last executing test programs: 4m38.433288073s ago: executing program 4 (id=2303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="8724", 0x2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x64, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x4, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f00000002c0)) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x80) 4m38.016872391s ago: executing program 4 (id=2308): r0 = socket(0xa, 0x3, 0x3a) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="30200005b16d9bd400000000", @ANYRES16=r1, @ANYBLOB="000829bd7000fedbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x98546b504a9e4f1b}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000007000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r3, 0x1, 0x20000000, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x40000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'veth1_to_bridge\x00'}) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f00000005c0)="51d616bf1c8379ff5772cf52255cfc3c7fd62e7b662741b2ec9553cb65bfd9a1c9f680ebfc12638ba9df7ac7c691ffdc49d9a8ee703fd92df3977c46641880ca682309f134c116672c3474290073ceac2727fb835a68cc") write(r6, &(0x7f0000000280)="31d638db5a1ffa015ff7febf2abcd499b8b60669ded305836b22a036bdd669d4f3c2ac987418802c380f9e23087c454d9494b73f7b7633b9f1f9e61c0b2ed9ae70ef6b9edaa35677e1df82bbba73915c0c775e0c7584cdf252858563187363cf5920d48a3fc4ed4e6fcd63b307bc9b9929b6ec9864e5051fcd62bc6a0ad12e13d85ed847453d208304d7267e8cd08e3c193081669b5e756c1fb82d05039a63975dc1ef4a2b743d309761265d9483dc93d146c6327220e6a663", 0xb9) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e0, &(0x7f0000000040)) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 64) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x8, "398b0e", 0xfa, 0x5}) (async) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 4m36.670161868s ago: executing program 4 (id=2318): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 4m36.02653167s ago: executing program 4 (id=2320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a0001032dbd7000fcff000008"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@setlink={0x44, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_CARRIER={0x5}]}, 0x44}}, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x1}) 4m34.755545888s ago: executing program 4 (id=2328): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3}, 0xe) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x282}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xb, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x901}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x18801}, 0x4000841) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x6, @multicast1, 0x4e22, 0x3, 'wlc\x00', 0x10, 0x5, 0x44}, 0x2c) 4m34.604077802s ago: executing program 4 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x1, 0x80, 0x1, 0x6, {{0x6, 0x4, 0x1, 0x10, 0x18, 0xfffc, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@noop]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x1}) epoll_create(0x5) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000240)={0x80fb, 0x2}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r2, 0x25, 0x1, @val=@netfilter={0x7, 0x1, 0x401}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5, r4, 0x4, r4}, 0x10) r6 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000300), 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000340)=0x2) close(r4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000380)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0xe) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000003c0)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0xc0000000000, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@arena={0x21, 0x0, 0x0, 0x18, 0x400, r8, 0x24, '\x00', 0x0, r4, 0x0, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x54}}, 0x980) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000640)=0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x0, 0xd3, 0x3d, &(0x7f0000000680)="70a7de7541e74e42ac830b82d0f9e5922de501b480ba20322326ed464cffb3b342d6bdcac1efaf1dad16655c360a31b2ae8b184b886017f4eaf131e6f733768658a82598bef1e0effac930c8b7727bd6201eac21b88fd6fcd6f8b70f8adb830344b9f4f207a29214cca34d79938a07a543d5ef204e130e72a9c15c86ea9b3ad5cb3239090dc5c59328b67e96a8bd85fd924349a3b2f1c37c340208dba1a5048efc5bd9d7f82c7e0e1513b5defea880285bec299fb6dc44046a6fbec7ad830f4bc55dc0daf6cbda01703d7cd036014846dd75fe", &(0x7f0000000780)=""/61, 0x8, 0x0, 0x1d, 0x32, &(0x7f00000007c0)="9cdffd73b863e6bcaed719e4e223920d6f75aea9ea5e25a963793ce65a", &(0x7f0000000800)="7dc52560f8a0ecd947b0dea0239164336a0cf8f3e6bb9c4dadacc60b75b5890118a750da3b0ac60aaa3b3358afc04d1e0000", 0xa, 0x0, 0x14000000}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r10 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000900)={0xd0000000}) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r8, 0x84, 0x81, &(0x7f0000000940)={0x2, 0x9}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r4, 0x84, 0x83, &(0x7f00000009c0)={r11, 0x1}, 0x8) connect$bt_l2cap(r4, &(0x7f0000000a00)={0x1f, 0x2, @any, 0x9, 0x2}, 0xe) 4m19.533212282s ago: executing program 32 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x1, 0x80, 0x1, 0x6, {{0x6, 0x4, 0x1, 0x10, 0x18, 0xfffc, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@noop]}}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x1}) epoll_create(0x5) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000240)={0x80fb, 0x2}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r2, 0x25, 0x1, @val=@netfilter={0x7, 0x1, 0x401}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5, r4, 0x4, r4}, 0x10) r6 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000300), 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000340)=0x2) close(r4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000380)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0xe) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000003c0)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0xc0000000000, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@arena={0x21, 0x0, 0x0, 0x18, 0x400, r8, 0x24, '\x00', 0x0, r4, 0x0, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x54}}, 0x980) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000640)=0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x0, 0xd3, 0x3d, &(0x7f0000000680)="70a7de7541e74e42ac830b82d0f9e5922de501b480ba20322326ed464cffb3b342d6bdcac1efaf1dad16655c360a31b2ae8b184b886017f4eaf131e6f733768658a82598bef1e0effac930c8b7727bd6201eac21b88fd6fcd6f8b70f8adb830344b9f4f207a29214cca34d79938a07a543d5ef204e130e72a9c15c86ea9b3ad5cb3239090dc5c59328b67e96a8bd85fd924349a3b2f1c37c340208dba1a5048efc5bd9d7f82c7e0e1513b5defea880285bec299fb6dc44046a6fbec7ad830f4bc55dc0daf6cbda01703d7cd036014846dd75fe", &(0x7f0000000780)=""/61, 0x8, 0x0, 0x1d, 0x32, &(0x7f00000007c0)="9cdffd73b863e6bcaed719e4e223920d6f75aea9ea5e25a963793ce65a", &(0x7f0000000800)="7dc52560f8a0ecd947b0dea0239164336a0cf8f3e6bb9c4dadacc60b75b5890118a750da3b0ac60aaa3b3358afc04d1e0000", 0xa, 0x0, 0x14000000}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r10 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000900)={0xd0000000}) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r8, 0x84, 0x81, &(0x7f0000000940)={0x2, 0x9}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r4, 0x84, 0x83, &(0x7f00000009c0)={r11, 0x1}, 0x8) connect$bt_l2cap(r4, &(0x7f0000000a00)={0x1f, 0x2, @any, 0x9, 0x2}, 0xe) 8.125131459s ago: executing program 3 (id=4586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x8070bd28, 0x25dfdbfb, {0x2, 0x18, 0x1ff, 0x0, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x871ac4b30833d132}, 0x4004894) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000e80)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000ec0)={'syzkaller1\x00', @multicast}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000001c0)="110000001000ffffff97000000000000000097000000", 0x16) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="9a25c5867314b191ae432748a8245b2ae1ea92ea1dd83ce72c23073966242d99b0338a11a59c5ef49db90341a388351e9c000784c75386a04801a2ceff1c898a4f4a47dfa79a3f4b", 0x48}, {&(0x7f0000000580)="7acf8c0cbb24dd149530e3f7629fec06b5556e8051f1140c614770ed6030b81de6122fed0c0848195265ff9c46f32b7ee929e516c39718d4cde4acb5eab713d6dbb051986f0d350e2cb7774186bea7fd810b676d3cd30cc48bda3efcf3b9c9e4180fa1feaabc3912f1413ba5ff497722d2324032323585ea2d0bc928", 0x7c}, {&(0x7f0000000600)="9db527598d008744b7a8bea793702e489350e1108aaadd39acca4af4bd4fb69fb35355683aef585722a29aeef9e8cb4b5ef2788f4a0f1ce1ffe974a699f20e2838c760b2fdf981ca242e9fd6c2b82b341f687aa49f4b868f50864eb4bb5057d5562b2ca4418d5f28457327b7792c545f05dce44e637139d51713b36eda49c61921cfbcebf4e948ecb1bdc5a9df8fa1105d78f07dab7478b2c3280473c5742e5315b0b95e3533cf7db6e520f1a1281a559a7e23c62113b76c8ca2305f6ab7cbb1793708ae4e2145e5aca0bfc186de18be5d8456bcaeb3021a99463650", 0xdc}, {&(0x7f0000000700)="2611fb5ce7ed623915e6662296ffa0d4f8a2539383eae74fbce84f9901fc0edecba5d9e9be15855682cedc8f46649c4e6e3e26e3a0e5987e42a3ef40cd7e515806b0ea88856419df05c3f14a2e62c63c9841f84dd52b3465b085185c519997eb0a8d7558b5153d518e3eced6fdf5d21586f5e539f7ecac50777b91df0242ca854ad82b8ce6358eddd3cdf8a72e84b6e84b0ed0798fa99f99dae687ec2a60559753574012ee8fb5270e351771183fcb", 0xaf}, {&(0x7f0000000f40)="1f7d17348e0f0d7225d2763a8dd2c959069d4ca88d5e0a9de000405af298368d7cd5e6f7e5675a8e5b817fe63ee21d973d0659e5bd14bef153f5b7ffb2b86e80795392399e6b8dc4543bfe0cf76595382c106377d29016b0ca2a2db3da15b5dc666add38df7646772dd60ff72f59f1dfb583818ff230690f4d4e3647ef3a5cb5cfbe0082ac9e2a50b38844311caf254aee787b10f3cd8c6f5b6681543cf95587bb52f5c23725a3919d2f47221b9020b151994c80e76e78a1c7530250e20f0ddcbfb58be74bc33bbc4998fe2d28aeb23c1c3ec7f874f108203939737270", 0xdd}, {&(0x7f0000001040)="ba3c179112c8899e18ec657e3a559c9f6439b37e01f6bc7d8176e6122ba0f546cfd05cfeab9627f8aabd0b0a4ef438cf3dd27a11b559333c12fb942f66c2f231d4aa3c972f1caf90ec95bc91b1c7ee62b9201673570eadcdb612faab3a9ee7fa7c8c6acb1f932cd2a4c1d001c5ccda3e3d64477b818a1c4a8afd1a8eae07c20e29aabbd7ef85533fb43df0a2e22e2a6696c5a011075c2d2b981f", 0x9a}, {&(0x7f0000001100)="85f370027ca494465fbc0b3fadb8ed13a0", 0x11}, {&(0x7f0000001140)="7d0d21c8924acb0f740f224ada0ca9a1ab262f120d66d3a5aba1a903630a51e4a33f58fb4d0b09b4332fe8f714327445d48433cfa457c73bc84f102faeb4e7c57eca113ece91184b90fc9a7b96ecd920bd246077b794f76007b7c4ca76c203233fa03070188b7be8474f2bbad39794ec3964e8e3b17cd4dad3107efe352e6b9e85e69a4f3ad4f5cfa7b3dd20d4e91d0935bf27622dd4c51c143d5eb4b09a1dbebadfca7502eaa7371a197279fcd5bedc48cab60d32f535bae0734f428e", 0xbd}, {&(0x7f0000001200)="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", 0xbcc}], 0x9}}], 0x1, 0x20000000) (async) pipe(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r7, &(0x7f0000001e40)=""/99, 0x63) (async, rerun: 32) splice(r7, 0x0, r8, 0x0, 0x10000008ebc, 0x5) (async, rerun: 32) write$tun(r3, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES16=r0], 0x340a) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) (rerun: 64) 4.691077146s ago: executing program 3 (id=4616): bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x9, 0x0, 0x0, &(0x7f00000021c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000002200)=""/195, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0x8, 0x10, &(0x7f0000002340), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002380)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000023c0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002980)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000780)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/73, 0x49}, {&(0x7f0000001a80)=""/77, 0x4d}, {&(0x7f0000001b00)=""/154, 0x9a}, {&(0x7f0000001a00)=""/24, 0x18}], 0x8, &(0x7f0000001c00)=""/191, 0xbf}}], 0x1, 0x42040100, &(0x7f0000001cc0)={0x77359400}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r5, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c00058008"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r6, &(0x7f0000000380)=@caif=@dbg, &(0x7f0000000400)=0xfffffedb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x100bf28, @empty, 0x183}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001fc0)={r6, &(0x7f0000001bc0)='SEG6\x00', 0x602700, &(0x7f0000001f00)={@_ha_fsid={[0x9, 0xf588]}, {0x2, 0x4, 0x9}}, 0x6, &(0x7f0000002080), &(0x7f0000001f80)=0xcee}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000002040)={0x1, &(0x7f0000002000)=[{0xfec4, 0x74, 0x8, 0x8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 4.192731549s ago: executing program 3 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x4, 0x7, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000062000000b70000000000000095"], &(0x7f0000001000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f00000010c0)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200)}, 0x2a) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004e40)=""/4096, 0x1e28}, {&(0x7f0000005e40)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000005fc0)={0x14, r2, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010402000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0837dadb8f11a24001280110001006272696467655f736c617665000000000c00058005000100c1235729140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000100)=""/12, 0xc}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfc}, @NFTA_EXTHDR_OFFSET={0xffffffffffffff8d, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000015c0)=""/259, 0x103}, {&(0x7f0000001700)=""/4123, 0x101b}, {&(0x7f0000002740)=""/128, 0x80}, {&(0x7f00000027c0)=""/4094, 0xffe}, {&(0x7f0000004980)=""/188, 0xbc}, {&(0x7f0000003880)=""/131, 0x83}, {&(0x7f0000003940)=""/4100, 0x1004}, {&(0x7f0000004d00)=""/266, 0x10a}, {&(0x7f0000004a80)=""/142, 0x8e}, {&(0x7f0000004b40)=""/249, 0xf9}, {&(0x7f0000004c40)=""/158, 0x9e}], 0xb}, 0x0) 3.087530839s ago: executing program 3 (id=4629): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000d80)=0x80000000) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8901, &(0x7f0000000dc0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r4}, 0xc) sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000ac0)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000b00)={0x2}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x99, &(0x7f0000000840)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x0, 0x83, 0x0, &(0x7f0000000980)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000a40), &(0x7f0000000a80)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000b40)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'nq\x00', 0x0, 0x5, 0x1}, 0x2c) socket$inet6(0xa, 0x2, 0x0) 2.34116229s ago: executing program 3 (id=4637): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRES16=r0, @ANYBLOB="8a80116621169b54b6d1920511c863d84f686dec3ab68cb32615190b8729aab442e4447b599e1924d722dcbf8acc779eef96e9a7adf711c4692c713f2c9e35d7722355cc6bfc3475b919829a0121d9150708b2365dbb6ca7a30c4d1043987675029db3987ecfdedd1de4d68a98c09ea4ccecfa03e0b641100754636d6379a1d2862cd71d7899dbd4b023fa2dd920961e3fda184622247e24d68abf5d2a966acb2ac94486d947994441139598ceccce537b09c00af0c3875489ca5463e38dacba9c6dfa7dd11725e61ac1992acf08fb25b0102fb9c0b04787e531dd30c65bd6c10a9311c2fc106cf5b0bcf16218b061298cadcd3b16dfa3ab9d2b4882974b0702a35a87fa4f7408e74768321d6dfc170ca8cba2cbfc9141a6392f38d50d0944fbe893177eb956059e4e6053e0e969dcd5b45569a16b7cfe809f3841b419a7eb69475bde215aa22e6517cce5ed3d075aca2648e582d700cc407cdb2bd26a5f338502241b7e74b1416129254a1c5e88216545c47bff49cbfbe8ad8cad012d90eac92aba4209601e98d01a4e877c53eb2b0f7fbc3aa10169fda99e2fdedfebc264496ab953351d73254fcfe5a27b99c9c2481232b202c2422ff5220c130915492d4a9c00ab2f1925a8f642d01f4829a21347d1e388c10ed7ed367733417c3409ec863320cb1bd3a66830fe4eec86afd3982271f325b2fc1a33a66b9f280828c474c5e8bec5ef26e2a01a276213fa0f66e85f08a2da929e8ce2774f987c479b288d59b83f0da1e968672dbb302a3232edce3f86060dd6369eb0fdaab7e11c0f3d2d98d3126d6bc68eb3ec9cca883e7e9da17da31568903f2d77e033c971d3e6893ee44a38af0698725483110ee03d9bcd3783ee6f115635016468774331d246093c634a8940d59d62efd20b894c37cda52fd9601362ef0172e202fc8b8db41a88c39d33d589a69e35deb6c221cadf00c4d86c511defb1f08a1ac95c1cf5e5130f3ec5e6c5cb30d1a11f4dd9f896accab4edf93697048ce65a35af4aa53e82c1ca749a74a901005beaac9e5971601b9dcb282b614c67ed3f52ca3fbbbdab161d1a9fc3ecb679fef9965e74ba0137f6d4f618efcea8c8b6b3ad3729e57cc6f688bb2084cd0320aca9c472fc38e8c24c4f974e3e69e8f9cd5130ef4c5f9960f08d09aed9d298c909e7a29360ba9c1af9cd7166ba46a04d844a6a3a5018e54d1f89869f45d82b10b7054815bf4966e7dfcffe95e6afed03ab98da198eb24ae4ee46e0c91f1606eecaad3a9fb3c9ca241a3c23def1b8b42bab519ce28f0b4d3d66dfb90e76343e35bc9230d7f9cfe279cbbc7452e9e6195760a76a755a92eef4353f3449da916d9c646232eb44eea639546d3474848a62c415fccc89ccda87fac43db47e18b478a064aa7e2a4ffed221916eeddaf457af4b026a58934bce38514cde021492e4b582846164a299245d3844dfdf62b1f69eb83c40298b8180cd0a4d3f0141b4f079d8e2db5ba479f904c5ef989c03f26856c52e8397fae92f7a64f7553b1e815f3403cd74b961ed9b4b2010c3262c20cdf84ac6231a49ffffe2a442bd42364e780c907467ea8562b32be05d8572e6a8e8b3bdae43e7bf6457c5ad83085d574e26bc8eed14ff08d4bedd7c17db151f502624dc24695d384a6aaae734576abcb103261ff23a05897f5a948bbb038136b28c9dce74ea09110bc341b56054fa599d229520f0d3fcee8769732b8f0376b73849a2c3d165c79a628820797f5daa97be0eca376277eb9f955626bec86a6c8dde2b1668a2d68d8127db8b863c19318a0ec9e055e938480f566c98175210b66e66b0d366720e7c2dfeb619424b541ea54976c1cf8add6076657a177ad4012dfb774bf406be3c110bef1f388787ba0d37789c695620182f35535b909602c27d677fcec622431f3ff81cab46613d2a62e918d646f6435c828f030037d97939d53104f741c243229e146adf7a226819a6f6b3ab085f6772b6e4f84d1a11fd1a569cc037208ae01d044c676e1fce0a2089eef2e8ef2dc4c7fcbdf2e684a3b5a5be24025251ab695c7555a265a7b31441a3c70fde9c54d3bdffc85a71ab20855eeae0088a2641b8caec8aa0d14d61716fcc96ce3e386d700c047a642dac3ab5a23b9b5072397689fe5a7babe2938d9e8179e3c21c61d2fad2ae865009555642b06c1b70272140fc53ada3a14460ce56865a90ffd34c37c9a5fac01ca4ef6eaf80c8a22fab3ad7cb56672c50ec74dcb7897f45aff0ec59b13d676109c140c9f57495028e27e76bc179ac7a038bacdc7404d7104c35504b84a7c1d81d7ae48b411d8d13dfb78e83376ce70310d10b84187b7a8a227ecf239e9ec6180e6fa469bb051c985f097037e3fe6da01473b211673938d8fcf53aedfe9a7ff1e7b28e3092304da9bcea32b651df10fcbdd58bc761f7dc0d9d0fe2c51254e2d809cd45043986284bafc29c4a98bb7d641f201f2e28e3b63807c5191355b8d3c1497e4d643c878f1dbdf21b5cd6cd444fe50f15e092205eed9e77922cb18e88dad53f6d4f9120b82c6f5febd5bc04e4b94a91bfb5ab3c090a3d06481113f842340c146ff0d1cd3e92d9a2971e9c90405d483c1e6fcb591787b0fae29c4eb7f6fc8277ab3d4624165e71c6598f2f3ebe8e3d94477ce327ffa3cb6e7dd0a4098802e79ca3feed2a723ec0209bc35900d5bf8f37bc30df5fc2d68aa186196097e34d7d284be0864676f2d617858d60b0a9b53746f62b24c83c9535c860914f1333c1fba409b4d4e4a0b8a6c2177e0d3d939c9d2e14cc5bf51a658002e07512d36f13fcf4ae04003728e105ded126e8b0684cb783f0ae1edf7ddbf6b72203bd4e9f76b13a321c497e7f766f274ffa3059053a2f694c5885c6768105ad20df23d38b36356ab3ca865144603ff022fb8826e32a3f7df3829134e7c70a0bb3be93bccc3e2af5b24514951d1294634701dcff83e2065a75e1609e640cd0110f072aa10ba48af577d41107f568faea716b9ba932a1de160549bec007d97ad2995461ddc50e9892eb8a2d504270cbecae7a2451ac2946476afa8447ba72110d58646854c1f2647fa56cb0a802f282c579526fc7c43439f2050369068b26e3c27036cac711b3777810eca0b9cbcabc1c34210afc8e374ca7817db8acf4ededf70d9b25ce16b01681ba55e9e909fa1c0f8517e2fad780e50879c77f7ac14b60d40270c4afc976bc5bedabb43b78dce567ef06022befb3e9634b995581567b6baa154e94b04bedecbe9adf89d270326c376371be34cf490cc13114c1635fe17022b5344f6bfeecf885812c09b97f968aa6564b7a1020ec5e4924da28cace24d7ae779db9afc0cd6154bfb268efbb21feeb6ee5d56ef0f0b3a0d60af46ff594e08c1622f9238307e14c65966976ec763865a85558459610a0584897c7375a807613fec2736686b93db5383bc8c2d99414a82bf5f5a8b10a2f83ee70c6c82fb2ed6461c70966c446ace42f4c278064fded3c51a07589564f47bff5f4139f5c963939edd82b92fe75d4f0a56ea82beab40d89ba679cfb8ea6e7d3b199b5acc0939ca328e6afc64754a931e8ff0df66d9863e56262206e6401bdb3871174f0d0ada546f83f1936ecea58f217207df63afd3e8328228c274ce91b018af5d4a337f0354cad76452d48cc3ebac6314cea4464c041489ee5b8b8b670e833a00b8795764eadaa149a1986d22691666d59a8413e4c27a8a8f7bfeaf036aeac4479de71c0cf1eca92b861a5265a666a5c5c38d0348402879f49dd4dc284d4cff7ca513ef682ec243b122484c106529d5d2ce449efe4be14dac2f6498c13b39798d92ccfaaa624b05596014d3cffa657ff78bb302a9d5ed0fd703c07a35db12eed0c2e59dfcf8690b37e3b97efe233492344560f2883e8b3112ad8bc44bd3eea2ab6639dfbc165ee23bb5eedf3258c406242b79e425815f698ad73fa8146ae345105991d505ad31c2d2a3221dc79cd9f28cb3fbb8cc9da68033ba76d3992da70cfcc72e427f44b1f4ef1a3d7626ad55673dfdd9e5400bb6490711cae2dd4b78146ac0e36a439c3b20d4daf2f74115d93e7db83647add3db3ad3f89cd7035722abcefb023ade861753c5842acd7aed18d3516e911ddf8329089c687aab1e88c7b2cbfbb1a40573a37d70a48ca45470600d8b04ae7c89dd8379e4c3311e30b2a2dc628fb09219d5b5bce8a83c4aae0d266ff87954ece95150986c487f201dcd5b14b6f6d4f10b6b381c920f444e8efc3479864f8a5914577dce8f9154c38472aca105a9ed6863b81aa2678b091f9faf57ab2ed8ff7b2a4ed5ae3cb6d681c7613fd062a726a8ba6badd00fe72baa76675fb5bd16a960b8cac7492b68182699b6fc1b3c728d6f4c6b7b29496391c4129374919fab626f1b0afb3bc4a8049be351c6f0b1f9f703bf828a11357b970575fbdb78e3c19a699899c26d37bb2b0ec27996f08d8ab3109c1d67ccce32b7426634c92a7b229ae623111830164a42bc7d838c661d94eda462aa5a8d5b70f54e86baebec7160420db829fd81d90c2fe3a2e7ba60b6045c0367648ecd2b8d30538747198876e693956484603528d7473fb598d17dfdef8551dec60a7c2e769ae4c6847320d8440a2d4133e53cba66eb6c9bcbfba12e9a2ef277d6ab3ee0d7ed6528be588f7f5a48dba444f5b6d1dc13da5ad928d54dfbc3a9ed75543f1e519a968c3ce1375c25b9c07ea76b74e3c061517589463078a2a4965911d60f2cd4e70649de4920509d75059dd79c8dd6c527eda801462ff7c98b2e8579ed26f1a38736e4b767eb1c3bee1c950eec04f86523ab705930ebd285a69006ca6c950069d8e29b9c7c13a479337fbe32adab77451650600d41c5e199751a2ae506074a43b07969d2eaca53e78a3da018e3619f2653d289fedf46ad54ca8599e35ac25ccbf371098c263818fc4c09e7329f52c5c86433aaa9e2d8837921622b7bd835b95394b22cce6c22dc9efd64d507dea6e4a911b96d9e373f2c89e81f90e4b165e1371b4fecfbd986a5cd16b8dffb508ff211f61e27db8abb0f3ffc62b159f1de5f0e16c1e78149115e92e8acfb4e1db0779d71a863e741a83e2126b52bb6b40d84280ef05daa02dc7002fbc8edd6e0659081a86b88f68f5eda4e05e8bda87a0418efe4b79cffbc74f8f744b56d6b2829edc8254ea82487ca9242d4a88832eeebfc140f9a02d00efe027be66f6ade13880d2880729997a7b89621d88fdb296be70f191938e3d4aed171540880152610daaf4eefa3cb30d3acc44afb39b03a2a28dd263bc9ce5577c31847be632f5c40828d77cab5fa907ca3b2dc1cd8275f0f6d958d0aca6873d46e0b1e5f447343bbfe700c101235a92479c7ca43500f3f953a17e9e79874597ab8af6e8790498e668a62012abe27976c9f8b01d07e1d5ec88c1d22757d553153f19192c550e7219f2ab5964dcc5ab8ff3700e3f4c77305ca3c271282482cd70819ec384e67f900f36e746f849acc494b21669f05639f8905d14d7df6c129d1760eb92329aa2db36f5bd03cba3f90b5c4fa70bc91322ac19a467b786eb18b996bd3f04c03534ff3b7c2bc5d658513590087a0b7024f8130dd405ce43eca40e2b808561b37665777b732ac26f6b14a3a0496aafc729e0a024d027e2685d45b332befd8b26780389c4f228df0d1ac22ff414a48cee7c52d8bf150fc666a664266b4111cf64bcb1ac50a76a2abdd6ad7aa39c60770388a29894b0642207589e51073886141f7e378f29134507bbc71974390180d79f421839"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a310000000008000a4000000004"], 0x90}, 0x1, 0x0, 0x0, 0xb6fcf63cacd6ccc4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010300000000a486a8ac6ebdbd000000000000022c0000000b0a01040100040000000000000000090910010073797a31000000000900e90011000100"/107], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010300000000a486a8ac6ebdbd000000000000022c0000000b0a01040100040000000000000000090910010073797a31000000000900e90011000100"/107], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="9a3a3dc6dde1b32aff13855def2360667b61", 0x12}, {&(0x7f0000000540)="1d1ff1a86c4738b2f536535263b97bfedbbb954fd6c12c0a95d00b0622124fcf5e12acec1c13cc3e5486f482823ece4e4589efd0c2de4bb04c2b09cf6fc82ba2f7292b86ee560f5d3de28e0a473318e588b26eac350ecae3f063", 0x5a}, {&(0x7f00000005c0)="bbe5bde844b34b79791cd75101d1aa0e17bb3b9f2bde4608e9bd3b69e85bdeca00737d7a617b4885a26f0e35e46fed4754f4c5be869b17471ac79005d610901980e30939e38a0e6fbbeb1ae5b8e97768baa87f0d3d4bb0e891a0391e223a75ef6b16c5acc363be321822ebccc1767bc5e7b18cce9d5706ff7f0aa43d6d6e", 0x7e}, {&(0x7f0000000640)="147dbb9141ac9742ff1e6bd5eb15f6fbf95ddfc5", 0x14}], 0x4, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x68, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_udp_int(r4, 0x11, 0x68, 0x0, &(0x7f0000000240)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000a80)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(r7, &(0x7f0000000a80)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r7) bind$rds(r6, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r6, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r6, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000a40)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) (async) sendmsg$rds(r6, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000a40)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000740)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.116238227s ago: executing program 2 (id=4642): syz_emit_ethernet(0x37, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], '3'}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/72}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 1.964660333s ago: executing program 3 (id=4643): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000100)='w', 0x1}], 0x1, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/127, 0x7f}], 0x1) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) 1.964327979s ago: executing program 0 (id=4644): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000480)={'macsec0\x00', 0x400}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000700)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000780)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000007c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'pimreg0\x00', 0x0}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r8) r9 = socket$vsock_seqpacket(0x28, 0x5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000080)=0x8001, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r11, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000800)={@local, @dev}, &(0x7f0000000840)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@gettaction={0xf0, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2dc5}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x407ff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x752d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xf0}}, 0x44000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0x4}, {0x2, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.940220597s ago: executing program 2 (id=4645): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write(r1, &(0x7f0000000900)="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", 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x3, [@datasec={0x2, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x1, 0x2}, {0x1, 0xffff, 0x3}, {0x2, 0x8, 0x1}, {0x2, 0x0, 0x9}, {0x2, 0x6, 0xff}, {0x3, 0x4, 0x1}], '.'}]}, {0x0, [0x61]}}, &(0x7f00000004c0)=""/121, 0x73, 0x79, 0x1, 0x2, 0x10000}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x6, 0x18}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000780)={r0, 0x2, 0x63c, 0x81}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0x40, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @exit, @generic={0xf, 0x7, 0x4, 0x3e1, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0x4d, &(0x7f00000003c0)=""/77, 0x41000, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x3, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r4, r5, r6, r7], &(0x7f0000000800)=[{0x1, 0x1, 0xe, 0x5}], 0x10, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001940)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001d40)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000001dc0)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001c00)={'wg1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000001a00)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000001ac0)='syzkaller\x00', 0xffff, 0xdb, &(0x7f0000001b00)=""/219, 0x40f00, 0x60, '\x00', r9, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e300, 0xffffffffffffffff, 0x0, &(0x7f0000001c40)=[r2, r4, r7, r6, r7], 0x0, 0x10, 0x9}, 0x94) 1.844662326s ago: executing program 1 (id=4647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x30, 0x1410, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x80c0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 1.726674409s ago: executing program 5 (id=4648): syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000002ff02"], 0x0) 1.670121748s ago: executing program 1 (id=4649): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070003900028008000100", @ANYRES32, @ANYBLOB="08111f0100000000"], 0x40}}, 0x0) 1.480339595s ago: executing program 5 (id=4650): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) close(r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r2, 0xa}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={r3, 0xdc, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x400, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x10, 0x6, 0xfffffff8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000d00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x5, 0x5, 0x0, @local, @mcast1, 0x80, 0x7, 0x6, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001040)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001080)={0x0, @local, @multicast2}, &(0x7f00000010c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x8, 0x1, 0x6, @rand_addr=' \x01\x00', @empty, 0x80, 0x20, 0x6, 0xf2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x8, 0x7, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x101, 0x5}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001280)={0x0, @initdev, @empty}, &(0x7f00000012c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000001540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002300)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000001940)={0x960, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x27e6}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb3e}}, {0x8, 0x6, r17}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfffa, 0x5, 0x3, 0x380000}, {0x101, 0x80, 0x80, 0x4}, {0x2, 0x7, 0xbd, 0x9}, {0x800, 0x7, 0xe, 0x3}, {0x1, 0x2, 0x5, 0x22000}, {0x7ff, 0x4, 0xb0, 0x1}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x4e, 0x8, 0x4}, {0xdaec, 0x2, 0xf, 0xfffffff8}, {0x44, 0x7, 0x81, 0x10001}]}}}]}}, {{0x8, 0x1, r18}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r19}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa00000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x960}, 0x1, 0x0, 0x0, 0x14}, 0x2000c094) 1.479172691s ago: executing program 0 (id=4651): bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x9, 0x0, 0x0, &(0x7f00000021c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000002200)=""/195, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0x8, 0x10, &(0x7f0000002340), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002380)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000023c0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002980)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000780)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/73, 0x49}, {&(0x7f0000001a80)=""/77, 0x4d}, {&(0x7f0000001b00)=""/154, 0x9a}, {&(0x7f0000001a00)=""/24, 0x18}], 0x8, &(0x7f0000001c00)=""/191, 0xbf}}], 0x1, 0x42040100, &(0x7f0000001cc0)={0x77359400}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r5, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c0005800800"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r6, &(0x7f0000000380)=@caif=@dbg, &(0x7f0000000400)=0xfffffedb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x100bf28, @empty, 0x183}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001fc0)={r6, &(0x7f0000001bc0)='SEG6\x00', 0x602700, &(0x7f0000001f00)={@_ha_fsid={[0x9, 0xf588]}, {0x2, 0x4, 0x9}}, 0x6, &(0x7f0000002080), &(0x7f0000001f80)=0xcee}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000002040)={0x1, &(0x7f0000002000)=[{0xfec4, 0x74, 0x8, 0x8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 1.474145302s ago: executing program 2 (id=4652): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000340), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$kcm(0x2, 0x200000000000003, 0x106) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000540)={'wlan0\x00', @broadcast}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="d800000018007bf6e00212ba0d8105040a600000000f0409007c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac040098007f6f940071f9c532bc912322f089b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a50be2b991069205faabdfb25ccca262f3d40fad95667e04adcdf634c1f215ca2d599e147862afcd0fc381cd9cde3099ad8ffd5e1cace81ed0b7fece0b4000000005de6ccd40dd601edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4004) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000e80)="58ddb007a47a8b1f458ab677d5", 0xd}], 0x1) recvfrom(r1, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000580)=[{{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="281effe935fdca24ffffff556ea6e500"/26, 0x20}], 0x1, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f0000000700)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_ttl={{0x18, 0x0, 0x2, 0xedd}}], 0x18}}], 0x2, 0x4800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) 1.391546729s ago: executing program 1 (id=4653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000013000500000000000000000003010000100002207664706173696d5f6e6574000a00040076647061303f", 0x2e}], 0x1}, 0x0) 1.188522522s ago: executing program 5 (id=4654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001a00)={0x440, 0x41, 0x1, 0x70bd2c, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @generic="6c81f8f9f1bafc586b4c1b250579bc7c1fadf7465f9b4d585a1aa9809a5fa756c0b38860b70050569b84cad722652ec2cdbc2ce738b6ca8382f6b23a884c487271b2a1e0a7dd4a808c4279eac27ac9b8f962261a9c7bd7ff", @nested={0x3b9, 0x8003, 0x0, 0x1, [@generic="c2da799166df92dbe4cd7c622b33b84a6b6082e0925392e73abff1616c8df18dc0870828bc2a116399257f4732900ba42fa6883f1b4724bad506a1d1a9f9cf24d61dc52e7164e8fc11850a938b8de4f2a6087d4cc34c2f7af206609485d3dc5b45b824f757f67a330d00e7386770d6ca722fba3ca654a7e61632ba328146a5766cc0c67dac1cea973935e48d596da0ef66cc49248a328d931d8200068e13255a6c80dbcf775ed278a431596bf114e5f98882f48875ca8ebbd051ad8c23d03ff2a9d501378344ed68c1f49dfbc57854026163de9b", @generic="3550bc82c50d84fa33675cb9bbf8acbfc535804f3b698f14ba420f65498dc8b2b3c0548a4fdbba8571133ba17eb33dfc9902384150f52352f7bceab37e80b5645d4bb76d0142be6fa05fce12d6971c53d1a09fa7dd5ca2d12b7b0b5f25f1c639df9df06d246e29161de9d6a1b62276cb6040374c674e8946e922ca405c1bd389093f2d96218e90", @typed={0xc, 0xab, 0x0, 0x0, @u64=0x1000}, @nested={0x5d, 0x3f, 0x0, 0x1, [@nested={0x3b, 0x10d, 0x0, 0x1, [@generic="3128b089712a7a89149c58fb498841e67eb5", @generic="70224851c85710b75a89bf2794e998c52deeb54ea7c87c9dac2abaaa23c3d7a71ce9a70e45"]}, @generic="2fd894c824d8bd600742324a11666ffb10ac165ad2", @typed={0x8, 0x6d, 0x0, 0x0, @uid}]}, @generic="247d0cb844d7cabbbc53ae1d26aba63960a2683da8d3be58ba002397a87899", @nested={0x154, 0x2a, 0x0, 0x1, [@typed={0x4, 0x91}, @nested={0x72, 0xd3, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="a6b15525a19929e88aaf4ddc6d9ae251275d9f6a17eb84d70950d0cd9de4bde17b0aec3ad7b00c21ee8ed0eabc9642715d09c39b5ca63caeae6ed6bb90c25546dbb1c2aea010b838cbd988bcb881f131290defaa6fbe3c7771f200965a2404b33eebc6acbd27", @nested={0x4, 0x7a}]}, @typed={0x8, 0x4d, 0x0, 0x0, @fd}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r0}, @nested={0xc8, 0x60, 0x0, 0x1, [@generic="d6472eb5eadc917e61649d82b22426a7dda6684eb03f2c8b1b94998803c5bd7c28a8d3ccd50b083847779b26154cedb6e32e62c2711f2852a72ebbaeec287ccd4a773b4f12fc379998ef071290b49323e811cc781a9683e6109cb09d8bb38a141f0d94114c2599c0b29a0d0e0fe09a46e9adc0309d17d62af70b696c05b4a4b3368ac9a55a1c799e42528f468eb88bed08baf0c6123bb2ba94681af3771adc5ba00cf92643bdd280c4e73b7fd485372c0b096c7830991524", @nested={0x4, 0x47}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}]}, @generic="9882ecad2b990ffd73e7223f6bed97ffe4a0ec8a7b04d71992033bb45bb8386844997bf19c4350bb34bec418de15694cfdaf9555829203816407023c259bc53febefccf9663561", @nested={0x4, 0x165}, @generic="efd5bad85a840237f0bd0d65039272c1ea909d46c4045120076608e8b86ca1e580e9d1c2340622804c4127d335834c41"]}]}, 0x440}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000005c0)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000440)={0x0, 0x32, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c002}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000240)='GPL\x00', 0x2, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x20000044) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@delchain={0x24, 0x2e, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x7}, {0x7, 0x8}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r13}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400000068000104000000000000000035c124a26aab938b0100f62e41ad1e4c00100000"], 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r8], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r14, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB='(F\x00\x00', @ANYRES16=r15, @ANYBLOB="8fbf2bbd7000fcdbdf2516000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x78, r15, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}}, 0x10) 1.163256259s ago: executing program 1 (id=4655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, r1, 0x87800000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000200104030000000000000000000a00000006000640000000000a00020000000005010000000800044000000080"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x20000011) 714.946159ms ago: executing program 2 (id=4656): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000240)=0x3, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x21, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xca, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@deltclass={0x46c, 0x29, 0x102, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x9bcf45e5d42f5383}, {0x9, 0x10}, {0xa, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x3, 0x3, 0x7, 0x3, 0xffff, 0x2b4, 0xff, 0x4, 0x7, 0x1, 0x2, 0x9, 0x9, 0x9, 0xb8, 0x7, 0x4, 0x10, 0xd3, 0x6, 0x954, 0x81, 0x1, 0x8, 0x9, 0x0, 0x6, 0x7, 0x7, 0x26cb, 0xfffffff4, 0x9, 0x81, 0x1, 0x739, 0x2, 0x10001, 0x4d, 0x9, 0x6, 0x7ff, 0x4, 0x3, 0x0, 0x8, 0x7, 0x4, 0xef8, 0x4, 0x57, 0x9, 0x5, 0x7, 0x5, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0xa599, 0x2, 0x20a8, 0x3, 0x7, 0x0, 0x7, 0x55cf, 0x3ff, 0x0, 0x5, 0x9, 0x11, 0x7, 0x7, 0x3, 0x9, 0x3, 0x1ff, 0x3, 0xff, 0x4, 0x3, 0x8, 0x1, 0x0, 0x10, 0x101, 0x8, 0x2, 0xc671, 0x8, 0x7, 0x4, 0x6, 0x3d, 0x1, 0x6, 0x9, 0x2, 0x28599cde, 0x7, 0x3, 0x4, 0x2, 0x6, 0x1ff, 0x2, 0xff, 0xe6, 0x5, 0x9, 0x1, 0x5, 0x0, 0x80, 0x850b, 0x1, 0x6, 0x2, 0x5, 0x7, 0x8, 0x1, 0x6, 0x80000001, 0x0, 0x8, 0x8000, 0x7, 0x9, 0x9, 0x1, 0x688497d5, 0x10000, 0x1, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1c, 0x80000000, 0x0, 0x48b0, 0xffffffc0, 0x5, 0x7fff, 0xffff, 0xb, 0xfff, 0x5, 0x75f, 0x7ff, 0x1, 0x800, 0x4, 0x62, 0xfffffffc, 0xa, 0xfffffffb, 0xffffffff, 0x0, 0x2, 0xc, 0x1, 0x8f4, 0x7, 0x6, 0x0, 0x80000000, 0x9, 0x8000, 0x800, 0x93e, 0x3, 0x6, 0xa1, 0xffff7fff, 0x3, 0x7, 0xb1, 0x3e, 0xd000000, 0x5, 0x3, 0x11, 0xfffffffa, 0x3, 0x8, 0xcad, 0x9, 0x9, 0x1, 0x9, 0x4, 0x13b, 0x2, 0x1, 0x200, 0x4, 0x0, 0x5, 0x0, 0xfff, 0x5, 0x6, 0x5, 0x200, 0x80000001, 0x6, 0x7f, 0x7fff, 0x6, 0x0, 0xf, 0x5846, 0x1, 0x9, 0x2, 0x3, 0x4, 0x3, 0x81, 0x2, 0x1, 0x6, 0x7, 0x3, 0x3, 0x7, 0x6b, 0x2, 0x80000001, 0x4, 0x8, 0x2, 0x7fff, 0x1000, 0x100, 0x9, 0x9, 0x9, 0x80, 0x5, 0x7fff, 0x7, 0x7, 0x6e0, 0x5, 0x1c5, 0xe, 0x101]}]}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x83, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0xdc}}, @tclass_kind_options=@c_netem={0xa}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000240)=0x3, 0x4) (async) socket$inet6(0xa, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x21, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xca, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@deltclass={0x46c, 0x29, 0x102, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x9bcf45e5d42f5383}, {0x9, 0x10}, {0xa, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x3, 0x3, 0x7, 0x3, 0xffff, 0x2b4, 0xff, 0x4, 0x7, 0x1, 0x2, 0x9, 0x9, 0x9, 0xb8, 0x7, 0x4, 0x10, 0xd3, 0x6, 0x954, 0x81, 0x1, 0x8, 0x9, 0x0, 0x6, 0x7, 0x7, 0x26cb, 0xfffffff4, 0x9, 0x81, 0x1, 0x739, 0x2, 0x10001, 0x4d, 0x9, 0x6, 0x7ff, 0x4, 0x3, 0x0, 0x8, 0x7, 0x4, 0xef8, 0x4, 0x57, 0x9, 0x5, 0x7, 0x5, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0xa599, 0x2, 0x20a8, 0x3, 0x7, 0x0, 0x7, 0x55cf, 0x3ff, 0x0, 0x5, 0x9, 0x11, 0x7, 0x7, 0x3, 0x9, 0x3, 0x1ff, 0x3, 0xff, 0x4, 0x3, 0x8, 0x1, 0x0, 0x10, 0x101, 0x8, 0x2, 0xc671, 0x8, 0x7, 0x4, 0x6, 0x3d, 0x1, 0x6, 0x9, 0x2, 0x28599cde, 0x7, 0x3, 0x4, 0x2, 0x6, 0x1ff, 0x2, 0xff, 0xe6, 0x5, 0x9, 0x1, 0x5, 0x0, 0x80, 0x850b, 0x1, 0x6, 0x2, 0x5, 0x7, 0x8, 0x1, 0x6, 0x80000001, 0x0, 0x8, 0x8000, 0x7, 0x9, 0x9, 0x1, 0x688497d5, 0x10000, 0x1, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1c, 0x80000000, 0x0, 0x48b0, 0xffffffc0, 0x5, 0x7fff, 0xffff, 0xb, 0xfff, 0x5, 0x75f, 0x7ff, 0x1, 0x800, 0x4, 0x62, 0xfffffffc, 0xa, 0xfffffffb, 0xffffffff, 0x0, 0x2, 0xc, 0x1, 0x8f4, 0x7, 0x6, 0x0, 0x80000000, 0x9, 0x8000, 0x800, 0x93e, 0x3, 0x6, 0xa1, 0xffff7fff, 0x3, 0x7, 0xb1, 0x3e, 0xd000000, 0x5, 0x3, 0x11, 0xfffffffa, 0x3, 0x8, 0xcad, 0x9, 0x9, 0x1, 0x9, 0x4, 0x13b, 0x2, 0x1, 0x200, 0x4, 0x0, 0x5, 0x0, 0xfff, 0x5, 0x6, 0x5, 0x200, 0x80000001, 0x6, 0x7f, 0x7fff, 0x6, 0x0, 0xf, 0x5846, 0x1, 0x9, 0x2, 0x3, 0x4, 0x3, 0x81, 0x2, 0x1, 0x6, 0x7, 0x3, 0x3, 0x7, 0x6b, 0x2, 0x80000001, 0x4, 0x8, 0x2, 0x7fff, 0x1000, 0x100, 0x9, 0x9, 0x9, 0x80, 0x5, 0x7fff, 0x7, 0x7, 0x6e0, 0x5, 0x1c5, 0xe, 0x101]}]}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x83, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0xdc}}, @tclass_kind_options=@c_netem={0xa}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) (async) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) (async) 615.205035ms ago: executing program 0 (id=4657): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000003c0), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088f7855078e2d10fa061655d67876bc8ffff00000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000500)=0x9, 0x4) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000500)=0x9, 0x4) 552.815119ms ago: executing program 5 (id=4658): socket$inet(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x23}, 0xd8}}}, 0x3a) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080)) 552.470091ms ago: executing program 1 (id=4659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000b80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x0, @broadcast}, 0x16b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000001000000000100941ec9c30000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a404f1800032800048008000240000000100800014000000000140003006e657464657673696d300000000000000800054000000000140000001100010000000000000000000000000a"], 0xac}}, 0x4040005) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x709d26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xa07, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff2, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) socket(0x1, 0x800, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value, &(0x7f0000000900)=0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000980)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x430881, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000a00)=0x1000) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRESDEC=r10, @ANYRES8=r6, @ANYBLOB="30c0b3d07efb473e00efdb43dc6367227442e6e1b38c68b1b3f3008030024994fa691bc39333709087364a104a1ae535d5de064d67851c43bbc2ec5ac5f6fb3c5bd2338e222b8fbd656354706c361c8c7b9760e7c0beb11d5b98035fda36b44dbd0084a08b716605649456330e1c71ea5625903faba796729cfe0ab92b29958fac5e58df3600b90f5563b9bb0fc64b131a7560d994dfbae24079424dd3565c7519c38e291ce7d0151c"], 0x3c}}, 0x40) r12 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r12, 0x110, 0x3) 478.637696ms ago: executing program 0 (id=4660): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x2, 0x6, {{0xa, 0x4, 0x2, 0xd, 0x28, 0x68, 0x0, 0xa7, 0x29, 0x0, @loopback, @empty, {[@generic={0x88, 0x4, '|R'}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x2, [0x1, 0x40, 0x5]}]}}}}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xb, 0x0}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x7ff, 0xa6, &(0x7f0000000440)=""/166, 0x1f00, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x9, 0x5, 0x8000}, 0x10, 0x3a4a, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x1, 0x5, 0xb}, {0x3, 0x2, 0x1, 0x2}, {0x2, 0x4, 0x2, 0xb}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x0, 0x4, 0x9, 0x4, 0xfffffffffffffff4, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x4a, &(0x7f0000000080)=""/74, 0x41100, 0x38, '\x00', r0, @cgroup_sock_addr=0x14, r1, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0x7, 0x2}, 0x10, r2, r3, 0x0, &(0x7f0000000700)=[r4], 0x0, 0x10, 0x2}, 0x94) 415.15793ms ago: executing program 5 (id=4661): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000080)='\xff\xff\xff\xff\xff\xff', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x100, 0x10e]}, {0x3, 0x9, 0xfff, 0x6}}, 0x7ff, &(0x7f0000000140), &(0x7f00000001c0)=0x7f}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0xc, 0x1, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0xc, 0x1, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @initdev}, &(0x7f0000000400)=0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex=r4, r1, 0x2a, 0x1d, r2, @void, @value, @void, @void, r3}, 0x20) 325.223854ms ago: executing program 2 (id=4662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@arena={0x21, 0x0, 0x0, 0x1b, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f00000006c0)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000680), 0x4000000000001f2, 0x600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000340)={@loopback, @initdev, 0x0}, &(0x7f0000000380)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f1, 0x0, 0x0, 0x0, 0xa2a6}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @jmp={0x5, 0x0, 0x6, 0x3, 0x9, 0x80, 0xfffffffffffffffc}, @generic={0x9, 0x5, 0xc, 0x8, 0xffff}, @generic={0xb, 0x4, 0x0, 0x6, 0x2}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x81ff, 0x9}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x0, 0x2, 0x10, 0x4}, {0x2, 0x1, 0xf, 0xb}, {0x2, 0x3, 0xe, 0x3}, {0x3, 0x5, 0x5, 0x2}, {0x1, 0x3, 0x8, 0x3}, {0x3, 0x2, 0x0, 0x4}, {0x6, 0x4, 0x4, 0x1}], 0x10, 0x33}, 0x94) 317.206001ms ago: executing program 0 (id=4663): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) close(r1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000300)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040004) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, 0x107}) 151.467166ms ago: executing program 2 (id=4664): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000740)=0xb, 0x4) (async) r1 = socket$inet6(0xa, 0x5, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000180)={@random="5b5f77a67d29", @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_subtree(r5, &(0x7f0000000c80)={[{0x6, 'net'}]}, 0x5) splice(r4, 0x0, r6, 0x0, 0x3, 0x4) (async) sendmsg(r3, &(0x7f0000000880)={&(0x7f00000008c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000640)=0x100000001, 0x76dc) (async) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000006c0)=0x2, 0x4) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000740)=ANY=[], 0x141) (async) sendfile(r8, r9, &(0x7f0000000780)=0x1, 0x7ff) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000007c0)={'lo\x00', 0x1000}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0x0, 0x10, &(0x7f0000002080), 0xfffffffffffffd00}, 0x48) (async) r11 = socket(0x200000000000011, 0x2, 0x0) connect$packet(r11, 0x0, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast1, @in=@initdev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000009c0)=@updsa={0x210, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x0, 0x4e21, 0xa67, 0x2, 0x90, 0x80, 0x3b, 0x0, r10}, {@in=@broadcast, 0x4d3, 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x24}, {0x1, 0x0, 0xb5d, 0x4, 0x7, 0x3, 0x4, 0x5}, {0x8000000000000001, 0x5, 0x7, 0x9}, {0x3, 0x101, 0xffffff00}, 0x70bd27, 0x34ff, 0xa, 0x1, 0x2, 0x8}, [@algo_crypt={0x11f, 0x2, {{'ecb(aes)\x00'}, 0x6b8, "20fa196172544703541022f3e8d9e4794ae736e09e85539388adf13098cce221f9b654ab14026e8f167e09ff1e7627c519542e61d161ca841efcc81ad986a51ed5da6a1300639406600bb19fb2c90d3f6e3f9ab3f9f4e2ced249b2bf334599de05a2daa12c07802ec69a8a12fe2961c280ea68c92050658110796631a900aa346a005f6386f5945b7632a2527b13c95ac17786f8b0e59b72a4a08948f430df048958cd8db80f927e746044e32c71cbad4f3b1611ef702d7e1a3ca03dab55a2be8eb744f1f09d0358ec55c450328cacee99ad3b170b228f"}}]}, 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x24040085) 53.350084ms ago: executing program 5 (id=4665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e000000130005000000000000000000030100001000023f7664706173696d5f6e6574000a00040076647061303f", 0x2e}], 0x1}, 0x0) 52.571106ms ago: executing program 1 (id=4666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1f, 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1f, 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000002d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002dc0)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002e00)={@cgroup=r2, r4, 0x2f, 0x18, 0x4, @void, @value=r2}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002e00)={@cgroup=r2, r4, 0x2f, 0x18, 0x4, @void, @value=r2}, 0x20) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff00"/144], 0x90) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(r1) (async) close(r1) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0000004af29c3ff0490000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x40000844}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f00000030c0)='GPL\x00'}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f00000030c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003100)={r8, 0x2000d00, 0xe, 0xaf74d922fc9bf873, &(0x7f0000003180)="a06ad876d56a0064d082778c3938", &(0x7f00000031c0)=""/85, 0xfffffffd, 0x4000000, 0x0, 0x0, &(0x7f0000003240)="abe320678adbafb1c806b647bb74ed129e09672f9bf9dd3b0c687f16fa0ee9a2d8dfabbf7a048645f1c9a075e664cd0d0a8669869222b3763698301ceeb89c3a28dcfccdaf8a9706055013a2cb795809e5d41847408cec52979cc451bfa20cf318bc33bbcd2d5b13646bac791be31192afc6273924a6419b9fbf8543aa744c3822b320b927ef8946bc1514a23a794f0593af847970b9248d17ef1ab222787433188977be6a5873806bea7cdea600"/200, &(0x7f0000003340), 0x5, 0x0, 0x1002}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003100)={r8, 0x2000d00, 0xe, 0xaf74d922fc9bf873, &(0x7f0000003180)="a06ad876d56a0064d082778c3938", &(0x7f00000031c0)=""/85, 0xfffffffd, 0x4000000, 0x0, 0x0, &(0x7f0000003240)="abe320678adbafb1c806b647bb74ed129e09672f9bf9dd3b0c687f16fa0ee9a2d8dfabbf7a048645f1c9a075e664cd0d0a8669869222b3763698301ceeb89c3a28dcfccdaf8a9706055013a2cb795809e5d41847408cec52979cc451bfa20cf318bc33bbcd2d5b13646bac791be31192afc6273924a6419b9fbf8543aa744c3822b320b927ef8946bc1514a23a794f0593af847970b9248d17ef1ab222787433188977be6a5873806bea7cdea600"/200, &(0x7f0000003340), 0x5, 0x0, 0x1002}, 0x28) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r7, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x8c00, &(0x7f0000000200)={@align=0xe, {0x4, 0x1ff, 0x0, 0x2}}, 0x3, &(0x7f0000000240), &(0x7f0000000280)}, 0x1, &(0x7f00000003c0)=[{0x3, 0x80, &(0x7f00000002c0)='/dq\xa6_\xc6\a\xaeq7\xdb\x96ev/vi', &(0x7f0000000300)="32c670b2c349486ce16d533038b99922282ddc2c4ffcbc687f6b762b5672451bbd86e667f4b7b2dfac469d1fd4652043500f268155727b7290bfe6010ee066dcc94319371ec1a26f69da94c28bdf0236236e65aa3bd66b69aa32b18c5ef9fc7ecf50e137a5b911ab9e023017cdff9b69706e2991e12e9ede0e786daea67978a54153b8491b5e570fdb81ab53626e5605a1c994be238355096e9d", 0x9a, 0x8}]}) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e20, 0x10000, @loopback, 0xe}, {0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3fd}, 0x1, {[0x6, 0x3, 0x0, 0x9, 0x800, 0x8, 0xf861, 0x8]}}, 0x5c) 0s ago: executing program 0 (id=4667): bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x9, 0x0, 0x0, &(0x7f00000021c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000002200)=""/195, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0x8, 0x10, &(0x7f0000002340), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002380)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000023c0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002980)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000780)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/73, 0x49}, {&(0x7f0000001a80)=""/77, 0x4d}, {&(0x7f0000001b00)=""/154, 0x9a}, {&(0x7f0000001a00)=""/24, 0x18}], 0x8, &(0x7f0000001c00)=""/191, 0xbf}}], 0x1, 0x42040100, &(0x7f0000001cc0)={0x77359400}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r5, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c0005800800"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r6, &(0x7f0000000380)=@caif=@dbg, &(0x7f0000000400)=0xfffffedb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x100bf28, @empty, 0x183}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001fc0)={r6, &(0x7f0000001bc0)='SEG6\x00', 0x602700, &(0x7f0000001f00)={@_ha_fsid={[0x9, 0xf588]}, {0x2, 0x4, 0x9}}, 0x6, &(0x7f0000002080), &(0x7f0000001f80)=0xcee}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000002040)={0x1, &(0x7f0000002000)=[{0xfec4, 0x74, 0x8, 0x8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): da/0x21f0 [ 374.230445][T17357] ? ___neigh_create+0x6da/0x21f0 [ 374.230470][T17357] ___neigh_create+0x6da/0x21f0 [ 374.230496][T17357] ? neigh_lookup+0xb6/0x610 [ 374.230521][T17357] ? __pfx_arp_key_eq+0x10/0x10 [ 374.230624][T17357] ? __pfx_neigh_lookup+0x10/0x10 [ 374.230648][T17357] ? __mutex_lock+0x10de/0x15a0 [ 374.230711][T17357] ? full_name_hash+0x92/0xe0 [ 374.230776][T17357] arp_req_set+0x7c1/0xe00 [ 374.230798][T17357] ? arp_ioctl+0x387/0x490 [ 374.230821][T17357] ? __pfx_arp_req_set+0x10/0x10 [ 374.230863][T17357] arp_ioctl+0x396/0x490 [ 374.230885][T17357] ? __pfx_arp_ioctl+0x10/0x10 [ 374.230926][T17357] inet_ioctl+0x3c4/0x560 [ 374.230988][T17357] ? __pfx_inet_ioctl+0x10/0x10 [ 374.231034][T17357] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.231095][T17357] sock_do_ioctl+0x101/0x320 [ 374.231201][T17357] ? __pfx_sock_do_ioctl+0x10/0x10 [ 374.231244][T17357] sock_ioctl+0x57a/0x7e0 [ 374.231268][T17357] ? __fget_files+0x2a/0x420 [ 374.231292][T17357] ? __pfx_sock_ioctl+0x10/0x10 [ 374.231316][T17357] ? __fget_files+0x2a/0x420 [ 374.231339][T17357] ? __fget_files+0x2a/0x420 [ 374.231366][T17357] ? bpf_lsm_file_ioctl+0x9/0x20 [ 374.231412][T17357] ? __pfx_sock_ioctl+0x10/0x10 [ 374.231435][T17357] __se_sys_ioctl+0xfc/0x170 [ 374.231466][T17357] do_syscall_64+0x166/0x520 [ 374.231490][T17357] ? trace_irq_disable+0x3b/0x140 [ 374.231515][T17357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.231536][T17357] ? clear_bhb_loop+0x70/0xc0 [ 374.231559][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.231582][T17357] RIP: 0033:0x7f09c51a8f19 [ 374.231602][T17357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.231618][T17357] RSP: 002b:00007f09c60c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.231638][T17357] RAX: ffffffffffffffda RBX: 00007f09c5425fa0 RCX: 00007f09c51a8f19 [ 374.231652][T17357] RDX: 00002000000000c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 374.231664][T17357] RBP: 00007f09c60c2090 R08: 0000000000000000 R09: 0000000000000000 [ 374.231676][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.231687][T17357] R13: 00007f09c5426038 R14: 00007f09c5425fa0 R15: 00007ffdcfe5c598 [ 374.231720][T17357] [ 374.986972][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.039155][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.071272][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.071394][T15130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.109442][T17371] ip_tables: iptables: counters copy to user failed while replacing table [ 375.109976][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.110099][T15130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.845038][T17393] netlink: 'syz.1.3136': attribute type 16 has an invalid length. [ 375.845071][T17393] netlink: 'syz.1.3136': attribute type 17 has an invalid length. [ 375.891732][T17393] 0ªX¹¦Dö»: left allmulticast mode [ 375.906036][T17393] sit0: left promiscuous mode [ 375.948268][T17393] syz_tun: left promiscuous mode [ 375.979198][T17393] bridge_slave_1: left allmulticast mode [ 376.103958][T17393] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 376.222270][T17393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.257979][T17393] ip6gre1: left allmulticast mode [ 376.287538][T17393] bond3: left promiscuous mode [ 376.287560][T17393] veth0_to_bond: left promiscuous mode [ 376.287742][T17393] bond3: left allmulticast mode [ 376.287755][T17393] veth0_to_bond: left allmulticast mode [ 376.288961][T17393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.293962][T17393] veth0_to_team: entered promiscuous mode [ 376.340140][T17393] bond4: left promiscuous mode [ 376.340162][T17393] ip6gre2: left promiscuous mode [ 376.355487][T17393] ip6gre3: left promiscuous mode [ 376.357556][T17393] bond5: left promiscuous mode [ 376.357573][T17393] bridge3: left promiscuous mode [ 376.357847][T17393] bond5: left allmulticast mode [ 376.357859][T17393] bridge3: left allmulticast mode [ 376.456622][T17393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.476118][T17393] 8021q: adding VLAN 0 to HW filter on device bond10 [ 376.503716][T17393] gretap1: left promiscuous mode [ 376.503739][T17393] gretap1: left allmulticast mode [ 376.615985][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.618054][T15130] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.647673][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.659628][T15130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.347665][T17422] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3142'. [ 377.400307][T17422] syzkaller1: entered promiscuous mode [ 377.400333][T17422] syzkaller1: entered allmulticast mode [ 377.874932][T17436] Bluetooth: MGMT ver 1.23 [ 378.398814][T17460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3152'. [ 378.574933][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.692771][T17474] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3156'. [ 378.702971][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3157'. [ 378.812115][T17475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.812300][T17475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.879834][T17474] syzkaller1: entered promiscuous mode [ 378.880020][T17474] syzkaller1: entered allmulticast mode [ 379.201194][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273712][T16942] veth0_vlan: entered promiscuous mode [ 379.299204][T17492] nbd: socks must be embedded in a SOCK_ITEM attr [ 379.417013][T16942] veth1_vlan: entered promiscuous mode [ 379.647177][T16942] veth0_macvtap: entered promiscuous mode [ 379.687595][T16942] veth1_macvtap: entered promiscuous mode [ 380.025652][T17532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3167'. [ 380.147614][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.154201][T17527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3167'. [ 380.224302][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.280243][T17537] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3170'. [ 380.354582][T15125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.355416][T15125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.355454][T15125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.434125][T17537] syzkaller1: entered promiscuous mode [ 380.434305][T17537] syzkaller1: entered allmulticast mode [ 380.493716][T17547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3172'. [ 380.516970][T15125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.617720][T17554] netlink: 'syz.0.3173': attribute type 2 has an invalid length. [ 380.785495][T17558] FAULT_INJECTION: forcing a failure. [ 380.785495][T17558] name failslab, interval 1, probability 0, space 0, times 0 [ 380.785544][T17558] CPU: 1 UID: 0 PID: 17558 Comm: syz.0.3174 Not tainted syzkaller #0 PREEMPT(full) [ 380.785566][T17558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 380.785577][T17558] Call Trace: [ 380.785584][T17558] [ 380.785593][T17558] dump_stack_lvl+0xe8/0x150 [ 380.785629][T17558] should_fail_ex+0x3eb/0x540 [ 380.785658][T17558] should_failslab+0xa8/0x100 [ 380.785690][T17558] __kmalloc_noprof+0xf9/0x710 [ 380.785715][T17558] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 380.785843][T17558] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 380.785875][T17558] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 380.785909][T17558] genl_family_rcv_msg_doit+0xda/0x340 [ 380.785939][T17558] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.785971][T17558] ? apparmor_capable+0x126/0x170 [ 380.786034][T17558] ? bpf_lsm_capable+0x9/0x20 [ 380.786052][T17558] ? security_capable+0x7e/0x2c0 [ 380.786109][T17558] genl_rcv_msg+0x614/0x7a0 [ 380.786139][T17558] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.786162][T17558] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 380.786279][T17558] netlink_rcv_skb+0x226/0x4a0 [ 380.786334][T17558] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.786358][T17558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.786403][T17558] ? down_read+0x2b9/0x320 [ 380.786435][T17558] genl_rcv+0x28/0x40 [ 380.786457][T17558] netlink_unicast+0x8ef/0xa80 [ 380.786502][T17558] netlink_sendmsg+0x7f0/0xb20 [ 380.786537][T17558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.786569][T17558] ? aa_sock_msg_perm+0x144/0x210 [ 380.786604][T17558] ? apparmor_socket_sendmsg+0x98/0x360 [ 380.786631][T17558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.786655][T17558] sock_sendmsg_nosec+0x14e/0x190 [ 380.786679][T17558] ____sys_sendmsg+0x54e/0x850 [ 380.786700][T17558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.786723][T17558] ? import_iovec+0x73/0xa0 [ 380.786747][T17558] ___sys_sendmsg+0x2a5/0x360 [ 380.786763][T17558] ? __lock_acquire+0x747/0x2de0 [ 380.786790][T17558] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.786837][T17558] ? __fget_files+0x3a2/0x420 [ 380.786856][T17558] ? __fget_files+0x2a/0x420 [ 380.786885][T17558] __x64_sys_sendmsg+0x1b1/0x290 [ 380.786906][T17558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.786946][T17558] do_syscall_64+0x166/0x520 [ 380.786965][T17558] ? trace_irq_disable+0x3b/0x140 [ 380.786985][T17558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.787002][T17558] ? clear_bhb_loop+0x70/0xc0 [ 380.787024][T17558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.787039][T17558] RIP: 0033:0x7f9cd5da8f19 [ 380.787054][T17558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.787068][T17558] RSP: 002b:00007f9cd6c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.787085][T17558] RAX: ffffffffffffffda RBX: 00007f9cd6025fa0 RCX: 00007f9cd5da8f19 [ 380.787096][T17558] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 380.787107][T17558] RBP: 00007f9cd6c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 380.787117][T17558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.787125][T17558] R13: 00007f9cd6026038 R14: 00007f9cd6025fa0 R15: 00007ffff2d88428 [ 380.787150][T17558] [ 380.951037][T17539] Bluetooth: MGMT ver 1.23 [ 381.296459][T17564] openvswitch: netlink: IP tunnel dst address not specified [ 381.546834][T15615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.546857][T15615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.650620][T17577] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 381.671149][T17576] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3180'. [ 381.687627][T15130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.687647][T15130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.943350][T17588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3182'. [ 382.057288][T17595] FAULT_INJECTION: forcing a failure. [ 382.057288][T17595] name failslab, interval 1, probability 0, space 0, times 0 [ 382.057318][T17595] CPU: 1 UID: 0 PID: 17595 Comm: syz.0.3186 Not tainted syzkaller #0 PREEMPT(full) [ 382.057340][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.057351][T17595] Call Trace: [ 382.057359][T17595] [ 382.057367][T17595] dump_stack_lvl+0xe8/0x150 [ 382.057405][T17595] should_fail_ex+0x3eb/0x540 [ 382.057435][T17595] should_failslab+0xa8/0x100 [ 382.057467][T17595] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 382.057491][T17595] ? rcu_is_watching+0x16/0xb0 [ 382.057521][T17595] ? kobject_set_name_vargs+0x61/0x110 [ 382.057639][T17595] ? kobject_set_name_vargs+0x61/0x110 [ 382.057667][T17595] kstrdup+0x42/0x100 [ 382.057701][T17595] kobject_set_name_vargs+0x61/0x110 [ 382.057723][T17595] dev_set_name+0xe2/0x140 [ 382.057816][T17595] ? __pfx_dev_set_name+0x10/0x10 [ 382.057843][T17595] ? __kmalloc_noprof+0x387/0x710 [ 382.057867][T17595] ? __kmalloc_noprof+0x1a6/0x710 [ 382.057888][T17595] ? __vdpa_alloc_device+0x11c/0x450 [ 382.057922][T17595] __vdpa_alloc_device+0x2cb/0x450 [ 382.057951][T17595] vdpasim_create+0x1f8/0x9c0 [ 382.057980][T17595] ? lock_acquire+0x115/0x350 [ 382.058009][T17595] vdpasim_net_dev_add+0x12d/0x3d0 [ 382.058033][T17595] ? __pfx_vdpasim_net_dev_add+0x10/0x10 [ 382.058059][T17595] ? __pfx_vdpasim_net_work+0x10/0x10 [ 382.058078][T17595] ? __pfx_vdpasim_net_get_config+0x10/0x10 [ 382.058098][T17595] ? __pfx_vdpasim_net_get_stats+0x10/0x10 [ 382.058117][T17595] ? __pfx_vdpasim_net_free+0x10/0x10 [ 382.058140][T17595] ? vdpa_mgmtdev_get_from_attr+0x26c/0x280 [ 382.058170][T17595] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 382.058207][T17595] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 382.058236][T17595] ? __nla_parse+0x40/0x60 [ 382.058262][T17595] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 382.058284][T17595] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 382.058315][T17595] genl_family_rcv_msg_doit+0x233/0x340 [ 382.058345][T17595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.058381][T17595] ? bpf_lsm_capable+0x9/0x20 [ 382.058400][T17595] ? security_capable+0x7e/0x2c0 [ 382.058433][T17595] genl_rcv_msg+0x614/0x7a0 [ 382.058461][T17595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.058482][T17595] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 382.058526][T17595] netlink_rcv_skb+0x226/0x4a0 [ 382.058555][T17595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.058580][T17595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.058625][T17595] ? down_read+0x2b9/0x320 [ 382.058656][T17595] genl_rcv+0x28/0x40 [ 382.058675][T17595] netlink_unicast+0x8ef/0xa80 [ 382.058717][T17595] netlink_sendmsg+0x7f0/0xb20 [ 382.058753][T17595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.058793][T17595] ? aa_sock_msg_perm+0x144/0x210 [ 382.058828][T17595] ? apparmor_socket_sendmsg+0x98/0x360 [ 382.058857][T17595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.058883][T17595] sock_sendmsg_nosec+0x14e/0x190 [ 382.058913][T17595] ____sys_sendmsg+0x54e/0x850 [ 382.058941][T17595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.058973][T17595] ? import_iovec+0x73/0xa0 [ 382.059001][T17595] ___sys_sendmsg+0x2a5/0x360 [ 382.059020][T17595] ? __lock_acquire+0x747/0x2de0 [ 382.059050][T17595] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.059109][T17595] ? __fget_files+0x3a2/0x420 [ 382.059131][T17595] ? __fget_files+0x2a/0x420 [ 382.059166][T17595] __x64_sys_sendmsg+0x1b1/0x290 [ 382.059191][T17595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.059235][T17595] do_syscall_64+0x166/0x520 [ 382.059259][T17595] ? trace_irq_disable+0x3b/0x140 [ 382.059284][T17595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.059304][T17595] ? clear_bhb_loop+0x70/0xc0 [ 382.059328][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.059348][T17595] RIP: 0033:0x7f9cd5da8f19 [ 382.059366][T17595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.059382][T17595] RSP: 002b:00007f9cd6c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.059402][T17595] RAX: ffffffffffffffda RBX: 00007f9cd6025fa0 RCX: 00007f9cd5da8f19 [ 382.059416][T17595] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 382.059428][T17595] RBP: 00007f9cd6c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 382.059439][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.059450][T17595] R13: 00007f9cd6026038 R14: 00007f9cd6025fa0 R15: 00007ffff2d88428 [ 382.059485][T17595] [ 382.128914][T17590] syzkaller1: entered promiscuous mode [ 382.129088][T17590] syzkaller1: entered allmulticast mode [ 382.891427][ T30] audit: type=1800 audit(1794339849.195:6): pid=17604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3191" name="memory.events" dev="tmpfs" ino=380 res=0 errno=-22 [ 382.960501][T17607] __nla_validate_parse: 1 callbacks suppressed [ 382.960521][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3189'. [ 383.063174][T17611] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 383.144461][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 383.218664][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 383.274999][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.276849][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.287867][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.303175][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.314068][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.509602][T17626] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3199'. [ 383.548133][T17627] FAULT_INJECTION: forcing a failure. [ 383.548133][T17627] name failslab, interval 1, probability 0, space 0, times 0 [ 383.548164][T17627] CPU: 1 UID: 0 PID: 17627 Comm: syz.0.3197 Not tainted syzkaller #0 PREEMPT(full) [ 383.548186][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.548197][T17627] Call Trace: [ 383.548205][T17627] [ 383.548213][T17627] dump_stack_lvl+0xe8/0x150 [ 383.548249][T17627] should_fail_ex+0x3eb/0x540 [ 383.548279][T17627] should_failslab+0xa8/0x100 [ 383.548310][T17627] __kmalloc_cache_noprof+0x9e/0x600 [ 383.548336][T17627] ? __raw_spin_lock_init+0x45/0x100 [ 383.548354][T17627] ? __kthread_create_on_node+0x115/0x3d0 [ 383.548373][T17627] ? __kthread_create_on_node+0x115/0x3d0 [ 383.548393][T17627] ? __init_swait_queue_head+0xa8/0x150 [ 383.548421][T17627] ? __pfx_kthread_worker_fn+0x10/0x10 [ 383.548444][T17627] __kthread_create_on_node+0x115/0x3d0 [ 383.548468][T17627] ? __pfx___kthread_create_on_node+0x10/0x10 [ 383.548500][T17627] ? __kmalloc_cache_noprof+0x148/0x600 [ 383.548527][T17627] ? __raw_spin_lock_init+0x45/0x100 [ 383.548552][T17627] kthread_create_worker_on_node+0x265/0x3b0 [ 383.548576][T17627] ? __raw_spin_lock_init+0x45/0x100 [ 383.548602][T17627] ? __pfx_kthread_create_worker_on_node+0x10/0x10 [ 383.548637][T17627] ? swiotlb_dev_init+0xd/0x50 [ 383.548701][T17627] vdpasim_create+0x2da/0x9c0 [ 383.548729][T17627] ? lock_acquire+0x115/0x350 [ 383.548758][T17627] vdpasim_net_dev_add+0x12d/0x3d0 [ 383.548781][T17627] ? __pfx_vdpasim_net_dev_add+0x10/0x10 [ 383.548808][T17627] ? __pfx_vdpasim_net_work+0x10/0x10 [ 383.548826][T17627] ? __pfx_vdpasim_net_get_config+0x10/0x10 [ 383.548846][T17627] ? __pfx_vdpasim_net_get_stats+0x10/0x10 [ 383.548865][T17627] ? __pfx_vdpasim_net_free+0x10/0x10 [ 383.548888][T17627] ? vdpa_mgmtdev_get_from_attr+0x26c/0x280 [ 383.548920][T17627] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 383.548957][T17627] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 383.548984][T17627] ? __nla_parse+0x40/0x60 [ 383.549015][T17627] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 383.549039][T17627] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 383.549071][T17627] genl_family_rcv_msg_doit+0x233/0x340 [ 383.549101][T17627] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.549139][T17627] ? bpf_lsm_capable+0x9/0x20 [ 383.549156][T17627] ? security_capable+0x7e/0x2c0 [ 383.549191][T17627] genl_rcv_msg+0x614/0x7a0 [ 383.549222][T17627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.549244][T17627] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 383.549288][T17627] netlink_rcv_skb+0x226/0x4a0 [ 383.549317][T17627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.549341][T17627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.549386][T17627] ? down_read+0x2b9/0x320 [ 383.549418][T17627] genl_rcv+0x28/0x40 [ 383.549438][T17627] netlink_unicast+0x8ef/0xa80 [ 383.549484][T17627] netlink_sendmsg+0x7f0/0xb20 [ 383.549520][T17627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.549552][T17627] ? aa_sock_msg_perm+0x144/0x210 [ 383.549587][T17627] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.549622][T17627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.549649][T17627] sock_sendmsg_nosec+0x14e/0x190 [ 383.549680][T17627] ____sys_sendmsg+0x54e/0x850 [ 383.549708][T17627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.549740][T17627] ? import_iovec+0x73/0xa0 [ 383.549768][T17627] ___sys_sendmsg+0x2a5/0x360 [ 383.549787][T17627] ? __lock_acquire+0x747/0x2de0 [ 383.549817][T17627] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.549881][T17627] ? __fget_files+0x3a2/0x420 [ 383.549903][T17627] ? __fget_files+0x2a/0x420 [ 383.549938][T17627] __x64_sys_sendmsg+0x1b1/0x290 [ 383.549963][T17627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.550009][T17627] do_syscall_64+0x166/0x520 [ 383.550033][T17627] ? trace_irq_disable+0x3b/0x140 [ 383.550058][T17627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.550077][T17627] ? clear_bhb_loop+0x70/0xc0 [ 383.550100][T17627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.550118][T17627] RIP: 0033:0x7f9cd5da8f19 [ 383.550135][T17627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.550150][T17627] RSP: 002b:00007f9cd6c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.550170][T17627] RAX: ffffffffffffffda RBX: 00007f9cd6025fa0 RCX: 00007f9cd5da8f19 [ 383.550184][T17627] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 383.550196][T17627] RBP: 00007f9cd6c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 383.550208][T17627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.550219][T17627] R13: 00007f9cd6026038 R14: 00007f9cd6025fa0 R15: 00007ffff2d88428 [ 383.550253][T17627] [ 384.118209][T17636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3201'. [ 384.119119][T17636] syzkaller1: entered promiscuous mode [ 384.119137][T17636] syzkaller1: entered allmulticast mode [ 384.347270][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 384.632686][T17641] netlink: 'syz.5.3203': attribute type 1 has an invalid length. [ 384.634077][T17651] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 385.300328][T17619] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.434756][T10744] Bluetooth: hci4: command tx timeout [ 385.564850][T17619] wg0 speed is unknown, defaulting to 1000 [ 385.566881][T17619] wlan1 speed is unknown, defaulting to 1000 [ 385.568882][T17686] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3213'. [ 385.570019][T17619] lo speed is unknown, defaulting to 1000 [ 385.612127][T17686] syzkaller1: entered promiscuous mode [ 385.612149][T17686] syzkaller1: entered allmulticast mode [ 385.924969][T17694] netlink: 'syz.5.3214': attribute type 10 has an invalid length. [ 385.947969][T17694] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 385.950788][T17694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3214'. [ 386.054277][T17619] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.062778][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.062912][T17619] bridge_slave_0: entered allmulticast mode [ 386.079056][T17619] bridge_slave_0: entered promiscuous mode [ 386.092083][T17619] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.092247][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.092445][T17619] bridge_slave_1: entered allmulticast mode [ 386.122557][T17619] bridge_slave_1: entered promiscuous mode [ 386.168852][T17619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.172440][T17619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.227032][T17619] team0: Port device team_slave_0 added [ 386.229994][T17619] team0: Port device team_slave_1 added [ 386.273185][T17619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.273202][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.273228][T17619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.322081][T17619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.322098][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.322124][T17619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.438277][T17619] hsr_slave_0: entered promiscuous mode [ 386.439305][T17619] hsr_slave_1: entered promiscuous mode [ 386.439981][T17619] debugfs: 'hsr0' already exists in 'hsr' [ 386.439995][T17619] Cannot create hsr debugfs directory [ 386.675997][T17619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.676032][T17619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.748822][T17619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.748857][T17619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.821497][T17619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.821534][T17619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.888379][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 180 seconds [ 386.890520][T17619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.890553][T17619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.525060][T10744] Bluetooth: hci4: command tx timeout [ 387.866987][T17665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.907684][T17619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.935672][T17619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.941288][T17619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.976182][T17619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.977941][T17619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.001736][T17619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.029677][T17619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.096367][T17619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.369934][T17720] FAULT_INJECTION: forcing a failure. [ 388.369934][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 388.369964][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.2.3218 Not tainted syzkaller #0 PREEMPT(full) [ 388.369985][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 388.369996][T17720] Call Trace: [ 388.370004][T17720] [ 388.370013][T17720] dump_stack_lvl+0xe8/0x150 [ 388.370050][T17720] should_fail_ex+0x3eb/0x540 [ 388.370080][T17720] should_failslab+0xa8/0x100 [ 388.370112][T17720] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 388.370139][T17720] ? __kthread_create_on_node+0x1b3/0x3d0 [ 388.370158][T17720] ? __kthread_create_on_node+0x1b3/0x3d0 [ 388.370183][T17720] kvasprintf+0xeb/0x1a0 [ 388.370300][T17720] ? __pfx_kvasprintf+0x10/0x10 [ 388.370326][T17720] ? __kmalloc_cache_noprof+0x148/0x600 [ 388.370348][T17720] ? __kthread_create_on_node+0x115/0x3d0 [ 388.370365][T17720] ? __kthread_create_on_node+0x115/0x3d0 [ 388.370392][T17720] __kthread_create_on_node+0x1b3/0x3d0 [ 388.370415][T17720] ? __pfx___kthread_create_on_node+0x10/0x10 [ 388.370445][T17720] ? __kmalloc_cache_noprof+0x148/0x600 [ 388.370473][T17720] ? __raw_spin_lock_init+0x45/0x100 [ 388.370496][T17720] kthread_create_worker_on_node+0x265/0x3b0 [ 388.370519][T17720] ? __raw_spin_lock_init+0x45/0x100 [ 388.370545][T17720] ? __pfx_kthread_create_worker_on_node+0x10/0x10 [ 388.370572][T17720] ? swiotlb_dev_init+0xd/0x50 [ 388.370603][T17720] vdpasim_create+0x2da/0x9c0 [ 388.370631][T17720] ? lock_acquire+0x115/0x350 [ 388.370659][T17720] vdpasim_net_dev_add+0x12d/0x3d0 [ 388.370692][T17720] ? __pfx_vdpasim_net_dev_add+0x10/0x10 [ 388.370718][T17720] ? __pfx_vdpasim_net_work+0x10/0x10 [ 388.370737][T17720] ? __pfx_vdpasim_net_get_config+0x10/0x10 [ 388.370757][T17720] ? __pfx_vdpasim_net_get_stats+0x10/0x10 [ 388.370776][T17720] ? __pfx_vdpasim_net_free+0x10/0x10 [ 388.370802][T17720] ? vdpa_mgmtdev_get_from_attr+0x26c/0x280 [ 388.370834][T17720] vdpa_nl_cmd_dev_add_set_doit+0xa8b/0xbd0 [ 388.370873][T17720] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 388.370899][T17720] ? __nla_parse+0x40/0x60 [ 388.370930][T17720] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 388.370954][T17720] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 388.370986][T17720] genl_family_rcv_msg_doit+0x233/0x340 [ 388.371017][T17720] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.371054][T17720] ? bpf_lsm_capable+0x9/0x20 [ 388.371072][T17720] ? security_capable+0x7e/0x2c0 [ 388.371107][T17720] genl_rcv_msg+0x614/0x7a0 [ 388.371137][T17720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.371159][T17720] ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10 [ 388.371202][T17720] netlink_rcv_skb+0x226/0x4a0 [ 388.371230][T17720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.371255][T17720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.371300][T17720] ? down_read+0x2b9/0x320 [ 388.371332][T17720] genl_rcv+0x28/0x40 [ 388.371352][T17720] netlink_unicast+0x8ef/0xa80 [ 388.371397][T17720] netlink_sendmsg+0x7f0/0xb20 [ 388.371432][T17720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.371464][T17720] ? aa_sock_msg_perm+0x144/0x210 [ 388.371498][T17720] ? apparmor_socket_sendmsg+0x98/0x360 [ 388.371526][T17720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.371553][T17720] sock_sendmsg_nosec+0x14e/0x190 [ 388.371583][T17720] ____sys_sendmsg+0x54e/0x850 [ 388.371611][T17720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.371647][T17720] ? import_iovec+0x73/0xa0 [ 388.371682][T17720] ___sys_sendmsg+0x2a5/0x360 [ 388.371701][T17720] ? __lock_acquire+0x747/0x2de0 [ 388.371731][T17720] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.371794][T17720] ? __fget_files+0x3a2/0x420 [ 388.371816][T17720] ? __fget_files+0x2a/0x420 [ 388.371850][T17720] __x64_sys_sendmsg+0x1b1/0x290 [ 388.371875][T17720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.371922][T17720] do_syscall_64+0x166/0x520 [ 388.371945][T17720] ? trace_irq_disable+0x3b/0x140 [ 388.371970][T17720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.371989][T17720] ? clear_bhb_loop+0x70/0xc0 [ 388.372014][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.372033][T17720] RIP: 0033:0x7f19b8ba8f19 [ 388.372052][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.372067][T17720] RSP: 002b:00007f19b9a81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.372087][T17720] RAX: ffffffffffffffda RBX: 00007f19b8e25fa0 RCX: 00007f19b8ba8f19 [ 388.372101][T17720] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 388.372113][T17720] RBP: 00007f19b9a81090 R08: 0000000000000000 R09: 0000000000000000 [ 388.372124][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.372135][T17720] R13: 00007f19b8e26038 R14: 00007f19b8e25fa0 R15: 00007ffde2895868 [ 388.372168][T17720] [ 389.167269][T17619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.312099][T17619] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.385698][T15617] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.385805][T15617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.418236][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.418344][T15614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.604921][T10744] Bluetooth: hci4: command tx timeout [ 389.640975][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3226'. [ 390.685827][T17619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.877942][T17619] veth0_vlan: entered promiscuous mode [ 390.900988][T17619] veth1_vlan: entered promiscuous mode [ 390.969502][T17619] veth0_macvtap: entered promiscuous mode [ 390.983515][T17619] veth1_macvtap: entered promiscuous mode [ 391.019871][T17619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.042749][T17619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.145189][T15617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.146403][T15617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.146441][T15617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.146487][T15617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.684663][T10744] Bluetooth: hci4: command tx timeout [ 392.783776][T17747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.037551][T15127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.037571][T15127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.149155][T17783] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3232'. [ 393.379879][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'. [ 393.498395][T17783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.561136][T17783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.579123][T17806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3239'. [ 393.644821][T17783] bond0 (unregistering): Released all slaves [ 393.687941][T15121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.687962][T15121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.969919][T17811] syzkaller0: Caught tx_queue_len zero misconfig [ 393.989167][T17811] syzkaller0: entered promiscuous mode [ 393.989190][T17811] syzkaller0: entered allmulticast mode [ 394.024675][T15617] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.024797][T15617] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.024833][T15617] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.024867][T15617] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.408083][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3245'. [ 394.412589][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3245'. [ 394.613357][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3247'. [ 394.613381][T17838] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3247'. [ 394.956890][T17850] netlink: 'syz.5.3252': attribute type 30 has an invalid length. [ 395.033483][T17850] bond2: option arp_missed_max: invalid value (0) [ 395.033509][T17850] bond2: option arp_missed_max: allowed values 1 - 255 [ 395.060861][T17850] bond2 (unregistering): Released all slaves [ 395.109735][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 395.152548][T15127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.153358][T15127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.153396][T15127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.153428][T15127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.307414][T17866] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 395.343569][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'. [ 395.629444][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 395.649933][T17879] netlink: 'syz.3.3260': attribute type 64 has an invalid length. [ 395.651088][T17879] bridge0: port 3(syz_tun) entered disabled state [ 395.651379][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.651999][T17879] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.767309][T17885] netlink: 'syz.1.3261': attribute type 21 has an invalid length. [ 395.767402][T17885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3261'. [ 395.768096][T17885] Bluetooth: MGMT ver 1.23 [ 396.068297][T17879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3260'. [ 396.175361][ T5003] udevd[5003]: worker [10807] /devices/virtual/block/nbd4 timeout; kill it [ 396.176343][ T5003] udevd[5003]: seq 14119 '/devices/virtual/block/nbd4' killed [ 396.267762][ T5643] Bluetooth: hci1: hardware error 0x0d [ 396.383591][T17906] netlink: 'syz.2.3265': attribute type 8 has an invalid length. [ 396.912009][T17924] bridge1: entered promiscuous mode [ 396.912223][T17924] bridge1: entered allmulticast mode [ 396.933566][T17924] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3268'. [ 396.937997][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3268'. [ 397.158037][T17941] xt_hashlimit: size too large, truncated to 1048576 [ 397.476634][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3276'. [ 397.515132][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.611205][T17951] gretap0: entered promiscuous mode [ 398.395620][ T5643] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 398.561513][T17988] tipc: Started in network mode [ 398.561562][T17988] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 398.562079][T17988] tipc: Enabled bearer , priority 0 [ 398.570818][T17988] tipc: Disabling bearer [ 399.093545][T18002] ip_tables: iptables: counters copy to user failed while replacing table [ 399.110829][T18000] xt_hashlimit: size too large, truncated to 1048576 [ 399.167019][T15121] IPVS: starting estimator thread 0... [ 399.171220][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3296'. [ 399.255793][T18009] IPVS: using max 27 ests per chain, 64800 per kthread [ 399.265532][T17999] IPVS: wrr: TCP 172.20.20.170:20000 - no destination available [ 399.301907][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 399.385027][T18022] netlink: 'syz.3.3300': attribute type 4 has an invalid length. [ 399.637696][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.919921][T18035] ip_tables: iptables: counters copy to user failed while replacing table [ 400.275569][T18054] __nla_validate_parse: 5 callbacks suppressed [ 400.275589][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 400.281567][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3308'. [ 400.285960][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 400.325913][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3308'. [ 400.595423][T15617] IPVS: starting estimator thread 0... [ 400.628130][T18066] trusted_key: syz.3.3312 sent an empty control message without MSG_MORE. [ 400.684669][T18069] IPVS: using max 29 ests per chain, 69600 per kthread [ 400.925223][T18081] xt_hashlimit: size too large, truncated to 1048576 [ 401.024047][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 401.255068][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'. [ 401.329156][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.683588][T18120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'. [ 401.783981][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 401.877353][T18124] tipc: Failed to remove unknown binding: 66,0,2/0:1332133464/1332133465 [ 401.879625][T18124] tipc: Failed to remove unknown binding: 66,0,2/0:1332133464/1332133465 [ 401.882212][T18124] tipc: Failed to remove unknown binding: 66,0,2/0:1332133464/1332133465 [ 402.899502][T18162] xt_hashlimit: size too large, truncated to 1048576 [ 402.929721][T18163] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3338'. [ 403.263848][T18166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3341'. [ 405.335289][T18217] __nla_validate_parse: 4 callbacks suppressed [ 405.335310][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3359'. [ 405.503827][T18224] netlink: Unknown conntrack attr (type=28, max=9) [ 405.563461][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3365'. [ 405.563522][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3365'. [ 405.601586][T18230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3363'. [ 405.601625][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 405.709399][T18232] x_tables: unsorted underflow at hook 3 [ 405.742839][T18231] xt_hashlimit: size too large, truncated to 1048576 [ 405.786796][T18234] team0: Port device team_slave_0 removed [ 405.873088][T18237] geneve2: entered promiscuous mode [ 405.885952][T15614] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34637 - 0 [ 405.887715][T15614] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34637 - 0 [ 405.887755][T15614] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.887779][T15614] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.887814][T15614] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34637 - 0 [ 405.887848][T15614] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34637 - 0 [ 406.052051][T18247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3369'. [ 406.069998][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3369'. [ 406.250181][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3362'. [ 406.557680][T18260] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 406.768987][T18269] syzkaller0: entered promiscuous mode [ 406.769008][T18269] syzkaller0: entered allmulticast mode [ 406.897429][ T43] IPVS: starting estimator thread 0... [ 406.922210][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3374'. [ 406.984967][T18281] IPVS: using max 30 ests per chain, 72000 per kthread [ 407.231800][T18292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3380'. [ 407.248964][T18291] xt_hashlimit: size too large, truncated to 1048576 [ 407.942188][ T30] audit: type=1804 audit(1794339874.245:7): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3387" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=275 res=1 errno=0 [ 407.943869][ T30] audit: type=1800 audit(1794339874.245:8): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3387" name="cgroup.controllers" dev="tmpfs" ino=275 res=0 errno=-22 [ 408.544107][T18343] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 408.990224][T18367] netlink: 'syz.5.3401': attribute type 2 has an invalid length. [ 409.005761][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.039544][T18359] tipc: Enabled bearer , priority 0 [ 409.688546][T18364] team0: Port device team_slave_1 removed [ 409.832404][T18370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.016467][T18408] openvswitch: netlink: Key type 390 is out of range max 32 [ 410.173745][T18401] netlink: 'syz.5.3406': attribute type 3 has an invalid length. [ 410.233936][ T4965] tipc: Node number set to 43690 [ 410.563349][T15612] tipc: Subscription rejected, illegal request [ 410.792724][T18436] xt_hashlimit: size too large, truncated to 1048576 [ 411.087024][T18439] __nla_validate_parse: 4 callbacks suppressed [ 411.087043][T18439] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3416'. [ 411.132401][T18437] bond0: entered allmulticast mode [ 411.141681][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.374263][T18462] ip_tables: iptables: counters copy to user failed while replacing table [ 411.402687][T18461] ip_tables: iptables: counters copy to user failed while replacing table [ 411.403292][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3415'. [ 411.811628][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 412.033555][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 412.140884][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 412.242827][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 412.342913][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 412.455716][T18505] tipc: Enabling of bearer rejected, failed to enable media [ 412.580075][T18473] netlink: 'syz.5.3421': attribute type 21 has an invalid length. [ 413.024345][T18525] tipc: New replicast peer: 172.20.20.187 [ 413.043345][T18525] tipc: Enabled bearer , priority 10 [ 413.291792][T18528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.482428][T18535] netlink: 'syz.3.3434': attribute type 21 has an invalid length. [ 413.729269][T18547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3436'. [ 413.804433][T18547] bond0: (slave bond_slave_0): Releasing backup interface [ 413.952384][T18547] bond_slave_0: entered promiscuous mode [ 413.952408][T18547] bond_slave_0: entered allmulticast mode [ 414.303730][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'. [ 414.890275][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3447'. [ 415.376409][T18599] bond1: (slave bond_slave_0): Device is not our slave [ 415.376432][T18599] bond1: option active_slave: invalid value (bond_slave_0) [ 415.389293][T18599] bond1 (unregistering): Released all slaves [ 415.519787][T18608] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 415.521207][T18612] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3451'. [ 415.994624][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'. [ 416.001044][T18631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3456'. [ 416.029229][T18634] xt_LOG: level 8 >= 8 [ 416.346750][T18640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.396040][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 416.396063][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 416.928181][T18663] netlink: 'syz.2.3465': attribute type 21 has an invalid length. [ 416.967134][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 210 seconds [ 417.115304][T10744] Bluetooth: hci5: command 0x0406 tx timeout [ 417.461886][T18681] block nbd0: not configured, cannot reconfigure [ 417.847053][T18701] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 417.864985][T18701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3476'. [ 417.893134][T15121] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.893376][T15121] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.915492][ T8570] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.002097][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 418.064379][T18705] openvswitch: netlink: IPv6 tunnel dst address is zero [ 418.181179][T18705] xt_hashlimit: size too large, truncated to 1048576 [ 418.215700][T18703] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 418.222077][T18703] bond3 (unregistering): Released all slaves [ 418.475605][ T4965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.638957][ T4965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.858266][T18741] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 418.972683][T18741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.987559][T18747] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3485'. [ 418.987583][T18747] veth0_to_bond: default FDB implementation only supports local addresses [ 419.071439][T18741] bond1: (slave veth0_to_bond): making interface the new active one [ 419.090745][T18741] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 419.188680][T18741] macvlan6: entered promiscuous mode [ 419.188702][T18741] macvlan6: entered allmulticast mode [ 419.190866][T18741] bond1: entered promiscuous mode [ 419.190885][T18741] veth0_to_bond: entered promiscuous mode [ 419.192146][T18741] bond1: entered allmulticast mode [ 419.192164][T18741] veth0_to_bond: entered allmulticast mode [ 419.200417][T18741] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 419.204073][T18741] bond1: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 419.204192][T18741] bond1: left allmulticast mode [ 419.204206][T18741] veth0_to_bond: left allmulticast mode [ 419.204243][T18741] bond1: left promiscuous mode [ 419.204255][T18741] veth0_to_bond: left promiscuous mode [ 419.320394][T18752] netlink: 'syz.2.3488': attribute type 2 has an invalid length. [ 419.320415][T18752] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3488'. [ 419.710236][T18769] netlink: 3584 bytes leftover after parsing attributes in process `syz.1.3491'. [ 419.713273][T18771] netlink: 3604 bytes leftover after parsing attributes in process `syz.1.3491'. [ 419.924854][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 419.924887][T18778] netlink: 'syz.2.3490': attribute type 5 has an invalid length. [ 419.924901][T18778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3490'. [ 419.992647][T18781] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 420.007917][T18778] geneve2: entered promiscuous mode [ 420.008100][T18778] geneve2: entered allmulticast mode [ 420.045823][T15125] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 420.045869][T15125] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 420.045901][T15125] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 420.045933][T15125] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 420.080625][T18781] netlink: 'syz.5.3494': attribute type 10 has an invalid length. [ 420.135966][T18781] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.171800][T18781] bond0: (slave team0): Enslaving as an active interface with an up link [ 420.817684][T18814] syzkaller1: entered promiscuous mode [ 420.817713][T18814] syzkaller1: entered allmulticast mode [ 421.216054][T18829] pim6reg: entered allmulticast mode [ 421.813568][T18864] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.834853][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.355403][T18869] openvswitch: netlink: Message has -1 unknown bytes. [ 422.477752][T18877] syzkaller1: entered promiscuous mode [ 422.477776][T18877] syzkaller1: entered allmulticast mode [ 422.972607][T18904] ip_tables: iptables: counters copy to user failed while replacing table [ 423.005486][T18905] syzkaller0: entered promiscuous mode [ 423.005668][T18905] syzkaller0: entered allmulticast mode [ 423.194787][T18906] syzkaller0: entered promiscuous mode [ 423.194810][T18906] syzkaller0: entered allmulticast mode [ 426.590189][T18946] kthread_run failed with err -4 [ 426.888415][T18964] __nla_validate_parse: 69 callbacks suppressed [ 426.888435][T18964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3538'. [ 426.942074][T18962] syzkaller1: entered promiscuous mode [ 426.942095][T18962] syzkaller1: entered allmulticast mode [ 427.426458][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 427.664926][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3543'. [ 427.669218][T19000] netlink: 'syz.2.3545': attribute type 33 has an invalid length. [ 427.907195][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 428.394290][T19019] netlink: 'syz.0.3548': attribute type 10 has an invalid length. [ 428.448379][T19019] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.463440][T19030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3549'. [ 428.518835][T19019] bond0: (slave team0): Enslaving as an active interface with an up link [ 428.590864][T19030] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 428.982020][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 429.109903][T19049] syzkaller1: entered promiscuous mode [ 429.109926][T19049] syzkaller1: entered allmulticast mode [ 429.193640][T19054] netlink: 'syz.1.3555': attribute type 4 has an invalid length. [ 429.193662][T19054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3555'. [ 429.650623][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 429.653616][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 429.747442][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 429.754786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.344177][T19084] bond3 (unregistering): Released all slaves [ 430.660036][T19095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.779188][T19089] syz.0.3564 (19089) used greatest stack depth: 17992 bytes left [ 430.856573][T19100] syzkaller1: entered promiscuous mode [ 430.856596][T19100] syzkaller1: entered allmulticast mode [ 431.451380][T19126] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 431.476241][T19126] bond3 (unregistering): Released all slaves [ 431.537256][T19137] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.857894][T19152] ip_tables: iptables: counters copy to user failed while replacing table [ 431.888756][T19153] IPVS: length: 239 != 24 [ 431.889069][T19151] IPVS: length: 239 != 24 [ 432.066167][ T30] audit: type=1800 audit(1794339898.375:9): pid=19160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3586" name=0A dev="tmpfs" ino=793 res=0 errno=-22 [ 432.149589][ T30] audit: type=1800 audit(1794339898.455:10): pid=19165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3586" name=0A dev="tmpfs" ino=793 res=0 errno=-22 [ 432.911471][T19196] xt_IDLETIMER: timeout value is too big [ 433.229097][T19207] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 433.235826][T19207] bond3 (unregistering): Released all slaves [ 433.337194][T19220] syzkaller0: entered promiscuous mode [ 433.337216][T19220] syzkaller0: entered allmulticast mode [ 433.562075][T19226] bond0: Error: Cannot enslave bond to itself. [ 433.788995][T19236] netlink: Conntrack attr has 8 unknown bytes [ 433.898853][T19240] __nla_validate_parse: 10 callbacks suppressed [ 433.898875][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3609'. [ 434.028150][T19244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3608'. [ 434.029260][T19245] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3609'. [ 434.319655][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 434.319691][T19257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3612'. [ 434.373904][T19257] geneve3: entered promiscuous mode [ 434.374084][T19257] geneve3: entered allmulticast mode [ 435.093927][T19279] batman_adv: batadv0: Adding interface: syz_tun [ 435.093952][T19279] batman_adv: batadv0: Interface activated: syz_tun [ 435.170134][T19292] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3620'. [ 436.736011][T15613] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.736045][T15613] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.740488][T15612] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.740523][T15612] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.740560][T15612] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.740583][T15612] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.059819][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3631'. [ 437.063664][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3631'. [ 437.110341][T19343] erspan0: entered promiscuous mode [ 437.532060][T19367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3634'. [ 438.570783][T19395] netlink: 'syz.2.3639': attribute type 5 has an invalid length. [ 438.653748][T19396] netlink: 'syz.2.3639': attribute type 5 has an invalid length. [ 438.742883][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3641'. [ 438.742965][T19400] bridge_slave_1: left allmulticast mode [ 438.743304][T19400] bridge_slave_1: left promiscuous mode [ 438.744156][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.811399][T19400] bridge_slave_0: left allmulticast mode [ 438.811741][T19400] bridge_slave_0: left promiscuous mode [ 438.812606][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.975056][T19412] netlink: 'syz.5.3640': attribute type 9 has an invalid length. [ 439.343045][T19427] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 439.469269][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3646'. [ 439.825851][T19445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3648'. [ 440.025439][ T43] IPVS: starting estimator thread 0... [ 440.118042][T19456] IPVS: using max 30 ests per chain, 72000 per kthread [ 440.217838][ T5790] hid-generic 0005:16C0:8001.0001: item fetching failed at offset 0/1 [ 440.228785][ T5790] hid-generic 0005:16C0:8001.0001: probe with driver hid-generic failed with error -22 [ 440.435910][T19471] Bluetooth: ISO socket layer initialized [ 440.562324][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.641569][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.879319][T19486] xt_hashlimit: size too large, truncated to 1048576 [ 441.066767][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3659'. [ 441.265208][T19490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3657'. [ 441.667242][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'. [ 441.699711][T19511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.876985][T19520] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 442.331315][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 442.331577][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 442.331782][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 442.331986][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 442.332217][T19536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 442.975759][T19565] netlink: 'syz.0.3677': attribute type 1 has an invalid length. [ 443.042878][T19570] netlink: 'syz.0.3677': attribute type 1 has an invalid length. [ 443.077905][T19565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.281678][T19570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.786090][T19599] x_tables: duplicate underflow at hook 3 [ 443.942949][T19605] sctp: [Deprecated]: syz.5.3684 (pid 19605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.942949][T19605] Use struct sctp_sack_info instead [ 444.060471][T19610] x_tables: duplicate underflow at hook 2 [ 444.174064][T19614] ip_tables: iptables: counters copy to user failed while replacing table [ 444.184047][T19613] ip_tables: iptables: counters copy to user failed while replacing table [ 444.218422][T19613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.284773][T19616] netlink: 'syz.2.3689': attribute type 8 has an invalid length. [ 444.357230][T19621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.357255][T19621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.381842][T19621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.381874][T19621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.629722][T19625] __nla_validate_parse: 66 callbacks suppressed [ 444.629742][T19625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3691'. [ 444.749930][T19628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3692'. [ 444.861515][T19628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.898105][T19628] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 445.132587][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3698'. [ 445.132618][T19643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3698'. [ 445.353493][T19651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 445.755248][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.430863][T19701] syzkaller0: entered promiscuous mode [ 446.430884][T19701] syzkaller0: entered allmulticast mode [ 446.448354][T19701] tipc: Started in network mode [ 446.448381][T19701] tipc: Node identity da2f4c883a1c, cluster identity 4711 [ 446.449876][T19701] tipc: Enabled bearer , priority 0 [ 446.453020][T19702] tipc: Resetting bearer [ 446.505212][T15121] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.505741][T15125] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.505778][T15125] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.505810][T15125] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.694115][T19713] netlink: 46 bytes leftover after parsing attributes in process `syz.0.3721'. [ 446.724196][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 446.832537][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'. [ 446.833018][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 446.862955][T19709] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3717'. [ 447.037093][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 240 seconds [ 447.387545][T19750] bridge0: entered allmulticast mode [ 447.442441][T19751] bridge1: entered allmulticast mode [ 447.564901][ T8572] tipc: Node number set to 3761458312 [ 450.002244][T19739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.241081][T19775] __nla_validate_parse: 5 callbacks suppressed [ 450.241100][T19775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3735'. [ 450.372098][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3736'. [ 450.430265][T19784] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3737'. [ 450.458412][T19787] xt_hashlimit: size too large, truncated to 1048576 [ 450.513920][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 450.514038][T19789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.551812][T19789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.759843][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3738'. [ 452.043005][T19852] xt_hashlimit: size too large, truncated to 1048576 [ 452.297519][T19854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3753'. [ 452.547114][T19869] netlink: 'syz.5.3756': attribute type 10 has an invalid length. [ 452.575211][T19869] team0: Port device dummy0 added [ 453.140987][T19902] macsec0: entered promiscuous mode [ 453.141011][T19902] bridge0: entered promiscuous mode [ 453.141159][T19902] macsec0: entered allmulticast mode [ 453.141173][T19902] bridge0: entered allmulticast mode [ 453.144238][T19902] bridge0: port 4(macsec0) entered blocking state [ 453.183767][T19902] bridge0: port 4(macsec0) entered disabled state [ 453.199018][T19902] bridge0: left allmulticast mode [ 453.199043][T19902] bridge0: left promiscuous mode [ 453.363306][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'. [ 453.363338][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3768'. [ 453.409821][T19906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.649976][T19918] xt_hashlimit: size too large, truncated to 1048576 [ 453.964055][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3773'. [ 454.035967][T19922] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.133313][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.133617][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.133912][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.134167][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.134433][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.193701][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.194101][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.194396][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.222661][T19940] ip_tables: iptables: counters copy to user failed while replacing table [ 454.491368][T19961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3782'. [ 454.840162][T19976] netlink: 'syz.2.3787': attribute type 20 has an invalid length. [ 454.874424][T19976] netlink: 'syz.2.3787': attribute type 20 has an invalid length. [ 454.886657][T15121] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.886697][T15121] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.886729][T15121] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.886759][T15121] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.482657][T19994] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 455.596544][T20003] netlink: 'syz.5.3797': attribute type 2 has an invalid length. [ 455.869530][T20007] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 455.938383][T20010] __nla_validate_parse: 2 callbacks suppressed [ 455.938401][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 455.938438][T20010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3800'. [ 456.434125][T20030] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 456.554094][T20037] netlink: 'syz.5.3806': attribute type 1 has an invalid length. [ 456.658287][T20030] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 456.689139][T20037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.704107][T20037] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3806'. [ 456.738217][T20037] bond2: (slave bridge4): making interface the new active one [ 456.739343][T20037] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 456.845971][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 457.128659][T20066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3814'. [ 457.711656][T20086] sch_tbf: burst 0 is lower than device lo mtu (21) ! [ 458.078218][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 458.130350][T20099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3821'. [ 458.246655][T20102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3821'. [ 458.301560][T20105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.542943][T20121] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3829'. [ 458.892697][T20130] netlink: 'syz.0.3831': attribute type 10 has an invalid length. [ 459.081433][T20139] net_ratelimit: 58 callbacks suppressed [ 459.081562][T20139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 459.139574][T20139] Bluetooth: hci0: unsupported parameter 5135 [ 459.139594][T20139] Bluetooth: hci0: unsupported parameter 8192 [ 459.139606][T20139] Bluetooth: hci0: unsupported parameter 5135 [ 459.139617][T20139] Bluetooth: hci0: unsupported parameter 8192 [ 459.587830][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 459.632897][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 459.834455][T20173] xt_nat: multiple ranges no longer supported [ 459.868374][T20167] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 460.827862][T20214] netlink: 'syz.1.3851': attribute type 1 has an invalid length. [ 460.914533][T20219] syzkaller0: left promiscuous mode [ 460.914809][T20219] syzkaller0: left allmulticast mode [ 460.925383][T15127] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.000162][T15125] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.015554][T15125] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.844111][T20255] __nla_validate_parse: 8 callbacks suppressed [ 461.844129][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 461.844142][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 461.844164][T20255] netlink: 'syz.1.3863': attribute type 15 has an invalid length. [ 461.904267][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 461.904275][T15125] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 461.904291][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 461.904329][T20255] netlink: 'syz.1.3863': attribute type 15 has an invalid length. [ 461.904350][T15125] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 461.955954][T15127] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 461.956009][T15127] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 462.077087][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3862'. [ 462.132628][T20269] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 462.168292][T20265] tc_dump_action: action bad kind [ 462.369280][T20274] bond1: (slave gretap2): making interface the new active one [ 462.386427][T20274] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 462.406115][T20268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.438051][T20279] ovs-dp0: entered promiscuous mode [ 462.444433][T20284] netlink: 'syz.1.3869': attribute type 3 has an invalid length. [ 462.499655][T20284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3869'. [ 463.011966][T20303] nft_compat: unsupported protocol 0 [ 463.039281][T20303] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 463.106332][T20303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 463.159470][T20307] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 463.216035][T20310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3874'. [ 463.258905][T20307] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 463.339753][T20324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3878'. [ 463.380775][T20311] bridge5: entered promiscuous mode [ 463.385801][T20307] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 463.701934][T20340] ip_tables: iptables: counters copy to user failed while replacing table [ 463.752244][T20340] ip6t_srh: unknown srh match flags 5F28 [ 463.783780][T20324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.157680][T20349] xt_hashlimit: size too large, truncated to 1048576 [ 464.439172][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3884'. [ 464.598489][T10744] Bluetooth: hci4: unexpected cc 0x1004 length: 38 > 11 [ 464.598545][T10744] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 464.656892][T20367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 465.132042][T20382] vlan3: entered promiscuous mode [ 465.132065][T20382] bridge0: entered promiscuous mode [ 465.132208][T20382] vlan3: entered allmulticast mode [ 465.132220][T20382] bridge0: entered allmulticast mode [ 465.316669][T20389] veth0: entered allmulticast mode [ 466.171660][T20420] Cannot find add_set index 2 as target [ 466.270273][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 466.414325][T20409] hsr_slave_1 (unregistering): left promiscuous mode [ 466.841436][T20441] syzkaller0: entered promiscuous mode [ 466.841458][T20441] syzkaller0: entered allmulticast mode [ 467.740979][T20465] __nla_validate_parse: 1 callbacks suppressed [ 467.740999][T20465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'. [ 468.125751][T20477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 468.131000][T20477] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3928'. [ 468.221545][T20477] team0: Port device team_slave_1 removed [ 468.541691][T20486] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3931'. [ 468.694198][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'. [ 468.784275][T20498] validate_nla: 23 callbacks suppressed [ 468.784294][T20498] netlink: 'syz.1.3935': attribute type 3 has an invalid length. [ 468.812569][T20490] bond2: entered promiscuous mode [ 468.820269][T20490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.918003][T20482] netlink: 'syz.0.3930': attribute type 12 has an invalid length. [ 469.029792][T20507] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3938'. [ 469.075908][T20490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.076294][T20490] bond2: (slave sit3): The slave device specified does not support setting the MAC address [ 469.082989][T20490] bond2: (slave sit3): Error -95 calling set_mac_address [ 469.295584][T15127] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.385332][ T43] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.385654][ T43] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.770704][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 469.941140][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 470.252426][T20549] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3949'. [ 470.327972][T20556] xt_hashlimit: size too large, truncated to 1048576 [ 470.395113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.523911][T20567] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3953'. [ 470.567995][T20567] netlink: 'syz.5.3953': attribute type 3 has an invalid length. [ 470.844484][T20573] IPVS: ip_vs_edit_dest(): server weight less than zero [ 470.937626][T20565] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.266658][T20592] xt_cgroup: path and classid specified [ 471.793028][T20620] xt_hashlimit: size too large, truncated to 1048576 [ 471.839459][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.867607][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.882084][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.890617][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.899770][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.917248][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.925568][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.933711][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 471.940087][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 472.923874][T20681] __nla_validate_parse: 13 callbacks suppressed [ 472.923896][T20681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3983'. [ 473.910228][T20715] xt_hashlimit: size too large, truncated to 1048576 [ 474.110842][T20732] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3995'. [ 474.146454][T20727] netlink: 'syz.2.3994': attribute type 1 has an invalid length. [ 474.189448][T20723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3990'. [ 474.667634][T20752] syzkaller1: entered promiscuous mode [ 474.667656][T20752] syzkaller1: entered allmulticast mode [ 474.861659][T20757] netlink: 'syz.5.4005': attribute type 1 has an invalid length. [ 475.104146][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 475.778347][T20756] net_ratelimit: 56 callbacks suppressed [ 475.778369][T20756] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 476.161844][T20805] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 476.170397][T20805] netlink: 'syz.5.4013': attribute type 1 has an invalid length. [ 476.432723][T20815] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4016'. [ 476.433615][T20815] syzkaller1: entered promiscuous mode [ 476.433634][T20815] syzkaller1: entered allmulticast mode [ 476.703432][T20822] tipc: Started in network mode [ 476.703453][T20822] tipc: Node identity 6559, cluster identity 4711 [ 476.703466][T20822] tipc: Node number set to 25945 [ 476.871800][T20826] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.083610][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4025'. [ 477.133892][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 270 seconds [ 477.236555][T20839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4025'. [ 477.236598][T20839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4025'. [ 477.300835][T20839] netlink: 'syz.5.4025': attribute type 13 has an invalid length. [ 477.786588][T20870] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4032'. [ 477.788743][T20870] syzkaller1: entered promiscuous mode [ 477.788762][T20870] syzkaller1: entered allmulticast mode [ 477.977565][T20875] syzkaller1: entered promiscuous mode [ 477.977591][T20875] syzkaller1: entered allmulticast mode [ 478.000021][T20882] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 478.015437][T20882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.015452][T20882] IPv6: NLM_F_CREATE should be set when creating new route [ 478.015495][T20882] IPv6: NLM_F_CREATE should be set when creating new route [ 478.015517][T20882] IPv6: NLM_F_CREATE should be set when creating new route [ 478.394921][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.461423][T20912] ip_tables: iptables: counters copy to user failed while replacing table [ 478.464111][T20901] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4039'. [ 479.765477][T10744] Bluetooth: hci4: connection err: -111 [ 479.808560][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4056'. [ 479.808595][T20961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4056'. [ 480.065911][T20981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4062'. [ 480.581225][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4064'. [ 481.711437][T21041] xt_hashlimit: size too large, truncated to 1048576 [ 481.922518][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 482.968332][T21088] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4086'. [ 483.074342][T21095] xt_hashlimit: size too large, truncated to 1048576 [ 483.483674][T21108] netlink: 'syz.5.4093': attribute type 1 has an invalid length. [ 483.660306][T21113] 8021q: adding VLAN 0 to HW filter on device bond13 [ 483.662266][T21113] bond12: (slave bond13): making interface the new active one [ 483.662755][T21113] bond12: (slave bond13): Enslaving as an active interface with an up link [ 483.718809][T21108] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 484.288202][T21151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4106'. [ 484.288228][T21151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4106'. [ 484.288243][T21151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4106'. [ 484.614253][T21162] netlink: 'syz.3.4108': attribute type 1 has an invalid length. [ 484.752146][T21147] bond5: option resend_igmp: invalid value (32767) [ 484.752168][T21147] bond5: option resend_igmp: allowed values 0 - 255 [ 484.790259][T21158] xt_hashlimit: size too large, truncated to 1048576 [ 484.791189][T21147] bond5 (unregistering): Released all slaves [ 485.485260][T21188] bond_slave_0: Caught tx_queue_len zero misconfig [ 486.632996][T21228] xt_hashlimit: size too large, truncated to 1048576 [ 486.763631][ T30] audit: type=1107 audit(1794339953.065:11): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 486.936618][T21239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 487.151324][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 487.426196][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4131'. [ 487.426225][T21248] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4131'. [ 488.260957][T21302] netlink: 'syz.5.4143': attribute type 1 has an invalid length. [ 488.349423][T21302] bond14: entered promiscuous mode [ 488.355086][T21302] 8021q: adding VLAN 0 to HW filter on device bond14 [ 488.419923][T21307] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.419960][T21307] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 488.419977][T21307] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 488.572471][T21302] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.572490][T21302] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 488.722599][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 488.878747][T21318] IPVS: length: 143 != 24 [ 488.890748][T21319] xt_TPROXY: Can be used only with -p tcp or -p udp [ 489.265631][T21337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4153'. [ 489.364817][T21341] xt_hashlimit: size too large, truncated to 1048576 [ 489.545862][T21353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.565227][T21352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.060318][T21373] ipt_REJECT: ECHOREPLY no longer supported. [ 490.079162][T21373] ipt_REJECT: ECHOREPLY no longer supported. [ 490.377707][T21392] netlink: 'syz.0.4170': attribute type 11 has an invalid length. [ 490.803709][T21408] xt_hashlimit: size too large, truncated to 1048576 [ 491.742508][T21442] ip6tnl0: Caught tx_queue_len zero misconfig [ 492.410584][T21465] xt_hashlimit: size too large, truncated to 1048576 [ 492.551254][T21471] netlink: 'syz.1.4196': attribute type 1 has an invalid length. [ 492.551276][T21471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4196'. [ 492.812409][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 492.812441][T21485] netlink: 'syz.2.4199': attribute type 6 has an invalid length. [ 492.880604][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 492.880634][T21494] netlink: 'syz.2.4199': attribute type 6 has an invalid length. [ 492.926473][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 492.926502][T21485] netlink: 'syz.2.4199': attribute type 6 has an invalid length. [ 493.417081][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 493.417113][T21494] netlink: 'syz.2.4199': attribute type 6 has an invalid length. [ 493.991850][T21527] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.662330][T21543] xt_hashlimit: size too large, truncated to 1048576 [ 495.380310][T21559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4218'. [ 495.419152][T21561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4219'. [ 495.566408][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4218'. [ 495.719241][T21570] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 495.999573][T21587] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 496.193964][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4227'. [ 496.261884][T21603] x_tables: duplicate underflow at hook 1 [ 496.334231][T21605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4229'. [ 496.389956][T21606] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 496.408354][T21608] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 496.430067][T21584] veth0_to_team: entered promiscuous mode [ 496.478066][T21613] xt_hashlimit: size too large, truncated to 1048576 [ 496.587894][T21618] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 497.015603][T21638] openvswitch: netlink: EtherType 50a is less than min 600 [ 497.453813][T21656] pim6reg1: entered promiscuous mode [ 497.453836][T21656] pim6reg1: entered allmulticast mode [ 498.157673][T21683] xt_hashlimit: size too large, truncated to 1048576 [ 498.206588][T21691] bridge0: left allmulticast mode [ 498.495592][T21697] bridge: RTM_NEWNEIGH with unconfigured vlan 255 on bridge0 [ 498.768250][T21709] __nla_validate_parse: 9 callbacks suppressed [ 498.768270][T21709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4260'. [ 498.856021][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 499.214479][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 499.272051][T21730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4264'. [ 499.683670][T21745] xt_hashlimit: size too large, truncated to 1048576 [ 499.757546][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 499.777301][T21748] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 499.803001][T21748] bond5 (unregistering): Released all slaves [ 499.882737][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4269'. [ 499.882759][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4269'. [ 499.931545][T21759] netlink: 'syz.2.4272': attribute type 1 has an invalid length. [ 500.069090][T21759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.073426][T21752] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 500.137198][T21763] bond4: (slave geneve3): making interface the new active one [ 500.160641][T21763] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 500.413520][T21770] openvswitch: netlink: Duplicate or invalid key (type 0). [ 500.413564][T21770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.601875][T21777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.635852][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 500.647255][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 500.973315][T21797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4284'. [ 501.316729][T15130] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.316761][T15130] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.316783][T15130] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 501.605261][T21822] xt_hashlimit: size too large, truncated to 1048576 [ 501.642998][T21824] ipvlan2: entered allmulticast mode [ 501.643023][T21824] virt_wifi0: entered allmulticast mode [ 501.652945][T21824] batman_adv: batadv0: Adding interface: ipvlan2 [ 501.652973][T21824] batman_adv: batadv0: Interface activated: ipvlan2 [ 502.086297][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.332821][T10744] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 502.332852][T10744] Bluetooth: unknown link type 48 [ 502.335833][T10744] Bluetooth: hci5: connection err: -111 [ 502.699572][T21864] siw: device registration error -23 [ 502.709862][T21864] siw: device registration error -23 [ 503.223014][T21886] xt_hashlimit: size too large, truncated to 1048576 [ 504.930431][T21932] __nla_validate_parse: 5 callbacks suppressed [ 504.930451][T21932] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4321'. [ 505.035516][T21936] FAULT_INJECTION: forcing a failure. [ 505.035516][T21936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.035547][T21936] CPU: 0 UID: 0 PID: 21936 Comm: syz.3.4321 Not tainted syzkaller #0 PREEMPT(full) [ 505.035583][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 505.035594][T21936] Call Trace: [ 505.035602][T21936] [ 505.035610][T21936] dump_stack_lvl+0xe8/0x150 [ 505.035649][T21936] should_fail_ex+0x3eb/0x540 [ 505.035678][T21936] _copy_to_user+0x31/0xb0 [ 505.035794][T21936] simple_read_from_buffer+0xe1/0x170 [ 505.035859][T21936] proc_fail_nth_read+0x1bb/0x230 [ 505.035949][T21936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.035973][T21936] ? rw_verify_area+0x24a/0x4c0 [ 505.036000][T21936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.036018][T21936] vfs_read+0x213/0xa80 [ 505.036048][T21936] ? __pfx___mutex_lock+0x10/0x10 [ 505.036077][T21936] ? __pfx_vfs_read+0x10/0x10 [ 505.036104][T21936] ? __fget_files+0x2a/0x420 [ 505.036127][T21936] ? __fget_files+0x3a2/0x420 [ 505.036149][T21936] ? __fget_files+0x2a/0x420 [ 505.036176][T21936] ? fdget+0x1ac/0x250 [ 505.036206][T21936] ksys_read+0x150/0x270 [ 505.036234][T21936] ? __pfx_ksys_read+0x10/0x10 [ 505.036273][T21936] do_syscall_64+0x166/0x520 [ 505.036296][T21936] ? trace_irq_disable+0x3b/0x140 [ 505.036322][T21936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.036343][T21936] ? clear_bhb_loop+0x70/0xc0 [ 505.036366][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.036385][T21936] RIP: 0033:0x7f8fb156974e [ 505.036404][T21936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 505.036420][T21936] RSP: 002b:00007f8fb23fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.036440][T21936] RAX: ffffffffffffffda RBX: 00007f8fb23fe6c0 RCX: 00007f8fb156974e [ 505.036452][T21936] RDX: 000000000000000f RSI: 00007f8fb23fe0a0 RDI: 0000000000000007 [ 505.036463][T21936] RBP: 00007f8fb23fe090 R08: 0000000000000000 R09: 0000000000000000 [ 505.036475][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.036487][T21936] R13: 00007f8fb1826308 R14: 00007f8fb1826270 R15: 00007ffd761f05f8 [ 505.036519][T21936] [ 506.383659][T21933] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 506.383737][T21933] syzkaller1: entered promiscuous mode [ 506.383751][T21933] syzkaller1: entered allmulticast mode [ 506.663706][T21942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.736167][T21944] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 506.932864][T21956] xt_hashlimit: size too large, truncated to 1048576 [ 507.013994][T21963] xt_TCPMSS: Only works on TCP SYN packets [ 507.054439][T21963] netlink: 'syz.0.4327': attribute type 3 has an invalid length. [ 507.054461][T21963] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4327'. [ 507.063508][T21963] netlink: 'syz.0.4327': attribute type 26 has an invalid length. [ 507.063526][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 507.131507][T21963] netlink: 'syz.0.4327': attribute type 26 has an invalid length. [ 507.131530][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 507.210971][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 300 seconds [ 507.397003][T15125] bond3: left allmulticast mode [ 507.397742][T15125] bond3: left promiscuous mode [ 507.398003][T15125] bridge0: port 3(bond3) entered disabled state [ 507.427748][T15125] bridge_slave_1: left allmulticast mode [ 507.427772][T15125] bridge_slave_1: left promiscuous mode [ 507.430326][T15125] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.461264][T15125] bridge_slave_0: left promiscuous mode [ 507.461456][T15125] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.477717][T21973] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4328'. [ 508.221588][T15125] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 508.278236][T22006] netlink: 'syz.1.4333': attribute type 1 has an invalid length. [ 508.360367][T15125] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 508.388753][T15125] bond13 (unregistering): (slave gretap2): Releasing active interface [ 508.533099][T15125] bond8 (unregistering): (slave bridge5): Releasing active interface [ 508.583869][T15125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.597997][T15125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.599653][T15125] bond0 (unregistering): Released all slaves [ 508.628303][T15125] bond1 (unregistering): Released all slaves [ 508.649087][T15125] bond2 (unregistering): Released all slaves [ 508.682543][T15125] bond3 (unregistering): Released all slaves [ 508.703983][T15125] bond4 (unregistering): Released all slaves [ 508.733637][T15125] bond5 (unregistering): Released all slaves [ 508.765453][T15125] bond6 (unregistering): Released all slaves [ 508.791496][T15125] bond7 (unregistering): Released all slaves [ 508.830895][T15125] bond8 (unregistering): Released all slaves [ 508.856343][T15125] bond9 (unregistering): (slave bond10): Releasing backup interface [ 508.857038][T15125] bond9 (unregistering): Released all slaves [ 508.895225][T15125] bond10 (unregistering): Released all slaves [ 508.918988][T15125] bond11 (unregistering): (slave veth5): Releasing active interface [ 508.920723][T15125] bond11 (unregistering): Released all slaves [ 508.961109][T15125] bond12 (unregistering): Released all slaves [ 508.983247][T15125] bond13 (unregistering): Released all slaves [ 509.025892][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'. [ 509.032844][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'. [ 509.242755][T22006] bond3: entered promiscuous mode [ 509.243162][T22006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.340953][T22007] bond3: (slave bridge2): making interface the new active one [ 509.340977][T22007] bridge2: entered promiscuous mode [ 509.342160][T22007] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 509.369776][T22013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4334'. [ 509.431205][T15125] !;: left promiscuous mode [ 509.509417][T15125] : left promiscuous mode [ 509.805531][T15125] IPVS: stopping master sync thread 10968 ... [ 510.049559][T22039] xt_hashlimit: size too large, truncated to 1048576 [ 510.141673][T22042] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4341'. [ 510.687352][T15130] IPVS: starting estimator thread 0... [ 510.785920][T22057] IPVS: using max 35 ests per chain, 84000 per kthread [ 510.904481][T22061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4347'. [ 511.052109][T22068] netlink: 'syz.2.4350': attribute type 2 has an invalid length. [ 511.089361][T22068] !: entered promiscuous mode [ 511.272223][T15125] hsr_slave_0: left promiscuous mode [ 511.287529][T15125] veth1_macvtap: left promiscuous mode [ 511.287564][T15125] veth0_macvtap: left promiscuous mode [ 511.289432][T15125] veth1_vlan: left promiscuous mode [ 511.289476][T15125] veth0_vlan: left promiscuous mode [ 511.332176][T22077] netlink: 'syz.3.4354': attribute type 32 has an invalid length. [ 511.332194][T22077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'. [ 511.333462][T22079] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4353'. [ 511.400466][T22084] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4352'. [ 512.463399][T22077] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 512.487430][T22080] syzkaller0: left promiscuous mode [ 512.487452][T22080] syzkaller0: left allmulticast mode [ 512.586597][T22096] syzkaller1: entered promiscuous mode [ 512.586621][T22096] syzkaller1: entered allmulticast mode [ 512.781259][T22106] xt_hashlimit: size too large, truncated to 1048576 [ 512.922202][T22107] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4357'. [ 512.939031][T22111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4359'. [ 513.296017][T15125] IPVS: stop unused estimator thread 0... [ 513.736221][T22140] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4364'. [ 513.736245][T22140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4364'. [ 514.306729][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4370'. [ 514.469960][T22166] syzkaller1: entered allmulticast mode [ 514.509084][T22165] syzkaller1: entered promiscuous mode [ 514.509107][T22165] syzkaller1: entered allmulticast mode [ 514.667372][T22172] syzkaller0: entered promiscuous mode [ 514.667395][T22172] syzkaller0: entered allmulticast mode [ 514.714028][T22172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.745413][T22176] xt_hashlimit: size too large, truncated to 1048576 [ 515.589221][T22192] Bluetooth: hci0: unsupported parameter 5135 [ 515.589244][T22192] Bluetooth: hci0: unsupported parameter 8192 [ 515.589258][T22192] Bluetooth: hci0: unsupported parameter 5135 [ 515.589271][T22192] Bluetooth: hci0: unsupported parameter 8192 [ 516.090974][T22212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.091162][T22212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.115088][T22212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.118931][T22212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.136075][T22212] batman_adv: batadv0: Interface deactivated: syz_tun [ 516.136246][T22212] batman_adv: batadv0: Removing interface: syz_tun [ 516.146727][T22212] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 516.146916][T22212] batman_adv: batadv0: Removing interface: ipvlan2 [ 516.261174][T22219] __nla_validate_parse: 3 callbacks suppressed [ 516.261194][T22219] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4387'. [ 516.339119][T22217] syzkaller1: entered promiscuous mode [ 516.339142][T22217] syzkaller1: entered allmulticast mode [ 516.461718][T22227] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 516.516002][T22229] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 516.554280][T22227] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 516.555457][T22229] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 516.654330][T22231] xt_hashlimit: size too large, truncated to 1048576 [ 516.813367][T22233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4390'. [ 516.923990][T22239] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4393'. [ 517.208007][T22252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.208231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.208414][T22252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.211751][T15614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.224657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.397215][T22256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4398'. [ 517.397423][T22256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4398'. [ 517.567668][T22259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4399'. [ 517.641374][T22252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.641572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.689914][T22263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4400'. [ 517.708146][T22263] netlink: 'syz.2.4400': attribute type 7 has an invalid length. [ 517.708166][T22263] netlink: 'syz.2.4400': attribute type 5 has an invalid length. [ 517.708178][T22263] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4400'. [ 517.962951][T22272] netlink: 'syz.5.4402': attribute type 2 has an invalid length. [ 517.962973][T22272] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4402'. [ 518.287762][T22279] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4404'. [ 518.324035][T22279] syzkaller1: entered promiscuous mode [ 518.324208][T22279] syzkaller1: entered allmulticast mode [ 518.682021][T22288] IPVS: Unknown mcast interface: vcan0 [ 519.173016][T22302] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 519.345581][T22315] xt_hashlimit: size too large, truncated to 1048576 [ 519.577748][T22322] syzkaller1: entered promiscuous mode [ 519.577774][T22322] syzkaller1: entered allmulticast mode [ 519.780153][T22324] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 519.995201][T22330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.159509][T22333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.212545][T22333] veth0_to_team: entered promiscuous mode [ 520.571076][T22333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.682418][T15613] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.682547][T15613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.850133][T22358] xt_hashlimit: size too large, truncated to 1048576 [ 521.314659][T22371] __nla_validate_parse: 9 callbacks suppressed [ 521.314679][T22371] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4432'. [ 521.455595][T22374] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 521.692795][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'. [ 521.773732][T22390] xt_policy: neither incoming nor outgoing policy selected [ 522.253183][T22418] xt_hashlimit: size too large, truncated to 1048576 [ 522.279029][T22373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.304489][T22419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4446'. [ 522.951456][T22446] netlink: 'syz.2.4450': attribute type 1 has an invalid length. [ 523.091305][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 523.091334][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 523.091365][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 523.244943][T22460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4455'. [ 523.379538][T22465] x_tables: duplicate underflow at hook 2 [ 523.469945][T22476] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4458'. [ 523.650142][T22483] xt_ipcomp: unknown flags 1D [ 523.859547][T22483] bond3: entered allmulticast mode [ 523.860001][T22483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.901291][T22491] xt_hashlimit: size too large, truncated to 1048576 [ 523.933537][T22493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4461'. [ 524.016269][T22497] FAULT_INJECTION: forcing a failure. [ 524.016269][T22497] name failslab, interval 1, probability 0, space 0, times 0 [ 524.016304][T22497] CPU: 0 UID: 0 PID: 22497 Comm: syz.2.4462 Not tainted syzkaller #0 PREEMPT(full) [ 524.016326][T22497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 524.016337][T22497] Call Trace: [ 524.016344][T22497] [ 524.016353][T22497] dump_stack_lvl+0xe8/0x150 [ 524.016389][T22497] should_fail_ex+0x3eb/0x540 [ 524.016416][T22497] ? __alloc_skb+0x1db/0x7a0 [ 524.016526][T22497] should_failslab+0xa8/0x100 [ 524.016555][T22497] ? __alloc_skb+0x1db/0x7a0 [ 524.016571][T22497] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 524.016593][T22497] ? __alloc_skb+0x18d/0x7a0 [ 524.016611][T22497] ? __alloc_skb+0x1db/0x7a0 [ 524.016636][T22497] __alloc_skb+0x1db/0x7a0 [ 524.016658][T22497] netlink_sendmsg+0x5cd/0xb20 [ 524.016695][T22497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.016726][T22497] ? aa_sock_msg_perm+0x144/0x210 [ 524.016760][T22497] ? apparmor_socket_sendmsg+0x98/0x360 [ 524.016788][T22497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.016814][T22497] sock_sendmsg_nosec+0x14e/0x190 [ 524.016843][T22497] ____sys_sendmsg+0x54e/0x850 [ 524.016871][T22497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.016902][T22497] ? import_iovec+0x73/0xa0 [ 524.016929][T22497] ___sys_sendmsg+0x2a5/0x360 [ 524.016947][T22497] ? __lock_acquire+0x747/0x2de0 [ 524.016977][T22497] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.017036][T22497] ? __fget_files+0x3a2/0x420 [ 524.017058][T22497] ? __fget_files+0x2a/0x420 [ 524.017091][T22497] __x64_sys_sendmsg+0x1b1/0x290 [ 524.017115][T22497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.017159][T22497] do_syscall_64+0x166/0x520 [ 524.017182][T22497] ? trace_irq_disable+0x3b/0x140 [ 524.017207][T22497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.017226][T22497] ? clear_bhb_loop+0x70/0xc0 [ 524.017250][T22497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.017268][T22497] RIP: 0033:0x7f19b8ba8f19 [ 524.017294][T22497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.017309][T22497] RSP: 002b:00007f19b9a81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.017329][T22497] RAX: ffffffffffffffda RBX: 00007f19b8e25fa0 RCX: 00007f19b8ba8f19 [ 524.017347][T22497] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 524.017359][T22497] RBP: 00007f19b9a81090 R08: 0000000000000000 R09: 0000000000000000 [ 524.017371][T22497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.017382][T22497] R13: 00007f19b8e26038 R14: 00007f19b8e25fa0 R15: 00007ffde2895868 [ 524.017414][T22497] [ 524.208431][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4463'. [ 524.416471][T22505] macvlan0: entered promiscuous mode [ 524.478204][ T43] wlan1: Trigger new scan to find an IBSS to join [ 524.665616][T22514] netlink: 'syz.2.4469': attribute type 21 has an invalid length. [ 524.665642][T22514] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.665728][T22514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.665738][T22514] IPv6: NLM_F_CREATE should be set when creating new route [ 524.665778][T22514] IPv6: NLM_F_CREATE should be set when creating new route [ 524.665802][T22514] IPv6: NLM_F_CREATE should be set when creating new route [ 524.810516][T22519] netlink: 'syz.5.4470': attribute type 10 has an invalid length. [ 524.810715][T22519] macvlan1: entered promiscuous mode [ 524.810888][T22519] macvlan1: entered allmulticast mode [ 524.812872][T22519] veth1_vlan: entered allmulticast mode [ 524.835818][T22519] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 524.885311][T22528] openvswitch: netlink: Flow actions attr not present in new flow. [ 524.948882][T22531] FAULT_INJECTION: forcing a failure. [ 524.948882][T22531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.948912][T22531] CPU: 1 UID: 0 PID: 22531 Comm: syz.1.4475 Not tainted syzkaller #0 PREEMPT(full) [ 524.948933][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 524.948944][T22531] Call Trace: [ 524.948951][T22531] [ 524.948960][T22531] dump_stack_lvl+0xe8/0x150 [ 524.948995][T22531] should_fail_ex+0x3eb/0x540 [ 524.949025][T22531] _copy_from_iter+0x1d3/0x1680 [ 524.949047][T22531] ? __alloc_skb+0x27a/0x7a0 [ 524.949069][T22531] ? __alloc_skb+0x27a/0x7a0 [ 524.949090][T22531] ? __alloc_skb+0x27a/0x7a0 [ 524.949109][T22531] ? __pfx__copy_from_iter+0x10/0x10 [ 524.949136][T22531] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 524.949160][T22531] ? __alloc_skb+0x27a/0x7a0 [ 524.949175][T22531] ? __alloc_skb+0x27a/0x7a0 [ 524.949200][T22531] ? netlink_sendmsg+0x64f/0xb20 [ 524.949227][T22531] ? skb_put+0x112/0x210 [ 524.949250][T22531] netlink_sendmsg+0x6bb/0xb20 [ 524.949284][T22531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.949316][T22531] ? aa_sock_msg_perm+0x144/0x210 [ 524.949350][T22531] ? apparmor_socket_sendmsg+0x98/0x360 [ 524.949379][T22531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.949406][T22531] sock_sendmsg_nosec+0x14e/0x190 [ 524.949434][T22531] ____sys_sendmsg+0x54e/0x850 [ 524.949463][T22531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.949494][T22531] ? import_iovec+0x73/0xa0 [ 524.949521][T22531] ___sys_sendmsg+0x2a5/0x360 [ 524.949540][T22531] ? __lock_acquire+0x747/0x2de0 [ 524.949569][T22531] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.949629][T22531] ? __fget_files+0x3a2/0x420 [ 524.949651][T22531] ? __fget_files+0x2a/0x420 [ 524.949684][T22531] __x64_sys_sendmsg+0x1b1/0x290 [ 524.949709][T22531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.949755][T22531] do_syscall_64+0x166/0x520 [ 524.949779][T22531] ? trace_irq_disable+0x3b/0x140 [ 524.949803][T22531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.949821][T22531] ? clear_bhb_loop+0x70/0xc0 [ 524.949845][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.949862][T22531] RIP: 0033:0x7f7ac7fa8f19 [ 524.949879][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.949895][T22531] RSP: 002b:00007f7ac61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.949914][T22531] RAX: ffffffffffffffda RBX: 00007f7ac8225fa0 RCX: 00007f7ac7fa8f19 [ 524.949928][T22531] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 524.949939][T22531] RBP: 00007f7ac61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.949950][T22531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.949971][T22531] R13: 00007f7ac8226038 R14: 00007f7ac8225fa0 R15: 00007ffd21889ae8 [ 524.950000][T22531] [ 525.165922][T22535] sctp: [Deprecated]: syz.5.4476 (pid 22535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.165922][T22535] Use struct sctp_sack_info instead [ 526.053962][T22567] xt_hashlimit: size too large, truncated to 1048576 [ 526.920617][T22592] __nla_validate_parse: 5 callbacks suppressed [ 526.920640][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 526.966610][T22599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4496'. [ 527.435170][T15130] wlan1: Trigger new scan to find an IBSS to join [ 527.678926][T22627] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.842764][T22632] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4505'. [ 527.849446][T22632] netlink: 'syz.0.4505': attribute type 11 has an invalid length. [ 527.854211][T22632] netlink: 'syz.0.4505': attribute type 2 has an invalid length. [ 527.854230][T22632] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4505'. [ 527.873550][T22632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4505'. [ 527.953064][T22634] xt_hashlimit: size too large, truncated to 1048576 [ 528.056679][T22639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4506'. [ 528.138719][T22636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 528.140941][T22636] bridge0: port 3(bond6) entered blocking state [ 528.151568][T22636] bridge0: port 3(bond6) entered disabled state [ 528.151708][T22636] bond6: entered allmulticast mode [ 528.182211][T22636] bond6: entered promiscuous mode [ 528.182922][T22636] bridge0: port 3(bond6) entered blocking state [ 528.183066][T22636] bridge0: port 3(bond6) entered forwarding state [ 528.231683][T15617] bridge0: port 3(bond6) entered disabled state [ 528.299036][T22643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'. [ 528.436323][T22650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4510'. [ 528.586495][T22654] netlink: 'syz.2.4511': attribute type 49 has an invalid length. [ 528.686176][T22657] IPv6: sit1: Disabled Multicast RS [ 528.754307][T22652] syzkaller1: entered promiscuous mode [ 528.754330][T22652] syzkaller1: entered allmulticast mode [ 528.950874][T22665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4513'. [ 529.371523][T22681] syzkaller0: entered promiscuous mode [ 529.371706][T22681] syzkaller0: entered allmulticast mode [ 529.748404][T22697] netlink: 'syz.0.4520': attribute type 2 has an invalid length. [ 530.107567][T22712] xt_hashlimit: size too large, truncated to 1048576 [ 530.171251][T22713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4525'. [ 530.476177][T15612] wlan1: Trigger new scan to find an IBSS to join [ 531.406326][T15617] wlan1: Creating new IBSS network, BSSID f2:ec:0c:3b:20:5c [ 532.295234][T22797] xt_hashlimit: size too large, truncated to 1048576 [ 532.679309][T22816] sctp: [Deprecated]: syz.1.4543 (pid 22816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.679309][T22816] Use struct sctp_sack_info instead [ 532.737406][T22806] __nla_validate_parse: 3 callbacks suppressed [ 532.737426][T22806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4544'. [ 533.341252][T22845] openvswitch: netlink: Flow key attr not present in new flow. [ 533.341733][T22842] openvswitch: netlink: Flow key attr not present in new flow. [ 533.599378][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.599705][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.603589][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.604208][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.608580][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.608908][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.610951][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.611250][T22860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.921880][T22868] sit0: entered promiscuous mode [ 533.942602][T22868] netlink: 'syz.1.4556': attribute type 1 has an invalid length. [ 533.942625][T22868] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4556'. [ 534.073436][T22877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4559'. [ 534.234271][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4561'. [ 534.399558][T22885] xt_hashlimit: size too large, truncated to 1048576 [ 534.419750][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'. [ 534.583893][T22908] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4565'. [ 534.609819][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'. [ 534.737327][T22913] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4563'. [ 534.810098][T22908] syzkaller1: entered promiscuous mode [ 534.810120][T22908] syzkaller1: entered allmulticast mode [ 534.813132][T22894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4562'. [ 534.861272][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 534.882264][T22894] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.440579][T22929] netlink: 'syz.3.4574': attribute type 1 has an invalid length. [ 535.455389][T22929] netlink: 'syz.3.4574': attribute type 10 has an invalid length. [ 535.459067][T22929] bridge0: port 4(dummy0) entered blocking state [ 535.460221][T22929] bridge0: port 4(dummy0) entered disabled state [ 535.460517][T22929] dummy0: entered allmulticast mode [ 535.496545][T22929] dummy0: entered promiscuous mode [ 535.683179][T22937] netlink: 'syz.1.4577': attribute type 32 has an invalid length. [ 535.765603][T22937] bond4: option coupled_control: invalid value (192) [ 535.834458][T22937] bond4 (unregistering): Released all slaves [ 535.899736][T22947] bond0: Caught tx_queue_len zero misconfig [ 535.962906][T22954] xt_hashlimit: size too large, truncated to 1048576 [ 536.208371][T22962] syzkaller1: entered promiscuous mode [ 536.208545][T22962] syzkaller1: entered allmulticast mode [ 536.749814][T22972] syzkaller1: entered promiscuous mode [ 536.749837][T22972] syzkaller1: entered allmulticast mode [ 536.800886][T22995] netlink: 'syz.1.4589': attribute type 21 has an invalid length. [ 537.040016][T23008] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 537.236639][T23005] bond1: (slave veth0_to_bond): Releasing active interface [ 537.260448][T23005] bond0: (slave bond_slave_0): Releasing backup interface [ 537.297961][T23005] bond0: (slave bond_slave_1): Releasing backup interface [ 537.322811][T23005] team0: Port device team_slave_0 removed [ 537.346600][T23005] team0: Port device team_slave_1 removed [ 537.347262][ T11] block nbd4: Possible stuck request ffff888029e65080: control (read@0,4096B). Runtime 330 seconds [ 537.347543][T23005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.347561][T23005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.427473][T23012] team0: Port device xfrm0 added [ 537.705004][T23029] xt_hashlimit: size too large, truncated to 1048576 [ 537.744314][T23030] syzkaller1: entered promiscuous mode [ 537.744337][T23030] syzkaller1: entered allmulticast mode [ 537.844889][T15125] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.846676][T15125] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.846717][T15125] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.851009][T23031] __nla_validate_parse: 10 callbacks suppressed [ 537.851026][T23031] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4599'. [ 537.952119][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4601'. [ 538.079050][T23037] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4602'. [ 538.221415][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4603'. [ 538.236877][T23042] tipc: Resetting bearer [ 538.279259][T23042] tipc: Disabling bearer [ 538.314993][T15130] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.315047][T15130] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.315080][T15130] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.315125][T15130] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.462838][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055da8400: rx timeout, send abort [ 538.463245][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055da8400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 538.584810][T23045] sctp: [Deprecated]: syz.0.4604 (pid 23045) Use of int in max_burst socket option. [ 538.584810][T23045] Use struct sctp_assoc_value instead [ 539.136991][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 539.137015][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 539.137345][T23059] vlan0: entered promiscuous mode [ 539.179520][T23064] net_ratelimit: 28 callbacks suppressed [ 539.179538][T23064] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 539.272384][T23073] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4612'. [ 539.275263][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'. [ 539.443703][T23077] netlink: 26 bytes leftover after parsing attributes in process `syz.2.4613'. [ 539.613445][T23084] xt_hashlimit: size too large, truncated to 1048576 [ 539.653535][T23086] xt_connbytes: Forcing CT accounting to be enabled [ 539.653565][T23086] set match dimension is over the limit! [ 539.724463][T23090] set match dimension is over the limit! [ 539.758780][T23080] bond0: left allmulticast mode [ 539.781869][T23088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4616'. [ 541.322590][T23144] xt_hashlimit: size too large, truncated to 1048576 [ 541.400524][T23136] netlink: 'syz.5.4627': attribute type 2 has an invalid length. [ 541.442206][T23136] !;: entered promiscuous mode [ 541.475806][T23145] gretap0: entered promiscuous mode [ 541.593124][T23153] 0ªî{X¹¦: renamed from gretap0 [ 541.630532][T23153] 0ªî{X¹¦: left promiscuous mode [ 541.630556][T23153] 0ªî{X¹¦: entered allmulticast mode [ 541.664646][T23153] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 541.805505][T23154] netlink: 'syz.1.4633': attribute type 10 has an invalid length. [ 541.956871][T23154] team0: Device dummy0 is of different type [ 542.063489][T23172] IPv6: Can't replace route, no match found [ 542.228389][T23177] team0: Cannot enslave team device to itself [ 543.052040][T23212] xt_hashlimit: size too large, truncated to 1048576 [ 543.193339][T23217] __nla_validate_parse: 18 callbacks suppressed [ 543.193360][T23217] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.4654'. [ 543.286537][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4651'. [ 543.350864][T23217] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4654'. [ 543.429809][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'. [ 543.736868][T23230] batadv_slave_0: entered allmulticast mode [ 543.739858][T23229] batadv_slave_0: left allmulticast mode [ 544.022062][T23247] lo: entered promiscuous mode [ 544.024041][T23247] tunl0: entered promiscuous mode [ 544.024296][T23247] gre0: entered promiscuous mode [ 544.042170][T23247] gretap0: entered promiscuous mode [ 544.042675][T23247] erspan0: entered promiscuous mode [ 544.042968][T23247] ip_vti0: entered promiscuous mode [ 544.315098][ T32] INFO: task udevd:10807 blocked in I/O wait for more than 143 seconds. [ 544.315120][ T32] Not tainted syzkaller #0 [ 544.315130][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.315138][ T32] task:udevd state:D stack:25736 pid:10807 tgid:10807 ppid:5003 task_flags:0x400140 flags:0x00080802 [ 544.315188][ T32] Call Trace: [ 544.315194][ T32] [ 544.315207][ T32] __schedule+0x17dd/0x5830 [ 544.315251][ T32] ? __lock_acquire+0x747/0x2de0 [ 544.315287][ T32] ? __pfx___schedule+0x10/0x10 [ 544.315318][ T32] ? schedule+0x90/0x2b0 [ 544.315343][ T32] schedule+0x164/0x2b0 [ 544.315367][ T32] io_schedule+0x7f/0xd0 [ 544.315390][ T32] folio_wait_bit_common+0x6d0/0xcf0 [ 544.315478][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 544.315500][ T32] ? filemap_read_folio+0x234/0x3a0 [ 544.315529][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 544.315560][ ** replaying previous printk message ** [ 544.315560][ T32] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 544.315593][ T32] do_read_cache_folio+0x1ac/0x590 [ 544.315629][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 544.315733][ T32] read_part_sector+0xb6/0x2b0 [ 544.315821][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 544.315842][ T32] ? rcu_is_watching+0x16/0xb0 [ 544.315874][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 544.315895][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 544.315916][ T32] ? __kmalloc_cache_noprof+0x148/0x600 [ 544.315939][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 544.315966][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 544.316001][ T32] bdev_disk_changed+0x851/0x1680 [ 544.316054][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 544.316095][ T32] blkdev_get_whole+0x372/0x510 [ 544.316155][ T32] bdev_open+0x324/0xd70 [ 544.316196][ T32] blkdev_open+0x461/0x600 [ 544.316220][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 544.316239][ T32] do_dentry_open+0x80e/0x1360 [ 544.316273][ T32] vfs_open_consume+0x4a/0x350 [ 544.316293][ T32] ? path_openat+0x16e1/0x20f0 [ 544.316323][ T32] path_openat+0x16fc/0x20f0 [ 544.316371][ T32] do_file_open+0x23e/0x4a0 [ 544.316405][ T32] ? __pfx_do_file_open+0x10/0x10 [ 544.316456][ T32] ? _raw_spin_unlock+0x28/0x50 [ 544.320224][ T32] ? alloc_fd+0x6af/0x760 [ 544.320331][ T32] do_sys_openat2+0x115/0x200 [ 544.320358][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 544.320378][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 544.320493][ T32] __x64_sys_openat+0x138/0x170 [ 544.320520][ T32] do_syscall_64+0x166/0x520 [ 544.320545][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.320563][ T32] ? clear_bhb_loop+0x70/0xc0 [ 544.320586][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.320603][ T32] RIP: 0033:0x7f7c8c0a7407 [ 544.320629][ T32] RSP: 002b:00007ffed2069730 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 544.320650][ T32] RAX: ffffffffffffffda RBX: 00007f7c8c740880 RCX: 00007f7c8c0a7407 [ 544.320663][ T32] RDX: 00000000000a0800 RSI: 00005631d425aff0 RDI: ffffffffffffff9c [ 544.320677][ T32] RBP: 00005631d424d910 R08: 0000000000000000 R09: 0000000000000000 [ 544.320689][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00005631d426dff0 [ 544.320701][ T32] R13: 00005631d425b190 R14: 0000000000000000 R15: 00005631d426dff0 [ 544.320732][ T32] [ 544.320818][ T32] [ 544.320818][ T32] Showing all locks held in the system: [ 544.320828][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 544.320908][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 544.321023][ T32] locks held by getty/5392: 2, on CPU#0: [ 544.321036][ T32] #0: ffff888025e230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 544.321117][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 544.321166][ T32] locks held by udevd/10807: 1, on CPU#1: [ 544.321179][ T32] #0: ffff888029c88350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 544.321236][ T32] locks held by kworker/u8:27/15125: 2, on CPU#1: [ 544.321249][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.321303][ T32] #1: ffffc90003567c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.321352][ T32] locks held by kworker/u8:33/15612: 2, last CPU#1: [ 544.321365][ T32] #0: ffff888034105148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.321412][ T32] #1: ffffc900092cfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.321465][ T32] locks held by syz-executor/16266: 4, last CPU#0: [ 544.321478][ T32] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 544.321523][ T32] #1: ffff88802dc1d900 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 544.321572][ T32] #2: ffff888072074cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 544.321634][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 544.321685][ T32] locks held by modprobe/23254: 2, last CPU#1: [ 544.321699][ T32] #0: ffff888079f50340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 544.321744][ T32] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 544.321787][ T32] locks held by syz-executor/23259: 4, last CPU#1: [ 544.321801][ T32] #0: ffff88807741a308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 544.420764][ T32] #1: ffff8880b8324708 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 544.420991][ T32] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: has_ns_capability_noaudit+0x25/0x250 [ 544.421043][ T32] #3: ffff88802be1c8d8 (&p->alloc_lock){+.+.}-{3:3}, at: find_lock_task_mm+0x121/0x260 [ 544.421105][ T32] [ 544.421110][ T32] ============================================= [ 544.421110][ T32] [ 544.421137][ T32] NMI backtrace for cpu 0 [ 544.421150][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 544.421176][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 544.421187][ T32] Call Trace: [ 544.421194][ T32] [ 544.421202][ T32] dump_stack_lvl+0xe8/0x150 [ 544.421233][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 544.421342][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.421380][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 544.421405][ T32] sys_info+0x135/0x170 [ 544.421425][ T32] watchdog+0x1073/0x10f0 [ 544.421467][ T32] ? watchdog+0x209/0x10f0 [ 544.421498][ T32] kthread+0x38b/0x480 [ 544.421521][ T32] ? __pfx_watchdog+0x10/0x10 [ 544.421542][ T32] ? __pfx_kthread+0x10/0x10 [ 544.421564][ T32] ret_from_fork+0x514/0xb70 [ 544.421596][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 544.421617][ T32] ? __switch_to+0xc78/0x1410 [ 544.421647][ T32] ? __pfx_kthread+0x10/0x10 [ 544.421668][ T32] ret_from_fork_asm+0x1a/0x30 [ 544.421703][ T32] [ 544.421763][ T32] Sending NMI from CPU 0 to CPUs 1: [ 544.421792][ C1] NMI backtrace for cpu 1 [ 544.421805][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 544.421825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 544.421836][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 544.421927][ C1] Code: e8 9e 97 43 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 20 bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 2f 83 06 cc 44 89 f9 80 e1 07 [ 544.421943][ C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 544.421959][ C1] RAX: 1ffffffff3840b00 RBX: 00000000000003fd RCX: 0000000000000000 [ 544.421971][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 544.421983][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 544.421995][ C1] R10: dffffc0000000000 R11: ffffffff85857980 R12: dffffc0000000000 [ 544.422009][ C1] R13: 0000000000000000 R14: ffffffff9c205ec0 R15: 0000000000000000 [ 544.422021][ C1] FS: 0000000000000000(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 [ 544.422036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.422049][ C1] CR2: 00007f7ac8062fec CR3: 0000000034094000 CR4: 00000000003526f0 [ 544.422065][ C1] Call Trace: [ 544.422071][ C1] [ 544.422079][ C1] wait_for_lsr+0x184/0x2f0 [ 544.422108][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 544.422159][ C1] serial8250_console_write+0xa7e/0x1200 [ 544.422191][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 544.422215][ C1] ? __schedule+0x17f3/0x5830 [ 544.422246][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 544.422279][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 544.422307][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 544.422340][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 544.422363][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 544.422389][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 544.422411][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 544.422438][ C1] ? __kthread_parkme+0x71/0x1f0 [ 544.422457][ C1] ? __kthread_parkme+0x199/0x1f0 [ 544.422477][ C1] kthread+0x38b/0x480 [ 544.422497][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 544.422519][ C1] ? __pfx_kthread+0x10/0x10 [ 544.422540][ C1] ret_from_fork+0x514/0xb70 [ 544.422561][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 544.422581][ C1] ? __switch_to+0xc78/0x1410 [ 544.422609][ C1] ? __pfx_kthread+0x10/0x10 [ 544.422630][ C1] ret_from_fork_asm+0x1a/0x30 [ 544.422658][ C1] [ 544.424180][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 545.250126][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 545.259222][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 545.269263][ T32] Call Trace: [ 545.272531][ T32] [ 545.275452][ T32] vpanic+0x26f/0x710 [ 545.279431][ T32] panic+0xc5/0xd0 [ 545.283136][ T32] ? __pfx_panic+0x10/0x10 [ 545.287537][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 545.292988][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 545.298349][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 545.304494][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 545.310647][ T32] watchdog+0x10e7/0x10f0 [ 545.314977][ T32] ? watchdog+0x209/0x10f0 [ 545.319390][ T32] kthread+0x38b/0x480 [ 545.323448][ T32] ? __pfx_watchdog+0x10/0x10 [ 545.328114][ T32] ? __pfx_kthread+0x10/0x10 [ 545.332699][ T32] ret_from_fork+0x514/0xb70 [ 545.337283][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 545.342384][ T32] ? __switch_to+0xc78/0x1410 [ 545.347059][ T32] ? __pfx_kthread+0x10/0x10 [ 545.351636][ T32] ret_from_fork_asm+0x1a/0x30 [ 545.356407][ T32] [ 545.359689][ T32] Kernel Offset: disabled [ 545.364003][ T32] Rebooting in 86400 seconds..