last executing test programs: 5m41.128199986s ago: executing program 2 (id=3158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008848"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r5], &(0x7f0000000600)='GPL\x00', 0x4}, 0x94) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x6) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0x5, 0x4}]}]}}, &(0x7f0000000bc0)=""/4089, 0x36, 0xff9, 0xa, 0x6}, 0x28) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={0x0, &(0x7f0000001c00)=""/4090, 0x0, 0xffa, 0xa}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002c00)={'macsec0\x00', @random="07e9b5171b99"}) r10 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000002c40)={0x0, 0x8000}, &(0x7f0000002c80)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000002cc0)={r11, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000002d80)=0x84) 5m40.622264735s ago: executing program 2 (id=3162): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0xd, 0x10, &(0x7f0000003c80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e0000009531673463f001ebda7ca48c590f5c728f92b6094e60e8048b34e23780f21116b0140fa36b4f6cf5ddc29bfe1b684794b5587d2eaaebbbae6ae7bbae94dd6d9cc57cb52445626de81aa4e15504f35055f7fe45514a92f8af926b4f272b28747903bf05dd7b7ce91f5c5131679c7edb1fb8136fcb387a2ea9f5157f02d3ce6e04f4937c178ca9b1330145111734291675ecf655309b0c4127ad210991f1b93d78a0d52aa6621f4297ef8a94f4bef0f4d788311a3d", @ANYBLOB="147ce45a9780379f58d2dfb37b28da3437e83316ae79918781a3e8d9613d3313c0d811022fb90d9df50a91267c05e723daeb71c0a90780c192037f18588b022db13bd3b7a0fb506dd6447e5ba398317e7c4edd6a223d53253b7480191f79f5a43e7f92935a69b3a703c62854d5896da1a65803", @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x2, 0xff6, &(0x7f0000001880)=""/4086}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'bond0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000800)=0xcde, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r10) recvmmsg(r10, &(0x7f0000000a80)=[{{0x0, 0xfffffffffffffe28, &(0x7f0000001480)=[{&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000002880)=""/4087, 0xff7}, {&(0x7f0000003880)=""/27, 0x1b}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/209, 0xd3}, {&(0x7f0000003a40)=""/176, 0xb0}, {&(0x7f0000003b00)=""/181, 0xb2}], 0x8}, 0x9}], 0x400000000000272, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003c40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r12) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x2b, &(0x7f00000000c0)=0xfffff305, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m40.073180518s ago: executing program 2 (id=3165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000104010000003c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002800c00028005000100860000002c00018014000300ff020000000000000000000000000001140004"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0xe0}], 0x1, 0x0, 0x0, 0x40}, 0x0) 5m39.821889149s ago: executing program 2 (id=3167): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000900)=0x5, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000940)=0xce, 0x4) connect$inet(r0, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000009c0)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x2, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x13, 0x12) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delrng={0x10, 0x14, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x40004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xfffffff5, &(0x7f0000000500)=[{&(0x7f0000000540)="a2", 0xfffffdef}], 0x1}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000780)={0x28, 0x0, 0x2710, @host}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m38.739098882s ago: executing program 2 (id=3174): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 5m38.383456038s ago: executing program 2 (id=3178): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000bc0)={'syz_tun\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000290001000000000000000000020000000800010000000000"], 0x1c}}, 0x20000040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xddc0, &(0x7f0000000c40)=ANY=[], 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0xe, 0x0, &(0x7f0000000700)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000740)={0xffffffffffffffff}) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0x80, 0x6) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r14}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000008c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xf, &(0x7f00000002c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x602fae89}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x0, 0x6, 0x4, 0x10, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000380)=""/224, 0x41000, 0x40, '\x00', r1, @cgroup_sysctl, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xa, 0x4, 0x6b}, 0x10, 0x0, r11, 0x2, &(0x7f0000000940)=[r12, r14, r15, r16], &(0x7f0000000980)=[{0x3, 0x3, 0xb, 0x1}, {0x3, 0x3, 0x8, 0xb}], 0x10, 0x81}, 0x94) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 5m23.321715742s ago: executing program 32 (id=3178): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000bc0)={'syz_tun\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000290001000000000000000000020000000800010000000000"], 0x1c}}, 0x20000040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xddc0, &(0x7f0000000c40)=ANY=[], 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0xe, 0x0, &(0x7f0000000700)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000740)={0xffffffffffffffff}) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0x80, 0x6) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r14}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000008c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xf, &(0x7f00000002c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x602fae89}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x0, 0x6, 0x4, 0x10, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000380)=""/224, 0x41000, 0x40, '\x00', r1, @cgroup_sysctl, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xa, 0x4, 0x6b}, 0x10, 0x0, r11, 0x2, &(0x7f0000000940)=[r12, r14, r15, r16], &(0x7f0000000980)=[{0x3, 0x3, 0xb, 0x1}, {0x3, 0x3, 0x8, 0xb}], 0x10, 0x81}, 0x94) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m43.826915692s ago: executing program 4 (id=4409): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000290000000200"], 0x18}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0xfe, 0x7, 0xb, 0x2, 0x5, 0xe, 0x8, 0x6, 0x7, 0x6, 0x5, 0x5, 0x81, 0x3f}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x10001, 0x4) r2 = socket(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept$alg(r2, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000340)=""/86, 0x56, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4c625e7b15ff71ba}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r5, r4}, 0xc) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) 2m43.127075626s ago: executing program 4 (id=4416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x5c, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000002000000010000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000200020000000000000000001c0017000000000000000000000000000000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000000c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) (async) sendmsg$inet_sctp(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x5c, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000002000000010000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000200020000000000000000001c0017000000000000000000000000000000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) (async) 2m41.713649785s ago: executing program 4 (id=4427): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/194, 0xc2}], 0x5}, 0x7ff}], 0x1, 0x100, &(0x7f00000002c0)={0x0, 0x989680}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000740)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000340)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="f4fbff5df5c66647b8e3eb97a1e3ed535066779240929c613207a3e85b0aec0f254b6231415683c8418dba86cedeed80eeed9fd0aa08ac69db2b881aec7f4365010c9dd468c4ca86f0c26cfbc64200999ee203462281410f31b702e7a3e9fbf9", 0x60}, {&(0x7f0000000400)="c20fc7dad7889a114b26ce8b6cb6d0782d71a90d31826a3543ebb871b519721a0170c68e0e1455b72cdc2a4d5862c670cd3e93e251204154a3da4fde7cfc2968d5cf4b4e8704c6de66f01cf603e9f41ca7336c618f082e56e05a19affe809f3393c956d5f643ad5800e6c5533b87288638fd3cb96ea101c948135249ff8d6aae94a118ab480854a3e12e888eabe4c904694a88c134361f2d7988b69aa04470db0cfcf2834e8416c84f5959fcbf37c99eb0b5224bb1206e12f096b2eb2cf32baea0d0c6879ccf5223ea7b2ab440353a6afa9716d27821885aa88280a49f3d785c3ec42541000378c95d1be6b4d7286db3bafda037f85091aac6", 0xf9}, {&(0x7f0000000500)="b2a466cef1b49195014b35c84364a739757d7a04934c6e19988f32a53567faf6a1a2a0e96c5a32154ce68c5da1f134a612bb50f75ca79ed3b684814253208f85f2dafcf3ffacfb34b628c3004fbc68e40abcfa1d68e22ca570bfe416b74e129c75a3099d762e69981ffdacb2305232b935eb1d1abaa3e9be72e7eb5e299cd69a9da545b48a0d90965e6e92715c0c72100080bbe2580d44af0afae71be930fdac83a2ac47", 0xa4}], 0x3, 0x0, 0x0, 0x4000}], 0x1, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32, @ANYBLOB="080002"], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) sendmmsg(r3, &(0x7f0000000940), 0x4000000000001f2, 0xfc) 2m40.580762198s ago: executing program 4 (id=4444): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x18, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000017c0)={0x0, 0xffffffffffffff92, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xd, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f00000014c0)={'virt_wifi0\x00', @random="0100"}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ppoll(&(0x7f0000000000)=[{r7, 0x808}], 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000867000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r10, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x1001, &(0x7f0000000340)=""/4097, 0x41100, 0x2d}, 0x94) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001380)=@o_path={&(0x7f0000000040)='./file0\x00', r10, 0x4000, r12}, 0x18) 2m40.27950188s ago: executing program 4 (id=4447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @local}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000780)={r1, 0x10, 0x0, 0x376}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x38d, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "0b82dd", 0x357, 0x6, 0xff, @private1, @private0, {[@routing={0x89, 0x12, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x84, 0x0, '\x00', [@pad1]}, @dstopts={0x6, 0x4, '\x00', [@generic={0x81, 0x5, "f1b657e232"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x98}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}, @hopopts={0x32, 0xb, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x74, [0x8, 0x8, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x4, [0x3]}}]}, @hopopts={0x1, 0xd, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x8, [0x48d0, 0x1, 0x4, 0x7, 0x3, 0xc0]}}, @generic={0x5, 0x2, "f943"}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x6, [0x4, 0x9, 0xd756, 0x4]}}]}, @routing={0x87, 0x10, 0x0, 0x0, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote, @mcast1, @rand_addr=' \x01\x00']}], {{0x4e21, 0x4e20, 0x41424344, r5, 0x1, 0x0, 0x14, 0x4, 0x0, 0x0, 0xc, {[@md5sig={0x13, 0x12, "b74b7c5950d4f89ef32acff5bccefbfc"}, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @timestamp={0x8, 0xa, 0x80000001, 0x10}, @eol, @mss={0x2, 0x4, 0x4}, @sack={0x5, 0xa, [0x3, 0x9]}, @sack={0x5, 0xa, [0x1, 0x9]}, @window={0x3, 0x3, 0x7}]}}, {"e208315b137049ca8fbefd7cf85592429ad50d4fd5fa56e6c25d638662f139d41461bf43013aee1128e8dcab5bb95d50127b96cd0ef6e6a952a5687011ae8905dd2a52562e424ec9726a7b3d851d330970fa1c41898e1ee12c5fa0ce51e8ca73174ce00aae84026c01ca23eeb89e65e782708f1b81e69269a59386730dee68443ab24b44251dd8cfdf065256dae4c4da92f70aaa32d1f70893a9b471ff0edaebf5082c76df6661056a0b3017950301b14b6eedafbb3ba8"}}}}}}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000007c0)={0x793, 0x4}) sendto(r0, &(0x7f0000000180)="721169e7f71ccb5246c61eaffa69f4065851d8e8556197ef39be021b3c8950bdb1d20234b638933c5297b56c0b424b35c3a98205c573f3608a02db7b3e888a7670074c33290fe002a4e8780863e399b345397666b27a4caadd9b9aab692b7dbbe4c0b3027a8f4a5763bfb64b20286e1606b1ea4f45dfd3bb2912637c092e229da29f2e6e872a357f33990306cdb875c3c29ed522b7c148d4f8feac3899f55ff005180e2189d96af20ffec39a1933cfa70b56aab8d60f331055dc16f8cc0419a51d6bd47edc", 0xc5, 0x4000, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="d1f78e1f291f", 'bond_slave_1\x00'}}, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81004a0086dd6040081000140600fc020000000000000000000000000001fe8004000000000000000000000000aa4e224e24", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="5004100990780000"], 0x0) 2m36.03956307s ago: executing program 4 (id=4463): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x29, 0x1, 0xf0bd27, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000) write$6lowpan_control(r0, &(0x7f00000003c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r3, 0x100}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016802000010001"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m20.971490814s ago: executing program 33 (id=4463): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x29, 0x1, 0xf0bd27, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000) write$6lowpan_control(r0, &(0x7f00000003c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r3, 0x100}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016802000010001"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.495594809s ago: executing program 3 (id=5587): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) close(r0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000300)="9cba37d314ed184309535576ccd33f3c78a5b9582f73681db5332fd00377cfa7ed9be20efddb", 0x26}, {&(0x7f0000000340)="89e59da366ff49702b8d622ff0aa0a4791f4e12861d18494746af53dced5aaa3", 0x20}, {&(0x7f0000000380)="2792b04c4d168a5dbc3886945a7dc06cee9efeed15831a66fcdfbb8abe1c2f01589ccdab4fb8c616e4c4027c73e1c78f8ba83ec74c2c97287b530de1ab61e59041a944ea8aa77278a52695c4c1c0f91fee5207109dbff77875c91863396cc602a13ea2c5d14986cbfdc7b07c20a77e8be5099563eb49", 0x76}, {&(0x7f0000000400)="b01ae695b320dbbd3d1c134c75d1d546575cbf0448e07ae9a995d886dd7143b9f02ed5f35fc42e241d74f25a6d3a803bda12a386b3a7fec1f78bb3c9b4c2fc72e082acf32d472ce0d0224136b7b37847254d079e01ab7eba12965b8e2c417bfdf1f90153807bab3a489f8b993cb10b09bf5ec53e73a74493a5c661e7d1e870d2371794c03b9cbf78e136b1af6ff89e", 0x8f}, {&(0x7f00000004c0)="4ec8c256c24c334bcff57b9c28106722c050b9c084e5d795ffecbc5e6f58df3933eb5148d594ef5fbd352c8a01ce197099b7d38ec07ffb1ab0876876d3113b36bf25523ea2bc4d000df08863ebff2b8af2ff7206afd56f5eecfeedee1e1a36c1a0e7139daeff9c346b0478c10e334cf708f21ea144cc2085d3", 0x79}, {&(0x7f0000000540)="256e2a56a895c2763ee310e0de7de72c03953ac04615394ef5c0dd4ed22b2eba0dd8324657f5ce23d59119b2cd5c57beecbc58261b7c93a6b7fafe", 0x3b}], 0x6, &(0x7f0000000600)="7d3c4a38609ffaadd23f5f050214ab25530c756d78b7afb7c9f2f604fe328ffd63abcd1c3131c60d4fed9ddce7", 0x2d, 0x4008001}, 0x4000801) listen(r0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.262946806s ago: executing program 3 (id=5589): r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0) 4.979276313s ago: executing program 5 (id=5591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fedbdf250800000014000600fe800000cf3b955652326036c29dfe124a5f0000000000013000000000bb08000800ac1414aa08000c000100000005000100000000987360faabd0705aa233266000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4885) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000dc0)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r12) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r13, 0x0, 0x33, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000b80)={r0, &(0x7f0000000a80)='-\'\'.{/--s({\x00', 0x40002, &(0x7f0000000ac0)={@align=0x7, {0x2, 0xf000, 0x3, 0x6}}, 0x4517, &(0x7f0000000b00), &(0x7f0000000b40)=0x3}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r14, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000011c0)={r14, &(0x7f0000000f00)="885b7247081ea2f5a9405af9f4eb5b11ffc6ba8357c8b9a49e05165726860d6455a82114b2fc68f50d56e74fc00a8f74", &(0x7f00000010c0)=""/249}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xd, 0xae3, 0x3}, 0x10, r15, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.457372858s ago: executing program 5 (id=5595): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4a}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4a}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x14d9, 0x4) socket(0x2, 0xa, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xc}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) 4.455576803s ago: executing program 3 (id=5596): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) 3.843533688s ago: executing program 1 (id=5600): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x3d}}, 0x40) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000540)="b9ff033189442602000000f086dd", 0x0, 0x61, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.594250066s ago: executing program 5 (id=5602): socket$netlink(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x3, 0x3000000, 0x5, 0x0, 0xfffffffd, 0xb1e, 0x5, [0x7ca8179a, 0xc]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) r3 = epoll_create1(0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) r5 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000780)={'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="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", 0x155}, {&(0x7f00000009c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000a40)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000b40)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) close(r5) r9 = socket(0x23, 0x80805, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2833a06d15bbe4195871ca447f39f208409bd588a7b73a94f5ec70ec274ebf58509af5459ad90b5a983ddce5b445e4b6b9b7b4a1a229105127ca4f21d17959fe05b618279cc98315010101720dbe6c357deb788762ae3647fbc4e8346c9fe4230e989f83ae368042b310f6416eb5a48f7f52eca8edabe4014ba4640f31e21ae2c20522028f326b052cd8e04cd0eceb5aef29827b6d57e6c7bb321243b54c12acecac7f466c9616024914985ac33a35b362b4ba088ce65006d19813b8b66e5fb79df0df59d18df32a2cde0bb4f39bb262ba49dbf2d83e578ffb36940086144c4d97aa2df37d3d48d2cbba", @ANYRES16=r10, @ANYBLOB="0001266ca157e88323b76a5397ca250000dbdf030000000008000300f19bbd1b0cd82a361afa77fd2ce4979ad99e2cee7ca46013063928ae62cffa518df8d2dfcce77de12f8455822c52895a891e88f6852817e400bfcc1db70ef476babace719948144f96c1a330c67dac2e22874ae842a4da8a63eed3623e0e96f7e080092b0875d5cdaabe338b0fc0ce24e9b54f4e1fc932c76b6ff138a06843debd0276c75cdbed549cc43aad7063917986c4728d424d66faad0c0faa5326a2b1a0533a", @ANYRES32=r11, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x18) listen(r9, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000e80)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000ec0)={0x8002a000}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) 3.387380753s ago: executing program 1 (id=5603): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r10, @ANYBLOB="280005800900010076070000000000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64=r9, @ANYRES32=r6, @ANYBLOB="12030000000800da0a000100aaaaaa40aabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000042) r11 = socket(0x1, 0x803, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000440)={r3, 0x10}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010803000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="11f6070057277d57647a39e486bff8b81b0000000800370000000000"], 0x38}}, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x3, r13, 0x2d}, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_RECONFIGURE(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 2.949158529s ago: executing program 3 (id=5605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x408c0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1, 0x4000000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2cff}, 0x1c) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r3, 0x80000003) listen(r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x408c0) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1, 0x4000000}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2cff}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async) listen(r3, 0x80000003) (async) listen(r2, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) 2.611345918s ago: executing program 3 (id=5606): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x14, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) write(r3, &(0x7f0000000000)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000500000000000000001a0000239750a300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000640), &(0x7f00000006c0)=0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000180)=""/227, 0x1c}], 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) 2.456618154s ago: executing program 1 (id=5607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0xf, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000001ec0)=0xbfe, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x3, &(0x7f0000000e80)=""/4087, &(0x7f0000001e80)=0xff7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x10}, {0x9, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1800000012483100090027bd7000000000000400000004001d00cbd4b4807d40c754de85090c6fbb7049ed72cfab773b5fc9ec99134492982e3318bd61718c7a6b2709dfccf9ddbae7c2356555c002a98764fd670009c8196ebe1a6ef814e3b71c049e90efc8be3b12303baf"], 0x18}, 0x1, 0x0, 0x0, 0x46854}, 0x4) 2.265338815s ago: executing program 6 (id=5608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='4', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="be8bc03c29", 0x5}], 0x1}}], 0x2, 0x850) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={0x0, 0x6}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.170365751s ago: executing program 1 (id=5609): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_batadv\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x89e1, &(0x7f00000000c0)='lapb0') socket(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x970e59eaaf221d4d, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000ea000000000000020000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000079004001000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000000480)='GPL\x00', 0x2, 0xee, &(0x7f00000004c0)=""/238, 0x41100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x970e59eaaf221d4d, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000ea000000000000020000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000079004001000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000000480)='GPL\x00', 0x2, 0xee, &(0x7f00000004c0)=""/238, 0x41100}, 0x94) write$nci(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="400109"], 0x87) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001200)={0x104, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@nested={0xed, 0x141, 0x0, 0x1, [@generic="4b400731e4342fc73610658c11f8c82997e5567e0f0f5c32b8eb202da245f81140212d1e501f8dbf8c169f8b12167a06a59fe1008bdef4a8f10846cc60ffb511c39d513c7608dbec2315c780f3ff6d1a34df881379db3e665d5590802efe1f59d2ab36", @nested={0x18, 0x14, 0x0, 0x1, [@typed={0x14, 0x111, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @generic="1689c40588ece206118b0231e5cc0c90b265997c390f6ab98b565eaf868d6f8b6c9018180ba91538387b3a05bbde39569d46cdf69784409712d3651937289b56cf62f2b58072f3be2aded7d19fe8db93b47da61d4a3ec85697a34274f8e7733f8cfc3d739a95874ad9581f2ded2a"]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xaf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x240148c4}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f00000009c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a80)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x20000880) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1}, &(0x7f0000000b00)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1}, &(0x7f0000000b00)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001000)={'bridge_slave_0\x00'}) 1.967393967s ago: executing program 6 (id=5610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a306be7de8f5f4cff94060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000003c0), 0xffffff6a) sendfile(r5, r7, 0x0, 0x20000000002) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/ipc\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 1.955382665s ago: executing program 5 (id=5611): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x4000081}, 0x4004000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r4, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.863209972s ago: executing program 3 (id=5613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000013000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100ca1b00f8ffffffb7a45c1d02000008000000b703000007000000850000007b000000950000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000019c00)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000019c40)={0x3, [0x3, 0x1, 0x3]}, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) connect$pppoe(r0, &(0x7f0000019bc0)={0x18, 0x0, {0x4, @local, 'dummy0\x00'}}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000019980)={'gretap0\x00', &(0x7f0000019ac0)={'tunl0\x00', r3, 0x0, 0x8000, 0x7fffffff, 0x4, {{0x30, 0x4, 0x3, 0x0, 0xc0, 0x66, 0x0, 0xb, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xfe, 0x3, 0x1, [{@remote, 0xffff8001}, {@rand_addr=0x64010101, 0xa5b}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x7}]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x7a3716913880a9e8, 0x3, "1e"}, {0x1, 0xd, "f56fd0a10dd6017f374e0f"}, {0x6, 0xd, "403e00eaee8063865f4c5e"}, {0x1, 0x2}, {0x6, 0x12, "52a879a0ae41cd531589de44589e4fb0"}, {0x5, 0xa, "804360995c96d4de"}]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xf, [{@local}, {@multicast1, 0x8001}, {@broadcast, 0x8}, {@multicast1, 0x7c}, {@multicast2, 0xffffffff}, {@multicast1, 0x1}]}, @ssrr={0x89, 0xf, 0xd5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100]}, @noop]}}}}}) r4 = socket(0x40000000015, 0xa, 0x0) getsockopt(r4, 0x200000000114, 0x8, &(0x7f0000000840)=""/102394, &(0x7f0000019840)=0x18ffa) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'wlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="8cde", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="e6de", 0x2}], 0x1, &(0x7f0000000340)=ANY=[], 0x2c0}}], 0x2, 0xc4) unshare(0x20000400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019a40)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000540)='./cgroup/cgroup.procs\x00', &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x20, &(0x7f0000000600)={0x0, 0xffffffffffffff79, 0x0, &(0x7f00000006c0)=""/223, 0xde}}, 0x9) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000199c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000019a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$tun(r9, &(0x7f0000019a40)=ANY=[], 0x8b) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000019880), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000802) ioctl$int_in(r9, 0x5452, &(0x7f0000019a80)=0x10001) 1.431236667s ago: executing program 1 (id=5614): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000cc0)=@nat={'nat\x00', 0x19, 0x1, 0x166, [0x200000001740, 0x0, 0x0, 0x200000001770, 0x200000001846], 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000030000007000000088f8726f73653000000000000000000000006e7230000000000000000000000000007767300000000000000000000000000062617400000000ffffffffffffff00ffff0000aaaaaaaaaaaaffff00ffff006e0000006e000000a60000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff00007a7e9ece00"/267]}, 0x183) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c007d00001000010428bd7000fedbdf25000007", @ANYRES32=0x0, @ANYBLOB="99c0010000000000280012800b00010065727370616e00001800028004001200080014000e08000008001500876b0800140003006e696376663000"/68], 0x5c}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x1, 0x2, 0x1f34}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x20000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000f80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000012c0)=0x4, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r4, &(0x7f0000001300)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000001340)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001580)=""/89, 0x59}, {&(0x7f0000001640)=""/1, 0x1}, {&(0x7f0000001680)=""/255, 0xff}], 0x4}, 0x40000140) socket$nl_generic(0x10, 0x3, 0x10) 1.197489092s ago: executing program 6 (id=5615): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) 1.056770195s ago: executing program 0 (id=5617): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x2000000000000216, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000001e00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x14, &(0x7f0000001f40)=ANY=[], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001fc0)={r2}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000052000100ffffffff040000000a00000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r6, 0x0, 0x1000, 0x8, &(0x7f0000000b40)="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", &(0x7f0000001b40)=""/8, 0x1, 0x0, 0xff, 0xf2, &(0x7f0000001b80)="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", &(0x7f0000001c80)="d954a35b79ee8554fdf34d3ebbefc6af1cd158d8a07d95ee9fed09470fec568d83a3d46999e9ba7cbe551a12e32df5705a0a5c615a846602dfe5cf7fdd1f155f792e5c07173437acd8380466851db502813f371debb41bc5492e7dda5c74d038a547e3deae2c160173a93c7b5c2dd4f7b5f05dd9956038eb3e11f4ab985d1dc4e8ef49e6e6382ef96eb78068c571d5f9d5ffcbc32d85b34f00a24c721cfae31bd4639bdfc272ec2ea12a21d50af5ba77b105b090297936883849d7f90c3b0f1ebf46a9f4d9a20bb6e176cb87a654bcab34307cc39c6e59f78eee1b4c8763bed2d8a17741440f288b167f000e81e93c056cf3", 0x0, 0x0, 0x9}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00e9e5d1c980a697ec00"/20, @ANYRES32=0x0, @ANYBLOB="84280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 951.412348ms ago: executing program 5 (id=5618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000001000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000001080)={'syztnl2\x00', r3, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001180)={'syztnl2\x00', r4, 0x29, 0x84, 0x84, 0x4038a0b, 0x31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x0, 0x0, 0x4}}) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private, @rand_addr=0x64010102}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(0x3) 820.876192ms ago: executing program 0 (id=5619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0xf, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000001ec0)=0xbfe, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x3, &(0x7f0000000e80)=""/4087, &(0x7f0000001e80)=0xff7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x10}, {0x9, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1800000012483100090027bd7000000000000400000004001d00cbd4b4807d40c754de85090c6fbb7049ed72cfab773b5fc9ec99134492982e3318bd61718c7a6b2709dfccf9ddbae7c2356555c002a98764fd670009c8196ebe1a6ef814e3b71c049e90efc8be3b12303baf"], 0x18}, 0x1, 0x0, 0x0, 0x46854}, 0x4) 633.943756ms ago: executing program 1 (id=5620): r0 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x36, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e23, @loopback}}, [0x6356, 0xce6, 0x91f, 0x3, 0x3, 0xc15b, 0x4d1, 0x80, 0x1000, 0x40, 0x5, 0xffffffff, 0x8, 0x6, 0x10]}, &(0x7f0000000400)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000500)={r4, 0x7}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x90) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000540)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095001428320000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 580.589888ms ago: executing program 0 (id=5621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r2, 0x5, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008881}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000000740)=""/4086}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000081120200000000009500000700000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000010000009111b2000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'caif0\x00', @link_local}) 427.205514ms ago: executing program 0 (id=5622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWOBJ={0x44, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}]}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xc2, 0x8, "dc6e37110d330a3b2accf49b653ce847144f26b9729cd319ee8a03e7453a006dc7604c85eb938c34fc4ec8483860f0a8cc495af28b6b6a310c1d11cedc504d96b7504837dc46cf1962ac6ba7e133763bda910d059a86eb08290e2829465ff4e06108b7bb0fdd60020f3f1bd26c65184948a9b62811fe188609b8f360b96df695191369541cfb7988519ec6aa9da52b5b8954b42df8747ecabd3be7b7d0df4a57ef39ec3b5b7687793c5fe0a097cac77397e362f779a4eacf259cea3b0fb0"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1fc}, 0x1, 0x0, 0x0, 0x40080}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 371.125562ms ago: executing program 0 (id=5623): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) unshare(0x22020600) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x201, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x36}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080077aa", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4c000) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 360.297058ms ago: executing program 6 (id=5624): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r5, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r7, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES8=r6], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 211.697879ms ago: executing program 6 (id=5625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) 201.06122ms ago: executing program 0 (id=5626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000400)='macvtap0\x00', 0x517440, &(0x7f0000000500)={@_ha_fsid={[0xa0cc, 0x2aa]}, {0x1000, 0x0, 0x796, 0xbd}}, 0xde, &(0x7f0000000540), &(0x7f0000000580)=0x7fffffff}, {[0xffff9181, 0x2, 0x1, 0x7]}, 0x8, 0xf, &(0x7f00000005c0)=""/15}) openat$cgroup_procs(r1, &(0x7f0000000680)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f616400240002800800014000000002080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) (rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bind$rds(r4, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x10}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r4, 0x4, 0x1, 0x28e5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0]}, 0x40) 157.112633ms ago: executing program 6 (id=5627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8937, &(0x7f0000000f00)={'ip6_vti0\x00', 0x0}) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYRES32=r0], 0x0, 0x53}, 0x28) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0xa92a73dcfa14a381, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000620000006200000004000000800000000400000f0200000001000000c5490000400000000500000001000000360b0000030000000400000005000000030000000700000040000000615c0000000000000000030000000a00000039ab618901000000030000000000000b03000000000000002e00"], &(0x7f00000006c0)=""/129, 0x80, 0x81, 0x0, 0x6202}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="5254d1adacd6df2b5a86b1001234", 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611818000000000095"], 0x0, 0x0, 0x0, 0x0, 0xead07d5ec9a6f40b, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80, 0x0}, 0x8) (async) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000ec0)={r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES64=r2], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000880)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f00000008c0)='GPL\x00'}, 0x94) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000008454000000140003006e657464657673696d3000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9f6b010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000080000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000030000000000000c00000000100000000000000900000000000000000000000205000000020000000000000a02"], 0x0, 0x96}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000ac0)=""/247, 0x26, 0xf7, 0x1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f80)={'macvlan0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="40000000100001042abd7000feffffff00001800", @ANYRES32=r7, @ANYBLOB="82490000ca0107001800378008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="0500270000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x5, 0xe2, &(0x7f0000000d00)=""/226, 0x0, 0x0, '\x00', r7, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x2000000, 0x0, 0x0, 0x2}, 0x10}, 0x94) (async, rerun: 32) connect(r4, &(0x7f0000000040)=@rc={0x1f, @none, 0x6d}, 0x80) 0s ago: executing program 5 (id=5628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x5a90, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', 0x1}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000008c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000a40), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r11, 0x401}, 0x14}}, 0x28040000) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000440)={0x105, 0x2, 0x8007, 0x1000006, 0x39c1, 0x400002, 0x0, 0x8}, &(0x7f0000000480)=0x20) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01020000000000000000010000000900010073797a30000000002cbd0000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xc0}}, 0x0) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) readv(r15, &(0x7f0000000500)=[{&(0x7f0000000540)=""/122, 0x7a}, {0x0}], 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) kernel console output (not intermixed with test programs): 93250][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4686'. [ 715.698775][T25194] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4686'. [ 715.793288][T25203] netlink: 'syz.1.4685': attribute type 1 has an invalid length. [ 715.853019][T25180] xt_CT: No such helper "netbios-ns" [ 715.978331][T25203] bond10: entered promiscuous mode [ 715.995967][T25203] 8021q: adding VLAN 0 to HW filter on device bond10 [ 716.077631][T25209] netlink: 'syz.0.4683': attribute type 1 has an invalid length. [ 716.077658][T25209] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4683'. [ 716.358536][T25220] Bluetooth: MGMT ver 1.23 [ 716.879973][T25244] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 716.905332][T25246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 717.866298][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4701'. [ 720.172828][T25275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4704'. [ 720.172868][T25275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4704'. [ 720.266032][T25265] bridge_slave_0: left allmulticast mode [ 720.266071][T25265] bridge_slave_0: left promiscuous mode [ 720.266308][T25265] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.278412][T25265] bridge_slave_1: left allmulticast mode [ 720.278445][T25265] bridge_slave_1: left promiscuous mode [ 720.278677][T25265] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.331746][T25265] bond0: (slave bond_slave_0): Releasing backup interface [ 720.374359][T25265] bond0: (slave bond_slave_1): Releasing backup interface [ 720.423796][T25265] team0: Port device team_slave_0 removed [ 720.440380][T25265] team0: Port device team_slave_1 removed [ 720.441168][T25265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.441187][T25265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.447622][T25265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.447647][T25265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.488953][T25265] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 720.523882][T25266] team0: Mode changed to "activebackup" [ 720.547912][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4704'. [ 720.615365][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4705'. [ 721.460329][T25306] xt_ipcomp: unknown flags 1D [ 721.582139][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4710'. [ 721.583313][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4710'. [ 721.637957][T25313] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 721.702148][T25318] openvswitch: netlink: Key type 16131 is out of range max 32 [ 721.776410][T25321] veth0: entered promiscuous mode [ 721.986597][T25330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 721.986629][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4716'. [ 721.986647][T25330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 721.986664][T25330] netlink: 'syz.5.4716': attribute type 5 has an invalid length. [ 722.084871][T25333] ipt_REJECT: TCP_RESET invalid for non-tcp [ 722.216058][T25342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4720'. [ 722.281320][T25343] 8021q: VLANs not supported on ip6_vti0 [ 722.610444][T25323] veth0: left promiscuous mode [ 722.890648][T25372] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 723.337596][T25399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.757432][T25420] veth2: entered allmulticast mode [ 724.085344][T25442] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 724.115266][T25444] Bluetooth: MGMT ver 1.23 [ 724.688818][T25472] bond7: entered promiscuous mode [ 725.031429][T25507] Unsupported ieee802154 address type: 0 [ 725.152639][T25510] tipc: Enabled bearer , priority 0 [ 725.177621][T25510] tipc: Resetting bearer [ 725.222968][T25508] tipc: Disabling bearer [ 725.224132][T25515] netlink: 'syz.1.4762': attribute type 3 has an invalid length. [ 725.224155][T25515] netlink: 'syz.1.4762': attribute type 1 has an invalid length. [ 725.224172][T25515] __nla_validate_parse: 12 callbacks suppressed [ 725.224186][T25515] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4762'. [ 725.224221][T25515] NCSI netlink: No device for ifindex 4294967295 [ 725.301872][T25517] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 725.488567][T25526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4766'. [ 725.524978][T25528] netlink: 'syz.0.4768': attribute type 4 has an invalid length. [ 725.585182][T25528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4768'. [ 725.702254][T25537] netlink: 'syz.3.4772': attribute type 4 has an invalid length. [ 725.702285][T25537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4772'. [ 725.868052][T25542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4773'. [ 725.905267][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4773'. [ 725.922689][T25546] tipc: Enabling of bearer rejected, failed to enable media [ 726.031443][T25556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4775'. [ 726.228703][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4770'. [ 726.267545][T25562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4776'. [ 726.267584][T25562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4776'. [ 726.285452][ T1105] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 726.291870][T13034] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 726.292075][T13034] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 726.292170][T13034] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 726.408052][T25562] vcan0: tx drop: invalid da for name 0x0000008000000000 [ 726.627160][T25572] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 726.662057][T25571] ip6gre2: entered promiscuous mode [ 726.662083][T25571] ip6gre2: entered allmulticast mode [ 726.888137][T25586] FAULT_INJECTION: forcing a failure. [ 726.888137][T25586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 726.888179][T25586] CPU: 1 UID: 0 PID: 25586 Comm: syz.0.4783 Not tainted syzkaller #0 PREEMPT(full) [ 726.888205][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 726.888220][T25586] Call Trace: [ 726.888229][T25586] [ 726.888239][T25586] dump_stack_lvl+0xe8/0x150 [ 726.888281][T25586] should_fail_ex+0x410/0x560 [ 726.888322][T25586] prepare_alloc_pages+0x21e/0x5f0 [ 726.888360][T25586] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 726.888397][T25586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 726.888434][T25586] ? __pfx_policy_nodemask+0x10/0x10 [ 726.888467][T25586] ? __get_vm_area_node+0x155/0x2f0 [ 726.888490][T25586] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 726.888516][T25586] ? __vmalloc_noprof+0xd2/0x120 [ 726.888541][T25586] ? bpf_check+0x115b/0x2ef0 [ 726.888568][T25586] ? bpf_prog_load+0x14d1/0x1c20 [ 726.888598][T25586] ? __x64_sys_bpf+0xba/0xd0 [ 726.888623][T25586] ? do_syscall_64+0x166/0x520 [ 726.888645][T25586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.888679][T25586] alloc_pages_mpol+0x21e/0x390 [ 726.888721][T25586] alloc_pages_noprof+0xb1/0x2b0 [ 726.888746][T25586] get_free_pages_noprof+0xf/0x80 [ 726.888777][T25586] __kasan_populate_vmalloc+0x38/0x1c0 [ 726.888805][T25586] ? do_raw_spin_unlock+0xf5/0x200 [ 726.888845][T25586] alloc_vmap_area+0xd10/0x1410 [ 726.888885][T25586] ? __pfx_alloc_vmap_area+0x10/0x10 [ 726.888907][T25586] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 726.888938][T25586] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 726.888967][T25586] ? __get_vm_area_node+0x155/0x2f0 [ 726.889008][T25586] __get_vm_area_node+0x200/0x2f0 [ 726.889038][T25586] __vmalloc_node_range_noprof+0x343/0x1540 [ 726.889066][T25586] ? bpf_check+0x115b/0x2ef0 [ 726.889108][T25586] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 726.889147][T25586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 726.889176][T25586] ? apparmor_capable+0x126/0x170 [ 726.889213][T25586] ? bpf_lsm_capable+0x9/0x20 [ 726.889238][T25586] ? security_capable+0x7e/0x2c0 [ 726.889268][T25586] ? bpf_check+0x115b/0x2ef0 [ 726.889313][T25586] __vmalloc_noprof+0xd2/0x120 [ 726.889340][T25586] ? bpf_check+0x115b/0x2ef0 [ 726.889372][T25586] bpf_check+0x115b/0x2ef0 [ 726.889424][T25586] ? __pfx_bpf_check+0x10/0x10 [ 726.889457][T25586] ? bpf_obj_name_cpy+0x194/0x1e0 [ 726.889486][T25586] bpf_prog_load+0x14d1/0x1c20 [ 726.889532][T25586] ? __pfx_bpf_prog_load+0x10/0x10 [ 726.889592][T25586] __sys_bpf+0xd0d/0xd90 [ 726.889632][T25586] ? __pfx___sys_bpf+0x10/0x10 [ 726.889675][T25586] ? __fget_files+0x2a/0x420 [ 726.889721][T25586] ? ksys_write+0x242/0x270 [ 726.889752][T25586] ? __pfx_ksys_write+0x10/0x10 [ 726.889785][T25586] __x64_sys_bpf+0xba/0xd0 [ 726.889816][T25586] do_syscall_64+0x166/0x520 [ 726.889838][T25586] ? trace_irq_disable+0x3b/0x140 [ 726.889865][T25586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.889889][T25586] ? clear_bhb_loop+0x70/0xc0 [ 726.889917][T25586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.889941][T25586] RIP: 0033:0x7f05f4b9f559 [ 726.889963][T25586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.889992][T25586] RSP: 002b:00007f05f5b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.890017][T25586] RAX: ffffffffffffffda RBX: 00007f05f4e25fa0 RCX: 00007f05f4b9f559 [ 726.890035][T25586] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 726.890050][T25586] RBP: 00007f05f5b53090 R08: 0000000000000000 R09: 0000000000000000 [ 726.890065][T25586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.890079][T25586] R13: 00007f05f4e26038 R14: 00007f05f4e25fa0 R15: 00007ffffbe01298 [ 726.890117][T25586] [ 727.016720][T25586] syz.0.4783: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 727.016929][T25586] CPU: 0 UID: 0 PID: 25586 Comm: syz.0.4783 Not tainted syzkaller #0 PREEMPT(full) [ 727.016980][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 727.017019][T25586] Call Trace: [ 727.017041][T25586] [ 727.017070][T25586] dump_stack_lvl+0xe8/0x150 [ 727.017172][T25586] warn_alloc+0x24d/0x270 [ 727.017246][T25586] ? lockdep_hardirqs_on+0x7b/0x110 [ 727.017316][T25586] ? __pfx_warn_alloc+0x10/0x10 [ 727.017388][T25586] ? kfree+0x1c5/0x650 [ 727.017474][T25586] ? __get_vm_area_node+0x219/0x2f0 [ 727.017567][T25586] __vmalloc_node_range_noprof+0x36b/0x1540 [ 727.017679][T25586] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 727.017790][T25586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 727.017883][T25586] ? apparmor_capable+0x126/0x170 [ 727.017978][T25586] ? bpf_lsm_capable+0x9/0x20 [ 727.018041][T25586] ? security_capable+0x7e/0x2c0 [ 727.018120][T25586] ? bpf_check+0x115b/0x2ef0 [ 727.018191][T25586] __vmalloc_noprof+0xd2/0x120 [ 727.018254][T25586] ? bpf_check+0x115b/0x2ef0 [ 727.018336][T25586] bpf_check+0x115b/0x2ef0 [ 727.018475][T25586] ? __pfx_bpf_check+0x10/0x10 [ 727.018559][T25586] ? bpf_obj_name_cpy+0x194/0x1e0 [ 727.018632][T25586] bpf_prog_load+0x14d1/0x1c20 [ 727.018745][T25586] ? __pfx_bpf_prog_load+0x10/0x10 [ 727.018891][T25586] __sys_bpf+0xd0d/0xd90 [ 727.018987][T25586] ? __pfx___sys_bpf+0x10/0x10 [ 727.019093][T25586] ? __fget_files+0x2a/0x420 [ 727.019213][T25586] ? ksys_write+0x242/0x270 [ 727.019294][T25586] ? __pfx_ksys_write+0x10/0x10 [ 727.019378][T25586] __x64_sys_bpf+0xba/0xd0 [ 727.019458][T25586] do_syscall_64+0x166/0x520 [ 727.019517][T25586] ? trace_irq_disable+0x3b/0x140 [ 727.019572][T25586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.019594][T25586] ? clear_bhb_loop+0x70/0xc0 [ 727.019622][T25586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.019645][T25586] RIP: 0033:0x7f05f4b9f559 [ 727.019666][T25586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.019686][T25586] RSP: 002b:00007f05f5b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 727.019710][T25586] RAX: ffffffffffffffda RBX: 00007f05f4e25fa0 RCX: 00007f05f4b9f559 [ 727.019744][T25586] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 727.019793][T25586] RBP: 00007f05f5b53090 R08: 0000000000000000 R09: 0000000000000000 [ 727.019833][T25586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.019883][T25586] R13: 00007f05f4e26038 R14: 00007f05f4e25fa0 R15: 00007ffffbe01298 [ 727.019970][T25586] [ 727.046902][T25586] Mem-Info: [ 727.046944][T25586] active_anon:9106 inactive_anon:0 isolated_anon:0 [ 727.046944][T25586] active_file:0 inactive_file:44195 isolated_file:0 [ 727.046944][T25586] unevictable:0 dirty:305 writeback:0 [ 727.046944][T25586] slab_reclaimable:12542 slab_unreclaimable:126064 [ 727.046944][T25586] mapped:43576 shmem:2864 pagetables:1536 [ 727.046944][T25586] sec_pagetables:0 bounce:0 [ 727.046944][T25586] kernel_misc_reclaimable:0 [ 727.046944][T25586] free:1213872 free_pcp:20366 free_cma:0 [ 727.047100][T25586] Node 0 active_anon:36424kB inactive_anon:0kB active_file:0kB inactive_file:176572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174304kB dirty:1216kB writeback:0kB shmem:11456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16456kB pagetables:5988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 727.054224][T25586] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 727.054398][T25586] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.054593][T25586] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 727.062410][T25586] Node 0 DMA32 free:893216kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36624kB inactive_anon:0kB active_file:0kB inactive_file:176572kB unevictable:0kB writepending:1216kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:81304kB local_pcp:52344kB free_cma:0kB [ 727.062603][T25586] lowmem_reserve[]: 0 0 0 0 0 [ 727.062765][T25586] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.062920][T25586] lowmem_reserve[]: 0 0 0 0 0 [ 727.063016][T25586] Node 1 Normal free:3946912kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.063173][T25586] lowmem_reserve[]: 0 0 0 0 0 [ 727.063271][T25586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 727.063602][T25586] Node 0 DMA32: 1747*4kB (UE) 516*8kB (UE) 703*16kB (UME) 758*32kB (UME) 99*64kB (UM) 40*128kB (UME) 200*256kB (UM) 103*512kB (UM) 70*1024kB (UM) 4*2048kB (UM) 159*4096kB (UME) = 893148kB [ 727.098193][T25586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 727.098544][T25586] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 8*16kB (UM) 8*32kB (UM) 12*64kB (UM) 8*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3946912kB [ 727.098984][T25586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.106258][T25586] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.112224][T25586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.112287][T25586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.112337][T25586] 47105 total pagecache pages [ 727.112359][T25586] 0 pages in swap cache [ 727.112381][T25586] Free swap = 124996kB [ 727.112402][T25586] Total swap = 124996kB [ 727.112440][T25586] 2097051 pages RAM [ 727.112455][T25586] 0 pages HighMem/MovableOnly [ 727.112476][T25586] 433831 pages reserved [ 727.112498][T25586] 0 pages cma reserved [ 728.475150][T25615] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 728.686371][T25615] 8021q: adding VLAN 0 to HW filter on device bond11 [ 729.362917][T25638] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 729.386146][T25639] TC_ACT_REPEAT abuse ? [ 729.526388][T25649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.615825][T25685] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 731.288294][T25717] ip_tables: iptables: counters copy to user failed while replacing table [ 731.886224][T25738] netlink: 'syz.5.4823': attribute type 6 has an invalid length. [ 731.918378][T25743] netlink: 'syz.6.4824': attribute type 10 has an invalid length. [ 731.918405][T25743] __nla_validate_parse: 7 callbacks suppressed [ 731.918418][T25743] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4824'. [ 732.361172][T25764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4829'. [ 732.361215][T25764] netlink: 'syz.5.4829': attribute type 7 has an invalid length. [ 732.361232][T25764] netlink: 'syz.5.4829': attribute type 8 has an invalid length. [ 732.361247][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 732.414096][T25753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4829'. [ 732.414136][T25753] netlink: 'syz.5.4829': attribute type 7 has an invalid length. [ 732.414152][T25753] netlink: 'syz.5.4829': attribute type 8 has an invalid length. [ 732.414167][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 732.887434][T25747] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 732.901076][T25747] bond12 (unregistering): Released all slaves [ 732.946527][T25764] ip6gretap0: entered promiscuous mode [ 732.953330][T25764] erspan0: entered promiscuous mode [ 732.986698][T25764] ip6gretap0: left promiscuous mode [ 733.015148][T25764] erspan0: left promiscuous mode [ 733.090947][T25753] ip6gretap0: entered promiscuous mode [ 733.092477][T25753] erspan0: entered promiscuous mode [ 733.095805][T25753] ip6gretap0: left promiscuous mode [ 733.123802][T25753] erspan0: left promiscuous mode [ 733.143538][T25762] syzkaller1: entered promiscuous mode [ 733.143563][T25762] syzkaller1: entered allmulticast mode [ 733.285650][T25779] syzkaller1: entered promiscuous mode [ 733.285677][T25779] syzkaller1: entered allmulticast mode [ 733.362384][T25781] rxe_eth0 speed is unknown, defaulting to 1000 [ 733.417014][T25785] vcan0: tx address claim with dest, not broadcast [ 733.585840][T25790] netlink: 'syz.5.4836': attribute type 16 has an invalid length. [ 733.585868][T25790] netlink: 'syz.5.4836': attribute type 17 has an invalid length. [ 733.695057][T25790] bond5: left promiscuous mode [ 733.716589][T25790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 733.726432][T25790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 733.743962][T25790] bond7: left promiscuous mode [ 733.744339][T25790] 8021q: adding VLAN 0 to HW filter on device bond7 [ 733.765319][T25781] ip6gretap0 speed is unknown, defaulting to 1000 [ 734.197930][T25802] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4839'. [ 734.418799][T25805] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.4841'. [ 734.642269][T25816] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 735.772966][T25856] Bluetooth: hci0: too big key_count value 38657 [ 735.889614][T25855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4847'. [ 736.512352][T25884] netlink: 'syz.6.4854': attribute type 1 has an invalid length. [ 736.512378][T25884] netlink: 'syz.6.4854': attribute type 2 has an invalid length. [ 736.513450][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4854'. [ 736.675740][T25890] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4854'. [ 737.350410][T25916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 737.493269][T25929] netlink: 'syz.3.4863': attribute type 39 has an invalid length. [ 738.076712][T25940] __nla_validate_parse: 1 callbacks suppressed [ 738.076740][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4864'. [ 738.176221][T25942] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 738.242966][T25944] tipc: Failed to remove unknown binding: 66,0,0/134353152:3722863899/3722863900 [ 738.243287][T25944] tipc: Failed to remove unknown binding: 66,0,0/134353152:3722863899/3722863900 [ 738.312614][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4867'. [ 738.453336][T25955] netlink: 'syz.5.4869': attribute type 1 has an invalid length. [ 738.546854][T25963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4870'. [ 738.590463][T25963] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 738.629377][T25963] bond1 (unregistering): Released all slaves [ 738.912294][T25968] netlink: 'syz.5.4872': attribute type 1 has an invalid length. [ 738.912319][T25968] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4872'. [ 738.968454][T25981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4874'. [ 738.968874][T25980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4874'. [ 738.975392][T25980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4874'. [ 738.978948][T25980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4874'. [ 738.983777][T25958] bond6: entered allmulticast mode [ 738.986245][T25958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.988458][T25980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4874'. [ 738.998053][T25980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4874'. [ 739.145248][T25984] bridge_slave_0: entered promiscuous mode [ 739.448893][T25992] syzkaller1: entered promiscuous mode [ 739.448919][T25992] syzkaller1: entered allmulticast mode [ 739.560517][T26005] bond9: option miimon: invalid value (18446744073709551614) [ 739.560548][T26005] bond9: option miimon: allowed values 0 - 2147483647 [ 739.563797][T26005] bond9 (unregistering): Released all slaves [ 739.734627][T26013] No such timeout policy "syz1" [ 739.959671][T26025] netlink: 'syz.0.4885': attribute type 1 has an invalid length. [ 740.180172][T26020] syzkaller1: entered promiscuous mode [ 740.180201][T26020] syzkaller1: entered allmulticast mode [ 740.477624][T26041] bond7: (slave gretap1): making interface the new active one [ 740.478180][T26041] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 740.608165][T26044] veth10: entered allmulticast mode [ 740.765014][ T11] block nbd1024: Possible stuck request ffff88803dab7000: control (read@0,1024B). Runtime 30 seconds [ 740.765851][ T11] block nbd1024: Possible stuck request ffff88803dab71c0: control (read@1024,1024B). Runtime 30 seconds [ 740.765889][ T11] block nbd1024: Possible stuck request ffff88803dab7380: control (read@2048,1024B). Runtime 30 seconds [ 740.765920][ T11] block nbd1024: Possible stuck request ffff88803dab7540: control (read@3072,1024B). Runtime 30 seconds [ 741.521590][T26071] block nbd5: not configured, cannot reconfigure [ 741.997812][T26064] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 742.523581][T26077] syzkaller0: entered promiscuous mode [ 742.523611][T26077] syzkaller0: entered allmulticast mode [ 742.540653][T26094] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 746.160306][T26159] tipc: Resetting bearer [ 746.351301][T26166] __nla_validate_parse: 38 callbacks suppressed [ 746.351328][T26166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4919'. [ 746.427711][T26170] macsec1: entered promiscuous mode [ 746.427740][T26170] team0: entered promiscuous mode [ 746.427963][T26170] macsec1: entered allmulticast mode [ 746.427979][T26170] team0: entered allmulticast mode [ 746.428473][T26170] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 746.464529][T26171] sctp: [Deprecated]: syz.3.4920 (pid 26171) Use of int in max_burst socket option. [ 746.464529][T26171] Use struct sctp_assoc_value instead [ 746.485705][T26170] team0: left allmulticast mode [ 746.485755][T26170] team0: left promiscuous mode [ 746.486125][T26171] netlink: 'syz.3.4920': attribute type 16 has an invalid length. [ 746.486146][T26171] netlink: 'syz.3.4920': attribute type 17 has an invalid length. [ 746.545676][T26171] lo: left promiscuous mode [ 746.545704][T26171] lo: left allmulticast mode [ 746.617250][T26171] tunl0: left promiscuous mode [ 746.617279][T26171] tunl0: left allmulticast mode [ 746.618497][T26171] gre0: left promiscuous mode [ 746.618520][T26171] gre0: left allmulticast mode [ 746.647650][T26171] gretap0: left promiscuous mode [ 746.647678][T26171] gretap0: left allmulticast mode [ 746.648236][T26171] erspan0: left promiscuous mode [ 746.648256][T26171] erspan0: left allmulticast mode [ 746.674513][T26171] ip_vti0: left promiscuous mode [ 746.674535][T26171] ip_vti0: left allmulticast mode [ 746.677780][T26171] ip6_vti0: left promiscuous mode [ 746.677801][T26171] ip6_vti0: left allmulticast mode [ 746.678252][T26171] sit0: left promiscuous mode [ 746.678269][T26171] sit0: left allmulticast mode [ 746.730736][T26171] ip6tnl0: left promiscuous mode [ 746.730765][T26171] ip6tnl0: left allmulticast mode [ 746.738225][T26171] ip6gre0: left promiscuous mode [ 746.738252][T26171] ip6gre0: left allmulticast mode [ 746.768990][T26171] syz_tun: left allmulticast mode [ 746.776104][T26171] ip6gretap0: left promiscuous mode [ 746.776131][T26171] ip6gretap0: left allmulticast mode [ 746.801914][T26171] vcan0: left promiscuous mode [ 746.801939][T26171] vcan0: left allmulticast mode [ 746.813416][T26171] bond0: left promiscuous mode [ 746.813544][T26171] bond0: left allmulticast mode [ 746.835324][T26171] team0: left promiscuous mode [ 746.835351][T26171] team0: left allmulticast mode [ 746.860499][T26171] nlmon0: left promiscuous mode [ 746.860526][T26171] nlmon0: left allmulticast mode [ 746.864123][T26171] veth0: left promiscuous mode [ 746.864147][T26171] veth0: left allmulticast mode [ 746.867816][T26171] veth1: left promiscuous mode [ 746.867842][T26171] veth1: left allmulticast mode [ 746.879656][T26171] wg0: left promiscuous mode [ 746.881893][T26171] wg0: left allmulticast mode [ 746.915521][T26171] wg2: left promiscuous mode [ 746.915544][T26171] wg2: left allmulticast mode [ 746.922615][T26171] veth0_to_bridge: left promiscuous mode [ 746.922676][T26171] veth0_to_bridge: left allmulticast mode [ 746.940827][T26171] bridge_slave_0: left promiscuous mode [ 746.940891][T26171] bridge_slave_0: left allmulticast mode [ 746.953625][T26171] veth1_to_bridge: left promiscuous mode [ 746.953650][T26171] veth1_to_bridge: left allmulticast mode [ 746.971002][T26171] bridge_slave_1: left promiscuous mode [ 746.971021][T26171] bridge_slave_1: left allmulticast mode [ 746.971770][T26171] veth0_to_bond: left promiscuous mode [ 746.971784][T26171] veth0_to_bond: left allmulticast mode [ 746.976574][T26189] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4925'. [ 746.992594][T26171] bond_slave_0: left promiscuous mode [ 746.992656][T26171] bond_slave_0: left allmulticast mode [ 747.006465][T26171] veth1_to_bond: left promiscuous mode [ 747.006532][T26171] veth1_to_bond: left allmulticast mode [ 747.038006][T26171] bond_slave_1: left promiscuous mode [ 747.038044][T26171] bond_slave_1: left allmulticast mode [ 747.038808][T26171] veth0_to_team: left promiscuous mode [ 747.038822][T26171] veth0_to_team: left allmulticast mode [ 747.063122][T26171] team_slave_0: left promiscuous mode [ 747.063139][T26171] team_slave_0: left allmulticast mode [ 747.080930][T26171] C: left promiscuous mode [ 747.080952][T26171] C: left allmulticast mode [ 747.082101][T26171] team_slave_1: left promiscuous mode [ 747.082121][T26171] team_slave_1: left allmulticast mode [ 747.103023][T26171] veth1_to_batadv: left promiscuous mode [ 747.103105][T26171] veth1_to_batadv: left allmulticast mode [ 747.138016][T26171] batadv_slave_1: left promiscuous mode [ 747.138043][T26171] batadv_slave_1: left allmulticast mode [ 747.142824][T26171] xfrm0: left promiscuous mode [ 747.158650][T26171] xfrm0: left allmulticast mode [ 747.185233][T26171] veth0_to_hsr: left promiscuous mode [ 747.185252][T26171] veth0_to_hsr: left allmulticast mode [ 747.202745][T26171] veth1_to_hsr: left promiscuous mode [ 747.202790][T26171] veth1_to_hsr: left allmulticast mode [ 747.248609][T26171] hsr0: left promiscuous mode [ 747.248637][T26171] hsr0: left allmulticast mode [ 747.248652][T26171] hsr_slave_0: left allmulticast mode [ 747.248674][T26171] hsr_slave_1: left allmulticast mode [ 747.278404][T26171] veth1_virt_wifi: left promiscuous mode [ 747.278431][T26171] veth1_virt_wifi: left allmulticast mode [ 747.293900][T26171] veth0_virt_wifi: left promiscuous mode [ 747.293930][T26171] veth0_virt_wifi: left allmulticast mode [ 747.313856][T26171] virt_wifi0: left promiscuous mode [ 747.313883][T26171] virt_wifi0: left allmulticast mode [ 747.408802][T26171] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 747.408833][T26171] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 747.512362][T26171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 747.551596][T26171] bond3: left promiscuous mode [ 747.551616][T26171] bridge1: left promiscuous mode [ 747.572355][T26171] vlan3: left allmulticast mode [ 747.572385][T26171] bond3: left allmulticast mode [ 747.572402][T26171] bridge1: left allmulticast mode [ 747.605609][T26171] macvlan2: left allmulticast mode [ 747.626931][T26171] bridge3: left allmulticast mode [ 747.676986][T26171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.726220][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4926'. [ 747.774273][T26171] veth3: left allmulticast mode [ 747.833851][T26171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 747.840306][T13034] bond5: (slave bridge6): link status up again after 0 ms [ 747.866866][T13034] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 747.889305][T13034] bond5: (slave bridge6): link status up again after 0 ms [ 747.909238][T13034] bond5: (slave bridge6): link status up again after 0 ms [ 747.932381][ T1400] bond5: (slave bridge6): link status up again after 0 ms [ 747.950046][T13034] bond5: (slave bridge6): link status up again after 0 ms [ 747.970467][T13034] bond5: (slave bridge6): link status up again after 0 ms [ 747.970612][T13034] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 747.998073][ T1400] bond5: (slave bridge6): link status up again after 0 ms [ 748.010145][ T1400] bond5: (slave bridge6): link status up again after 0 ms [ 748.095791][T26216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4930'. [ 748.095869][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4930'. [ 748.095889][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4930'. [ 748.095967][T26216] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4930'. [ 748.095984][T26216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4930'. [ 748.221274][T26222] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4929'. [ 748.221311][T26222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4929'. [ 748.327830][T13034] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.327987][T13034] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.354373][T19124] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.406139][T13034] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 748.406373][T13034] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 748.433464][T19124] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 748.606077][T13034] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 748.606823][T13034] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 748.630108][ T5644] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 748.791980][T22122] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 749.062047][T26243] netlink: 'syz.1.4937': attribute type 10 has an invalid length. [ 749.272161][T26248] netlink: 'syz.5.4938': attribute type 17 has an invalid length. [ 749.323644][T26248] bond9: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 749.328222][T26248] bond9 (unregistering): Released all slaves [ 749.452545][T26253] netlink: 'syz.6.4941': attribute type 1 has an invalid length. [ 749.489730][T26253] netlink: 'syz.6.4941': attribute type 1 has an invalid length. [ 749.714706][T26267] netlink: 'syz.3.4944': attribute type 4 has an invalid length. [ 749.715656][T26268] netlink: 'syz.3.4944': attribute type 4 has an invalid length. [ 749.790956][T26270] netlink: 'syz.0.4945': attribute type 10 has an invalid length. [ 749.795967][T26272] FAULT_INJECTION: forcing a failure. [ 749.795967][T26272] name failslab, interval 1, probability 0, space 0, times 0 [ 749.796002][T26272] CPU: 0 UID: 0 PID: 26272 Comm: syz.6.4946 Not tainted syzkaller #0 PREEMPT(full) [ 749.796029][T26272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 749.796043][T26272] Call Trace: [ 749.796052][T26272] [ 749.796063][T26272] dump_stack_lvl+0xe8/0x150 [ 749.796103][T26272] should_fail_ex+0x410/0x560 [ 749.796143][T26272] should_failslab+0xa8/0x100 [ 749.796185][T26272] __kvmalloc_node_noprof+0x171/0x820 [ 749.796221][T26272] ? bpf_check_cfg+0x13f/0x3840 [ 749.796246][T26272] ? bpf_check_cfg+0x13f/0x3840 [ 749.796281][T26272] bpf_check_cfg+0x13f/0x3840 [ 749.796332][T26272] ? kasan_quarantine_put+0xbb/0x1f0 [ 749.796363][T26272] ? lockdep_hardirqs_on+0x7b/0x110 [ 749.796393][T26272] ? __pfx_bpf_check_cfg+0x10/0x10 [ 749.796418][T26272] ? bpf_prog_calc_tag+0x310/0x370 [ 749.796449][T26272] ? vfree+0x426/0x490 [ 749.796478][T26272] ? bpf_prog_calc_tag+0x310/0x370 [ 749.796514][T26272] ? check_and_resolve_insns+0x1d54/0x21d0 [ 749.796557][T26272] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 749.796591][T26272] ? add_kfuncs+0x251/0x2e0 [ 749.796626][T26272] bpf_check+0x25fb/0x2ef0 [ 749.796675][T26272] ? __pfx_bpf_check+0x10/0x10 [ 749.796708][T26272] ? bpf_obj_name_cpy+0x194/0x1e0 [ 749.796736][T26272] bpf_prog_load+0x14d1/0x1c20 [ 749.796781][T26272] ? __pfx_bpf_prog_load+0x10/0x10 [ 749.796838][T26272] __sys_bpf+0xd0d/0xd90 [ 749.796888][T26272] ? __pfx___sys_bpf+0x10/0x10 [ 749.796931][T26272] ? __fget_files+0x2a/0x420 [ 749.797011][T26272] ? ksys_write+0x242/0x270 [ 749.797042][T26272] ? __pfx_ksys_write+0x10/0x10 [ 749.797075][T26272] __x64_sys_bpf+0xba/0xd0 [ 749.797107][T26272] do_syscall_64+0x166/0x520 [ 749.797129][T26272] ? trace_irq_disable+0x3b/0x140 [ 749.797167][T26272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.797191][T26272] ? clear_bhb_loop+0x70/0xc0 [ 749.797220][T26272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.797243][T26272] RIP: 0033:0x7f560599f559 [ 749.797265][T26272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.797286][T26272] RSP: 002b:00007f560678c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.797311][T26272] RAX: ffffffffffffffda RBX: 00007f5605c25fa0 RCX: 00007f560599f559 [ 749.797329][T26272] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 749.797344][T26272] RBP: 00007f560678c090 R08: 0000000000000000 R09: 0000000000000000 [ 749.797360][T26272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.797374][T26272] R13: 00007f5605c26038 R14: 00007f5605c25fa0 R15: 00007fff54da9ef8 [ 749.797412][T26272] [ 750.292639][T26277] nbd: must specify at least one socket [ 750.495169][T26283] syzkaller0: entered promiscuous mode [ 750.495196][T26283] syzkaller0: entered allmulticast mode [ 750.654200][T26292] veth9: entered allmulticast mode [ 750.676060][T26293] netlink: 'syz.1.4953': attribute type 1 has an invalid length. [ 750.780694][T26293] bond12: entered promiscuous mode [ 750.782851][T26293] 8021q: adding VLAN 0 to HW filter on device bond12 [ 750.923788][T26304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 750.960852][T26310] FAULT_INJECTION: forcing a failure. [ 750.960852][T26310] name failslab, interval 1, probability 0, space 0, times 0 [ 750.960899][T26310] CPU: 0 UID: 0 PID: 26310 Comm: syz.3.4958 Not tainted syzkaller #0 PREEMPT(full) [ 750.960926][T26310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 750.960941][T26310] Call Trace: [ 750.960950][T26310] [ 750.960961][T26310] dump_stack_lvl+0xe8/0x150 [ 750.961000][T26310] should_fail_ex+0x410/0x560 [ 750.961040][T26310] should_failslab+0xa8/0x100 [ 750.961078][T26310] __kvmalloc_node_noprof+0x171/0x820 [ 750.961113][T26310] ? __kvmalloc_node_noprof+0x340/0x820 [ 750.961143][T26310] ? bpf_compute_postorder+0x131/0x970 [ 750.961170][T26310] ? bpf_compute_postorder+0x131/0x970 [ 750.961206][T26310] bpf_compute_postorder+0x131/0x970 [ 750.961235][T26310] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 750.961271][T26310] ? add_kfuncs+0x251/0x2e0 [ 750.961309][T26310] bpf_check+0x261d/0x2ef0 [ 750.961359][T26310] ? __pfx_bpf_check+0x10/0x10 [ 750.961393][T26310] ? bpf_obj_name_cpy+0x194/0x1e0 [ 750.961422][T26310] bpf_prog_load+0x14d1/0x1c20 [ 750.961468][T26310] ? __pfx_bpf_prog_load+0x10/0x10 [ 750.961528][T26310] __sys_bpf+0xd0d/0xd90 [ 750.961568][T26310] ? __pfx___sys_bpf+0x10/0x10 [ 750.961612][T26310] ? __fget_files+0x2a/0x420 [ 750.961657][T26310] ? ksys_write+0x242/0x270 [ 750.961700][T26310] ? __pfx_ksys_write+0x10/0x10 [ 750.961733][T26310] __x64_sys_bpf+0xba/0xd0 [ 750.961763][T26310] do_syscall_64+0x166/0x520 [ 750.961785][T26310] ? trace_irq_disable+0x3b/0x140 [ 750.961811][T26310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.961833][T26310] ? clear_bhb_loop+0x70/0xc0 [ 750.961866][T26310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.961888][T26310] RIP: 0033:0x7f35bdb9f559 [ 750.961909][T26310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.961928][T26310] RSP: 002b:00007f35bea5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 750.961952][T26310] RAX: ffffffffffffffda RBX: 00007f35bde25fa0 RCX: 00007f35bdb9f559 [ 750.961969][T26310] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 750.961984][T26310] RBP: 00007f35bea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 750.962016][T26310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.962030][T26310] R13: 00007f35bde26038 R14: 00007f35bde25fa0 R15: 00007fffb1083088 [ 750.962068][T26310] [ 750.967801][T26311] sctp: [Deprecated]: syz.0.4959 (pid 26311) Use of int in maxseg socket option. [ 750.967801][T26311] Use struct sctp_assoc_value instead [ 751.490635][T26325] __nla_validate_parse: 10 callbacks suppressed [ 751.490658][T26325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4965'. [ 751.573899][T26334] validate_nla: 1 callbacks suppressed [ 751.573923][T26334] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 751.573940][T26334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4963'. [ 751.577752][T26322] 8021q: adding VLAN 0 to HW filter on device bond8 [ 751.630480][T26322] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 751.657527][T26334] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 751.657552][T26334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4963'. [ 751.701912][T26333] netlink: 'syz.3.4967': attribute type 2 has an invalid length. [ 751.702329][T26333] syzkaller0: entered promiscuous mode [ 751.702354][T26333] syzkaller0: entered allmulticast mode [ 751.756727][T26344] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4966'. [ 751.942717][T26350] netlink: 'syz.5.4969': attribute type 2 has an invalid length. [ 751.942744][T26350] netlink: 'syz.5.4969': attribute type 2 has an invalid length. [ 752.277763][T26377] syzkaller0: entered promiscuous mode [ 752.277790][T26377] syzkaller0: entered allmulticast mode [ 752.431243][T26387] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4976'. [ 752.466709][T26394] syzkaller0: left promiscuous mode [ 752.466734][T26394] syzkaller0: left allmulticast mode [ 752.493801][T26392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4977'. [ 752.784507][T26409] syzkaller0: entered promiscuous mode [ 752.784535][T26409] syzkaller0: entered allmulticast mode [ 752.924919][T26367] net_ratelimit: 34 callbacks suppressed [ 752.924942][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 753.041172][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 753.158152][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 753.280105][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 753.390445][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 753.499856][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 753.620885][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 753.731141][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 753.850892][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 753.963197][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 754.278413][T26465] syzkaller0: entered promiscuous mode [ 754.278441][T26465] syzkaller0: entered allmulticast mode [ 754.294908][T26464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 754.426754][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa6cc00: rx timeout, send abort [ 754.426997][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa6cc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 754.499812][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa6d800: rx timeout, send abort [ 754.500255][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa6d800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 754.541544][T26472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4999'. [ 754.541571][T26472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4999'. [ 754.884196][T26486] sch_tbf: burst 48 is lower than device ip6gre0 mtu (1448) ! [ 754.967893][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5005'. [ 755.121901][T26494] @ÿ: renamed from veth0_vlan (while UP) [ 755.601016][T26523] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 755.636005][T26523] 8021q: adding VLAN 0 to HW filter on device bond13 [ 755.734207][T26524] syzkaller0: entered promiscuous mode [ 755.734235][T26524] syzkaller0: entered allmulticast mode [ 756.594377][T26558] __nla_validate_parse: 5 callbacks suppressed [ 756.594401][T26558] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5020'. [ 757.386213][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5028'. [ 757.461594][T26576] pim6reg: entered allmulticast mode [ 757.463316][T26574] pim6reg: left allmulticast mode [ 757.535642][T26587] sctp: [Deprecated]: syz.0.5029 (pid 26587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.535642][T26587] Use struct sctp_sack_info instead [ 757.597615][T26566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5024'. [ 757.734818][T26579] syzkaller0: entered promiscuous mode [ 757.734847][T26579] syzkaller0: entered allmulticast mode [ 758.302397][T26619] netlink: 'syz.3.5037': attribute type 11 has an invalid length. [ 760.602708][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 760.602734][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 760.772557][T26600] netlink: 'syz.1.5031': attribute type 1 has an invalid length. [ 760.773120][T26597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5031'. [ 760.773177][T26606] netlink: 'syz.1.5031': attribute type 2 has an invalid length. [ 760.804006][T26367] net_ratelimit: 24 callbacks suppressed [ 760.804076][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 760.900448][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 760.930752][T26625] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 761.011332][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 761.121534][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 761.142405][T26634] netlink: 'syz.3.5039': attribute type 1 has an invalid length. [ 761.184334][T26637] FAULT_INJECTION: forcing a failure. [ 761.184334][T26637] name failslab, interval 1, probability 0, space 0, times 0 [ 761.184372][T26637] CPU: 0 UID: 0 PID: 26637 Comm: syz.1.5042 Not tainted syzkaller #0 PREEMPT(full) [ 761.184398][T26637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 761.184412][T26637] Call Trace: [ 761.184422][T26637] [ 761.184433][T26637] dump_stack_lvl+0xe8/0x150 [ 761.184473][T26637] should_fail_ex+0x410/0x560 [ 761.184513][T26637] should_failslab+0xa8/0x100 [ 761.184551][T26637] __kvmalloc_node_noprof+0x171/0x820 [ 761.184587][T26637] ? bpf_compute_scc+0xb8/0xb10 [ 761.184614][T26637] ? bpf_compute_scc+0xb8/0xb10 [ 761.184647][T26637] bpf_compute_scc+0xb8/0xb10 [ 761.184702][T26637] bpf_check+0x271e/0x2ef0 [ 761.184761][T26637] ? __pfx_bpf_check+0x10/0x10 [ 761.184794][T26637] ? bpf_obj_name_cpy+0x194/0x1e0 [ 761.184823][T26637] bpf_prog_load+0x14d1/0x1c20 [ 761.184867][T26637] ? __pfx_bpf_prog_load+0x10/0x10 [ 761.184927][T26637] __sys_bpf+0xd0d/0xd90 [ 761.184968][T26637] ? __pfx___sys_bpf+0x10/0x10 [ 761.185012][T26637] ? __fget_files+0x2a/0x420 [ 761.185057][T26637] ? ksys_write+0x242/0x270 [ 761.185088][T26637] ? __pfx_ksys_write+0x10/0x10 [ 761.185121][T26637] __x64_sys_bpf+0xba/0xd0 [ 761.185153][T26637] do_syscall_64+0x166/0x520 [ 761.185176][T26637] ? trace_irq_disable+0x3b/0x140 [ 761.185203][T26637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.185227][T26637] ? clear_bhb_loop+0x70/0xc0 [ 761.185257][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.185279][T26637] RIP: 0033:0x7fb2cfd9f559 [ 761.185302][T26637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.185322][T26637] RSP: 002b:00007fb2d0ccb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 761.185347][T26637] RAX: ffffffffffffffda RBX: 00007fb2d0025fa0 RCX: 00007fb2cfd9f559 [ 761.185365][T26637] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 761.185380][T26637] RBP: 00007fb2d0ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 761.185395][T26637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.185409][T26637] R13: 00007fb2d0026038 R14: 00007fb2d0025fa0 R15: 00007ffec0039fc8 [ 761.185447][T26637] [ 761.255865][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 761.500832][T26634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 761.539973][T26638] bond7: (slave veth11): Enslaving as an active interface with a down link [ 761.545515][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 761.655255][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 761.716362][T26634] bond7 (unregistering): (slave veth11): Releasing active interface [ 761.718153][T26652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5046'. [ 761.757253][T26634] bond7 (unregistering): Released all slaves [ 761.821629][T26654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5047'. [ 761.821655][T26654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5047'. [ 761.826359][T26660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.867455][T26660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.879350][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 761.911338][T26660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.916116][T26659] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.930897][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 761.937875][T26656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5045'. [ 761.952142][T26659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5045'. [ 762.039325][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 762.354647][T26678] ip6tnl4: entered allmulticast mode [ 762.357896][ T1400] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 762.358323][ T1400] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 762.384349][ T5644] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 762.449359][ T5644] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 762.748956][T26695] FAULT_INJECTION: forcing a failure. [ 762.748956][T26695] name failslab, interval 1, probability 0, space 0, times 0 [ 762.748997][T26695] CPU: 1 UID: 0 PID: 26695 Comm: syz.3.5056 Not tainted syzkaller #0 PREEMPT(full) [ 762.749022][T26695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 762.749036][T26695] Call Trace: [ 762.749046][T26695] [ 762.749055][T26695] dump_stack_lvl+0xe8/0x150 [ 762.749095][T26695] should_fail_ex+0x410/0x560 [ 762.749135][T26695] should_failslab+0xa8/0x100 [ 762.749172][T26695] __kvmalloc_node_noprof+0x171/0x820 [ 762.749207][T26695] ? __kvmalloc_node_noprof+0x340/0x820 [ 762.749237][T26695] ? bpf_compute_scc+0xd2/0xb10 [ 762.749263][T26695] ? bpf_compute_scc+0xd2/0xb10 [ 762.749298][T26695] bpf_compute_scc+0xd2/0xb10 [ 762.749348][T26695] bpf_check+0x271e/0x2ef0 [ 762.749399][T26695] ? __pfx_bpf_check+0x10/0x10 [ 762.749433][T26695] ? bpf_obj_name_cpy+0x194/0x1e0 [ 762.749461][T26695] bpf_prog_load+0x14d1/0x1c20 [ 762.749507][T26695] ? __pfx_bpf_prog_load+0x10/0x10 [ 762.749568][T26695] __sys_bpf+0xd0d/0xd90 [ 762.749608][T26695] ? __pfx___sys_bpf+0x10/0x10 [ 762.749659][T26695] ? __fget_files+0x2a/0x420 [ 762.749705][T26695] ? ksys_write+0x242/0x270 [ 762.749736][T26695] ? __pfx_ksys_write+0x10/0x10 [ 762.749770][T26695] __x64_sys_bpf+0xba/0xd0 [ 762.749802][T26695] do_syscall_64+0x166/0x520 [ 762.749824][T26695] ? trace_irq_disable+0x3b/0x140 [ 762.749850][T26695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.749873][T26695] ? clear_bhb_loop+0x70/0xc0 [ 762.749901][T26695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.749924][T26695] RIP: 0033:0x7f35bdb9f559 [ 762.749944][T26695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.749964][T26695] RSP: 002b:00007f35bea5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 762.749990][T26695] RAX: ffffffffffffffda RBX: 00007f35bde25fa0 RCX: 00007f35bdb9f559 [ 762.750007][T26695] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 762.750023][T26695] RBP: 00007f35bea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 762.750038][T26695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.750053][T26695] R13: 00007f35bde26038 R14: 00007f35bde25fa0 R15: 00007fffb1083088 [ 762.750090][T26695] [ 763.092353][ T5644] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 763.328261][T26709] batman_adv: batadv0: Adding interface: syzkaller0 [ 763.328282][T26709] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.369533][T26709] batman_adv: batadv0: Interface activated: syzkaller0 [ 763.563012][T26703] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 763.676607][T26703] batman_adv: batadv0: Removing interface: syzkaller0 [ 763.686937][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.708849][T26728] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.740042][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.740187][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.740318][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.740448][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.740575][T26727] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 763.915983][T26720] lo: left promiscuous mode [ 763.916015][T26720] lo: left allmulticast mode [ 766.119431][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 766.898619][T26738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.978608][ T1400] net_ratelimit: 13 callbacks suppressed [ 766.978634][ T1400] bond5: (slave bridge6): failed to get link speed/duplex [ 767.090420][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 767.201693][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 767.324214][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 767.430744][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 767.458277][T26783] validate_nla: 24 callbacks suppressed [ 767.458302][T26783] netlink: 'syz.0.5076': attribute type 1 has an invalid length. [ 767.579864][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 767.644299][T11333] IPVS: starting estimator thread 0... [ 767.647591][T26792] ip6tnl2: entered promiscuous mode [ 767.647608][T26792] ip6tnl2: entered allmulticast mode [ 767.729225][T26799] IPVS: using max 37 ests per chain, 88800 per kthread [ 767.758164][T26796] netlink: 'syz.6.5073': attribute type 3 has an invalid length. [ 767.852142][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 767.960740][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 768.080131][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 768.193217][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 768.247972][T26817] No such timeout policy "syz1" [ 768.345991][T26825] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5083'. [ 768.495906][T26829] xt_hashlimit: size too large, truncated to 1048576 [ 768.645234][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'. [ 768.645275][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'. [ 768.844920][T11332] nci: nci_ntf_packet: unknown ntf opcode 0x3b [ 769.636434][T26857] lo: entered promiscuous mode [ 769.705530][T26859] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 769.738331][T26859] bond1: (slave lo): Enslaving as an active interface with an up link [ 770.839760][ T11] block nbd1024: Possible stuck request ffff88803dab7000: control (read@0,1024B). Runtime 60 seconds [ 770.839809][ T11] block nbd1024: Possible stuck request ffff88803dab71c0: control (read@1024,1024B). Runtime 60 seconds [ 770.839840][ T11] block nbd1024: Possible stuck request ffff88803dab7380: control (read@2048,1024B). Runtime 60 seconds [ 770.839871][ T11] block nbd1024: Possible stuck request ffff88803dab7540: control (read@3072,1024B). Runtime 60 seconds [ 771.454516][T26830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.875044][T26893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 772.009580][ T1400] net_ratelimit: 28 callbacks suppressed [ 772.009605][ T1400] bond5: (slave bridge6): failed to get link speed/duplex [ 772.125648][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 772.229692][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 772.340437][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 772.457123][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 772.621536][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 772.730549][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 772.746846][T26931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 772.841810][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 772.846738][T26938] netlink: 'syz.0.5106': attribute type 1 has an invalid length. [ 772.920314][T26938] 8021q: adding VLAN 0 to HW filter on device bond10 [ 772.955572][T26940] bond10: (slave geneve4): making interface the new active one [ 772.958941][T26940] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 773.009189][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 773.177996][T26946] netlink: 'syz.0.5109': attribute type 16 has an invalid length. [ 773.178023][T26946] netlink: 'syz.0.5109': attribute type 17 has an invalid length. [ 773.233498][T26946] 8021q: adding VLAN 0 to HW filter on device .` [ 773.263309][T26946] bond_slave_0: left allmulticast mode [ 773.304361][T26946] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 773.325194][T26946] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 773.328640][T26946] ip6tnl1: left allmulticast mode [ 773.346531][T26946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.424792][T26946] vti0: left promiscuous mode [ 773.427843][T26946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.444787][T26946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 773.460634][T26946] bond4: left promiscuous mode [ 773.467957][T26946] bond5: left promiscuous mode [ 773.483791][T26946] geneve3: left promiscuous mode [ 773.488257][T26946] geneve0: entered promiscuous mode [ 773.517955][T26946] bond6: left allmulticast mode [ 773.521721][T26946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 773.537522][T26946] batadv_slave_0: entered promiscuous mode [ 773.550773][T26946] 8021q: adding VLAN 0 to HW filter on device bond9 [ 773.629314][T26369] netdevsim netdevsim0 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 773.629509][T26369] netdevsim netdevsim0 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 773.629721][T26369] netdevsim netdevsim0 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 773.629878][T26369] netdevsim netdevsim0 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 773.793430][T26958] netlink: 'syz.0.5113': attribute type 1 has an invalid length. [ 773.830504][T26958] bond11: entered promiscuous mode [ 773.831082][T26958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 773.870991][T26958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 773.871294][T26958] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 773.871310][T26958] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 773.880148][T26958] bond11: (slave xfrm1): making interface the new active one [ 773.880175][T26958] xfrm1: entered promiscuous mode [ 773.898049][T26958] bond11: (slave xfrm1): Enslaving as an active interface with an up link [ 773.995459][T26964] syzkaller0: entered promiscuous mode [ 773.995486][T26964] syzkaller0: entered allmulticast mode [ 774.052993][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 774.244410][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5118'. [ 774.354102][T26972] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5118'. [ 774.516017][ T5001] udevd[5001]: worker [25059] /devices/virtual/block/nbd1024 is taking a long time [ 774.553962][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5122'. [ 774.615555][T26993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5124'. [ 774.706881][T26997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5124'. [ 775.076928][T27008] netlink: 'syz.1.5129': attribute type 3 has an invalid length. [ 775.092130][T27010] sctp: [Deprecated]: syz.1.5129 (pid 27010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.092130][T27010] Use struct sctp_sack_info instead [ 775.130903][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.130903][T27015] Use struct sctp_sack_info instead [ 775.130946][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.130946][T27015] Use struct sctp_sack_info instead [ 775.130976][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.130976][T27015] Use struct sctp_sack_info instead [ 775.131005][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131005][T27015] Use struct sctp_sack_info instead [ 775.131033][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131033][T27015] Use struct sctp_sack_info instead [ 775.131094][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131094][T27015] Use struct sctp_sack_info instead [ 775.131123][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131123][T27015] Use struct sctp_sack_info instead [ 775.131160][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131160][T27015] Use struct sctp_sack_info instead [ 775.131189][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131189][T27015] Use struct sctp_sack_info instead [ 775.131217][T27015] sctp: [Deprecated]: syz.1.5129 (pid 27015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.131217][T27015] Use struct sctp_sack_info instead [ 775.345418][T26997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.435416][T27017] bond7: option lp_interval: invalid value (0) [ 775.435443][T27017] bond7: option lp_interval: allowed values 1 - 2147483647 [ 775.438101][T27017] bond7 (unregistering): Released all slaves [ 775.662529][T27024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5131'. [ 775.987967][T27033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5132'. [ 775.988048][T27033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5132'. [ 775.988065][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5132'. [ 776.101987][T27034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5132'. [ 776.600786][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 776.924325][T27085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.046402][T27047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 777.052212][T26366] net_ratelimit: 24 callbacks suppressed [ 777.052274][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 777.160135][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 777.271090][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 777.380997][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 777.515297][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 777.622910][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 777.729206][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 777.840484][T27112] x_tables: duplicate underflow at hook 2 [ 777.860425][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 777.865789][T27115] syzkaller1: entered promiscuous mode [ 777.865813][T27115] syzkaller1: entered allmulticast mode [ 778.107091][T27120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.114457][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 778.581760][T27138] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 778.696952][T27138] 8021q: adding VLAN 0 to HW filter on device bond12 [ 779.096942][T27145] netlink: 'syz.6.5156': attribute type 4 has an invalid length. [ 779.159330][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 779.159579][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.427909][T27165] __nla_validate_parse: 8 callbacks suppressed [ 779.427932][T27165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5161'. [ 779.428235][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5161'. [ 779.502029][T27173] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 779.536479][T27149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5157'. [ 779.627932][T27173] netlink: 'syz.3.5161': attribute type 21 has an invalid length. [ 779.971048][T27184] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 780.248015][T27191] syzkaller0: entered promiscuous mode [ 780.248042][T27191] syzkaller0: entered allmulticast mode [ 780.292426][T27204] x_tables: unsorted entry at hook 1 [ 780.601310][T27202] bond11: left promiscuous mode [ 780.601339][T27202] xfrm1: left promiscuous mode [ 780.696777][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5174'. [ 780.987975][T27235] ip6gretap1: entered allmulticast mode [ 781.007352][T27235] batman_adv: batadv0: Adding interface: ip6gretap1 [ 781.007555][T27235] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.007905][T27235] batman_adv: batadv0: Interface activated: ip6gretap1 [ 781.251568][T27249] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5182'. [ 781.270499][T27251] nbd: must specify an index to disconnect [ 781.292981][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5183'. [ 781.293035][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5183'. [ 781.460833][T27260] bridge0: port 1(syz_tun) entered blocking state [ 781.460904][T27260] bridge0: port 1(syz_tun) entered disabled state [ 781.461047][T27260] syz_tun: entered allmulticast mode [ 781.482882][T27260] syz_tun: entered promiscuous mode [ 781.483621][T27260] bridge0: port 1(syz_tun) entered blocking state [ 781.483745][T27260] bridge0: port 1(syz_tun) entered forwarding state [ 781.549980][T27261] bridge0: port 2(ip6gretap0) entered blocking state [ 781.550083][T27261] bridge0: port 2(ip6gretap0) entered disabled state [ 781.550254][T27261] ip6gretap0: entered allmulticast mode [ 781.563202][T27261] ip6gretap0: entered promiscuous mode [ 781.578736][T27261] bridge0: port 2(ip6gretap0) entered blocking state [ 781.578830][T27261] bridge0: port 2(ip6gretap0) entered forwarding state [ 781.608442][T27263] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 781.809635][T27269] pimreg0: tun_chr_ioctl cmd 1074025677 [ 781.809781][T27269] pimreg0: linktype set to 1 [ 781.810358][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5188'. [ 781.810398][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5188'. [ 781.917630][T27272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5189'. [ 781.968095][T27272] syz.5.5189: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 781.968180][T27272] CPU: 0 UID: 0 PID: 27272 Comm: syz.5.5189 Not tainted syzkaller #0 PREEMPT(full) [ 781.968208][T27272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 781.968224][T27272] Call Trace: [ 781.968234][T27272] [ 781.968244][T27272] dump_stack_lvl+0xe8/0x150 [ 781.968289][T27272] warn_alloc+0x24d/0x270 [ 781.968321][T27272] ? kasan_save_track+0x4f/0x80 [ 781.968353][T27272] ? kasan_save_track+0x3e/0x80 [ 781.968399][T27272] ? __pfx_warn_alloc+0x10/0x10 [ 781.968427][T27272] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 781.968462][T27272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.968508][T27272] __vmalloc_node_range_noprof+0x127/0x1540 [ 781.968563][T27272] ? rcu_is_watching+0x16/0xb0 [ 781.968605][T27272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 781.968634][T27272] ? __kmalloc_cache_noprof+0x31c/0x600 [ 781.968670][T27272] ? __kmalloc_cache_noprof+0x148/0x600 [ 781.968700][T27272] ? xskq_create+0x56/0x220 [ 781.968743][T27272] xskq_create+0x148/0x220 [ 781.968780][T27272] ? xsk_init_queue+0x8a/0xe0 [ 781.968818][T27272] xsk_init_queue+0x8a/0xe0 [ 781.968856][T27272] xsk_setsockopt+0x52a/0x960 [ 781.968895][T27272] ? __pfx_xsk_setsockopt+0x10/0x10 [ 781.968929][T27272] ? __pfx_aa_sk_perm+0x10/0x10 [ 781.968970][T27272] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 781.968993][T27272] ? __pfx_xsk_setsockopt+0x10/0x10 [ 781.969028][T27272] do_sock_setsockopt+0x17c/0x1b0 [ 781.969068][T27272] __x64_sys_setsockopt+0x13d/0x1b0 [ 781.969112][T27272] do_syscall_64+0x166/0x520 [ 781.969134][T27272] ? trace_irq_disable+0x3b/0x140 [ 781.969161][T27272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.969186][T27272] ? clear_bhb_loop+0x70/0xc0 [ 781.969215][T27272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.969239][T27272] RIP: 0033:0x7fd37399f559 [ 781.969262][T27272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.969282][T27272] RSP: 002b:00007fd374902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 781.969307][T27272] RAX: ffffffffffffffda RBX: 00007fd373c25fa0 RCX: 00007fd37399f559 [ 781.969325][T27272] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 781.969341][T27272] RBP: 00007fd373a36b20 R08: 0000000000000004 R09: 0000000000000000 [ 781.969356][T27272] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 781.969380][T27272] R13: 00007fd373c26038 R14: 00007fd373c25fa0 R15: 00007ffe2ae7ca18 [ 781.969420][T27272] [ 782.092602][ T62] net_ratelimit: 96 callbacks suppressed [ 782.092655][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 782.143797][T27272] Mem-Info: [ 782.143846][T27272] active_anon:8689 inactive_anon:0 isolated_anon:0 [ 782.143846][T27272] active_file:0 inactive_file:44217 isolated_file:0 [ 782.143846][T27272] unevictable:0 dirty:167 writeback:0 [ 782.143846][T27272] slab_reclaimable:12640 slab_unreclaimable:125320 [ 782.143846][T27272] mapped:42450 shmem:2669 pagetables:1501 [ 782.143846][T27272] sec_pagetables:0 bounce:0 [ 782.143846][T27272] kernel_misc_reclaimable:0 [ 782.143846][T27272] free:1220671 free_pcp:14302 free_cma:0 [ 782.143990][T27272] Node 0 active_anon:34756kB inactive_anon:0kB active_file:0kB inactive_file:176660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169800kB dirty:668kB writeback:0kB shmem:10676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17100kB pagetables:5848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.144154][T27272] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 782.144315][T27272] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.144509][T27272] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 782.144644][T27272] Node 0 DMA32 free:925200kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34756kB inactive_anon:0kB active_file:0kB inactive_file:176660kB unevictable:0kB writepending:668kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:52424kB local_pcp:31428kB free_cma:0kB [ 782.144951][T27272] lowmem_reserve[]: 0 0 0 0 0 [ 782.145066][T27272] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.145230][T27272] lowmem_reserve[]: 0 0 0 0 0 [ 782.145342][T27272] Node 1 Normal free:3942124kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4784kB local_pcp:0kB free_cma:0kB [ 782.145524][T27272] lowmem_reserve[]: 0 0 0 0 0 [ 782.170712][T27272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 782.170980][T27272] Node 0 DMA32: 1036*4kB (UM) 164*8kB (UME) 204*16kB (UM) 1195*32kB (UME) 582*64kB (UME) 140*128kB (UME) 161*256kB (UM) 99*512kB (UM) 70*1024kB (UM) 4*2048kB (UM) 159*4096kB (UME) = 925168kB [ 782.171488][T27272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 782.171846][T27272] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942124kB [ 782.172338][T27272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.172411][T27272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.198520][T27272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 782.198584][T27272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 782.198650][T27272] 46907 total pagecache pages [ 782.198742][T27272] 0 pages in swap cache [ 782.198764][T27272] Free swap = 124996kB [ 782.198792][T27272] Total swap = 124996kB [ 782.198815][T27272] 2097051 pages RAM [ 782.198848][T27272] 0 pages HighMem/MovableOnly [ 782.198870][T27272] 433831 pages reserved [ 782.198892][T27272] 0 pages cma reserved [ 782.207754][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 782.357987][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 782.376401][ C0] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 782.466784][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 782.575062][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 782.693371][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 782.716760][T27277] netlink: 'syz.1.5190': attribute type 8 has an invalid length. [ 782.800586][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 782.864944][T27282] veth0: entered promiscuous mode [ 782.910079][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 782.971780][T27279] veth0: left promiscuous mode [ 783.020234][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 783.298108][T27297] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 783.531588][T27300] bridge0: port 1(syz_tun) entered disabled state [ 783.538764][T27300] bridge0: port 2(ip6gretap0) entered disabled state [ 783.562961][T27307] netlink: 'syz.6.5196': attribute type 16 has an invalid length. [ 783.562987][T27307] netlink: 'syz.6.5196': attribute type 17 has an invalid length. [ 783.933424][T27307] bridge0: port 1(syz_tun) entered blocking state [ 783.933650][T27307] bridge0: port 1(syz_tun) entered forwarding state [ 783.980404][T27307] bridge0: port 2(ip6gretap0) entered blocking state [ 783.980537][T27307] bridge0: port 2(ip6gretap0) entered forwarding state [ 784.265807][T27307] ip6gretap1: left allmulticast mode [ 784.346956][T27310] syzkaller1: entered promiscuous mode [ 784.346984][T27310] syzkaller1: entered allmulticast mode [ 784.464867][T27324] tc_dump_action: action bad kind [ 784.465439][T27321] netlink: 'syz.1.5200': attribute type 1 has an invalid length. [ 784.574280][T27321] 8021q: adding VLAN 0 to HW filter on device bond14 [ 784.585129][T27327] dummy0: left promiscuous mode [ 784.585154][T27327] dummy0: left allmulticast mode [ 784.646419][T27327] bond14: (slave dummy0): making interface the new active one [ 784.661553][T27327] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 784.666158][T27331] netlink: 'syz.6.5203': attribute type 1 has an invalid length. [ 785.388545][T27363] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 786.162862][T27371] __nla_validate_parse: 1 callbacks suppressed [ 786.162886][T27371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 786.163284][T27371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 786.262278][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5215'. [ 786.262309][T27387] netlink: 'syz.5.5215': attribute type 2 has an invalid length. [ 786.262325][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5215'. [ 786.647856][T27406] netlink: 'syz.3.5219': attribute type 1 has an invalid length. [ 786.649061][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5218'. [ 786.694440][T27406] xt_TCPMSS: Only works on TCP SYN packets [ 786.697976][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5219'. [ 786.728265][T27406] bond7: (slave geneve3): making interface the new active one [ 786.738631][T27406] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 786.750563][ T62] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 786.752536][ T62] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 786.752590][ T62] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 786.752630][ T62] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 786.883824][T27403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5217'. [ 787.073362][T27415] xt_hashlimit: overflow, try lower: 8/0 [ 787.178074][T27429] net_ratelimit: 24 callbacks suppressed [ 787.178098][T27429] ip_tables: iptables: counters copy to user failed while replacing table [ 787.195438][T27429] ip_tables: iptables: counters copy to user failed while replacing table [ 787.379382][T27440] xt_TCPMSS: Only works on TCP SYN packets [ 787.496317][T27439] xt_l2tp: invalid flags combination: 0 [ 787.568173][T27431] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 787.590310][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 787.709704][T26369] bond5: (slave bridge6): failed to get link speed/duplex [ 787.822225][T26366] bond5: (slave bridge6): failed to get link speed/duplex [ 787.869920][T27456] netlink: 'syz.1.5229': attribute type 1 has an invalid length. [ 787.919563][T27456] bond15: entered promiscuous mode [ 787.922310][T27456] 8021q: adding VLAN 0 to HW filter on device bond15 [ 787.941569][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 787.944352][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 787.944395][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 787.997387][T27459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5229'. [ 788.052535][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 788.119382][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.160739][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 788.223929][T27470] bridge0: entered promiscuous mode [ 788.223957][T27470] bridge0: entered allmulticast mode [ 788.271266][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 788.382166][T26371] bond5: (slave bridge6): failed to get link speed/duplex [ 788.741243][T27485] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 788.747053][T27485] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 788.747347][T27485] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 788.747632][T27485] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 788.796897][T27485] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 789.606351][T27526] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 789.617510][T27526] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 789.707098][T27524] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 790.408499][T27539] bridge0: port 1(syz_tun) entered disabled state [ 790.428923][T27539] bridge0: port 2(ip6gretap0) entered disabled state [ 790.566907][T27552] validate_nla: 28 callbacks suppressed [ 790.566930][T27552] netlink: 'syz.0.5246': attribute type 1 has an invalid length. [ 790.679442][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 790.881846][T27539] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 790.920682][T17235] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.920742][T17235] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 790.920815][T17235] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.920844][T17235] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 790.920883][T17235] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.920911][T17235] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 790.920948][T17235] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.920976][T17235] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 791.218265][T27580] __nla_validate_parse: 2 callbacks suppressed [ 791.218288][T27580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5253'. [ 791.333499][T27584] block nbd0: reconnected socket [ 791.356325][T27584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5254'. [ 791.356352][T27584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5254'. [ 791.356373][T27584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5254'. [ 791.430251][T26373] dvmrp6: left allmulticast mode [ 791.457872][T26373] bond0 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 791.458335][T26373] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 791.458931][T26373] ip6gretap2 (unregistering): left allmulticast mode [ 791.662895][T26373] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 791.825701][T26373] bond1 (unregistering): (slave bond2): Releasing backup interface [ 791.826439][T26373] bond1 (unregistering): Released all slaves [ 791.850423][T26373] bond2 (unregistering): Released all slaves [ 791.879752][T26373] bond4 (unregistering): Released all slaves [ 791.900067][T26373] bond3 (unregistering): (slave veth3): Releasing active interface [ 791.900962][T26373] bond3 (unregistering): Released all slaves [ 791.928356][T26373] bond0 (unregistering): Released all slaves [ 791.950632][T26373] bond5 (unregistering): Released all slaves [ 791.973518][T26373] bond6 (unregistering): Released all slaves [ 792.007283][T26373] bond7 (unregistering): Released all slaves [ 792.037966][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5254'. [ 792.037996][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5254'. [ 792.038040][T27591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5254'. [ 792.066549][ T5645] block nbd0: Receive control failed (result -32) [ 792.112087][T27594] Cannot find add_set index 4 as target [ 792.232704][T27596] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 792.269551][ T62] net_ratelimit: 19 callbacks suppressed [ 792.269574][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 792.373044][T26373] tipc: Left network mode [ 792.419185][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 792.579351][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 792.635135][T27605] tc_dump_action: action bad kind [ 792.656200][T27607] ip_tables: iptables: counters copy to user failed while replacing table [ 792.691388][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 792.959822][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 793.089625][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 793.124461][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 793.220049][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 793.389649][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 793.540175][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 793.836118][T27562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.607969][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5270'. [ 794.749445][T26367] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.750777][T11332] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.750820][T11332] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.750858][T11332] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.256331][T27686] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5274'. [ 795.686621][T27687] syzkaller1: entered promiscuous mode [ 795.686648][T27687] syzkaller1: entered allmulticast mode [ 795.706355][T26373] hsr_slave_1: left promiscuous mode [ 796.124143][T27713] netlink: 'syz.1.5283': attribute type 2 has an invalid length. [ 796.124173][T27713] nbd: couldn't find device at index 5 [ 796.301875][T27680] rxe_eth0 speed is unknown, defaulting to 1000 [ 796.782376][T27680] ip6gretap0 speed is unknown, defaulting to 1000 [ 796.800530][T27723] tipc: Enabling of bearer rejected, already enabled [ 796.803283][T26373] IPVS: stop unused estimator thread 0... [ 796.911651][T27726] tipc: Resetting bearer [ 796.973153][T27726] tipc: Enabling of bearer rejected, already enabled [ 797.299674][T26367] net_ratelimit: 15 callbacks suppressed [ 797.299698][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 797.410313][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 797.521475][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 797.635485][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 797.754896][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 797.900235][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 797.946241][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5294'. [ 797.971552][T27770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5294'. [ 798.011148][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 798.120216][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 798.232275][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 798.343707][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 798.410511][T27774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5295'. [ 798.831873][T27789] siw: device registration error -23 [ 798.868241][T27794] netlink: 1244 bytes leftover after parsing attributes in process `syz.6.5304'. [ 798.906362][T27795] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5303'. [ 799.035342][T27805] netlink: 'syz.6.5306': attribute type 1 has an invalid length. [ 799.251472][T27806] pim6reg: entered allmulticast mode [ 799.662985][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5311'. [ 799.732804][T27822] 8021q: adding VLAN 0 to HW filter on device bond16 [ 799.830752][T27825] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 799.876494][T27804] pim6reg: left allmulticast mode [ 800.227807][T27845] netlink: 'syz.3.5315': attribute type 14 has an invalid length. [ 800.423878][T27852] netlink: 'syz.6.5316': attribute type 4 has an invalid length. [ 800.736814][T27864] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.5320'. [ 800.736849][T27864] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.5320'. [ 800.758467][T27864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5320'. [ 800.874186][T27867] tipc: Started in network mode [ 800.874222][T27867] tipc: Node identity 1a9f12587e9, cluster identity 4711 [ 800.874782][T27867] tipc: Enabled bearer , priority 0 [ 800.875417][T27867] syzkaller0: entered promiscuous mode [ 800.875439][T27867] syzkaller0: entered allmulticast mode [ 800.921833][ T11] block nbd1024: Possible stuck request ffff88803dab7000: control (read@0,1024B). Runtime 90 seconds [ 800.921882][ T11] block nbd1024: Possible stuck request ffff88803dab71c0: control (read@1024,1024B). Runtime 90 seconds [ 800.921914][ T11] block nbd1024: Possible stuck request ffff88803dab7380: control (read@2048,1024B). Runtime 90 seconds [ 800.921950][ T11] block nbd1024: Possible stuck request ffff88803dab7540: control (read@3072,1024B). Runtime 90 seconds [ 801.356496][T27886] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5328'. [ 801.426630][T27889] netlink: 'syz.6.5327': attribute type 1 has an invalid length. [ 801.533969][T27891] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 801.991207][T11840] tipc: Node number set to 1678709336 [ 802.315576][T27925] netlink: 'syz.6.5337': attribute type 1 has an invalid length. [ 802.409232][T11332] net_ratelimit: 30 callbacks suppressed [ 802.409258][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 802.519745][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 802.631693][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 802.739449][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 802.851210][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 802.964319][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 803.070846][ T62] bond5: (slave bridge6): failed to get link speed/duplex [ 803.166941][T27961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.182576][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 803.185728][T27961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.251803][T27956] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.278771][T27956] syzkaller1: entered promiscuous mode [ 803.278801][T27956] syzkaller1: entered allmulticast mode [ 803.302465][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 803.495551][T27967] xt_hashlimit: size too large, truncated to 1048576 [ 803.573126][T27969] xt_hashlimit: size too large, truncated to 1048576 [ 804.205536][T27989] __nla_validate_parse: 8 callbacks suppressed [ 804.205561][T27989] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5354'. [ 804.781657][T28010] syzkaller0: entered promiscuous mode [ 804.781682][T28010] syzkaller0: entered allmulticast mode [ 805.414699][T28034] netlink: 'syz.6.5365': attribute type 1 has an invalid length. [ 805.484673][T28034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.774301][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'. [ 805.917574][T28050] netlink: 'syz.6.5372': attribute type 3 has an invalid length. [ 806.198068][T28066] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 806.326638][T28068] xt_CT: No such helper "netbios-ns" [ 806.693239][T28089] bridge0: port 3(bridge_slave_0) entered blocking state [ 806.695325][T28089] bridge0: port 3(bridge_slave_0) entered disabled state [ 806.695611][T28089] bridge_slave_0: entered allmulticast mode [ 806.806950][T28089] bridge_slave_0: left allmulticast mode [ 806.807146][T28089] bridge0: port 3(bridge_slave_0) entered disabled state [ 806.837216][T28089] ip6gretap0: left allmulticast mode [ 806.837246][T28089] ip6gretap0: left promiscuous mode [ 806.837490][T28089] bridge0: port 2(ip6gretap0) entered disabled state [ 806.870667][T28089] syz_tun: left allmulticast mode [ 806.870700][T28089] syz_tun: left promiscuous mode [ 806.870938][T28089] bridge0: port 1(syz_tun) entered disabled state [ 807.138815][T28098] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 807.227463][T28111] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5382'. [ 807.227491][T28111] tc_dump_action: action bad kind [ 807.258820][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5384'. [ 807.432039][T11332] net_ratelimit: 34 callbacks suppressed [ 807.432064][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 807.470186][T28119] 8021q: VLANs not supported on lo [ 807.470283][T28119] 8021q: VLANs not supported on lo [ 807.470371][T28119] 8021q: VLANs not supported on lo [ 807.470454][T28119] 8021q: VLANs not supported on lo [ 807.470539][T28119] 8021q: VLANs not supported on lo [ 807.470623][T28119] 8021q: VLANs not supported on lo [ 807.470741][T28119] 8021q: VLANs not supported on lo [ 807.491543][T28119] 8021q: VLANs not supported on lo [ 807.491946][T28119] 8021q: VLANs not supported on lo [ 807.492150][T28119] 8021q: VLANs not supported on lo [ 807.492368][T28119] 8021q: VLANs not supported on lo [ 807.492584][T28119] 8021q: VLANs not supported on lo [ 807.492870][T28119] 8021q: VLANs not supported on lo [ 807.493086][T28119] 8021q: VLANs not supported on lo [ 807.512837][T28119] 8021q: VLANs not supported on lo [ 807.513130][T28119] 8021q: VLANs not supported on lo [ 807.513341][T28119] 8021q: VLANs not supported on lo [ 807.513544][T28119] 8021q: VLANs not supported on lo [ 807.513828][T28119] 8021q: VLANs not supported on lo [ 807.514035][T28119] 8021q: VLANs not supported on lo [ 807.514276][T28119] 8021q: VLANs not supported on lo [ 807.550055][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 807.569513][T28119] 8021q: VLANs not supported on lo [ 807.592615][T28119] 8021q: VLANs not supported on lo [ 807.592747][T28119] 8021q: VLANs not supported on lo [ 807.592842][T28119] 8021q: VLANs not supported on lo [ 807.593049][T28119] 8021q: VLANs not supported on lo [ 807.593257][T28119] 8021q: VLANs not supported on lo [ 807.593632][T28119] 8021q: VLANs not supported on lo [ 807.593915][T28119] 8021q: VLANs not supported on lo [ 807.594111][T28119] 8021q: VLANs not supported on lo [ 807.594326][T28119] 8021q: VLANs not supported on lo [ 807.621121][T28119] 8021q: VLANs not supported on lo [ 807.621226][T28119] 8021q: VLANs not supported on lo [ 807.662422][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 807.770761][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 807.833624][T28126] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 807.931503][T28130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 807.934183][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 807.960114][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 808.041237][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 808.098502][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 808.205342][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 808.226958][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 808.243387][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 808.399990][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 808.511285][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 808.513266][T28160] Unsupported ieee802154 address type: 0 [ 808.619873][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 808.754863][T28170] netlink: 'syz.0.5397': attribute type 39 has an invalid length. [ 809.038581][T28184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5401'. [ 810.376974][T28218] bond8: entered promiscuous mode [ 810.376999][T28218] bond8: entered allmulticast mode [ 810.404207][T28223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5412'. [ 810.436711][T28225] bond9: entered promiscuous mode [ 810.436803][T28225] bond9: entered allmulticast mode [ 810.549912][T28231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5412'. [ 810.550054][T28231] lo: left promiscuous mode [ 810.585169][T28231] tunl0: left promiscuous mode [ 810.597634][T28231] gre0: left promiscuous mode [ 810.607800][T28231] gretap0: left promiscuous mode [ 810.622081][T28231] erspan0: left promiscuous mode [ 810.641147][T28231] ip_vti0: left promiscuous mode [ 810.643509][T28231] ip6_vti0: left promiscuous mode [ 810.644102][T28231] sit0: left promiscuous mode [ 810.644621][T28231] ip6tnl0: left promiscuous mode [ 810.656129][T28231] ip6gre0: left promiscuous mode [ 810.666447][T28231] syz_tun: left promiscuous mode [ 810.700035][T28231] ip6gretap0: left promiscuous mode [ 810.707261][T28231] bridge0: left promiscuous mode [ 810.707916][T28231] vcan0: left promiscuous mode [ 810.728927][T28231] bond0: left promiscuous mode [ 810.746699][T28231] nlmon0: left promiscuous mode [ 810.753575][T28231] batadv0: left promiscuous mode [ 810.766705][T28231] vxcan0: left promiscuous mode [ 810.767443][T28231] vxcan1: left promiscuous mode [ 810.782369][T28231] veth1: left promiscuous mode [ 810.803240][T28231] wg0: left promiscuous mode [ 810.804034][T28231] wg2: left promiscuous mode [ 810.808133][T28231] veth0_to_bridge: left promiscuous mode [ 810.832046][T28231] veth1_to_bridge: left promiscuous mode [ 810.841989][T28231] veth0_to_bond: left promiscuous mode [ 810.860761][T28231] bond_slave_0: left promiscuous mode [ 810.864046][T28231] veth1_to_bond: left promiscuous mode [ 810.867223][T28231] ¬0Ù: left promiscuous mode [ 810.884451][T28231] veth0_to_team: left promiscuous mode [ 810.885280][T28231] team_slave_0: left promiscuous mode [ 810.887473][T28231] veth1_to_team: left promiscuous mode [ 810.902090][T28231] team_slave_1: left promiscuous mode [ 810.914419][T28231] veth0_to_batadv: left promiscuous mode [ 810.931066][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 810.931296][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 810.938893][T28231] batadv_slave_0: left promiscuous mode [ 810.956247][T28231] veth1_to_batadv: left promiscuous mode [ 810.970742][T28231] batadv_slave_1: left promiscuous mode [ 810.971319][T28231] xfrm0: left promiscuous mode [ 810.971880][T28231] veth0_to_hsr: left promiscuous mode [ 810.982111][T28231] veth1_to_hsr: left promiscuous mode [ 811.002694][T28231] hsr0: left promiscuous mode [ 811.013202][T28231] veth1_virt_wifi: left promiscuous mode [ 811.013946][T28231] veth0_virt_wifi: left promiscuous mode [ 811.014479][T28231] virt_wifi0: left promiscuous mode [ 811.048504][T28231] v: left promiscuous mode [ 811.058704][T28231] macvlan0: left promiscuous mode [ 811.064512][T28231] macvlan1: left promiscuous mode [ 811.065322][T28231] ipvlan0: left promiscuous mode [ 811.076795][T28231] ipvlan1: left promiscuous mode [ 811.091271][T28231] geneve1: left promiscuous mode [ 811.092546][T28231] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 811.102279][T28231] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 811.116485][T28231] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 811.126755][T28231] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 811.136500][T28231] vti0: left promiscuous mode [ 811.143869][T28231] vxlan0: left promiscuous mode [ 811.144559][T28231] bond1: left promiscuous mode [ 811.166093][T28231] sit1: left promiscuous mode [ 811.166735][T28231] mac80211_hwsim hwsim67 syzkaller0: left promiscuous mode [ 811.190619][T28251] ip6gre1: entered allmulticast mode [ 811.254607][T28235] bridge2: entered promiscuous mode [ 811.295864][T28235] team0: Port device bridge2 added [ 811.694598][T28266] netlink: 'syz.6.5421': attribute type 34 has an invalid length. [ 811.694626][T28266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5421'. [ 811.762369][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 811.762583][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 811.762774][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 811.765305][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 811.765504][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5420'. [ 811.771730][T28266] bond3: option lacp_strict: invalid value (98) [ 811.835808][T28266] bond3 (unregistering): Released all slaves [ 811.851150][T28274] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 811.932111][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.084503][T28274] bond17: entered promiscuous mode [ 812.088515][T28274] 8021q: adding VLAN 0 to HW filter on device bond17 [ 812.147583][T28281] 8021q: adding VLAN 0 to HW filter on device bond17 [ 812.157826][T28281] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address [ 812.157856][T28281] bond17: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 812.196229][T28281] bond17: (slave wireguard0): making interface the new active one [ 812.196258][T28281] wireguard0: entered promiscuous mode [ 812.208255][T28281] bond17: (slave wireguard0): Enslaving as an active interface with an up link [ 812.216025][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.216381][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.221538][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.226779][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.227120][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.227389][T28272] netlink: 'syz.5.5420': attribute type 12 has an invalid length. [ 812.490464][T17235] net_ratelimit: 21 callbacks suppressed [ 812.490489][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 812.602131][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 812.710447][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 812.827932][T28304] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.910027][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 813.031631][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 813.080941][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 813.140142][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 813.719834][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.911347][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 814.033026][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 814.140419][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 815.104242][T28373] rxe_eth0 speed is unknown, defaulting to 1000 [ 815.368962][T28400] validate_nla: 26 callbacks suppressed [ 815.375054][T28400] netlink: 'syz.1.5451': attribute type 1 has an invalid length. [ 815.569449][T28408] syzkaller1: entered promiscuous mode [ 815.569474][T28408] syzkaller1: entered allmulticast mode [ 815.660613][T28414] syzkaller0: left promiscuous mode [ 815.660631][T28414] syzkaller0: left allmulticast mode [ 815.684324][T28410] xt_hashlimit: size too large, truncated to 1048576 [ 815.769827][T28416] xt_hashlimit: size too large, truncated to 1048576 [ 816.068848][T28429] netlink: 'syz.3.5458': attribute type 34 has an invalid length. [ 816.068874][T28429] __nla_validate_parse: 34 callbacks suppressed [ 816.068888][T28429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'. [ 816.105151][T28428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5459'. [ 816.208606][T28429] bond10: option lacp_strict: invalid value (112) [ 816.230242][T28429] bond10 (unregistering): Released all slaves [ 816.320526][T28373] ip6gretap0 speed is unknown, defaulting to 1000 [ 816.641189][T28443] netlink: 'syz.3.5462': attribute type 6 has an invalid length. [ 816.642477][T28443] sctp: [Deprecated]: syz.3.5462 (pid 28443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.642477][T28443] Use struct sctp_sack_info instead [ 816.792345][T28452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5464'. [ 816.962318][T28460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5467'. [ 817.115337][T28466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.132283][T28466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 817.132312][T28466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.602151][T11333] net_ratelimit: 22 callbacks suppressed [ 817.602176][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 817.710711][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 817.832454][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 817.940879][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 818.063303][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 818.171384][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 818.300277][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 818.680614][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 818.791465][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 818.899823][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 819.013916][T28510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5479'. [ 819.026617][T28522] netlink: 'syz.5.5481': attribute type 1 has an invalid length. [ 819.026642][T28522] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5481'. [ 819.056135][T28522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5481'. [ 819.056183][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 819.297782][T28524] vlan4: entered promiscuous mode [ 819.297978][T28524] vlan4: entered allmulticast mode [ 819.312759][T28524] bridge0: port 1(vlan4) entered blocking state [ 819.312970][T28524] bridge0: port 1(vlan4) entered disabled state [ 819.337865][T28527] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 819.590297][T28540] syzkaller0: entered promiscuous mode [ 819.590321][T28540] syzkaller0: entered allmulticast mode [ 819.750878][T28544] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 819.774514][T28544] netlink: 'syz.6.5482': attribute type 1 has an invalid length. [ 819.893549][T28544] bond3: entered promiscuous mode [ 819.894743][T28544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 820.756842][T28585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5498'. [ 820.927987][T28585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5498'. [ 820.994654][T28591] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 821.257958][T28602] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5501'. [ 821.443122][T28616] ip6gre2: entered promiscuous mode [ 821.443216][T28616] ip6gre2: entered allmulticast mode [ 822.317499][T28642] tipc: Resetting bearer [ 822.317813][T28642] tipc: Resetting bearer [ 822.634367][T26367] net_ratelimit: 33 callbacks suppressed [ 822.634394][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 822.635132][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5513'. [ 822.761085][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 822.773829][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5513'. [ 822.835098][T28653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5515'. [ 822.892850][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 822.999498][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 823.109599][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 823.185291][T28660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5518'. [ 823.219855][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 823.228467][T28660] FAULT_INJECTION: forcing a failure. [ 823.228467][T28660] name failslab, interval 1, probability 0, space 0, times 0 [ 823.228504][T28660] CPU: 0 UID: 0 PID: 28660 Comm: syz.3.5518 Not tainted syzkaller #0 PREEMPT(full) [ 823.228530][T28660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 823.228546][T28660] Call Trace: [ 823.228555][T28660] [ 823.228565][T28660] dump_stack_lvl+0xe8/0x150 [ 823.228612][T28660] should_fail_ex+0x410/0x560 [ 823.228652][T28660] should_failslab+0xa8/0x100 [ 823.228699][T28660] ? skb_clone+0x212/0x3a0 [ 823.228722][T28660] kmem_cache_alloc_noprof+0x9c/0x600 [ 823.228754][T28660] ? skb_clone+0x212/0x3a0 [ 823.228785][T28660] skb_clone+0x212/0x3a0 [ 823.228814][T28660] __netlink_deliver_tap+0x355/0x6e0 [ 823.228857][T28660] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.228889][T28660] netlink_deliver_tap+0x19c/0x1b0 [ 823.228921][T28660] netlink_unicast+0x8c1/0xa80 [ 823.228968][T28660] netlink_sendmsg+0x7f0/0xb20 [ 823.229004][T28660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.229037][T28660] ? aa_sock_msg_perm+0x144/0x210 [ 823.229072][T28660] ? apparmor_socket_sendmsg+0x98/0x360 [ 823.229099][T28660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.229127][T28660] sock_sendmsg_nosec+0x14e/0x190 [ 823.229158][T28660] ____sys_sendmsg+0x54e/0x850 [ 823.229200][T28660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.229246][T28660] ? import_iovec+0x73/0xa0 [ 823.229283][T28660] ___sys_sendmsg+0x2a5/0x360 [ 823.229315][T28660] ? __lock_acquire+0x747/0x2de0 [ 823.229346][T28660] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.229424][T28660] ? __fget_files+0x3a2/0x420 [ 823.229448][T28660] ? __fget_files+0x2a/0x420 [ 823.229483][T28660] __x64_sys_sendmsg+0x1b1/0x290 [ 823.229509][T28660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.229570][T28660] do_syscall_64+0x166/0x520 [ 823.229592][T28660] ? trace_irq_disable+0x3b/0x140 [ 823.229619][T28660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.229642][T28660] ? clear_bhb_loop+0x70/0xc0 [ 823.229677][T28660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.229699][T28660] RIP: 0033:0x7f35bdb9f559 [ 823.229720][T28660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.229740][T28660] RSP: 002b:00007f35bea5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.229766][T28660] RAX: ffffffffffffffda RBX: 00007f35bde25fa0 RCX: 00007f35bdb9f559 [ 823.229783][T28660] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000008 [ 823.229798][T28660] RBP: 00007f35bea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 823.229813][T28660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.229827][T28660] R13: 00007f35bde26038 R14: 00007f35bde25fa0 R15: 00007fffb1083088 [ 823.229866][T28660] [ 823.246939][T28660] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 823.330563][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 823.351584][T28659] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 823.440622][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 823.555632][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 823.644691][T28665] sit0: entered promiscuous mode [ 823.797577][T28675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5521'. [ 823.827112][T28665] netlink: 'syz.5.5519': attribute type 1 has an invalid length. [ 823.827137][T28665] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5519'. [ 823.857747][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'. [ 823.900990][T11333] bond5: (slave bridge6): failed to get link speed/duplex [ 823.920873][T28675] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 823.953347][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'. [ 824.558821][T28718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5531'. [ 824.572559][T28718] FAULT_INJECTION: forcing a failure. [ 824.572559][T28718] name failslab, interval 1, probability 0, space 0, times 0 [ 824.572595][T28718] CPU: 1 UID: 0 PID: 28718 Comm: syz.3.5531 Not tainted syzkaller #0 PREEMPT(full) [ 824.572619][T28718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 824.572633][T28718] Call Trace: [ 824.572647][T28718] [ 824.572656][T28718] dump_stack_lvl+0xe8/0x150 [ 824.572697][T28718] should_fail_ex+0x410/0x560 [ 824.572736][T28718] should_failslab+0xa8/0x100 [ 824.572771][T28718] ? skb_clone+0x212/0x3a0 [ 824.572793][T28718] kmem_cache_alloc_noprof+0x9c/0x600 [ 824.572824][T28718] ? skb_clone+0x212/0x3a0 [ 824.572853][T28718] skb_clone+0x212/0x3a0 [ 824.572880][T28718] __netlink_deliver_tap+0x355/0x6e0 [ 824.572921][T28718] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.572952][T28718] netlink_deliver_tap+0x19c/0x1b0 [ 824.572982][T28718] netlink_unicast+0x8c1/0xa80 [ 824.573028][T28718] netlink_sendmsg+0x7f0/0xb20 [ 824.573062][T28718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.573096][T28718] ? aa_sock_msg_perm+0x144/0x210 [ 824.573131][T28718] ? apparmor_socket_sendmsg+0x98/0x360 [ 824.573166][T28718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.573195][T28718] sock_sendmsg_nosec+0x14e/0x190 [ 824.573234][T28718] ____sys_sendmsg+0x54e/0x850 [ 824.573276][T28718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.573324][T28718] ? import_iovec+0x73/0xa0 [ 824.573362][T28718] ___sys_sendmsg+0x2a5/0x360 [ 824.573395][T28718] ? __lock_acquire+0x747/0x2de0 [ 824.573428][T28718] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.573507][T28718] ? __fget_files+0x3a2/0x420 [ 824.573531][T28718] ? __fget_files+0x2a/0x420 [ 824.573567][T28718] __x64_sys_sendmsg+0x1b1/0x290 [ 824.573593][T28718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.573655][T28718] do_syscall_64+0x166/0x520 [ 824.573678][T28718] ? trace_irq_disable+0x3b/0x140 [ 824.573706][T28718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.573730][T28718] ? clear_bhb_loop+0x70/0xc0 [ 824.573758][T28718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.573782][T28718] RIP: 0033:0x7f35bdb9f559 [ 824.573804][T28718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.573823][T28718] RSP: 002b:00007f35bea5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.573848][T28718] RAX: ffffffffffffffda RBX: 00007f35bde25fa0 RCX: 00007f35bdb9f559 [ 824.573866][T28718] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000008 [ 824.573882][T28718] RBP: 00007f35bea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 824.573897][T28718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.573911][T28718] R13: 00007f35bde26038 R14: 00007f35bde25fa0 R15: 00007fffb1083088 [ 824.573950][T28718] [ 824.574095][T28718] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 826.432979][T28789] __nla_validate_parse: 5 callbacks suppressed [ 826.433003][T28789] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5548'. [ 826.479266][T28789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.528585][T28789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5548'. [ 826.611914][T28797] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5550'. [ 826.777207][ T5795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 826.834384][ T5795] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 826.835066][ T5795] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 826.835408][ T5795] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 826.976143][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5554'. [ 827.019983][ T5795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 827.207008][T28822] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 827.361702][ T5795] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 827.471073][ T5795] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 827.549747][T28835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5558'. [ 827.577296][T28840] geneve1: entered promiscuous mode [ 827.640171][ T5795] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 827.729996][T17235] net_ratelimit: 32 callbacks suppressed [ 827.730021][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 827.850199][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 827.906179][T28853] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 827.960192][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 828.070581][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 828.180053][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 828.291496][T26373] bond5: (slave bridge6): failed to get link speed/duplex [ 828.372746][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 828.372780][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 828.380948][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 828.380985][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 828.402708][T26365] bond5: (slave bridge6): failed to get link speed/duplex [ 828.413649][T28868] netlink: 'syz.3.5564': attribute type 1 has an invalid length. [ 828.512731][T26365] bond5: (slave bridge6): failed to get link speed/duplex [ 828.620377][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 828.730739][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 828.781144][T28876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5567'. [ 829.122091][T28891] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 829.322763][T28901] netlink: 'syz.6.5573': attribute type 16 has an invalid length. [ 829.493391][T28913] netlink: 'syz.1.5575': attribute type 1 has an invalid length. [ 829.554154][T28913] bond18: entered promiscuous mode [ 829.567247][T28913] 8021q: adding VLAN 0 to HW filter on device bond18 [ 829.773214][T28932] netlink: 'syz.1.5581': attribute type 3 has an invalid length. [ 830.911040][T28974] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 831.035766][ T11] block nbd1024: Possible stuck request ffff88803dab7000: control (read@0,1024B). Runtime 120 seconds [ 831.035817][ T11] block nbd1024: Possible stuck request ffff88803dab71c0: control (read@1024,1024B). Runtime 120 seconds [ 831.035849][ T11] block nbd1024: Possible stuck request ffff88803dab7380: control (read@2048,1024B). Runtime 120 seconds [ 831.035879][ T11] block nbd1024: Possible stuck request ffff88803dab7540: control (read@3072,1024B). Runtime 120 seconds [ 831.361544][T28985] tipc: Resetting bearer [ 831.805306][T29003] batadv_slave_1: entered promiscuous mode [ 831.936883][T29011] __nla_validate_parse: 4 callbacks suppressed [ 831.936914][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5599'. [ 832.022576][T29011] ipvlan2: entered allmulticast mode [ 832.671328][T29031] netlink: 'syz.1.5603': attribute type 1 has an invalid length. [ 832.788403][T29034] netlink: 'syz.1.5603': attribute type 5 has an invalid length. [ 832.881659][T29037] veth0_to_bond: left allmulticast mode [ 832.916903][T29037] bond4: (slave veth0_to_bond): Releasing active interface [ 832.952590][T29037] bond19: (slave veth0_to_bond): making interface the new active one [ 832.954001][T29037] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 832.964238][T26367] net_ratelimit: 30 callbacks suppressed [ 832.964297][T26367] bond5: (slave bridge6): failed to get link speed/duplex [ 833.093827][T29031] macvlan3: entered promiscuous mode [ 833.093852][T29031] macvlan3: entered allmulticast mode [ 833.097564][T29021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5601'. [ 833.115122][T29034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5603'. [ 833.121407][T29031] bond19: entered promiscuous mode [ 833.121434][T29031] veth0_to_bond: entered promiscuous mode [ 833.147705][T29031] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 833.160950][T29031] bond19: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 833.161148][T29031] bond19: left promiscuous mode [ 833.161167][T29031] veth0_to_bond: left promiscuous mode [ 833.166017][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 833.234932][T29021] bond0: entered promiscuous mode [ 833.234961][T29021] bond0: entered allmulticast mode [ 833.249779][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 833.359265][T11332] bond5: (slave bridge6): failed to get link speed/duplex [ 833.437384][T29055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5606'. [ 833.498155][T29055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5606'. [ 833.509749][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 833.620296][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 833.801589][T29063] sctp: [Deprecated]: syz.6.5608 (pid 29063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.801589][T29063] Use struct sctp_sack_info instead [ 833.839514][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 833.925111][T29069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5610'. [ 833.950018][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 834.059303][T17235] bond5: (slave bridge6): failed to get link speed/duplex [ 834.091810][T29074] netlink: 'syz.5.5611': attribute type 1 has an invalid length. [ 834.262332][T29074] bond10: entered promiscuous mode [ 834.267124][T29074] 8021q: adding VLAN 0 to HW filter on device bond10 [ 834.494546][T26365] bond5: (slave bridge6): failed to get link speed/duplex [ 834.564485][T29093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 834.564929][T29093] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 834.564951][T29093] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 834.618579][T29093] bond10: (slave xfrm1): making interface the new active one [ 834.618609][T29093] xfrm1: entered promiscuous mode [ 834.636281][T29093] xfrm1: left promiscuous mode [ 834.697208][T29103] ip_tables: iptables: counters copy to user failed while replacing table [ 834.986594][T29111] netlink: 'syz.0.5617': attribute type 10 has an invalid length. [ 834.986619][T29111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5617'. [ 835.205755][T29117] syzkaller0: entered promiscuous mode [ 835.205781][T29117] syzkaller0: entered allmulticast mode [ 835.567471][T29130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5624'. [ 836.121803][ T33] INFO: task syz.4.4463:242 ** replaying previous printk message ** [ 836.121803][ T33] INFO: task syz.4.4463:24272 blocked for more than 143 seconds. [ 836.121834][ T33] Not tainted syzkaller #0 [ 836.121847][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.121859][ T33] task:syz.4.4463 state:D stack:27168 pid:24272 tgid:24269 ppid:18297 task_flags:0x400040 flags:0x00080002 [ 836.121930][ T33] Call Trace: [ 836.121939][ T33] [ 836.121954][ T33] __schedule+0x17dd/0x5820 [ 836.122043][ T33] ? __pfx___schedule+0x10/0x10 [ 836.122089][ T33] ? schedule+0x90/0x2b0 [ 836.122128][ T33] schedule+0x164/0x2b0 [ 836.122165][ T33] schedule_preempt_disabled+0x13/0x30 [ 836.122199][ T33] __mutex_lock+0x7c4/0x15a0 [ 836.122229][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 836.122258][ T33] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 836.122288][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 836.122321][ T33] ? __nlmsg_put+0xef/0x1b0 [ 836.122354][ T33] ? genlmsg_put+0x137/0x2e0 [ 836.122393][ T33] nfsd_nl_listener_get_doit+0x104/0x610 [ 836.122419][ T33] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 836.122458][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 836.122503][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 836.122576][ T33] genl_rcv_msg+0x614/0x7a0 [ 836.122620][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.122657][ T33] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 836.122701][ T33] netlink_rcv_skb+0x226/0x4a0 [ 836.122732][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 836.122769][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.122824][ T33] ? down_read+0x2b9/0x320 [ 836.122854][ T33] genl_rcv+0x28/0x40 [ 836.122886][ T33] netlink_unicast+0x8ef/0xa80 [ 836.122933][ T33] netlink_sendmsg+0x7f0/0xb20 [ 836.122970][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.123005][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 836.123041][ T33] ? apparmor_socket_sendmsg+0x18b/0x360 [ 836.123070][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.124081][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 836.124126][ T33] ____sys_sendmsg+0x54e/0x850 [ 836.124169][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.124216][ T33] ? import_iovec+0x73/0xa0 [ 836.124254][ T33] ___sys_sendmsg+0x2a5/0x360 [ 836.124287][ T33] ? __lock_acquire+0x747/0x2de0 [ 836.124321][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.124361][ T33] ? futex_wait+0x2a2/0x390 [ 836.124525][ T33] ? __fget_files+0x3a2/0x420 [ 836.124552][ T33] ? __fget_files+0x2a/0x420 [ 836.124598][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 836.124626][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.124688][ T33] do_syscall_64+0x166/0x520 [ 836.124711][ T33] ? trace_irq_disable+0x3b/0x140 [ 836.124738][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.124762][ T33] ? clear_bhb_loop+0x70/0xc0 [ 836.124791][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.124816][ T33] RIP: 0033:0x7fa478b9f559 [ 836.124837][ T33] RSP: 002b:00007fa479ad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.124861][ T33] RAX: ffffffffffffffda RBX: 00007fa478e25fa0 RCX: 00007fa478b9f559 [ 836.124879][ T33] RDX: 0000000020040000 RSI: 0000200000000400 RDI: 0000000000000004 [ 836.124895][ T33] RBP: 00007fa478c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 836.124911][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.124925][ T33] R13: 00007fa478e26038 R14: 00007fa478e25fa0 R15: 00007ffef1d02398 [ 836.124962][ T33] [ 836.125033][ T33] [ 836.125033][ T33] Showing all locks held in the system: [ 836.125048][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 836.125066][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 836.125156][ T33] locks held by getty/5390: 2, on CPU#1: [ 836.125174][ T33] #0: ffff888033c140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 836.125236][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 836.125296][ T33] locks held by kworker/u8:19/11332: 4, last CPU#1: [ 836.125313][ T33] #0: ffff8880344f4948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125375][ T33] #1: ffffc90003b67c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125439][ T33] #2: ffff888037f5c9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 836.125506][ T33] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0 [ 836.125579][ T33] locks held by kworker/u8:20/11333: 2, last CPU#1: [ 836.125597][ T33] #0: ffff88802a763948 ((wq_completion)wg-kex-wg2#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125666][ T33] #1: ffffc90003977c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125732][ T33] locks held by kworker/u8:32/17235: 2, last CPU#1: [ 836.125748][ T33] #0: ffff888078bb4948 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125816][ T33] #1: ffffc90005eafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 836.125882][ T33] locks held by syz.2.3178/18643: 2, on CPU#0: [ 836.125898][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 836.125977][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 836.126819][ T33] locks held by syz.4.4463/24272: 2, on CPU#1: [ 836.126838][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 836.126903][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 836.126961][ T33] locks held by udevd/25059: 1, on CPU#0: [ 836.126978][ T33] #0: ffff88804da0b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 836.127043][ T33] locks held by syz.3.5613/29089: 1, on CPU#1: [ 836.127059][ T33] #0: ffff8880332dd460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 836.127123][ T33] locks held by syz.3.5613/29098: 1, on CPU#0: [ 836.127139][ T33] #0: ffff8880332dd460 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x720 [ 836.127198][ T33] locks held by syz.3.5613/29102: 1, on CPU#0: [ 836.127215][ T33] #0: ffff8880332dd460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_fasync+0x4d/0x1b0 [ 836.127278][ T33] locks held by syz.0.5626/29139: 2, on CPU#1: [ 836.127294][ T33] #0: ffff8880337be8e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 836.127353][ T33] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 836.127419][ T33] locks held by syz.6.5627/29141: 1, last CPU#0: [ 836.127435][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 836.127496][ T33] locks held by syz.5.5628/29150: 2, on CPU#1: [ 836.127522][ T33] #0: ffffffff9127a7c0 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 836.127592][ T33] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 836.127660][ T33] [ 836.127667][ T33] ============================================= [ 836.127667][ T33] [ 836.127690][ T33] NMI backtrace for cpu 0 [ 836.127705][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 836.127729][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 836.127744][ T33] Call Trace: [ 836.127754][ T33] [ 836.127765][ T33] dump_stack_lvl+0xe8/0x150 [ 836.127801][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 836.127834][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 836.127863][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 836.127899][ T33] sys_info+0x135/0x170 [ 836.127926][ T33] watchdog+0xfd2/0x1030 [ 836.127962][ T33] ? watchdog+0x1c7/0x1030 [ 836.127998][ T33] kthread+0x38b/0x480 [ 836.128022][ T33] ? __pfx_watchdog+0x10/0x10 [ 836.128048][ T33] ? __pfx_kthread+0x10/0x10 [ 836.128073][ T33] ret_from_fork+0x514/0xb70 [ 836.128101][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 836.128127][ T33] ? __switch_to+0xc78/0x1410 [ 836.128163][ T33] ? __pfx_kthread+0x10/0x10 [ 836.128195][ T33] ret_from_fork_asm+0x1a/0x30 [ 836.128233][ T33] [ 836.128242][ T33] Sending NMI from CPU 0 to CPUs 1: [ 836.128282][ C1] NMI backtrace for cpu 1 [ 836.128297][ C1] CPU: 1 UID: 0 PID: 24711 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 836.128323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 836.128336][ C1] RIP: 0033:0x7f560595a6b8 [ 836.128355][ C1] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 836.128379][ C1] RSP: 002b:00007fff54daa1e0 EFLAGS: 00000246 [ 836.128397][ C1] RAX: 0000000000000000 RBX: 00005555756da500 RCX: 00007f560595fd8e [ 836.128411][ C1] RDX: 00007fff54daa230 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.128425][ C1] RBP: 00007fff54daa29c R08: 0000000000000000 R09: 0000000000000000 [ 836.128437][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 836.128450][ C1] R13: 00000000000927c0 R14: 00000000000cc140 R15: 00007fff54daa2f0 [ 836.128464][ C1] FS: 00005555756da500 GS: 0000000000000000 [ 836.133119][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 837.039775][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 837.048927][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 837.059015][ T33] Call Trace: [ 837.062335][ T33] [ 837.065471][ T33] vpanic+0x56d/0xa60 [ 837.069500][ T33] ? __pfx___schedule+0x10/0x10 [ 837.074411][ T33] ? __pfx_vpanic+0x10/0x10 [ 837.078973][ T33] panic+0xc5/0xd0 [ 837.082742][ T33] ? __pfx_panic+0x10/0x10 [ 837.087188][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 837.092683][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 837.098096][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 837.104295][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 837.110498][ T33] watchdog+0x102b/0x1030 [ 837.114879][ T33] ? watchdog+0x1c7/0x1030 [ 837.119336][ T33] kthread+0x38b/0x480 [ 837.123464][ T33] ? __pfx_watchdog+0x10/0x10 [ 837.128182][ T33] ? __pfx_kthread+0x10/0x10 [ 837.132822][ T33] ret_from_fork+0x514/0xb70 [ 837.137535][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 837.142768][ T33] ? __switch_to+0xc78/0x1410 [ 837.147485][ T33] ? __pfx_kthread+0x10/0x10 [ 837.152107][ T33] ret_from_fork_asm+0x1a/0x30 [ 837.156926][ T33] [ 837.160591][ T33] Kernel Offset: disabled [ 837.164942][ T33] Rebooting in 86400 seconds..