last executing test programs: 5m24.68284278s ago: executing program 0 (id=3681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=@updsa={0x2a8, 0x1a, 0x200, 0x70bd27, 0x25dfdbfb, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4e20, 0x1, 0x4e24, 0xec, 0xa, 0x20, 0x80, 0x8d0a4cf0f07d8079, r4, r6}, {@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d5, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x9, 0xfff, 0x1, 0x85a, 0x8c, 0x7f, 0x200, 0x8}, {0x0, 0xd44, 0x14000, 0x3}, {0x401, 0x1, 0x2}, 0x70bd26, 0x3500, 0xa, 0x3, 0xdf, 0xc0}, [@sec_ctx={0x3c, 0x8, {0x38, 0x8, 0x1, 0x2, 0x30, "d16f0d0d4111be003cb12fd2732fdc966c1f76d3a6bbe8d1c03d0444f5f5aed8fefd6e44720cf95d6a199c30ae458e28"}}, @algo_aead={0x56, 0x12, {{'morus1280-generic\x00'}, 0x50, 0x200, "0b0982a323ded7b48cf0"}}, @iptfs_dont_frag={0x4}, @offload={0xc, 0x1c, {r4, 0x1}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in=@local, 0x2, 0xd7, 0xa}}, @sec_ctx={0xe1, 0x8, {0xdd, 0x8, 0x1, 0x9, 0xd5, "6244ebaedfbd6f54879e9bfa3a36ed898d0f665b4a1e8b138e84ddd9f0d83677aeead2e1699705de2a8c1653fe574d86d0af0470ad5fa66b84886c613cff5d566601d62838b854d61b09fcb29a7a64c1235983ca59941d5505825af32b9a2319b537472063ba30ee6dddeb66e073cb8c4c0ad980274de4c1678e0edccd1d840fe6fb606f50caaf47e7d8ca10c1924adb5958232cfa4012fa9fb246b4c371a9a6212bf97e181774b84ffa4619b4277d2e17ed1f4f85012c6160d93c947086061c6afe54ae39f055882e2be8cbcdb0aa9e719dd17bc0"}}, @tfcpad={0x8, 0x16, 0x9}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x91}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x68}}, 0x0) 5m24.475575751s ago: executing program 0 (id=3685): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x1, @private1, 0x6}}, 0x0, 0x0, 0xfffffffa, 0x61, 0x94, 0x5, 0xb}, &(0x7f00000000c0)=0x9c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x15, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x0, &(0x7f0000000200)=""/246, 0xf6}, &(0x7f0000000340)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x0, &(0x7f0000000200)=""/246, 0xf6}, &(0x7f0000000340)=0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4eeac99a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x700, 0x7, 0xcd, {{0x41, 0x4, 0x0, 0x15, 0x104, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x1, 0x11, "03bb07a815761cbc0fce7939cc3474"}, {0x0, 0xf, "6c20e8abbfb64ff597e0529bd3"}, {0x1, 0x6, "cb094dce"}, {0x7, 0x5, "d94d05"}, {0x7, 0xb, "149e40194b44878d92"}, {0x7, 0xb, "4b85ff10fce7a27d8d"}]}, @ssrr={0x89, 0xb, 0x59, [@loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @noop, @cipso={0x86, 0x36, 0x3, [{0x1, 0x8, "b713c8e86ef1"}, {0x7, 0xa, "3ce65f37cb77006b"}, {0x5, 0xb, "8b98ddcb1c61b86c78"}, {0x5, 0x10, "b21111051f8846b19f2e5bd640bf"}, {0x5, 0x3, 'K'}]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x4, [{@multicast1, 0x800}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x101}]}, @ssrr={0x89, 0x7, 0x17, [@rand_addr=0x64010102]}, @rr={0x7, 0x17, 0xb0, [@broadcast, @broadcast, @empty, @broadcast, @multicast2]}, @generic={0x44, 0xf, "862b9d70bb1768cc8b3e2371b3"}, @timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0x6, [{@empty, 0x67d}, {@empty, 0x9}, {@empty, 0x10000}]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe3, 0xe3, 0x3, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x80008, 0x40000}]}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x8}, {0x6, 0x7ff}, {0xf, 0xe}]}, @datasec={0x9, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x9, 0x81}, {0x5, 0x4, 0x6}], "9889b7"}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x5, 0x1}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x9, [{0x4, 0x5, 0x1ff}, {0x0, 0x1, 0x4}, {0xd, 0x3, 0x8}, {0x5, 0x0, 0x9}, {}]}, @fwd={0xc}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f0000000800)=""/62, 0xff, 0x3e, 0x0, 0x80000000, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x16, &(0x7f0000000c00)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x47}, @ldst={0x0, 0x3, 0x1, 0xb, 0x0, 0xfffffffffffffffc, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000cc0)='GPL\x00', 0x5, 0x8, &(0x7f0000000d00)=""/8, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x2, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x0, 0x5, 0x8, 0xc}], 0x10, 0x10000}, 0x94) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000f00)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{}, &(0x7f0000001000), &(0x7f0000001040)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)='%-010d \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1e, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0xffffffff}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @alu={0x4, 0x0, 0xc, 0x2, 0x7, 0x20, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x49, &(0x7f0000000500)=""/73, 0x40f00, 0xdd024190facd4027, '\x00', r4, @sk_lookup=0x24, r5, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x1, 0x8}, 0x10, r6, r7, 0x3, &(0x7f0000001140)=[0xffffffffffffffff, r8, r9, r10, 0x1, r11], &(0x7f0000001180)=[{0x5, 0x3, 0xd, 0xc}, {0x2, 0x1, 0x10}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x55, @value=r12}, 0x94) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000012c0)={r1, 0x2}, &(0x7f0000001300)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000012c0)={r1, 0x2}, &(0x7f0000001300)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000001340)={r13, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001540)={{r9, &(0x7f0000001400)=']^\x00', 0x40000, &(0x7f0000001440)={@_ha_fsid={[0xd06, 0x2]}, {0xfff, 0x3, 0x6, 0x4a5f}}, 0x6, &(0x7f0000001480), &(0x7f00000014c0)=0xfffffff9}, {[0x7ff, 0x9, 0x5, 0xb]}, 0x4, 0x33, &(0x7f0000001500)=""/51}) getpeername$packet(r12, &(0x7f00000015c0), &(0x7f0000001600)=0x14) (async) getpeername$packet(r12, &(0x7f00000015c0)={0x11, 0x0, 0x0}, &(0x7f0000001600)=0x14) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000001640)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0xf, 0xffff, 0x6, 0x0, 0x7c, 0x80000, r15}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(r16, 0x1, 0x2b, &(0x7f00000016c0)=0x5, 0x4) r17 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r17, 0x107, 0x2, &(0x7f0000001700)={r4, 0x1, 0x6}, 0x10) (async) setsockopt$packet_drop_memb(r17, 0x107, 0x2, &(0x7f0000001700)={r4, 0x1, 0x6}, 0x10) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x2000, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000001780)=[{r18, 0x200}, {r11}, {r19, 0x104}, {r17, 0x4000}, {r9, 0x10}, {r17, 0x400}, {r16, 0x100}, {r14, 0x1000}, {r3, 0x2022}, {r17, 0xa0}], 0xa, &(0x7f0000001800)={0x0, 0x989680}, &(0x7f0000001840)={[0x100]}, 0x8) (async) ppoll(&(0x7f0000001780)=[{r18, 0x200}, {r11}, {r19, 0x104}, {r17, 0x4000}, {r9, 0x10}, {r17, 0x400}, {r16, 0x100}, {r14, 0x1000}, {r3, 0x2022}, {r17, 0xa0}], 0xa, &(0x7f0000001800)={0x0, 0x989680}, &(0x7f0000001840)={[0x100]}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001880)={r13, 0x3}, &(0x7f00000018c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001880)={r13, 0x3}, &(0x7f00000018c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000001900)=@sack_info={r20, 0x6, 0x5}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000001900)=@sack_info={r20, 0x6, 0x5}, 0xc) 5m24.242922184s ago: executing program 0 (id=3687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) unshare(0x20000400) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x21, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x2, 0x8, 0x80, 0xffffffffffffffe0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 5m24.042830512s ago: executing program 0 (id=3691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b000100697036677265000054", @ANYRES32], 0x94}}, 0x0) 5m23.829161398s ago: executing program 0 (id=3695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000080250001002abd7000f7dbdf25b70b9b343fe262c1b33ddfec79c788000000"], 0x14}}, 0x1000) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0000200000000000119078ac1e0001e000000100010000000000008814d188"], 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000580)={r2, &(0x7f0000000300)='(,\x00', 0x101000, &(0x7f0000000380)={@_ha_fsid={[0x4, 0xaaa]}, {0xb8, 0x6, 0xd, 0x1}}, 0x9, &(0x7f0000000500), &(0x7f0000000540)=0xff}) sendto$inet(r3, &(0x7f00000005c0)="2046f91d9a1950a1f8", 0x9, 0x10, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1d0, 0xa0, 0xb, 0x148, 0xa0, 0x148, 0x138, 0x230, 0x242, 0x138, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x3}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @llc={@snap={0xaa, 0xfe, '#', "1bb84b", 0x8035, "a57945b367a22d6bf8ab3acad2b24727a7b5fc99ae2b9837d5523b6ea164f9cd832e"}}}, 0x38) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r3, &(0x7f0000000600)='cgroup.controllers\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)) (async) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x14, r10, 0x1, 0xf0bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x810, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4004000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r6, 0x0, 0x0}, 0x10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000000080)) 5m22.757970788s ago: executing program 0 (id=3704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 5m7.679820337s ago: executing program 32 (id=3704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m37.76159076s ago: executing program 5 (id=5480): r0 = socket$packet(0x11, 0x2, 0x300) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000002e000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r7}, &(0x7f0000000300)=0x8) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r10, 0x0) close(0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r11, 0x808000}, 0x8) (async) sendmmsg$inet_sctp(r4, &(0x7f0000002380)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="548c1517d8d25ac1c66c7cee3f2b5ac6ef566b819b665d78055ca07f9330526a723612945b2c927077331482d9ca6a0d3c26870b6780f278929e7d73e7266325c82fff", 0x43}, {&(0x7f0000000240)="ac7973e139d5dec3ba1ce49880c84c6d142d7eb2777e7ebb0d4b", 0x1a}, {&(0x7f0000000280)="5404f90585a7dd90400063b3f4d07c3f2de2a33ffb178569af8c3dfbb94bcbae79a9569b06d9772454ab42ebc2ef44c6facf09e108f5deed0292601c215c486af1fe517b9d6dea552a2abd8f17", 0x4d}, {&(0x7f0000000300)="f796967409bcfa06d2c125af0a53f2fbfffc957af9bf9c816fb2", 0x1a}, {&(0x7f0000000340)="128e28042ce7edcfc44b3abdc992727aa2d173aa64966aef66c6d05788b56a2f24b568c5eff0099e20ac6bb4d9131e4a475345c3ca2c9a3c7ff1e57c96db624612d8f1b93d9f3d17d578a9b0b3bf1ea0a02d23f6c50dc2d7e886", 0x5a}], 0x5, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0xa}}, @init={0x18, 0x84, 0x0, {0x7, 0x3, 0x4, 0x2}}, @init={0x18, 0x84, 0x0, {0x6, 0x0, 0x9, 0x58}}, @sndinfo={0x20, 0x84, 0x2, {0x48, 0x8, 0x9, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0x0, 0x2, 0x9, 0x1}}], 0xd0, 0x1}, {&(0x7f0000000540)=@in6={0xa, 0x4e23, 0xfffffffb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000580)="432fa01de8208a7a31ea9a775c5fa187370d9d34912ccda9a01ab35d8f7f3e59ca2f352b1a1d90e882029ac4dd085185784471c2ddcfb6106809a378c29c6e57092a4832cbaa2479c85c7802642365eff441ef8e5aac7a191898b87633784a9a2fe2bd00b8677c7237badb73e2ff21cace9b1431fffc2e11ae", 0x79}, {&(0x7f0000000600)="af3591450b20a6323f804524aa88dfb7c3ef1f8809d9c345d220b6aaf7e0ec273130cd42f55e", 0x26}, {&(0x7f0000000640)="ce5e795397cdec41dcaee3531afe67aec8c0c7f14b468d88bcb413c6f141b56e5c536679173e11abdb279986346ea9303fce5c94274b256ad264ee11f6d96ffa3d622ff2333a4f8f91ae8ccfaba208bf69587d35dc4f90e2cd5a", 0x5a}, {&(0x7f00000006c0)="1f5975543b74fa7d948b2b26bd114abf6ecd008b608592b65349039a5a5bd302bb16dde7c7d383173e0709d16b00490ef630fa24ff99dd60ef9d573d2572e2c1af63c12e4a537e535ecea37f2b86c3fc453fc9611f2e35c2634bc48ad26f42e73dee8af02673d9b4192829df84a5adbe0bc12c9f544c3782f4983d75719b6c9f0ebe9696671e7775a801af65a0c16ac0896c22308ae34456f49490d60d", 0x9d}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="132e0a77cce09caf4ccc3c3b5c519cc4a43707c67eaed95896ad46b17a789ef4c79a7ff5300392192908d6f3a7a13da9277e41d624f2", 0x36}, {&(0x7f00000017c0)="30d666eedf8d5bd11ea06b930f2d986027cbb4cc6713478ef9796cbe547bbc3ab70575b30501686a43bd1e76d9da7dd1350154e146393d84975c79f05adc353d68c28754cd06d2", 0x47}, {&(0x7f0000001840)="3845bd74a9440c18ec1be4ba071c7e8d948a3450c4ec53115959a71f24cdca7468c4b6d3b088e8b9e622ed14722191471cbe4e81138a660add1f18663b1c13b2a363e19e1e39788987de8a0db1911057840d", 0x52}, {&(0x7f00000018c0)="f79e327eeb0b4657f5c18e810b6eba46cdf1080551fb836998e43c9e61c41dcb88ad11b4499c497d36681e3e19d1c37416e18a930413aed4ed382c5ad8bdae391d972c7bd1be607d9a72a0293eec2707c4f6d43b6d99ae5725931d0c9a7b37", 0x5f}], 0x9, &(0x7f0000002480)=ANY=[@ANYBLOB="180000000000000084000000000000000100090003000800180000000000000084000000000000007400001006000000180000000000000084000000050000001000006968acbfce8a9d0a88b71b0002000000300000000000000084000000010000009d00010008800000fcfffffff8ffffffff070000340000002b7e0000", @ANYRES32=0x0], 0x78, 0x80}, {&(0x7f0000001a80)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="79548840bb9728b8bb60867107c94428e6724bea5ff722db1bc85b08ceadb6466e3575ff9f4a459cc8bed87be0a92d9c104905af50c2f33872eeebaf3100604323419a0612095849d3b0cdfacf64da9c713f1a741cd7fcec47e69c621e8ee42c5068e1c8f080dc6fa30a9951818682a2f96a99a05c4e6eb234bc23adf2150b6b8ea8b6c92c4594c43b15865847f045fe2dbd3eb5e1f0fc26d7f8d4e33a269d70568cad2aadeaed5bb0af366d542e80a863f23b29fc135addd24a1bb078f985e0b88c9f7c2f8e267fc12538f54d71255aefa32797113a699929", 0xd9}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="20000000000000008400000008000000ff02000000000000000000000000000120000000000000008400000002000000ffff0000ac070000ff01ffff", @ANYRES32=r7, @ANYBLOB="20000000000000008400000002000000ff0300020200000007000000", @ANYRES32=r11], 0x60, 0x20040000}, {&(0x7f0000001c80)=@in6={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2af}, 0x1c, &(0x7f00000022c0)=[{&(0x7f00000000c0)="cc", 0x1}, {&(0x7f0000001d00)="3ac0c140fc72902446bc41c471bddc378079562d89cd87b9a0d9aa3cadaed2db0a", 0x21}, {&(0x7f0000001d40)="770cb28008822d5e7461ab058d5797c3b437c062e2d22767f6c09f3cbb79ba0142e147a4cb12d6926787f4957730075f1b1e39d9e159f67dfaf504ddfc057a94bfcbf25a74f6f087886a6fa10c2903fe70d294b828bc103196a4acc01ab48ce1e5b70803600c35ebb02ab11a52b5690d106ae6d63a2cd1f61b3facf6b25ea63a3e25d832bc49c64d3d9685eb3e2886381ee9f89ecc83ead7632f1855960c081fe5a0c63e876408b0f4e632", 0xab}, {&(0x7f0000001e00)="4796229cb754ed81171b1b6d7c729e2d467a9ac591bfb6cec3d0cc7d1f28f7b1d347d96d77297549fdb2851ab5bf2aca1be014b65aead2fcb84f17d6365481491f7da91568c534136342f453b2e09bc7e68ee9158dbbf648bb8586598e52458685351a7226ab6a82769d15ecb924780594cfa961ad7936b94beba7b89d907ff92019cf19f76b39e7bbc985b2228292892123fbc88897883d5f171050086e419315a17c92331c39eef878939654115314ef078e9366d9f0eef5ce07977dc797c66fba311aae5a214d6d47449cdda7e3799ef6ed8cf2989ac31adcf15cc4b67d1352f793f755d2cd653b0c5a5b398194cbac5887ba5eab", 0xf6}, {&(0x7f0000001f00)="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", 0xfe}, {&(0x7f0000002000)="76c9fd45ab97c91c2b1c728768158c94e743169d5cf910565ee0d0e23b53e3794059c02bd45764bfe6cbe437d6060fda3abdaf38a49f011155af139ba1edca7d4eac7c3ec500bd0044511f5fa7898ffa8bba6749d405cf19b7e33007cf8aad838a0e92fa1b296449a1a0342ad4a4755b4dcbc17fc6a6ef6d2e51c02cc64d142de7971507d5bf4373a0615c897c179fa5df8898a4687d8d5b15a81513f83666d1eeef2d5b2170bde332f42673528bbca0803a41866ae177a1bf7f3e78712cb900655535", 0xc3}, {&(0x7f0000002100)="9859ffd5db7cbf14036259936313e7feba8105ecc72c02f604fca42c385332616c97cb93e5f76029c26588f1bac4def90ed4839ebeee1150a85164da647b54d19824a4f6a28bb8c0368059cbdb515a9a9f57af91f563755de3932c650aae64ccb342710c3bf22fa99b27161e00a4a5734e52", 0x72}, {&(0x7f0000002180)="7ffbf0e20137fe742c4bf7979408aa82e100dcfa24d9882e1109715845bba3fc23baa5cc26510e62d57946aba7e639124eff98a05429632d8051caa549579e4a6943929e8614d310ba469ad6c64e0da8e7a906063bbfe6348e8cb7199cf43484fb4114", 0x63}, {&(0x7f0000002200)="925095549c95ab4c9513971087da413fe7150e294875a6c36f47b2cd926b0af061d3a1fa3d4b37a13576c8bcd39530ee7579216c33a6828c1408f569dfd9d63bd431c5c02d5d08ad46e84643bc0ebdd57e0489936c7ef8f809d20c720c564ac67394b6ad96a3005705c72e218c5d6e3490ed52df935e4753b63240f2042d10bef5ae453c323edda6a4dba07ccb49723b009d4b012b7e4fbc2f85a9eb0f7f6a5f4873d88e7e2e6379b2ad55103c05b4f671bf3023f309591b", 0xb8}], 0x9, 0x0, 0x0, 0x81}], 0x4, 0x10) (async) syz_emit_ethernet(0xfd81, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xe9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, @broadcast, @loopback}}}}}}, 0x0) 2m37.42387209s ago: executing program 5 (id=5484): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000003c0)) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') r7 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4], 0x28, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x38, 0x800}}], 0x2, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) 2m34.489742969s ago: executing program 5 (id=5487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0xc451}, 0x24000000) 2m34.299242347s ago: executing program 5 (id=5492): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x78}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000a001f000000"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000a001f000000"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x11c, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x35, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1b}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xdd6}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0xfe00, 0x5, 0x0, 0x8928, 0x9e, 0x8}}, {0x14, 0x2, [0x8, 0x5, 0x8, 0x6, 0xe, 0x6, 0x2, 0x1ff]}}, {{0x1c, 0x1, {0x4, 0x9d, 0x7, 0x10001, 0x1, 0x4, 0x3800, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x6, 0x8001, 0x1, 0x42, 0x2, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x5, 0x1, 0x9, 0xfff, 0xbfd4, 0xd]}}, {{0x1c, 0x1, {0x7, 0x0, 0x3, 0xbe3, 0x2, 0x6, 0xdb0a, 0x8}}, {0x14, 0x2, [0xe1, 0x472, 0x4, 0x3, 0xcb5a, 0x1, 0x4, 0xba0f]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x11c, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x35, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1b}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xdd6}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0xfe00, 0x5, 0x0, 0x8928, 0x9e, 0x8}}, {0x14, 0x2, [0x8, 0x5, 0x8, 0x6, 0xe, 0x6, 0x2, 0x1ff]}}, {{0x1c, 0x1, {0x4, 0x9d, 0x7, 0x10001, 0x1, 0x4, 0x3800, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x6, 0x8001, 0x1, 0x42, 0x2, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x5, 0x1, 0x9, 0xfff, 0xbfd4, 0xd]}}, {{0x1c, 0x1, {0x7, 0x0, 0x3, 0xbe3, 0x2, 0x6, 0xdb0a, 0x8}}, {0x14, 0x2, [0xe1, 0x472, 0x4, 0x3, 0xcb5a, 0x1, 0x4, 0xba0f]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000200)="39858c", 0x3, 0x40000, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x1, 0x5c, 0x6, @random="3b8a1c3c34a9"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x100, 0x6644, {{0x2a, 0x4, 0x3, 0x14, 0xa8, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x1c, 0x76, 0x0, 0x7, [0x6, 0xfffffffc, 0xfffffff7, 0x6, 0x6, 0xe2]}, @timestamp_prespec={0x44, 0x24, 0x66, 0x3, 0x5, [{@rand_addr=0x64010181, 0x80a}, {@private=0xa010101, 0x4}, {@private=0xa010100, 0xbb}, {@remote, 0x1}]}, @noop, @end, @rr={0x7, 0x2b, 0x9d, [@multicast2, @multicast1, @multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_addr={0x44, 0x14, 0xef, 0x1, 0x1, [{@rand_addr=0x64010102, 0x7ff}, {@remote, 0x7}]}, @lsrr={0x83, 0xf, 0x94, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}]}}}}}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100736e6d705f7472", @ANYRES64=r11], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="7b931931e94aed9c0a8c1c94edfddb9b689f3b1a2c8f339fd3d4938639fa1b78", @ANYRES16=r10, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="7b931931e94aed9c0a8c1c94edfddb9b689f3b1a2c8f339fd3d4938639fa1b78", @ANYRES16=r10, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket(0x26, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 2m33.635237712s ago: executing program 5 (id=5499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000009400000008000300", @ANYRES32=r2, @ANYBLOB="05003901010000000a0006000200"], 0x30}}, 0x0) 2m33.127239741s ago: executing program 5 (id=5504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x26, 0xe, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x50) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0x18) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m18.266165498s ago: executing program 33 (id=5504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x26, 0xe, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x50) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0x18) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m42.270887854s ago: executing program 4 (id=6015): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000140)={0x0, 0x9, 0x1, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000540)={r3, 0x3}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r4, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c}]}, 0x54}}, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1m42.078999275s ago: executing program 4 (id=6017): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0x52, 0x0, &(0x7f00000000c0)={0x1, 0x20003, [0xc0b, 0x9f4, 0xb70, 0xeb5]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000001c0)) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea", 0x30}], 0x1}, 0x4000804) 1m41.798947476s ago: executing program 4 (id=6021): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05080000000000000000010000000900010073797a300000000040000000030a0101000000000000000001000000090003"], 0xd4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f", 0x81}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) getsockname$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064dce7abd783ec000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000009300004800800010000"], 0xb0}, 0x1, 0x0, 0x0, 0xc015}, 0x0) bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1m41.520157061s ago: executing program 4 (id=6027): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) socket$inet_sctp(0x2, 0x5, 0x84) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmsg$alg(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000900)="e0", 0x1}], 0x1, 0x0, 0x36, 0x4000}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e24", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000a36aa1ffd7687c18759d47c2a1026fe8503117ffdbfdaf70f2f1fc0f71a669977e8427ed8b32d1d7dbe1a0f117f5748c99978dfdabf1818068879e1c199609f67339513780a4bb03595d5284ff4560d630739511284d36c7d53f8e8764d5a8259f6dd1d46f9377dc9d05f488fc7d0820e0a30197cef2432a3fa56dcbf518bfe8b657e2a3c8b835930e6a862694d5527e45"], 0x0) 1m41.255116592s ago: executing program 4 (id=6032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x293}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xcc0c4}, 0x4000001) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000008ddfc3c2e3000000000000ae656ba059b966abd56fc2456ceca4a4cd1bcfb5545690ae70981f54f30620a5fe5343558623c86d5d30ef626d2e841a918de964d5832d764d89f022e71d1ebb", @ANYRES16=r7, @ANYBLOB="010000000000000000000400000008000700ffffffff08000800ac1434000800020007000000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) close(r0) 1m41.092322636s ago: executing program 4 (id=6034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0x2}, {0x6, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x44040) 1m25.839314775s ago: executing program 34 (id=6034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0x2}, {0x6, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x44040) 29.897665098s ago: executing program 7 (id=6503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x134, 0x30, 0x51b, 0x0, 0x0, {}, [{0x120, 0x1, [@m_sample={0x11c, 0x1f, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xb7, 0x2, 0x7, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x13, 0xc4b, 0x20000000, 0xfffffff8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1b5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x96, 0x6, "61fb2b00b72fb692f0927e7a71aac7f001827e13c9d9213c149da0a170667f184900f0aa31a0b68e08db5e3886a3e33a00fd4dff9d6cd75d633fa9533f90e60ad665d05458ed982910b92ebe9b106c3a8a81207f79b53ad4102c945c5a28f0d02258c559d5fe2926446a48e7ffc59cbd3a22806eb3a27e9c3fc7d43b602995313481b165d0dc235e22f0f0b199fa0e2fd39b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x134}}, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0xff, @local, 0x1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20045044}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010100010000000000000500000a300000000c0a010100000000000000000a00000608000440000000020900010073797a31000000000800038004000080140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r2, 0x156b5000) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xefff, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x2000}) close(0x3) 29.880588923s ago: executing program 7 (id=6509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 28.547948556s ago: executing program 7 (id=6518): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) (fail_nth: 4) 28.091256568s ago: executing program 7 (id=6521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 27.701995185s ago: executing program 7 (id=6524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) (async) r4 = gettid() (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r3, @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0xf2, 0x1, 0x6000, 0x10, @private0, @local, 0x8000, 0x20, 0x9, 0x80}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x3, 0x1c, {{0x3a, 0x4, 0x1, 0x10, 0xe8, 0x67, 0x0, 0xd, 0x4, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x52}, {@rand_addr=0x64010101, 0x4}]}, @timestamp_addr={0x44, 0x3c, 0xba, 0x1, 0x3, [{@broadcast, 0xcd20}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0xc}, {@private=0xa010101, 0x9}, {@multicast2, 0x800}, {@broadcast, 0x4}, {@multicast2, 0x2}]}, @end, @ra={0x94, 0x4}, @generic={0x89, 0xb, "0c637128a46889ec8c"}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x3c, 0x3f, 0x1, 0x7, [{@multicast1, 0xd}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7000000}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010101, 0x3b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xad1a}]}, @cipso={0x86, 0xf, 0x2, [{0x1, 0x9, "6a946dee48bc69"}]}, @ssrr={0x89, 0x17, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @local]}]}}}}}) (async) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) (async) r17 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r17, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r18, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r18], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000540)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @private, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x230, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x8e5}, 0x20040020) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 27.127764603s ago: executing program 7 (id=6529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x600c0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf3505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1, 0x5}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES8, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$kcm(0x10, 0x400000002, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r4], 0xfe33) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r7, 0x8001}, 0x8) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 12.104078345s ago: executing program 35 (id=6529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x600c0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf3505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1, 0x5}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES8, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$kcm(0x10, 0x400000002, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r4], 0xfe33) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r7, 0x8001}, 0x8) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 5.846173555s ago: executing program 1 (id=6744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80000001, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400d1}, 0x40040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r2, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r4, 0xf, 0x0, @val=@target_btf_id=r6}, 0x14) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, &(0x7f0000000000)={0x75, @local, 0x4e20, 0x0, 'lblcr\x00', 0x5, 0x0, 0x42}, 0x2c) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r11}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000200)=@raw=[@exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000240)='GPL\x00', 0x9, 0xa2, &(0x7f0000000280)=""/162, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0xc, 0x81}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94) 5.018315274s ago: executing program 1 (id=6748): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x1009, 0x209, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{@none}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5e, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.602318779s ago: executing program 3 (id=6760): socket$kcm(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0xdd, @local, 0x4e21, 0x0, 'lblc\x00', 0xb, 0x25, 0xb}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="585f10899adc9f14624f9feb04001800000200000000000000000000120000000400000000a45c0e8900000000000000"], 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r1, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 2.439001492s ago: executing program 3 (id=6766): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40001) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104470c00"/20, @ANYRES32=0x0, @ANYBLOB="00000200000200002400128009000500ffffffff080012009d0400"/44], 0x44}}, 0x0) 2.063280686s ago: executing program 3 (id=6770): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x4000840) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "0928d0d4a6c27fd1b3f6144a669f96bd653d0e67bb0a59919e428e3974826a08d83bed1f63b088f973312114d7b7316130297f40bce8d791ed4ea9fd3b03584ec44faffafe57d5167c3df99800fed744fb3082b460817d2b1bc2b5e9574cff3ccee623191e05e754cdabb661428892c68c0364bbcb2852d63373248748338bf867ad0a36a3b957b487e602a06fa35f1c4b7b06ac8543d62e4d2aaca3a337c09a858737b2fed422552eec5a8c0016ea193d2326a8d40e2d0caf191a90b438b383c580c945"}]}], {0x14}}, 0x134}}, 0x8c0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.915591231s ago: executing program 1 (id=6771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) 1.360946672s ago: executing program 6 (id=6775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000001500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}], 0x48}, 0x4000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.350185087s ago: executing program 2 (id=6776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 1.223170851s ago: executing program 2 (id=6777): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00003c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000063c000000000000c13c4d04000280040003"], 0x64}}, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="6d91f2e6a3d03a7a8c5356b0bb73e6692333a6c31eb55aad116c60278cfc708c15") 1.17462032s ago: executing program 6 (id=6778): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x158, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x0, 0xffff, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0xb7, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x9}}, {0x16, 0x2, [0x94a, 0x8, 0x8, 0x41a2, 0xf, 0xfff, 0xc2f0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x1, 0x2, 0x800, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8, 0x35, 0x2, 0x6, 0x0, 0x9, 0x388c}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x54, 0xffff, 0x6, 0x1, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xff1d, 0x420, 0x6]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x4f3, 0x0, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x75, 0x78, 0x1, 0x2, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20048882}, 0x2000400c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r2, 0x0, &(0x7f0000000000)) 1.145495779s ago: executing program 8 (id=6680): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0xfb, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x7fffffff}, 0x20) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r11, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r12 = socket(0x2a, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) setsockopt$inet_int(r10, 0x0, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7307120021", @ANYBLOB="fa9d1a6c6e2531cbb3fce7d23fb0a586e4d35214d99da534b843835b6436e892deadcd1d1fe1adff0a34e25d12c2623a8c10976342342c57abc6a471d2c7fb69841e8f4e590cdcbf370ebb671b71dea84f26ac91c7eba57bd76e30260e7dc24512ee1440614a082f838e73b15f6c47a2eb903048b5c93d699e3ab5eaeeb9aaa2f92d718f3451b87c92407ddbec7855b414d893a8c3d83afd21106615e65e96224a1c0a077aa731731bd2218e4eeb2c54ebd02359fc8c4476e240c2f188152cc6f3c438047efe938519a8ebafe6fe60458fe4d792e9eed9e5e8d3fdeba89f940f91ec3130f9ff1e1fd9befc5ed0"], 0x5c}, 0x1, 0x0, 0x0, 0x8141}, 0x4000) 1.007883446s ago: executing program 6 (id=6779): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40008}, 0x24000000) 951.300567ms ago: executing program 2 (id=6780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x28}}, 0x8040) 950.615598ms ago: executing program 3 (id=6781): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee1768812003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dbffffffffffffffff1f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000070000000051c9844dc9031379b67a885813c8c9", 0xb8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) r6 = socket(0xa, 0x3, 0x87) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x78, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private=0xa010102, @in=@broadcast, 0x4e24, 0xd5a, 0x4e24, 0x4, 0x2, 0xa0, 0xa0, 0x6, 0x0, r9}, {0x8, 0x0, 0xfff, 0x6, 0x5, 0xff, 0x40, 0x7}, {0x5, 0x7fff, 0x1, 0xffffffffffff0000}, 0x1, 0x6e6bbf, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private1, 0x4d2, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3506, 0x0, 0x3, 0x80, 0xe, 0x80, 0x4}}, 0xe8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r5, 0x9}, &(0x7f0000000080)=0x8) 922.432034ms ago: executing program 1 (id=6782): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}, "000088beffff0000"}}}}}, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x80002, 0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x50}}, 0x20004080) 774.989334ms ago: executing program 6 (id=6783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001040)={0x0, 0x2}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xd1c, 0x203, 0xffffffff, 0x1000, r1}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xe93ac67a917d6080, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x2, 0x70bd28}, 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000240)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r5) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @remote, @empty, @rand_addr=' \x01\x00'}}}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x28, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x1, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0xc041) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xf1}, {0xc, 0x90, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xff}}]}, 0xcc}}, 0x48000) getsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000001180)={0x1a, 0x33a, 0x4, 0x8, 0x2, 0x8, @multicast}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000001300)) 683.218241ms ago: executing program 1 (id=6784): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) recvmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000005740)=""/4084, 0xff4}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002840)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4092, 0xffc}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000000280)=""/91, 0x5b}], 0x4}, 0x900000}], 0x7, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000ec080018000cac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) 635.38934ms ago: executing program 2 (id=6785): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r3, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) 560.39595ms ago: executing program 3 (id=6786): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000010480)=@o_path={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001340)={&(0x7f0000000080), 0x14, &(0x7f0000001300)={&(0x7f0000000300)="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", 0x1000}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) 435.177681ms ago: executing program 6 (id=6787): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 308.949339ms ago: executing program 2 (id=6788): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r2, r2, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6351b83e32b903bbfe"], 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r7, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x90}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)={'a', ' *:* ', 'w\x00'}, 0x8) 277.514291ms ago: executing program 3 (id=6789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000001340)=[{&(0x7f0000000340)="a272252e0538609eebff320965e838f376fc08388818567eb6182f65e9b636e9f581d8bdb5014619cc5a6aeb3e671cf9cf5f03910d05a1ca48d707d4ca41b9b249e11391ab2cf3098ea7144b2b2e0e08b6e12d2531da42957bb8a50460b2770cb6ca186bf53d95452c541bbed7117f4f9ada020f6d7eb66444395fc7edb7ef711425507165065194b2df06156f9b737b75020d4770db7786609d4ee22e9aff1ea6de97524de147d9e11bf0c367a52ea0bd8f61ad02e83eed760a86735e19dcbe4eb5117220836ab3461a337630df15f5f4746d7acdb69db27bed0d31a0d9920a06e487cd0fbab852", 0xe8}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0xfffffffffffffda4}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@private0, 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d, 0x0, r3}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4000000000000000}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x1}}, 0xf0}}, 0x48080) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) getsockopt$inet_mreqn(r6, 0x0, 0x24, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000700)="073b7f848d4121f583c6cbb4c967e6ad7130", 0x12}], 0x1}}], 0x1, 0x40) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x1000}) 207.369101ms ago: executing program 1 (id=6790): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d800500010003000000050004000000000008000200f9"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000010644ff3a0164b9f7b5c63c9db0f29b8eb0799f674e26e3afa54c0a58c2b52657235a793cad0daad1d6d22d2b1643692bd008033a1acbf25a9dbf08e6f01e0f48b505276f1a18d66dd27fdd1e7fec15d6a58aef8290031b823b17bcfc416", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000005007400000000000600ed003d050000"], 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 147.791321ms ago: executing program 6 (id=6791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x3f) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005000e"], 0x30}}, 0x0) 0s ago: executing program 2 (id=6792): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="b44d071541f2e3", 0x7}], 0x1, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000bd67e9226e00003ab800", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x700, 0x700, 0x4, 0x8001, {{0x35, 0x4, 0x2, 0x0, 0xd4, 0x65, 0x0, 0x81, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0x26, [@rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0xc, [0x9, 0x2, 0x80, 0x7fffffff, 0xff, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x4, [{@rand_addr=0x64010100, 0x6c8}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2d21}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x0, [{@loopback, 0x4}, {@loopback, 0x8}]}, @noop, @timestamp_prespec={0x44, 0x54, 0x29, 0x3, 0x1, [{@multicast1, 0x2}, {@empty, 0x9}, {@loopback, 0x7}, {@multicast1, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3b50a7b4}, {@local, 0x402e}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x7}]}]}}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19e7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x71, &(0x7f0000000340)=""/113, 0x41100, 0x2, '\x00', r5, 0x25, r3, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0xe, 0x1, 0x81}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, r6, r10], &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x9}], 0x10, 0x2}, 0x94) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000d042abd7000fcffff1f00000000", @ANYRES32=r11, @ANYBLOB="46000600000400001c00008009000100626f6e640e0000000c000280050001000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) kernel console output (not intermixed with test programs): mode [ 776.683784][T26946] veth0_macvtap: entered promiscuous mode [ 776.736060][T26946] veth1_macvtap: entered promiscuous mode [ 776.749576][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 776.878560][T26946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.933400][T26946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.990355][ T9370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.990405][ T9370] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.990442][ T9370] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.990479][ T9370] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.342346][T27512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5796'. [ 777.438987][T27513] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5796'. [ 777.803710][T18704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.803733][T18704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.077413][T21141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.077438][T21141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.634212][T27556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5804'. [ 778.653010][T27557] netlink: 'syz.1.5803': attribute type 23 has an invalid length. [ 778.673998][T27551] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 779.092036][T27574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.093653][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5807'. [ 779.393838][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5813'. [ 779.447125][T27591] idletimer_tg_helper: 17 callbacks suppressed [ 779.447149][T27591] xt_IDLETIMER: label is empty or not nul-terminated [ 779.597616][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5814'. [ 779.687024][T27603] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 779.748116][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5816'. [ 779.902729][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5820'. [ 779.976328][T27617] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5821'. [ 780.006053][T27611] ip6_vti0: entered promiscuous mode [ 780.013810][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5819'. [ 780.134347][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5821'. [ 780.180423][T27621] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 780.182038][T27621] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5823'. [ 780.367897][T27637] netlink: 'syz.4.5827': attribute type 3 has an invalid length. [ 780.452559][T27647] netlink: 'syz.4.5827': attribute type 3 has an invalid length. [ 780.493172][T27646] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 780.678752][T27654] syzkaller1: entered promiscuous mode [ 780.678778][T27654] syzkaller1: entered allmulticast mode [ 780.775727][T27656] netlink: 'syz.2.5831': attribute type 83 has an invalid length. [ 781.055436][T27674] xt_policy: output policy not valid in PREROUTING and INPUT [ 781.444898][T27691] ip_tables: iptables: counters copy to user failed while replacing table [ 781.522846][T27699] FAULT_INJECTION: forcing a failure. [ 781.522846][T27699] name failslab, interval 1, probability 0, space 0, times 0 [ 781.522885][T27699] CPU: 1 UID: 0 PID: 27699 Comm: syz.3.5843 Not tainted syzkaller #0 PREEMPT(full) [ 781.522910][T27699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.522925][T27699] Call Trace: [ 781.522933][T27699] [ 781.522942][T27699] dump_stack_lvl+0xe8/0x150 [ 781.522981][T27699] should_fail_ex+0x410/0x560 [ 781.523013][T27699] should_failslab+0xa8/0x100 [ 781.523043][T27699] __kvmalloc_node_noprof+0x176/0x820 [ 781.523073][T27699] ? nf_hook_entries_grow+0x287/0x740 [ 781.523169][T27699] ? nf_hook_entries_grow+0x287/0x740 [ 781.523192][T27699] ? __pfx___mutex_lock+0x10/0x10 [ 781.523224][T27699] nf_hook_entries_grow+0x287/0x740 [ 781.523263][T27699] __nf_register_net_hook+0x2c9/0x930 [ 781.523300][T27699] nf_register_net_hook+0xb2/0x190 [ 781.523325][T27699] nf_register_net_hooks+0x44/0x1b0 [ 781.523353][T27699] nf_ct_netns_do_get+0x3bf/0x5c0 [ 781.523434][T27699] ? lock_acquire+0x115/0x350 [ 781.523458][T27699] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 781.523481][T27699] ? synproxy_pernet+0x45/0x270 [ 781.523543][T27699] ? synproxy_pernet+0x45/0x270 [ 781.523574][T27699] nf_ct_netns_get+0x41/0x320 [ 781.523604][T27699] nft_synproxy_do_init+0x1d1/0x4c0 [ 781.523638][T27699] nf_tables_newrule+0x179e/0x28a0 [ 781.523719][T27699] ? __pfx_nf_tables_newrule+0x10/0x10 [ 781.523746][T27699] ? lock_acquire+0x115/0x350 [ 781.523770][T27699] ? nfnl_pernet+0x23/0x240 [ 781.523811][T27699] ? __nla_parse+0x40/0x60 [ 781.523848][T27699] nfnetlink_rcv+0x1288/0x28c0 [ 781.523918][T27699] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 781.523969][T27699] ? ref_tracker_free+0x689/0x830 [ 781.524022][T27699] ? skb_clone+0x246/0x3a0 [ 781.524058][T27699] ? __netlink_deliver_tap+0x811/0x860 [ 781.524103][T27699] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.524136][T27699] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.524177][T27699] netlink_unicast+0x7bd/0x940 [ 781.524221][T27699] netlink_sendmsg+0x813/0xb40 [ 781.524268][T27699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.524312][T27699] ? apparmor_socket_sendmsg+0x98/0x360 [ 781.524341][T27699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.524374][T27699] sock_sendmsg_nosec+0x13a/0x180 [ 781.524413][T27699] ____sys_sendmsg+0x54e/0x850 [ 781.524451][T27699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.524493][T27699] ? import_iovec+0x73/0xa0 [ 781.524526][T27699] ___sys_sendmsg+0x2a5/0x360 [ 781.524555][T27699] ? __lock_acquire+0x747/0x2de0 [ 781.524583][T27699] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.524656][T27699] ? __fget_files+0x2a/0x420 [ 781.524695][T27699] ? __fget_files+0x3a2/0x420 [ 781.524739][T27699] __x64_sys_sendmsg+0x1b1/0x290 [ 781.524774][T27699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.524831][T27699] do_syscall_64+0x166/0x520 [ 781.524855][T27699] ? trace_irq_disable+0x3b/0x140 [ 781.524878][T27699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.524902][T27699] ? clear_bhb_loop+0x70/0xc0 [ 781.524932][T27699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.524955][T27699] RIP: 0033:0x7f2b3359e159 [ 781.524976][T27699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.524995][T27699] RSP: 002b:00007f2b344cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.525020][T27699] RAX: ffffffffffffffda RBX: 00007f2b33825fa0 RCX: 00007f2b3359e159 [ 781.525037][T27699] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 781.525052][T27699] RBP: 00007f2b344cb090 R08: 0000000000000000 R09: 0000000000000000 [ 781.525067][T27699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.525081][T27699] R13: 00007f2b33826038 R14: 00007f2b33825fa0 R15: 00007fff9dd2aef8 [ 781.525119][T27699] [ 783.649165][T27783] hsr0 speed is unknown, defaulting to 1000 [ 783.649235][T27783] hsr0 speed is unknown, defaulting to 1000 [ 783.667790][T27783] hsr0 speed is unknown, defaulting to 1000 [ 783.678849][T27783] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 783.678891][T27783] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 783.678935][T27783] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 783.848770][T27783] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 783.878101][T27789] __nla_validate_parse: 10 callbacks suppressed [ 783.878126][T27789] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5870'. [ 783.918728][T27789] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5870'. [ 784.348126][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.373454][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.477869][T27794] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5871'. [ 784.493248][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.516701][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.529077][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.585800][T27803] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5872'. [ 784.626025][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.639617][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.672729][T27803] syzkaller1: left promiscuous mode [ 784.672754][T27803] syzkaller1: left allmulticast mode [ 784.673346][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.675462][T27783] hsr0 speed is unknown, defaulting to 1000 [ 784.870169][ T31] audit: type=1107 audit(1789502047.652:10): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='o'Î{®šƒEyIQöüFV¼ä”¼“¡¡‡^},]N¥ÚR{Sê2bŽPÖoäKÖ'–3Áù$ù>ù„ö' [ 784.966732][T27822] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 784.991192][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5879'. [ 785.046680][T27822] bond4: (slave bond0): Releasing active interface [ 785.063351][T27822] bond0 (unregistering): (slave bond2): Releasing backup interface [ 785.067141][T27822] bond0 (unregistering): Released all slaves [ 785.116984][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5880'. [ 785.202598][T27835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.281284][T27835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.309549][T27835] bond0 (unregistering): Released all slaves [ 785.373283][T27837] batadv_slave_0: entered promiscuous mode [ 785.423319][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5885'. [ 785.468991][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5882'. [ 785.469129][T27853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.525627][T27852] netlink: 'syz.3.5884': attribute type 2 has an invalid length. [ 785.978519][T27853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.619449][ T31] audit: type=1107 audit(1789502049.402:11): pid=27882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 786.839359][T27897] netlink: 'syz.6.5896': attribute type 64 has an invalid length. [ 786.839389][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5896'. [ 787.236107][T27916] netlink: 'syz.3.5905': attribute type 11 has an invalid length. [ 788.175498][T27945] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5914'. [ 789.057836][T27981] pimreg: entered allmulticast mode [ 789.217757][T27988] netlink: 'syz.6.5929': attribute type 6 has an invalid length. [ 789.217783][T27988] __nla_validate_parse: 1 callbacks suppressed [ 789.217797][T27988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5929'. [ 789.283697][T27990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5930'. [ 789.283723][T27990] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5930'. [ 789.739621][T28009] FAULT_INJECTION: forcing a failure. [ 789.739621][T28009] name failslab, interval 1, probability 0, space 0, times 0 [ 789.739660][T28009] CPU: 0 UID: 0 PID: 28009 Comm: syz.1.5936 Not tainted syzkaller #0 PREEMPT(full) [ 789.739690][T28009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.739704][T28009] Call Trace: [ 789.739713][T28009] [ 789.739723][T28009] dump_stack_lvl+0xe8/0x150 [ 789.739771][T28009] should_fail_ex+0x410/0x560 [ 789.739801][T28009] ? __alloc_skb+0x1db/0x7a0 [ 789.739826][T28009] should_failslab+0xa8/0x100 [ 789.739856][T28009] ? __alloc_skb+0x1db/0x7a0 [ 789.739879][T28009] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 789.739913][T28009] ? __alloc_skb+0x18d/0x7a0 [ 789.739936][T28009] ? __alloc_skb+0x1db/0x7a0 [ 789.739967][T28009] __alloc_skb+0x1db/0x7a0 [ 789.739997][T28009] netlink_sendmsg+0x5d4/0xb40 [ 789.740041][T28009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.740083][T28009] ? apparmor_socket_sendmsg+0x98/0x360 [ 789.740111][T28009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.740143][T28009] sock_sendmsg_nosec+0x13a/0x180 [ 789.740181][T28009] ____sys_sendmsg+0x54e/0x850 [ 789.740216][T28009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 789.740255][T28009] ? import_iovec+0x73/0xa0 [ 789.740287][T28009] ___sys_sendmsg+0x2a5/0x360 [ 789.740314][T28009] ? __lock_acquire+0x747/0x2de0 [ 789.740342][T28009] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.740415][T28009] ? __fget_files+0x2a/0x420 [ 789.740445][T28009] ? __fget_files+0x3a2/0x420 [ 789.740486][T28009] __x64_sys_sendmsg+0x1b1/0x290 [ 789.740518][T28009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 789.740571][T28009] do_syscall_64+0x166/0x520 [ 789.740594][T28009] ? trace_irq_disable+0x3b/0x140 [ 789.740616][T28009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.740640][T28009] ? clear_bhb_loop+0x70/0xc0 [ 789.740668][T28009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.740690][T28009] RIP: 0033:0x7f7c9bf9e159 [ 789.740712][T28009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.740731][T28009] RSP: 002b:00007f7c9cefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.740758][T28009] RAX: ffffffffffffffda RBX: 00007f7c9c225fa0 RCX: 00007f7c9bf9e159 [ 789.740783][T28009] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 789.740798][T28009] RBP: 00007f7c9cefc090 R08: 0000000000000000 R09: 0000000000000000 [ 789.740813][T28009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.740826][T28009] R13: 00007f7c9c226038 R14: 00007f7c9c225fa0 R15: 00007ffe2036a7e8 [ 789.740862][T28009] [ 790.046714][T28011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.066153][T28012] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 790.192431][T28018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.277826][T28020] gre1: entered promiscuous mode [ 790.392783][T28025] netlink: 808 bytes leftover after parsing attributes in process `syz.2.5941'. [ 790.656193][T28032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 790.669435][T28034] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5944'. [ 790.912991][T28043] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 790.913035][T28043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.917539][T28043] netlink: 'syz.1.5947': attribute type 1 has an invalid length. [ 790.917561][T28043] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5947'. [ 791.293907][T28057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5950'. [ 791.318809][T28058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5949'. [ 791.906912][T28074] xt_nfacct: accounting object `syz0' does not exist [ 791.922833][T28074] netlink: Setting conntrack mark requires 'commit' flag. [ 791.922870][T28074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.298461][T28065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5953'. [ 792.448196][T28102] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5964'. [ 793.059478][T28134] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 793.334336][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.334361][ C0] bridge0: topology change detected, propagating [ 793.457140][T28155] netlink: 'syz.4.5979': attribute type 39 has an invalid length. [ 793.592560][T28154] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 793.999888][T28185] batman_adv: batadv0: Adding interface: veth0 [ 794.003441][T28185] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.003484][T28185] batman_adv: batadv0: Interface activated: veth0 [ 794.116636][T28185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.116669][T28185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.139690][T28185] batman_adv: batadv0: Interface deactivated: veth0 [ 794.139719][T28185] batman_adv: batadv0: Removing interface: veth0 [ 794.192165][T28185] batadv0 (unregistering): left promiscuous mode [ 794.397361][T28190] __nla_validate_parse: 3 callbacks suppressed [ 794.397385][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5984'. [ 794.418836][T28190] netlink: 'syz.1.5984': attribute type 1 has an invalid length. [ 794.604941][T28197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5986'. [ 794.773724][ T4933] Bluetooth: hci6: command tx timeout [ 794.888223][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5989'. [ 795.091096][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5992'. [ 795.106929][T28229] veth1_to_bond: entered allmulticast mode [ 795.107200][T28231] veth1_to_bond: entered promiscuous mode [ 795.110247][T28228] veth1_to_bond: left promiscuous mode [ 795.110776][T28228] veth1_to_bond: left allmulticast mode [ 795.140541][T28234] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5993'. [ 795.615325][T28259] tipc: Started in network mode [ 795.615357][T28259] tipc: Node identity ac14140f, cluster identity 1 [ 795.615671][T28259] tipc: New replicast peer: 255.255.255.255 [ 795.648794][T28259] tipc: Enabled bearer , priority 10 [ 795.834006][T28277] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6003'. [ 795.907409][T28278] bond0: option all_slaves_active: invalid value (179) [ 795.909525][T28278] bond0 (unregistering): Released all slaves [ 796.367254][T28299] bond4: option mode: unable to set because the bond device is up [ 796.367477][T28300] bond4: option mode: unable to set because the bond device is up [ 796.391164][T28299] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 796.431100][T28299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 796.449085][T28299] bond4: (slave lo): making interface the new active one [ 796.478175][T28299] bond4: (slave lo): Enslaving as an active interface with an up link [ 796.482527][T28299] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 796.730100][T20059] tipc: Node number set to 2886997007 [ 796.792214][T28314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6012'. [ 796.884657][T28317] FAULT_INJECTION: forcing a failure. [ 796.884657][T28317] name failslab, interval 1, probability 0, space 0, times 0 [ 796.884694][T28317] CPU: 0 UID: 0 PID: 28317 Comm: syz.4.6013 Not tainted syzkaller #0 PREEMPT(full) [ 796.884720][T28317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.884735][T28317] Call Trace: [ 796.884744][T28317] [ 796.884753][T28317] dump_stack_lvl+0xe8/0x150 [ 796.884792][T28317] should_fail_ex+0x410/0x560 [ 796.884824][T28317] should_failslab+0xa8/0x100 [ 796.884852][T28317] ? xfrm_state_alloc+0x24/0x2f0 [ 796.884965][T28317] kmem_cache_alloc_noprof+0xa1/0x600 [ 796.885002][T28317] ? xfrm_state_alloc+0x24/0x2f0 [ 796.885039][T28317] xfrm_state_alloc+0x24/0x2f0 [ 796.885070][T28317] xfrm_add_sa+0x15a9/0x40a0 [ 796.885104][T28317] ? __pfx_xfrm_add_sa+0x10/0x10 [ 796.885126][T28317] ? apparmor_capable+0x126/0x170 [ 796.885167][T28317] ? __nla_parse+0x40/0x60 [ 796.885208][T28317] xfrm_user_rcv_msg+0x7a8/0xf30 [ 796.885239][T28317] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 796.885298][T28317] ? __mutex_trylock_common+0x15f/0x270 [ 796.885332][T28317] ? __pfx___mutex_trylock_common+0x10/0x10 [ 796.885365][T28317] ? rcu_is_watching+0x16/0xb0 [ 796.885392][T28317] ? trace_contention_end+0x3d/0x140 [ 796.885431][T28317] netlink_rcv_skb+0x226/0x4a0 [ 796.885467][T28317] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 796.885492][T28317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 796.885543][T28317] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.885576][T28317] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.885612][T28317] xfrm_netlink_rcv+0x79/0x90 [ 796.885635][T28317] netlink_unicast+0x7bd/0x940 [ 796.885677][T28317] netlink_sendmsg+0x813/0xb40 [ 796.885722][T28317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.885765][T28317] ? apparmor_socket_sendmsg+0x98/0x360 [ 796.885792][T28317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.885824][T28317] sock_sendmsg_nosec+0x13a/0x180 [ 796.885863][T28317] ____sys_sendmsg+0x54e/0x850 [ 796.885899][T28317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.885939][T28317] ? import_iovec+0x73/0xa0 [ 796.885982][T28317] ___sys_sendmsg+0x2a5/0x360 [ 796.886011][T28317] ? __lock_acquire+0x747/0x2de0 [ 796.886039][T28317] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.886109][T28317] ? __fget_files+0x2a/0x420 [ 796.886140][T28317] ? __fget_files+0x3a2/0x420 [ 796.886188][T28317] __x64_sys_sendmsg+0x1b1/0x290 [ 796.886222][T28317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.886276][T28317] do_syscall_64+0x166/0x520 [ 796.886307][T28317] ? trace_irq_disable+0x3b/0x140 [ 796.886329][T28317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.886353][T28317] ? clear_bhb_loop+0x70/0xc0 [ 796.886381][T28317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.886404][T28317] RIP: 0033:0x7f1c1c19e159 [ 796.886425][T28317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.886444][T28317] RSP: 002b:00007f1c1cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.886470][T28317] RAX: ffffffffffffffda RBX: 00007f1c1c425fa0 RCX: 00007f1c1c19e159 [ 796.886487][T28317] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 796.886501][T28317] RBP: 00007f1c1cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 796.886535][T28317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.886549][T28317] R13: 00007f1c1c426038 R14: 00007f1c1c425fa0 R15: 00007fff6df2a8d8 [ 796.886586][T28317] [ 797.350360][T20059] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 797.556525][T28328] netlink: 'syz.4.6017': attribute type 39 has an invalid length. [ 797.623124][T20059] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 797.904740][T28347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6024'. [ 798.033453][T28351] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6025'. [ 798.256389][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6030'. [ 798.288362][T28359] wg0 speed is unknown, defaulting to 1000 [ 798.323800][T28366] netlink: 'syz.4.6032': attribute type 11 has an invalid length. [ 798.329088][T28364] netlink: 'syz.1.6028': attribute type 16 has an invalid length. [ 798.641532][T28373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.837234][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 798.859671][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 798.870703][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 798.877281][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 798.878118][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 799.308693][T28359] hsr0 speed is unknown, defaulting to 1000 [ 799.431846][T28394] __nla_validate_parse: 2 callbacks suppressed [ 799.431868][T28394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6041'. [ 799.689721][T28398] bond1: entered allmulticast mode [ 799.985390][T18717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.985431][T18717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 258 - 0 [ 799.985462][T18717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.985492][T18717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44191 - 0 [ 800.070350][T28401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 800.072049][T28401] bond2: entered allmulticast mode [ 800.072412][T28401] bond1: (slave bond2): Enslaving as an active interface with an up link [ 800.108093][T28403] bond1 (unregistering): (slave bond2): Releasing backup interface [ 800.120972][T28403] bond2: left allmulticast mode [ 800.124307][T28403] bond1 (unregistering): Released all slaves [ 800.465153][T18717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.465182][T18717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 258 - 0 [ 800.465203][T18717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.465222][T18717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44191 - 0 [ 800.524788][T28376] wg0 speed is unknown, defaulting to 1000 [ 800.644598][T18717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.651133][T18717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 258 - 0 [ 800.651172][T18717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.651202][T18717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44191 - 0 [ 800.818290][T28428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6050'. [ 800.820572][T28428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6050'. [ 800.820596][T28428] nbd: must specify at least one socket [ 800.891721][T28430] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6051'. [ 800.916391][T18717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.916432][T18717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 258 - 0 [ 800.916461][T18717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.916489][T18717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44191 - 0 [ 800.932914][ T4933] Bluetooth: hci7: command tx timeout [ 801.065199][T28434] netlink: 'syz.1.6052': attribute type 7 has an invalid length. [ 801.071799][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6052'. [ 801.193153][T28434] netlink: 8172 bytes leftover after parsing attributes in process `syz.1.6052'. [ 801.377579][T28444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6055'. [ 801.401221][T28376] hsr0 speed is unknown, defaulting to 1000 [ 801.403300][T28427] siw: device registration error -23 [ 801.576425][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6056'. [ 801.701341][T28451] macvlan0: entered promiscuous mode [ 801.706978][T28457] netlink: 'syz.3.6058': attribute type 32 has an invalid length. [ 801.707000][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'. [ 801.814024][T28461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6056'. [ 801.931890][T28457] bond1: option coupled_control: invalid value (192) [ 801.939208][T28457] bond1 (unregistering): Released all slaves [ 802.544267][T28463] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.544937][T28463] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.010293][ T4933] Bluetooth: hci7: command tx timeout [ 803.048350][T28463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.105026][T28463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.184014][T28463] macvlan0: left promiscuous mode [ 803.431081][T17422] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.431136][T17422] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.431184][T17422] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.431225][T17422] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.731138][T17417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.731212][T17417] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.731250][T17417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.736130][T28483] netlink: 'syz.3.6061': attribute type 3 has an invalid length. [ 803.814122][T28491] netlink: 'syz.6.6063': attribute type 4 has an invalid length. [ 804.004983][T18717] bridge_slave_1: left allmulticast mode [ 804.005012][T18717] bridge_slave_1: left promiscuous mode [ 804.005221][T18717] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.061483][T18717] bridge_slave_0: left allmulticast mode [ 804.061514][T18717] bridge_slave_0: left promiscuous mode [ 804.061734][T18717] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.570537][T28522] ip_tables: iptables: counters copy to user failed while replacing table [ 804.571011][T28521] ip_tables: iptables: counters copy to user failed while replacing table [ 804.623816][T28522] xt_socket: unknown flags 0xc [ 804.624569][T28520] xt_socket: unknown flags 0xc [ 804.939506][T18717] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 804.939538][T18717] bridge5 (unregistering): left promiscuous mode [ 804.939559][T18717] bridge5 (unregistering): left allmulticast mode [ 804.997111][T18717] bond1 (unregistering): Released all slaves [ 805.017299][T18717] bond2 (unregistering): Released all slaves [ 805.037973][T18717] bond3 (unregistering): Released all slaves [ 805.062449][T18717] bond4 (unregistering): (slave lo): Releasing active interface [ 805.062918][T18717] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 805.064275][T18717] bond4 (unregistering): Released all slaves [ 805.096345][ T4933] Bluetooth: hci7: command tx timeout [ 805.116245][T18717] bond5 (unregistering): Released all slaves [ 805.179963][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 805.317668][T17422] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.460839][T18717] tipc: Left network mode [ 805.624445][T28547] __nla_validate_parse: 2 callbacks suppressed [ 805.624468][T28547] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6073'. [ 805.740845][T28555] netlink: ct family unspecified [ 805.789680][T28554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6071'. [ 805.897603][T28549] C: renamed from lo [ 805.907876][T28549] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 805.909822][T28535] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 805.942627][T28560] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6077'. [ 805.998351][T28376] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.998521][T28376] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.998711][T28376] bridge_slave_0: entered allmulticast mode [ 806.012910][T28376] bridge_slave_0: entered promiscuous mode [ 806.113165][T28376] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.119726][T28376] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.124089][T28376] bridge_slave_1: entered allmulticast mode [ 806.131016][T28376] bridge_slave_1: entered promiscuous mode [ 806.383337][T28376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.419116][T28376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.576609][T28376] team0: Port device team_slave_0 added [ 806.589486][T28376] team0: Port device team_slave_1 added [ 806.717691][T28376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.717711][T28376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.717741][T28376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.745011][T28376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.745073][T28376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.745148][T28376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.894332][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 807.007699][T28595] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 807.007730][T28595] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 807.124568][T28598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6084'. [ 807.170620][ T4933] Bluetooth: hci7: command tx timeout [ 807.174909][T28376] hsr_slave_0: entered promiscuous mode [ 807.198475][T28376] hsr_slave_1: entered promiscuous mode [ 807.215435][T28376] debugfs: 'hsr0' already exists in 'hsr' [ 807.228513][T28376] Cannot create hsr debugfs directory [ 807.596414][T18717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.596438][T18717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.628635][T18717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.628662][T18717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.655812][T18717] veth0_macvtap: left allmulticast mode [ 807.655843][T18717] veth0_macvtap: left promiscuous mode [ 807.655889][T18717] veth1_vlan: left promiscuous mode [ 807.655916][T18717] veth0_vlan: left promiscuous mode [ 807.819445][T28621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.569427][T28625] tipc: Started in network mode [ 808.569466][T28625] tipc: Node identity 4a2ed7581469, cluster identity 4711 [ 808.569644][T28625] tipc: Enabled bearer , priority 1 [ 808.585340][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 808.867447][T28643] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6094'. [ 809.020250][T28647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6097'. [ 809.110532][T28646] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.6097'. [ 809.288861][T28376] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.423985][T28653] syzkaller0: entered promiscuous mode [ 809.424013][T28653] syzkaller0: entered allmulticast mode [ 809.452365][T28661] netlink: 420 bytes leftover after parsing attributes in process `syz.1.6099'. [ 809.454536][T18717] IPVS: stop unused estimator thread 0... [ 809.749382][T28376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.834801][T20056] tipc: Node number set to 1581766488 [ 810.003118][T28376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.176369][T28376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.339575][T28691] x_tables: duplicate underflow at hook 3 [ 810.496681][T28700] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6107'. [ 810.853777][T28714] x_tables: duplicate entry at hook 1 [ 810.868936][T28714] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6110'. [ 811.044225][T28376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 811.064139][T28376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 811.068281][T28376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 811.109625][T28376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 811.122051][T28376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 811.139056][T28376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 811.149092][T28376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 811.169804][T28376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 811.318149][T28731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6113'. [ 811.424585][T28376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.469812][T28735] Cannot find del_set index 3 as target [ 811.481591][T28376] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.507910][T17422] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.508042][T17422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.557476][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.557594][ T9370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.576895][T28730] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6114'. [ 811.864791][T28743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'. [ 811.864855][T28743] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 811.866785][T28748] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6117'. [ 812.188103][T28756] netlink: 'syz.6.6119': attribute type 20 has an invalid length. [ 812.188131][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'. [ 812.237725][T28756] netlink: 'syz.6.6119': attribute type 20 has an invalid length. [ 812.237754][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'. [ 812.240995][T17422] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.244788][T18716] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.244913][T18716] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.245035][T18716] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.409883][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6120'. [ 812.439280][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6120'. [ 812.479414][T28772] netlink: 'syz.3.6122': attribute type 2 has an invalid length. [ 812.479439][T28772] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6122'. [ 813.187262][T28376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.312437][T28376] veth0_vlan: entered promiscuous mode [ 813.348645][T28376] veth1_vlan: entered promiscuous mode [ 813.469243][T28376] veth0_macvtap: entered promiscuous mode [ 813.510389][T28376] veth1_macvtap: entered promiscuous mode [ 813.538876][T28376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.577449][T28376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.763323][T21141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.784223][T21141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.911210][T21141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.922502][T21141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.999465][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 814.013910][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 814.016136][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 814.046186][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 814.049849][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 814.104311][T18704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.104336][T18704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.270066][T18716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.270091][T18716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.396468][T28841] syz_tun: entered promiscuous mode [ 814.876256][T28864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.964343][T28876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.108555][T28834] wg0 speed is unknown, defaulting to 1000 [ 815.838574][T28834] hsr0 speed is unknown, defaulting to 1000 [ 816.131126][ T4933] Bluetooth: hci4: command tx timeout [ 816.312857][T28929] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.764751][T28948] Cannot find map_set index 135 as target [ 816.823456][T28948] __nla_validate_parse: 5 callbacks suppressed [ 816.823481][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6153'. [ 816.824047][T28948] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6153'. [ 816.940301][T28959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6158'. [ 816.960883][T28959] netlink: 'syz.3.6158': attribute type 1 has an invalid length. [ 817.094957][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.096719][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.096940][T28834] bridge_slave_0: entered allmulticast mode [ 817.102458][T28834] bridge_slave_0: entered promiscuous mode [ 817.123665][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.124265][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.124756][T28834] bridge_slave_1: entered allmulticast mode [ 817.136918][T28834] bridge_slave_1: entered promiscuous mode [ 817.307485][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.329886][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.491033][T28834] team0: Port device team_slave_0 added [ 817.494000][T28834] team0: Port device team_slave_1 added [ 817.588225][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.588247][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.588278][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.618662][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.618717][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.618794][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.734289][T28834] hsr_slave_0: entered promiscuous mode [ 817.735379][T28834] hsr_slave_1: entered promiscuous mode [ 817.736143][T28834] debugfs: 'hsr0' already exists in 'hsr' [ 817.736165][T28834] Cannot create hsr debugfs directory [ 818.210516][ T4933] Bluetooth: hci4: command tx timeout [ 819.446700][T28940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.506333][T28834] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 819.527678][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.528853][T28834] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 819.586150][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.587376][T28834] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 819.612236][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.613162][T28834] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 819.648498][T28834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.074601][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.114613][T29018] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6164'. [ 820.154047][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.183242][T17422] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.183356][T17422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.228440][T17422] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.228553][T17422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.290839][ T4933] Bluetooth: hci4: command tx timeout [ 820.506325][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 820.853058][T29045] tipc: Enabling of bearer rejected, failed to enable media [ 820.897861][T29048] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 820.912538][T29049] IPVS: sync thread started: state = BACKUP, mcast_ifn = syzkaller0, syncid = 3, id = 0 [ 821.248446][T29060] netlink: zone id is out of range [ 821.248466][T29060] netlink: zone id is out of range [ 821.248476][T29060] netlink: zone id is out of range [ 821.248485][T29060] netlink: zone id is out of range [ 821.248494][T29060] netlink: zone id is out of range [ 821.248503][T29060] netlink: zone id is out of range [ 821.248518][T29060] netlink: zone id is out of range [ 821.248527][T29060] netlink: zone id is out of range [ 821.248536][T29060] netlink: zone id is out of range [ 821.248546][T29060] netlink: zone id is out of range [ 821.635428][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.702844][T29077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6180'. [ 821.835489][T29086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6184'. [ 822.282480][T29109] ipt_REJECT: TCP_RESET invalid for non-tcp [ 822.319189][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6189'. [ 822.370479][ T4933] Bluetooth: hci4: command tx timeout [ 822.582727][T28834] veth0_vlan: entered promiscuous mode [ 822.609269][T28834] veth1_vlan: entered promiscuous mode [ 822.746966][T29134] netlink: 'syz.1.6196': attribute type 23 has an invalid length. [ 822.799492][T28834] veth0_macvtap: entered promiscuous mode [ 822.845866][T28834] veth1_macvtap: entered promiscuous mode [ 822.919501][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.983848][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.060937][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.062047][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.062101][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.062142][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.274040][T29148] IPv6: sit2: Disabled Multicast RS [ 823.589635][T17410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.631911][T18717] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.632485][ T9372] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.633090][ T9372] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.060185][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 824.740942][T25463] udevd[25463]: inotify_add_watch(7, /dev/nbd16, 10) failed: No such file or directory [ 825.279760][T29197] netlink: 'syz.1.6205': attribute type 64 has an invalid length. [ 825.501963][T29201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6204'. [ 826.227243][ T9372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.227268][ T9372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.439294][T21168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.439319][T21168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.714669][T29211] netlink: 'syz.2.6207': attribute type 6 has an invalid length. [ 826.714693][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6207'. [ 827.349290][T29240] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6218'. [ 827.424922][T29240] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.425433][T29240] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.593078][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6219'. [ 827.593104][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6219'. [ 828.229343][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 828.301443][T29271] syz_tun (unregistering): left promiscuous mode [ 828.446165][T29288] netlink: 'syz.1.6226': attribute type 4 has an invalid length. [ 828.465781][T29289] netlink: 'syz.1.6226': attribute type 4 has an invalid length. [ 828.574578][T29295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6228'. [ 828.574604][T29295] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6228'. [ 828.627197][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 828.627342][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 828.627458][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 828.627578][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 828.792853][T29296] vlan2: entered allmulticast mode [ 828.792873][T29296] bond0: entered allmulticast mode [ 828.792885][T29296] bond_slave_0: entered allmulticast mode [ 828.792899][T29296] bond_slave_1: entered allmulticast mode [ 829.208633][T29323] netlink: 'syz.1.6236': attribute type 1 has an invalid length. [ 829.296237][T29332] net_ratelimit: 496 callbacks suppressed [ 829.296258][T29332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.316792][T29323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 829.356093][T29330] vlan3: entered promiscuous mode [ 829.356118][T29330] bond8: entered promiscuous mode [ 829.356284][T29330] vlan3: entered allmulticast mode [ 829.356300][T29330] bond8: entered allmulticast mode [ 829.424532][T29323] bond8: (slave bridge9): making interface the new active one [ 829.424563][T29323] bridge9: entered promiscuous mode [ 829.424793][T29323] bridge9: entered allmulticast mode [ 829.426333][T29323] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 830.547209][T29353] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 830.685473][T29357] netlink: 'syz.6.6243': attribute type 1 has an invalid length. [ 830.685491][T29357] netlink: 'syz.6.6243': attribute type 2 has an invalid length. [ 830.686624][T29357] netlink: 'syz.6.6243': attribute type 1 has an invalid length. [ 830.686646][T29357] netlink: 'syz.6.6243': attribute type 2 has an invalid length. [ 831.068077][T29369] vlan2: entered promiscuous mode [ 831.068104][T29369] geneve1: entered promiscuous mode [ 831.068241][T29369] vlan2: entered allmulticast mode [ 831.068252][T29369] geneve1: entered allmulticast mode [ 831.410306][ T4933] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 831.987075][T29310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.068399][T29375] netlink: 'syz.6.6249': attribute type 11 has an invalid length. [ 832.152597][T29375] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 832.369693][T29386] netlink: 'syz.1.6252': attribute type 21 has an invalid length. [ 832.369722][T29386] __nla_validate_parse: 41 callbacks suppressed [ 832.369736][T29386] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6252'. [ 832.392241][T29378] xt_CT: No such helper "pptp" [ 832.394033][T29379] xt_CT: No such helper "pptp" [ 832.738629][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6256'. [ 832.949362][T29412] netlink: 'syz.7.6262': attribute type 4 has an invalid length. [ 832.949387][T29412] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6262'. [ 832.991129][ T31] audit: type=1804 audit(1789502095.772:12): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6254" name="/newroot/117/cgroup.controllers" dev="tmpfs" ino=618 res=1 errno=0 [ 832.996583][ T31] audit: type=1800 audit(1789502095.782:13): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6254" name="cgroup.controllers" dev="tmpfs" ino=618 res=0 errno=0 [ 833.443731][T29434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6270'. [ 833.669696][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.673584][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.674633][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.681275][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.681812][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.689757][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.697240][T29438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.725276][T29438] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not ¨@ƒxŸ [ 833.725652][T29438] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not ¨@ƒxŸ [ 833.726001][T29438] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not ¨@ƒxŸ [ 833.772179][T29449] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6275'. [ 833.779762][T29451] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6275'. [ 833.806030][T29439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6273'. [ 834.213155][T29463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6279'. [ 834.213182][T29463] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6279'. [ 834.213199][T29463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6279'. [ 834.219792][T29466] vlan3: entered promiscuous mode [ 834.219815][T29466] hsr0: entered promiscuous mode [ 834.235171][T29466] vlan3: entered allmulticast mode [ 834.235234][T29466] hsr0: entered allmulticast mode [ 834.235276][T29466] hsr_slave_0: entered allmulticast mode [ 834.235319][T29466] hsr_slave_1: entered allmulticast mode [ 834.307461][T29472] xt_l2tp: missing protocol rule (udp|l2tpip) [ 834.529400][T29478] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 834.927800][T29478] bond1 (unregistering): Released all slaves [ 835.075858][T29487] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 835.108576][T29487] bond1 (unregistering): Released all slaves [ 835.563291][T29519] wg1: entered promiscuous mode [ 835.563328][T29519] wg1: entered allmulticast mode [ 835.569620][T29518] tipc: Started in network mode [ 835.569695][T29518] tipc: Node identity 0ebd178470d7, cluster identity 4711 [ 835.569865][T29518] tipc: Enabled bearer , priority 0 [ 835.657236][T29518] syzkaller0: entered promiscuous mode [ 835.657266][T29518] syzkaller0: entered allmulticast mode [ 835.657964][T29518] tipc: Resetting bearer [ 835.802987][T21168] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.803238][T21168] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.803312][T21168] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.871448][T18694] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.018701][T29543] net_ratelimit: 8 callbacks suppressed [ 836.018726][T29543] netlink: NAT attribute has 8 unknown bytes [ 836.018758][T29543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.164186][T29516] tipc: Resetting bearer [ 840.766639][T29516] tipc: Disabling bearer [ 840.784167][T24446] tipc: Node number set to 2120882052 [ 841.468533][T29596] netlink: 'syz.1.6309': attribute type 2 has an invalid length. [ 841.571026][T29600] __nla_validate_parse: 8 callbacks suppressed [ 841.571051][T29600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6309'. [ 841.679510][T29596] : entered promiscuous mode [ 841.778254][T29600] team0: Port device team_slave_0 removed [ 841.898562][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6316'. [ 842.259338][T29626] tls_set_device_offload: netdev not found [ 842.407099][T29631] team0 (unregistering): Port device team_slave_0 removed [ 842.493059][T29631] team0 (unregistering): Port device team_slave_1 removed [ 842.545765][T29644] dvmrp0: entered allmulticast mode [ 842.559514][T29638] xt_MASQUERADE: bad MAP_IPS. [ 842.836082][T29672] netlink: 'syz.6.6326': attribute type 15 has an invalid length. [ 842.836112][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6326'. [ 842.836274][T29672] netlink: 'syz.6.6326': attribute type 15 has an invalid length. [ 842.836292][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6326'. [ 842.978463][T29678] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6329'. [ 843.017341][T29678] netlink: 'syz.7.6329': attribute type 13 has an invalid length. [ 843.018217][T29678] syzkaller1: entered promiscuous mode [ 843.018242][T29678] syzkaller1: entered allmulticast mode [ 843.147824][T29686] xt_TCPMSS: Only works on TCP SYN packets [ 843.427062][T29693] syzkaller1: entered promiscuous mode [ 843.427087][T29693] syzkaller1: entered allmulticast mode [ 843.667055][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6336'. [ 843.969691][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 843.985873][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 843.994719][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 844.007281][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 844.018039][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 844.668872][T29733] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 844.964920][ T9370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.964958][ T9370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.964979][ T9370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 844.964999][ T9370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 845.024040][T29715] wg0 speed is unknown, defaulting to 1000 [ 845.285162][ T9370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.285203][ T9370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.285234][ T9370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 845.285265][ T9370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 845.343606][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6348'. [ 845.343645][T29747] netlink: 'syz.6.6348': attribute type 10 has an invalid length. [ 845.343665][T29747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6348'. [ 845.499238][T29755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6349'. [ 845.641191][ T9370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.641232][ T9370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.641263][ T9370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 845.641293][ T9370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 845.909184][ T9370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.923177][ T9370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.923227][ T9370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 845.923259][ T9370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 846.032139][T29715] hsr0 speed is unknown, defaulting to 1000 [ 846.131337][ T4933] Bluetooth: hci8: command tx timeout [ 846.339443][T29781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6353'. [ 846.413113][T29781] sctp: [Deprecated]: syz.7.6353 (pid 29781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.413113][T29781] Use struct sctp_sack_info instead [ 846.581984][T18694] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.587168][T21140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.639269][ T1116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.773612][T18694] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.883893][ T9370] bridge_slave_1: left promiscuous mode [ 846.893127][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.924103][T29791] xt_cgroup: invalid path, errno=-2 [ 846.957817][ T9370] bridge_slave_0: left allmulticast mode [ 846.957850][ T9370] bridge_slave_0: left promiscuous mode [ 846.958068][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.996001][T29791] netlink: 'syz.6.6355': attribute type 1 has an invalid length. [ 847.327746][ T9370] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 847.661102][ T9370] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 847.661463][ T9370] bridge0 (unregistering): left allmulticast mode [ 847.782458][ T9370] bond8 (unregistering): (slave bridge9): Releasing active interface [ 847.782495][ T9370] bridge9 (unregistering): left promiscuous mode [ 847.782510][ T9370] bridge9 (unregistering): left allmulticast mode [ 847.817639][ T9370] team0: Port device bond0 removed [ 847.834504][ T9370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.835067][ T9370] bond_slave_0: left allmulticast mode [ 847.838358][ T9370] bond0 (unregistering): Released all slaves [ 847.867325][ T9370] bond1 (unregistering): Released all slaves [ 847.885686][ T9370] bond2 (unregistering): Released all slaves [ 847.904787][ T9370] bond3 (unregistering): Released all slaves [ 847.923205][ T9370] bond4 (unregistering): Released all slaves [ 847.956573][ T9370] bond5 (unregistering): Released all slaves [ 847.974228][ T9370] bond6 (unregistering): Released all slaves [ 847.989341][ T9370] bond7 (unregistering): Released all slaves [ 848.027080][ T9370] bond8 (unregistering): Released all slaves [ 848.048903][T29791] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 848.064730][T29811] __nla_validate_parse: 3 callbacks suppressed [ 848.064758][T29811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6357'. [ 848.099548][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 848.210845][ T4933] Bluetooth: hci8: command tx timeout [ 848.234372][T29777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.234399][T29777] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 848.534901][T29830] netlink: 'syz.6.6361': attribute type 20 has an invalid length. [ 848.534930][T29830] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.586347][T29834] x_tables: unsorted underflow at hook 1 [ 848.679287][T29825] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6360'. [ 848.812794][ T9370] : left promiscuous mode [ 849.086460][ T9370] tipc: Disabling bearer [ 849.105074][ T9370] tipc: Left network mode [ 849.105802][T29777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.105825][T29777] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 849.108780][T29715] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.108986][T29715] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.109167][T29715] bridge_slave_0: entered allmulticast mode [ 849.125135][T29715] bridge_slave_0: entered promiscuous mode [ 849.167359][T29715] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.167479][T29715] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.167674][T29715] bridge_slave_1: entered allmulticast mode [ 849.209306][T29715] bridge_slave_1: entered promiscuous mode [ 849.316121][ T9370] IPVS: stopping master sync thread 19611 ... [ 849.462820][T29863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6365'. [ 849.514623][T29870] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6365'. [ 849.549677][T29858] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003 [ 849.552276][T29777] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 849.552300][T29777] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 849.595384][T29715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.618676][T29715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.694638][T29862] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 849.725183][T29777] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 849.725209][T29777] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 849.763250][T29715] team0: Port device team_slave_0 added [ 849.781295][T29715] team0: Port device team_slave_1 added [ 849.934045][T29877] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6366'. [ 849.974523][T29777] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 849.974550][T29777] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 850.038231][T29715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.038252][T29715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.038282][T29715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.118983][T29715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.119003][T29715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.119028][T29715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.175364][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6368'. [ 850.276771][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 850.278438][T29777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 850.278463][T29777] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 850.308072][ T4933] Bluetooth: hci8: command tx timeout [ 850.455800][T29777] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 850.455829][T29777] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 850.723787][T29898] netlink: 'syz.7.6373': attribute type 5 has an invalid length. [ 850.741531][T29715] hsr_slave_0: entered promiscuous mode [ 850.744728][T29715] hsr_slave_1: entered promiscuous mode [ 850.748906][T29715] debugfs: 'hsr0' already exists in 'hsr' [ 850.748934][T29715] Cannot create hsr debugfs directory [ 851.040731][T29916] xt_limit: Overflow, try lower: 536871034/0 [ 851.048104][T29915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6377'. [ 851.314420][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6377'. [ 851.736749][T29941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6383'. [ 851.766414][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6383'. [ 852.056886][T29715] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.215953][T29944] bridge2: port 1(vlan2) entered blocking state [ 852.216147][T29944] bridge2: port 1(vlan2) entered disabled state [ 852.216356][T29944] vlan2: entered allmulticast mode [ 852.216374][T29944] bridge2: entered allmulticast mode [ 852.248011][T29944] vlan2: left allmulticast mode [ 852.248037][T29944] bridge2: left allmulticast mode [ 852.365032][ T9370] veth1_macvtap: left promiscuous mode [ 852.365062][ T9370] veth0_macvtap: left promiscuous mode [ 852.365133][ T9370] veth1_vlan: left promiscuous mode [ 852.673000][ T9370] team0 (unregistering): Port device vlan0 removed [ 852.756275][ T9370] team0 (unregistering): Port device team_slave_1 removed [ 852.964873][T29715] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.133562][T29968] __nla_validate_parse: 3 callbacks suppressed [ 853.133637][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6387'. [ 853.475498][T29715] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.600993][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6390'. [ 853.679682][T29715] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.850487][T29988] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 853.856564][T29988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.070872][T30008] ip_tables: iptables: counters copy to user failed while replacing table [ 854.243655][ T9370] IPVS: stop unused estimator thread 0... [ 854.334121][T29715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 854.355281][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.356862][T29715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 854.382931][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.384173][T29715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 854.412005][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.415076][T29715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 854.448997][T29715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.566966][T29715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.613115][T29715] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.637545][T17422] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.637655][T17422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.678456][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.678591][ T9370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.816177][T30032] netlink: 'syz.7.6400': attribute type 10 has an invalid length. [ 854.816733][T30031] netlink: 'syz.7.6400': attribute type 10 has an invalid length. [ 854.849674][T30033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6399'. [ 854.876152][T30032] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.880460][T30031] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.935518][T30033] tipc: Enabled bearer , priority 0 [ 854.947022][T30031] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6400'. [ 855.195179][T30049] openvswitch: netlink: EtherType 300 is less than min 600 [ 855.512741][T30027] tipc: Disabling bearer [ 855.958486][T30081] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6407'. [ 855.958526][T30081] netlink: 'syz.6.6407': attribute type 7 has an invalid length. [ 855.958540][T30081] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6407'. [ 856.204604][T30096] Cannot find set identified by id 4 to match [ 856.218595][T30096] Cannot find set identified by id 4 to match [ 856.219244][T30096] Cannot find set identified by id 4 to match [ 856.219859][T30096] Cannot find set identified by id 4 to match [ 856.239525][T30096] Cannot find set identified by id 4 to match [ 856.272413][T30096] Cannot find set identified by id 4 to match [ 856.273049][T30096] Cannot find set identified by id 4 to match [ 856.283900][T30096] Cannot find set identified by id 4 to match [ 856.292621][T30096] Cannot find set identified by id 4 to match [ 856.293316][T30096] Cannot find set identified by id 4 to match [ 856.485902][T29715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.535082][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6410'. [ 856.828467][T29715] veth0_vlan: entered promiscuous mode [ 856.883620][T29715] veth1_vlan: entered promiscuous mode [ 856.986410][T29715] veth0_macvtap: entered promiscuous mode [ 857.005505][T29715] veth1_macvtap: entered promiscuous mode [ 857.029527][T30119] netlink: 'syz.7.6413': attribute type 15 has an invalid length. [ 857.061243][T29715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.111878][T29715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.188338][T30119] xfrm1: entered allmulticast mode [ 857.251796][ T9370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.252474][ T9370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.252557][ T9370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.252626][ T9370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.439265][T30125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6414'. [ 857.569858][ T9370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.571070][ T9370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.804427][T18704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.804453][T18704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.927961][T30140] FAULT_INJECTION: forcing a failure. [ 857.927961][T30140] name failslab, interval 1, probability 0, space 0, times 0 [ 857.927999][T30140] CPU: 0 UID: 0 PID: 30140 Comm: syz.6.6417 Not tainted syzkaller #0 PREEMPT(full) [ 857.928025][T30140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.928040][T30140] Call Trace: [ 857.928050][T30140] [ 857.928061][T30140] dump_stack_lvl+0xe8/0x150 [ 857.928102][T30140] should_fail_ex+0x410/0x560 [ 857.928133][T30140] ? __alloc_skb+0x1db/0x7a0 [ 857.928159][T30140] should_failslab+0xa8/0x100 [ 857.928189][T30140] ? __alloc_skb+0x1db/0x7a0 [ 857.928214][T30140] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 857.928250][T30140] ? __alloc_skb+0x18d/0x7a0 [ 857.928277][T30140] ? __alloc_skb+0x1db/0x7a0 [ 857.928311][T30140] __alloc_skb+0x1db/0x7a0 [ 857.928343][T30140] xfrm_send_policy_notify+0x2a0/0x1c00 [ 857.928392][T30140] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 857.928429][T30140] ? lock_acquire+0x115/0x350 [ 857.928460][T30140] ? lockdep_hardirqs_on+0x7b/0x110 [ 857.928486][T30140] ? __local_bh_enable_ip+0xd6/0x140 [ 857.928517][T30140] ? km_policy_notify+0x28/0x200 [ 857.928540][T30140] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 857.928576][T30140] km_policy_notify+0x121/0x200 [ 857.928598][T30140] ? km_policy_notify+0x28/0x200 [ 857.928632][T30140] xfrm_add_policy+0x4a1/0x690 [ 857.928670][T30140] ? __pfx_xfrm_add_policy+0x10/0x10 [ 857.928693][T30140] ? apparmor_capable+0x126/0x170 [ 857.928733][T30140] ? __nla_parse+0x40/0x60 [ 857.928769][T30140] xfrm_user_rcv_msg+0x7a8/0xf30 [ 857.928803][T30140] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 857.928865][T30140] ? __mutex_trylock_common+0x15f/0x270 [ 857.928899][T30140] ? __pfx___mutex_trylock_common+0x10/0x10 [ 857.928933][T30140] ? rcu_is_watching+0x16/0xb0 [ 857.928962][T30140] ? trace_contention_end+0x3d/0x140 [ 857.929001][T30140] netlink_rcv_skb+0x226/0x4a0 [ 857.929037][T30140] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 857.929063][T30140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 857.929114][T30140] ? netlink_deliver_tap+0x2e/0x1b0 [ 857.929148][T30140] ? netlink_deliver_tap+0x2e/0x1b0 [ 857.929185][T30140] xfrm_netlink_rcv+0x79/0x90 [ 857.929209][T30140] netlink_unicast+0x7bd/0x940 [ 857.929254][T30140] netlink_sendmsg+0x813/0xb40 [ 857.929299][T30140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.929344][T30140] ? apparmor_socket_sendmsg+0x98/0x360 [ 857.929372][T30140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.929405][T30140] sock_sendmsg_nosec+0x13a/0x180 [ 857.929446][T30140] ____sys_sendmsg+0x54e/0x850 [ 857.929483][T30140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.929526][T30140] ? import_iovec+0x73/0xa0 [ 857.929559][T30140] ___sys_sendmsg+0x2a5/0x360 [ 857.929589][T30140] ? __lock_acquire+0x747/0x2de0 [ 857.929625][T30140] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.929698][T30140] ? __fget_files+0x2a/0x420 [ 857.929730][T30140] ? __fget_files+0x3a2/0x420 [ 857.929775][T30140] __x64_sys_sendmsg+0x1b1/0x290 [ 857.929809][T30140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 857.929864][T30140] do_syscall_64+0x166/0x520 [ 857.929889][T30140] ? trace_irq_disable+0x3b/0x140 [ 857.929917][T30140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.929940][T30140] ? clear_bhb_loop+0x70/0xc0 [ 857.929969][T30140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.929993][T30140] RIP: 0033:0x7f4f8419e159 [ 857.930014][T30140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.930034][T30140] RSP: 002b:00007f4f85141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.930060][T30140] RAX: ffffffffffffffda RBX: 00007f4f84425fa0 RCX: 00007f4f8419e159 [ 857.930078][T30140] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 857.930094][T30140] RBP: 00007f4f85141090 R08: 0000000000000000 R09: 0000000000000000 [ 857.930109][T30140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.930121][T30140] R13: 00007f4f84426038 R14: 00007f4f84425fa0 R15: 00007ffc6842c948 [ 857.930160][T30140] [ 858.505947][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 858.955234][T30168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6423'. [ 858.955278][T30168] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6423'. [ 859.005214][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6423'. [ 859.051508][T30170] x_tables: duplicate underflow at hook 1 [ 859.357182][T30184] netlink: 'syz.1.6427': attribute type 2 has an invalid length. [ 859.372038][T30173] xt_SECMARK: invalid mode: 9 [ 859.377952][T30173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6425'. [ 859.413772][T30184] : entered promiscuous mode [ 859.415764][T30173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6425'. [ 859.593385][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6428'. [ 859.663563][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6428'. [ 859.748174][T30198] FAULT_INJECTION: forcing a failure. [ 859.748174][T30198] name failslab, interval 1, probability 0, space 0, times 0 [ 859.748214][T30198] CPU: 0 UID: 0 PID: 30198 Comm: syz.2.6430 Not tainted syzkaller #0 PREEMPT(full) [ 859.748241][T30198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.748255][T30198] Call Trace: [ 859.748265][T30198] [ 859.748275][T30198] dump_stack_lvl+0xe8/0x150 [ 859.748315][T30198] should_fail_ex+0x410/0x560 [ 859.748345][T30198] ? __alloc_skb+0x1db/0x7a0 [ 859.748371][T30198] should_failslab+0xa8/0x100 [ 859.748416][T30198] ? __alloc_skb+0x1db/0x7a0 [ 859.748440][T30198] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 859.748476][T30198] ? __alloc_skb+0x18d/0x7a0 [ 859.748503][T30198] ? __alloc_skb+0x1db/0x7a0 [ 859.748537][T30198] __alloc_skb+0x1db/0x7a0 [ 859.748569][T30198] xfrm_send_policy_notify+0x2a0/0x1c00 [ 859.748617][T30198] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 859.748654][T30198] ? lock_acquire+0x115/0x350 [ 859.748686][T30198] ? lockdep_hardirqs_on+0x7b/0x110 [ 859.748717][T30198] ? __local_bh_enable_ip+0xd6/0x140 [ 859.748747][T30198] ? km_policy_notify+0x28/0x200 [ 859.748769][T30198] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 859.748805][T30198] km_policy_notify+0x121/0x200 [ 859.748827][T30198] ? km_policy_notify+0x28/0x200 [ 859.748852][T30198] xfrm_add_policy+0x4a1/0x690 [ 859.748883][T30198] ? __pfx_xfrm_add_policy+0x10/0x10 [ 859.748905][T30198] ? apparmor_capable+0x126/0x170 [ 859.748948][T30198] ? __nla_parse+0x40/0x60 [ 859.748982][T30198] xfrm_user_rcv_msg+0x7a8/0xf30 [ 859.749013][T30198] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 859.749073][T30198] ? __mutex_trylock_common+0x15f/0x270 [ 859.749105][T30198] ? __pfx___mutex_trylock_common+0x10/0x10 [ 859.749141][T30198] ? rcu_is_watching+0x16/0xb0 [ 859.749171][T30198] ? trace_contention_end+0x3d/0x140 [ 859.749210][T30198] netlink_rcv_skb+0x226/0x4a0 [ 859.749246][T30198] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 859.749276][T30198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.749326][T30198] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.749359][T30198] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.749403][T30198] xfrm_netlink_rcv+0x79/0x90 [ 859.749427][T30198] netlink_unicast+0x7bd/0x940 [ 859.749471][T30198] netlink_sendmsg+0x813/0xb40 [ 859.749514][T30198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.749557][T30198] ? apparmor_socket_sendmsg+0x98/0x360 [ 859.749586][T30198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.749619][T30198] sock_sendmsg_nosec+0x13a/0x180 [ 859.749660][T30198] ____sys_sendmsg+0x54e/0x850 [ 859.749697][T30198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.749744][T30198] ? import_iovec+0x73/0xa0 [ 859.749778][T30198] ___sys_sendmsg+0x2a5/0x360 [ 859.749807][T30198] ? __lock_acquire+0x747/0x2de0 [ 859.749837][T30198] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.749907][T30198] ? __fget_files+0x2a/0x420 [ 859.749940][T30198] ? __fget_files+0x3a2/0x420 [ 859.749984][T30198] __x64_sys_sendmsg+0x1b1/0x290 [ 859.750019][T30198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.750075][T30198] do_syscall_64+0x166/0x520 [ 859.750100][T30198] ? trace_irq_disable+0x3b/0x140 [ 859.750123][T30198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.750148][T30198] ? clear_bhb_loop+0x70/0xc0 [ 859.750177][T30198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.750202][T30198] RIP: 0033:0x7f18d439e159 [ 859.750224][T30198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.750245][T30198] RSP: 002b:00007f18d52d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.750271][T30198] RAX: ffffffffffffffda RBX: 00007f18d4625fa0 RCX: 00007f18d439e159 [ 859.750289][T30198] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 859.750304][T30198] RBP: 00007f18d52d7090 R08: 0000000000000000 R09: 0000000000000000 [ 859.750320][T30198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.750334][T30198] R13: 00007f18d4626038 R14: 00007f18d4625fa0 R15: 00007fff1cadc2f8 [ 859.750373][T30198] [ 859.908650][T30193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.215042][T30193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.246865][T30193] bond0 (unregistering): Released all slaves [ 860.285341][T30205] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6431'. [ 860.486126][T30211] vxcan0: tx address claim with different name [ 860.694480][T30220] ip_tables: iptables: counters copy to user failed while replacing table [ 861.222622][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6440'. [ 861.725800][T30265] ipvlan2: entered allmulticast mode [ 861.725828][T30265] virt_wifi0: entered allmulticast mode [ 861.753080][T30265] batman_adv: batadv0: Adding interface: ipvlan2 [ 861.753102][T30265] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.753136][T30265] batman_adv: batadv0: Interface activated: ipvlan2 [ 861.925493][T30265] ipvlan3: entered allmulticast mode [ 861.942138][T30265] batman_adv: batadv0: Adding interface: ipvlan3 [ 861.942160][T30265] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.942192][T30265] batman_adv: The newly added mac address (a2:06:d9:2f:c1:ae) already exists on: ipvlan2 [ 861.942210][T30265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.942225][T30265] batman_adv: batadv0: Interface activated: ipvlan3 [ 862.695322][T30296] FAULT_INJECTION: forcing a failure. [ 862.695322][T30296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.695359][T30296] CPU: 0 UID: 0 PID: 30296 Comm: syz.6.6455 Not tainted syzkaller #0 PREEMPT(full) [ 862.695385][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.695399][T30296] Call Trace: [ 862.695409][T30296] [ 862.695419][T30296] dump_stack_lvl+0xe8/0x150 [ 862.695459][T30296] should_fail_ex+0x410/0x560 [ 862.695491][T30296] _copy_from_user+0x2d/0xb0 [ 862.695522][T30296] kstrtouint_from_user+0xd6/0x180 [ 862.695676][T30296] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 862.695711][T30296] ? lock_acquire+0x115/0x350 [ 862.695750][T30296] proc_fail_nth_write+0x8e/0x210 [ 862.695774][T30296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 862.695821][T30296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 862.695859][T30296] vfs_write+0x296/0xba0 [ 862.695904][T30296] ? __pfx_vfs_write+0x10/0x10 [ 862.695941][T30296] ? __fget_files+0x2a/0x420 [ 862.695979][T30296] ? __fget_files+0x3a2/0x420 [ 862.696010][T30296] ? __fget_files+0x2a/0x420 [ 862.696052][T30296] ksys_write+0x150/0x270 [ 862.696091][T30296] ? __pfx_ksys_write+0x10/0x10 [ 862.696141][T30296] do_syscall_64+0x166/0x520 [ 862.696164][T30296] ? trace_irq_disable+0x3b/0x140 [ 862.696188][T30296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.696212][T30296] ? clear_bhb_loop+0x70/0xc0 [ 862.696246][T30296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.696269][T30296] RIP: 0033:0x7f4f8415e98e [ 862.696291][T30296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.696310][T30296] RSP: 002b:00007f4f85140fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 862.696335][T30296] RAX: ffffffffffffffda RBX: 00007f4f851416c0 RCX: 00007f4f8415e98e [ 862.696353][T30296] RDX: 0000000000000001 RSI: 00007f4f851410a0 RDI: 0000000000000006 [ 862.696367][T30296] RBP: 00007f4f85141090 R08: 0000000000000000 R09: 0000000000000000 [ 862.696382][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.696396][T30296] R13: 00007f4f84426038 R14: 00007f4f84425fa0 R15: 00007ffc6842c948 [ 862.696434][T30296] [ 862.742283][T30297] xt_IDLETIMER: timeout value is zero [ 863.338212][T30311] syzkaller0: entered promiscuous mode [ 863.338238][T30311] syzkaller0: entered allmulticast mode [ 863.644782][T30321] __nla_validate_parse: 9 callbacks suppressed [ 863.644808][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6460'. [ 864.322649][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6465'. [ 864.629581][T30361] syzkaller1: entered promiscuous mode [ 864.629609][T30361] syzkaller1: entered allmulticast mode [ 864.840659][T30376] xt_check_target_common: 22 callbacks suppressed [ 864.840685][T30376] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 864.920493][T30381] netlink: 'syz.3.6477': attribute type 1 has an invalid length. [ 864.920763][T30380] netlink: 'syz.3.6477': attribute type 3 has an invalid length. [ 864.920786][T30380] netlink: 'syz.3.6477': attribute type 3 has an invalid length. [ 865.074950][T30383] netlink: Conntrack attr has 1 unknown bytes [ 865.074993][T30383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.285228][T30399] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6482'. [ 865.285260][T30399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6482'. [ 865.325557][T30399] syzkaller0: entered promiscuous mode [ 865.325583][T30399] syzkaller0: entered allmulticast mode [ 865.351875][T30405] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.353352][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.353577][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.377866][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.378605][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.379157][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6484'. [ 865.586064][T30415] netlink: 'syz.1.6485': attribute type 21 has an invalid length. [ 865.686032][ T5624] block nbd4: Receive control failed (result -32) [ 865.697615][ T4933] block nbd3: Receive control failed (result -32) [ 865.797139][T30415] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 865.814464][T30415] bond1 (unregistering): Released all slaves [ 865.852583][T30420] batadv_slave_0: entered promiscuous mode [ 865.853429][T30425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.949756][T30425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.054582][T30426] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 866.157149][T30435] IPv6: NLM_F_CREATE should be specified when creating new route [ 867.716637][T30463] Bluetooth: hci0: unsupported parameter 5161 [ 867.716657][T30463] Bluetooth: hci0: unsupported parameter 8192 [ 867.716667][T30463] Bluetooth: hci0: unsupported parameter 5161 [ 867.716677][T30463] Bluetooth: hci0: unsupported parameter 8192 [ 868.804610][T30429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.057266][T30474] openvswitch: netlink: IPv4 tun info is not correct [ 869.182946][T30478] xt_policy: output policy not valid in PREROUTING and INPUT [ 869.254586][T30486] FAULT_INJECTION: forcing a failure. [ 869.254586][T30486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.254630][T30486] CPU: 0 UID: 0 PID: 30486 Comm: syz.3.6505 Not tainted syzkaller #0 PREEMPT(full) [ 869.254656][T30486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.254671][T30486] Call Trace: [ 869.254681][T30486] [ 869.254692][T30486] dump_stack_lvl+0xe8/0x150 [ 869.254731][T30486] should_fail_ex+0x410/0x560 [ 869.254764][T30486] _copy_from_iter+0x1d3/0x1660 [ 869.254790][T30486] ? __alloc_skb+0x27a/0x7a0 [ 869.254819][T30486] ? __alloc_skb+0x27a/0x7a0 [ 869.254847][T30486] ? __alloc_skb+0x27a/0x7a0 [ 869.254873][T30486] ? __pfx__copy_from_iter+0x10/0x10 [ 869.254897][T30486] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 869.254932][T30486] ? __alloc_skb+0x27a/0x7a0 [ 869.254955][T30486] ? __alloc_skb+0x27a/0x7a0 [ 869.254992][T30486] ? netlink_sendmsg+0x650/0xb40 [ 869.255030][T30486] ? skb_put+0x112/0x210 [ 869.255065][T30486] netlink_sendmsg+0x6c0/0xb40 [ 869.255109][T30486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.255152][T30486] ? apparmor_socket_sendmsg+0x98/0x360 [ 869.255181][T30486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.255214][T30486] sock_sendmsg_nosec+0x13a/0x180 [ 869.255254][T30486] ____sys_sendmsg+0x54e/0x850 [ 869.255290][T30486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.255331][T30486] ? import_iovec+0x73/0xa0 [ 869.255364][T30486] ___sys_sendmsg+0x2a5/0x360 [ 869.255392][T30486] ? __lock_acquire+0x747/0x2de0 [ 869.255430][T30486] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.255500][T30486] ? __fget_files+0x2a/0x420 [ 869.255531][T30486] ? __fget_files+0x3a2/0x420 [ 869.255574][T30486] __x64_sys_sendmsg+0x1b1/0x290 [ 869.255608][T30486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.255662][T30486] do_syscall_64+0x166/0x520 [ 869.255687][T30486] ? trace_irq_disable+0x3b/0x140 [ 869.255711][T30486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.255734][T30486] ? clear_bhb_loop+0x70/0xc0 [ 869.255762][T30486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.255785][T30486] RIP: 0033:0x7f2b3359e159 [ 869.255806][T30486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.255826][T30486] RSP: 002b:00007f2b344cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.255857][T30486] RAX: ffffffffffffffda RBX: 00007f2b33825fa0 RCX: 00007f2b3359e159 [ 869.255874][T30486] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 869.255888][T30486] RBP: 00007f2b344cb090 R08: 0000000000000000 R09: 0000000000000000 [ 869.255903][T30486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.255917][T30486] R13: 00007f2b33826038 R14: 00007f2b33825fa0 R15: 00007fff9dd2aef8 [ 869.255954][T30486] [ 870.055537][T30515] sctp: [Deprecated]: syz.6.6511 (pid 30515) Use of int in max_burst socket option deprecated. [ 870.055537][T30515] Use struct sctp_assoc_value instead [ 870.086535][T30501] syzkaller1: entered promiscuous mode [ 870.086563][T30501] syzkaller1: entered allmulticast mode [ 870.123756][T30519] sctp: [Deprecated]: syz.6.6511 (pid 30519) Use of int in max_burst socket option deprecated. [ 870.123756][T30519] Use struct sctp_assoc_value instead [ 870.459809][T30526] xt_TCPMSS: Only works on TCP SYN packets [ 870.759577][T30536] __nla_validate_parse: 64 callbacks suppressed [ 870.759602][T30536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6515'. [ 871.111915][T30550] FAULT_INJECTION: forcing a failure. [ 871.111915][T30550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.111956][T30550] CPU: 1 UID: 0 PID: 30550 Comm: syz.7.6518 Not tainted syzkaller #0 PREEMPT(full) [ 871.111982][T30550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.111997][T30550] Call Trace: [ 871.112007][T30550] [ 871.112018][T30550] dump_stack_lvl+0xe8/0x150 [ 871.112066][T30550] should_fail_ex+0x410/0x560 [ 871.112103][T30550] _copy_from_iter+0x1d3/0x1660 [ 871.112133][T30550] ? __alloc_skb+0x27a/0x7a0 [ 871.112162][T30550] ? __alloc_skb+0x27a/0x7a0 [ 871.112190][T30550] ? __alloc_skb+0x27a/0x7a0 [ 871.112216][T30550] ? __pfx__copy_from_iter+0x10/0x10 [ 871.112240][T30550] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 871.112275][T30550] ? __alloc_skb+0x27a/0x7a0 [ 871.112298][T30550] ? __alloc_skb+0x27a/0x7a0 [ 871.112339][T30550] ? netlink_sendmsg+0x650/0xb40 [ 871.112373][T30550] ? skb_put+0x112/0x210 [ 871.112403][T30550] netlink_sendmsg+0x6c0/0xb40 [ 871.112452][T30550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.112496][T30550] ? apparmor_socket_sendmsg+0x98/0x360 [ 871.112530][T30550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.112564][T30550] sock_sendmsg_nosec+0x13a/0x180 [ 871.112604][T30550] ____sys_sendmsg+0x54e/0x850 [ 871.112641][T30550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.112682][T30550] ? import_iovec+0x73/0xa0 [ 871.112719][T30550] ___sys_sendmsg+0x2a5/0x360 [ 871.112748][T30550] ? __lock_acquire+0x747/0x2de0 [ 871.112781][T30550] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.112847][T30550] ? __fget_files+0x2a/0x420 [ 871.112883][T30550] ? __fget_files+0x3a2/0x420 [ 871.112926][T30550] __x64_sys_sendmsg+0x1b1/0x290 [ 871.112959][T30550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.113012][T30550] do_syscall_64+0x166/0x520 [ 871.113037][T30550] ? trace_irq_disable+0x3b/0x140 [ 871.113060][T30550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.113083][T30550] ? clear_bhb_loop+0x70/0xc0 [ 871.113112][T30550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.113135][T30550] RIP: 0033:0x7f7f3259e159 [ 871.113157][T30550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.113176][T30550] RSP: 002b:00007f7f3352b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.113200][T30550] RAX: ffffffffffffffda RBX: 00007f7f32825fa0 RCX: 00007f7f3259e159 [ 871.113230][T30550] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 871.113246][T30550] RBP: 00007f7f3352b090 R08: 0000000000000000 R09: 0000000000000000 [ 871.113260][T30550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.113274][T30550] R13: 00007f7f32826038 R14: 00007f7f32825fa0 R15: 00007fff41b9e388 [ 871.113310][T30550] [ 871.446676][T30552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 871.446719][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6519'. [ 871.556162][T30554] macvlan2: entered promiscuous mode [ 871.556190][T30554] macvlan2: entered allmulticast mode [ 871.556553][T30554] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 871.589568][T30559] xt_IDLETIMER: timeout value is zero [ 871.755623][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6519'. [ 871.755865][T30558] netlink: 'syz.1.6520': attribute type 1 has an invalid length. [ 871.939297][T30566] v: renamed from veth0_vlan (while UP) [ 872.018654][T30569] netlink: 'syz.7.6524': attribute type 1 has an invalid length. [ 872.038380][T30567] netlink: 'syz.7.6524': attribute type 12 has an invalid length. [ 872.038408][T30567] netlink: 'syz.7.6524': attribute type 29 has an invalid length. [ 872.038425][T30567] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6524'. [ 872.038445][T30567] netlink: 59 bytes leftover after parsing attributes in process `syz.7.6524'. [ 872.173141][T30566] erspan1: entered allmulticast mode [ 872.453659][T30577] syzkaller0: entered promiscuous mode [ 872.453837][T30577] syzkaller0: entered allmulticast mode [ 872.510119][T30594] netlink: 'syz.6.6530': attribute type 1 has an invalid length. [ 872.524893][T30595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6529'. [ 872.598155][T30592] netlink: 17279 bytes leftover after parsing attributes in process `syz.7.6529'. [ 872.663353][T30604] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.6531'. [ 872.665790][T30605] FAULT_INJECTION: forcing a failure. [ 872.665790][T30605] name failslab, interval 1, probability 0, space 0, times 0 [ 872.665827][T30605] CPU: 1 UID: 0 PID: 30605 Comm: syz.1.6532 Not tainted syzkaller #0 PREEMPT(full) [ 872.665854][T30605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.665869][T30605] Call Trace: [ 872.665879][T30605] [ 872.665890][T30605] dump_stack_lvl+0xe8/0x150 [ 872.665930][T30605] should_fail_ex+0x410/0x560 [ 872.665967][T30605] should_failslab+0xa8/0x100 [ 872.665996][T30605] ? skb_clone+0x212/0x3a0 [ 872.666028][T30605] kmem_cache_alloc_noprof+0xa1/0x600 [ 872.666072][T30605] ? skb_clone+0x212/0x3a0 [ 872.666111][T30605] skb_clone+0x212/0x3a0 [ 872.666147][T30605] __netlink_deliver_tap+0x413/0x860 [ 872.666204][T30605] ? netlink_deliver_tap+0x2e/0x1b0 [ 872.666240][T30605] netlink_deliver_tap+0x19c/0x1b0 [ 872.666281][T30605] netlink_unicast+0x781/0x940 [ 872.666330][T30605] netlink_sendmsg+0x813/0xb40 [ 872.666374][T30605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.666419][T30605] ? apparmor_socket_sendmsg+0x98/0x360 [ 872.666449][T30605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.666482][T30605] sock_sendmsg_nosec+0x13a/0x180 [ 872.666522][T30605] ____sys_sendmsg+0x54e/0x850 [ 872.666559][T30605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.666601][T30605] ? import_iovec+0x73/0xa0 [ 872.666634][T30605] ___sys_sendmsg+0x2a5/0x360 [ 872.666663][T30605] ? __lock_acquire+0x747/0x2de0 [ 872.666693][T30605] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.666764][T30605] ? __fget_files+0x2a/0x420 [ 872.666795][T30605] ? __fget_files+0x3a2/0x420 [ 872.666835][T30605] __x64_sys_sendmsg+0x1b1/0x290 [ 872.666867][T30605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.666920][T30605] do_syscall_64+0x166/0x520 [ 872.666945][T30605] ? trace_irq_disable+0x3b/0x140 [ 872.666967][T30605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.666992][T30605] ? clear_bhb_loop+0x70/0xc0 [ 872.667021][T30605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.667044][T30605] RIP: 0033:0x7fa135b9e159 [ 872.667066][T30605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.667085][T30605] RSP: 002b:00007fa136a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.667111][T30605] RAX: ffffffffffffffda RBX: 00007fa135e25fa0 RCX: 00007fa135b9e159 [ 872.667129][T30605] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 872.667143][T30605] RBP: 00007fa136a46090 R08: 0000000000000000 R09: 0000000000000000 [ 872.667164][T30605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.667178][T30605] R13: 00007fa135e26038 R14: 00007fa135e25fa0 R15: 00007fff48a46558 [ 872.667215][T30605] [ 872.670359][T30594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.986636][T30598] bond0: (slave ip6erspan0): making interface the new active one [ 872.988185][T30598] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 872.988371][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6532'. [ 873.298365][T30620] netlink: 'syz.2.6538': attribute type 2 has an invalid length. [ 873.331263][T30616] pim6reg: entered allmulticast mode [ 873.337969][T30622] team0: entered allmulticast mode [ 873.337998][T30622] team_slave_0: entered allmulticast mode [ 873.338017][T30622] team_slave_1: entered allmulticast mode [ 873.492695][T30629] x_tables: unsorted underflow at hook 1 [ 873.494332][T30631] x_tables: unsorted underflow at hook 1 [ 873.549613][T30631] ip_tables: iptables: counters copy to user failed while replacing table [ 874.454766][T30661] xt_hashlimit: size too large, truncated to 1048576 [ 874.559848][T30666] syz_tun: entered allmulticast mode [ 874.564626][T30665] syz_tun: left allmulticast mode [ 874.860296][T30672] netlink: 'syz.1.6555': attribute type 1 has an invalid length. [ 875.008979][T30680] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 875.270710][T30703] ipt_REJECT: TCP_RESET invalid for non-tcp [ 878.084801][T30690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.509206][T30724] netlink: 'syz.3.6570': attribute type 2 has an invalid length. [ 878.602674][T30729] lo: entered promiscuous mode [ 878.623461][T30729] tunl0: entered promiscuous mode [ 878.635951][T30729] gre0: entered promiscuous mode [ 878.679014][T30729] gretap0: entered promiscuous mode [ 878.693449][T30734] xt_l2tp: missing protocol rule (udp|l2tpip) [ 878.693743][T30729] erspan0: entered promiscuous mode [ 878.698149][T30729] ip_vti0: entered promiscuous mode [ 878.704590][T30729] ip6_vti0: entered promiscuous mode [ 878.714880][T30729] sit0: entered promiscuous mode [ 878.738670][T30729] ip6tnl0: entered promiscuous mode [ 878.757029][T30729] ip6gre0: entered promiscuous mode [ 878.777305][T30729] syz_tun: entered promiscuous mode [ 878.815604][T30729] ip6gretap0: entered promiscuous mode [ 878.839985][T30729] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.840645][T30729] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.855898][T30729] bridge0: entered promiscuous mode [ 878.902149][T30729] vcan0: entered promiscuous mode [ 878.913842][T30729] bond0: entered promiscuous mode [ 878.913913][T30729] bond_slave_0: entered promiscuous mode [ 878.914582][T30729] bond_slave_1: entered promiscuous mode [ 878.938613][T30743] __nla_validate_parse: 15 callbacks suppressed [ 878.938644][T30743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6575'. [ 878.958527][T30729] team0: entered promiscuous mode [ 878.958552][T30729] team_slave_0: entered promiscuous mode [ 878.958771][T30729] team_slave_1: entered promiscuous mode [ 878.985066][T30729] dummy0: entered promiscuous mode [ 879.024744][T30729] nlmon0: entered promiscuous mode [ 879.027593][T30729] batadv0: entered promiscuous mode [ 879.044745][T30729] vxcan0: entered promiscuous mode [ 879.046496][T30729] vxcan1: entered promiscuous mode [ 879.048386][T30729] veth0: entered promiscuous mode [ 879.072752][T30729] veth1: entered promiscuous mode [ 879.077670][T30729] wg0: entered promiscuous mode [ 879.094971][T30729] wg1: entered promiscuous mode [ 879.112033][T30729] wg2: entered promiscuous mode [ 879.114842][T30729] veth0_to_bridge: entered promiscuous mode [ 879.134747][T30729] veth1_to_bridge: entered promiscuous mode [ 879.137277][T30749] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6575'. [ 879.160205][T30729] veth0_to_bond: entered promiscuous mode [ 879.165522][T30729] veth1_to_bond: entered promiscuous mode [ 879.185219][T30729] veth0_to_team: entered promiscuous mode [ 879.203473][T30729] veth1_to_team: entered promiscuous mode [ 879.217806][T30729] veth0_to_batadv: entered promiscuous mode [ 879.228437][T30729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.228500][T30729] batadv_slave_0: entered promiscuous mode [ 879.244141][T30729] veth1_to_batadv: entered promiscuous mode [ 879.253025][T30729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.253087][T30729] batadv_slave_1: entered promiscuous mode [ 879.271820][T30729] xfrm0: entered promiscuous mode [ 879.275559][T30729] veth0_to_hsr: entered promiscuous mode [ 879.295168][T30729] veth1_to_hsr: entered promiscuous mode [ 879.309714][T30729] hsr0: entered promiscuous mode [ 879.316649][T30729] veth1_virt_wifi: entered promiscuous mode [ 879.319435][T30729] veth0_virt_wifi: entered promiscuous mode [ 879.334958][T30729] virt_wifi0: entered promiscuous mode [ 879.350898][T30729] vlan0: entered promiscuous mode [ 879.354004][T30729] vlan1: entered promiscuous mode [ 879.357204][T30729] macvlan0: entered promiscuous mode [ 879.376345][T30729] macvlan1: entered promiscuous mode [ 879.379605][T30729] ipvlan0: entered promiscuous mode [ 879.379775][T30729] ipvlan1: entered promiscuous mode [ 879.405377][T30729] macvtap0: entered promiscuous mode [ 879.408434][T30729] macsec0: entered promiscuous mode [ 879.423823][T30729] geneve0: entered promiscuous mode [ 879.427391][T30729] geneve1: entered promiscuous mode [ 879.441940][T30729] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 879.447841][T30729] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 879.473054][T30729] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 879.475686][T30729] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 879.503639][T30729] mac80211_hwsim hwsim78 wlan0: entered promiscuous mode [ 879.518182][T30729] mac80211_hwsim hwsim79 wlan1: entered promiscuous mode [ 879.527736][T30729] wireguard0: entered promiscuous mode [ 879.527997][T30729] bridge1: entered promiscuous mode [ 879.528204][T30729] ip6tnl1: entered promiscuous mode [ 879.619103][T30743] bond0: entered promiscuous mode [ 879.619711][T30743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.678179][T30747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.678669][T30747] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 879.706266][T30747] bond0: (slave sit2): Error -95 calling set_mac_address [ 879.759072][T30752] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.6576'. [ 879.762301][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.762374][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.762414][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.762452][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.824445][T30752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 880.163834][T30773] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 880.303658][T30782] netlink: 'syz.6.6585': attribute type 32 has an invalid length. [ 880.303700][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6585'. [ 880.509594][T30782] bond1: option coupled_control: invalid value (192) [ 880.521585][T30782] bond1 (unregistering): Released all slaves [ 880.668159][T30795] syzkaller1: entered promiscuous mode [ 880.668186][T30795] syzkaller1: entered allmulticast mode [ 880.828002][T30804] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 880.828026][T30804] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.168687][T30818] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6594'. [ 881.194666][T30818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 881.276919][T30820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6595'. [ 881.472514][T30830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6598'. [ 881.603596][T30830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6598'. [ 881.604954][ T4933] block nbd5: Receive control failed (result -107) [ 881.656488][T30835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.785680][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.785705][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.975785][T30848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6603'. [ 882.014692][T30848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6603'. [ 882.102374][T17422] IPVS: starting estimator thread 0... [ 882.104576][T30853] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 882.190195][T30856] IPVS: using max 27 ests per chain, 64800 per kthread [ 882.198080][T29778] block nbd64: NBD_DISCONNECT [ 882.429121][T30866] netlink: 'syz.1.6609': attribute type 2 has an invalid length. [ 882.485108][T29580] udevd[29580]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 882.527540][T30868] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 882.946022][T30886] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 882.946047][T30886] netlink: 'syz.3.6616': attribute type 4 has an invalid length. [ 882.946323][T30886] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 882.946340][T30886] netlink: 'syz.3.6616': attribute type 4 has an invalid length. [ 882.946592][T30886] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 882.946609][T30886] netlink: 'syz.3.6616': attribute type 4 has an invalid length. [ 882.946888][T30886] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 883.046813][T30881] bridge1: port 1(vlan2) entered blocking state [ 883.047541][T30881] bridge1: port 1(vlan2) entered disabled state [ 883.047711][T30881] vlan2: entered allmulticast mode [ 883.047731][T30881] bridge1: entered allmulticast mode [ 883.077450][T30881] vlan2: left allmulticast mode [ 883.077478][T30881] bridge1: left allmulticast mode [ 883.097100][T30896] xt_esp: unknown flags DD [ 883.122648][T30886] vlan2: entered promiscuous mode [ 883.122666][T30886] hsr0: entered promiscuous mode [ 883.122853][T30886] vlan2: entered allmulticast mode [ 883.122864][T30886] hsr0: entered allmulticast mode [ 883.122873][T30886] hsr_slave_0: entered allmulticast mode [ 883.122884][T30886] hsr_slave_1: entered allmulticast mode [ 883.170474][T30896] vlan2: entered promiscuous mode [ 883.170748][T30896] vlan2: entered allmulticast mode [ 883.170767][T30896] geneve1: entered allmulticast mode [ 883.548975][T30906] syzkaller1: entered promiscuous mode [ 883.549001][T30906] syzkaller1: entered allmulticast mode [ 883.978734][T30917] __nla_validate_parse: 23 callbacks suppressed [ 883.978759][T30917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6627'. [ 884.075302][T30935] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 884.096476][T30935] bond1 (unregistering): Released all slaves [ 884.206541][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.231130][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.231329][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.231558][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.231729][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.231919][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.238545][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.238756][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.238909][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 884.484541][T30960] openvswitch: netlink: Flow actions attr not present in new flow. [ 884.485342][T30957] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 884.655615][T30969] xt_hashlimit: size too large, truncated to 1048576 [ 884.735593][T30973] validate_nla: 3 callbacks suppressed [ 884.735615][T30973] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 884.967631][T30983] netlink: 'syz.2.6642': attribute type 10 has an invalid length. [ 884.988954][T30983] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 885.688965][T31014] ip6t_hbh: unknown flags 38 [ 885.784041][T31017] netlink: 'syz.6.6654': attribute type 83 has an invalid length. [ 887.133697][T31075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.256969][T31080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 887.609646][T31098] pim6reg527: entered allmulticast mode [ 887.714508][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 887.732624][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 887.733979][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 887.752079][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 887.765310][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.324091][T31124] netlink: 'syz.3.6688': attribute type 18 has an invalid length. [ 888.401245][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.401301][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.401343][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.401383][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.991454][T31101] wg0 speed is unknown, defaulting to 1000 [ 889.098059][T31155] __nla_validate_parse: 33 callbacks suppressed [ 889.098086][T31155] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6695'. [ 889.195726][T31158] netlink: 'syz.3.6697': attribute type 30 has an invalid length. [ 889.417545][T31163] x_tables: duplicate underflow at hook 3 [ 889.555517][T31167] netlink: 'syz.3.6701': attribute type 1 has an invalid length. [ 889.603642][T31155] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6695'. [ 889.744284][T31167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 889.910787][ T4933] Bluetooth: hci2: command tx timeout [ 889.967043][T31175] bond3: (slave geneve3): making interface the new active one [ 889.969479][T31175] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 890.060397][T31101] hsr0 speed is unknown, defaulting to 1000 [ 890.527630][T31201] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 890.545192][T31202] syzkaller0: entered promiscuous mode [ 890.545219][T31202] syzkaller0: entered allmulticast mode [ 890.753217][T31215] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 890.780441][T31215] ip6t_srh: unknown srh invflags 4000 [ 890.852387][T31220] xt_hashlimit: size too large, truncated to 1048576 [ 890.942639][T31219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6716'. [ 891.618797][T31101] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.619004][T31101] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.619164][T31101] bridge_slave_0: entered allmulticast mode [ 891.643398][T31101] bridge_slave_0: entered promiscuous mode [ 891.656986][T31101] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.659656][T31101] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.659842][T31101] bridge_slave_1: entered allmulticast mode [ 891.675931][T31101] bridge_slave_1: entered promiscuous mode [ 891.805111][T31101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.852387][T31101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.970254][ T4933] Bluetooth: hci2: command tx timeout [ 892.002260][T31101] team0: Port device team_slave_0 added [ 892.004760][T31259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6728'. [ 892.004797][T31259] veth0_to_bond: entered allmulticast mode [ 892.035309][T31101] team0: Port device team_slave_1 added [ 892.073060][T31265] netlink: 'syz.3.6727': attribute type 83 has an invalid length. [ 892.137901][T31101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.137923][T31101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.137954][T31101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.184723][T31101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.184744][T31101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.184773][T31101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.301555][T31274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6731'. [ 892.301582][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6731'. [ 892.434665][T31274] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 892.436102][T31274] bond4 (unregistering): Released all slaves [ 892.486571][T31101] hsr_slave_0: entered promiscuous mode [ 892.489598][T31101] hsr_slave_1: entered promiscuous mode [ 892.493586][T31101] debugfs: 'hsr0' already exists in 'hsr' [ 892.493655][T31101] Cannot create hsr debugfs directory [ 892.988606][T31299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6736'. [ 893.076609][T31299] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 893.076893][T31299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6736'. [ 893.077302][T31299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6736'. [ 893.077425][T31299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6736'. [ 893.793256][T31328] netlink: 'syz.1.6744': attribute type 8 has an invalid length. [ 893.882301][T31101] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 893.902607][T31101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.903724][T31101] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 893.928934][T31101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.940271][T31101] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 893.948209][T31334] netlink: 'syz.2.6743': attribute type 10 has an invalid length. [ 893.949846][T31101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.978451][T31101] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 894.004781][T31101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.053408][ T4933] Bluetooth: hci2: command tx timeout [ 894.089416][T31334] geneve2: entered promiscuous mode [ 894.089444][T31334] geneve2: entered allmulticast mode [ 894.162835][T31338] bond0: Error: Cannot enslave bond to itself. [ 894.389653][T31101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.437680][T31101] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.461970][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.462090][T18716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.486575][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.486698][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.752138][T31359] wg0 speed is unknown, defaulting to 1000 [ 894.965952][ T50] IPVS: starting estimator thread 0... [ 894.997492][T31374] __nla_validate_parse: 38 callbacks suppressed [ 894.997517][T31374] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6752'. [ 895.051497][T31375] IPVS: using max 33 ests per chain, 79200 per kthread [ 895.345392][T31360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 895.348864][T31380] ip6t_hbh: Not strict - not implemented [ 895.593670][T31359] hsr0 speed is unknown, defaulting to 1000 [ 895.793369][T31406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6758'. [ 895.796939][T31393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 896.130611][ T4933] Bluetooth: hci2: command tx timeout [ 896.146491][T31414] IPVS: set_ctl: invalid protocol: 221 172.20.20.170:20001 [ 896.607953][T31101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.915727][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6764'. [ 896.998810][T31440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 897.283455][T31448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.287956][T31451] No such timeout policy "s" [ 897.287980][T31451] netlink: Failed to associated timeout policy 's' [ 897.366858][T31101] veth0_vlan: entered promiscuous mode [ 897.398019][T31101] veth1_vlan: entered promiscuous mode [ 897.469907][T31101] veth0_macvtap: entered promiscuous mode [ 897.476007][T31101] veth1_macvtap: entered promiscuous mode [ 897.549218][T31101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.616105][T31101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.705707][T31460] veth1_macvtap: left promiscuous mode [ 897.809597][T17417] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.810971][T17417] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.813435][T17417] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.815657][T18704] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.065001][T18704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.065023][T18704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.134816][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.134840][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.240450][T31474] tipc: Enabled bearer , priority 10 [ 898.978112][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6783'. [ 898.978138][T31499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6783'. [ 899.132617][T31507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.155667][T31509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6787'. [ 899.155710][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6787'. [ 899.238186][T31509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6787'. [ 899.238224][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6787'. [ 899.453418][T31511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6789'. [ 899.458426][T31511] netlink: 'syz.3.6789': attribute type 21 has an invalid length. [ 899.571977][ T32] INFO: task syz.5.5504:26291 blocked for more than 143 seconds. [ 899.572008][ T32] Not tainted syzkaller #0 [ 899.572021][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.572033][ T32] task:syz.5.5504 state:D stack:27016 pid:26291 tgid:26288 ppid:21049 task_flags:0x400140 flags:0x00080002 [ 899.572103][ T32] Call Trace: [ 899.572112][ T32] [ 899.572128][ T32] __schedule+0x17db/0x58f0 [ 899.572188][ T32] ? __pfx___schedule+0x10/0x10 [ 899.572237][ T32] ? schedule+0x90/0x2b0 [ 899.572263][ ** replaying previous printk message ** [ 899.572263][ T32] schedule+0x164/0x2b0 [ 899.572289][ T32] schedule_preempt_disabled+0x13/0x30 [ 899.572312][ T32] __mutex_lock+0x7c1/0x1550 [ 899.572344][ T32] ? __mutex_lock+0x5d4/0x1550 [ 899.572374][ T32] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 899.572524][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.572558][ T32] ? __nlmsg_put+0xef/0x1b0 [ 899.572595][ T32] ? genlmsg_put+0x137/0x2e0 [ 899.572625][ T32] nfsd_nl_version_get_doit+0x17c/0xd20 [ 899.572664][ T32] ? __nla_parse+0x40/0x60 [ 899.572696][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 899.572726][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 899.572754][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 899.572809][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 899.572845][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 899.572885][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 899.573008][ T32] genl_rcv_msg+0x614/0x7a0 [ 899.573043][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.573069][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 899.573423][ T32] netlink_rcv_skb+0x226/0x4a0 [ 899.573463][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.573493][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.573545][ T32] ? down_read+0x2be/0x330 [ 899.573678][ T32] genl_rcv+0x28/0x40 [ 899.573703][ T32] netlink_unicast+0x7bd/0x940 [ 899.573748][ T32] netlink_sendmsg+0x813/0xb40 [ 899.573794][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.573838][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 899.573869][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.573904][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 899.573954][ T32] ____sys_sendmsg+0x54e/0x850 [ 899.573993][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.574036][ T32] ? import_iovec+0x73/0xa0 [ 899.574070][ T32] ___sys_sendmsg+0x2a5/0x360 [ 899.574100][ T32] ? __lock_acquire+0x747/0x2de0 [ 899.574131][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.574167][ T32] ? futex_wait+0x2a2/0x390 [ 899.574235][ T32] ? __fget_files+0x2a/0x420 [ 899.574268][ T32] ? __fget_files+0x3a2/0x420 [ 899.574312][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 899.574346][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.574402][ T32] do_syscall_64+0x166/0x520 [ 899.574427][ T32] ? trace_irq_disable+0x3b/0x140 [ 899.574451][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.574476][ T32] ? clear_bhb_loop+0x70/0xc0 [ 899.574506][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.574530][ T32] RIP: 0033:0x7ffa9979e159 [ 899.574552][ T32] RSP: 002b:00007ffa9a5bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.574578][ T32] RAX: ffffffffffffffda RBX: 00007ffa99a25fa0 RCX: 00007ffa9979e159 [ 899.574596][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 899.574612][ T32] RBP: 00007ffa9983503b R08: 0000000000000000 R09: 0000000000000000 [ 899.574628][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.574642][ T32] R13: 00007ffa99a26038 R14: 00007ffa99a25fa0 R15: 00007ffea5bb8a38 [ 899.574681][ T32] [ 899.574753][ T32] [ 899.574753][ T32] Showing all locks held in the system: [ 899.587021][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 899.587089][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 899.587282][ T32] #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 899.587570][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 899.587613][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 899.587785][ T32] locks held by getty/5374: 2, on CPU#1: [ 899.587802][ T32] #0: ffff888035d4b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 899.587973][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 899.588162][ T32] locks held by syz-executor/5604: 2, last CPU#1: [ 899.588205][ T32] #0: ffff88802a5fea60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 899.588389][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 899.588566][ T32] locks held by kworker/u8:30/17422: 2, last CPU#0: [ 899.596979][ T32] #0: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 899.597190][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 899.597403][ T32] locks held by syz.0.3704/20417: 2, on CPU#0: [ 899.597447][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 899.597613][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 899.597795][ T32] locks held by syz.5.5504/26291: 2, on CPU#0: [ 899.597840][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 899.597984][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 899.598162][ T32] locks held by syz.4.6034/28369: 2, on CPU#1: [ 899.598199][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 899.598396][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 899.608179][ T32] locks held by syz-executor/28376: 4, last CPU#0: [ 899.608259][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 899.608463][ T32] #1: ffff88803413b6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 899.608656][ T32] #2: ffff88807f7bf678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 899.608867][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 899.609042][ T32] locks held by syz.7.6529/30591: 2, on CPU#0: [ 899.609084][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 899.609270][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 899.609458][ T32] locks held by syz.8.6680/31480: 1, on CPU#0: [ 899.609500][ T32] #0: ffff8880340f9d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 899.609660][ T32] locks held by syz.8.6680/31481: 1, last CPU#0: [ 899.609707][ T32] #0: ffff8880340f9d38 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 899.621082][ T32] locks held by syz.3.6789/31510: 2, last CPU#0: [ 899.621134][ T32] #0: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 899.621292][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 899.621477][ T32] locks held by syz.1.6790/31515: 2, last CPU#0: [ 899.621519][ T32] #0: ffff88807f7b83b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 899.621693][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 899.621861][ T32] [ 899.621874][ T32] ============================================= [ 899.621874][ T32] [ 899.621923][ T32] NMI backtrace for cpu 0 [ 899.621958][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 899.622021][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.622062][ T32] Call Trace: [ 899.622092][ T32] [ 899.622116][ T32] dump_stack_lvl+0xe8/0x150 [ 899.622166][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 899.622278][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 899.622357][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 899.622484][ T32] sys_info+0x135/0x170 [ 899.622601][ T32] watchdog+0xfd7/0x1030 [ 899.622696][ T32] ? watchdog+0x1c7/0x1030 [ 899.622775][ T32] kthread+0x38b/0x480 [ 899.622837][ T32] ? __pfx_watchdog+0x10/0x10 [ 899.622891][ T32] ? __pfx_kthread+0x10/0x10 [ 899.622949][ T32] ret_from_fork+0x514/0xb70 [ 899.623013][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 899.623107][ T32] ? __switch_to+0xc89/0x1420 [ 899.623200][ T32] ? __pfx_kthread+0x10/0x10 [ 899.623264][ T32] ret_from_fork_asm+0x1a/0x30 [ 899.623409][ T32] [ 899.623483][ T32] Sending NMI from CPU 0 to CPUs 1: [ 899.623541][ C1] NMI backtrace for cpu 1 [ 899.623556][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 899.623578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.623591][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 899.623659][ C1] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 899.623677][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 899.623696][ C1] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 899.623712][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 899.623728][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 899.623743][ C1] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 899.623762][ C1] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 899.623778][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 899.623797][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.623815][ C1] CR2: 00005555869b5a38 CR3: 000000007e346000 CR4: 00000000003526f0 [ 899.623836][ C1] Call Trace: [ 899.623845][ C1] [ 899.623861][ C1] wait_for_lsr+0x184/0x2f0 [ 899.623889][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 899.623936][ C1] serial8250_console_write+0xaa1/0x1200 [ 899.623969][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 899.623992][ C1] ? __schedule+0x17f1/0x58f0 [ 899.624026][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 899.624064][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 899.624094][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 899.624131][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 899.624169][ C1] nbcon_kthread_func+0x679/0x880 [ 899.624199][ C1] ? nbcon_kthread_func+0x163/0x880 [ 899.624222][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 899.624249][ C1] ? __kthread_parkme+0x71/0x1f0 [ 899.624279][ C1] ? __kthread_parkme+0x199/0x1f0 [ 899.624313][ C1] kthread+0x38b/0x480 [ 899.624334][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 899.624352][ C1] ? __pfx_kthread+0x10/0x10 [ 899.624372][ C1] ret_from_fork+0x514/0xb70 [ 899.624391][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 899.624421][ C1] ? __switch_to+0xc89/0x1420 [ 899.624449][ C1] ? __pfx_kthread+0x10/0x10 [ 899.624468][ C1] ret_from_fork_asm+0x1a/0x30 [ 899.624508][ C1] [ 899.639505][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 900.650164][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 900.659295][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.669378][ T32] Call Trace: [ 900.672689][ T32] [ 900.675645][ T32] vpanic+0x56d/0xa60 [ 900.679659][ T32] ? __pfx___schedule+0x10/0x10 [ 900.684543][ T32] ? __pfx_vpanic+0x10/0x10 [ 900.689106][ T32] panic+0xc5/0xd0 [ 900.692894][ T32] ? __pfx_panic+0x10/0x10 [ 900.697359][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 900.702854][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 900.708275][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 900.714487][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 900.720695][ T32] watchdog+0x1030/0x1030 [ 900.725066][ T32] ? watchdog+0x1c7/0x1030 [ 900.729517][ T32] kthread+0x38b/0x480 [ 900.733619][ T32] ? __pfx_watchdog+0x10/0x10 [ 900.738317][ T32] ? __pfx_kthread+0x10/0x10 [ 900.742935][ T32] ret_from_fork+0x514/0xb70 [ 900.747543][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 900.752696][ T32] ? __switch_to+0xc89/0x1420 [ 900.757421][ T32] ? __pfx_kthread+0x10/0x10 [ 900.762039][ T32] ret_from_fork_asm+0x1a/0x30 [ 900.766853][ T32] [ 900.770524][ T32] Kernel Offset: disabled [ 900.774897][ T32] Rebooting in 86400 seconds..