last executing test programs: 7m41.841718426s ago: executing program 4 (id=2651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r7, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) recvmsg(r8, &(0x7f0000000a40)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/94, 0x5e}], 0x3}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$key(0xf, 0x3, 0x2) close(0x3) 7m41.349022763s ago: executing program 4 (id=2655): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100010000000000000000008500000075000000850000001100000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) 7m40.679022938s ago: executing program 4 (id=2660): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000225c17d03000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 7m40.57857778s ago: executing program 4 (id=2662): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4008054}, 0x404c800) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="05f30400550300000905000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000008001000000010000a00700000035cf52530599b474"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) close(0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x2000) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x401, 0x6}, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="696b45c2", 0x4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x4000005) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0e4}, 0x40004c0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r10, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080020000100000008001a"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) 7m39.554337042s ago: executing program 4 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x10001) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x34, r4, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0x4, 0x4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x14, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004}, 0x48004) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) pread64(r3, &(0x7f0000000280)=""/104, 0x68, 0x0) (rerun: 32) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) (async) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7m37.437506481s ago: executing program 4 (id=2685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4001000, 0x103a, 0x4001000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) 7m22.349570505s ago: executing program 32 (id=2685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4001000, 0x103a, 0x4001000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) 1m27.969921502s ago: executing program 0 (id=4555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) syz_emit_ethernet(0x2e, &(0x7f0000000800)={@random="956214a36d68", @empty, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x7, 0x0, 0xff}}, {@generic={0x4305, "551c6ece8e547c458594962751e139c8e3d13a39256c8741"}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m27.626580743s ago: executing program 5 (id=4556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000002c0)=[{0x3, 0x3, {0x1, 0xf0, 0x3}, {0x2, 0xf0, 0x3}, 0x0, 0xff}, {0x1, 0x0, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x40a57f579701942b}}], 0x40) splice(r1, 0x0, r4, 0x0, 0x5, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040010) 1m27.162121185s ago: executing program 2 (id=4559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000010900010073797a3000000000090002"], 0x2c}}, 0x200000d4) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x2, 0x8, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) vmsplice(r5, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x1000}], 0x1, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000140), &(0x7f00000001c0)) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m27.161228156s ago: executing program 0 (id=4560): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004801) shutdown(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x4, 0x2}}, 0x2e) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4ea1, 0x7, @local, 0x1000}}, 0xffff, 0xffbe}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) sendto$packet(r0, &(0x7f0000000000)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) 1m27.07128691s ago: executing program 5 (id=4563): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x7, 0x4132, 0xffffffffffffffff, 0x401c9000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400190000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10020, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x1c, r6, 0x309, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r11, &(0x7f0000000240)="3366ebac7c6c788446e70cc4c51a83af66490f64c240c2069d3209f365b3b83ad09794e4d19f65e8156777f89ed089bda2fb4388fde2eee56859e0c14a28a531bcbd6c195ccce19aa9ea6523253d300cbb4582a7d29d147a7ebd7a7eca993d5efd31f486c4407da16822833487b19a1205be3b1904ad53dacc28254ce9cc802967eed089db4a381abead5ab7cd2517b921da00d90dd735f4470d6eb6b8bee01e9965567dacb165e48e5d41ce2340d17c93161b83d6fdf1d56a4a36e1a1fb7c1c529274051fdb5cba3261805733e8e5a00a2a217935af1a7b4d037eec8cb941fae7faf29057", &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0x806000) 1m26.678383148s ago: executing program 5 (id=4564): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r3) (async) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7}}]}}]}, 0x48}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0x10}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x80, 0x1, 0x7, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xdc0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0xbc}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 1m26.003045525s ago: executing program 2 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000300)={0x0, 0xb3f8, 0x1, [0xcdd7, 0x9, 0xfff, 0x7, 0x4], [0xd28, 0x40d9ef67, 0x800, 0x8, 0x9, 0xfff, 0x2, 0x6, 0x2c50d762, 0x8000000000000001, 0xe71d, 0x6, 0x4, 0x3ff, 0x101, 0x8, 0x9, 0x0, 0x800, 0x73, 0x5, 0xe, 0xc7d, 0x40, 0x2, 0x2, 0x9, 0x2, 0x8, 0x400, 0x7, 0x0, 0x7fff, 0x3, 0x800, 0xfffffffffffffffd, 0xc74, 0x5, 0x0, 0x9, 0x1, 0x3, 0xffff, 0x8, 0x9, 0x8, 0x7, 0x8001, 0x3, 0x3, 0x3, 0x101, 0x0, 0x3, 0x1000, 0xfffffffffffffd2c, 0x9, 0x632b, 0x1, 0x7fffffff, 0x5, 0x1, 0x2, 0xffffffffffff0001, 0xdba2, 0x7f, 0x1, 0x6, 0x0, 0x4, 0x7fff, 0x6, 0x8, 0x2, 0x6, 0x93, 0x2, 0x4, 0x9, 0x3, 0xdd91, 0x2, 0xe2a2, 0x10001, 0xfffffffffffffffd, 0x9, 0x5, 0x4, 0x547, 0xe874, 0x8a7, 0x9, 0x6, 0xeb, 0xa, 0x9, 0x383, 0x7, 0x6253, 0x6, 0xb9, 0x1, 0xc, 0x7f, 0x4, 0x9, 0x9, 0x7fffffffffffffff, 0x100000000, 0x6bf44947, 0x4, 0x5b3, 0x4, 0x4, 0x6, 0x8, 0x9, 0x0, 0x7, 0x1, 0xa9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x120, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc0c0}, 0x80c0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={0x0, 0x7, 0x1, [0x7, 0x7, 0x1, 0x10, 0xffffffffffffffff], [0xc39, 0x49f, 0x5, 0x10, 0x2, 0x10000, 0x400, 0x0, 0x54, 0x10000, 0x2, 0x7, 0x8, 0x7, 0x3, 0x7, 0x9, 0x100000001, 0x0, 0x80000000, 0x6, 0x4, 0xbc, 0x4, 0x314f, 0x7f, 0x9, 0x9, 0x9, 0x2, 0xb6, 0x9, 0x2, 0x400, 0x0, 0x4d, 0x8000000000000001, 0x0, 0x0, 0x1, 0x1, 0x7, 0xfffffffffffffffc, 0x0, 0x5, 0xd, 0xe, 0x5, 0x4, 0x3, 0x4, 0x7, 0x1, 0xb646, 0x29, 0x9, 0x8, 0xe, 0xa, 0x2, 0xfffffffffffff18c, 0x299e, 0x5, 0x7, 0x400, 0x35, 0x1, 0x6, 0x80000000, 0x0, 0x6, 0x1000, 0x40, 0x9, 0x8, 0x2, 0x4, 0xb, 0x2, 0x1896, 0x100000001, 0xf56, 0xa, 0x7fffffff, 0x3, 0x8, 0x200, 0x4, 0xe, 0x7ecd7116, 0x6, 0x801d, 0x4, 0x5, 0x2, 0xfff, 0x7f, 0x1, 0x5, 0x80000000, 0xaf0, 0x1000, 0x7078, 0xfffffffffffff000, 0xcb, 0xa2, 0x5, 0xc, 0xffffffffffffffff, 0x101, 0x9, 0x2c, 0x8, 0x5b1, 0xc, 0x2, 0xe, 0x1, 0x8, 0x8, 0x9]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000f80)={0x0, 0x0, {0x3, @struct={0x0, 0x2}, r6, 0x7ff, 0x89, 0x2, 0x4, 0x2, 0x420, @usage=0x3, 0x0, 0xe, [0xe5f, 0x8, 0x2, 0x7, 0x4, 0x8]}, {0x1ff, @usage=0x9, r9, 0x6965, 0x0, 0xfffffffffffffffa, 0x2, 0x5a7, 0xa7, @usage=0xac, 0xe01a, 0x5, [0x0, 0x6, 0xfffffffffffffffa, 0x3ff, 0xad, 0x2]}, {0x2, @usage=0x9, r10, 0x1, 0x62, 0x9, 0x8000000000000000, 0x0, 0xb8, @struct={0x0, 0x9}, 0x2, 0x0, [0x3, 0x8000000000000, 0x7, 0x78, 0x9, 0x7]}, {0xf, 0x80000001, 0x1}}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "0f27c18313327104746176d7995be8fe25990dc1e0a5f67fdbc91402de6652df", 0x0, 0x0, 0x0, 0x1}, 0x3c) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d40)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m25.990021176s ago: executing program 0 (id=4568): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000225c17d03000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000580f02000000000000000000000000000000000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 1m25.705213653s ago: executing program 0 (id=4569): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000014c0)=ANY=[@ANYBLOB="04030800", @ANYRES16, @ANYBLOB="010027bd7000fedbdf25150000004c000980080002000a000000080002009e10000008000100880200000800010003000000080001"], 0x304}, 0x1, 0x0, 0x0, 0x8951}, 0x20044000) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x7640}, {@empty, 0xffff}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x23, 0x2, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3ff}}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000002600090123ca9e4687eac3fa940000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r8, 0x1}, 0x20) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000200010000001c0008800400078814000780080006"], 0x44}}, 0x0) 1m25.47295079s ago: executing program 3 (id=4570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) (async) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 1m24.925471304s ago: executing program 3 (id=4571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffb8, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)='3', 0x1}, {0x0, 0x60}], 0x2}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1m24.791301701s ago: executing program 3 (id=4572): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000000c0)="4ea5295ed2de92ca8f8009c9cb3f6592ba10b5a1152cfe38c7cb6b5bf5f303b74e178049ceabb7d3af0e99b26d925d41f78dfb934015303f644211a4f06b3415f4f2932212d8035f8475b139e89be3ff4dd86f489135c2c9283a23e29abe2df040e7a5f59227b9395e456406dce4ebb2f5cd6b11d221f9a701c8394182ca200e12b11eed"}, 0x20) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/32, 0x20}], 0x4, &(0x7f0000000540)=""/155, 0x9b}, 0x40) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000640)={'a', ' *:* ', 'w\x00'}, 0x8) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=0x12, 0x800) connect$x25(r2, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000780)={'broute\x00', 0x0, 0x0, 0x0, [0xc00, 0x3, 0x5, 0x100, 0x400, 0xffffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={r1, &(0x7f0000000880)='\x00', 0x103082, &(0x7f00000008c0)={@_ha_fsid={[0xa2c6, 0x80]}, {0x800, 0xfff7, 0xb4e7, 0x1000}}, 0x7, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x342a}) sendmsg$xdp(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="a1c56c28ffcbfd222a34f914989cc22877168d82efe6abd6304ac8c91eb32843d98d874b7cefae7f97b867a6fbd44b2a2504d12543ce9fbda2f3f60a5dbc1dbb381cdb77d0c199d2da7e48e7f98cee35a0ddb51210f54062f2ec54cc2adf7f04dbb7e6195962c3efa6e639506d2544cc7d77c0aec092a7015221c1a927", 0x7d}, {&(0x7f0000001a40)="86afd4e9b78cc14877bc273056a6", 0xe}, {&(0x7f0000001a80)="098dfb0156a3e39618c4a4ff35b603a079377ed415f003cf0126076a2c07c1632261fb870be8be44bec0ea", 0x2b}, {&(0x7f0000001ac0)="358daea7dce39ad6e2fb037b32f900a75b3a7848fd973dd52fd85d6a4e3812", 0x1f}, {&(0x7f0000001b00)="7eeb286b88f49aa8aca69bf453893b99eb01a8c166b727a51404ea7c542d160ff8fba0e65cf7ebce80e11631658ff2c18151922e7e944925eebe0357c476c5c3e6793ea91e6b3f70c8e23f049c66bdaa1d19bfbc0c25be248438f36ee56436616dd34886fd19eae1ab24bf1d0cbaf3363d12e233c67c6c9476bc139b546f71492b552d2ddb2d9d236c4fd94b035cc175fa50a7b8c73d741817d1474948bbb8f744c2ed19ef99889b66a7e8e1effdcc201f018b003563d48159b97afd0e851ec30ac834f55945832a05f4d397c4947b08a4a15a6385876afb3c87e47bc500d4511fccdb1dd3912c6530b01d45c7", 0xed}, {&(0x7f0000001c00)="f035f385a3eb9a7ed2", 0x9}], 0x7}, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001e40)={{r0, &(0x7f0000001d00)='{.}#\\%$.\x00', 0x2, &(0x7f0000001d40)={@_ha_fsid={[0xb, 0x4]}, {0x0, 0xfff0, 0x33, 0x5}}, 0x7fffffff, &(0x7f0000001d80)={@_ha_fsid}, &(0x7f0000001dc0)=0x9}, 0x0, &(0x7f0000001e00)}) r5 = accept$inet6(r3, &(0x7f0000001ec0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001f00)=0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001f40)={0x0, 0x96, "6746d42c7fbecd1c9472e0bdc86a06bbb8ad3c7b917004a5ffab35e9fb97d14d9a073d53ca41b306eb4326fc791cd82935bc38707fd21fb216c87033efbdfbbc27752d51358cf40ac0927e4b12cd8d6dc5d5e44e27d9d84e66d69efbdddaed7f46eb6356a603af9e52a556758dfe704458cf7aecd13fbd9d7a3c1c7bad3505691657d7388ee1ced0cf71e637f4109398d575276ff5ab"}, &(0x7f0000002000)=0x9e) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002040)={0xffff, 0x4, 0x4, 0x5, r6}, &(0x7f0000002080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000020c0)={r6, @in6={{0xa, 0x4e21, 0x1, @private2, 0x9}}, [0x0, 0x4, 0x9, 0x6, 0x2a7, 0x7ff, 0x80000000, 0x7, 0x9, 0x95a3, 0x8001, 0x0, 0x7, 0xe9386e78, 0x3]}, &(0x7f00000021c0)=0x100) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000002200)={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, {0xa, 0x4e22, 0xffffffff, @remote, 0x81}, 0x1, {[0x57e1, 0x6, 0x5, 0x7, 0x8, 0x0, 0x4, 0x2]}}, 0x5c) connect$inet(r0, &(0x7f0000002280)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={0xffffffffffffffff, 0xc, 0x18}, 0xc) sendto$x25(r8, &(0x7f00000023c0)="ed4a320e614095dbef7120c3d3be9f603bf12bf7a3b319c79abaab84d90e8cfc8070a7293e648e3a845ce5650097ba2365b5bbcadb2ee6916a45263bb0512cde08cec90d03f1996bafa635512d15bb9f2943c802bafab5ba73801cf256cfb7752a216d38fdc3", 0x66, 0x20008094, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002440), &(0x7f0000002480)=0xe) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f00000025c0)={r9, &(0x7f00000024c0)='-\x00', 0x123401, &(0x7f0000002500)={@align=0x8000000000000000, {0x9, 0xe1a2, 0xe, 0x4}}, 0x2, &(0x7f0000002540), &(0x7f0000002580)=0x8}) write$cgroup_netprio_ifpriomap(r11, &(0x7f0000002600)={'tunl0', 0x32, 0x38}, 0x8) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r12, 0x5000943a, &(0x7f0000002900)={{r10}, r13, 0x6, @inherit={0x58, &(0x7f0000002880)={0x0, 0x2, 0x2, 0x3ff, {0x22, 0x7, 0x8, 0x1, 0x8}, [0x1, 0x188]}}, @devid}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003dc0)={@ifindex, 0xffffffffffffffff, 0xa, 0x1018, r3, @void, @value=r9}, 0x20) 1m23.76732103s ago: executing program 3 (id=4573): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000002380)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff88580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8cf811eee6448a7c2db438b06b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6b1082608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e30f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab8", 0x240}], 0x1}, 0x9cdc2384056f0939) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff1e00ff86dd600000000028010000f5ffffffffffffff000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800001e022203f10402080a0000000700000000000000"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) 1m23.536989121s ago: executing program 3 (id=4574): r0 = socket(0x6, 0x3, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@ringbuf_query, @alu={0x7, 0x0, 0x5, 0x8, 0xb, 0xfffffffffffffff0}, @alu={0x0, 0x1, 0x2, 0x3, 0x2, 0xc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}], &(0x7f0000000080)='GPL\x00', 0x6, 0xb6, &(0x7f00000000c0)=""/182, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0xdd, 0x6}, 0x10, 0x2290f, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x5, 0x3, 0x5, 0xa}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r0, r1}) r2 = accept$nfc_llcp(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x60) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000400)={0x6, 'veth1_to_bond\x00', {0x7ff}, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r4, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3f}}}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xb, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0xdb, 0x2}, {0x5, 0x2}, {0x4, 0x6}, {0x4f, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x81, 0x3}, {0x3, 0x7}, {0x81, 0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x5}], "09cbdf4f8748857c"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7, 0x2}, {0x2, 0x6}, {0x6, 0x5}, {0x17, 0x1}, {0xfe, 0x5}, {0xfa, 0x4}], "dd31c0dcc3a29ba0"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x3}, {0xb, 0x1}, {0x81, 0x7}, {}, {0x5, 0x3}, {0x3, 0x3}], "d2916b4e9852fb8a"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa3b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf1f2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5c6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x96b5e43557b941a6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000740)={0x8, 'vlan0\x00', {'veth1_to_bridge\x00'}, 0x2}) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x832e116a1bdb6c83, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000008c0)={'team0\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000900)=0xfffffff9, 0x4) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3fa, 0x4, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) r7 = socket$inet(0x2, 0x80000, 0x10000) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000001a80)={'broute\x00', 0x0, 0x4, 0x1000, [0x7, 0x100000000, 0xdd6c, 0x8, 0x10000, 0x2], 0x1, &(0x7f0000000a40)=[{}], &(0x7f0000000a80)=""/4096}, &(0x7f0000001b00)=0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b40)={0x0, 0x0}, 0x8) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b80)=r8, 0x4) setsockopt$sock_void(r6, 0x1, 0x2d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001c80)={'erspan0\x00', &(0x7f0000001c00)={'gre0\x00', r10, 0x7, 0x1, 0x800, 0x3, {{0xb, 0x4, 0x2, 0x33, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @local, {[@timestamp={0x44, 0xc, 0x94, 0x0, 0x6, [0x4, 0x1]}, @noop, @generic={0x7, 0x8, "8876546dc956"}]}}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6275}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffd7c}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000020c0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001e00)={0x278, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @local, 0x1b11eef5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private0, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd7, @private0}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa84}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2833}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ccbb3ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6922}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x40480c1}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000002440)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002180)={0x24c, r4, 0x200, 0xe2f4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1ac, 0x11d, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x6c, 0x9, 0x5d, 0x24, 0x6c, 0x12, 0x9, 0x1b, 0x12, 0x30, 0x12, 0x6, 0x6, 0x30, 0x6c, 0x0, 0x3, 0x5, 0x30]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x6}, {0x4, 0x9}, {0x2}, {0x2, 0x9}, {0x6, 0x8}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1000, 0xdeb, 0x9dbe, 0x7, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x7, 0xbc2, 0x1, 0x6, 0x6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x2}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x2}, {0x7, 0x1}, {0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0x4}, {0x7, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0xa}, {0x4, 0xa}, {}, {0x6, 0x1}, {0x0, 0x6}, {0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x5}, {}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x9}, {}, {0x6, 0x6}, {0x0, 0x9}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x1}, {0x2, 0x9}, {0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x5}, {0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7800, 0x2, 0x358a, 0xb, 0x1, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000814}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m22.405025789s ago: executing program 5 (id=4575): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.389931047s ago: executing program 2 (id=4576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) (async) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x6782}], 0x3, 0x20, 0x0) (async) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x6782}], 0x3, 0x20, 0x0) shutdown(r2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1d, 0x3, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x14000}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1d, 0x3, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 1m22.343299785s ago: executing program 1 (id=4577): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8004) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x2, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1m22.333095953s ago: executing program 3 (id=4578): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004801) shutdown(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x4, 0x2}}, 0x2e) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4ea1, 0x7, @local, 0x1000}}, 0xffff, 0xffbe}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) sendto$packet(r0, &(0x7f0000000000)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) 1m22.116884327s ago: executing program 1 (id=4579): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="01000000030000006400000000000000000000000000000000000000000000000f423f000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000580f02000000000000000000000000000000000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 1m21.990364001s ago: executing program 0 (id=4580): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000)=0x13, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m21.929436492s ago: executing program 5 (id=4581): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1c, r3, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) accept4(r0, 0x0, &(0x7f0000000200), 0x800) 1m21.811763128s ago: executing program 2 (id=4582): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x80, 0x9, 0x4, 0x101, 0x6, 0x0, [{0x8, 0xfffffffffffffffb, 0x85b6, '\x00', 0x404}, {0x4, 0x0, 0x40000000000000, '\x00', 0x1102}, {0x6, 0x7, 0x1, '\x00', 0x1004}, {0x80000000, 0x0, 0x0, '\x00', 0xa09}, {0x7, 0x0, 0x600000000000, '\x00', 0x804}, {0x4, 0x100, 0xc95, '\x00', 0x2800}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r3, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 1m21.426602792s ago: executing program 1 (id=4583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40110000", @ANYRES16=r2, @ANYBLOB="01002dbd0700ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100"], 0x44}}, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@gettaction={0x80, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x10001}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0f"]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRES64=r8], 0x24}, 0x1, 0x0, 0x0, 0x44000050}, 0x48c2) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x2, 0x0, 0xffffffffffffffda, 0x62f, 0x5, 0x9, 0x3ff, 0x9}, {0x3, 0x0, 0x7, 0x7, 0x3ff, 0x7fffffffffffffff, 0x6}], 0x2, 0x38, 0x0, 0xc}) 1m21.426085938s ago: executing program 2 (id=4584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xb938, @mcast1, 0x2, 0x1}, 0x20) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={r2, 0x0, 0x2, 0x101, 0x1, 0xf}) 1m21.257252058s ago: executing program 1 (id=4585): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @mcast2, 0xfffffffd}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4) 1m21.06266386s ago: executing program 1 (id=4586): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010403000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012"], 0x3c}}, 0x54) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c000100000008"], 0x84}}, 0x200088c2) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078e0000002470000000000000000110000ac141430ac1414aa440c0001000000004e210000443c2001e0000001000000000000000000000000a4141400000000000000000000000000ffffffff00000000ac1e0401000000007f00000100000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010403000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012"], 0x3c}}, 0x54) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c000100000008"], 0x84}}, 0x200088c2) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078e0000002470000000000000000110000ac141430ac1414aa440c0001000000004e210000443c2001e0000001000000000000000000000000a4141400000000000000000000000000ffffffff00000000ac1e0401000000007f00000100000000"], 0x0) (async) 1m20.976279819s ago: executing program 2 (id=4587): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)=0x60, 0x80800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000380)={0x7, {0x0, 0x6, 0x6, 0x5, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x5c, 0x2e, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x9, 0x1}, {0xe, 0xf}, {0xfff1, 0x6}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x3}, {0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153012523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$kcm(0xf, 0x7fe585573a140c85, 0x2) (async, rerun: 64) r8 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x101d0}}, 0x10, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "682363808af9a311", "e66a016f89f26cd320dd1fc51e76390169850f65fa71f867c7ea22c2d37225cf", "0da5e3d8", "7860f83c53e8baff"}, 0x38) (async) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00000003c0)=0xbb, 0x4) (async) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 1m20.449815088s ago: executing program 5 (id=4588): poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x13c) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2903fcfffffffedbdf25160000000c000600010000df00000000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x19, 0x40010, 0xffffffffffffffff, 0x0) 1m20.354939531s ago: executing program 0 (id=4589): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x5, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0xfff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x88, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1c0}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x40) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r1, 0x100000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x2c}}, 0x80) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x5, 0x2, 0xbb1, 0x8f5, 0x20, 0x1ff, 0x7}, &(0x7f0000000b40)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000b80)={r10, 0x58, "a8328bdcfb626ed0634ae4b039f30c7782f5cdcb11ddafa5e8f0b14551b41e49e21ba035af8cb7f0e2c271cf7ca823abcf259511187863123357e9b66081800b0e1a49582c4b2c05ad5021d36c75e7e735ede2f832635042"}, &(0x7f0000000c00)=0x60) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 1m19.998043333s ago: executing program 1 (id=4590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000110b0e0000000000000000800018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002600000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 33 (id=4589): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x5, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0xfff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x88, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1c0}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x40) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r1, 0x100000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x2c}}, 0x80) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x5, 0x2, 0xbb1, 0x8f5, 0x20, 0x1ff, 0x7}, &(0x7f0000000b40)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000b80)={r10, 0x58, "a8328bdcfb626ed0634ae4b039f30c7782f5cdcb11ddafa5e8f0b14551b41e49e21ba035af8cb7f0e2c271cf7ca823abcf259511187863123357e9b66081800b0e1a49582c4b2c05ad5021d36c75e7e735ede2f832635042"}, &(0x7f0000000c00)=0x60) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) kernel console output (not intermixed with test programs): 68 bytes leftover after parsing attributes in process `syz.2.3899'. [ 756.557131][T22492] lo speed is unknown, defaulting to 1000 [ 756.620409][T22492] lo speed is unknown, defaulting to 1000 [ 756.827134][T22492] lo speed is unknown, defaulting to 1000 [ 756.868782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.885855][T22492] lo speed is unknown, defaulting to 1000 [ 757.313609][T22519] sctp: [Deprecated]: syz.3.3904 (pid 22519) Use of int in max_burst socket option deprecated. [ 757.313609][T22519] Use struct sctp_assoc_value instead [ 757.342003][T22518] sctp: [Deprecated]: syz.3.3904 (pid 22518) Use of int in max_burst socket option deprecated. [ 757.342003][T22518] Use struct sctp_assoc_value instead [ 757.472264][T22526] netlink: 'syz.2.3907': attribute type 29 has an invalid length. [ 757.531276][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 757.532921][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 757.578659][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 757.630640][T22532] ¾x9ÿ: left allmulticast mode [ 757.635639][T22532] ¾x9ÿ: left promiscuous mode [ 757.642698][T22532] bridge0: port 1(1¾x9ÿ) entered disabled state [ 757.683020][T22533] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.774262][T22532] bridge_slave_1: left allmulticast mode [ 757.781811][T22532] bridge_slave_1: left promiscuous mode [ 757.795887][T22532] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.844517][T22532] bond0: (slave bond_slave_0): Releasing backup interface [ 757.901946][T22532] bond0: (slave bond_slave_1): Releasing backup interface [ 757.909675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.998795][T22532] team0: Port device team_slave_0 removed [ 758.079707][T22532] team0: Port device team_slave_1 removed [ 758.089103][T22532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.098108][T22532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.116270][T22532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.125355][T22532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.144970][T22532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 758.948740][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 759.512786][T22598] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 759.552661][T22600] netlink: 'syz.5.3926': attribute type 1 has an invalid length. [ 759.785641][T22604] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 759.813783][T22604] bond9 (unregistering): Released all slaves [ 759.937853][T22600] __nla_validate_parse: 70 callbacks suppressed [ 759.945943][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3926'. [ 759.975582][T22616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3928'. [ 759.989086][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.035623][T22600] bridge5: entered promiscuous mode [ 760.050685][T22600] bond8: (slave bridge5): making interface the new active one [ 760.068443][T22608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3928'. [ 760.123800][T22600] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 760.762494][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 760.770659][T22637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3932'. [ 760.863342][T22647] gre0: entered promiscuous mode [ 760.869369][T22647] gre0: entered allmulticast mode [ 760.875180][T22647] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 760.919405][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 761.028735][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 761.466030][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 761.477101][T22667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.488663][T22667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.663964][T22680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3945'. [ 761.689201][T22680] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3945'. [ 762.068572][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.223653][ T5624] block nbd3: Receive control failed (result -32) [ 762.234330][T17438] block nbd3: Receive control failed (result -32) [ 762.520448][ T25] lo speed is unknown, defaulting to 1000 [ 762.535951][T22707] macsec1: entered promiscuous mode [ 762.542057][T22707] hsr0: entered promiscuous mode [ 762.774199][T22708] bond3: entered promiscuous mode [ 762.792160][T22708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.108703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 763.190449][T22715] syzkaller0: entered promiscuous mode [ 763.196257][T22715] syzkaller0: entered allmulticast mode [ 764.156782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 765.124239][T22696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.189187][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 765.845826][T22754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3960'. [ 766.228575][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.479733][T22763] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3962'. [ 766.669891][T22746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3960'. [ 766.726171][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 766.735464][T22762] pim6reg1: entered promiscuous mode [ 766.735646][T22762] pim6reg1: entered allmulticast mode [ 766.904692][T22775] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.905259][T22775] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.037994][T22775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.133967][T22775] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 767.174893][T22775] veth3: left allmulticast mode [ 767.221068][T22775] bond1: left promiscuous mode [ 767.226157][T22775] ip6gre1: left promiscuous mode [ 767.235901][T22775] bond2: left promiscuous mode [ 767.241716][T22775] veth0_to_bond: left promiscuous mode [ 767.247839][T22775] bond2: left allmulticast mode [ 767.254657][T22775] veth0_to_bond: left allmulticast mode [ 767.263570][T22775] bond3: left promiscuous mode [ 767.268853][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 767.280412][ T7761] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.281022][ T7761] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.282222][ T7761] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.282288][ T7761] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.283025][ T7761] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.283093][ T7761] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.292347][ T7761] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.292426][ T7761] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.891653][T22793] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.3966'. [ 768.308682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.695939][T22822] bond1: entered allmulticast mode [ 768.702333][T22822] ip6gre1: entered allmulticast mode [ 768.742478][T22823] nbd: nbd1 already in use [ 768.747630][T22823] block nbd1: NBD_DISCONNECT [ 768.768842][T22823] block nbd1: Send disconnect failed -32 [ 768.769061][T22823] block nbd1: Send disconnect failed -32 [ 768.769255][T22823] block nbd1: shutting down sockets [ 768.774673][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 769.044637][T22835] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 769.272620][T22835] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.348623][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 769.483009][T22823] bond10: (slave veth5): Enslaving as an active interface with a down link [ 769.512428][ T7762] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 769.533469][ T7762] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 769.539297][ T7762] bridge0: port 1(wlan1) entered disabled state [ 769.683624][ T1692] block nbd5: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 60 seconds [ 769.685134][ T1692] block nbd5: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 60 seconds [ 769.686444][ T1692] block nbd5: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 60 seconds [ 769.686489][ T1692] block nbd5: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 60 seconds [ 769.954760][ T7762] dummy0: left allmulticast mode [ 769.971262][ T7762] dvmrp8: left allmulticast mode [ 770.296240][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 770.388539][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.408273][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 770.492800][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 770.660750][ T7762] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 770.812211][ T7762] bond18 (unregistering): (slave bridge16): Releasing backup interface [ 770.812258][ T7762] bond18 (unregistering): (slave bridge16): the permanent HWaddr of slave - ea:7a:f7:68:37:f1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 770.812286][ T7762] bond18 (unregistering): (slave bridge17): making interface the new active one [ 770.857201][ T7762] bond18 (unregistering): (slave bridge17): Releasing backup interface [ 770.905098][ T7762] bond1 (unregistering): Released all slaves [ 770.931445][ T7762] bond2 (unregistering): Released all slaves [ 770.961830][ T7762] bond3 (unregistering): Released all slaves [ 770.986918][ T7762] bond4 (unregistering): Released all slaves [ 771.016146][ T7762] bond5 (unregistering): Released all slaves [ 771.043524][ T7762] bond6 (unregistering): Released all slaves [ 771.073378][ T7762] bond7 (unregistering): Released all slaves [ 771.097035][ T7762] bond8 (unregistering): Released all slaves [ 771.126738][ T7762] bond9 (unregistering): Released all slaves [ 771.155170][ T7762] bond10 (unregistering): Released all slaves [ 771.186075][ T7762] bond11 (unregistering): Released all slaves [ 771.205296][ T7762] bond0 (unregistering): left promiscuous mode [ 771.207195][ T7762] bond0 (unregistering): Released all slaves [ 771.238078][ T7762] bond12 (unregistering): Released all slaves [ 771.260634][ T7762] bond13 (unregistering): Released all slaves [ 771.287029][ T7762] bond14 (unregistering): Released all slaves [ 771.315088][ T7762] bond15 (unregistering): Released all slaves [ 771.337738][ T7762] bond16 (unregistering): Released all slaves [ 771.375902][ T7762] bond17 (unregistering): Released all slaves [ 771.400651][ T7762] bond18 (unregistering): Released all slaves [ 771.422950][ T7762] bond19 (unregistering): Released all slaves [ 771.428995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.456509][ T7762] bond20 (unregistering): Released all slaves [ 771.484135][ T7762] bond21 (unregistering): (slave veth7): Releasing backup interface [ 771.503306][ T7762] bond21 (unregistering): Released all slaves [ 771.525723][ T7762] bond22 (unregistering): Released all slaves [ 771.546622][ T7762] bond23 (unregistering): Released all slaves [ 771.574033][ T7762] bond24 (unregistering): Released all slaves [ 771.597233][ T7762] bond25 (unregistering): Released all slaves [ 771.622602][ T7762] bond26 (unregistering): (slave veth0_to_bond): Releasing active interface [ 771.642832][ T7762] bond26 (unregistering): Released all slaves [ 772.067895][T22842] tipc: Resetting bearer [ 772.319872][T22842] syz_tun: left promiscuous mode [ 772.468620][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.211521][T22842] tipc: Resetting bearer [ 773.212450][T22842] tipc: Resetting bearer [ 773.278851][ T4980] udevd[4980]: worker [19122] /devices/virtual/block/nbd5 is taking a long time [ 773.508700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.214415][T22842] bridge5: left promiscuous mode [ 774.239325][ T7772] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.239381][ T7772] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.239406][ T7772] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.248322][ T7761] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.289396][ T7761] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.289456][ T7761] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.329130][ T1153] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.329187][ T1153] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.329216][ T1153] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.329567][T22859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3983'. [ 774.529577][ T7762] tipc: Disabling bearer [ 774.530110][ T7762] tipc: Disabling bearer [ 774.530818][ T7762] tipc: Left network mode [ 774.549281][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.665465][T22876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3986'. [ 774.778683][T22882] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3986'. [ 775.588624][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.364908][T22932] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.585041][T22946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4004'. [ 776.628606][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.834773][T22939] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4004'. [ 776.944382][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4007'. [ 777.102174][T22961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4008'. [ 777.479204][T22973] netlink: 16170 bytes leftover after parsing attributes in process `syz.5.4012'. [ 777.667742][T22981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4012'. [ 777.667983][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4012'. [ 777.668958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 777.775457][T22981] tipc: Resetting bearer [ 777.906238][T22981] tipc: Resetting bearer [ 777.923848][T22981] tipc: Resetting bearer [ 778.383358][T19021] udevd[19021]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 778.534215][T22996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 778.708695][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.226057][ T7762] batadv0: left promiscuous mode [ 779.310675][ T7762] hsr_slave_0: left promiscuous mode [ 779.311620][ T7762] batman_adv: batadv0: Removing interface: ipvlan2 [ 779.455034][T23013] __nla_validate_parse: 1 callbacks suppressed [ 779.455491][T23013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4020'. [ 779.604906][T23027] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4021'. [ 779.748622][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 779.906710][T23032] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4023'. [ 780.213585][ T7775] smc: removing ib device sz1 [ 780.332547][ T7775] smbdirect: ib_dev[sz1] removed [ 780.400265][T23006] syzkaller0: entered promiscuous mode [ 780.400871][T23006] syzkaller0: entered allmulticast mode [ 780.607239][T23027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.625556][T23027] bond0 (unregistering): Released all slaves [ 780.648331][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4023'. [ 780.788671][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 781.124487][T23036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4024'. [ 781.260307][T23044] netlink: zone id is out of range [ 781.260342][T23044] netlink: zone id is out of range [ 781.260367][T23044] netlink: zone id is out of range [ 781.260380][T23044] netlink: zone id is out of range [ 781.260392][T23044] netlink: zone id is out of range [ 781.260404][T23044] netlink: zone id is out of range [ 781.260420][T23044] netlink: zone id is out of range [ 781.260432][T23044] netlink: zone id is out of range [ 781.260444][T23044] netlink: zone id is out of range [ 781.975816][T17438] Bluetooth: hci2: link tx timeout [ 781.975992][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.002437][T17438] Bluetooth: hci2: link tx timeout [ 782.010994][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.024400][T17438] Bluetooth: hci2: link tx timeout [ 782.030765][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.055540][T17438] Bluetooth: hci2: link tx timeout [ 782.055570][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.086217][T17438] Bluetooth: hci2: link tx timeout [ 782.091601][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.112139][T23062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4032'. [ 782.128100][T17438] Bluetooth: hci2: link tx timeout [ 782.128130][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.175413][T17438] Bluetooth: hci2: link tx timeout [ 782.175443][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.197289][T17438] Bluetooth: hci2: link tx timeout [ 782.203107][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.220532][T17438] Bluetooth: hci2: link tx timeout [ 782.220550][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.257037][T17438] Bluetooth: hci2: link tx timeout [ 782.257066][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.274410][T17438] Bluetooth: hci2: link tx timeout [ 782.274437][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.290600][T17438] Bluetooth: hci2: link tx timeout [ 782.297103][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.297238][T17438] Bluetooth: hci2: link tx timeout [ 782.297927][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.298088][T17438] Bluetooth: hci2: link tx timeout [ 782.298100][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.306406][T17438] Bluetooth: hci2: link tx timeout [ 782.306421][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.328985][T17438] Bluetooth: hci2: link tx timeout [ 782.329000][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.369750][T17438] Bluetooth: hci2: link tx timeout [ 782.369780][T17438] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 782.723951][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4035'. [ 782.774219][T23067] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4035'. [ 783.989145][T17438] Bluetooth: hci2: command 0x0406 tx timeout [ 784.907556][T23123] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 785.364651][T23147] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 785.365075][T23147] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4051'. [ 785.564950][T23138] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4048'. [ 785.671305][T23146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4048'. [ 785.988621][ C1] net_ratelimit: 153 callbacks suppressed [ 785.988671][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 786.064156][T23157] syzkaller0: entered promiscuous mode [ 786.064194][T23157] syzkaller0: entered allmulticast mode [ 786.084440][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4053'. [ 786.491886][T23179] netlink: 'syz.5.4059': attribute type 2 has an invalid length. [ 786.919997][T23187] netlink: 'syz.1.4060': attribute type 3 has an invalid length. [ 786.933477][ T7762] IPVS: stop unused estimator thread 0... [ 787.028706][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.521558][T16968] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 787.612398][T23220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 787.676187][T23220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4068'. [ 787.868539][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4069'. [ 787.951434][T23224] fido_id[23224]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 788.068683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 788.140052][T23227] bond0: option miimon: invalid value (18446744071562067968) [ 788.153437][T23227] bond0: option miimon: allowed values 0 - 2147483647 [ 788.199460][T23227] bond0 (unregistering): Released all slaves [ 788.615712][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 788.616179][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'. [ 788.616229][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'. [ 788.655377][T23236] veth7: entered allmulticast mode [ 788.751817][T23236] bond0: (slave veth7): Enslaving as an active interface with an up link [ 789.108614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.149962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.824052][T23322] __nla_validate_parse: 5 callbacks suppressed [ 790.835181][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4094'. [ 790.905454][T23328] syzkaller1: entered promiscuous mode [ 790.911286][T23328] syzkaller1: entered allmulticast mode [ 790.919437][T23328] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 791.188567][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 791.735307][T23355] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.4103'. [ 791.899844][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4103'. [ 791.910633][T23367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4103'. [ 792.228686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.601960][T23384] netlink: 'syz.1.4111': attribute type 4 has an invalid length. [ 792.638723][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'. [ 792.638977][T23385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4112'. [ 792.783654][T23386] netlink: 564 bytes leftover after parsing attributes in process `syz.5.4110'. [ 792.943444][T23397] xt_hashlimit: size too large, truncated to 1048576 [ 793.268575][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.751187][ T7762] dvmrp0: left allmulticast mode [ 793.751328][ T7762] pimreg9: left allmulticast mode [ 793.786802][T23438] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 793.798091][ T7762] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 793.834590][ T7762] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 794.308574][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 794.472485][ T7762] batman_adv: batadv0: Removing interface: ip6gretap1 [ 794.521837][ T7762] batman_adv: batadv0: Removing interface: ip6gretap3 [ 794.627118][ T7762] bond27 (unregistering): (slave xfrm0): Releasing backup interface [ 794.715988][ T7762] bond29 (unregistering): (slave erspan1): Releasing active interface [ 794.877408][ T7762] bond11 (unregistering): (slave gretap1): Releasing active interface [ 795.203314][ T7762] bond0 (unregistering): Released all slaves [ 795.215236][ T7762] bond1 (unregistering): Released all slaves [ 795.241935][ T7762] bond2 (unregistering): Released all slaves [ 795.261168][ T7762] bond3 (unregistering): Released all slaves [ 795.285370][ T7762] bond4 (unregistering): Released all slaves [ 795.313255][ T7762] bond5 (unregistering): Released all slaves [ 795.334886][ T7762] bond6 (unregistering): Released all slaves [ 795.348617][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 795.365489][ T7762] bond7 (unregistering): Released all slaves [ 795.392374][ T7762] bond8 (unregistering): Released all slaves [ 795.416534][ T7762] bond9 (unregistering): Released all slaves [ 795.442113][ T7762] bond10 (unregistering): Released all slaves [ 795.467552][ T7762] bond11 (unregistering): Released all slaves [ 795.495255][ T7762] bond12 (unregistering): Released all slaves [ 795.517920][ T7762] bond13 (unregistering): Released all slaves [ 795.543737][ T7762] bond14 (unregistering): Released all slaves [ 795.572096][ T7762] bond15 (unregistering): Released all slaves [ 795.596067][ T7762] bond16 (unregistering): Released all slaves [ 795.620326][ T7762] bond17 (unregistering): Released all slaves [ 795.645613][ T7762] bond18 (unregistering): Released all slaves [ 795.673412][ T7762] bond19 (unregistering): Released all slaves [ 795.695135][ T7762] bond20 (unregistering): Released all slaves [ 795.716701][ T7762] bond21 (unregistering): Released all slaves [ 795.742013][ T7762] bond22 (unregistering): Released all slaves [ 795.767808][ T7762] bond23 (unregistering): Released all slaves [ 795.795457][ T7762] bond24 (unregistering): Released all slaves [ 795.819864][ T7762] bond25 (unregistering): Released all slaves [ 795.845454][ T7762] bond26 (unregistering): Released all slaves [ 795.874654][ T7762] bond27 (unregistering): Released all slaves [ 795.902846][ T7762] bond28 (unregistering): Released all slaves [ 795.928251][ T7762] bond29 (unregistering): Released all slaves [ 795.948059][T23402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.982292][ T7762] bond30 (unregistering): Released all slaves [ 796.033456][ T7762] bond31 (unregistering): Released all slaves [ 796.096903][T23438] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 796.133506][T23440] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 796.167353][T23440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 796.201740][T23414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4115'. [ 796.388563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 796.481815][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4125'. [ 796.501880][T23454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4127'. [ 796.904419][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 796.966086][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4131'. [ 797.049987][ T7762] tipc: Disabling bearer [ 797.056572][ T7762] tipc: Left network mode [ 797.428650][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.685975][ T7762] IPVS: stopping backup sync thread 8418 ... [ 798.148232][T23508] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 798.190965][T23499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4136'. [ 798.226662][T23507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4139'. [ 798.226775][T23507] netlink: 'syz.2.4139': attribute type 7 has an invalid length. [ 798.226955][T23507] netlink: 'syz.2.4139': attribute type 8 has an invalid length. [ 798.227136][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'. [ 798.306078][T23508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4139'. [ 798.415747][T23507] gretap0: entered promiscuous mode [ 798.469826][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 798.480170][T23507] gretap0: left promiscuous mode [ 798.967703][T23531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4142'. [ 799.189185][T23535] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 799.508586][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.751324][ T1692] block nbd5: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 90 seconds [ 799.763871][ T1692] block nbd5: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 90 seconds [ 799.763940][ T1692] block nbd5: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 90 seconds [ 799.763970][ T1692] block nbd5: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 90 seconds [ 800.137909][T23576] netlink: 'syz.2.4148': attribute type 1 has an invalid length. [ 800.213468][T23571] netlink: 'syz.1.4147': attribute type 2 has an invalid length. [ 800.493404][T23576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 800.521552][T23577] bond2: (slave veth0_to_bond): Releasing active interface [ 800.548584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 800.566480][T23577] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 800.616350][T23590] netlink: 'syz.3.4149': attribute type 1 has an invalid length. [ 800.715767][T23571] : entered promiscuous mode [ 801.085050][T23590] bond5: entered promiscuous mode [ 801.085453][T23590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.282089][T23600] vlan3: entered allmulticast mode [ 801.282519][T23600] syz_tun: entered allmulticast mode [ 801.376398][T23603] bond5: (slave bridge3): making interface the new active one [ 801.376438][T23603] bridge3: entered promiscuous mode [ 801.408916][T23603] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 801.588559][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 801.865906][ T7762] hsr_slave_0: left promiscuous mode [ 801.892076][ T7762] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 801.892813][ T7762] batman_adv: batadv0: Removing interface: ipvlan3 [ 802.118986][T23623] __nla_validate_parse: 1 callbacks suppressed [ 802.120110][T23623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4156'. [ 802.136217][ T7762] veth1_macvtap: left promiscuous mode [ 802.143977][ T7762] veth0_macvtap: left promiscuous mode [ 802.151028][ T7762] veth1_vlan: left promiscuous mode [ 802.151155][ T7762] veth0_vlan: left promiscuous mode [ 802.628621][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 803.205889][ T7762] team0 (unregistering): Port device vlan0 removed [ 803.668567][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 803.981891][T23625] tipc: Enabling of bearer rejected, failed to enable media [ 804.009858][T23635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4155'. [ 804.082490][T23659] netlink: 'syz.0.4159': attribute type 11 has an invalid length. [ 804.552350][ T7762] IPVS: stop unused estimator thread 0... [ 804.602659][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 804.602921][T23693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4160'. [ 804.603148][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 804.617794][T23693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4160'. [ 804.708722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 805.544181][T23728] FAULT_INJECTION: forcing a failure. [ 805.544181][T23728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.561679][T23728] CPU: 1 UID: 0 PID: 23728 Comm: syz.5.4169 Not tainted syzkaller #0 PREEMPT(full) [ 805.561705][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.561717][T23728] Call Trace: [ 805.561725][T23728] [ 805.561733][T23728] dump_stack_lvl+0xe8/0x150 [ 805.561769][T23728] should_fail_ex+0x410/0x560 [ 805.561804][T23728] _copy_from_user+0x2d/0xb0 [ 805.561827][T23728] do_sys_poll+0x258/0x1110 [ 805.561859][T23728] ? __lock_acquire+0x6df/0x2e50 [ 805.561884][T23728] ? __pfx_do_sys_poll+0x10/0x10 [ 805.561909][T23728] ? lock_acquire+0x115/0x350 [ 805.562025][T23728] ? __pfx_timespec64_add_safe+0x10/0x10 [ 805.562057][T23728] __x64_sys_poll+0x190/0x360 [ 805.562082][T23728] ? __pfx___x64_sys_poll+0x10/0x10 [ 805.562116][T23728] do_syscall_64+0x166/0x520 [ 805.562146][T23728] ? trace_irq_disable+0x3b/0x140 [ 805.562166][T23728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.562187][T23728] ? clear_bhb_loop+0x70/0xc0 [ 805.562212][T23728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.562233][T23728] RIP: 0033:0x7f3e3819e159 [ 805.562252][T23728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.562270][T23728] RSP: 002b:00007f3e363b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 805.562291][T23728] RAX: ffffffffffffffda RBX: 00007f3e38426180 RCX: 00007f3e3819e159 [ 805.562314][T23728] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 805.562329][T23728] RBP: 00007f3e363b4090 R08: 0000000000000000 R09: 0000000000000000 [ 805.562341][T23728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.562354][T23728] R13: 00007f3e38426218 R14: 00007f3e38426180 R15: 00007ffc69778468 [ 805.562385][T23728] [ 805.751744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 806.538313][T23755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4173'. [ 806.704105][T23761] netlink: 'syz.2.4174': attribute type 2 has an invalid length. [ 806.788766][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 807.313582][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.347548][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.351209][T23749] lo speed is unknown, defaulting to 1000 [ 807.364422][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.374599][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.383877][T23749] lo speed is unknown, defaulting to 1000 [ 807.391773][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.406378][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.446389][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.455017][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.456126][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.458138][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4176'. [ 807.829068][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.055271][T23787] bond5 (unregistering): Released all slaves [ 808.833261][T23812] FAULT_INJECTION: forcing a failure. [ 808.833261][T23812] name failslab, interval 1, probability 0, space 0, times 0 [ 808.834988][T23812] CPU: 0 UID: 0 PID: 23812 Comm: syz.2.4183 Not tainted syzkaller #0 PREEMPT(full) [ 808.835056][T23812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.835093][T23812] Call Trace: [ 808.835112][T23812] [ 808.835139][T23812] dump_stack_lvl+0xe8/0x150 [ 808.835225][T23812] should_fail_ex+0x410/0x560 [ 808.835317][T23812] should_failslab+0xa8/0x100 [ 808.835383][T23812] __kmalloc_noprof+0xfe/0x720 [ 808.835458][T23812] ? do_sys_poll+0x2c4/0x1110 [ 808.835521][T23812] ? do_sys_poll+0x2c4/0x1110 [ 808.835594][T23812] do_sys_poll+0x2c4/0x1110 [ 808.835669][T23812] ? __lock_acquire+0x6df/0x2e50 [ 808.835735][T23812] ? __pfx_do_sys_poll+0x10/0x10 [ 808.835810][T23812] ? lock_acquire+0x115/0x350 [ 808.836076][T23812] ? __pfx_timespec64_add_safe+0x10/0x10 [ 808.836160][T23812] __x64_sys_poll+0x190/0x360 [ 808.836246][T23812] ? __pfx___x64_sys_poll+0x10/0x10 [ 808.836339][T23812] do_syscall_64+0x166/0x520 [ 808.836424][T23812] ? trace_irq_disable+0x3b/0x140 [ 808.836506][T23812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.836562][T23812] ? clear_bhb_loop+0x70/0xc0 [ 808.836632][T23812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.836691][T23812] RIP: 0033:0x7f6e72b9e159 [ 808.836742][T23812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.836793][T23812] RSP: 002b:00007f6e73a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 808.836855][T23812] RAX: ffffffffffffffda RBX: 00007f6e72e26090 RCX: 00007f6e72b9e159 [ 808.836903][T23812] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 808.836944][T23812] RBP: 00007f6e73a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 808.836981][T23812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.837020][T23812] R13: 00007f6e72e26128 R14: 00007f6e72e26090 R15: 00007ffe018760c8 [ 808.837111][T23812] [ 808.869779][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 809.202479][T23819] netlink: Conntrack attr has 1 unknown bytes [ 809.209325][T23819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.908693][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.165552][T23852] netlink: NAT attribute has 1 unknown bytes [ 810.176123][T23852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.404739][T23863] netlink: 'syz.0.4198': attribute type 4 has an invalid length. [ 810.431947][T23866] team_slave_1: entered promiscuous mode [ 810.527239][T23862] C: renamed from veth1_to_team (while UP) [ 810.948724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 811.144948][T23885] FAULT_INJECTION: forcing a failure. [ 811.144948][T23885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.158333][T23885] CPU: 1 UID: 0 PID: 23885 Comm: syz.2.4202 Not tainted syzkaller #0 PREEMPT(full) [ 811.158362][T23885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.158379][T23885] Call Trace: [ 811.158388][T23885] [ 811.158398][T23885] dump_stack_lvl+0xe8/0x150 [ 811.158435][T23885] should_fail_ex+0x410/0x560 [ 811.158472][T23885] _copy_from_user+0x2d/0xb0 [ 811.158498][T23885] do_sys_poll+0x258/0x1110 [ 811.158532][T23885] ? __lock_acquire+0x6df/0x2e50 [ 811.158560][T23885] ? __pfx_do_sys_poll+0x10/0x10 [ 811.158587][T23885] ? lock_acquire+0x115/0x350 [ 811.158710][T23885] ? __pfx_timespec64_add_safe+0x10/0x10 [ 811.158753][T23885] __x64_sys_poll+0x190/0x360 [ 811.158781][T23885] ? __pfx___x64_sys_poll+0x10/0x10 [ 811.158818][T23885] do_syscall_64+0x166/0x520 [ 811.158849][T23885] ? trace_irq_disable+0x3b/0x140 [ 811.158870][T23885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.158893][T23885] ? clear_bhb_loop+0x70/0xc0 [ 811.158919][T23885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.158941][T23885] RIP: 0033:0x7f6e72b9e159 [ 811.158961][T23885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.158980][T23885] RSP: 002b:00007f6e73a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 811.159003][T23885] RAX: ffffffffffffffda RBX: 00007f6e72e26090 RCX: 00007f6e72b9e159 [ 811.159019][T23885] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 811.159034][T23885] RBP: 00007f6e73a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 811.159048][T23885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.159061][T23885] R13: 00007f6e72e26128 R14: 00007f6e72e26090 R15: 00007ffe018760c8 [ 811.159095][T23885] [ 811.894426][T23895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.988579][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.263302][T23918] bridge_slave_1: left allmulticast mode [ 812.269842][T23918] bridge_slave_1: left promiscuous mode [ 812.275977][T23918] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.288701][T23918] bridge_slave_0: left allmulticast mode [ 812.294548][T23918] bridge_slave_0: left promiscuous mode [ 812.294788][T23918] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.316833][T23920] netlink: 'syz.3.4214': attribute type 83 has an invalid length. [ 812.625292][T23930] __nla_validate_parse: 34 callbacks suppressed [ 812.628133][T23930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4218'. [ 812.951001][T23937] syz_tun: entered allmulticast mode [ 813.028577][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 813.177470][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 813.194962][T23943] netlink: 'syz.2.4225': attribute type 21 has an invalid length. [ 813.195384][T23943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4225'. [ 813.203745][T23944] FAULT_INJECTION: forcing a failure. [ 813.203745][T23944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.203775][T23944] CPU: 1 UID: 0 PID: 23944 Comm: syz.5.4223 Not tainted syzkaller #0 PREEMPT(full) [ 813.203799][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.203813][T23944] Call Trace: [ 813.203821][T23944] [ 813.203830][T23944] dump_stack_lvl+0xe8/0x150 [ 813.203865][T23944] should_fail_ex+0x410/0x560 [ 813.203903][T23944] _copy_to_user+0x31/0xb0 [ 813.203928][T23944] simple_read_from_buffer+0xe1/0x170 [ 813.203962][T23944] proc_fail_nth_read+0x1bb/0x230 [ 813.203992][T23944] ? common_file_perm+0x20e/0x2b0 [ 813.204029][T23944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.204064][T23944] ? rw_verify_area+0x24a/0x4c0 [ 813.204120][T23944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.204153][T23944] vfs_read+0x213/0xa80 [ 813.204190][T23944] ? __pfx___mutex_lock+0x10/0x10 [ 813.204229][T23944] ? __pfx_vfs_read+0x10/0x10 [ 813.204262][T23944] ? __fget_files+0x2a/0x420 [ 813.204297][T23944] ? __fget_files+0x3a2/0x420 [ 813.204326][T23944] ? __fget_files+0x2a/0x420 [ 813.204365][T23944] ksys_read+0x150/0x270 [ 813.204402][T23944] ? __pfx_ksys_read+0x10/0x10 [ 813.204448][T23944] do_syscall_64+0x166/0x520 [ 813.204480][T23944] ? trace_irq_disable+0x3b/0x140 [ 813.204502][T23944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.204526][T23944] ? clear_bhb_loop+0x70/0xc0 [ 813.204555][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.204578][T23944] RIP: 0033:0x7f3e3815e98e [ 813.204598][T23944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.204619][T23944] RSP: 002b:00007f3e363d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.204644][T23944] RAX: ffffffffffffffda RBX: 00007f3e363d56c0 RCX: 00007f3e3815e98e [ 813.204662][T23944] RDX: 000000000000000f RSI: 00007f3e363d50a0 RDI: 0000000000000004 [ 813.204678][T23944] RBP: 00007f3e363d5090 R08: 0000000000000000 R09: 0000000000000000 [ 813.204693][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.204707][T23944] R13: 00007f3e38426128 R14: 00007f3e38426090 R15: 00007ffc69778468 [ 813.204746][T23944] [ 813.828884][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 813.990743][T23966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4232'. [ 814.068718][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 814.148237][T23968] ip_tables: iptables: counters copy to user failed while replacing table [ 815.108790][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.428016][T24008] netlink: 'syz.3.4243': attribute type 4 has an invalid length. [ 815.479803][T24010] netlink: 'syz.3.4243': attribute type 4 has an invalid length. [ 815.805501][T24023] tipc: Resetting bearer [ 816.148906][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.158287][T24050] netlink: 'syz.3.4251': attribute type 1 has an invalid length. [ 817.188737][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.266345][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 817.356854][T24050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 817.369918][T24058] pim6reg1: entered promiscuous mode [ 817.370281][T24058] pim6reg1: entered allmulticast mode [ 817.603135][T24068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4256'. [ 817.774321][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4259'. [ 817.786573][T24075] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4259'. [ 817.810667][T24075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.825926][T24075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.840791][T24075] bond0 (unregistering): Released all slaves [ 817.873288][T24076] netlink: 'syz.1.4258': attribute type 3 has an invalid length. [ 817.874546][T24076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4258'. [ 817.941411][T24075] syzkaller1: entered promiscuous mode [ 817.947006][T24075] syzkaller1: entered allmulticast mode [ 818.228795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.449671][T24088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4261'. [ 818.650703][T24094] netlink: 170676 bytes leftover after parsing attributes in process `syz.5.4263'. [ 818.663926][T24094] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 818.673636][T24094] openvswitch: netlink: Message has 512 unknown bytes. [ 819.142186][T24101] dvmrp0: entered allmulticast mode [ 819.154795][T24101] dvmrp0: left allmulticast mode [ 819.154920][T24101] bond1: left allmulticast mode [ 819.154956][T24101] ip6gre1: left allmulticast mode [ 819.268660][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 819.723371][T24112] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4268'. [ 820.034623][T24114] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4270'. [ 820.231471][T24121] tipc: Enabling of bearer rejected, failed to enable media [ 820.308577][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.614515][T24126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4275'. [ 820.686528][T24128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'. [ 821.211712][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4282'. [ 821.211763][T24160] netlink: 'syz.0.4282': attribute type 26 has an invalid length. [ 821.212378][T24160] netlink: 'syz.0.4282': attribute type 26 has an invalid length. [ 821.348705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 821.845640][T24174] syzkaller0: entered promiscuous mode [ 821.851538][T24174] syzkaller0: entered allmulticast mode [ 822.398221][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.429582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 824.468632][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.347085][T24167] tipc: Started in network mode [ 825.352999][T24167] tipc: Node identity ac1414aa, cluster identity 4711 [ 825.361190][T24167] tipc: New replicast peer: 172.20.20.187 [ 825.367527][T24167] tipc: Enabled bearer , priority 26 [ 825.374773][T24199] netlink: 'syz.5.4292': attribute type 2 has an invalid length. [ 825.508586][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.627541][T24212] __nla_validate_parse: 5 callbacks suppressed [ 825.634253][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 825.644420][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 825.658055][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 825.667347][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 825.678039][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 825.687597][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 826.482797][ T25] tipc: Node number set to 2886997162 [ 826.548549][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 827.033802][T24261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4307'. [ 827.481068][T24270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4310'. [ 827.503141][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'. [ 827.588839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.020654][T24286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4315'. [ 828.628579][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.671605][T24319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.686598][T24323] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 828.754212][T24323] bond7: (slave geneve2): making interface the new active one [ 828.772113][T24323] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 828.806101][T24323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 828.818559][ T7768] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.818617][ T7768] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.818669][ T7768] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.818708][ T7768] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 829.003316][T24296] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 829.527974][T24346] netlink: 'syz.1.4332': attribute type 1 has an invalid length. [ 829.616524][T24346] 8021q: adding VLAN 0 to HW filter on device bond11 [ 829.669310][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 830.018497][ T1692] block nbd5: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 120 seconds [ 830.018559][ T1692] block nbd5: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 120 seconds [ 830.018604][ T1692] block nbd5: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 120 seconds [ 830.019589][ T1692] block nbd5: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 120 seconds [ 830.391236][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 830.708620][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 831.201575][T24386] team_slave_1: left promiscuous mode [ 831.225587][T24386] macvlan0: left promiscuous mode [ 831.404803][T24398] __nla_validate_parse: 3 callbacks suppressed [ 831.413807][T24398] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4343'. [ 831.466173][T24386] ip6erspan0: left allmulticast mode [ 831.499264][T24404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4341'. [ 831.539983][ T7775] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.540527][ T7775] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.540638][ T7775] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.540745][ T7775] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.600629][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 831.601100][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4343'. [ 831.666821][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 831.733151][T24397] team0: Port device team_slave_0 removed [ 831.749036][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 831.778591][T24403] syzkaller1: entered promiscuous mode [ 831.785508][T24403] syzkaller1: entered allmulticast mode [ 831.880103][T24398] syzkaller1: left promiscuous mode [ 831.880145][T24398] syzkaller1: left allmulticast mode [ 832.059285][T24419] sctp: [Deprecated]: syz.0.4348 (pid 24419) Use of int in maxseg socket option. [ 832.059285][T24419] Use struct sctp_assoc_value instead [ 832.160688][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4349'. [ 832.306414][T24425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4351'. [ 832.596842][T24430] tc action pedit offset must be on 32 bit boundaries [ 832.788727][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 833.828741][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 834.190262][T24458] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4360'. [ 834.190359][T24458] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4360'. [ 834.600747][T24472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4364'. [ 834.773881][T24474] syz_tun (unregistering): left allmulticast mode [ 834.868587][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 834.969400][T24479] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 835.066511][T24481] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 835.143615][T24486] tipc: Enabling of bearer rejected, already enabled [ 835.405485][T24488] bond8: option ad_select: invalid value (34) [ 835.442497][T24488] bond8 (unregistering): Released all slaves [ 835.512556][T24495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.908613][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.569149][T24525] __nla_validate_parse: 5 callbacks suppressed [ 836.576120][T24525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4379'. [ 836.948535][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 837.988605][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 838.871700][T24514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.028556][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 839.375076][T24541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.948957][T24561] netlink: 'syz.3.4386': attribute type 1 has an invalid length. [ 840.056635][T24570] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4388'. [ 840.056679][T24570] netlink: 'syz.0.4388': attribute type 1 has an invalid length. [ 840.068547][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 840.092085][T24561] bond8: entered promiscuous mode [ 840.102565][T24561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 840.130001][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4386'. [ 840.212832][T24572] bond8 (unregistering): Released all slaves [ 841.108566][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.148567][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.364299][T24597] lo speed is unknown, defaulting to 1000 [ 842.378984][T24597] lo speed is unknown, defaulting to 1000 [ 842.498810][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 842.560899][T24629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4406'. [ 843.188674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.260722][T24603] lo speed is unknown, defaulting to 1000 [ 843.269746][T24603] lo speed is unknown, defaulting to 1000 [ 843.888249][T24662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.183464][T24669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4417'. [ 844.194993][T24669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4417'. [ 844.228590][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.274373][T24671] netlink: 'syz.2.4417': attribute type 2 has an invalid length. [ 844.320585][T24671] D†'|o: entered promiscuous mode [ 844.798216][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4420'. [ 844.843324][T24685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.854928][T24685] netlink: 'syz.2.4422': attribute type 1 has an invalid length. [ 845.024493][T24700] netlink: 'syz.2.4422': attribute type 1 has an invalid length. [ 845.095483][T24685] bond0: entered promiscuous mode [ 845.100873][T24685] bond0: entered allmulticast mode [ 845.106456][T24685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.268695][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 845.290113][T24709] netlink: 'syz.1.4423': attribute type 16 has an invalid length. [ 845.290152][T24709] netlink: 'syz.1.4423': attribute type 17 has an invalid length. [ 845.543767][T24709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.552896][T24709] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.567965][T24709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.807514][T24709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.878785][T24709] veth1_vlan: left promiscuous mode [ 845.890296][T24709] v: left promiscuous mode [ 845.912433][T24709] v: entered promiscuous mode [ 845.932039][T24709] veth1_vlan: entered promiscuous mode [ 845.966287][T24709] veth1_macvtap: left promiscuous mode [ 845.977762][T24709] veth0_macvtap: left promiscuous mode [ 845.987857][T24709] veth0_macvtap: entered promiscuous mode [ 846.006514][T24709] veth1_macvtap: entered promiscuous mode [ 846.069139][T24709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.086064][T24709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.098165][T24709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.118661][T24709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.132462][T24709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.146685][T24709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.154958][T24709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.163532][T24709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 846.206801][T24709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 846.221255][T24709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 846.240741][T24709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.253032][T24709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 846.275459][T24709] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 846.276683][ T25] lo speed is unknown, defaulting to 1000 [ 846.276724][ T25] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 846.311619][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 846.457251][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.457369][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.487678][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.487811][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.609419][ T7750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.618983][ T7750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.630057][T24621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.630181][T24621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.052215][T24741] veth1_to_bond: entered allmulticast mode [ 847.073641][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 847.153530][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 847.153926][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 847.154347][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 847.154385][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 847.205709][T24742] veth1_to_bond: left allmulticast mode [ 847.337919][T24744] netlink: 'syz.0.4432': attribute type 1 has an invalid length. [ 847.348699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 847.471566][T24762] block nbd1: Unsupported socket: should be TCP or UNIX. [ 847.534206][T24744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 847.575236][T24752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.612695][T24752] bond1: (slave bond0): making interface the new active one [ 847.653924][T24752] bond1: (slave bond0): Enslaving as an active interface with an up link [ 847.662774][T24762] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 847.662836][T24762] pim6reg0: persist enabled [ 848.196903][T24780] bridge0: port 4(veth1_to_bridge) entered blocking state [ 848.198312][T24780] bridge0: port 4(veth1_to_bridge) entered disabled state [ 848.204542][T24780] veth1_to_bridge: entered allmulticast mode [ 848.225068][T24780] veth1_to_bridge: entered promiscuous mode [ 848.389334][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.429283][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 850.470359][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.508588][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.549709][T24799] batman_adv: batadv0: Adding interface: gretap2 [ 851.549998][T24799] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 851.583733][T24799] batman_adv: batadv0: Interface activated: gretap2 [ 851.655821][T24816] kthread_run failed with err -4 [ 851.782683][T24787] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 851.783160][T24787] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 851.783273][T24787] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 852.044318][T24787] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 852.175439][T24826] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 852.548654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 852.562807][T24846] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 852.839585][T24849] __nla_validate_parse: 5 callbacks suppressed [ 852.839628][T24849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4454'. [ 852.952500][T24848] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4454'. [ 853.091188][T24855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4457'. [ 853.232179][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4459'. [ 853.437124][T24869] FAULT_INJECTION: forcing a failure. [ 853.437124][T24869] name failslab, interval 1, probability 0, space 0, times 0 [ 853.452105][T24869] CPU: 1 UID: 0 PID: 24869 Comm: syz.2.4461 Not tainted syzkaller #0 PREEMPT(full) [ 853.452136][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.452151][T24869] Call Trace: [ 853.452161][T24869] [ 853.452172][T24869] dump_stack_lvl+0xe8/0x150 [ 853.452214][T24869] should_fail_ex+0x410/0x560 [ 853.452257][T24869] should_failslab+0xa8/0x100 [ 853.452289][T24869] __kmalloc_cache_node_noprof+0xaa/0x620 [ 853.452328][T24869] ? __get_vm_area_node+0x155/0x2f0 [ 853.452390][T24869] ? __get_vm_area_node+0x155/0x2f0 [ 853.452428][T24869] __get_vm_area_node+0x155/0x2f0 [ 853.452468][T24869] __vmalloc_node_range_noprof+0x343/0x1540 [ 853.452501][T24869] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 853.452536][T24869] ? __lock_acquire+0x6df/0x2e50 [ 853.452585][T24869] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 853.452627][T24869] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 853.452650][T24869] __vmalloc_noprof+0xd2/0x120 [ 853.452680][T24869] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 853.452708][T24869] bpf_prog_alloc_no_stats+0x47/0x560 [ 853.452732][T24869] ? bpf_prog_alloc+0x2a/0x1a0 [ 853.452759][T24869] bpf_prog_alloc+0x3c/0x1a0 [ 853.452787][T24869] bpf_prog_load+0x7f8/0x1c20 [ 853.452825][T24869] ? __pfx_bpf_prog_load+0x10/0x10 [ 853.452877][T24869] __sys_bpf+0xd0d/0xd90 [ 853.452909][T24869] ? __pfx___sys_bpf+0x10/0x10 [ 853.452945][T24869] ? __fget_files+0x2a/0x420 [ 853.452993][T24869] ? ksys_write+0x242/0x270 [ 853.453027][T24869] ? __pfx_ksys_write+0x10/0x10 [ 853.453073][T24869] __x64_sys_bpf+0xba/0xd0 [ 853.453096][T24869] do_syscall_64+0x166/0x520 [ 853.453129][T24869] ? trace_irq_disable+0x3b/0x140 [ 853.453149][T24869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.453171][T24869] ? clear_bhb_loop+0x70/0xc0 [ 853.453207][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.453228][T24869] RIP: 0033:0x7f6e72b9e159 [ 853.453246][T24869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.453263][T24869] RSP: 002b:00007f6e73ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 853.453285][T24869] RAX: ffffffffffffffda RBX: 00007f6e72e25fa0 RCX: 00007f6e72b9e159 [ 853.453299][T24869] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 853.453312][T24869] RBP: 00007f6e73ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 853.453325][T24869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.453337][T24869] R13: 00007f6e72e26038 R14: 00007f6e72e25fa0 R15: 00007ffe018760c8 [ 853.453367][T24869] [ 853.549748][T24869] syz.2.4461: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 853.549836][T24869] CPU: 1 UID: 0 PID: 24869 Comm: syz.2.4461 Not tainted syzkaller #0 PREEMPT(full) [ 853.549861][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.549874][T24869] Call Trace: [ 853.549883][T24869] [ 853.549892][T24869] dump_stack_lvl+0xe8/0x150 [ 853.549929][T24869] warn_alloc+0x24d/0x270 [ 853.549961][T24869] ? __kasan_kmalloc+0x22/0xb0 [ 853.550010][T24869] ? __pfx_warn_alloc+0x10/0x10 [ 853.550044][T24869] ? __get_vm_area_node+0x155/0x2f0 [ 853.550083][T24869] ? __get_vm_area_node+0x2a9/0x2f0 [ 853.550123][T24869] __vmalloc_node_range_noprof+0x36b/0x1540 [ 853.550158][T24869] ? __lock_acquire+0x6df/0x2e50 [ 853.550209][T24869] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 853.550253][T24869] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 853.550280][T24869] __vmalloc_noprof+0xd2/0x120 [ 853.550312][T24869] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 853.550342][T24869] bpf_prog_alloc_no_stats+0x47/0x560 [ 853.550367][T24869] ? bpf_prog_alloc+0x2a/0x1a0 [ 853.550395][T24869] bpf_prog_alloc+0x3c/0x1a0 [ 853.550424][T24869] bpf_prog_load+0x7f8/0x1c20 [ 853.550465][T24869] ? __pfx_bpf_prog_load+0x10/0x10 [ 853.550525][T24869] __sys_bpf+0xd0d/0xd90 [ 853.550561][T24869] ? __pfx___sys_bpf+0x10/0x10 [ 853.550598][T24869] ? __fget_files+0x2a/0x420 [ 853.550649][T24869] ? ksys_write+0x242/0x270 [ 853.550686][T24869] ? __pfx_ksys_write+0x10/0x10 [ 853.550724][T24869] __x64_sys_bpf+0xba/0xd0 [ 853.550751][T24869] do_syscall_64+0x166/0x520 [ 853.550786][T24869] ? trace_irq_disable+0x3b/0x140 [ 853.550808][T24869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.550833][T24869] ? clear_bhb_loop+0x70/0xc0 [ 853.550862][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.550886][T24869] RIP: 0033:0x7f6e72b9e159 [ 853.550908][T24869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.550928][T24869] RSP: 002b:00007f6e73ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 853.550952][T24869] RAX: ffffffffffffffda RBX: 00007f6e72e25fa0 RCX: 00007f6e72b9e159 [ 853.550970][T24869] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 853.550985][T24869] RBP: 00007f6e73ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 853.551001][T24869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.551015][T24869] R13: 00007f6e72e26038 R14: 00007f6e72e25fa0 R15: 00007ffe018760c8 [ 853.551052][T24869] [ 853.551067][T24869] Mem-Info: [ 853.551089][T24869] active_anon:6125 inactive_anon:0 isolated_anon:0 [ 853.551089][T24869] active_file:183 inactive_file:40489 isolated_file:0 [ 853.551089][T24869] unevictable:0 dirty:161 writeback:0 [ 853.551089][T24869] slab_reclaimable:7702 slab_unreclaimable:117843 [ 853.551089][T24869] mapped:29609 shmem:529 pagetables:3659 [ 853.551089][T24869] sec_pagetables:0 bounce:0 [ 853.551089][T24869] kernel_misc_reclaimable:0 [ 853.551089][T24869] free:1262940 free_pcp:19086 free_cma:0 [ 853.551171][T24869] Node 0 active_anon:24500kB inactive_anon:0kB active_file:724kB inactive_file:161816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118436kB dirty:644kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15548kB pagetables:9956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 853.591988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 854.058581][T24869] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 854.058654][T24869] Node 0 DMA free:15228kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 854.058713][T24869] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 854.058750][T24869] Node 0 DMA32 free:1131208kB boost:26624kB min:60764kB low:69296kB high:77828kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24512kB inactive_anon:0kB active_file:724kB inactive_file:161812kB unevictable:0kB writepending:664kB zspages:0kB present:3129332kB managed:2546700kB mlocked:0kB bounce:0kB free_pcp:41868kB local_pcp:21096kB free_cma:0kB [ 854.058810][T24869] lowmem_reserve[]: 0 0 0 0 0 [ 854.058844][T24869] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 854.058898][T24869] lowmem_reserve[]: 0 0 0 0 0 [ 854.058933][T24869] Node 1 Normal free:3905388kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:140kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:34568kB local_pcp:8992kB free_cma:0kB [ 854.058991][T24869] lowmem_reserve[]: 0 0 0 0 0 [ 854.059025][T24869] Node 0 DMA: 3*4kB (UM) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (U) 2*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 3*4096kB (UM) = 15228kB [ 854.059175][T24869] Node 0 DMA32: 2520*4kB (UME) 1245*8kB (UME) 788*16kB (UME) 550*32kB (UME) 362*64kB (UME) 146*128kB (UME) 51*256kB (UME) 92*512kB (UME) 42*1024kB (UM) 17*2048kB (UM) 220*4096kB (U) = 1131208kB [ 854.059333][T24869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 854.059431][T24869] Node 1 Normal: 283*4kB (UM) 278*8kB (UM) 305*16kB (UM) 282*32kB (UM) 264*64kB (UM) 240*128kB (UM) 228*256kB (UM) 203*512kB (UM) 162*1024kB (UM) 5*2048kB (UM) 855*4096kB (UM) = 3905388kB [ 854.203262][T24869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.203321][T24869] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 854.203390][T24869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.203431][T24869] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 854.203483][T24869] 41194 total pagecache pages [ 854.203513][T24869] 0 pages in swap cache [ 854.203535][T24869] Free swap = 124996kB [ 854.203557][T24869] Total swap = 124996kB [ 854.203585][T24869] 2097051 pages RAM [ 854.203606][T24869] 0 pages HighMem/MovableOnly [ 854.203628][T24869] 428760 pages reserved [ 854.203655][T24869] 0 pages cma reserved [ 854.628557][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 854.936211][T24875] syzkaller0: entered promiscuous mode [ 854.936255][T24875] syzkaller0: entered allmulticast mode [ 855.253343][T24888] netlink: 'syz.5.4465': attribute type 1 has an invalid length. [ 855.541419][T24884] veth5: entered allmulticast mode [ 855.653960][T24893] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 855.668654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 855.726719][T24888] macvlan0: entered promiscuous mode [ 855.733566][T24888] macvlan0: entered allmulticast mode [ 855.743778][T24888] bond10: entered promiscuous mode [ 855.778686][T24888] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 855.792459][T24888] bond10: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 855.825259][T24888] bond10: left promiscuous mode [ 855.944708][T24863] lo speed is unknown, defaulting to 1000 [ 855.951055][T24902] netlink: 'syz.1.4467': attribute type 3 has an invalid length. [ 856.084800][T24863] lo speed is unknown, defaulting to 1000 [ 856.093953][T24910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 856.104086][T24910] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4469'. [ 856.268997][T24917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4468'. [ 856.381701][T24864] lo speed is unknown, defaulting to 1000 [ 856.433536][T24864] lo speed is unknown, defaulting to 1000 [ 856.708737][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 856.768316][T24923] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4471'. [ 856.791544][T24921] can: request_module (can-proto-0) failed. [ 857.184129][T24939] FAULT_INJECTION: forcing a failure. [ 857.184129][T24939] name failslab, interval 1, probability 0, space 0, times 0 [ 857.197077][T24939] CPU: 1 UID: 0 PID: 24939 Comm: syz.3.4473 Not tainted syzkaller #0 PREEMPT(full) [ 857.197104][T24939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.197118][T24939] Call Trace: [ 857.197126][T24939] [ 857.197136][T24939] dump_stack_lvl+0xe8/0x150 [ 857.197171][T24939] should_fail_ex+0x410/0x560 [ 857.197207][T24939] ? alloc_vmap_area+0x21c/0x1420 [ 857.197234][T24939] should_failslab+0xa8/0x100 [ 857.197259][T24939] ? alloc_vmap_area+0x21c/0x1420 [ 857.197284][T24939] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 857.197318][T24939] ? alloc_vmap_area+0x21c/0x1420 [ 857.197351][T24939] alloc_vmap_area+0x21c/0x1420 [ 857.197392][T24939] ? __pfx_alloc_vmap_area+0x10/0x10 [ 857.197417][T24939] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 857.197450][T24939] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 857.197481][T24939] ? __get_vm_area_node+0x155/0x2f0 [ 857.197513][T24939] __get_vm_area_node+0x200/0x2f0 [ 857.197571][T24939] __vmalloc_node_range_noprof+0x343/0x1540 [ 857.197603][T24939] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 857.197628][T24939] ? __lock_acquire+0x6df/0x2e50 [ 857.197686][T24939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 857.197724][T24939] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 857.197746][T24939] __vmalloc_noprof+0xd2/0x120 [ 857.197774][T24939] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 857.197800][T24939] bpf_prog_alloc_no_stats+0x47/0x560 [ 857.197821][T24939] ? bpf_prog_alloc+0x2a/0x1a0 [ 857.197846][T24939] bpf_prog_alloc+0x3c/0x1a0 [ 857.197871][T24939] bpf_prog_load+0x7f8/0x1c20 [ 857.197905][T24939] ? __pfx_bpf_prog_load+0x10/0x10 [ 857.197950][T24939] __sys_bpf+0xd0d/0xd90 [ 857.197981][T24939] ? __pfx___sys_bpf+0x10/0x10 [ 857.198013][T24939] ? __fget_files+0x2a/0x420 [ 857.198055][T24939] ? ksys_write+0x242/0x270 [ 857.198088][T24939] ? __pfx_ksys_write+0x10/0x10 [ 857.198121][T24939] __x64_sys_bpf+0xba/0xd0 [ 857.198160][T24939] do_syscall_64+0x166/0x520 [ 857.198191][T24939] ? trace_irq_disable+0x3b/0x140 [ 857.198212][T24939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.198233][T24939] ? clear_bhb_loop+0x70/0xc0 [ 857.198260][T24939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.198281][T24939] RIP: 0033:0x7f622379e159 [ 857.198301][T24939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.198320][T24939] RSP: 002b:00007f62245fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.198343][T24939] RAX: ffffffffffffffda RBX: 00007f6223a25fa0 RCX: 00007f622379e159 [ 857.198358][T24939] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 857.198372][T24939] RBP: 00007f62245fe090 R08: 0000000000000000 R09: 0000000000000000 [ 857.198386][T24939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.198398][T24939] R13: 00007f6223a26038 R14: 00007f6223a25fa0 R15: 00007ffd91946f18 [ 857.198429][T24939] [ 857.748542][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 857.994006][T24949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4477'. [ 858.052532][T24949] vlan0: entered promiscuous mode [ 858.058941][T24949] bridge0: entered promiscuous mode [ 858.489847][T24960] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.788688][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 858.815419][T24965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4480'. [ 858.835480][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 858.851151][T24960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.851678][T24960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.897905][T24968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4480'. [ 858.908243][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 858.937196][T24960] veth1_vlan: left promiscuous mode [ 858.946645][T24960] veth0_vlan: left promiscuous mode [ 858.955218][T24960] veth0_vlan: entered promiscuous mode [ 858.964313][T24960] veth1_vlan: entered promiscuous mode [ 858.981291][T24960] veth1_macvtap: left promiscuous mode [ 858.991444][T24960] veth0_macvtap: left promiscuous mode [ 859.001742][T24960] veth0_macvtap: entered promiscuous mode [ 859.013193][T24960] veth1_macvtap: entered promiscuous mode [ 859.033219][T24960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.043145][T24960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.053886][T24960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.064469][T24960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.155891][T24960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 859.178043][T24960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 859.229423][T24960] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 859.275178][T24621] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.275297][T24621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.297002][T24621] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.297149][T24621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.648208][T24978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4483'. [ 859.685328][T24621] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.685812][T24621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.700942][ T7750] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.701066][ T7750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.742835][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 859.821048][T24621] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.821585][T24621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.826473][T24621] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.826541][T24621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.830096][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 860.231942][T24993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4488'. [ 860.232570][T24993] netlink: 'syz.0.4488': attribute type 1 has an invalid length. [ 860.232619][T24993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4488'. [ 860.550803][ T1692] block nbd5: Possible stuck request ffff888028087000: control (read@0,1024B). Runtime 150 seconds [ 860.550865][ T1692] block nbd5: Possible stuck request ffff8880280871c0: control (read@1024,1024B). Runtime 150 seconds [ 860.550910][ T1692] block nbd5: Possible stuck request ffff888028087380: control (read@2048,1024B). Runtime 150 seconds [ 860.550941][ T1692] block nbd5: Possible stuck request ffff888028087540: control (read@3072,1024B). Runtime 150 seconds [ 860.868560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 861.034754][T25007] xt_hashlimit: size too large, truncated to 1048576 [ 861.863322][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4495'. [ 861.908519][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 862.073279][T24621] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.074576][T24621] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.074640][T24621] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.074679][T24621] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.948722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 863.221935][T25059] tc_dump_action: action bad kind [ 863.746988][T25091] netlink: Only one type of NAT may be specified [ 863.747034][T25091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.988678][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 864.534444][T25101] __nla_validate_parse: 7 callbacks suppressed [ 864.534496][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4507'. [ 864.544357][T25101] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4507'. [ 864.815074][T25080] ip6gre1: entered allmulticast mode [ 864.864282][T24621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.882757][T24621] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.882804][T24621] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 864.882883][T24621] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.883004][T24621] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 864.883053][T24621] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.883086][T24621] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 864.883118][T24621] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.883150][T24621] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 864.883194][T24621] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.883244][T24621] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 864.883278][T24621] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.883311][T24621] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 864.883363][T24621] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.883397][T24621] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 864.883430][T24621] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.926732][T24621] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 865.037958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 865.594669][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'. [ 865.630371][T25117] netlink: 'syz.5.4512': attribute type 1 has an invalid length. [ 865.630409][T25117] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4512'. [ 865.683835][T25113] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 866.068705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.101479][T25127] 8021q: adding VLAN 0 to HW filter on device bond11 [ 866.338136][T25137] tipc: Started in network mode [ 866.340087][T25137] tipc: Node identity f6d1c3656afa, cluster identity 4711 [ 866.343103][T25137] tipc: Enabled bearer , priority 0 [ 866.344977][T25137] syzkaller0: entered promiscuous mode [ 866.345166][T25137] syzkaller0: entered allmulticast mode [ 866.523044][T25137] tipc: Resetting bearer [ 866.632339][T25123] netlink: 495 bytes leftover after parsing attributes in process `syz.1.4513'. [ 866.680432][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 866.778884][T25137] tipc: Disabling bearer [ 866.973366][T25159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4519'. [ 867.036393][T25162] FAULT_INJECTION: forcing a failure. [ 867.036393][T25162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.042379][T25162] CPU: 0 UID: 0 PID: 25162 Comm: syz.0.4520 Not tainted syzkaller #0 PREEMPT(full) [ 867.042447][T25162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.042479][T25162] Call Trace: [ 867.042507][T25162] [ 867.042521][T25162] dump_stack_lvl+0xe8/0x150 [ 867.042613][T25162] should_fail_ex+0x410/0x560 [ 867.042713][T25162] _copy_from_user+0x2d/0xb0 [ 867.042783][T25162] copy_from_bpfptr+0x5c/0x90 [ 867.042885][T25162] bpf_prog_load+0xcdb/0x1c20 [ 867.042996][T25162] ? __pfx_bpf_prog_load+0x10/0x10 [ 867.043124][T25162] __sys_bpf+0xd0d/0xd90 [ 867.043204][T25162] ? __pfx___sys_bpf+0x10/0x10 [ 867.043293][T25162] ? __fget_files+0x2a/0x420 [ 867.043412][T25162] ? ksys_write+0x242/0x270 [ 867.043490][T25162] ? __pfx_ksys_write+0x10/0x10 [ 867.043603][T25162] __x64_sys_bpf+0xba/0xd0 [ 867.043680][T25162] do_syscall_64+0x166/0x520 [ 867.043762][T25162] ? trace_irq_disable+0x3b/0x140 [ 867.043821][T25162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.043872][T25162] ? clear_bhb_loop+0x70/0xc0 [ 867.043942][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.044001][T25162] RIP: 0033:0x7f3b0bd9e159 [ 867.044055][T25162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.044108][T25162] RSP: 002b:00007f3b0cd0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.044173][T25162] RAX: ffffffffffffffda RBX: 00007f3b0c025fa0 RCX: 00007f3b0bd9e159 [ 867.044210][T25162] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 867.044248][T25162] RBP: 00007f3b0cd0d090 R08: 0000000000000000 R09: 0000000000000000 [ 867.044277][T25162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.044314][T25162] R13: 00007f3b0c026038 R14: 00007f3b0c025fa0 R15: 00007ffe653b2968 [ 867.044390][T25162] [ 867.111263][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 868.148615][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 868.283614][T25198] netlink: 'syz.1.4533': attribute type 12 has an invalid length. [ 868.401166][T25191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 868.451530][T25195] FAULT_INJECTION: forcing a failure. [ 868.451530][T25195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.451755][T25195] CPU: 0 UID: 0 PID: 25195 Comm: syz.5.4531 Not tainted syzkaller #0 PREEMPT(full) [ 868.451778][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.451790][T25195] Call Trace: [ 868.451798][T25195] [ 868.451806][T25195] dump_stack_lvl+0xe8/0x150 [ 868.451867][T25195] should_fail_ex+0x410/0x560 [ 868.451987][T25195] strncpy_from_user+0x36/0x2c0 [ 868.452068][T25195] bpf_prog_load+0xdef/0x1c20 [ 868.452151][T25195] ? __pfx_bpf_prog_load+0x10/0x10 [ 868.452279][T25195] __sys_bpf+0xd0d/0xd90 [ 868.452359][T25195] ? __pfx___sys_bpf+0x10/0x10 [ 868.452445][T25195] ? __fget_files+0x2a/0x420 [ 868.452551][T25195] ? ksys_write+0x242/0x270 [ 868.452629][T25195] ? __pfx_ksys_write+0x10/0x10 [ 868.452715][T25195] __x64_sys_bpf+0xba/0xd0 [ 868.452773][T25195] do_syscall_64+0x166/0x520 [ 868.452866][T25195] ? trace_irq_disable+0x3b/0x140 [ 868.452921][T25195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.452969][T25195] ? clear_bhb_loop+0x70/0xc0 [ 868.453040][T25195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.453085][T25195] RIP: 0033:0x7f3e3819e159 [ 868.453126][T25195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.453146][T25195] RSP: 002b:00007f3e363f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 868.453192][T25195] RAX: ffffffffffffffda RBX: 00007f3e38425fa0 RCX: 00007f3e3819e159 [ 868.453228][T25195] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 868.453256][T25195] RBP: 00007f3e363f6090 R08: 0000000000000000 R09: 0000000000000000 [ 868.453293][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.453326][T25195] R13: 00007f3e38426038 R14: 00007f3e38425fa0 R15: 00007ffc69778468 [ 868.453404][T25195] [ 868.791272][T25199] syzkaller1: renamed from bond0 (while UP) [ 868.843851][T25203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'. [ 868.948758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 868.983729][T25200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4532'. [ 869.188583][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 869.890589][T25217] IPVS: Scheduler module ip_vs_sip not found [ 870.229390][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 870.436943][T25248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4540'. [ 870.716924][T25258] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4540'. [ 871.268612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 871.664336][T25283] netlink: 'syz.1.4546': attribute type 2 has an invalid length. [ 871.709135][T25277] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.722284][T25277] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.104317][T25277] bond0: left promiscuous mode [ 872.308538][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 872.373445][T25282] netlink: Unknown NAT attribute (type=12400, max=9) [ 872.373499][T25282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.679690][T25308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4549'. [ 872.696156][ T7056] bridge0: entered promiscuous mode [ 872.833630][T25313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4549'. [ 873.140648][T25327] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4551'. [ 873.141205][T25327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4551'. [ 873.215500][T25320] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 873.329615][T25320] bond12 (unregistering): Released all slaves [ 873.350651][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 873.434148][T25308] 8021q: adding VLAN 0 to HW filter on device bond12 [ 873.456663][T25308] team0: Port device bond12 added [ 873.464478][T25327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4551'. [ 873.867973][T25359] syzkaller0: entered promiscuous mode [ 873.874947][T25359] syzkaller0: entered allmulticast mode [ 873.893021][T25359] tipc: Enabling of bearer rejected, failed to enable media [ 874.081385][T25368] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 874.321618][T25376] netlink: Failed to add %pK helper -22 [ 874.321691][T25376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.341585][T25367] netlink: Failed to add %pK helper -22 [ 874.348058][T25367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.388579][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 874.721246][T25387] netlink: 'syz.5.4564': attribute type 15 has an invalid length. [ 875.177847][T25403] netlink: 'syz.1.4566': attribute type 1 has an invalid length. [ 875.270520][T25387] syzkaller0: entered promiscuous mode [ 875.271267][T25387] syzkaller0: entered allmulticast mode [ 875.361611][T25409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4566'. [ 875.381321][T25408] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4565'. [ 875.396022][T25397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4565'. [ 875.428600][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 875.629788][T25405] bond13: (slave veth7): Enslaving as an active interface with a down link [ 875.695187][T25407] bond13: (slave veth9): Enslaving as an active interface with a down link [ 875.770712][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'. [ 876.337643][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4571'. [ 876.351572][T25427] sctp: [Deprecated]: syz.3.4571 (pid 25427) Use of int in max_burst socket option. [ 876.351572][T25427] Use struct sctp_assoc_value instead [ 876.475415][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.511055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.544923][T25433] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4573'. [ 877.830536][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 878.549909][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 878.736086][T25409] 8021q: adding VLAN 0 to HW filter on device bond13 [ 879.588637][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 879.639865][T25462] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.880861][T25462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 879.892847][T25462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.906604][T25462] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 879.920663][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4583'. [ 879.973753][T25462] veth1_vlan: left promiscuous mode [ 879.984811][T25462] veth0_vlan: left promiscuous mode [ 880.013630][T25462] veth0_vlan: entered promiscuous mode [ 880.034118][T25484] sctp: [Deprecated]: syz.1.4585 (pid 25484) Use of int in maxseg socket option. [ 880.034118][T25484] Use struct sctp_assoc_value instead [ 880.051752][T25462] veth1_vlan: entered promiscuous mode [ 880.306519][T25462] veth1_macvtap: left promiscuous mode [ 880.320870][T25462] veth0_macvtap: left promiscuous mode [ 880.333178][T25462] veth0_macvtap: entered promiscuous mode [ 880.351548][T25462] veth1_macvtap: entered promiscuous mode [ 880.430420][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.444053][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 880.469367][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 880.481522][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 880.514724][T25462] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 880.546562][ T31] bridge0: port 3(vlan0) entered blocking state [ 880.546747][ T31] bridge0: port 3(vlan0) entered forwarding state [ 880.578126][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.579318][ T7768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.613098][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.613234][ T7768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.628504][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.629787][ T7768] bridge0: port 4(veth1_to_bridge) entered blocking state [ 880.629904][ T7768] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 880.892349][T25488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4586'. [ 880.903626][T25490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4586'. [ 880.976844][ T7768] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.977263][ T7768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.979307][ T7768] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.979378][ T7768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.981284][ T7768] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.981413][ T7768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.675266][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 882.690670][ T7750] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.712429][ T7750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.717618][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 883.758763][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 884.795532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 884.903784][ C0] sched: DL replenish lagged too much [ 885.830359][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 886.879128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 887.924307][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 888.955880][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 890.004096][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 891.038915][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 892.082662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 893.121572][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 894.150025][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 894.468920][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 894.712948][ T4980] udevd[4980]: worker [19122] /devices/virtual/block/nbd5 timeout; kill it [ 895.204862][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 896.238398][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 897.280756][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 897.409233][ T4980] udevd[4980]: seq 33589 '/devices/virtual/block/nbd5' killed [ 898.310285][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 899.365291][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 900.396198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 901.442523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.485776][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 903.522405][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 904.559782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 905.599275][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 906.634549][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 907.684366][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 908.712960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 909.758202][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.789471][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 911.836317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 912.881673][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 913.913556][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 914.957571][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 915.997431][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 917.042920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 918.075942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 919.111472][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 920.149896][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 921.199124][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 922.243713][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 923.283599][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 924.322585][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 925.356489][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 926.402902][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 927.123513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.445553][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 928.482708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 929.512607][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 930.561809][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 931.596749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 932.637831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 933.675635][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 934.718584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 935.330069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 935.333993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 935.337666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 935.341751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 935.345604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 935.349156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.599878][ C0] net_ratelimit: 320 callbacks suppressed [ 936.599901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.603912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.607792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.611751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.615527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.619744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.624086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.628387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.633023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 936.637034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.609316][ C0] net_ratelimit: 1112 callbacks suppressed [ 941.609338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.614512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.618934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.623631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.628062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.645280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.650181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.655015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.660149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 941.665143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 946.618671][ C1] net_ratelimit: 6752 callbacks suppressed [ 946.618696][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.619453][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.620174][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.620792][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.621413][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.621540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 946.622134][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.622875][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.623662][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.624334][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 946.963360][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 951.628383][ C1] net_ratelimit: 8428 callbacks suppressed [ 951.628404][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.628921][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.629584][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.630110][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.630764][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.630862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 951.631479][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.634278][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.634754][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 951.635255][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.638387][ C1] net_ratelimit: 9447 callbacks suppressed [ 956.638411][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.639000][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.639506][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.640187][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.640914][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.641320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 956.641608][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.642305][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.642870][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 956.643317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 961.648541][ C1] net_ratelimit: 9585 callbacks suppressed [ 961.648566][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.649005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 961.649337][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.650057][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.650781][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.651410][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.652132][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.652268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 961.652840][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 961.653311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 966.658761][ C1] net_ratelimit: 9533 callbacks suppressed [ 966.658811][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.659530][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.659652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 966.660198][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.660876][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.661552][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.662096][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.662704][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 966.663130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 966.663383][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.668630][ C1] net_ratelimit: 10287 callbacks suppressed [ 971.668684][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.669284][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.669922][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.670517][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.671216][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.671343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 971.671830][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.672321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 971.672431][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 971.673101][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 972.550066][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 976.678475][ C1] net_ratelimit: 9924 callbacks suppressed [ 976.678496][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.678667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 976.679096][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.679753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 976.679773][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.680470][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.681183][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.681745][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.682263][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 976.682798][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.688448][ C1] net_ratelimit: 9999 callbacks suppressed [ 981.688471][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.689098][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.689662][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.689902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 981.690288][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.691010][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.691601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 981.691654][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 981.692117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 981.692340][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.698621][ C1] net_ratelimit: 9929 callbacks suppressed [ 986.698675][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.699303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 986.699402][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.700135][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.700808][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.701582][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.702353][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.702958][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 986.703411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 986.703660][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.708670][ C1] net_ratelimit: 9719 callbacks suppressed [ 991.708714][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.709328][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.709946][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.710611][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.710948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 991.711193][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.711846][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.712515][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.713149][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 991.713644][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.718370][ C1] net_ratelimit: 10227 callbacks suppressed [ 996.718419][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.719058][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.719692][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.720335][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.720947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 996.720996][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.721650][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.722026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 996.722497][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 996.723034][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 998.153977][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1001.728752][ C1] net_ratelimit: 10193 callbacks suppressed [ 1001.728774][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.729421][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.730055][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.730629][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.731207][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.731917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1001.733294][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.733966][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1001.734418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1001.734480][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.738676][ C1] net_ratelimit: 9802 callbacks suppressed [ 1006.738724][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.739414][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.740033][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.740689][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.741419][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.741696][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1006.742044][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.742145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1006.742702][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1006.743353][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.748351][ C1] net_ratelimit: 10017 callbacks suppressed [ 1011.748375][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.748983][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.749524][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.750131][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.750849][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.751035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1011.751539][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.751584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1011.752161][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1011.753193][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.758488][ C1] net_ratelimit: 10102 callbacks suppressed [ 1016.758525][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.759235][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.759451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1016.759907][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.760000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1016.760632][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.761406][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.762016][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1016.762502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1016.762557][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1020.138308][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1020.296445][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25500/3:b..l P25512/1:b..l [ 1020.305709][ C0] rcu: (detected by 0, t=10518 jiffies, g=155981, q=2937 ncpus=2) [ 1020.313637][ C0] task:syz-executor state:R running task stack:28072 pid:25512 tgid:25512 ppid:17968 task_flags:0x400040 flags:0x00080002 [ 1020.327189][ C0] Call Trace: [ 1020.330494][ C0] [ 1020.333472][ C0] __schedule+0x17db/0x58f0 [ 1020.338050][ C0] ? lock_acquire+0x115/0x350 [ 1020.342782][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1020.347750][ C0] ? __pfx___schedule+0x10/0x10 [ 1020.352635][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1020.357643][ C0] preempt_schedule_irq+0x4b/0x90 [ 1020.362707][ C0] irqentry_exit+0x14f/0x910 [ 1020.367341][ C0] ? trace_irq_disable+0x3b/0x140 [ 1020.372396][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1020.378400][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1020.383705][ C0] Code: ff ff ff e8 20 39 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 3c 44 0a cc 48 8d 3d f7 30 da [ 1020.403331][ C0] RSP: 0018:ffffc9000306f5c0 EFLAGS: 00000296 [ 1020.409432][ C0] RAX: ec082db7c6070700 RBX: 0000000000000000 RCX: 0000000000000046 [ 1020.417430][ C0] RDX: 000000009e56ac23 RSI: ffffffff8e6fcd8c RDI: ffffffff8c6d9480 [ 1020.425490][ C0] RBP: ffff88807e0f8000 R08: 1700000000000000 R09: 0000000000000000 [ 1020.433512][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 1020.441506][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1020.449520][ C0] ? stack_trace_save+0xa9/0x100 [ 1020.454503][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1020.459681][ C0] unwind_next_frame+0xac/0x2550 [ 1020.464685][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1020.469857][ C0] ? __unwind_start+0x514/0x660 [ 1020.474749][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1020.480941][ C0] arch_stack_walk+0x11b/0x150 [ 1020.485783][ C0] ? stack_trace_save+0xa9/0x100 [ 1020.490796][ C0] ? fill_pool+0x163/0x610 [ 1020.495313][ C0] stack_trace_save+0xa9/0x100 [ 1020.500132][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1020.505553][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 1020.511061][ C0] ? fill_pool+0x163/0x610 [ 1020.515558][ C0] kasan_save_track+0x3e/0x80 [ 1020.520328][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1020.525216][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1020.530712][ C0] ? fill_pool+0x163/0x610 [ 1020.535168][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1020.540854][ C0] ? fill_pool+0x163/0x610 [ 1020.545315][ C0] fill_pool+0x163/0x610 [ 1020.549589][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1020.554382][ C0] ? rcu_is_watching+0x16/0xb0 [ 1020.559178][ C0] ? debug_object_activate+0x364/0x420 [ 1020.564839][ C0] debug_object_activate+0x38d/0x420 [ 1020.570170][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 1020.575325][ C0] call_rcu+0x43/0x8b0 [ 1020.579435][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1020.585336][ C0] __slab_free+0x274/0x2c0 [ 1020.589791][ C0] qlist_free_all+0x99/0x100 [ 1020.594409][ C0] ? do_getname+0x2e/0x250 [ 1020.598897][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1020.604584][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1020.610100][ C0] __kasan_slab_alloc+0x22/0x80 [ 1020.614997][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1020.620502][ C0] ? __might_fault+0xcb/0x130 [ 1020.625221][ C0] ? do_getname+0x2e/0x250 [ 1020.629672][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1020.635347][ C0] ? do_getname+0x2e/0x250 [ 1020.639799][ C0] do_getname+0x2e/0x250 [ 1020.644107][ C0] __se_sys_symlinkat+0x3d/0x2b0 [ 1020.649095][ C0] do_syscall_64+0x166/0x520 [ 1020.653733][ C0] ? trace_irq_disable+0x3b/0x140 [ 1020.658782][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.664871][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1020.669647][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.675573][ C0] RIP: 0033:0x7f4a0dd9d217 [ 1020.680050][ C0] RSP: 002b:00007ffd1354a818 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1020.688501][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a0dd9d217 [ 1020.696520][ C0] RDX: 00007f4a0de35fe6 RSI: 00000000ffffff9c RDI: 00007ffd1354a8b0 [ 1020.704530][ C0] RBP: 00007ffd1354a85c R08: 0000000000000001 R09: 00000000ffffffff [ 1020.712529][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000016a [ 1020.720526][ C0] R13: 00000000000927c0 R14: 00000000000d70e4 R15: 00007ffd1354a8b0 [ 1020.728549][ C0] [ 1020.731594][ C0] task:syz.2.4587 state:R running task stack:26360 pid:25500 tgid:25493 ppid:18284 task_flags:0x400140 flags:0x00080003 [ 1020.745120][ C0] Call Trace: [ 1020.748424][ C0] [ 1020.751384][ C0] __schedule+0x17db/0x58f0 [ 1020.755953][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1020.760938][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1020.765915][ C0] ? __pfx___schedule+0x10/0x10 [ 1020.770831][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1020.775917][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1020.781345][ C0] preempt_schedule_common+0x7f/0xd0 [ 1020.786672][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1020.791652][ C0] preempt_schedule_thunk+0x16/0x40 [ 1020.796892][ C0] __local_bh_enable_ip+0xe9/0x140 [ 1020.802067][ C0] ip6t_do_table+0x13c4/0x15b0 [ 1020.806917][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1020.811816][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1020.816980][ C0] ? lock_acquire+0x115/0x350 [ 1020.821709][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1020.826882][ C0] nf_hook_slow+0xc5/0x220 [ 1020.831470][ C0] ? __pfx_dst_output+0x10/0x10 [ 1020.836433][ C0] nf_hook+0x22a/0x3a0 [ 1020.840545][ C0] ? nf_hook+0xa1/0x3a0 [ 1020.844732][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1020.849358][ C0] ? __pfx_dst_output+0x10/0x10 [ 1020.854265][ C0] ? ip6_xmit+0x273/0x1a60 [ 1020.858719][ C0] ip6_xmit+0x10d1/0x1a60 [ 1020.863076][ C0] ? __pfx_dst_output+0x10/0x10 [ 1020.867979][ C0] ? ip6_xmit+0x273/0x1a60 [ 1020.872439][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1020.877157][ C0] ? lock_acquire+0x115/0x350 [ 1020.881891][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1020.887132][ C0] inet6_csk_xmit+0x397/0x660 [ 1020.891883][ C0] ? inet6_csk_xmit+0xf4/0x660 [ 1020.896689][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1020.901924][ C0] __tcp_transmit_skb+0x2640/0x47c0 [ 1020.907316][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1020.912915][ C0] ? ktime_get+0x45/0x220 [ 1020.917287][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1020.923477][ C0] ? ktime_get+0x1f5/0x220 [ 1020.927933][ C0] tcp_send_active_reset+0x2a8/0x5a0 [ 1020.933269][ C0] __tcp_close+0x43d/0xe70 [ 1020.937746][ C0] tcp_close+0x28/0x110 [ 1020.941938][ C0] inet_release+0x143/0x190 [ 1020.946536][ C0] __sock_release+0xa0/0x1f0 [ 1020.951215][ C0] ? __pfx_sock_close+0x10/0x10 [ 1020.956148][ C0] sock_close+0x1c/0x30 [ 1020.960334][ C0] __fput+0x418/0xa50 [ 1020.964447][ C0] task_work_run+0x1d9/0x270 [ 1020.969065][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1020.974203][ C0] ? __fput_deferred+0x222/0x390 [ 1020.979181][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 1020.984509][ C0] get_signal+0x1181/0x12c0 [ 1020.989049][ C0] ? __sys_sendto+0x4d0/0x5a0 [ 1020.993761][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1020.998833][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1021.004431][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1021.010650][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1021.016092][ C0] ? rcu_is_watching+0x16/0xb0 [ 1021.020902][ C0] do_syscall_64+0x328/0x520 [ 1021.025547][ C0] ? trace_irq_disable+0x3b/0x140 [ 1021.030597][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.036694][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1021.041400][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.047321][ C0] RIP: 0033:0x7f6e72b9e159 [ 1021.051760][ C0] RSP: 002b:00007f6e73a7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1021.060213][ C0] RAX: 0000000000250340 RBX: 00007f6e72e26180 RCX: 00007f6e72b9e159 [ 1021.068223][ C0] RDX: 00000000d0d0c2ac RSI: 0000200000000080 RDI: 0000000000000008 [ 1021.076219][ C0] RBP: 00007f6e72c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1021.084214][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1021.092209][ C0] R13: 00007f6e72e26218 R14: 00007f6e72e26180 R15: 00007ffe018760c8 [ 1021.100247][ C0] [ 1021.103311][ C0] rcu: rcu_preempt kthread starved for 794 jiffies! g155981 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1021.114272][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1021.124275][ C0] rcu: RCU grace-period kthread stack dump: [ 1021.130183][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1021.143721][ C0] Call Trace: [ 1021.147017][ C0] [ 1021.149979][ C0] __schedule+0x17db/0x58f0 [ 1021.154550][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1021.159544][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1021.164719][ C0] ? __pfx___schedule+0x10/0x10 [ 1021.169599][ C0] ? lock_acquire+0x115/0x350 [ 1021.174306][ C0] ? schedule+0x90/0x2b0 [ 1021.178576][ C0] schedule+0x164/0x2b0 [ 1021.182762][ C0] schedule_timeout+0x152/0x2c0 [ 1021.187664][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1021.193070][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1021.198425][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1021.204278][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1021.209900][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1021.214793][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1021.221017][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1021.226446][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1021.231686][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1021.237532][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1021.242157][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1021.247390][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1021.252366][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1021.257432][ C0] kthread+0x38b/0x480 [ 1021.261528][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1021.266752][ C0] ? __pfx_kthread+0x10/0x10 [ 1021.271378][ C0] ret_from_fork+0x514/0xb70 [ 1021.276001][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.281180][ C0] ? __switch_to+0xc89/0x1420 [ 1021.285920][ C0] ? __pfx_kthread+0x10/0x10 [ 1021.290545][ C0] ret_from_fork_asm+0x1a/0x30 [ 1021.295374][ C0] [ 1021.298422][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1021.304772][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1021.310087][ C1] NMI backtrace for cpu 1 [ 1021.310104][ C1] CPU: 1 UID: 0 PID: 3224 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1021.310127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.310140][ C1] Workqueue: bat_events batadv_tt_purge [ 1021.310257][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 1021.310282][ C1] Code: 08 8b 15 cd 79 fc 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 2c 1f c2 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 1021.310300][ C1] RSP: 0018:ffffc90000a17ce0 EFLAGS: 00000a07 [ 1021.310316][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000100 [ 1021.310330][ C1] RDX: 00000000000ae849 RSI: ffffffff8c6d9460 RDI: ffffffff8c6d9420 [ 1021.310344][ C1] RBP: ffffffff823750eb R08: b900000000000000 R09: 0000000000000000 [ 1021.310357][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 1021.310371][ C1] R13: ffffffff91c6fc6c R14: ffffc90000a17d88 R15: 0000000000013750 [ 1021.310392][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1021.310408][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.310422][ C1] CR2: 00007f420f400218 CR3: 0000000022bae000 CR4: 00000000003526f0 [ 1021.310439][ C1] Call Trace: [ 1021.310447][ C1] [ 1021.310459][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1021.310480][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1021.310504][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1021.310535][ C1] arch_stack_walk+0x11b/0x150 [ 1021.310560][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1021.310583][ C1] stack_trace_save+0xa9/0x100 [ 1021.310611][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1021.310644][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1021.310665][ C1] kasan_save_track+0x3e/0x80 [ 1021.310683][ C1] ? kasan_save_track+0x3e/0x80 [ 1021.310700][ C1] ? kasan_save_free_info+0x40/0x50 [ 1021.310726][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1021.310774][ C1] ? ip6_rcv_core+0xdf4/0x1870 [ 1021.310795][ C1] kasan_save_free_info+0x40/0x50 [ 1021.310820][ C1] __kasan_slab_free+0x5c/0x80 [ 1021.310840][ C1] kmem_cache_free+0x182/0x650 [ 1021.310862][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 1021.310881][ C1] ip6_rcv_core+0xdf4/0x1870 [ 1021.310903][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 1021.310928][ C1] ipv6_rcv+0x72/0xc0 [ 1021.310946][ C1] ? netif_receive_skb+0x102/0xbf0 [ 1021.311026][ C1] netif_receive_skb+0x278/0xbf0 [ 1021.311051][ C1] ? lock_acquire+0x115/0x350 [ 1021.311071][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1021.311098][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1021.311151][ C1] NF_HOOK+0xa4/0x3a0 [ 1021.311172][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1021.311194][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1021.311226][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1021.311246][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1021.311270][ C1] ? br_pass_frame_up+0x275/0x420 [ 1021.311291][ C1] br_handle_frame_finish+0x1136/0x1950 [ 1021.311319][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1021.311339][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1021.311364][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1021.311395][ C1] ? nf_hook_slow+0x176/0x220 [ 1021.311420][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1021.311440][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1021.311506][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1021.311572][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1021.311593][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1021.311615][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1021.311636][ C1] ? lock_acquire+0x115/0x350 [ 1021.311655][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1021.311678][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1021.311702][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1021.311725][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1021.311747][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1021.311771][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1021.311794][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1021.311818][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1021.311838][ C1] br_handle_frame+0x127f/0x1510 [ 1021.311863][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1021.311886][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1021.311911][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1021.311930][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 1021.311974][ C1] ? ip6_input+0x23/0x270 [ 1021.312001][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1021.312025][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1021.312043][ C1] ? NF_HOOK+0x336/0x3c0 [ 1021.312070][ C1] ? process_backlog+0x3de/0x18b0 [ 1021.312095][ C1] ? process_backlog+0x3de/0x18b0 [ 1021.312122][ C1] process_backlog+0x727/0x18b0 [ 1021.312149][ C1] ? process_backlog+0x3de/0x18b0 [ 1021.312182][ C1] __napi_poll+0xaa/0x330 [ 1021.312207][ C1] net_rx_action+0x61d/0xf50 [ 1021.312238][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1021.312278][ C1] handle_softirqs+0x226/0x860 [ 1021.312302][ C1] ? do_softirq+0x77/0xd0 [ 1021.312326][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1021.312349][ C1] ? batadv_tt_local_purge+0x2d4/0x370 [ 1021.312382][ C1] do_softirq+0x77/0xd0 [ 1021.312403][ C1] [ 1021.312409][ C1] [ 1021.312416][ C1] __local_bh_enable_ip+0x100/0x140 [ 1021.312438][ C1] batadv_tt_local_purge+0x2d4/0x370 [ 1021.312463][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1021.312486][ C1] batadv_tt_purge+0x35/0xa40 [ 1021.312508][ C1] ? rcu_is_watching+0x16/0xb0 [ 1021.312528][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1021.312551][ C1] process_scheduled_works+0xc3d/0x1630 [ 1021.312590][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.312611][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1021.312649][ C1] ? assign_work+0x3af/0x5d0 [ 1021.312671][ C1] rescuer_thread+0x7c5/0x10e0 [ 1021.312698][ C1] ? rescuer_thread+0xb8/0x10e0 [ 1021.312731][ C1] kthread+0x38b/0x480 [ 1021.312746][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1021.312769][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.312784][ C1] ret_from_fork+0x514/0xb70 [ 1021.312801][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.312826][ C1] ? __switch_to+0xc89/0x1420 [ 1021.312867][ C1] ? __pfx_kthread+0x10/0x10 [ 1021.312885][ C1] ret_from_fork_asm+0x1a/0x30 [ 1021.312920][ C1] [ 1021.769326][ C1] net_ratelimit: 7710 callbacks suppressed [ 1021.769388][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.770996][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.772432][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.773884][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.775474][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.776802][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.778159][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.779757][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.781363][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge! [ 1021.782711][ C1] ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!