1616.710727][T13036] syzkaller0: entered promiscuous mode [ 1616.710751][T13036] syzkaller0: entered allmulticast mode [ 1617.030787][T13052] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1617.369218][T12653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1617.395403][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1617.404918][T12653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1617.419381][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1617.421818][T12653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1617.453746][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1617.454625][T12653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1617.488540][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1617.685047][T12653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.722413][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.760882][T21303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.760972][T21303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.795447][T21298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.795557][T21298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.143044][T13097] syz0: rxe_newlink: already configured on lo [ 1618.277739][T17863] lo speed is unknown, defaulting to 1000 [ 1618.277783][T17863] syz0: Port: 1 Link DOWN [ 1618.292430][ T3649] lo speed is unknown, defaulting to 1000 [ 1618.505268][T13105] dummy0 speed is unknown, defaulting to 1000 [ 1618.528178][T13105] lo speed is unknown, defaulting to 1000 [ 1618.821416][T13122] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 1619.327467][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.523542][T12653] veth0_vlan: entered promiscuous mode [ 1619.567951][T12653] veth1_vlan: entered promiscuous mode [ 1619.641339][T12653] veth0_macvtap: entered promiscuous mode [ 1619.671234][T12653] veth1_macvtap: entered promiscuous mode [ 1619.713821][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.774216][T12653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.877466][T21303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.878944][ T2573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.922593][T13386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.998030][T21303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.103414][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1620.155595][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.155617][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.307853][ T2568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.307879][ T2568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.434540][T13152] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1620.447968][T13157] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1620.598473][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1620.603420][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1620.618008][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1620.669896][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9047'. [ 1620.827909][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9048'. [ 1621.232554][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9055'. [ 1621.260232][T13213] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9054'. [ 1621.370773][T13225] syzkaller1: entered promiscuous mode [ 1621.370800][T13225] syzkaller1: entered allmulticast mode [ 1621.520808][T13231] vlan2: entered allmulticast mode [ 1621.520832][T13231] bond0: entered allmulticast mode [ 1621.520846][T13231] bond_slave_0: entered allmulticast mode [ 1621.520864][T13231] bond_slave_1: entered allmulticast mode [ 1621.570278][T13231] __nla_validate_parse: 3 callbacks suppressed [ 1621.570296][T13231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9058'. [ 1621.608648][T21577] Bluetooth: hci2: command 0x0401 tx timeout [ 1621.761991][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9059'. [ 1621.775723][T13238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9059'. [ 1621.823014][T13241] syzkaller0: entered promiscuous mode [ 1621.823039][T13241] syzkaller0: entered allmulticast mode [ 1622.013954][T13247] netlink: 'syz.1.9063': attribute type 12 has an invalid length. [ 1622.194094][T13250] bridge1: entered allmulticast mode [ 1622.278759][T13253] batman_adv: batadv0: Adding interface: syzkaller0 [ 1622.278777][T13253] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.278807][T13253] batman_adv: batadv0: Interface activated: syzkaller0 [ 1622.625488][T21577] Bluetooth: hci1: unexpected cc 0x1003 length: 0 < 9 [ 1622.625519][T21577] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1622.657440][T13271] macsec0: entered allmulticast mode [ 1622.657461][T13271] ip6gretap0: entered allmulticast mode [ 1622.830697][T13258] bond10: Removing last ns target with arp_interval on [ 1622.935635][T13252] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1623.119865][T13252] batman_adv: batadv0: Removing interface: syzkaller0 [ 1623.172662][T13276] lo: entered promiscuous mode [ 1623.177959][T13276] tunl0: entered promiscuous mode [ 1623.181933][T13276] gre0: entered promiscuous mode [ 1623.344474][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1623.362426][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1623.364142][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1623.382404][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1623.393248][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1623.686129][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 1623.905057][T13276] gretap0: entered promiscuous mode [ 1624.037593][T13276] erspan0: entered promiscuous mode [ 1624.062079][T13276] ip_vti0: entered promiscuous mode [ 1624.068490][T13276] ip6_vti0: entered promiscuous mode [ 1624.079470][T13276] sit0: entered promiscuous mode [ 1624.079694][T13276] ip6tnl0: entered promiscuous mode [ 1624.081706][T13276] ip6gre0: entered promiscuous mode [ 1624.085572][T13276] syz_tun: entered promiscuous mode [ 1624.125342][T13276] ip6gretap0: entered promiscuous mode [ 1624.138552][T13276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.139114][T13276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.140478][T13276] bridge0: entered promiscuous mode [ 1624.143498][T13276] vcan0: entered promiscuous mode [ 1624.144703][T13276] bond0: entered promiscuous mode [ 1624.144721][T13276] bond_slave_0: entered promiscuous mode [ 1624.144895][T13276] bond_slave_1: entered promiscuous mode [ 1624.151781][T13276] team0: entered promiscuous mode [ 1624.151830][T13276] team_slave_0: entered promiscuous mode [ 1624.152282][T13276] team_slave_1: entered promiscuous mode [ 1624.164689][T13276] dummy0: entered promiscuous mode [ 1624.175839][T13276] nlmon0: entered promiscuous mode [ 1624.212858][T13276] batadv0: entered promiscuous mode [ 1624.234463][T13276] vxcan0: entered promiscuous mode [ 1624.235326][T13276] vxcan1: entered promiscuous mode [ 1624.244966][T13276] veth0: entered promiscuous mode [ 1624.252784][T13276] veth1: entered promiscuous mode [ 1624.267409][T13276] wg0: entered promiscuous mode [ 1624.269533][T13276] wg1: entered promiscuous mode [ 1624.271666][T13276] wg2: entered promiscuous mode [ 1624.273390][T13276] veth0_to_bridge: entered promiscuous mode [ 1624.289765][T13276] veth1_to_bridge: entered promiscuous mode [ 1624.303981][T13276] veth0_to_bond: entered promiscuous mode [ 1624.315206][T13276] veth1_to_bond: entered promiscuous mode [ 1624.335283][T13276] veth0_to_team: entered promiscuous mode [ 1624.353691][T13276] veth1_to_team: entered promiscuous mode [ 1624.369587][T13276] veth0_to_batadv: entered promiscuous mode [ 1624.372070][T13276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.372104][T13276] batadv_slave_0: entered promiscuous mode [ 1624.374841][T13276] veth1_to_batadv: entered promiscuous mode [ 1624.400281][T13276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.400408][T13276] batadv_slave_1: entered promiscuous mode [ 1624.414724][T13276] xfrm0: entered promiscuous mode [ 1624.430620][T13276] veth0_to_hsr: entered promiscuous mode [ 1624.439829][T13276] veth1_to_hsr: entered promiscuous mode [ 1624.452513][T13276] hsr0: entered promiscuous mode [ 1624.455735][T13276] veth1_virt_wifi: entered promiscuous mode [ 1624.482183][T13276] veth0_virt_wifi: entered promiscuous mode [ 1624.485039][T13276] virt_wifi0: entered promiscuous mode [ 1624.509070][T13276] vlan0: entered promiscuous mode [ 1624.511988][T13276] vlan1: entered promiscuous mode [ 1624.515083][T13276] macvlan0: entered promiscuous mode [ 1624.535760][T13276] macvlan1: entered promiscuous mode [ 1624.549777][T13276] ipvlan0: entered promiscuous mode [ 1624.549946][T13276] ipvlan1: entered promiscuous mode [ 1624.569603][T13276] macvtap0: entered promiscuous mode [ 1624.573687][T13276] macsec0: entered promiscuous mode [ 1624.592037][T13276] geneve0: entered promiscuous mode [ 1624.602500][T13276] geneve1: entered promiscuous mode [ 1624.617119][T13276] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1624.622155][T13276] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1624.648418][T13276] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1624.652878][T13276] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1624.680988][T13276] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 1624.704394][T13276] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 1624.714908][T13276] bridge1: entered promiscuous mode [ 1624.736373][T21298] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.799827][ T1176] bond0: (slave syz_tun): Releasing backup interface [ 1624.891433][T13386] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.891514][T13386] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.921551][T21298] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.045885][T13339] x_tables: duplicate underflow at hook 3 [ 1625.446145][ T52] Bluetooth: hci5: command tx timeout [ 1625.485193][T13298] dummy0 speed is unknown, defaulting to 1000 [ 1625.493565][T13298] lo speed is unknown, defaulting to 1000 [ 1625.866525][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9081'. [ 1626.282981][T13392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9083'. [ 1626.357089][T13400] netlink: 332 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1626.357145][T13400] netlink: 'syz.1.9086': attribute type 9 has an invalid length. [ 1626.357161][T13400] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1626.357178][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1626.831654][T13416] syzkaller0: entered promiscuous mode [ 1626.831674][T13416] syzkaller0: entered allmulticast mode [ 1626.896959][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.897158][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.897361][T13298] bridge_slave_0: entered allmulticast mode [ 1626.901152][T13298] bridge_slave_0: entered promiscuous mode [ 1626.941183][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.941357][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.941494][T13298] bridge_slave_1: entered allmulticast mode [ 1626.944970][T13298] bridge_slave_1: entered promiscuous mode [ 1627.009081][T13416] tipc: Started in network mode [ 1627.009112][T13416] tipc: Node identity 00000000000000000071000000000001, cluster identity 4711 [ 1627.009159][T13416] tipc: Enabling of bearer rejected, failed to enable media [ 1627.049558][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.078453][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.146751][T13298] team0: Port device team_slave_0 added [ 1627.149610][T13298] team0: Port device team_slave_1 added [ 1627.287865][T13298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.287885][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.287911][T13298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.291192][T13298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.291208][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.291233][T13298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.456817][T13298] hsr_slave_0: entered promiscuous mode [ 1627.457938][T13298] hsr_slave_1: entered promiscuous mode [ 1627.458626][T13298] debugfs: 'hsr0' already exists in 'hsr' [ 1627.458645][T13298] Cannot create hsr debugfs directory [ 1627.526386][ T52] Bluetooth: hci5: command tx timeout [ 1627.756559][T13455] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 1628.503739][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9095'. [ 1628.550815][T13453] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9095'. [ 1629.585697][T13298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1629.605288][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.607250][ T52] Bluetooth: hci5: command tx timeout [ 1629.620904][T13298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1629.644345][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.655133][T13298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1629.855609][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.903013][T13298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1629.912564][T13298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1630.259885][T13298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.321403][T13298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.353936][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.354062][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.382037][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.382122][T13386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.881225][T13603] ip_vti0: left promiscuous mode [ 1630.881639][T13603] netlink: 976 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1630.881659][T13603] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1630.891349][T13603] netlink: 'syz.2.9126': attribute type 12 has an invalid length. [ 1630.891390][T13603] netlink: 'syz.2.9126': attribute type 29 has an invalid length. [ 1630.891426][T13603] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1630.891490][T13603] netlink: 47 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1630.961982][T13603] netlink: 976 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1630.962006][T13603] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1630.962501][T13604] netlink: 'syz.2.9126': attribute type 12 has an invalid length. [ 1630.962519][T13604] netlink: 'syz.2.9126': attribute type 29 has an invalid length. [ 1630.962533][T13604] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1630.962552][T13604] netlink: 47 bytes leftover after parsing attributes in process `syz.2.9126'. [ 1631.229418][T13614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9127'. [ 1631.278721][T13627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9127'. [ 1631.603564][T13629] netlink: 'syz.0.9130': attribute type 1 has an invalid length. [ 1631.685064][T13629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1631.688663][ T52] Bluetooth: hci5: command tx timeout [ 1631.728173][T13635] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1631.849040][T13298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.437376][T13689] netlink: 'syz.2.9136': attribute type 1 has an invalid length. [ 1632.548259][T13693] dummy0: left promiscuous mode [ 1632.552797][T13684] netlink: 'syz.2.9136': attribute type 10 has an invalid length. [ 1632.552995][T13684] dummy0: entered promiscuous mode [ 1632.568152][T13689] netlink: 'syz.2.9136': attribute type 10 has an invalid length. [ 1632.744675][T13298] veth0_vlan: entered promiscuous mode [ 1632.768845][T13298] veth1_vlan: entered promiscuous mode [ 1632.858714][T13705] FAULT_INJECTION: forcing a failure. [ 1632.858714][T13705] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.858763][T13705] CPU: 1 UID: 0 PID: 13705 Comm: syz.2.9142 Not tainted syzkaller #0 PREEMPT(full) [ 1632.858790][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1632.858804][T13705] Call Trace: [ 1632.858813][T13705] [ 1632.858823][T13705] dump_stack_lvl+0xe8/0x150 [ 1632.858857][T13705] should_fail_ex+0x410/0x560 [ 1632.858890][T13705] should_failslab+0xa8/0x100 [ 1632.858937][T13705] __kvmalloc_node_noprof+0x176/0x820 [ 1632.858969][T13705] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1632.858997][T13705] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1632.859033][T13705] bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1632.859095][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1632.859124][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1632.859149][T13705] ? trace_kmalloc+0x2a/0xf0 [ 1632.859174][T13705] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1632.859207][T13705] ? __kvmalloc_node_noprof+0x345/0x820 [ 1632.859232][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1632.859257][T13705] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1632.859291][T13705] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1632.859337][T13705] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1632.859374][T13705] bpf_check+0x2744/0x2ef0 [ 1632.859424][T13705] ? __pfx_bpf_check+0x10/0x10 [ 1632.859452][T13705] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1632.859487][T13705] bpf_prog_load+0x14d6/0x1c20 [ 1632.859526][T13705] ? __pfx_bpf_prog_load+0x10/0x10 [ 1632.859577][T13705] __sys_bpf+0xd0d/0xd90 [ 1632.859611][T13705] ? __pfx___sys_bpf+0x10/0x10 [ 1632.859648][T13705] ? __fget_files+0x2a/0x420 [ 1632.859697][T13705] ? ksys_write+0x242/0x270 [ 1632.859722][T13705] ? __pfx_ksys_write+0x10/0x10 [ 1632.859749][T13705] __x64_sys_bpf+0xba/0xd0 [ 1632.859774][T13705] do_syscall_64+0x166/0x520 [ 1632.859834][T13705] ? trace_irq_disable+0x3b/0x140 [ 1632.859857][T13705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.859880][T13705] ? clear_bhb_loop+0x70/0xc0 [ 1632.859908][T13705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.859930][T13705] RIP: 0033:0x7f078219e1d9 [ 1632.859951][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.859971][T13705] RSP: 002b:00007f07803f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1632.859995][T13705] RAX: ffffffffffffffda RBX: 00007f0782425fa0 RCX: 00007f078219e1d9 [ 1632.860013][T13705] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 1632.860028][T13705] RBP: 00007f07803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1632.860064][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1632.860077][T13705] R13: 00007f0782426038 R14: 00007f0782425fa0 R15: 00007fff47e62428 [ 1632.860111][T13705] [ 1632.903801][T13298] veth0_macvtap: entered promiscuous mode [ 1632.984705][T13298] veth1_macvtap: entered promiscuous mode [ 1633.233386][T13298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.260129][T13298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.359631][T13383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.397201][T13386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.400492][T25226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.400529][T25226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.404011][T13713] xt_l2tp: invalid flags combination: 0 [ 1633.611692][ T2568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.611712][ T2568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.704290][ T2565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.704311][ T2565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.789687][T13730] syzkaller0: entered promiscuous mode [ 1633.789712][T13730] syzkaller0: entered allmulticast mode [ 1633.854170][T13730] __nla_validate_parse: 6 callbacks suppressed [ 1633.854187][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9146'. [ 1634.022685][T13740] netlink: 'syz.5.9150': attribute type 49 has an invalid length. [ 1634.050111][T13738] ipvlan2: entered promiscuous mode [ 1634.130671][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1634.195856][T13740] ip6gretap0: entered promiscuous mode [ 1634.195878][T13740] ip6gretap0: entered allmulticast mode [ 1634.265899][T13746] .`: (slave bond_slave_1): Releasing backup interface [ 1634.322364][T13752] FAULT_INJECTION: forcing a failure. [ 1634.322364][T13752] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.322396][T13752] CPU: 0 UID: 0 PID: 13752 Comm: syz.5.9153 Not tainted syzkaller #0 PREEMPT(full) [ 1634.322416][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.322428][T13752] Call Trace: [ 1634.322435][T13752] [ 1634.322443][T13752] dump_stack_lvl+0xe8/0x150 [ 1634.322475][T13752] should_fail_ex+0x410/0x560 [ 1634.322503][T13752] should_failslab+0xa8/0x100 [ 1634.322529][T13752] __kvmalloc_node_noprof+0x176/0x820 [ 1634.322553][T13752] ? __kvmalloc_node_noprof+0x345/0x820 [ 1634.322574][T13752] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1634.322598][T13752] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1634.322626][T13752] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1634.322668][T13752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1634.322691][T13752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1634.322712][T13752] ? trace_kmalloc+0x2a/0xf0 [ 1634.322731][T13752] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1634.322758][T13752] ? __kvmalloc_node_noprof+0x345/0x820 [ 1634.322779][T13752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1634.322810][T13752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1634.322838][T13752] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1634.322878][T13752] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1634.322909][T13752] bpf_check+0x2744/0x2ef0 [ 1634.322946][T13752] ? __pfx_bpf_check+0x10/0x10 [ 1634.322969][T13752] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1634.322999][T13752] bpf_prog_load+0x14d6/0x1c20 [ 1634.323033][T13752] ? __pfx_bpf_prog_load+0x10/0x10 [ 1634.323077][T13752] __sys_bpf+0xd0d/0xd90 [ 1634.323106][T13752] ? __pfx___sys_bpf+0x10/0x10 [ 1634.323137][T13752] ? __fget_files+0x2a/0x420 [ 1634.323180][T13752] ? ksys_write+0x242/0x270 [ 1634.323201][T13752] ? __pfx_ksys_write+0x10/0x10 [ 1634.323224][T13752] __x64_sys_bpf+0xba/0xd0 [ 1634.323246][T13752] do_syscall_64+0x166/0x520 [ 1634.323270][T13752] ? trace_irq_disable+0x3b/0x140 [ 1634.323290][T13752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.323309][T13752] ? clear_bhb_loop+0x70/0xc0 [ 1634.323331][T13752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.323348][T13752] RIP: 0033:0x7f454179e1d9 [ 1634.323365][T13752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.323381][T13752] RSP: 002b:00007f4542709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1634.323400][T13752] RAX: ffffffffffffffda RBX: 00007f4541a25fa0 RCX: 00007f454179e1d9 [ 1634.323413][T13752] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 1634.323425][T13752] RBP: 00007f4542709090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.323436][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1634.323447][T13752] R13: 00007f4541a26038 R14: 00007f4541a25fa0 R15: 00007fff1d5365a8 [ 1634.323476][T13752] [ 1634.646359][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1634.984464][T13769] tipc: Enabled bearer , priority 0 [ 1634.985509][T13770] syzkaller0: MTU not usable for tipc bearer [ 1634.985524][T13770] tipc: Disabling bearer [ 1635.062092][T13781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9161'. [ 1635.062120][T13781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9161'. [ 1635.082016][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1635.347686][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1635.347711][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1635.347726][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1635.353950][T13793] netlink: 'syz.4.9164': attribute type 1 has an invalid length. [ 1635.463677][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1635.463703][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1636.960962][T13861] bond2: option xmit_hash_policy: invalid value (10) [ 1636.963971][T13861] bond2 (unregistering): Released all slaves [ 1636.986447][T13878] ip_tables: iptables: counters copy to user failed while replacing table [ 1637.074282][T13878] batadv1: entered promiscuous mode [ 1637.074304][T13878] batadv1: entered allmulticast mode [ 1637.075791][T13878] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1637.223916][T13889] Bluetooth: MGMT ver 1.23 [ 1637.262369][T13892] tc_dump_action: action bad kind [ 1637.502685][T21577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1637.504123][T21577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1637.519160][T21577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1637.547872][T21577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1637.549272][T21577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1637.901027][T13912] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1638.020051][T13900] dummy0 speed is unknown, defaulting to 1000 [ 1638.021824][T13900] lo speed is unknown, defaulting to 1000 [ 1638.086253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1638.212047][T13918] bridge0: port 3(vlan2) entered blocking state [ 1638.212222][T13918] bridge0: port 3(vlan2) entered disabled state [ 1638.212379][T13918] vlan2: entered allmulticast mode [ 1638.212396][T13918] geneve0: entered allmulticast mode [ 1638.214716][T13918] vlan2: entered promiscuous mode [ 1638.511831][T13900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.511949][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.512035][T13900] bridge_slave_0: entered allmulticast mode [ 1638.513444][T13900] bridge_slave_0: entered promiscuous mode [ 1638.541598][T13900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.541780][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.541878][T13900] bridge_slave_1: entered allmulticast mode [ 1638.543194][T13900] bridge_slave_1: entered promiscuous mode [ 1638.595894][T13900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.599765][T13900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1638.641560][T13900] team0: Port device team_slave_0 added [ 1638.643857][T13900] team0: Port device team_slave_1 added [ 1638.682507][T13900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.682524][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.682551][T13900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.684127][T13900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.684141][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.684172][T13900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.814725][T13900] hsr_slave_0: entered promiscuous mode [ 1638.815461][T13900] hsr_slave_1: entered promiscuous mode [ 1638.827726][T13900] debugfs: 'hsr0' already exists in 'hsr' [ 1638.827749][T13900] Cannot create hsr debugfs directory [ 1638.974023][T13900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 37599 - 0 [ 1638.974064][T13900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1639.065648][T13900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 37599 - 0 [ 1639.065676][T13900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1639.177292][T13900] .`: (slave netdevsim1): Releasing backup interface [ 1639.178431][T13900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 37599 - 0 [ 1639.178455][T13900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1639.282691][T13900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37599 - 0 [ 1639.282716][T13900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1639.361745][T13838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1639.531960][T13900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1639.546588][T13900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1639.547530][T13900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1639.554519][T13900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1639.555491][T13900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1639.593645][T13900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1639.594598][T13900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1639.614529][T21577] Bluetooth: hci4: command tx timeout [ 1639.615788][T13900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1639.694195][T13931] __nla_validate_parse: 13 callbacks suppressed [ 1639.694214][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1639.743202][T13940] syzkaller0: entered promiscuous mode [ 1639.743225][T13940] syzkaller0: entered allmulticast mode [ 1639.743919][T13945] netlink: NAT attribute has 8 unknown bytes [ 1639.743949][T13945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1639.774419][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9189'. [ 1639.774441][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9189'. [ 1639.774480][T13945] validate_nla: 1 callbacks suppressed [ 1639.774493][T13945] netlink: 'syz.5.9189': attribute type 18 has an invalid length. [ 1639.833748][T13940] netlink: 'syz.4.9190': attribute type 3 has an invalid length. [ 1639.833762][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1640.060158][T13900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.108981][T13900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.110187][T13957] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9191'. [ 1640.134292][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.134391][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.183831][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.183983][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.404879][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9196'. [ 1640.561457][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9198'. [ 1640.621603][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1640.621638][T13984] netlink: 'syz.4.9200': attribute type 10 has an invalid length. [ 1640.621653][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9200'. [ 1640.623510][T13979] xt_addrtype: ipv6 does not support BROADCAST matching [ 1640.687533][T13984] geneve2: entered promiscuous mode [ 1640.687556][T13984] geneve2: entered allmulticast mode [ 1640.714417][T13980] syzkaller0: entered promiscuous mode [ 1640.714438][T13980] syzkaller0: entered allmulticast mode [ 1640.825372][T13989] netlink: 'syz.5.9201': attribute type 3 has an invalid length. [ 1640.836632][T13991] syz_tun: entered promiscuous mode [ 1640.837495][T13988] syz_tun: left promiscuous mode [ 1640.884098][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9202'. [ 1641.077027][T14004] netlink: 'syz.4.9206': attribute type 8 has an invalid length. [ 1641.419541][T14018] netlink: 'syz.5.9209': attribute type 21 has an invalid length. [ 1641.424582][T14019] netlink: 'syz.5.9209': attribute type 21 has an invalid length. [ 1641.469127][T14022] ip_tables: iptables: counters copy to user failed while replacing table [ 1641.510375][T13900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.592421][T14026] netlink: 'syz.5.9211': attribute type 1 has an invalid length. [ 1641.686332][T21577] Bluetooth: hci4: command tx timeout [ 1641.735507][T13900] veth0_vlan: entered promiscuous mode [ 1641.778039][T13900] veth1_vlan: entered promiscuous mode [ 1641.920743][T13900] veth0_macvtap: entered promiscuous mode [ 1641.957780][T13900] veth1_macvtap: entered promiscuous mode [ 1641.993520][T13900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.035343][T13900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.090127][ T2573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.348245][T14041] netlink: 'syz.5.9213': attribute type 1 has an invalid length. [ 1642.348270][T14041] netlink: 'syz.5.9213': attribute type 4 has an invalid length. [ 1642.419962][T21303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.420453][T21303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.420497][T21303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.420512][T21303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.420943][T21303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.553626][T21298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.553649][T21298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.595748][T14048] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 1642.651274][T14046] policy can only be matched on NF_INET_PRE_ROUTING [ 1642.651290][T14046] unable to load match [ 1642.890205][T14063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1643.082888][T14079] dvmrp1: entered allmulticast mode [ 1643.269628][T14093] gre1: entered promiscuous mode [ 1643.269650][T14093] gre1: entered allmulticast mode [ 1643.401948][T13386] IPVS: starting estimator thread 0... [ 1643.487154][T14105] IPVS: using max 29 ests per chain, 69600 per kthread [ 1643.767864][T21577] Bluetooth: hci4: command tx timeout [ 1644.923259][T14165] __nla_validate_parse: 13 callbacks suppressed [ 1644.923282][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9247'. [ 1644.961158][T14129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1644.961182][T14129] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1645.080352][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9248'. [ 1645.197239][T14129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1645.197263][T14129] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1645.262053][T14168] ovs-dp0: entered promiscuous mode [ 1645.304691][T14129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1645.304714][T14129] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1645.338794][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9251'. [ 1645.588199][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1645.588240][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1645.592114][T14190] netlink: zone id is out of range [ 1645.592130][T14190] netlink: zone id is out of range [ 1645.592139][T14190] netlink: zone id is out of range [ 1645.592149][T14190] netlink: zone id is out of range [ 1645.592159][T14190] netlink: zone id is out of range [ 1645.592168][T14190] netlink: zone id is out of range [ 1645.592181][T14190] netlink: zone id is out of range [ 1645.592191][T14190] netlink: zone id is out of range [ 1645.592201][T14190] netlink: zone id is out of range [ 1645.684893][T14171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.684939][T14171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.684966][T14171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1645.802817][T14129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1645.802841][T14129] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1645.833331][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9254'. [ 1645.848586][T21577] Bluetooth: hci4: command tx timeout [ 1645.950363][T14171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.950409][T14171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.950436][T14171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1646.052676][T14201] nbd: socks must be embedded in a SOCK_ITEM attr [ 1646.168628][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9255'. [ 1646.211214][T14171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.231538][T14171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.231572][T14171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1646.504462][T14171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.504502][T14171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.504530][T14171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1646.628347][T14211] validate_nla: 2 callbacks suppressed [ 1646.628367][T14211] netlink: 'syz.0.9258': attribute type 3 has an invalid length. [ 1646.743806][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1646.743834][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1646.743852][T14228] netlink: 'syz.1.9265': attribute type 4 has an invalid length. [ 1646.781373][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1647.001317][T21298] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.001355][T21298] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1647.001381][T21298] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1647.037690][ T2568] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.037725][ T2568] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1647.037750][ T2568] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1647.038776][ T2568] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.038807][ T2568] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1647.038834][ T2568] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1647.117024][T21298] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.117060][T21298] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1647.117086][T21298] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1648.129077][T14294] netlink: 'syz.0.9278': attribute type 2 has an invalid length. [ 1648.326105][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1649.372860][T14366] pim6reg: entered allmulticast mode [ 1649.491697][T14367] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1649.711443][ T2565] IPVS: starting estimator thread 0... [ 1649.722823][T14400] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1649.725589][T14395] net_ratelimit: 227 callbacks suppressed [ 1649.725622][T14395] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1649.806627][T14399] IPVS: using max 29 ests per chain, 69600 per kthread [ 1649.910539][T14412] pimreg: entered allmulticast mode [ 1649.913547][T14412] pimreg: left allmulticast mode [ 1650.045460][T14417] __nla_validate_parse: 8 callbacks suppressed [ 1650.045485][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1650.104077][T14360] pim6reg: left allmulticast mode [ 1650.378585][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9303'. [ 1650.522696][T14435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1650.591014][T14436] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1650.770646][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9305'. [ 1650.793673][T14451] block nbd0: reconnected socket [ 1650.794372][T21577] block nbd0: Receive control failed (result -107) [ 1650.815937][T21577] [ 1650.818304][T21577] ====================================================== [ 1650.825336][T21577] WARNING: possible circular locking dependency detected [ 1650.832380][T21577] syzkaller #0 Not tainted [ 1650.836806][T21577] ------------------------------------------------------ [ 1650.843833][T21577] kworker/u9:1/21577 is trying to acquire lock: [ 1650.850098][T21577] ffff8880524a1c60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1650.859403][T21577] [ 1650.859403][T21577] but task is already holding lock: [ 1650.866786][T21577] ffff88807785e268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1650.875810][T21577] [ 1650.875810][T21577] which lock already depends on the new lock. [ 1650.875810][T21577] [ 1650.886227][T21577] [ 1650.886227][T21577] the existing dependency chain (in reverse order) is: [ 1650.895252][T21577] [ 1650.895252][T21577] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1650.902956][T21577] __mutex_lock+0x19d/0x1550 [ 1650.908092][T21577] nbd_queue_rq+0x373/0xff0 [ 1650.913147][T21577] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1650.919315][T21577] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1650.926265][T21577] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1650.932801][T21577] blk_mq_run_work_fn+0x16c/0x300 [ 1650.938382][T21577] process_scheduled_works+0xc3d/0x1630 [ 1650.944474][T21577] worker_thread+0xa47/0xfb0 [ 1650.949613][T21577] kthread+0x38b/0x480 [ 1650.954247][T21577] ret_from_fork+0x514/0xb70 [ 1650.959399][T21577] ret_from_fork_asm+0x1a/0x30 [ 1650.964720][T21577] [ 1650.964720][T21577] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1650.971942][T21577] __mutex_lock+0x19d/0x1550 [ 1650.977069][T21577] nbd_queue_rq+0xc1/0xff0 [ 1650.982024][T21577] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1650.988111][T21577] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1650.994972][T21577] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1651.001480][T21577] blk_mq_run_work_fn+0x16c/0x300 [ 1651.007083][T21577] process_scheduled_works+0xc3d/0x1630 [ 1651.013175][T21577] worker_thread+0xa47/0xfb0 [ 1651.018300][T21577] kthread+0x38b/0x480 [ 1651.022896][T21577] ret_from_fork+0x514/0xb70 [ 1651.028025][T21577] ret_from_fork_asm+0x1a/0x30 [ 1651.033337][T21577] [ 1651.033337][T21577] -> #4 (set->srcu){.+.+}-{0:0}: [ 1651.040461][T21577] __synchronize_srcu+0xc9/0x2f0 [ 1651.045926][T21577] elevator_switch+0x1e8/0x7b0 [ 1651.051310][T21577] elevator_change+0x2fa/0x480 [ 1651.056602][T21577] elevator_set_default+0x375/0x440 [ 1651.062335][T21577] blk_register_queue+0x3f3/0x4e0 [ 1651.067931][T21577] __add_disk+0x6b8/0xdb0 [ 1651.072799][T21577] add_disk_fwnode+0x100/0x3a0 [ 1651.078095][T21577] nbd_dev_add+0x733/0xb60 [ 1651.083039][T21577] nbd_init+0x168/0x1f0 [ 1651.087756][T21577] do_one_initcall+0x250/0x870 [ 1651.093047][T21577] do_initcall_level+0x10a/0x1a0 [ 1651.098529][T21577] do_initcalls+0x59/0xa0 [ 1651.103398][T21577] kernel_init_freeable+0x29d/0x3e0 [ 1651.109128][T21577] kernel_init+0x22/0x1d0 [ 1651.113990][T21577] ret_from_fork+0x514/0xb70 [ 1651.119121][T21577] ret_from_fork_asm+0x1a/0x30 [ 1651.124416][T21577] [ 1651.124416][T21577] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1651.132235][T21577] __mutex_lock+0x19d/0x1550 [ 1651.137352][T21577] elevator_change+0x1af/0x480 [ 1651.142692][T21577] elevator_set_none+0xb5/0x140 [ 1651.148086][T21577] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1651.154430][T21577] nbd_start_device+0x189/0xb30 [ 1651.159811][T21577] nbd_genl_connect+0x167d/0x1cd0 [ 1651.165373][T21577] genl_family_rcv_msg_doit+0x233/0x340 [ 1651.171443][T21577] genl_rcv_msg+0x614/0x7a0 [ 1651.176478][T21577] netlink_rcv_skb+0x226/0x4a0 [ 1651.181785][T21577] genl_rcv+0x28/0x40 [ 1651.186293][T21577] netlink_unicast+0x7bd/0x940 [ 1651.191600][T21577] netlink_sendmsg+0x813/0xb40 [ 1651.196899][T21577] sock_sendmsg_nosec+0x14e/0x190 [ 1651.202490][T21577] ____sys_sendmsg+0x54e/0x850 [ 1651.207810][T21577] ___sys_sendmsg+0x2a5/0x360 [ 1651.213018][T21577] __x64_sys_sendmsg+0x1b1/0x290 [ 1651.218490][T21577] do_syscall_64+0x166/0x520 [ 1651.223619][T21577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.230051][T21577] [ 1651.230051][T21577] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1651.238662][T21577] blk_alloc_queue+0x544/0x690 [ 1651.243969][T21577] __blk_mq_alloc_disk+0x194/0x390 [ 1651.249616][T21577] nbd_dev_add+0x494/0xb60 [ 1651.254588][T21577] nbd_init+0x168/0x1f0 [ 1651.259278][T21577] do_one_initcall+0x250/0x870 [ 1651.264584][T21577] do_initcall_level+0x10a/0x1a0 [ 1651.270061][T21577] do_initcalls+0x59/0xa0 [ 1651.274927][T21577] kernel_init_freeable+0x29d/0x3e0 [ 1651.280674][T21577] kernel_init+0x22/0x1d0 [ 1651.285556][T21577] ret_from_fork+0x514/0xb70 [ 1651.290726][T21577] ret_from_fork_asm+0x1a/0x30 [ 1651.296031][T21577] [ 1651.296031][T21577] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1651.303253][T21577] fs_reclaim_acquire+0x71/0x100 [ 1651.308740][T21577] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1651.315073][T21577] __alloc_skb+0x1db/0x7a0 [ 1651.320034][T21577] tcp_stream_alloc_skb+0x3f/0x580 [ 1651.325741][T21577] tcp_connect+0x1646/0x54e0 [ 1651.330901][T21577] tcp_v4_connect+0x1264/0x1b20 [ 1651.336318][T21577] mptcp_connect+0x527/0x7f0 [ 1651.341489][T21577] __inet_stream_connect+0x258/0xe00 [ 1651.347325][T21577] inet_stream_connect+0x66/0xa0 [ 1651.352804][T21577] __sys_connect+0x316/0x450 [ 1651.357924][T21577] __x64_sys_connect+0x7a/0x90 [ 1651.363225][T21577] do_syscall_64+0x166/0x520 [ 1651.368353][T21577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.374779][T21577] [ 1651.374779][T21577] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1651.382607][T21577] __lock_acquire+0x164c/0x2de0 [ 1651.387992][T21577] lock_acquire+0x115/0x350 [ 1651.393026][T21577] lock_sock_nested+0x41/0x100 [ 1651.398318][T21577] inet_shutdown+0x6a/0x390 [ 1651.403354][T21577] nbd_mark_nsock_dead+0x2cb/0x550 [ 1651.408995][T21577] recv_work+0x1cee/0x1e10 [ 1651.413960][T21577] process_scheduled_works+0xc3d/0x1630 [ 1651.420055][T21577] worker_thread+0xa47/0xfb0 [ 1651.425176][T21577] kthread+0x38b/0x480 [ 1651.429782][T21577] ret_from_fork+0x514/0xb70 [ 1651.434930][T21577] ret_from_fork_asm+0x1a/0x30 [ 1651.440228][T21577] [ 1651.440228][T21577] other info that might help us debug this: [ 1651.440228][T21577] [ 1651.450459][T21577] Chain exists of: [ 1651.450459][T21577] k-sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 1651.450459][T21577] [ 1651.463254][T21577] Possible unsafe locking scenario: [ 1651.463254][T21577] [ 1651.470713][T21577] CPU0 CPU1 [ 1651.476086][T21577] ---- ---- [ 1651.481472][T21577] lock(&nsock->tx_lock); [ 1651.485897][T21577] lock(&cmd->lock); [ 1651.492412][T21577] lock(&nsock->tx_lock); [ 1651.499354][T21577] lock(k-sk_lock-AF_INET); [ 1651.503972][T21577] [ 1651.503972][T21577] *** DEADLOCK *** [ 1651.503972][T21577] [ 1651.512117][T21577] locks held by kworker/u9:1/21577: 3, last CPU#0: [ 1651.518628][T21577] #0: ffff8880800d4140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1651.529884][T21577] #1: ffffc90006b27c40 ((work_completion)(&args->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1651.541829][T21577] #2: ffff88807785e268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1651.551165][T21577] [ 1651.551165][T21577] stack backtrace: [ 1651.557071][T21577] CPU: 0 UID: 0 PID: 21577 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1651.566625][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1651.576690][T21577] Workqueue: nbd0-recv recv_work [ 1651.581663][T21577] Call Trace: [ 1651.584959][T21577] [ 1651.587924][T21577] dump_stack_lvl+0xe8/0x150 [ 1651.592536][T21577] print_circular_bug+0x2e2/0x300 [ 1651.597599][T21577] check_noncircular+0x12f/0x150 [ 1651.602585][T21577] __lock_acquire+0x164c/0x2de0 [ 1651.607467][T21577] ? irqentry_exit+0x218/0x920 [ 1651.612262][T21577] ? lockdep_hardirqs_on+0x7b/0x110 [ 1651.617489][T21577] lock_acquire+0x115/0x350 [ 1651.622011][T21577] ? inet_shutdown+0x6a/0x390 [ 1651.626715][T21577] lock_sock_nested+0x41/0x100 [ 1651.631497][T21577] ? inet_shutdown+0x6a/0x390 [ 1651.636203][T21577] inet_shutdown+0x6a/0x390 [ 1651.640728][T21577] nbd_mark_nsock_dead+0x2cb/0x550 [ 1651.645859][T21577] recv_work+0x1cee/0x1e10 [ 1651.650295][T21577] ? lockdep_unlock+0x5c/0xd0 [ 1651.654979][T21577] ? __lock_acquire+0x1511/0x2de0 [ 1651.660016][T21577] ? __pfx_recv_work+0x10/0x10 [ 1651.664805][T21577] ? rcu_is_watching+0x16/0xb0 [ 1651.669581][T21577] ? process_scheduled_works+0x97a/0x1630 [ 1651.675320][T21577] process_scheduled_works+0xc3d/0x1630 [ 1651.681065][T21577] ? __pfx_process_scheduled_works+0x10/0x10 [ 1651.687065][T21577] ? assign_work+0x3cf/0x5d0 [ 1651.691676][T21577] worker_thread+0xa47/0xfb0 [ 1651.696297][T21577] kthread+0x38b/0x480 [ 1651.700374][T21577] ? __pfx_worker_thread+0x10/0x10 [ 1651.705513][T21577] ? __pfx_kthread+0x10/0x10 [ 1651.710120][T21577] ret_from_fork+0x514/0xb70 [ 1651.714738][T21577] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.719869][T21577] ? __switch_to+0xc89/0x1420 [ 1651.724573][T21577] ? __pfx_kthread+0x10/0x10 [ 1651.729176][T21577] ret_from_fork_asm+0x1a/0x30 [ 1651.733961][T21577]