last executing test programs: 3m9.266833389s ago: executing program 2 (id=9250): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000005c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000700)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{0x0, 0x92, 0xffffffffffffff9c}, {0x10, 0x0, 0xff}}}, 0x14) write$tun(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000005d7cf43cdc0432a3e20800"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000140)={0x0, 0xe}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3m8.586680688s ago: executing program 2 (id=9259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000010000104000000000000000011000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000"], 0x74}}, 0x0) 3m8.247094665s ago: executing program 2 (id=9262): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24040008) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001140)={{r0, &(0x7f0000000240)='illinois', 0x621502, &(0x7f0000000280)={@_ha_fsid={[0xc0e6, 0x5]}, {0x6, 0x3ff, 0x9}}, 0x58a, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x10}, 0x5, &(0x7f0000001080)=[{0x3, 0x200, &(0x7f0000000780)='\x00', &(0x7f0000000b40)="2efbc9d6444e493697efc4ef022d70ee90fb204d83de1b6739d19c6530e211ecc317b29b7e40fb931ba7c36252533c0178fab0b6e1e1d895c4309006a1d20683a3eef0645f59933dc545fbdeac73fb51fcb6e57a39c3f62f372ba165a3330dd28fd00713fca9c0d036e8c685cd610b813f20fe5bad285d563b916979525c982d065489ffa92e0d4274c90a9154a977ced70c92577f251dd19c0f8cd7a26c55a33d8a2890a0242cf07106907aa915a5f8fef8ae3bf65b80a780361b384e92d01f8ca19b61940e5be49a1802260b694ba11fe348011e504e99de631b493e0cef8c8f85d31e9f225ffa69727d2cafa46f6288cba840", 0xf4}, {0x2, 0x7, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="debaa5910822c9cc41b0676ab7978bd981ecf13f33cd37e7e2de5941a7ddf4c34d9ba78bed980307fc4899378e55172c436d5e0156c30b6ec4b13d8488b58a5439fe57f0305b41456c81ca15b8106d", 0x4f, 0x10}, {0x0, 0x8, &(0x7f0000000d00)='syzkaller\x00', &(0x7f0000000d40)="5684cdb4e1d0796650aed29d3fdf766c3b49dba3fcdf184d8f0f36ed04ff47464a411851fa35c5bc325c9623c915ba1bffab961297f79f88787042da4e4eeb4bd1bea61a858748c5dc8b5d59fdf2576828ffc1b803ab68fe967219542129242329dbf7db725cefd99684d5a5abe1c36269eb1a6ea1ce74e96e37ed2e8feecdfa628a0c93038cc66af1f6fce6f22d575201bb5da1ec44a85d24255f2337", 0x9d, 0x12}, {0x1, 0x7167, &(0x7f0000000e00)='}@%\x00', &(0x7f0000000e40)="eb68333a3b7687c669e655d8783f2aa5f3d5b6fbc0c9a8c5fc05f9b27c7845afa4821d56c152a26d07f1f62e11a50c249abe43b3da434023603d3b68e749081ad6ae8348c8aa917a19a68dcb556f056aaf4248e5667c4fba62e4c97960a131c9a93cc1d654b3c1f92524d3677e0aa01a4dcee507415f941e4f6f21db1ea7c12e1650a74cf71130637fa8a76d7bb4f11f59a44d76219883f186acc1452083bfb973a93fe1b75f59915cecaeaabe9a7b80bc56e24c6471051ee6d8f89faf3d356cd938c22701f84e990640d4fcba67903a4f06c797bb932ceb97e16802766cd76df7f9ba56", 0xe4, 0x18}, {0x1, 0x0, &(0x7f0000000f40)='\x00', &(0x7f0000000f80)="c65b14d16eb7765c840686d477f8b80e5a16aa256450c856a5efcf15555e82a400085c6ead84a7ec3326bc9e03d0d0a5a00c48fe0f13bffb5256738e5156cf8d5b303263940b7350c927625c7d8b770c16453805073f91d352b89ea23d975f12aaeaaebbb9a8d4e725536e4e31f24c2a8eb219ea567f15adeb8b6a2f05df520317769bc2c8927be20c0d822063f9045a94106fb67a61b142045248a326582e469afed4a05849012496effa024f4d3bc1d0ade8a093dab2a905e1c6c2d5a8dc81292d387a", 0xc4, 0xa}]}) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000011c0)={0x0, 0x4}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001240)={r3, 0x7, 0x7ff}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x5d) (async) sendmsg$xdp(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)="5a3be5a94bbc394d84aceba7f47053152172ef", 0x13}, {&(0x7f00000008c0)="8bedfe3b1781df82e427fd36ca824223fffdb75e17126adf6f40e330d508bc9b1272ce0d37dabc2c8f923a6f43d84e1c99f33c75084468dc35773b6492e37d6a0a5553a0810455184f9ce1d85e6503646ab9364d07958df0b94470fdd8123618ef2fd1a4c9", 0x65}, {&(0x7f0000000940)="c4fd87bb1f97f7617b7ee3222cfdf5e1c1db9088850d9bc57c16e97da906dcbcb948e9e9825d5b502fb631622c605cf9daae7678aec05ad2fcf52200aa3e24ea0ff451f9078438", 0x47}, {&(0x7f00000009c0)="b84fd52c35f879e4f8cf6ed3e021e68dc471965103293535901eace9975e15b51fed0e834d7f19828cef7a5f9a2da529b6585ca6e18cd1e53c3d43ff17e68d0c4b87d7b1b616bee219835ea072cb862efb4403aea4d84fb15133966dcb9e4d4fa2ffabf1641fff32261b47a1ba9a52b25ecd77209a4f038b331592ba14ba806edb7cfa7e22dc8bbf434a78c0e2a381ecc76a80613607f47bc92ff98177519a0ac66b664b3c49cb44db04e656d3b6a3403ff792aa4511", 0xb6}, {&(0x7f0000000a80)="f5c5beeef928cb5f7fcc66ac2eeb042650112c59c70cc4d12bf7dfa0f3ea63e420ec4db9f50408a9e2a7e23da33a384d6f5d337c20048097b86a153f28dca5780ef27486b126d4b0bdbfe8e19ff57d5f71ea6c4b4f0cda515adb888706c364a5bfce8546d70cce8f9e3e37f15b4e85115b8f1fe1f895e77f8219e1d4aa67931baee8c60d08179f5958688bbf0e9354770b45ca6a03c39b9da05f03a8fe0770ad7f799ad610d7a9d1fee9757ab92c9ef4a87ea58e2b183a7b3fe9bcfc61", 0xbd}, {0x0}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x80}, 0x8080) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0x24d, 0xce, 0xff, 0x6, 0x6, 0x2}}}}]}, 0x58}}, 0x400d4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) (async) connect$can_j1939(r2, &(0x7f0000001480)={0x1d, r6, 0x0, {0x0, 0x1, 0x1}}, 0x18) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10001}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0x6, 0xa, 0x3, 0xfffffffffffffffe, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x3, 0xb}, 0x10, 0x1380, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x1, 0x2, 0x9}], 0x10, 0x6}, 0x94) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000600)={"e5e594c0f187137e51566057b7840490", 0x0, r8, {0x9, 0x1}, {0x9, 0x4}, 0x1232, [0x3, 0x4c1, 0x1, 0x2, 0x0, 0x100, 0xffffffffffffffff, 0x200, 0x8000000000000001, 0x8, 0xcc, 0x7d, 0x200, 0x3, 0x82c, 0xa3]}) 3m7.085001984s ago: executing program 2 (id=9271): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x400}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'veth1_to_batadv\x00', {'batadv_slave_1\x00'}, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000280)=0x10) 3m6.093373145s ago: executing program 2 (id=9277): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000700000000000200000085200000f446030095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.884013318s ago: executing program 2 (id=9279): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c000000760001000000e3d86e17aa076b876c1d0000004404000d000af36504001a05", 0x23}, {&(0x7f0000000440)="16100ea379b6fcf1b20281b9f27f15e728f70f5191642018b51c9d12353b1464492372e53e8029522b26c7f203099876d180cfaa395e4c9613", 0x39}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8000) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000480), 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m50.883512986s ago: executing program 32 (id=9279): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c000000760001000000e3d86e17aa076b876c1d0000004404000d000af36504001a05", 0x23}, {&(0x7f0000000440)="16100ea379b6fcf1b20281b9f27f15e728f70f5191642018b51c9d12353b1464492372e53e8029522b26c7f203099876d180cfaa395e4c9613", 0x39}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8000) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000480), 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m38.784479525s ago: executing program 4 (id=9670): r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x9, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000980)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000009c0)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 2m38.628713475s ago: executing program 4 (id=9674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0xffffffc1) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendfile(r3, r2, &(0x7f0000000080)=0x10, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00eaff8bf50000050007000000000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000010000000100"/28], 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r8, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000325e00", @ANYRES32=r2, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="00000008f2ddbd00b7050000080000001500000076000000bf9800000001000056080000020010008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.927057929s ago: executing program 4 (id=9682): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) ioctl(r3, 0x1, &(0x7f0000000140)="7c40b338373d1247c81761ac9eb23585ea0b81d2153deb89a67050ae") sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x9, 0x5, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a8e3", 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast2, 0x0, 0x39, 0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x1, 0x8, 0x0, 0x0, "d809d2a1e2ee7f5f6057d2e596685d4006f66482005db1fd5373909573a93ad9c64f4d02160586e0d4b461fed1c0e8ca7bbcd28ff9f2fc085c8bb4f98e15041f"}}}, {{@ipv6={@remote, @remote, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xffffffff], 'veth0_to_bridge\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x1, 0x2e}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x4, 0x6, 0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000600)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m37.513862567s ago: executing program 4 (id=9687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x400, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 2m37.190708577s ago: executing program 4 (id=9693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x24000840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x86, 0x6, 0x5b, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x8000, 0x8, 0x8}}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="ab7d342d7d328991cfa9b7651dc5634398a7d1a12c5ab45bb06a9756f21eda3136ff54e62969ed6e0b7c8d8fc60f7914cf3c7801b669c5b73099f5187528ea0b2ce3976121fed46c4989ce266bc9ef7579b6872a2ca0789840d3d4c5d30ec6", 0x5f}, {&(0x7f0000000280)="0f4f91b02e1c0b7fa92373bb1d9e69cf46eb6410ff4720f10a92bb7499326a0094147c51185eed3f925ec6769fc88cf23cf9c0512ea90f277e157bed3f2c2bc3581093551e321dfaffe79c8b9b3a72608d35693e5829d8fbc6192eaf4a4e18d7c3e5cd6d33dcddb5f269a23270c9c4bfe97ee324b3e21c0a3bb81a1d13", 0x7d}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000400)="98fb3ac70ddd72978440dc8cd59f2321de5efbd7e80860e339dabb2697bd2cc8af99f2913846823980ac7578b19f3c366305071a1f2886d31d3948665f6dcc9dbf59555788342783d674e9a2f690c026d78d1218891200292f27f8e666afac4e895de28aac0a57c6d2fada0b7d5eab67362c08cb92b70e974ef00d1ca5015f05328fdbd10538f218e336e84b47b63a43382fc5f9a2c22808cff9d0f9a7fff601aa334e43012e4e221f21e9f77fc14d27bb77c9f1a83e05fa", 0xb8}], 0x4, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x46, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xa0}, 0x4014) 2m36.985298291s ago: executing program 4 (id=9697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) 2m21.866068598s ago: executing program 33 (id=9697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22044858}, 0x4844) 1m12.566799663s ago: executing program 5 (id=10852): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f0000000800)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000840)='htcp', 0x4) shutdown(r4, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r7) (async) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0xfffffff3, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001800)={'syzkaller0\x00', @multicast}) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x7, r9, 0x3d}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)="5b9d6d112901364495", 0x9}], 0x1}, 0x5) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xfff1}, {0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0022b1dee0000012f400e6ff0e400058"}}}]}, 0x48}}, 0x20008080) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000080)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f00000000c0)) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x248, [0x0, 0x200000000540, 0x200000000570, 0x2000000005a0], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x62, 0x88a2, 'vxcan1\x00', 'macvtap0\x00', 'macvlan0\x00', 'ip_vti0\x00', @remote, [0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xd0, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x9, 0xa, 0x8100, 'batadv0\x00', 'wg0\x00', 'veth1_vlan\x00', 'vcan0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1, 0xc, 0x0, 0x0, "69adf79813a11049ebcdb0980580c7f6de8e6e6070173b4cff9adc9227a858725603213c81515c41e35a5ac8698a3916f061e73b3c69bfde8da5ba34c3a40670"}}}}]}]}, 0x2c0) (async) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x88, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='veth0_vlan\x00', 0x0, 0x2, 0x4674}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xe, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m9.092609469s ago: executing program 5 (id=10862): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0xc0000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x4f, 0x331b, 0x8, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x20, 0x3ff, 0x1008}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0xf0, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfa}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64) bind$bt_rfcomm(r9, &(0x7f0000000500)={0x1f, @any, 0x9}, 0xa) (async) connect$bt_rfcomm(r9, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x70, r10, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "872c8dc4440aadac1b695b1d48"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) connect$can_bcm(r5, &(0x7f0000000700), 0x10) (async) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000740)={{r6}, 0x3, &(0x7f00000007c0)=[0x7fffffff, 0x100000001, 0x1], 0x0, 0x1, 0x1}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x63a4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x10}, @alu={0x4, 0x1, 0xa, 0x1, 0x5, 0xfffffffffffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0xb4a, 0x6d, &(0x7f0000000a80)=""/109, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000b40)=[{0x2, 0x4, 0xd, 0x6}, {0x0, 0x2, 0xf, 0x3}, {0x1, 0x1, 0x8, 0x1}, {0x1, 0x5, 0x0, 0x2}], 0x10, 0xa}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x20, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5ec, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x1, 0x9, 0xb, 0x4, 0x6, 0xfffffffffffffff0}, @generic={0x7, 0xe, 0x1, 0x5, 0x27ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @call={0x85, 0x0, 0x0, 0x51}, @generic={0x0, 0xc, 0xb, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x3, 0xa, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r13, 0x4, &(0x7f0000000ec0)=[r6, r14], &(0x7f0000000f00)=[{0x4, 0x4, 0x7, 0xc}, {0x1, 0x4, 0xb, 0xa}, {0x0, 0x4, 0x4, 0x5}, {0x1, 0x2, 0x7, 0xc}], 0x10, 0x2}, 0x94) (async) r15 = socket$kcm(0x29, 0x7, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000001300)={0x0, "a08cbde1fcbd5b83e663f39ab98885d0"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000002300)={{r15}, r16, 0x1c, @unused=[0x8001, 0x9, 0x0, 0x6], @devid=r17}) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000003300)={{r3}, r16, 0xe, @unused=[0x0, 0x1, 0x4b, 0xa81c], @name="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"}) (rerun: 64) 1m8.675421049s ago: executing program 5 (id=10872): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1m8.483360609s ago: executing program 5 (id=10873): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'wg2\x00'}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) (async) listen(r1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000340)=0x80000000, 0x4) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000540)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) (async) close(r9) (async) close(r6) (async) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @multicast1}, {0x301, @broadcast}, 0x20, {0x2, 0x4e20, @rand_addr=0x64010100}, 'macvlan1\x00'}) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000480)={0x6, 0x5}, 0x2) listen(r10, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) (async) listen(r11, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x102, @remote, 0xe3}}, 0x0, 0x0, 0x26, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) (async) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1m8.371557169s ago: executing program 5 (id=10876): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x5, 0x8, 0xcd, 0x1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x98, 0x98, 0x1c8, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x7, r1}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000200), &(0x7f0000000340)=""/227}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100ee8000000200000000000000000000aaac1e0001000000000000000000000000200100000000000000000000000000008b1414040000000435"], 0xa0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000200)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x5, 0x8, 0xcd, 0x1}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x98, 0x98, 0x1c8, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x7, r1}, 0x36) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000200), &(0x7f0000000340)=""/227}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100ee8000000200000000000000000000aaac1e0001000000000000000000000000200100000000000000000000000000008b1414040000000435"], 0xa0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000200)={'wg1\x00'}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) (async) 1m8.092308324s ago: executing program 5 (id=10880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001440)={r0, &(0x7f0000001340)='\x00', 0x30082, &(0x7f0000001380)={@_ha_fsid={[0xa, 0x6]}, {0x9, 0xcb8, 0xfffffffb, 0x3}}, 0x401, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)=0x9ba}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001480)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x1050, 0x26, 0x400, 0x70bd2c, 0x25dfdbfb, {0xf}, [@typed={0x8, 0x107, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x18, 0xa1, 0x0, 0x1, [@typed={0x14, 0x14b, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x8, 0x7c, 0x0, 0x1, [@nested={0x4, 0x113}]}, @generic="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"]}, 0x1050}}, 0x10008010) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002900010027bdf000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000) 52.155945195s ago: executing program 34 (id=10880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001440)={r0, &(0x7f0000001340)='\x00', 0x30082, &(0x7f0000001380)={@_ha_fsid={[0xa, 0x6]}, {0x9, 0xcb8, 0xfffffffb, 0x3}}, 0x401, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)=0x9ba}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001480)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x1050, 0x26, 0x400, 0x70bd2c, 0x25dfdbfb, {0xf}, [@typed={0x8, 0x107, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x18, 0xa1, 0x0, 0x1, [@typed={0x14, 0x14b, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x8, 0x7c, 0x0, 0x1, [@nested={0x4, 0x113}]}, @generic="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"]}, 0x1050}}, 0x10008010) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002900010027bdf000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000) 42.961075079s ago: executing program 6 (id=11200): r0 = socket(0x10, 0x3, 0x2d6b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000340)='syzkaller\x00', 0x8}, 0x90) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x0, 0x10, &(0x7f0000000980), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000009c0)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000c00)=0xe, 0xc0000) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000c40)) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000ac0)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x21, 0xfffffffe, 0xfffffffa, 0x4, 0x1444c, 0x1, 0x4, '\x00', 0x0, r4, 0x5, 0x2, 0x0, 0x0, @void, @value, @value=r6}, 0x50) sendmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x8880) 42.611333364s ago: executing program 6 (id=11206): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0x0, 0xfc01}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000723da0962900001800128008000100677265000c00028006000e0012000000"], 0x38}}, 0x0) 42.491567797s ago: executing program 6 (id=11209): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001014d9ec26bd7020fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c00000b"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24004000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="4ff3c74a360001000000000000000100040000806d9c2a734ac244a5ee806b6bf19bbcb55e2708d499758efb"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000900)=0xc) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000940)=0x1, 0x4) (async) bind$inet6(r7, &(0x7f0000000980)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', 0x1}) (async) write$tun(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) sendto(r3, &(0x7f0000000540)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb88a84500894ffffe40004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES16=r4], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x8, 0x10, &(0x7f0000001600)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000016c0)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="060004"], 0x54}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) 41.877359085s ago: executing program 6 (id=11218): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x8, {0x2, 0x4e20, @empty}, 'gretap0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r1}, 0xc) socketpair$tipc(0x1e, 0x6136211fc75a0bd3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x13}, 0x40040810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newtclass={0x48, 0x28, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0x5}, {0xfff1, 0x18}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0xa090}, 0x18004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6a6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x84c}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8ce}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, r10, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x190}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0xbc}}, 0x8000) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r11, &(0x7f0000000a00)="db5c505cca76e0e5e711efdcc988847b919c6677169ae1812e4e823b9176d7bec7e627e3d9b2806e65d291acd937e1a427074e082eea340db733646d753a02fa874134f62a57a75beeea1a72b4c0b12c538d8c7818ee85c8eb51686c5b8cd92b630ea9c28ccd3984287de6520891a3410cedb3e5b80c8e15a9e15d85f522e6e28542f564e44506332262f4974d6944672773f70741a060a7ce632a9d980ba15bd70c74bbb580772e7dc932798c6a11d0179e17323b77ea84ab0132703f49384a7bd36d398c2e3ec1", 0xc8, 0x40044, &(0x7f0000000b00)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r12 = socket$netlink(0x10, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000c40)={r12, &(0x7f0000000b40)='nl80211\x00', 0x0, &(0x7f0000000b80)={@align=0x100000001, {0x8, 0x7, 0x8001, 0x80}}, 0x8, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8001}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', r7, 0x29, 0x7, 0x4, 0x9, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0x4, 0x1ff}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000f00)={&(0x7f0000000c80), 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xd8, r14, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40804}, 0x4812) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f80)={'syztnl1\x00', r7, 0x10, 0x7, 0x10000000, 0x9, {{0xc, 0x4, 0x0, 0x37, 0x30, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp={0x44, 0x10, 0x57, 0x0, 0xa, [0xffffffc0, 0x6, 0x10000]}, @timestamp={0x44, 0xc, 0xae, 0x0, 0x6, [0x9, 0x5]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r13, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f00000013c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x21c, r14, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x40900) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 41.384850596s ago: executing program 6 (id=11224): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0xf002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)=0x39) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 41.162202249s ago: executing program 6 (id=11227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000380)={0x4, 0x2}, 0x10}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002900010000000000100000000f000000080001"], 0x1c}}, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 26.053091088s ago: executing program 35 (id=11227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000380)={0x4, 0x2}, 0x10}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002900010000000000100000000f000000080001"], 0x1c}}, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 22.375234937s ago: executing program 7 (id=11478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41090, 0x8}}, 0x20}}, 0x8050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000f50900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 22.269125669s ago: executing program 7 (id=11479): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000380)="5ae02efc441a80536af0d1d905c723fa", &(0x7f00000003c0)=""/24, 0x6414, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x2}], 0x1, 0x40002042, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000380)="5ae02efc441a80536af0d1d905c723fa", &(0x7f00000003c0)=""/24, 0x6414, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}, 0x28) (async) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x2}], 0x1, 0x40002042, 0x0) (async) 22.175954345s ago: executing program 7 (id=11480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newtfilter={0x38, 0x2c, 0x601, 0xfffffffd, 0xfffd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 22.002016175s ago: executing program 7 (id=11483): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40480d0) 21.803050647s ago: executing program 7 (id=11487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000d80)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000dc0)={0x0, 0x1}, 0x1}, 0x94) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000002c0)=""/42, &(0x7f0000000300)=0x2a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1a, 0xf, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f40)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r4, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a609a8fb1c", 0x5}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x1}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000010c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r11, &(0x7f0000001200)={&(0x7f0000001240)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001300)='\'', 0x1}], 0x1}, 0x20004014) r13 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r13, 0x29, 0x42, 0x0, &(0x7f0000000fc0)) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r14, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xac}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0x5, 0x4, 0x8, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0xf8, &(0x7f0000000380)=""/248, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x4, 0x2, 0xa, 0x7}, {0x4, 0x2, 0xe, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x0, 0x1, 0x1, 0x7}, {0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0xfffffffe, 0x8}, {0x4, 0x6, 0x10, 0x4}], 0x10, 0x7}, 0x94) 21.247774188s ago: executing program 7 (id=11491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x5, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) sendto$packet(r1, &(0x7f0000000280)="ee79750137b2419697017eaa765f25aa4ab0a8", 0x13, 0x8040, &(0x7f00000007c0)={0x11, 0x10, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) (async) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x29, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8045) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x8080, 0x9, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x58, 0x2f, 0x0, @remote, @empty}}}}) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000080) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @rand_addr, 0x800}, 0x1c) (async) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="4df42177d4533175bffb9c7b537e5978a176b3b3e90d8584b218e2ae92c9268eb08d1f013d3c6b1305abed1a56fff17e319a0b104589", 0x36}], 0x1}}], 0x1, 0x40c8045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) (async) sendmmsg(r5, &(0x7f0000000480), 0x4ff, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 6.178144674s ago: executing program 36 (id=11491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x5, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) sendto$packet(r1, &(0x7f0000000280)="ee79750137b2419697017eaa765f25aa4ab0a8", 0x13, 0x8040, &(0x7f00000007c0)={0x11, 0x10, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) (async) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x29, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8045) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x8080, 0x9, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x58, 0x2f, 0x0, @remote, @empty}}}}) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000080) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @rand_addr, 0x800}, 0x1c) (async) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="4df42177d4533175bffb9c7b537e5978a176b3b3e90d8584b218e2ae92c9268eb08d1f013d3c6b1305abed1a56fff17e319a0b104589", 0x36}], 0x1}}], 0x1, 0x40c8045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) (async) sendmmsg(r5, &(0x7f0000000480), 0x4ff, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.286520057s ago: executing program 0 (id=11722): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4b9b}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000001ac0)="2d93b71420c0c0470fef8ec9d2cd38aa7da14c5469d125960a5d95f53d9b0010ace845e22c6695d24d65bdb6eee1165ed0f7b6499463192654f4fc1d554d38dc2edb8729cf5657a3452484daafc442a4bb78930646fede5ca87283c9b8a597b438cfc0f7ac77a5b2c2adb677ddd3d77bba08ee4be0b81cd04add98a263906ef180c63b2bac8a80aaf37d80b8", 0x8c}, {&(0x7f0000001b80)="e3207ab1c292007c43e8041b413ed036c849a486c83adb537e18463e671db8dac7bf028d29e13d598cd56ec497cf2e333a97525c418466208f1d299277727f767cc630e9a83c984e02269da06906a86fa0e05750f720927429fc113fc56a2c1b4213e3cf3fe50be6579b2ba6ac833a2676960c21398ebf75b78c22f7e5ea06a3a03384b11db46dbaaffcc44a84195d1ee5", 0x91}, {&(0x7f0000001c40)="f86b7ca88f1db0e5eeb25c309bc3bb574ead734fe8ea6752b23047ed3bfa84e8e4ed7687e67afd8b3a57432665dcf819234b72996e7f18097a0b7edbd1ebc9138e64f270f59a03e761d98c1e375b3485c9baecbce8830df1b844072f2fa3914d8a10d21ed34dfa0ec53fe7d527145d5a8b33d3b02c4e36985d07d0572d4ba2dee60c0c7100930e999adfde5c7e08fc05dd0716d77f7824b53e21eb3e0f98a1bf89f4438ec155fa64bc7a7d99fd5c97e68c894e18", 0xb4}, {&(0x7f0000001d00)="f916c7d1463703ad81c48f943ee24249d6ebd5f972e7461b20f0c05b20793026ff4d1b2b3c2fe0ffb9ca529062c333e3094560d7f4a3b02dd765174866adcde8798b106a40249b589ba9330fe441ed1c0852ee1cbd44b3ab428734c34e944d08469b8fabee18d0637e02f1e6e2bcc3054ea1dc21d9bcd128d054f8940c3ae30bbaa85d0de2dc4743295973371e7d6089897a5230f825fdd99dca1fa117b2304fbf094e41c4df9a5a65ff265adbe1ed2af973c84a17631278c303029b8729e18b76f551d21047224a7512a6dfa825e4ea691a7316d8513f7692944dc8f3b155adc89a2d2f9c9311f867f91887eca0411013d99eee9dc84de96e1ac498c393170af90c54995555066b675df26e5a2af04a6ce11be21384083a76cb68155c79bd95c8ee3213618fa021e3e0f24d8401b789b2d5bce0c30b5e143a511dafd2e62a5372276ff24e672327aa9e9601f1a2461cea9f29b0d347cd0bf97c00830604d3614605642ee22870ceed566a0303339f335fe2c635587253f7da140f1220717b38bcdbc3d406c3c374c803d9aab1c0a89dbbb66da891fb3a66290e0033308af90818a62b381eaa822e75618677efc4268037a970a1f3f527879660840f3ec9577511747053856ea739dd9ffb1cbfd29c7afaf60e5b4d1cc6fe1b60dcba6d0c1755e0031d5a78b1dd5daeeec9d392ae9d11954ca71ee7e09b41270a8a6512fd7260e461d3acb3dcb0221083771e23f766c7364742edf65c255d99b3ffd1556637624b00f0b57cf26364b87ec76df2648f95154013e851827bde307b82b2d77845454b07d0209c3e89f71296e9033b5c35422b8bc3f29928ec609f67352ef1bfcb4032b1706fe8d7f44ecf88103f65484da94d1bfed616294391bfadb18b7d33599f817b0e036438710dc22ca571d65354857d1db2b877b7f19bdae04c3f587ea82129cb21adcd2d54d50f5c1de5751ea6015b07c3e97cd155c4b5aa24d40b3dcc6d1bc6555fb9c458a58a884667cb01cea616ee954a105696788dd6330856a2dd57235803f0379560ef578e98fa37cd96a1cf32331580768b7b28cd8fe086c3fd5d1ae48d6cfe823b00404e646646ff286cd3acacea10c5547325131ffe480582ddbd881a533418a69a703f92a8f63a51a07cbe17c806bb68f6f80647bb1e4811582f426faf7b637be2d749036f521889591feaf56de8e928f811d62fac9752662e4e802418479f9454bd92d69058e10a38224e9484f4f0126b19379e6db823de16987f2f6066b64a2671b1fb368d34bd0c753d5bd10fc34cab5edfdc785700a6c7acec0f00209bdf9b3971e13ee29e9a93c0527cf4f59a384d5210e024e9487fec07bf36a511eca0431b1fad2808ab712c4fe2fcadd10cbb32ba9a9a67d8473a8b81dac29c0ed3cb5f7c6680e4c8ff40990e900195ec71fc89fd58c2c88430d6ae48fb6a52c002a400dcae447fa4ad4335078b858161250ad161c55da32f9e7539e044003159b7fe3113202fded0e4807dd3cbe36870fa16c2fb4cf9ffb50e8f32a49a19907ae41817e4c2dada69bc59a7a4d661579016a4a3ec62ae156cc4786dbaf297a949980b387b88f553a4fd1a9d75916d1b756dfd2d07bc642bf68f435638130310765755cbe9e1a591d148b8f356ac6780e2e1947ba2f364d2afd27a0914455df71098ba5f4248e318d48c43d25370dfa8290cfb7e026f9fd3fdaedfcd4531c265cce9e907d6624f456d37f2cc0806954ccf557d60f1cdab2b5b624bf2a75de561e642197e5f5f0b71ba2dcdb8a833923a54ff6ea53fc9a6d963712069642f3ecec240470ce61b3d37e62a3231b50be4e62416c75aaa018350bc711b5efc5cea3e45b9cb9559a72d29a5fe448c27768e1188f0308c0847298680ae3ca3d5d7bc1afed0e96e51934731cd4bb05f64d7b09906055f41e474a2619d671a738b324360dacb17e5f151c8f51595314c1a67dda76e9d0c304c9a863d5827dbd72590e4a1341b086d6d9a655a654830c01550db0accdf4d4ed2319cc3d9e2a0e736c65be3e45ec36bc4a562b6eb382b99f30ab246e13890cc3571f47a6a3bba915278882748bd60b811d9fff8b407e6011cd9b6b756de54023f74cf08684b4d8a4c3766fc02197cef12ec03385f196ec02f032ff52432ee785d3bd7637161f57aa5b834b3d5339aa81721078977fe05e1bce1243368fa8e991cc6402780661739f0ebb1f6d3c559e27a58298cfc2e9d6a41f90abc4b01ec852ff40e0571df8ac566ea139ce4534facf3892cf185c1474a33d66da88cfa5ae7c6145ccb61a3f9f85acf29709cab063bef29f4470fe09d21ff10b3a485e49d78ab4ff5f8938ace12901a98365f6ccf20517c785622d9a4aea208f8549c4bde03ba67991a69f57ad45a2ee055efe5f63210ad0b0680328945be971eebfa8901b0ce72bacf7b64a6e68c8bb3fbdeec710b542ac5997885d93022c093fe9445eb67747504f688f85e1f1420ea2c0fabaa3ee4e405a151213fa436b3b849de96951ee276bfb30ada2283058cfa408ddf9130c04153acf0b53349ea84615dbfd0b19d17b6f4043757cc4a127f46f01d510265fc6c0cae5f723220408637814b51254aaf258385ee472045c8265af0fe657f4ce53b65c9333e9833f9f924679b53f98f7599629063a62bac7972a530e8d3074003044b42f693d4af043eb64e866305b13d727ab1b82a3f997ee94ff95e5079f720d8799af7d816f6881e2b202790f8d7677a02f9055e7c79865e23f62585b92f97019867651a54dfab0ac8e75b4f26dba7b30ea96d9aa6147701f8f8b7116ef3029767cf64acb0c04d69332198eb1dbda6db681ec0535cffc00761c71a9db35802dad06a3fb8b8736ff02bb70c5df97c6f81a7de83f208756b92979da7a20259c4452caaec3673168db7d2db791eabc7a2b5bbbee8ab4686c173abaa1a2088c37617aea90c1d58e924c8369ccf725441d9cc7574f9adfd7e58a6823a9ac7403737b35de39e5d074f48f81b7e23eddddd88bc9ed72a29b83deb2dacfa9a36fb10b17c22da8f6887e88d9da50d2b776d2407442bcca80ecdc49ab6358a13e0457f0a66ff76df5695809288a69bfa4ad6a9ec2fdeea7a819e7de09bba1074763ceb60946c88ba4ca8b050f307aff17f6d8043f3ccf90a5f12afafd57b6493618b16059bfb1e890bbba5252ba67ddd548a1a43f78ffb5a33be40dbe6a0938e670b6e391f328af76402ff08b95cfd12f8a06dc09bf43a5fb98c13a150461a9c038f0a297b8728110d37c70d8a7e9126a952d1cc7e14a80f921dffa140b2b1c8ea2afff2684e3443c2db694655713fef0587fd387b0d37a26a3d6d090ef5464779b03925df6dc6963852343210f060d030e622adf66668bec1e00cdc4338a95db51e9d1edb698f8c5e72a3c14d8a6cca4cd313c7a6815a315cb39a67d48ec25f2ddc6a9113f28b3fdb2e0d4ad23780db382af5a58debedbdff9b5ea7ed79a4007a97bbe452f9112912b49776050256636d06b285c324d02fe5f82222f523f083f8c071848f36c38dde0e17ed652401c79913c8897f4db349c9a43a8f752404ce564cabf2bc9286d4712a475e0607c723873f73e93c1837e873de885e2cb08183cc27386e59035a54b499381d6a38a269c3de37bd3824f5c2b722aec9058235a2959c5568344e7955bf536b69d5614b9de5a8d0db5a860e87a0c19c71a71c8bdca25e8ad809e54cef5addac5e35c502a341f620bacdbef0b89faebdc7c9ad9703d389aa68daa1529e31d86dc4af1fb1c7097dc053da9a523ad3e433166df7a48c530f492a76508e788a45d7639e705e34b46eb6360687eb383c5a86b4cd0cd2471b6f61a80271894bc44fe456c36c9d92dd571f788329233ae250a0c423ff9d8c5f7db82fa89db439b6cd86c0c7034e67f11dc7b5b05cdfd15ba3a9ce22ef37e20d181d2e88f62c0adf4937c335101f4fa50038dbd0a70c0872ee0ae319177b3e6072a00756c5d38391242f7c65dba200f14c6b2b3b530db96763480e99cecb04f4d9e4d3b856ae017e5c47da6f825f8a2dafe04cf72fa8ad13002e510968efb3a854e1ef0de47d73899fca56cda52f837d101f25cc4345067c6d7ffda54f6205334b1f9c42f5cffef066bb47455ad34055a455287d82b0e5bc3179ad7661e79cf1096f28a10ede14163d2a8888ade7aa145148c438adf2f8b5f84fe658e4b8d8e5ed9495a3cd1e248a718d97a42edd022d3e1d580f6a2f4b2bd12c278f6cc952b07b75fbe112b682ac8512ee4f8fcae95f72445eb002ce10ec50355a4e8a637c435baedaa73c9bba0068ee7b05a3cb6f0c02beab1976b42ca63df1253cda1099e660e58ad4e2d01fbd096510e6707be84512f8632c27f4b97cb347249f555f9bc163d1fb61fee0ecc87e51ae329b966417bc6264206ca077a6b8ecbdfe7351b6d6d8a19cdf7e031ad75b5f3559d18b76f31c3e1e0845cdf15111fdf6074e29fcabb57e78292697f9a0b48be93547b825e46a0857c038b886209f30c0ca7bfd68ddab0c8977f6d77038279b4f0fc2fecd44c2e4caafb0957ed6b2aed2a5138a8a099e2951aa849c4cd6615684ac5a88f9ce06a761539485bdd2473857453b31b08bd7a6f7f9620961239995db464134d2cf71ce5095344c8a66e09c7fe5f41c1ef9a99dbbae3e7a5855c4b4d4cbadbf17ebf991b4629374d715871dbb87d8ebe6df6eabc01ca3c1797c8a94b491d96ceef005d868b4f81cb3705ece891083fcda66fd41a000e060ab8703730f28eebc50b88818825740d03b90714c749e6a7da47d34eaea5a4d767fc1dd7b21cd1dc3f6b70fb47244eb867609e23e794cd410ece9932495e4dbc95f15808d63d2a94f1b4917e1b9cb36e0fe5ce8c325b8004badfec83dc1ae6f3936e368799f422a052b18bdf804b920a3eb716779a5b7ff75a72126b1f2af2c231f1da1097b77d597089a29c4f694ef8b18ba565efcd30e60bb45eea2ea57239275248d8f7db1197c8655e100237aaa47c5939d470c3d2edd26db3f9a705e734862c79069242dcd9f3070416ed568a0372f50a4aa0cb98385a4047f8f358180b8fe48a31fc1e964da1824fcc6ba2b4cefed4aa8b124215b2c1c696600ba7b6a7ac939824c1d19db6d5c4dab5bf2a3cff04dfcbc5dc2998b6a00ac6662c0bff2fbd0a47eed521769d989a73bdf04600e791cbdb203b8fcdeb6a9579c998854150b44806ef225e9c7bd55ffe2f750bcd89445125da52db93245107e1b1243b8ac23a97dad97f5c04f646369602d5e2d4fe7dfeecf25771394e1dc04b95ad783bd3a7a47d09cd276437668c36044b9377c1d75311b9710caa1d143bd19a1ed1d2ce92bcd463f94438c3444254d4663220fa9b214544e5af8af825a32626b7819521a80ec2eec57ce3bfb21e8c0094921f4f11e1576620e38b757a8ce9a92185a05ed0d91a7295767417c54aaabe1e2ca073d8b4681fa64fd1a1566f0caf4c01c34ad1287e084f865562efc8e38b696eec7f5e0aad502321135f96606ea660a301e274611b091296f58a255fa3e1bc55433ca1158c139742a0250b9f852fbfca82188f6a65267949168cca7af30044e8070c87ba24ef802a9e6a224524083f8311d831b49866ccd1c7583fd99979e6a8389e8b31ac921355f3df4e197544b88aba4cea8bd6af1f294d78a98ebb82b9ec30a33435c8649e9a7862f5ffce8f5289500db33f5be7f6aba1abc1a5a9fd36c24fd2b4514906bf8948f3a320d630ff5d25b468d1a8df39085feda9a182a662498bd3d", 0xffc}, {&(0x7f0000002d00)}], 0x5, &(0x7f0000002d40)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x21, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0x4, [0x6, 0xfffffffffffffffb, 0x100000001, 0x10000, 0xd4e, 0x2, 0x4]}}]}}}], 0x78}}, {{&(0x7f0000002dc0)={0xa, 0x4e20, 0x6, @private0, 0x5}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002e40)="ab9725c18b5ac022edd14b80e23585407fb3ce4eb3b24fab33b065db2e42f339b2012946ee919aec389cff2a3a366de28b1848a6a8f3ac862b47f9f2a4933ac13d44b93b345d4004072566dadf537201e9e1d338855c84", 0x57}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)}], 0x4, &(0x7f0000002f80)=[@rthdr={{0x68, 0x29, 0x39, {0x29, 0xa, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @local, @mcast1, @mcast2]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x3, 0x2, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0xa0}}, {{&(0x7f0000003040)={0xa, 0x4e21, 0x8, @private0}, 0x1c, &(0x7f0000003080)=[{&(0x7f00000030c0)="a29ebdb9c13c04e45f92344cd7ffc49342c8c9e5b6d81f45ad456e9cc826b6123200584aefe25fea017206dcff69f8ec52272ad20286e3126a686054475cc33d4fc49a6b24b11d1cd0", 0x49}], 0x1, &(0x7f0000003140)}}, {{&(0x7f0000003180)={0xa, 0x4e24, 0x0, @private2, 0x4}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000003200)}, {0x0}, {&(0x7f0000003240)="e0", 0x1}, {&(0x7f0000003280)="2bb62f064cf0e4e0b587fb6fe9b14e8c7289c72b8dbdd0279fd69fc45c5d", 0x1e}], 0x4, &(0x7f00000032c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}, @dstopts={{0x18, 0x29, 0x37, {0x16}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x50}}, {{&(0x7f0000003340)={0xa, 0x4e24, 0x7d, @local, 0x2}, 0x1c, &(0x7f0000003380)=[{0x0}], 0x1, &(0x7f00000033c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x18}}, {{&(0x7f0000003400)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}, 0x1c, 0x0}}], 0x6, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x100}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0xd, 0x4, &(0x7f0000001780)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$inet(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x200, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.551903136s ago: executing program 1 (id=11734): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000008c0)=0xb, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.371665215s ago: executing program 1 (id=11736): r0 = socket(0x8, 0x3, 0xeffffffc) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000900)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57e35619bf20cb7f2facde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000fe88000000000000000000000000000137c14f9a8ead"], 0x184}}, 0x0) 1.277629382s ago: executing program 3 (id=11737): r0 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) (rerun: 32) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 1.127303172s ago: executing program 0 (id=11738): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, 0x0) 1.109256124s ago: executing program 1 (id=11739): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$FITHAW(r0, 0xc0045878) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000580)=0x2, 0xf6) (async, rerun: 32) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r3, 0x29, r1}, 0x10) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) (async) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10) 967.358706ms ago: executing program 0 (id=11741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x13, 0xf1d, 0x8, 0x1}}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000004c0)=0x4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 915.407822ms ago: executing program 3 (id=11742): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x200000000000000) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x140, 0x15, 0x10, 0x70bd28, 0x25dfdbff, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "172fe9a3c703a6655f40a5c4a8287079bc8ba3ae342d765dc25c7bbd6fe9a799c2d7f0c45f1693edede2"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "ecc350ed4f52cad6cef7ff9afb64066bf5c629d56b493d793ed04b9f302dff09b1e54ecca2849226962eec8b48b06ae3024e4c9c222f16497fddfd57599432ea3baf9bf53c0fa0b39795dc2dd53a144c3927d03714f3583b33338fa1779ba9505c2e3edcee751ac7a001062cc5b9807cef8003451bdda330763cf8d8db7043bc27875e2d20ae31e596d04c755a4226263feb2b35cff8c5ba8da2805b1e66baf62254659b1f738726d33846b8d6898dff35c9a9855e422738979dfe5dc984f572f5b420784637eb3e7da7b8c6a9c20d556891385c3f806ff6236d19e210bfa6afa9418ccb611dc464c114c1053c20a0f86fbb9041af0a69"}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) socket$key(0xf, 0x3, 0x2) write(r0, &(0x7f0000000980)="0a000300010000", 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4008030) syz_emit_ethernet(0x109, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @random="5196f7e66a49", @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@llc={0xe, 0xe, 'R,', "b25a1760ef9d8d8315d3d22068b45a95c5de9012b40e5ccf1dc67182f20309927c4baf920b167bed55d9d6334b7c5483fa2cb8c1c6b1eb51af6bc4b2168074280bc4d80e9287c22053ae255aca96da72ffbb56fd512153c2c5693acf2ef626c6ff07cddaec7496cf257f71b984fad9f5cd4f3b98ca1daacfbc3184e29bf837de935a859359413cff5d26556ccaa6acfe6d3cb7dfd160cc4fe78f9c74a0c5486034e0483279af17649a361c7889ea6b524328916a0a794f13c8d950ab1b358207385b2f526f7da92fafae63cb801f5141604fa5253d5707991df45a70747055120d9ea2edca8f523547a77dab3e0cfb6a9b8135"}}}}}, &(0x7f0000000180)={0x0, 0x4, [0xc64, 0x6ec, 0xe68, 0x277]}) 791.503058ms ago: executing program 8 (id=11744): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000000a000000000000200000085200000f446030095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 790.681886ms ago: executing program 1 (id=11745): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000008c0)=0xb, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 751.657861ms ago: executing program 8 (id=11746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 690.979006ms ago: executing program 3 (id=11747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x36, &(0x7f0000000c80)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000020000000106"], 0xffe) 611.150494ms ago: executing program 0 (id=11748): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x48}}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10020) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/43, 0x2b}], 0x1) 581.582631ms ago: executing program 8 (id=11749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000015001800128008000100707070003900028008000d00", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) 465.680545ms ago: executing program 0 (id=11750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x2f, 0x1, 0x0, 0x25dfdc00, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc013) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) r8 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_b, @from_mac=@broadcast, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x3c}}, 0x40000000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, r4, 0x920, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7e46, 0x12}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x106}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffc00}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_DURATION={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x24, r12, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r10, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10001}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000400)="0ab390107f", &(0x7f0000000440)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900a00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x50d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 418.887095ms ago: executing program 8 (id=11751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x8e92, 0x4) socket(0x2d, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0000050900010073797a31000000005c000480587200000048000280080004400000001724000580090001006d6574610000000014000280080002400000001808000140000000030800034000000000080002400000008408000140000000000900020073797a3c00000000140000001100010000000000000000d54c4fdd303a67e5ec1e7bfd6b29000700000a"], 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 416.291083ms ago: executing program 1 (id=11752): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180005d7a8000000000000000100100085200000b14e030095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 285.023707ms ago: executing program 1 (id=11753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='bond\x00', 0x101382, &(0x7f0000000040)={@align=0x8, {0x3, 0xdf96, 0x9, 0x3}}, 0xb9c, &(0x7f0000000080), &(0x7f00000000c0)=0xa}) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x100}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000}, 0x0) (async) recvmsg(r8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 281.643679ms ago: executing program 3 (id=11754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4000000) 243.246282ms ago: executing program 0 (id=11755): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000580)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000d00000000f3247ba57bbe44aed75c00", @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYBLOB="cc55895ce5d16ddec9fc74c9a869912e8f6425aa9cfb63695f1d92ea3d96dfb253c0ec3a2cca2fe8e3d8441d97443d710cbc691fb10a60abb7cc1b14e8f1c52c5b9c508fd07c3ff417bd322c15de08c156eb9056fb97a3484fc0613e441993c1f74c74b22b35f3ad91f43fc8c88f98c3cd5eb4b60e04097a425c3dde25ab7e6ea401ac12d98ccbdfdffd9220c6ff366449cb4a", @ANYRESDEC=r3, @ANYBLOB="3c5fc3b04485176b627cf63cc3e89af3dcbb0432f6cc10ff1f90f5d0f9b296"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', r2, @netfilter=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x14, 0x0, &(0x7f00000003c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000400)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000004c0)=0x6c, 0x4) splice(r0, &(0x7f0000000440)=0x9, r5, &(0x7f0000000480), 0x1, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf250900000004000280080004006a00000044000380140002006d6163766c616e30000000000000000005000800080000000800030000000000080001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc1b3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xed}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x50}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x2, @private2, 0x1b0}, 0x1c) 183.599066ms ago: executing program 3 (id=11756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', r1, r2, 0x1, 0x3}, 0x50) 126.283152ms ago: executing program 8 (id=11757): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x700000000000000) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x140, 0x15, 0x10, 0x70bd28, 0x25dfdbff, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "172fe9a3c703a6655f40a5c4a8287079bc8ba3ae342d765dc25c7bbd6fe9a799c2d7f0c45f1693edede2"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "ecc350ed4f52cad6cef7ff9afb64066bf5c629d56b493d793ed04b9f302dff09b1e54ecca2849226962eec8b48b06ae3024e4c9c222f16497fddfd57599432ea3baf9bf53c0fa0b39795dc2dd53a144c3927d03714f3583b33338fa1779ba9505c2e3edcee751ac7a001062cc5b9807cef8003451bdda330763cf8d8db7043bc27875e2d20ae31e596d04c755a4226263feb2b35cff8c5ba8da2805b1e66baf62254659b1f738726d33846b8d6898dff35c9a9855e422738979dfe5dc984f572f5b420784637eb3e7da7b8c6a9c20d556891385c3f806ff6236d19e210bfa6afa9418ccb611dc464c114c1053c20a0f86fbb9041af0a69"}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) socket$key(0xf, 0x3, 0x2) write(r0, &(0x7f0000000980)="0a000300010000", 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4008030) syz_emit_ethernet(0x109, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @random="5196f7e66a49", @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@llc={0xe, 0xe, 'R,', "b25a1760ef9d8d8315d3d22068b45a95c5de9012b40e5ccf1dc67182f20309927c4baf920b167bed55d9d6334b7c5483fa2cb8c1c6b1eb51af6bc4b2168074280bc4d80e9287c22053ae255aca96da72ffbb56fd512153c2c5693acf2ef626c6ff07cddaec7496cf257f71b984fad9f5cd4f3b98ca1daacfbc3184e29bf837de935a859359413cff5d26556ccaa6acfe6d3cb7dfd160cc4fe78f9c74a0c5486034e0483279af17649a361c7889ea6b524328916a0a794f13c8d950ab1b358207385b2f526f7da92fafae63cb801f5141604fa5253d5707991df45a70747055120d9ea2edca8f523547a77dab3e0cfb6a9b8135"}}}}}, &(0x7f0000000180)={0x0, 0x4, [0xc64, 0x6ec, 0xe68, 0x277]}) 30.50433ms ago: executing program 8 (id=11758): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 3 (id=11759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e24, @private=0xa010100}}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) kernel console output (not intermixed with test programs): [ 1078.478787][T11790] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1078.478809][T11790] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1078.478840][T11790] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1078.478882][T11790] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1078.478918][T11790] bpf_check+0x2744/0x2ef0 [ 1078.478960][T11790] ? __pfx_bpf_check+0x10/0x10 [ 1078.478986][T11790] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1078.479009][T11790] bpf_prog_load+0x14d1/0x1c20 [ 1078.479046][T11790] ? __pfx_bpf_prog_load+0x10/0x10 [ 1078.479091][T11790] __sys_bpf+0xd0d/0xd90 [ 1078.479123][T11790] ? __pfx___sys_bpf+0x10/0x10 [ 1078.479156][T11790] ? __fget_files+0x2a/0x420 [ 1078.479194][T11790] ? ksys_write+0x242/0x270 [ 1078.479222][T11790] ? __pfx_ksys_write+0x10/0x10 [ 1078.479254][T11790] __x64_sys_bpf+0xba/0xd0 [ 1078.479279][T11790] do_syscall_64+0x166/0x520 [ 1078.479298][T11790] ? trace_irq_disable+0x3b/0x140 [ 1078.479319][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.479338][T11790] ? clear_bhb_loop+0x70/0xc0 [ 1078.479362][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.479380][T11790] RIP: 0033:0x7f3b08b9f559 [ 1078.479399][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.479415][T11790] RSP: 002b:00007f3b099de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1078.479434][T11790] RAX: ffffffffffffffda RBX: 00007f3b08e25fa0 RCX: 00007f3b08b9f559 [ 1078.479448][T11790] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1078.479460][T11790] RBP: 00007f3b099de090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.479472][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1078.479483][T11790] R13: 00007f3b08e26038 R14: 00007f3b08e25fa0 R15: 00007fff537c3228 [ 1078.479515][T11790] [ 1078.538263][T11791] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1078.802537][T11803] ip_tables: iptables: counters copy to user failed while replacing table [ 1078.808608][T11801] syzkaller0: left promiscuous mode [ 1078.808631][T11801] syzkaller0: left allmulticast mode [ 1078.831759][T11801] team0: entered promiscuous mode [ 1078.831779][T11801] team_slave_0: entered promiscuous mode [ 1078.831978][T11801] team_slave_1: entered promiscuous mode [ 1079.106558][T11819] netlink: 'syz.3.10749': attribute type 2 has an invalid length. [ 1079.107311][T11819] netlink: 'syz.3.10749': attribute type 2 has an invalid length. [ 1079.512213][T11842] __nla_validate_parse: 27 callbacks suppressed [ 1079.512233][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1079.512258][T11842] netlink: 'syz.0.10757': attribute type 5 has an invalid length. [ 1079.512271][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1079.516056][T11843] FAULT_INJECTION: forcing a failure. [ 1079.516056][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.516088][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.1.10756 Not tainted syzkaller #0 PREEMPT(full) [ 1079.516110][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1079.516122][T11843] Call Trace: [ 1079.516130][T11843] [ 1079.516139][T11843] dump_stack_lvl+0xe8/0x150 [ 1079.516172][T11843] should_fail_ex+0x410/0x560 [ 1079.516202][T11843] should_failslab+0xa8/0x100 [ 1079.516230][T11843] __kvmalloc_node_noprof+0x171/0x820 [ 1079.516256][T11843] ? bpf_compute_postorder+0x87c/0x970 [ 1079.516280][T11843] ? bpf_stack_liveness_init+0x29/0x90 [ 1079.516305][T11843] ? bpf_stack_liveness_init+0x29/0x90 [ 1079.516336][T11843] bpf_stack_liveness_init+0x29/0x90 [ 1079.516361][T11843] bpf_check+0x263f/0x2ef0 [ 1079.516405][T11843] ? __pfx_bpf_check+0x10/0x10 [ 1079.516432][T11843] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1079.516455][T11843] bpf_prog_load+0x14d1/0x1c20 [ 1079.516491][T11843] ? __pfx_bpf_prog_load+0x10/0x10 [ 1079.516549][T11843] __sys_bpf+0xd0d/0xd90 [ 1079.516581][T11843] ? __pfx___sys_bpf+0x10/0x10 [ 1079.516616][T11843] ? __fget_files+0x2a/0x420 [ 1079.516654][T11843] ? ksys_write+0x242/0x270 [ 1079.516677][T11843] ? __pfx_ksys_write+0x10/0x10 [ 1079.516703][T11843] __x64_sys_bpf+0xba/0xd0 [ 1079.516728][T11843] do_syscall_64+0x166/0x520 [ 1079.516747][T11843] ? trace_irq_disable+0x3b/0x140 [ 1079.516769][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.516789][T11843] ? clear_bhb_loop+0x70/0xc0 [ 1079.516812][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.516831][T11843] RIP: 0033:0x7f3b08b9f559 [ 1079.516850][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.516866][T11843] RSP: 002b:00007f3b099de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1079.516887][T11843] RAX: ffffffffffffffda RBX: 00007f3b08e25fa0 RCX: 00007f3b08b9f559 [ 1079.516902][T11843] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1079.516914][T11843] RBP: 00007f3b099de090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.516927][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1079.516939][T11843] R13: 00007f3b08e26038 R14: 00007f3b08e25fa0 R15: 00007fff537c3228 [ 1079.516971][T11843] [ 1079.558282][T11842] geneve4: entered promiscuous mode [ 1079.558305][T11842] geneve4: entered allmulticast mode [ 1079.667699][T11847] ip6t_srh: unknown srh invflags 4000 [ 1079.707045][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1079.707077][T11850] netlink: 'syz.0.10757': attribute type 5 has an invalid length. [ 1079.707092][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1079.743144][T11842] ip6t_srh: unknown srh invflags 4000 [ 1079.845721][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10759'. [ 1079.931743][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10763'. [ 1079.931773][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10763'. [ 1080.067178][T11862] openvswitch: netlink: Key type 189 is out of range max 32 [ 1080.135958][T11876] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10765'. [ 1080.165916][T11880] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10765'. [ 1080.244382][T11888] netlink: 'syz.0.10768': attribute type 1 has an invalid length. [ 1080.342830][T11891] FAULT_INJECTION: forcing a failure. [ 1080.342830][T11891] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.342862][T11891] CPU: 1 UID: 0 PID: 11891 Comm: syz.5.10769 Not tainted syzkaller #0 PREEMPT(full) [ 1080.342884][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1080.342894][T11891] Call Trace: [ 1080.342902][T11891] [ 1080.342910][T11891] dump_stack_lvl+0xe8/0x150 [ 1080.342941][T11891] should_fail_ex+0x410/0x560 [ 1080.342983][T11891] should_failslab+0xa8/0x100 [ 1080.343012][T11891] __kvmalloc_node_noprof+0x171/0x820 [ 1080.343035][T11891] ? kasan_save_track+0x3e/0x80 [ 1080.343059][T11891] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1080.343081][T11891] ? bpf_stack_liveness_init+0x29/0x90 [ 1080.343104][T11891] ? bpf_check+0x263f/0x2ef0 [ 1080.343125][T11891] ? bpf_compute_const_regs+0x18f/0x3450 [ 1080.343148][T11891] ? bpf_compute_const_regs+0x18f/0x3450 [ 1080.343177][T11891] bpf_compute_const_regs+0x18f/0x3450 [ 1080.343221][T11891] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1080.343244][T11891] ? check_attach_btf_id+0x325/0x1af0 [ 1080.343273][T11891] ? bpf_stack_liveness_init+0x29/0x90 [ 1080.343295][T11891] ? trace_kmalloc+0x2a/0xf0 [ 1080.343316][T11891] ? __pfx_check_attach_btf_id+0x10/0x10 [ 1080.343339][T11891] ? bpf_stack_liveness_init+0x29/0x90 [ 1080.343360][T11891] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1080.343393][T11891] ? __asan_memset+0x22/0x50 [ 1080.343416][T11891] bpf_check+0x26ac/0x2ef0 [ 1080.343452][T11891] ? __pfx_bpf_check+0x10/0x10 [ 1080.343479][T11891] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1080.343501][T11891] bpf_prog_load+0x14d1/0x1c20 [ 1080.343537][T11891] ? __pfx_bpf_prog_load+0x10/0x10 [ 1080.343587][T11891] __sys_bpf+0xd0d/0xd90 [ 1080.343618][T11891] ? __pfx___sys_bpf+0x10/0x10 [ 1080.343654][T11891] ? __fget_files+0x2a/0x420 [ 1080.343691][T11891] ? ksys_write+0x242/0x270 [ 1080.343714][T11891] ? __pfx_ksys_write+0x10/0x10 [ 1080.343739][T11891] __x64_sys_bpf+0xba/0xd0 [ 1080.343764][T11891] do_syscall_64+0x166/0x520 [ 1080.343783][T11891] ? trace_irq_disable+0x3b/0x140 [ 1080.343805][T11891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.343823][T11891] ? clear_bhb_loop+0x70/0xc0 [ 1080.343846][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.343863][T11891] RIP: 0033:0x7fe8f4b9f559 [ 1080.343880][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.343895][T11891] RSP: 002b:00007fe8f2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.343916][T11891] RAX: ffffffffffffffda RBX: 00007fe8f4e25fa0 RCX: 00007fe8f4b9f559 [ 1080.343930][T11891] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1080.343942][T11891] RBP: 00007fe8f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.343965][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1080.343976][T11891] R13: 00007fe8f4e26038 R14: 00007fe8f4e25fa0 R15: 00007ffe5d98a638 [ 1080.344008][T11891] [ 1080.527858][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10770'. [ 1080.785912][T11908] FAULT_INJECTION: forcing a failure. [ 1080.785912][T11908] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.785945][T11908] CPU: 0 UID: 0 PID: 11908 Comm: syz.5.10774 Not tainted syzkaller #0 PREEMPT(full) [ 1080.785967][T11908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1080.785982][T11908] Call Trace: [ 1080.785990][T11908] [ 1080.785999][T11908] dump_stack_lvl+0xe8/0x150 [ 1080.786032][T11908] should_fail_ex+0x410/0x560 [ 1080.786061][T11908] should_failslab+0xa8/0x100 [ 1080.786091][T11908] __kvmalloc_node_noprof+0x171/0x820 [ 1080.786113][T11908] ? rcu_is_watching+0x16/0xb0 [ 1080.786138][T11908] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1080.786163][T11908] ? trace_kmalloc+0x2a/0xf0 [ 1080.786183][T11908] ? call_instance+0x263/0x560 [ 1080.786205][T11908] ? call_instance+0x263/0x560 [ 1080.786235][T11908] call_instance+0x263/0x560 [ 1080.786267][T11908] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1080.786322][T11908] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1080.786354][T11908] ? __kvmalloc_node_noprof+0x340/0x820 [ 1080.786377][T11908] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1080.786400][T11908] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1080.786429][T11908] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1080.786472][T11908] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1080.786508][T11908] bpf_check+0x2744/0x2ef0 [ 1080.786558][T11908] ? __pfx_bpf_check+0x10/0x10 [ 1080.786585][T11908] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1080.786608][T11908] bpf_prog_load+0x14d1/0x1c20 [ 1080.786645][T11908] ? __pfx_bpf_prog_load+0x10/0x10 [ 1080.786692][T11908] __sys_bpf+0xd0d/0xd90 [ 1080.786723][T11908] ? __pfx___sys_bpf+0x10/0x10 [ 1080.786755][T11908] ? __fget_files+0x2a/0x420 [ 1080.786789][T11908] ? ksys_write+0x242/0x270 [ 1080.786812][T11908] ? __pfx_ksys_write+0x10/0x10 [ 1080.786837][T11908] __x64_sys_bpf+0xba/0xd0 [ 1080.786859][T11908] do_syscall_64+0x166/0x520 [ 1080.786876][T11908] ? trace_irq_disable+0x3b/0x140 [ 1080.786895][T11908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.786912][T11908] ? clear_bhb_loop+0x70/0xc0 [ 1080.786934][T11908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.786950][T11908] RIP: 0033:0x7fe8f4b9f559 [ 1080.786967][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.786982][T11908] RSP: 002b:00007fe8f2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.787001][T11908] RAX: ffffffffffffffda RBX: 00007fe8f4e25fa0 RCX: 00007fe8f4b9f559 [ 1080.787015][T11908] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1080.787024][T11908] RBP: 00007fe8f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.787034][T11908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1080.787045][T11908] R13: 00007fe8f4e26038 R14: 00007fe8f4e25fa0 R15: 00007ffe5d98a638 [ 1080.787073][T11908] [ 1080.926250][T11910] netlink: 'syz.0.10775': attribute type 1 has an invalid length. [ 1081.163265][T11921] netlink: 'syz.3.10778': attribute type 5 has an invalid length. [ 1081.186522][T11913] syzkaller0: entered promiscuous mode [ 1081.186545][T11913] syzkaller0: entered allmulticast mode [ 1081.334926][T11930] FAULT_INJECTION: forcing a failure. [ 1081.334926][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.334959][T11930] CPU: 1 UID: 0 PID: 11930 Comm: syz.3.10782 Not tainted syzkaller #0 PREEMPT(full) [ 1081.334979][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1081.334989][T11930] Call Trace: [ 1081.334997][T11930] [ 1081.335005][T11930] dump_stack_lvl+0xe8/0x150 [ 1081.335039][T11930] should_fail_ex+0x410/0x560 [ 1081.335072][T11930] should_failslab+0xa8/0x100 [ 1081.335103][T11930] __kvmalloc_node_noprof+0x171/0x820 [ 1081.335130][T11930] ? __kvmalloc_node_noprof+0x340/0x820 [ 1081.335155][T11930] ? sort_subprogs_topo+0xf5/0xf20 [ 1081.335179][T11930] ? sort_subprogs_topo+0xf5/0xf20 [ 1081.335210][T11930] sort_subprogs_topo+0xf5/0xf20 [ 1081.335236][T11930] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1081.335283][T11930] bpf_check+0x26f8/0x2ef0 [ 1081.335328][T11930] ? __pfx_bpf_check+0x10/0x10 [ 1081.335355][T11930] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1081.335380][T11930] bpf_prog_load+0x14d1/0x1c20 [ 1081.335418][T11930] ? __pfx_bpf_prog_load+0x10/0x10 [ 1081.335480][T11930] __sys_bpf+0xd0d/0xd90 [ 1081.335516][T11930] ? __pfx___sys_bpf+0x10/0x10 [ 1081.335554][T11930] ? __fget_files+0x2a/0x420 [ 1081.335594][T11930] ? ksys_write+0x242/0x270 [ 1081.335619][T11930] ? __pfx_ksys_write+0x10/0x10 [ 1081.335646][T11930] __x64_sys_bpf+0xba/0xd0 [ 1081.335674][T11930] do_syscall_64+0x166/0x520 [ 1081.335692][T11930] ? trace_irq_disable+0x3b/0x140 [ 1081.335711][T11930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.335729][T11930] ? clear_bhb_loop+0x70/0xc0 [ 1081.335752][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.335771][T11930] RIP: 0033:0x7f067f19f559 [ 1081.335789][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.335804][T11930] RSP: 002b:00007f067fff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.335825][T11930] RAX: ffffffffffffffda RBX: 00007f067f425fa0 RCX: 00007f067f19f559 [ 1081.335839][T11930] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1081.335852][T11930] RBP: 00007f067fff8090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.335865][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.335877][T11930] R13: 00007f067f426038 R14: 00007f067f425fa0 R15: 00007ffe0903e888 [ 1081.335909][T11930] [ 1081.626135][T11934] FAULT_INJECTION: forcing a failure. [ 1081.626135][T11934] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.626168][T11934] CPU: 1 UID: 0 PID: 11934 Comm: syz.6.10786 Not tainted syzkaller #0 PREEMPT(full) [ 1081.626190][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1081.626202][T11934] Call Trace: [ 1081.626210][T11934] [ 1081.626219][T11934] dump_stack_lvl+0xe8/0x150 [ 1081.626252][T11934] should_fail_ex+0x410/0x560 [ 1081.626285][T11934] should_failslab+0xa8/0x100 [ 1081.626315][T11934] __kvmalloc_node_noprof+0x171/0x820 [ 1081.626350][T11934] ? rcu_is_watching+0x16/0xb0 [ 1081.626374][T11934] ? analyze_subprog+0x841/0x9df0 [ 1081.626397][T11934] ? analyze_subprog+0x841/0x9df0 [ 1081.626428][T11934] analyze_subprog+0x841/0x9df0 [ 1081.626451][T11934] ? is_bpf_text_address+0x292/0x2b0 [ 1081.626483][T11934] ? kernel_text_address+0xa5/0xe0 [ 1081.626511][T11934] ? arch_stack_walk+0xfb/0x150 [ 1081.626580][T11934] ? __pfx_stack_trace_save+0x10/0x10 [ 1081.626615][T11934] ? call_instance+0x263/0x560 [ 1081.626637][T11934] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1081.626659][T11934] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1081.626683][T11934] ? __pfx_analyze_subprog+0x10/0x10 [ 1081.626705][T11934] ? __x64_sys_bpf+0xba/0xd0 [ 1081.626725][T11934] ? do_syscall_64+0x166/0x520 [ 1081.626744][T11934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.626803][T11934] ? call_instance+0x263/0x560 [ 1081.626826][T11934] ? rcu_is_watching+0x16/0xb0 [ 1081.626850][T11934] ? call_instance+0x263/0x560 [ 1081.626872][T11934] ? trace_kmalloc+0x2a/0xf0 [ 1081.626897][T11934] ? call_instance+0x263/0x560 [ 1081.626920][T11934] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1081.626947][T11934] ? __kvmalloc_node_noprof+0x340/0x820 [ 1081.626971][T11934] ? call_instance+0x263/0x560 [ 1081.626993][T11934] ? call_instance+0x263/0x560 [ 1081.627024][T11934] ? call_instance+0x42e/0x560 [ 1081.627056][T11934] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1081.627112][T11934] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1081.627144][T11934] ? __kvmalloc_node_noprof+0x340/0x820 [ 1081.627168][T11934] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1081.627193][T11934] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1081.627226][T11934] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1081.627272][T11934] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1081.627309][T11934] bpf_check+0x2744/0x2ef0 [ 1081.627360][T11934] ? __pfx_bpf_check+0x10/0x10 [ 1081.627388][T11934] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1081.627412][T11934] bpf_prog_load+0x14d1/0x1c20 [ 1081.627450][T11934] ? __pfx_bpf_prog_load+0x10/0x10 [ 1081.627504][T11934] __sys_bpf+0xd0d/0xd90 [ 1081.627537][T11934] ? __pfx___sys_bpf+0x10/0x10 [ 1081.627574][T11934] ? __fget_files+0x2a/0x420 [ 1081.627614][T11934] ? ksys_write+0x242/0x270 [ 1081.627639][T11934] ? __pfx_ksys_write+0x10/0x10 [ 1081.627667][T11934] __x64_sys_bpf+0xba/0xd0 [ 1081.627691][T11934] do_syscall_64+0x166/0x520 [ 1081.627709][T11934] ? trace_irq_disable+0x3b/0x140 [ 1081.627730][T11934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.627748][T11934] ? clear_bhb_loop+0x70/0xc0 [ 1081.627771][T11934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.627789][T11934] RIP: 0033:0x7f3c3dd9f559 [ 1081.627807][T11934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.627823][T11934] RSP: 002b:00007f3c3ec62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.627844][T11934] RAX: ffffffffffffffda RBX: 00007f3c3e025fa0 RCX: 00007f3c3dd9f559 [ 1081.627857][T11934] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1081.627869][T11934] RBP: 00007f3c3ec62090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.627882][T11934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.627894][T11934] R13: 00007f3c3e026038 R14: 00007f3c3e025fa0 R15: 00007ffe5f7b0b18 [ 1081.627926][T11934] [ 1082.062620][T11946] netlink: 'syz.0.10787': attribute type 83 has an invalid length. [ 1082.068963][T11946] netlink: 'syz.0.10787': attribute type 1 has an invalid length. [ 1082.330865][T11961] netlink: 'syz.1.10792': attribute type 5 has an invalid length. [ 1082.376891][T11963] FAULT_INJECTION: forcing a failure. [ 1082.376891][T11963] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.376925][T11963] CPU: 0 UID: 0 PID: 11963 Comm: syz.6.10793 Not tainted syzkaller #0 PREEMPT(full) [ 1082.376947][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1082.376959][T11963] Call Trace: [ 1082.376967][T11963] [ 1082.376976][T11963] dump_stack_lvl+0xe8/0x150 [ 1082.377006][T11963] should_fail_ex+0x410/0x560 [ 1082.377036][T11963] should_failslab+0xa8/0x100 [ 1082.377064][T11963] __kvmalloc_node_noprof+0x171/0x820 [ 1082.377090][T11963] ? bpf_compute_scc+0xb8/0xb10 [ 1082.377110][T11963] ? bpf_compute_scc+0xb8/0xb10 [ 1082.377138][T11963] bpf_compute_scc+0xb8/0xb10 [ 1082.377178][T11963] bpf_check+0x271e/0x2ef0 [ 1082.377220][T11963] ? __pfx_bpf_check+0x10/0x10 [ 1082.377245][T11963] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1082.377268][T11963] bpf_prog_load+0x14d1/0x1c20 [ 1082.377306][T11963] ? __pfx_bpf_prog_load+0x10/0x10 [ 1082.377352][T11963] __sys_bpf+0xd0d/0xd90 [ 1082.377383][T11963] ? __pfx___sys_bpf+0x10/0x10 [ 1082.377418][T11963] ? __fget_files+0x2a/0x420 [ 1082.377456][T11963] ? ksys_write+0x242/0x270 [ 1082.377481][T11963] ? __pfx_ksys_write+0x10/0x10 [ 1082.377508][T11963] __x64_sys_bpf+0xba/0xd0 [ 1082.377533][T11963] do_syscall_64+0x166/0x520 [ 1082.377552][T11963] ? trace_irq_disable+0x3b/0x140 [ 1082.377571][T11963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.377590][T11963] ? clear_bhb_loop+0x70/0xc0 [ 1082.377613][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.377632][T11963] RIP: 0033:0x7f3c3dd9f559 [ 1082.377649][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.377665][T11963] RSP: 002b:00007f3c3ec62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1082.377684][T11963] RAX: ffffffffffffffda RBX: 00007f3c3e025fa0 RCX: 00007f3c3dd9f559 [ 1082.377698][T11963] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1082.377710][T11963] RBP: 00007f3c3ec62090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.377722][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.377733][T11963] R13: 00007f3c3e026038 R14: 00007f3c3e025fa0 R15: 00007ffe5f7b0b18 [ 1082.377766][T11963] [ 1082.551233][T11967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.551264][T11967] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.653780][T11966] Bluetooth: hci0: unsupported parameter 5135 [ 1082.653805][T11966] Bluetooth: hci0: unsupported parameter 8192 [ 1082.653818][T11966] Bluetooth: hci0: unsupported parameter 5135 [ 1082.653832][T11966] Bluetooth: hci0: unsupported parameter 8192 [ 1082.960402][T11984] FAULT_INJECTION: forcing a failure. [ 1082.960402][T11984] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.960435][T11984] CPU: 1 UID: 0 PID: 11984 Comm: syz.5.10807 Not tainted syzkaller #0 PREEMPT(full) [ 1082.960457][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1082.960469][T11984] Call Trace: [ 1082.960477][T11984] [ 1082.960486][T11984] dump_stack_lvl+0xe8/0x150 [ 1082.960519][T11984] should_fail_ex+0x410/0x560 [ 1082.960551][T11984] should_failslab+0xa8/0x100 [ 1082.960580][T11984] __kvmalloc_node_noprof+0x171/0x820 [ 1082.960608][T11984] ? __kvmalloc_node_noprof+0x340/0x820 [ 1082.960632][T11984] ? sort_subprogs_topo+0xf5/0xf20 [ 1082.960655][T11984] ? sort_subprogs_topo+0xf5/0xf20 [ 1082.960686][T11984] sort_subprogs_topo+0xf5/0xf20 [ 1082.960711][T11984] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1082.960756][T11984] bpf_check+0x26f8/0x2ef0 [ 1082.960799][T11984] ? __pfx_bpf_check+0x10/0x10 [ 1082.960826][T11984] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1082.960850][T11984] bpf_prog_load+0x14d1/0x1c20 [ 1082.960886][T11984] ? __pfx_bpf_prog_load+0x10/0x10 [ 1082.960941][T11984] __sys_bpf+0xd0d/0xd90 [ 1082.960972][T11984] ? __pfx___sys_bpf+0x10/0x10 [ 1082.961006][T11984] ? __fget_files+0x2a/0x420 [ 1082.961046][T11984] ? ksys_write+0x242/0x270 [ 1082.961071][T11984] ? __pfx_ksys_write+0x10/0x10 [ 1082.961100][T11984] __x64_sys_bpf+0xba/0xd0 [ 1082.961126][T11984] do_syscall_64+0x166/0x520 [ 1082.961145][T11984] ? trace_irq_disable+0x3b/0x140 [ 1082.961166][T11984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.961185][T11984] ? clear_bhb_loop+0x70/0xc0 [ 1082.961207][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.961224][T11984] RIP: 0033:0x7fe8f4b9f559 [ 1082.961242][T11984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.961259][T11984] RSP: 002b:00007fe8f2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1082.961279][T11984] RAX: ffffffffffffffda RBX: 00007fe8f4e25fa0 RCX: 00007fe8f4b9f559 [ 1082.961292][T11984] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1082.961305][T11984] RBP: 00007fe8f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.961316][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.961327][T11984] R13: 00007fe8f4e26038 R14: 00007fe8f4e25fa0 R15: 00007ffe5d98a638 [ 1082.961358][T11984] [ 1083.133571][T11992] netlink: 'syz.6.10806': attribute type 5 has an invalid length. [ 1083.701956][T12035] FAULT_INJECTION: forcing a failure. [ 1083.701956][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.701989][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.3.10818 Not tainted syzkaller #0 PREEMPT(full) [ 1083.702010][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1083.702022][T12035] Call Trace: [ 1083.702030][T12035] [ 1083.702039][T12035] dump_stack_lvl+0xe8/0x150 [ 1083.702072][T12035] should_fail_ex+0x410/0x560 [ 1083.702105][T12035] should_failslab+0xa8/0x100 [ 1083.702135][T12035] __kvmalloc_node_noprof+0x171/0x820 [ 1083.702162][T12035] ? __kvmalloc_node_noprof+0x340/0x820 [ 1083.702185][T12035] ? bpf_compute_scc+0xec/0xb10 [ 1083.702209][T12035] ? bpf_compute_scc+0xec/0xb10 [ 1083.702237][T12035] bpf_compute_scc+0xec/0xb10 [ 1083.702282][T12035] bpf_check+0x271e/0x2ef0 [ 1083.702325][T12035] ? __pfx_bpf_check+0x10/0x10 [ 1083.702351][T12035] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1083.702373][T12035] bpf_prog_load+0x14d1/0x1c20 [ 1083.702410][T12035] ? __pfx_bpf_prog_load+0x10/0x10 [ 1083.702457][T12035] __sys_bpf+0xd0d/0xd90 [ 1083.702488][T12035] ? __pfx___sys_bpf+0x10/0x10 [ 1083.702525][T12035] ? __fget_files+0x2a/0x420 [ 1083.702563][T12035] ? ksys_write+0x242/0x270 [ 1083.702589][T12035] ? __pfx_ksys_write+0x10/0x10 [ 1083.702616][T12035] __x64_sys_bpf+0xba/0xd0 [ 1083.702643][T12035] do_syscall_64+0x166/0x520 [ 1083.702662][T12035] ? trace_irq_disable+0x3b/0x140 [ 1083.702684][T12035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.702703][T12035] ? clear_bhb_loop+0x70/0xc0 [ 1083.702727][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.702746][T12035] RIP: 0033:0x7f067f19f559 [ 1083.702765][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.702778][T12035] RSP: 002b:00007f067fff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1083.702799][T12035] RAX: ffffffffffffffda RBX: 00007f067f425fa0 RCX: 00007f067f19f559 [ 1083.702814][T12035] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1083.702827][T12035] RBP: 00007f067fff8090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.702846][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.702859][T12035] R13: 00007f067f426038 R14: 00007f067f425fa0 R15: 00007ffe0903e888 [ 1083.702891][T12035] [ 1083.867619][T12038] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1083.868981][T12038] team0: Device ipvlan0 is already an upper device of the team interface [ 1083.907836][T12040] netlink: 'syz.3.10819': attribute type 21 has an invalid length. [ 1083.960026][T12041] netlink: 'syz.5.10820': attribute type 5 has an invalid length. [ 1084.223687][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.227866][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.228123][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.228967][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.285833][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.286172][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.286423][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.286654][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.286897][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.314455][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.523350][T12056] __nla_validate_parse: 33 callbacks suppressed [ 1084.523372][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.526112][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.528052][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.577372][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.578064][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.578644][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.624327][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.626251][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.628924][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.648457][T12056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1084.760505][T12073] netlink: 'syz.5.10832': attribute type 2 has an invalid length. [ 1084.760531][T12073] netlink: 'syz.5.10832': attribute type 2 has an invalid length. [ 1084.807318][T12077] netlink: 'syz.6.10833': attribute type 5 has an invalid length. [ 1084.908928][T12080] netlink: 'syz.3.10835': attribute type 1 has an invalid length. [ 1084.977419][T12086] FAULT_INJECTION: forcing a failure. [ 1084.977419][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.977451][T12086] CPU: 0 UID: 0 PID: 12086 Comm: syz.5.10837 Not tainted syzkaller #0 PREEMPT(full) [ 1084.977471][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1084.977482][T12086] Call Trace: [ 1084.977491][T12086] [ 1084.977499][T12086] dump_stack_lvl+0xe8/0x150 [ 1084.977531][T12086] should_fail_ex+0x410/0x560 [ 1084.977563][T12086] should_failslab+0xa8/0x100 [ 1084.977591][T12086] __kmalloc_cache_noprof+0x9e/0x600 [ 1084.977614][T12086] ? do_check_common+0x26e/0x5660 [ 1084.977638][T12086] ? do_check_common+0x26e/0x5660 [ 1084.977669][T12086] do_check_common+0x26e/0x5660 [ 1084.977712][T12086] ? kfree+0x1c5/0x650 [ 1084.977731][T12086] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 1084.977756][T12086] ? bpf_insn_def32+0x1ae/0x650 [ 1084.977788][T12086] ? mark_fastcall_patterns+0xf32/0xf90 [ 1084.977815][T12086] ? __pfx_do_check_common+0x10/0x10 [ 1084.977854][T12086] do_check_main+0xa2/0x1f0 [ 1084.977880][T12086] bpf_check+0x2775/0x2ef0 [ 1084.977920][T12086] ? __pfx_bpf_check+0x10/0x10 [ 1084.977946][T12086] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1084.977969][T12086] bpf_prog_load+0x14d1/0x1c20 [ 1084.978007][T12086] ? __pfx_bpf_prog_load+0x10/0x10 [ 1084.978058][T12086] __sys_bpf+0xd0d/0xd90 [ 1084.978095][T12086] ? __pfx___sys_bpf+0x10/0x10 [ 1084.978131][T12086] ? __fget_files+0x2a/0x420 [ 1084.978177][T12086] ? ksys_write+0x242/0x270 [ 1084.978201][T12086] ? __pfx_ksys_write+0x10/0x10 [ 1084.978228][T12086] __x64_sys_bpf+0xba/0xd0 [ 1084.978254][T12086] do_syscall_64+0x166/0x520 [ 1084.978272][T12086] ? trace_irq_disable+0x3b/0x140 [ 1084.978294][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.978313][T12086] ? clear_bhb_loop+0x70/0xc0 [ 1084.978336][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.978356][T12086] RIP: 0033:0x7fe8f4b9f559 [ 1084.978374][T12086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.978390][T12086] RSP: 002b:00007fe8f2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1084.978411][T12086] RAX: ffffffffffffffda RBX: 00007fe8f4e25fa0 RCX: 00007fe8f4b9f559 [ 1084.978425][T12086] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1084.978438][T12086] RBP: 00007fe8f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.978450][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.978461][T12086] R13: 00007fe8f4e26038 R14: 00007fe8f4e25fa0 R15: 00007ffe5d98a638 [ 1084.978493][T12086] [ 1084.994961][T12080] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1085.221014][T12080] bond2: (slave veth0_to_bond): Releasing backup interface [ 1085.273222][T12080] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1085.530770][T12114] siw: device registration error -23 [ 1085.607203][T12122] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1085.700939][T12126] FAULT_INJECTION: forcing a failure. [ 1085.700939][T12126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.700972][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.5.10850 Not tainted syzkaller #0 PREEMPT(full) [ 1085.700992][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1085.701003][T12126] Call Trace: [ 1085.701011][T12126] [ 1085.701019][T12126] dump_stack_lvl+0xe8/0x150 [ 1085.701051][T12126] should_fail_ex+0x410/0x560 [ 1085.701095][T12126] _copy_to_user+0x31/0xb0 [ 1085.701124][T12126] bpf_log_attr_finalize+0x124/0x1e0 [ 1085.701148][T12126] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1085.701172][T12126] ? ktime_get+0x45/0x220 [ 1085.701194][T12126] ? ktime_get+0x1f5/0x220 [ 1085.701215][T12126] bpf_check+0x1d66/0x2ef0 [ 1085.701260][T12126] ? __pfx_bpf_check+0x10/0x10 [ 1085.701286][T12126] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1085.701309][T12126] bpf_prog_load+0x14d1/0x1c20 [ 1085.701357][T12126] ? __pfx_bpf_prog_load+0x10/0x10 [ 1085.701412][T12126] __sys_bpf+0xd0d/0xd90 [ 1085.701444][T12126] ? __pfx___sys_bpf+0x10/0x10 [ 1085.701479][T12126] ? __fget_files+0x2a/0x420 [ 1085.701515][T12126] ? ksys_write+0x242/0x270 [ 1085.701538][T12126] ? __pfx_ksys_write+0x10/0x10 [ 1085.701563][T12126] __x64_sys_bpf+0xba/0xd0 [ 1085.701588][T12126] do_syscall_64+0x166/0x520 [ 1085.701605][T12126] ? trace_irq_disable+0x3b/0x140 [ 1085.701624][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.701644][T12126] ? clear_bhb_loop+0x70/0xc0 [ 1085.701667][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.701685][T12126] RIP: 0033:0x7fe8f4b9f559 [ 1085.701703][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.701719][T12126] RSP: 002b:00007fe8f2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1085.701739][T12126] RAX: ffffffffffffffda RBX: 00007fe8f4e25fa0 RCX: 00007fe8f4b9f559 [ 1085.701753][T12126] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1085.701766][T12126] RBP: 00007fe8f2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.701778][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.701790][T12126] R13: 00007fe8f4e26038 R14: 00007fe8f4e25fa0 R15: 00007ffe5d98a638 [ 1085.701818][T12126] [ 1086.017591][T12134] syzkaller0: entered promiscuous mode [ 1086.017617][T12134] syzkaller0: entered allmulticast mode [ 1087.395158][T19668] Bluetooth: hci5: command 0x0406 tx timeout [ 1089.083443][T12154] veth1_macvtap: left promiscuous mode [ 1089.095018][T12156] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1089.642449][T12196] __nla_validate_parse: 39 callbacks suppressed [ 1089.642470][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10870'. [ 1089.786699][T12205] SET target dimension over the limit! [ 1089.888299][T12215] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10875'. [ 1090.074882][T12221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10878'. [ 1090.075018][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10876'. [ 1090.090184][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10876'. [ 1090.133201][T12228] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10878'. [ 1090.230318][T12230] validate_nla: 2 callbacks suppressed [ 1090.230339][T12230] netlink: 'syz.0.10879': attribute type 6 has an invalid length. [ 1090.391046][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10884'. [ 1090.398551][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10882'. [ 1090.420615][T12244] nbd3: detected capacity change from 0 to 63 [ 1090.753602][T12263] FAULT_INJECTION: forcing a failure. [ 1090.753602][T12263] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.753636][T12263] CPU: 0 UID: 0 PID: 12263 Comm: syz.6.10889 Not tainted syzkaller #0 PREEMPT(full) [ 1090.753657][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1090.753669][T12263] Call Trace: [ 1090.753677][T12263] [ 1090.753685][T12263] dump_stack_lvl+0xe8/0x150 [ 1090.753717][T12263] should_fail_ex+0x410/0x560 [ 1090.753748][T12263] should_failslab+0xa8/0x100 [ 1090.753778][T12263] __kvmalloc_node_noprof+0x171/0x820 [ 1090.753803][T12263] ? __pfx_bpf_fetch_kfunc_arg_meta+0x10/0x10 [ 1090.753829][T12263] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1090.753853][T12263] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1090.753886][T12263] bpf_compute_subprog_arg_access+0x138/0x14d0 [ 1090.753916][T12263] ? bpf_get_call_summary+0x440/0xfa0 [ 1090.753942][T12263] ? __pfx_bpf_get_call_summary+0x10/0x10 [ 1090.753983][T12263] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1090.754023][T12263] ? __kvmalloc_node_noprof+0x340/0x820 [ 1090.754047][T12263] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1090.754071][T12263] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1090.754104][T12263] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1090.754152][T12263] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1090.754189][T12263] bpf_check+0x2744/0x2ef0 [ 1090.754237][T12263] ? __pfx_bpf_check+0x10/0x10 [ 1090.754263][T12263] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1090.754287][T12263] bpf_prog_load+0x14d1/0x1c20 [ 1090.754325][T12263] ? __pfx_bpf_prog_load+0x10/0x10 [ 1090.754377][T12263] __sys_bpf+0xd0d/0xd90 [ 1090.754410][T12263] ? __pfx___sys_bpf+0x10/0x10 [ 1090.754447][T12263] ? __fget_files+0x2a/0x420 [ 1090.754496][T12263] ? ksys_write+0x242/0x270 [ 1090.754520][T12263] ? __pfx_ksys_write+0x10/0x10 [ 1090.754548][T12263] __x64_sys_bpf+0xba/0xd0 [ 1090.754573][T12263] do_syscall_64+0x166/0x520 [ 1090.754591][T12263] ? trace_irq_disable+0x3b/0x140 [ 1090.754612][T12263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.754631][T12263] ? clear_bhb_loop+0x70/0xc0 [ 1090.754655][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.754673][T12263] RIP: 0033:0x7f3c3dd9f559 [ 1090.754691][T12263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.754713][T12263] RSP: 002b:00007f3c3ec62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1090.754733][T12263] RAX: ffffffffffffffda RBX: 00007f3c3e025fa0 RCX: 00007f3c3dd9f559 [ 1090.754748][T12263] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1090.754761][T12263] RBP: 00007f3c3ec62090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.754773][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.754785][T12263] R13: 00007f3c3e026038 R14: 00007f3c3e025fa0 R15: 00007ffe5f7b0b18 [ 1090.754816][T12263] [ 1091.226031][T24368] block nbd3: Receive control failed (result -104) [ 1091.267518][T12269] hsr0: entered allmulticast mode [ 1091.267539][T12269] hsr_slave_0: entered allmulticast mode [ 1091.267554][T12269] hsr_slave_1: entered allmulticast mode [ 1091.320025][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10892'. [ 1091.538711][T12244] block nbd3: NBD_DISCONNECT [ 1091.538733][T12244] block nbd3: Send disconnect failed -32 [ 1091.538744][T12244] block nbd3: shutting down sockets [ 1091.574012][ C1] blk_print_req_error: 24 callbacks suppressed [ 1091.574035][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.574150][ C1] buffer_io_error: 23 callbacks suppressed [ 1091.574164][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1091.574313][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.574376][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1091.574431][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.574492][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1091.574542][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.574602][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1091.574958][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.574987][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1091.575003][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1091.575018][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1091.575032][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1091.575188][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.575221][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1091.575235][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1091.575422][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.575579][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.575782][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.575952][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1091.576135][T12020] ldm_validate_partition_table(): Disk read failed. [ 1091.576666][T12020] Dev nbd3: unable to read RDB block 0 [ 1091.577441][T12020] nbd3: unable to read partition table [ 1091.657029][T12020] ldm_validate_partition_table(): Disk read failed. [ 1091.665399][T12020] Dev nbd3: unable to read RDB block 0 [ 1091.672824][T12020] nbd3: unable to read partition table [ 1091.753547][T12279] netlink: 568 bytes leftover after parsing attributes in process `syz.0.10894'. [ 1091.878601][T12282] netlink: 'syz.0.10894': attribute type 3 has an invalid length. [ 1092.053822][T12297] FAULT_INJECTION: forcing a failure. [ 1092.053822][T12297] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.053856][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.1.10901 Not tainted syzkaller #0 PREEMPT(full) [ 1092.053878][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1092.053889][T12297] Call Trace: [ 1092.053897][T12297] [ 1092.053906][T12297] dump_stack_lvl+0xe8/0x150 [ 1092.053939][T12297] should_fail_ex+0x410/0x560 [ 1092.053976][T12297] should_failslab+0xa8/0x100 [ 1092.054006][T12297] __kvmalloc_node_noprof+0x171/0x820 [ 1092.054030][T12297] ? __kvmalloc_node_noprof+0x340/0x820 [ 1092.054052][T12297] ? analyze_subprog+0x87d/0x9df0 [ 1092.054074][T12297] ? analyze_subprog+0x87d/0x9df0 [ 1092.054104][T12297] analyze_subprog+0x87d/0x9df0 [ 1092.054131][T12297] ? is_bpf_text_address+0x292/0x2b0 [ 1092.054161][T12297] ? kernel_text_address+0xa5/0xe0 [ 1092.054187][T12297] ? arch_stack_walk+0xfb/0x150 [ 1092.054226][T12297] ? __pfx_stack_trace_save+0x10/0x10 [ 1092.054264][T12297] ? call_instance+0x263/0x560 [ 1092.054285][T12297] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1092.054307][T12297] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1092.054331][T12297] ? __pfx_analyze_subprog+0x10/0x10 [ 1092.054353][T12297] ? __x64_sys_bpf+0xba/0xd0 [ 1092.054373][T12297] ? do_syscall_64+0x166/0x520 [ 1092.054392][T12297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.054452][T12297] ? call_instance+0x263/0x560 [ 1092.054473][T12297] ? rcu_is_watching+0x16/0xb0 [ 1092.054495][T12297] ? call_instance+0x263/0x560 [ 1092.054515][T12297] ? trace_kmalloc+0x2a/0xf0 [ 1092.054538][T12297] ? call_instance+0x263/0x560 [ 1092.054560][T12297] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1092.054585][T12297] ? __kvmalloc_node_noprof+0x340/0x820 [ 1092.054608][T12297] ? call_instance+0x263/0x560 [ 1092.054630][T12297] ? call_instance+0x263/0x560 [ 1092.054660][T12297] ? call_instance+0x42e/0x560 [ 1092.054700][T12297] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1092.054756][T12297] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1092.054785][T12297] ? __kvmalloc_node_noprof+0x340/0x820 [ 1092.054808][T12297] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1092.054832][T12297] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1092.054865][T12297] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1092.054911][T12297] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1092.054948][T12297] bpf_check+0x2744/0x2ef0 [ 1092.054988][T12297] ? __pfx_bpf_check+0x10/0x10 [ 1092.055013][T12297] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1092.055037][T12297] bpf_prog_load+0x14d1/0x1c20 [ 1092.055073][T12297] ? __pfx_bpf_prog_load+0x10/0x10 [ 1092.055121][T12297] __sys_bpf+0xd0d/0xd90 [ 1092.055152][T12297] ? __pfx___sys_bpf+0x10/0x10 [ 1092.055186][T12297] ? __fget_files+0x2a/0x420 [ 1092.055223][T12297] ? ksys_write+0x242/0x270 [ 1092.055246][T12297] ? __pfx_ksys_write+0x10/0x10 [ 1092.055274][T12297] __x64_sys_bpf+0xba/0xd0 [ 1092.055300][T12297] do_syscall_64+0x166/0x520 [ 1092.055319][T12297] ? trace_irq_disable+0x3b/0x140 [ 1092.055341][T12297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.055360][T12297] ? clear_bhb_loop+0x70/0xc0 [ 1092.055383][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.055401][T12297] RIP: 0033:0x7f3b08b9f559 [ 1092.055420][T12297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.055436][T12297] RSP: 002b:00007f3b099de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.055456][T12297] RAX: ffffffffffffffda RBX: 00007f3b08e25fa0 RCX: 00007f3b08b9f559 [ 1092.055470][T12297] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1092.055481][T12297] RBP: 00007f3b099de090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.055493][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.055503][T12297] R13: 00007f3b08e26038 R14: 00007f3b08e25fa0 R15: 00007fff537c3228 [ 1092.055532][T12297] [ 1092.605183][T12314] netlink: 'syz.0.10907': attribute type 1 has an invalid length. [ 1092.668605][T12315] bond12: (slave bridge4): Enslaving as a backup interface with an up link [ 1092.682549][T12315] bond12: (slave bridge5): Enslaving as a backup interface with a down link [ 1092.699010][T12315] bond12: (slave bridge6): Enslaving as a backup interface with a down link [ 1092.716920][T12315] macvlan2: entered promiscuous mode [ 1092.716941][T12315] macvlan2: entered allmulticast mode [ 1092.717356][T12315] bond12: entered promiscuous mode [ 1092.717371][T12315] bridge4: entered promiscuous mode [ 1092.717536][T12315] bridge5: entered promiscuous mode [ 1092.717670][T12315] bridge6: entered promiscuous mode [ 1092.722477][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.752484][T12315] bond12: left promiscuous mode [ 1092.752504][T12315] bridge4: left promiscuous mode [ 1092.752752][T12315] bridge5: left promiscuous mode [ 1092.752981][T12315] bridge6: left promiscuous mode [ 1092.820650][T12314] macvlan2: entered promiscuous mode [ 1092.820681][T12314] macvlan2: entered allmulticast mode [ 1092.823726][T12314] bond12: entered promiscuous mode [ 1092.823745][T12314] bridge4: entered promiscuous mode [ 1092.823965][T12314] bridge5: entered promiscuous mode [ 1092.824162][T12314] bridge6: entered promiscuous mode [ 1092.824991][T12314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.827886][T12314] bond12: left promiscuous mode [ 1092.827903][T12314] bridge4: left promiscuous mode [ 1092.828143][T12314] bridge5: left promiscuous mode [ 1092.828345][T12314] bridge6: left promiscuous mode [ 1092.901363][T12315] macvlan2: entered promiscuous mode [ 1092.901385][T12315] macvlan2: entered allmulticast mode [ 1092.902899][T12315] bond12: entered promiscuous mode [ 1092.902916][T12315] bridge4: entered promiscuous mode [ 1092.904423][T12315] bridge5: entered promiscuous mode [ 1092.904751][T12315] bridge6: entered promiscuous mode [ 1092.905750][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.908217][T12315] bond12: left promiscuous mode [ 1092.908233][T12315] bridge4: left promiscuous mode [ 1092.908452][T12315] bridge5: left promiscuous mode [ 1092.908666][T12315] bridge6: left promiscuous mode [ 1093.025843][T12315] macvlan2: entered promiscuous mode [ 1093.025865][T12315] macvlan2: entered allmulticast mode [ 1093.027404][T12315] bond12: entered promiscuous mode [ 1093.027421][T12315] bridge4: entered promiscuous mode [ 1093.028542][T12315] bridge5: entered promiscuous mode [ 1093.028781][T12315] bridge6: entered promiscuous mode [ 1093.035061][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1093.077923][T12315] bond12: left promiscuous mode [ 1093.077945][T12315] bridge4: left promiscuous mode [ 1093.078188][T12315] bridge5: left promiscuous mode [ 1093.078388][T12315] bridge6: left promiscuous mode [ 1093.119622][T12334] netlink: 'syz.3.10913': attribute type 5 has an invalid length. [ 1093.224986][T12315] macvlan2: entered promiscuous mode [ 1093.225008][T12315] macvlan2: entered allmulticast mode [ 1093.225751][T12315] bond12: entered promiscuous mode [ 1093.225768][T12315] bridge4: entered promiscuous mode [ 1093.227785][T12315] bridge5: entered promiscuous mode [ 1093.228021][T12315] bridge6: entered promiscuous mode [ 1093.233292][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1093.273528][T12315] bond12: left promiscuous mode [ 1093.273553][T12315] bridge4: left promiscuous mode [ 1093.273805][T12315] bridge5: left promiscuous mode [ 1093.274018][T12315] bridge6: left promiscuous mode [ 1093.338805][ T9499] IPVS: starting estimator thread 0... [ 1093.387255][T12315] macvlan2: entered promiscuous mode [ 1093.387279][T12315] macvlan2: entered allmulticast mode [ 1093.396873][T12315] bond12: entered promiscuous mode [ 1093.396904][T12315] bridge4: entered promiscuous mode [ 1093.397157][T12315] bridge5: entered promiscuous mode [ 1093.397349][T12315] bridge6: entered promiscuous mode [ 1093.403330][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1093.431815][T12346] IPVS: using max 36 ests per chain, 86400 per kthread [ 1093.444462][T12315] bond12: left promiscuous mode [ 1093.444483][T12315] bridge4: left promiscuous mode [ 1093.444754][T12315] bridge5: left promiscuous mode [ 1093.444960][T12315] bridge6: left promiscuous mode [ 1093.548304][T12350] netlink: 'syz.3.10918': attribute type 8 has an invalid length. [ 1093.627169][T12336] sit0: entered promiscuous mode [ 1093.664665][T12352] tipc: Enabling of bearer rejected, media not registered [ 1094.051071][T12369] net_ratelimit: 56 callbacks suppressed [ 1094.051092][T12369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1094.052245][T12369] mac80211_hwsim hwsim147 ÿ: renamed from wlan1 (while UP) [ 1094.602645][T12400] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 1094.603122][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.626357][T12402] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1094.654492][T12398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.966311][T12423] __nla_validate_parse: 75 callbacks suppressed [ 1094.966333][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10943'. [ 1094.974961][T12421] netlink: 'syz.1.10942': attribute type 3 has an invalid length. [ 1095.215337][T24368] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1095.297141][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297141][T12446] Use struct sctp_sack_info instead [ 1095.297193][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297193][T12446] Use struct sctp_sack_info instead [ 1095.297233][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297233][T12446] Use struct sctp_sack_info instead [ 1095.297273][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297273][T12446] Use struct sctp_sack_info instead [ 1095.297312][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297312][T12446] Use struct sctp_sack_info instead [ 1095.297351][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297351][T12446] Use struct sctp_sack_info instead [ 1095.297392][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297392][T12446] Use struct sctp_sack_info instead [ 1095.297445][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297445][T12446] Use struct sctp_sack_info instead [ 1095.297484][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297484][T12446] Use struct sctp_sack_info instead [ 1095.297525][T12446] sctp: [Deprecated]: syz.1.10945 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.297525][T12446] Use struct sctp_sack_info instead [ 1095.550367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.009255][T12477] bond4: option min_links: invalid value (18446744073709551614) [ 1096.009280][T12477] bond4: option min_links: allowed values 0 - 2147483647 [ 1096.045692][T12477] bond4 (unregistering): Released all slaves [ 1096.055426][T12481] Cannot find add_set index 65532 as target [ 1096.224928][T12482] bond4: option min_links: invalid value (18446744073709551614) [ 1096.224952][T12482] bond4: option min_links: allowed values 0 - 2147483647 [ 1096.227166][T12482] bond4 (unregistering): Released all slaves [ 1096.311502][T24368] Bluetooth: hci6: Malformed Event: 0x13 [ 1096.422400][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10965'. [ 1096.438751][T12511] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10963'. [ 1096.438775][T12511] openvswitch: netlink: Flow key attr not present in new flow. [ 1096.561142][T12514] bond0: entered promiscuous mode [ 1096.561165][T12514] bond_slave_0: entered promiscuous mode [ 1096.561355][T12514] bond_slave_1: entered promiscuous mode [ 1096.562498][T12518] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10968'. [ 1096.562967][T12518] netlink: 'syz.3.10968': attribute type 1 has an invalid length. [ 1096.642048][T12514] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 1096.656503][T12514] bond4 (unregistering): Released all slaves [ 1097.013508][T12544] sctp: [Deprecated]: syz.0.10971 (pid 12544) Use of int in maxseg socket option. [ 1097.013508][T12544] Use struct sctp_assoc_value instead [ 1097.028641][T12542] bridge7: entered promiscuous mode [ 1097.028683][T12542] bridge7: entered allmulticast mode [ 1097.145949][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10974'. [ 1097.163638][T12548] wg2: Caught tx_queue_len zero misconfig [ 1097.748558][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1097.944953][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10990'. [ 1098.020490][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1098.020513][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1098.020942][T12600] vlan0: entered promiscuous mode [ 1098.222971][T12611] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1098.224007][T12611] netlink: 'syz.1.10997': attribute type 10 has an invalid length. [ 1098.236208][T12611] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 1098.252129][T12611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.428705][T12624] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10999'. [ 1098.502095][T12627] netlink: 'syz.0.11001': attribute type 1 has an invalid length. [ 1098.636884][T12628] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1098.646450][T12628] bond13: (slave bond14): making interface the new active one [ 1098.654030][T12628] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1098.676565][T12629] bond13: (slave gretap1): Enslaving as a backup interface with an up link [ 1098.751429][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1099.272160][T12670] tipc: Enabling of bearer rejected, failed to enable media [ 1099.448109][T12678] netlink: 'syz.0.11016': attribute type 1 has an invalid length. [ 1099.686044][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686083][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686109][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686134][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686159][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686184][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686209][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686234][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686259][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1099.686285][T12694] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1100.118937][T12720] FAULT_INJECTION: forcing a failure. [ 1100.118937][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.118975][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.1.11028 Not tainted syzkaller #0 PREEMPT(full) [ 1100.118996][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1100.119008][T12720] Call Trace: [ 1100.119016][T12720] [ 1100.119024][T12720] dump_stack_lvl+0xe8/0x150 [ 1100.119058][T12720] should_fail_ex+0x410/0x560 [ 1100.119097][T12720] _copy_to_user+0x31/0xb0 [ 1100.119126][T12720] bpf_log_attr_finalize+0x124/0x1e0 [ 1100.119151][T12720] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1100.119175][T12720] ? ktime_get+0x45/0x220 [ 1100.119197][T12720] ? ktime_get+0x1f5/0x220 [ 1100.119220][T12720] bpf_check+0x1d66/0x2ef0 [ 1100.119259][T12720] ? __pfx_bpf_check+0x10/0x10 [ 1100.119285][T12720] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1100.119309][T12720] bpf_prog_load+0x14d1/0x1c20 [ 1100.119346][T12720] ? __pfx_bpf_prog_load+0x10/0x10 [ 1100.119396][T12720] __sys_bpf+0xd0d/0xd90 [ 1100.119428][T12720] ? __pfx___sys_bpf+0x10/0x10 [ 1100.119463][T12720] ? __fget_files+0x2a/0x420 [ 1100.119501][T12720] ? ksys_write+0x242/0x270 [ 1100.119526][T12720] ? __pfx_ksys_write+0x10/0x10 [ 1100.119554][T12720] __x64_sys_bpf+0xba/0xd0 [ 1100.119579][T12720] do_syscall_64+0x166/0x520 [ 1100.119598][T12720] ? trace_irq_disable+0x3b/0x140 [ 1100.119619][T12720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.119638][T12720] ? clear_bhb_loop+0x70/0xc0 [ 1100.119661][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.119680][T12720] RIP: 0033:0x7f3b08b9f559 [ 1100.119698][T12720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.119715][T12720] RSP: 002b:00007f3b099de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1100.119736][T12720] RAX: ffffffffffffffda RBX: 00007f3b08e25fa0 RCX: 00007f3b08b9f559 [ 1100.119751][T12720] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1100.119763][T12720] RBP: 00007f3b099de090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.119776][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.119788][T12720] R13: 00007f3b08e26038 R14: 00007f3b08e25fa0 R15: 00007fff537c3228 [ 1100.119820][T12720] [ 1100.425531][T12732] __nla_validate_parse: 5 callbacks suppressed [ 1100.425546][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11032'. [ 1100.604582][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1100.676158][T12748] netlink: 'syz.1.11037': attribute type 4 has an invalid length. [ 1100.687580][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1100.768714][ T5223] batman_adv: batadv2: IGMP Querier appeared [ 1100.768731][ T5223] batman_adv: batadv2: MLD Querier appeared [ 1100.921843][T12760] netlink: 'syz.0.11041': attribute type 2 has an invalid length. [ 1100.946232][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11039'. [ 1100.979169][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11039'. [ 1100.979192][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11039'. [ 1100.979216][T12752] netlink: 'syz.1.11039': attribute type 14 has an invalid length. [ 1100.979230][T12752] netlink: 'syz.1.11039': attribute type 13 has an invalid length. [ 1101.111308][ T5223] batman_adv: batadv3: IGMP Querier appeared [ 1101.111328][ T5223] batman_adv: batadv3: MLD Querier appeared [ 1101.232086][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11041'. [ 1101.237086][T12780] Bluetooth: hci0: unsupported parameter 5135 [ 1101.237107][T12780] Bluetooth: hci0: unsupported parameter 8192 [ 1101.237119][T12780] Bluetooth: hci0: unsupported parameter 5135 [ 1101.237132][T12780] Bluetooth: hci0: unsupported parameter 8192 [ 1101.342420][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11041'. [ 1101.504454][T12794] openvswitch: netlink: IP tunnel dst address not specified [ 1101.506779][T12794] netlink: 'syz.3.11051': attribute type 28 has an invalid length. [ 1101.506797][T12794] netlink: 'syz.3.11051': attribute type 3 has an invalid length. [ 1101.506810][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11051'. [ 1101.614398][T12800] siw: device registration error -23 [ 1101.645129][T12800] : renamed from bond0 (while UP) [ 1101.665451][T12800] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1101.668174][T12803] siw: device registration error -23 [ 1101.695366][T12809] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1101.835019][T12811] syzkaller1: entered promiscuous mode [ 1101.835042][T12811] syzkaller1: entered allmulticast mode [ 1102.410921][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11057'. [ 1102.488383][T12817] xfrm1: entered promiscuous mode [ 1102.488405][T12817] xfrm1: entered allmulticast mode [ 1102.530312][T12818] ip_tables: iptables: counters copy to user failed while replacing table [ 1102.902360][T12844] xt_socket: unknown flags 0x8 [ 1103.113877][T12860] netlink: 'syz.6.11071': attribute type 5 has an invalid length. [ 1103.165768][T12873] openvswitch: netlink: Actions may not be safe on all matching packets [ 1106.033771][T12852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.114970][T12893] netlink: 'syz.0.11079': attribute type 1 has an invalid length. [ 1106.185535][T12893] bond15: entered promiscuous mode [ 1106.185870][T12893] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1106.231363][T12893] macvtap1: entered allmulticast mode [ 1106.256852][T12893] macvtap2: entered allmulticast mode [ 1106.298330][T12893] bond15: (slave bridge7): making interface the new active one [ 1106.298354][T12893] bridge7: entered promiscuous mode [ 1106.324555][T12893] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 1106.350226][T12903] __nla_validate_parse: 7 callbacks suppressed [ 1106.350247][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11083'. [ 1106.350273][T12903] netlink: 'syz.6.11083': attribute type 5 has an invalid length. [ 1106.350287][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11083'. [ 1106.456518][T12907] siw: device registration error -23 [ 1106.527084][T12909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11086'. [ 1106.654981][T19668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1106.672708][T19668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1106.682563][T19668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1106.685449][T19668] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1106.687569][T19668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1106.807130][T12919] FAULT_INJECTION: forcing a failure. [ 1106.807130][T12919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.807162][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz.6.11088 Not tainted syzkaller #0 PREEMPT(full) [ 1106.807184][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1106.807195][T12919] Call Trace: [ 1106.807204][T12919] [ 1106.807213][T12919] dump_stack_lvl+0xe8/0x150 [ 1106.807248][T12919] should_fail_ex+0x410/0x560 [ 1106.807282][T12919] _copy_from_user+0x2d/0xb0 [ 1106.807311][T12919] bpf_obj_get_info_by_fd+0xcaf/0x3540 [ 1106.807341][T12919] ? lock_acquire+0x115/0x350 [ 1106.807372][T12919] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 1106.807414][T12919] ? kstrtoull+0x137/0x1d0 [ 1106.807439][T12919] ? kstrtouint+0x6e/0xe0 [ 1106.807465][T12919] ? lock_acquire+0x115/0x350 [ 1106.807506][T12919] ? bpf_lsm_bpf+0x9/0x20 [ 1106.807527][T12919] ? security_bpf+0x7e/0x2d0 [ 1106.807552][T12919] __sys_bpf+0xa50/0xd90 [ 1106.807585][T12919] ? __pfx___sys_bpf+0x10/0x10 [ 1106.807623][T12919] ? __fget_files+0x2a/0x420 [ 1106.807660][T12919] ? ksys_write+0x242/0x270 [ 1106.807684][T12919] ? __pfx_ksys_write+0x10/0x10 [ 1106.807710][T12919] __x64_sys_bpf+0xba/0xd0 [ 1106.807737][T12919] do_syscall_64+0x166/0x520 [ 1106.807756][T12919] ? trace_irq_disable+0x3b/0x140 [ 1106.807777][T12919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.807796][T12919] ? clear_bhb_loop+0x70/0xc0 [ 1106.807819][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.807837][T12919] RIP: 0033:0x7f3c3dd9f559 [ 1106.807856][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.807870][T12919] RSP: 002b:00007f3c3ec62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1106.807891][T12919] RAX: ffffffffffffffda RBX: 00007f3c3e025fa0 RCX: 00007f3c3dd9f559 [ 1106.807910][T12919] RDX: 0000000000000010 RSI: 0000200000000a80 RDI: 000000000000000f [ 1106.807922][T12919] RBP: 00007f3c3ec62090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.807934][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.807945][T12919] R13: 00007f3c3e026038 R14: 00007f3c3e025fa0 R15: 00007ffe5f7b0b18 [ 1106.807975][T12919] [ 1106.943063][T12920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11089'. [ 1107.078042][T12935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11092'. [ 1107.094146][T12932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1107.096580][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1107.121763][T12935] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11092'. [ 1107.128746][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1107.150396][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1107.713900][T12966] v: renamed from vlan1 [ 1107.780049][T12971] netlink: 'syz.0.11099': attribute type 5 has an invalid length. [ 1107.827236][T12915] rxe_eth0 speed is unknown, defaulting to 1000 [ 1108.244592][T12994] tipc: Failed to obtain node identity [ 1108.244626][T12994] tipc: Enabling of bearer rejected, failed to enable media [ 1108.523780][T12915] lo speed is unknown, defaulting to 1000 [ 1108.620487][T13016] netlink: 'syz.0.11111': attribute type 5 has an invalid length. [ 1108.750681][T24368] Bluetooth: hci7: command tx timeout [ 1109.218008][T13017] siw: device registration error -23 [ 1109.296426][T13054] netlink: 'syz.3.11125': attribute type 5 has an invalid length. [ 1109.880744][T13085] netlink: 'syz.0.11130': attribute type 3 has an invalid length. [ 1109.880973][T13085] netlink: 'syz.0.11130': attribute type 3 has an invalid length. [ 1110.313049][T13103] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1110.316982][T13109] bond16: entered promiscuous mode [ 1110.317005][T13109] bond16: entered allmulticast mode [ 1110.324723][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.325482][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.325619][T12915] bridge_slave_0: entered allmulticast mode [ 1110.327239][T12915] bridge_slave_0: entered promiscuous mode [ 1110.335771][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.335873][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.336017][T12915] bridge_slave_1: entered allmulticast mode [ 1110.340065][T12915] bridge_slave_1: entered promiscuous mode [ 1110.372956][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.375959][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.520662][T13103] macvlan2: entered promiscuous mode [ 1110.520686][T13103] macvlan2: entered allmulticast mode [ 1110.525579][T13103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1110.737973][T12915] team0: Port device team_slave_0 added [ 1110.747655][T12915] team0: Port device team_slave_1 added [ 1110.831040][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.831059][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.831082][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.831178][T24368] Bluetooth: hci7: command tx timeout [ 1110.833641][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.833657][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.833680][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.055157][T12915] hsr_slave_0: entered promiscuous mode [ 1111.057421][T12915] hsr_slave_1: entered promiscuous mode [ 1111.058394][T12915] debugfs: 'hsr0' already exists in 'hsr' [ 1111.058413][T12915] Cannot create hsr debugfs directory [ 1111.106304][T13134] netlink: 'syz.6.11141': attribute type 1 has an invalid length. [ 1111.440623][T13153] __nla_validate_parse: 28 callbacks suppressed [ 1111.440644][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11146'. [ 1111.495881][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11146'. [ 1111.526788][T13153] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1111.591527][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11148'. [ 1111.605131][T13157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1111.610388][T12915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1111.625150][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.627165][T12915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1111.652327][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.704599][T13168] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1111.708632][T13169] bond9: entered promiscuous mode [ 1111.708655][T13169] bond9: entered allmulticast mode [ 1111.713258][T12915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1111.735158][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.737800][T12915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1111.753262][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.774690][T13159] macvlan2: entered promiscuous mode [ 1111.774712][T13159] macvlan2: entered allmulticast mode [ 1111.776096][T13159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1111.964839][T13187] netlink: 'syz.0.11154': attribute type 32 has an invalid length. [ 1111.985125][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1111.993385][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.008763][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.012664][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.013080][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.018811][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.020140][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.020471][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.037753][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.038102][T13187] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.212821][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.265318][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.281237][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.281553][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.281821][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.282043][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.282279][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.284201][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1112.305970][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.360269][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.360375][ T5223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.386406][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.386516][T11075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.909598][T24368] Bluetooth: hci7: command tx timeout [ 1112.923331][T13231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.946218][T13242] bond0: entered promiscuous mode [ 1112.946243][T13242] bond0: entered allmulticast mode [ 1113.013705][T13231] macvlan2: entered promiscuous mode [ 1113.014470][T13231] macvlan2: entered allmulticast mode [ 1113.024771][T13231] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1113.534538][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.536809][T13270] netlink: 'syz.0.11174': attribute type 2 has an invalid length. [ 1114.295902][T12915] veth0_vlan: entered promiscuous mode [ 1114.345690][T12915] veth1_vlan: entered promiscuous mode [ 1114.467680][T12915] veth0_macvtap: entered promiscuous mode [ 1114.482569][T12915] veth1_macvtap: entered promiscuous mode [ 1114.534391][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.569326][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.662987][ T9499] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.705923][ T9499] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.706067][ T9505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.706103][ T9505] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.842768][T13343] netlink: 'syz.6.11193': attribute type 1 has an invalid length. [ 1114.887059][T13343] bond10: entered promiscuous mode [ 1114.901928][T13343] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1114.981220][T13343] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1114.991680][T24368] Bluetooth: hci7: command tx timeout [ 1115.009548][T13343] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1115.009573][T13343] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1115.066233][T13343] bond10: (slave wireguard0): making interface the new active one [ 1115.066258][T13343] wireguard0: entered promiscuous mode [ 1115.086201][T13353] netlink: 'syz.6.11193': attribute type 1 has an invalid length. [ 1115.090948][T13343] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 1115.189456][T13355] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1115.192523][T13355] bond10: (slave wireguard1): Enslaving as a backup interface with an up link [ 1115.215681][ T9505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.215701][ T9505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.374028][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.374050][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.023395][T13421] netlink: 'syz.1.11211': attribute type 1 has an invalid length. [ 1116.129178][T13421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1116.182854][T13421] bond2: (slave veth0_to_bond): Releasing backup interface [ 1116.471499][T13436] __nla_validate_parse: 38 callbacks suppressed [ 1116.471522][T13436] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11216'. [ 1116.471541][T13436] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11216'. [ 1117.115168][T13458] netlink: 'syz.1.11225': attribute type 1 has an invalid length. [ 1117.161382][T13458] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.736226][T13495] netlink: 'syz.1.11238': attribute type 1 has an invalid length. [ 1117.780155][T13495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1117.787096][T13498] net_ratelimit: 56 callbacks suppressed [ 1117.787119][T13498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1117.984411][T13510] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1118.091588][T13514] netlink: 'syz.0.11244': attribute type 3 has an invalid length. [ 1118.091611][T13514] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11244'. [ 1118.228695][T13521] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1118.328259][T13526] netlink: 'syz.1.11250': attribute type 1 has an invalid length. [ 1118.368768][T13529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1118.396087][T13526] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1118.561897][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.600385][T13542] netlink: 'syz.7.11254': attribute type 16 has an invalid length. [ 1118.706687][T13548] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1118.829819][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1118.829844][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1118.829863][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1118.829877][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1118.829891][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1119.026912][T13565] netlink: 'syz.1.11263': attribute type 1 has an invalid length. [ 1119.045150][T13565] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1119.252311][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11268'. [ 1119.378297][T13586] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11270'. [ 1119.513819][T13592] netlink: 'syz.3.11274': attribute type 1 has an invalid length. [ 1119.581445][T13592] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1119.606697][T13597] vlan2: entered promiscuous mode [ 1119.606721][T13597] hsr0: entered promiscuous mode [ 1119.606989][T13597] vlan2: entered allmulticast mode [ 1119.607003][T13597] hsr0: entered allmulticast mode [ 1119.607016][T13597] hsr_slave_0: entered allmulticast mode [ 1119.607031][T13597] hsr_slave_1: entered allmulticast mode [ 1119.647142][T13592] bond9: (slave veth0_to_bond): Releasing backup interface [ 1119.673536][T13597] hsr_slave_0: left promiscuous mode [ 1119.684208][T13597] hsr_slave_1: left promiscuous mode [ 1119.866377][T13612] xt_hashlimit: overflow, try lower: 3/0 [ 1119.886967][T13612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.886998][T13612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.891435][T13612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.891456][T13612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.416364][T13633] netlink: 'syz.1.11288': attribute type 1 has an invalid length. [ 1120.716802][T13649] netlink: 'syz.3.11295': attribute type 3 has an invalid length. [ 1120.846904][T13655] netlink: 'syz.3.11296': attribute type 32 has an invalid length. [ 1120.972765][T13661] netlink: 'syz.3.11299': attribute type 1 has an invalid length. [ 1121.169814][T13668] syzkaller1: entered promiscuous mode [ 1121.169837][T13668] syzkaller1: entered allmulticast mode [ 1121.543028][T13682] netlink: 'syz.0.11307': attribute type 2 has an invalid length. [ 1121.543053][T13682] __nla_validate_parse: 24 callbacks suppressed [ 1121.543066][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11307'. [ 1121.545287][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a082800: rx timeout, send abort [ 1121.618007][T13684] bond9: entered promiscuous mode [ 1121.644944][T13688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1121.644969][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1121.644988][T13688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1121.645002][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1121.645017][T13688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1121.835172][T13695] netlink: 'syz.0.11309': attribute type 1 has an invalid length. [ 1121.835191][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11309'. [ 1121.835201][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11309'. [ 1121.845613][T13697] netlink: 'syz.1.11310': attribute type 1 has an invalid length. [ 1122.045338][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a082800: abort rx timeout. Force session deactivation [ 1122.513497][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11315'. [ 1122.535576][T13725] ip_tables: iptables: counters copy to user failed while replacing table [ 1122.831859][T13733] tipc: Enabled bearer , priority 9 [ 1122.870624][T13733] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1122.930423][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1123.176457][T13750] netlink: 'syz.0.11321': attribute type 1 has an invalid length. [ 1123.208608][T13750] bond8: (slave veth0_to_bond): Releasing backup interface [ 1124.013807][T13789] Cannot find set identified by id 0 to match [ 1124.193973][T13802] netlink: 'syz.0.11335': attribute type 1 has an invalid length. [ 1124.630708][T13823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.630727][T13823] IPv6: NLM_F_CREATE should be set when creating new route [ 1124.630752][T13823] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.044261][T13852] netlink: 'syz.1.11349': attribute type 1 has an invalid length. [ 1125.102692][T13855] 8021q: VLANs not supported on ip_vti0 [ 1125.241588][T13863] ip_tables: iptables: counters copy to user failed while replacing table [ 1126.664026][T13882] netlink: 'syz.0.11359': attribute type 4 has an invalid length. [ 1126.664047][T13882] __nla_validate_parse: 9 callbacks suppressed [ 1126.664058][T13882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11359'. [ 1127.567326][T13820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.093805][T13913] syzkaller0: left allmulticast mode [ 1128.109712][T11059] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.109922][T11059] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.109990][T11075] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.110022][T11075] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.353378][T19668] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.711011][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11387'. [ 1129.163252][T13977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1129.163358][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1129.163380][T13977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1129.163394][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1129.163409][T13977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1129.427726][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1129.427750][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1129.427775][T13999] netlink: 'syz.1.11406': attribute type 15 has an invalid length. [ 1129.436342][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1129.436375][T13999] netlink: 'syz.1.11406': attribute type 15 has an invalid length. [ 1129.565543][T14012] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1129.744867][T14021] netlink: 'syz.7.11412': attribute type 7 has an invalid length. [ 1129.744890][T14021] netlink: 'syz.7.11412': attribute type 8 has an invalid length. [ 1130.063395][T14033] xt_hashlimit: size too large, truncated to 1048576 [ 1130.136417][T14039] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1130.408793][T14049] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1130.422623][T14049] hsr_slave_0: left promiscuous mode [ 1130.424296][T14049] hsr_slave_1: left promiscuous mode [ 1130.828084][T19668] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1130.834679][T19668] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1130.842052][T19668] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1130.855668][T19668] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1130.856370][T19668] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1131.221816][T14073] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1131.416224][T14062] rxe_eth0 speed is unknown, defaulting to 1000 [ 1131.706905][T14062] lo speed is unknown, defaulting to 1000 [ 1131.916304][T14086] openvswitch: netlink: Flow key attribute not present in set flow. [ 1132.117328][T14099] __nla_validate_parse: 6 callbacks suppressed [ 1132.117347][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11439'. [ 1132.117362][T14099] netlink: 87 bytes leftover after parsing attributes in process `syz.7.11439'. [ 1132.136742][T14099] vcan0: tx address claim with different name [ 1132.136841][T14099] vcan0: tx address claim with different name [ 1132.136927][T14099] vcan0: tx address claim with different name [ 1132.137012][T14099] vcan0: tx address claim with different name [ 1132.137097][T14099] vcan0: tx address claim with different name [ 1132.137192][T14099] vcan0: tx address claim with different name [ 1132.137278][T14099] vcan0: tx address claim with different name [ 1132.137378][T14099] vcan0: tx address claim with different name [ 1132.137465][T14099] vcan0: tx address claim with different name [ 1132.137558][T14099] vcan0: tx address claim with different name [ 1132.137642][T14099] vcan0: tx address claim with different name [ 1132.137727][T14099] vcan0: tx address claim with different name [ 1132.137811][T14099] vcan0: tx address claim with different name [ 1132.137896][T14099] vcan0: tx address claim with different name [ 1132.137986][T14099] vcan0: tx address claim with different name [ 1132.148226][T14099] vcan0: tx address claim with different name [ 1132.148339][T14099] vcan0: tx address claim with different name [ 1132.148441][T14099] vcan0: tx address claim with different name [ 1132.148538][T14099] vcan0: tx address claim with different name [ 1132.148625][T14099] vcan0: tx address claim with different name [ 1132.148710][T14099] vcan0: tx address claim with different name [ 1132.148802][T14099] vcan0: tx address claim with different name [ 1132.148889][T14099] vcan0: tx address claim with different name [ 1132.148975][T14099] vcan0: tx address claim with different name [ 1132.154615][T14099] vcan0: tx address claim with different name [ 1132.154723][T14099] vcan0: tx address claim with different name [ 1132.154811][T14099] vcan0: tx address claim with different name [ 1132.154896][T14099] vcan0: tx address claim with different name [ 1132.154981][T14099] vcan0: tx address claim with different name [ 1132.156708][T14099] vcan0: tx address claim with different name [ 1132.156800][T14099] vcan0: tx address claim with different name [ 1132.156885][T14099] vcan0: tx address claim with different name [ 1132.156971][T14099] vcan0: tx address claim with different name [ 1132.493694][T19668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1132.505906][T19668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1132.516694][T19668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1132.517665][T19668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1132.518665][T19668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1132.698660][T14121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1132.813575][T14062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.813743][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.813884][T14062] bridge_slave_0: entered allmulticast mode [ 1132.815672][T14062] bridge_slave_0: entered promiscuous mode [ 1132.907758][T14062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.907886][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.908036][T14062] bridge_slave_1: entered allmulticast mode [ 1132.933072][T14062] bridge_slave_1: entered promiscuous mode [ 1132.989481][T24368] Bluetooth: hci8: command tx timeout [ 1133.011172][T14062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.014065][T14062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.080847][T14062] team0: Port device team_slave_0 added [ 1133.097436][T14062] team0: Port device team_slave_1 added [ 1133.188894][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.188913][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.188937][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.193646][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.193662][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.193687][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.348082][T14062] hsr_slave_0: entered promiscuous mode [ 1133.355020][T14062] hsr_slave_1: entered promiscuous mode [ 1133.355898][T14062] debugfs: 'hsr0' already exists in 'hsr' [ 1133.355918][T14062] Cannot create hsr debugfs directory [ 1133.393768][T14151] netlink: 256 bytes leftover after parsing attributes in process `syz.7.11450'. [ 1133.452539][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11451'. [ 1133.651140][T14112] rxe_eth0 speed is unknown, defaulting to 1000 [ 1133.731425][T14163] netlink: 'syz.0.11454': attribute type 1 has an invalid length. [ 1133.765845][T14163] bond17: entered promiscuous mode [ 1133.766226][T14163] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1133.791136][T14164] macvtap3: entered allmulticast mode [ 1133.883403][T14167] bond17: (slave bridge9): making interface the new active one [ 1133.883428][T14167] bridge9: entered promiscuous mode [ 1133.885089][T14167] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 1133.925143][T14163] netlink: 404 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1133.925167][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1133.925184][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1133.925198][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1134.124887][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.124921][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.124946][T14062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1134.161719][T14178] netlink: 'syz.1.11456': attribute type 1 has an invalid length. [ 1134.161742][T14178] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11456'. [ 1134.161758][T14178] NCSI netlink: No device for ifindex 0 [ 1134.168348][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11458'. [ 1134.299960][T14185] tipc: Invalid UDP bearer configuration [ 1134.300007][T14185] tipc: Enabling of bearer rejected, failed to enable media [ 1134.397325][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.397360][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.397384][T14062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1134.437262][T14189] netlink: 'syz.0.11461': attribute type 1 has an invalid length. [ 1134.456081][T14112] lo speed is unknown, defaulting to 1000 [ 1134.547412][T14189] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1134.590510][T24368] Bluetooth: hci3: command tx timeout [ 1134.598731][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.598766][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.631514][T14062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1134.675409][T14187] bond18: (slave geneve5): making interface the new active one [ 1134.677919][T14187] bond18: (slave geneve5): Enslaving as an active interface with an up link [ 1134.857875][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.857908][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.857933][T14062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1135.069559][T24368] Bluetooth: hci8: command tx timeout [ 1135.269791][T14222] netlink: 'syz.0.11470': attribute type 10 has an invalid length. [ 1135.296070][T14222] team0: left promiscuous mode [ 1135.296092][T14222] team_slave_0: left promiscuous mode [ 1135.296268][T14222] team_slave_1: left promiscuous mode [ 1135.297643][T14222] bond4: (slave team0): Releasing active interface [ 1135.309715][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.313511][T14222] bond0: (slave team0): Enslaving as an active interface with an up link [ 1135.478902][T14062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1135.508682][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1135.516836][T14062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1135.547226][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.556525][T14062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1135.581190][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.608141][T14062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1135.628855][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1135.948751][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.953333][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.953505][T14112] bridge_slave_0: entered allmulticast mode [ 1135.960879][T14112] bridge_slave_0: entered promiscuous mode [ 1135.979357][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.979483][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.979633][T14112] bridge_slave_1: entered allmulticast mode [ 1135.983199][T14112] bridge_slave_1: entered promiscuous mode [ 1136.104000][T14112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.124374][T14112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.196810][T14112] team0: Port device team_slave_0 added [ 1136.217231][T14112] team0: Port device team_slave_1 added [ 1136.268654][T14112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.268673][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.268697][T14112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.322037][T14112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.322049][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.322065][T14112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.454946][T14112] hsr_slave_0: entered promiscuous mode [ 1136.459826][T14112] hsr_slave_1: entered promiscuous mode [ 1136.461892][T14112] debugfs: 'hsr0' already exists in 'hsr' [ 1136.461914][T14112] Cannot create hsr debugfs directory [ 1136.664871][T14277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1136.671149][T24368] Bluetooth: hci3: command tx timeout [ 1136.853142][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.985409][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.020736][T14288] netlink: 'syz.1.11490': attribute type 1 has an invalid length. [ 1137.042445][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.042574][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.046613][T14288] netlink: 'syz.1.11490': attribute type 1 has an invalid length. [ 1137.127944][T14290] __nla_validate_parse: 20 callbacks suppressed [ 1137.127964][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11490'. [ 1137.150809][T24368] Bluetooth: hci8: command tx timeout [ 1137.175876][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.175974][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.339556][T14302] ip6t_srh: unknown srh invflags 4000 [ 1137.341338][T14302] xt_l2tp: wrong L2TP version: 255 [ 1137.346508][T14112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1137.348829][T14112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.364592][T14062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1137.364615][T14062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.421142][T14112] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1137.430863][T14112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.432900][T14112] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1137.457621][T14112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1137.467515][T14112] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1137.489995][T14112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.733655][T14112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.785761][T14112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.825920][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.826027][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.855128][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.855228][ T9505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.408603][T14347] sctp: [Deprecated]: syz.0.11501 (pid 14347) Use of int in maxseg socket option. [ 1138.408603][T14347] Use struct sctp_assoc_value instead [ 1138.422433][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.560706][T14062] veth0_vlan: entered promiscuous mode [ 1138.573521][T14062] veth1_vlan: entered promiscuous mode [ 1138.627024][T14062] veth0_macvtap: entered promiscuous mode [ 1138.638107][T14062] veth1_macvtap: entered promiscuous mode [ 1138.663201][T14062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.684318][T14062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.704007][T14112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.707310][T31395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.707539][T31395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.715875][T31395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.715919][T31395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.750745][T24368] Bluetooth: hci3: command tx timeout [ 1138.918705][ T9505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.918727][ T9505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.993434][ T5218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.993455][ T5218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.997243][T14360] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1139.136539][T14365] ip_tables: iptables: counters copy to user failed while replacing table [ 1139.230671][T24368] Bluetooth: hci8: command tx timeout [ 1139.378225][T14112] veth0_vlan: entered promiscuous mode [ 1139.407811][T14112] veth1_vlan: entered promiscuous mode [ 1139.504366][T14112] veth0_macvtap: entered promiscuous mode [ 1139.526030][T14112] veth1_macvtap: entered promiscuous mode [ 1139.580544][T14112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.612613][T14112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.671745][ T9505] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.699168][T11053] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.699216][T11053] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.699251][T11053] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.873856][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11509'. [ 1140.830164][T24368] Bluetooth: hci3: command tx timeout [ 1142.476709][T14382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1142.598430][ T5211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.598451][ T5211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.676249][ T5211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.676271][ T5211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.722490][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11512'. [ 1142.722552][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11512'. [ 1142.793191][T14418] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11514'. [ 1143.056233][T14433] Cannot find set identified by id 0 to match [ 1143.361006][T14450] netlink: 'syz.3.11525': attribute type 1 has an invalid length. [ 1143.683716][T14472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1143.683749][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1143.683768][T14472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1143.683782][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1143.683797][T14472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1143.892645][T14481] netlink: 'syz.3.11538': attribute type 21 has an invalid length. [ 1143.927588][T14481] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1143.931423][T14481] bond1 (unregistering): Released all slaves [ 1144.057167][T24368] block nbd0: Receive control failed (result -32) [ 1144.067683][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11541'. [ 1144.422915][T14511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11547'. [ 1144.602318][T14520] netlink: get zone limit has 8 unknown bytes [ 1145.092702][T14537] xt_bpf: check failed: parse error [ 1145.120366][T14537] ip_tables: iptables: counters copy to user failed while replacing table [ 1145.120644][T14538] ip_tables: iptables: counters copy to user failed while replacing table [ 1145.147372][T14540] netlink: 'syz.3.11556': attribute type 8 has an invalid length. [ 1145.496656][T31395] IPVS: starting estimator thread 0... [ 1145.586193][T14562] IPVS: using max 37 ests per chain, 88800 per kthread [ 1146.738414][T14621] sctp: [Deprecated]: syz.3.11580 (pid 14621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1146.738414][T14621] Use struct sctp_sack_info instead [ 1147.121538][T14639] bridge10: entered promiscuous mode [ 1147.121600][T14639] bridge10: entered allmulticast mode [ 1147.302137][T14656] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1147.304985][T14658] Cannot find set identified by id 0 to match [ 1147.808738][T14689] netlink: 'syz.8.11601': attribute type 30 has an invalid length. [ 1147.887247][T14689] bond1: option arp_missed_max: invalid value (0) [ 1147.887270][T14689] bond1: option arp_missed_max: allowed values 1 - 255 [ 1147.902532][T14689] bond1 (unregistering): Released all slaves [ 1148.190911][T14704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1148.267450][T14713] Cannot find set identified by id 0 to match [ 1148.295856][T14715] __nla_validate_parse: 12 callbacks suppressed [ 1148.295880][T14715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1148.585221][T14727] syzkaller0: entered promiscuous mode [ 1148.585245][T14727] syzkaller0: entered allmulticast mode [ 1148.738583][T14733] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11612'. [ 1148.762148][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11612'. [ 1148.806141][T14735] netlink: 'syz.8.11616': attribute type 1 has an invalid length. [ 1149.033118][T14751] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1149.049778][T14753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11620'. [ 1149.214742][T14762] xt_hashlimit: size too large, truncated to 1048576 [ 1149.297464][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1149.300460][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300482][T14768] tap0: owner set to 0 [ 1149.300594][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300608][T14768] tap0: owner set to 0 [ 1149.300705][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300718][T14768] tap0: owner set to 0 [ 1149.300798][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300810][T14768] tap0: owner set to 0 [ 1149.300886][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300898][T14768] tap0: owner set to 0 [ 1149.300974][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.300986][T14768] tap0: owner set to 0 [ 1149.301062][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.301073][T14768] tap0: owner set to 0 [ 1149.301150][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.301162][T14768] tap0: owner set to 0 [ 1149.301237][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.301248][T14768] tap0: owner set to 0 [ 1149.396040][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396065][T14768] tap0: owner set to 0 [ 1149.396206][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396219][T14768] tap0: owner set to 0 [ 1149.396307][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396319][T14768] tap0: owner set to 0 [ 1149.396396][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396408][T14768] tap0: owner set to 0 [ 1149.396480][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396492][T14768] tap0: owner set to 0 [ 1149.396568][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396580][T14768] tap0: owner set to 0 [ 1149.396659][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396671][T14768] tap0: owner set to 0 [ 1149.396752][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396764][T14768] tap0: owner set to 0 [ 1149.396839][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396851][T14768] tap0: owner set to 0 [ 1149.396927][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.396939][T14768] tap0: owner set to 0 [ 1149.397017][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.397028][T14768] tap0: owner set to 0 [ 1149.397355][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.397369][T14768] tap0: owner set to 0 [ 1149.397445][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.397456][T14768] tap0: owner set to 0 [ 1149.397533][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.397545][T14768] tap0: owner set to 0 [ 1149.397622][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.397646][T14768] tap0: owner set to 0 [ 1149.400216][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.400234][T14768] tap0: owner set to 0 [ 1149.401053][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.401068][T14768] tap0: owner set to 0 [ 1149.401147][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.401159][T14768] tap0: owner set to 0 [ 1149.401234][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.401245][T14768] tap0: owner set to 0 [ 1149.401325][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.401338][T14768] tap0: owner set to 0 [ 1149.401413][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.401425][T14768] tap0: owner set to 0 [ 1149.403166][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403183][T14768] tap0: owner set to 0 [ 1149.403263][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403274][T14768] tap0: owner set to 0 [ 1149.403358][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403369][T14768] tap0: owner set to 0 [ 1149.403447][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403459][T14768] tap0: owner set to 0 [ 1149.403532][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403544][T14768] tap0: owner set to 0 [ 1149.403616][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.403628][T14768] tap0: owner set to 0 [ 1149.405529][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.405545][T14768] tap0: owner set to 0 [ 1149.405634][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.406569][T14768] tap0: owner set to 0 [ 1149.406655][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.406668][T14768] tap0: owner set to 0 [ 1149.406747][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.406759][T14768] tap0: owner set to 0 [ 1149.406831][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.406856][T14768] tap0: owner set to 0 [ 1149.406931][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.406943][T14768] tap0: owner set to 0 [ 1149.407017][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407029][T14768] tap0: owner set to 0 [ 1149.407104][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407116][T14768] tap0: owner set to 0 [ 1149.407188][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407199][T14768] tap0: owner set to 0 [ 1149.407306][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407318][T14768] tap0: owner set to 0 [ 1149.407393][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407404][T14768] tap0: owner set to 0 [ 1149.407480][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407491][T14768] tap0: owner set to 0 [ 1149.407563][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.407575][T14768] tap0: owner set to 0 [ 1149.412466][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.412485][T14768] tap0: owner set to 0 [ 1149.412569][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.412581][T14768] tap0: owner set to 0 [ 1149.412658][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.412669][T14768] tap0: owner set to 0 [ 1149.412740][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.412752][T14768] tap0: owner set to 0 [ 1149.414429][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414445][T14768] tap0: owner set to 0 [ 1149.414525][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414538][T14768] tap0: owner set to 0 [ 1149.414612][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414623][T14768] tap0: owner set to 0 [ 1149.414697][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414709][T14768] tap0: owner set to 0 [ 1149.414788][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414799][T14768] tap0: owner set to 0 [ 1149.414873][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414885][T14768] tap0: owner set to 0 [ 1149.414959][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.414970][T14768] tap0: owner set to 0 [ 1149.415044][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.415055][T14768] tap0: owner set to 0 [ 1149.415130][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.415142][T14768] tap0: owner set to 0 [ 1149.421253][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.421271][T14768] tap0: owner set to 0 [ 1149.421374][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.421386][T14768] tap0: owner set to 0 [ 1149.421491][T14768] tap0: tun_chr_ioctl cmd 1074025676 [ 1149.421503][T14768] tap0: owner set to 0 [ 1149.988443][T14762] xt_hashlimit: size too large, truncated to 1048576 [ 1150.268001][T14796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11632'. [ 1150.307962][T14798] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1150.506261][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11638'. [ 1150.532277][T14811] netlink: 'syz.1.11638': attribute type 11 has an invalid length. [ 1150.545797][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11638'. [ 1150.552167][T14813] netlink: 'syz.1.11638': attribute type 11 has an invalid length. [ 1150.706883][T14825] ip_tables: iptables: counters copy to user failed while replacing table [ 1150.817514][T14831] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1150.820532][T14831] bond10 (unregistering): Released all slaves [ 1150.875839][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11644'. [ 1151.093909][T14851] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11647'. [ 1151.666277][T14892] block nbd8: not configured, cannot reconfigure [ 1151.834798][T14897] ip_tables: iptables: counters copy to user failed while replacing table [ 1151.907167][T14901] Bluetooth: hci0: unsupported parameter 5135 [ 1151.907190][T14901] Bluetooth: hci0: unsupported parameter 8192 [ 1151.907204][T14901] Bluetooth: hci0: unsupported parameter 5135 [ 1151.907216][T14901] Bluetooth: hci0: unsupported parameter 8192 [ 1152.704184][T19668] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1152.721579][T19668] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1152.722598][T19668] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1152.738150][T19668] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1152.738871][T19668] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1152.980072][T14951] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1153.045309][T14954] netlink: 'syz.1.11677': attribute type 33 has an invalid length. [ 1153.116497][T14950] netlink: 'syz.3.11674': attribute type 1 has an invalid length. [ 1153.224049][T14950] bond1 (unregistering): Released all slaves [ 1153.345420][T14964] tipc: Enabling of bearer rejected, failed to enable media [ 1153.545943][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.590902][T14979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.591046][T14979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.593435][T14979] bridge0: entered promiscuous mode [ 1153.593459][T14979] bridge0: entered allmulticast mode [ 1153.706284][T14987] __nla_validate_parse: 10 callbacks suppressed [ 1153.706304][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11687'. [ 1153.753773][T14990] bridge12: entered allmulticast mode [ 1153.831504][T14993] netlink: 'syz.0.11686': attribute type 32 has an invalid length. [ 1153.892273][T11059] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 1153.923053][T14935] rxe_eth0 speed is unknown, defaulting to 1000 [ 1153.976506][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11690'. [ 1153.976854][T14997] veth1_vlan: left promiscuous mode [ 1153.998834][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11690'. [ 1154.045907][T15003] x_tables: duplicate underflow at hook 1 [ 1154.231741][T15015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.289818][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1154.304334][T15015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.357499][T15017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.358300][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.405130][T15018] ip6_vti0: entered promiscuous mode [ 1154.447621][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11697'. [ 1154.546775][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11699'. [ 1154.568131][T15020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.568265][T15020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.568650][T15020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.568769][T15020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.605948][T14935] lo speed is unknown, defaulting to 1000 [ 1154.828180][T15037] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1154.833751][T19668] Bluetooth: hci9: command tx timeout [ 1154.842745][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11705'. [ 1154.842783][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11705'. [ 1154.842797][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11705'. [ 1154.915846][T15037] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1154.940943][T15046] netlink: 'syz.3.11706': attribute type 12 has an invalid length. [ 1154.940975][T15046] netlink: 'syz.3.11706': attribute type 29 has an invalid length. [ 1154.940989][T15046] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11706'. [ 1155.368849][T15061] wireguard0: entered promiscuous mode [ 1155.697908][T15082] Bluetooth: hci0: unsupported parameter 5135 [ 1155.697938][T15082] Bluetooth: hci0: unsupported parameter 8192 [ 1155.697952][T15082] Bluetooth: hci0: unsupported parameter 5135 [ 1155.697964][T15082] Bluetooth: hci0: unsupported parameter 8192 [ 1155.821958][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.822271][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.822449][T14935] bridge_slave_0: entered allmulticast mode [ 1155.825940][T15090] xt_hashlimit: max too large, truncated to 1048576 [ 1155.826373][T15090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1155.827559][T14935] bridge_slave_0: entered promiscuous mode [ 1155.832086][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.834142][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.834284][T14935] bridge_slave_1: entered allmulticast mode [ 1155.834764][T15088] openvswitch: netlink: IP tunnel dst address not specified [ 1155.838008][T14935] bridge_slave_1: entered promiscuous mode [ 1155.927207][T15092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1155.983339][T14935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.001951][T15092] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1156.018098][T14935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.124553][T14935] team0: Port device team_slave_0 added [ 1156.138300][T14935] team0: Port device team_slave_1 added [ 1156.248513][T14935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.248531][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.248557][T14935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.258865][T14935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.258881][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.258905][T14935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.384260][T14935] hsr_slave_0: entered promiscuous mode [ 1156.388751][T14935] hsr_slave_1: entered promiscuous mode [ 1156.394853][T14935] debugfs: 'hsr0' already exists in 'hsr' [ 1156.394877][T14935] Cannot create hsr debugfs directory [ 1156.586444][T15130] sch_fq: defrate 0 ignored. [ 1156.828336][T15137] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1156.868029][T15137] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1156.908817][T14935] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1156.910340][T19668] Bluetooth: hci9: command tx timeout [ 1156.932575][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.944157][T14935] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1156.963070][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.972498][T14935] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1156.986084][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1156.994158][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1157.021948][T14935] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1157.044728][T14935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.162149][T14935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.188214][T14935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.223983][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.224050][T11049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.283475][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.283585][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.438358][T15164] netlink: 'syz.0.11741': attribute type 7 has an invalid length. [ 1157.438381][T15164] netlink: 'syz.0.11741': attribute type 8 has an invalid length. [ 1157.467809][T15164] veth0_to_team: entered promiscuous mode [ 1157.480102][T15164] bond_slave_1: entered promiscuous mode [ 1157.484749][T15164] bond_slave_1: left promiscuous mode [ 1157.491915][T15164] veth0_to_team: left promiscuous mode [ 1157.699993][T15173] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1157.755514][T15173] bond10: (slave veth0_to_bond): Releasing backup interface [ 1157.773598][T15173] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1158.000668][T15195] sock: sock_timestamping_bind_phc: sock not bind to device [ 1158.272275][ T32] INFO: task syz.4.9697:8162 blocked for more than 143 seconds. [ 1158.272299][ T32] Not tainted syzkaller #0 [ 1158.272307][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1158.272315][ T32] task:syz.4.9697 state:D stack:27168 pid:8162 tgid:8159 ppid:5748 task_flags:0x400140 flags:0x00080002 [ 1158.272361][ T32] Call Trace: [ 1158.272367][ T32] [ 1158.272380][ T32] __schedule+0x17dd/0x5820 [ 1158.272438][ T32] ? __pfx___schedule+0x10/0x10 [ 1158.272468][ T32] ? schedule+0x90/0x2b0 [ 1158.272493][ T32] schedule+0x164/0x2b0 [ 1158.272517][ T32] schedule_preempt_disabled+0x13/0x30 [ 1158.272540][ T32] __mutex_lock+0x7c4/0x15a0 [ 1158.272562][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1158.272583][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1158.272756][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1158.272771][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 1158.272802][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 1158.272822][ T32] ? do_syscall_64+0x166/0x520 [ 1158.272839][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.272870][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1158.272899][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 1158.272937][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1158.272959][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1158.272984][ T32] ? __kmalloc_noprof+0x387/0x710 [ 1158.273011][ T32] ? __nla_ ** replaying previous printk message ** [ 1158.273011][ T32] ? __nla_parse+0x40/0x60 [ 1158.273035][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1158.273056][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1158.273083][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1158.273106][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1158.273134][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1158.273156][ T32] ? security_capable+0x7e/0x2c0 [ 1158.273183][ T32] genl_rcv_msg+0x614/0x7a0 [ 1158.273219][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.273244][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1158.273280][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1158.273303][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.273330][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.273368][ T32] ? down_read+0x2b9/0x320 [ 1158.273392][ T32] genl_rcv+0x28/0x40 [ 1158.273417][ T32] netlink_unicast+0x8ef/0xa80 [ 1158.273459][ T32] netlink_sendmsg+0x7f0/0xb20 [ 1158.273489][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.273515][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 1158.273546][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1158.273569][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.273592][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1158.273620][ T32] ____sys_sendmsg+0x54e/0x850 [ 1158.332875][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.332928][ T32] ? import_iovec+0x73/0xa0 [ 1158.332962][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1158.332989][ T32] ? __lock_acquire+0x747/0x2de0 [ 1158.333019][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.333052][ T32] ? futex_wait+0x2a2/0x390 [ 1158.333106][ T32] ? __fget_files+0x3a2/0x420 [ 1158.333127][ T32] ? __fget_files+0x2a/0x420 [ 1158.333155][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1158.333176][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.333225][ T32] do_syscall_64+0x166/0x520 [ 1158.333243][ T32] ? trace_irq_disable+0x3b/0x140 [ 1158.333265][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.333286][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1158.333307][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.333326][ T32] RIP: 0033:0x7fbcbd39f559 [ 1158.333345][ T32] RSP: 002b:00007fbcbe1cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.333367][ T32] RAX: ffffffffffffffda RBX: 00007fbcbd625fa0 RCX: 00007fbcbd39f559 [ 1158.333381][ T32] RDX: 0000000000004844 RSI: 0000200000000000 RDI: 0000000000000003 [ 1158.333394][ T32] RBP: 00007fbcbd436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1158.333406][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.333418][ T32] R13: 00007fbcbd626038 R14: 00007fbcbd625fa0 R15: 00007fffc997e338 [ 1158.333450][ T32] [ 1158.333746][ T32] [ 1158.333746][ T32] Showing all locks held in the system: [ 1158.333760][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 1158.333891][ T32] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1158.333971][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1158.333985][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1158.334054][ T32] locks held by getty/5390: 2, on CPU#0: [ 1158.334067][ T32] #0: ffff88803800f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1158.334191][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1158.334250][ T32] locks held by kworker/0:4/5758: 3, on CPU#0: [ 1158.334262][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.334308][ T32] #1: ffffc90004cb7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.334353][ T32] #2: ffff888077b25258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1158.411266][ T32] locks held by kworker/u8:8/31418: 3, last CPU#0: [ 1158.411286][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.411347][ T32] #1: ffffc900058afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.411398][ T32] #2: ffff88802d128258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1158.411544][ T32] locks held by kworker/u8:19/5211: 2, on CPU#1: [ 1158.411559][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.411607][ T32] #1: ffffc9000421fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.411662][ T32] locks held by syz.2.9279/6956: 2, on CPU#1: [ 1158.411675][ T32] #0: ffffffff912db068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.411726][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1158.411888][ T32] locks held by syz.4.9697/8162: 2, on CPU#0: [ 1158.411901][ T32] #0: ffffffff912db068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.411951][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1158.412001][ T32] locks held by kworker/u8:38/11049: 2, on CPU#0: [ 1158.412015][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.412063][ T32] #1: ffffc900069b7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.412132][ T32] locks held by kworker/u8:48/11059: 2, on CPU#0: [ 1158.412145][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.412207][ T32] #1: ffffc900061a7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.412260][ T32] locks held by syz.5.10880/12232: 2, on CPU#0: [ 1158.412273][ T32] #0: ffffffff912db068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.412322][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 1158.412370][ T32] locks held by syz.6.11227/13469: 2, on CPU#0: [ 1158.412383][ T32] #0: ffffffff912db068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.412430][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1158.412476][ T32] locks held by syz-executor/14062: 3, last CPU#1: [ 1158.412490][ T32] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 1158.412536][ T32] #1: ffff888036d22800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1158.412582][ T32] #2: ffff88807b5ae540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1158.412634][ T32] locks held by syz.7.11491/14292: 2, on CPU#1: [ 1158.412647][ T32] #0: ffffffff912db068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.412696][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 1158.412741][ T32] locks held by kworker/0:5/14395: 2, last CPU#0: [ 1158.412755][ T32] #0: ffff88803788b148 ((wq_completion)wg-kex-wg0#46){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.412808][ T32] #1: ffffc90004e47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1158.421918][ T32] locks held by modprobe/15212: 2, last CPU#1: [ 1158.421935][ T32] #0: ffff888033174080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1158.421981][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1158.422056][ T32] locks held by modprobe/15214: 2, last CPU#0: [ 1158.422070][ T32] #0: ffff888033175900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1158.422120][ T32] #1: ffff8880369f2158 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: vma_prepare+0x12e/0x470 [ 1158.422177][ T32] locks held by modprobe/15217: 2, on CPU#1: [ 1158.422190][ T32] #0: ffff88807b5a8340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1158.422237][ T32] #1: ffff8880369f2158 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: mmap_region+0x1f94/0x25b0 [ 1158.422306][ T32] [ 1158.422312][ T32] ============================================= [ 1158.422312][ T32] [ 1158.422338][ T32] NMI backtrace for cpu 1 [ 1158.422353][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1158.422373][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1158.422383][ T32] Call Trace: [ 1158.422390][ T32] [ 1158.422399][ T32] dump_stack_lvl+0xe8/0x150 [ 1158.422428][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1158.422525][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1158.422548][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1158.422577][ T32] sys_info+0x135/0x170 [ 1158.422633][ T32] watchdog+0xfd2/0x1030 [ 1158.422663][ T32] ? watchdog+0x1c7/0x1030 [ 1158.422692][ T32] kthread+0x38b/0x480 [ 1158.422711][ T32] ? __pfx_watchdog+0x10/0x10 [ 1158.422730][ T32] ? __pfx_kthread+0x10/0x10 [ 1158.422750][ T32] ret_from_fork+0x514/0xb70 [ 1158.422788][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.422807][ T32] ? __switch_to+0xc78/0x1410 [ 1158.422836][ T32] ? __pfx_kthread+0x10/0x10 [ 1158.422856][ T32] ret_from_fork_asm+0x1a/0x30 [ 1158.422891][ T32] [ 1158.422898][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1158.422932][ C0] NMI backtrace for cpu 0 [ 1158.422949][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1158.422975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1158.422988][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1158.423080][ C0] Code: e8 1e 1c 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 13 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1158.423097][ C0] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 1158.423114][ C0] RAX: 1ffffffff37b4300 RBX: 00000000000003fd RCX: 0000000000000000 [ 1158.423128][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1158.423141][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1158.423154][ C0] R10: dffffc0000000000 R11: ffffffff857849b0 R12: dffffc0000000000 [ 1158.423168][ C0] R13: 0000000000000000 R14: ffffffff9bda1b20 R15: 0000000000000000 [ 1158.423181][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 1158.423198][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.423212][ C0] CR2: 00007f3b06dd4ff8 CR3: 0000000048f86000 CR4: 00000000003526f0 [ 1158.423230][ C0] Call Trace: [ 1158.423237][ C0] [ 1158.423247][ C0] wait_for_lsr+0x184/0x2f0 [ 1158.423307][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1158.423336][ C0] serial8250_console_write+0xa7e/0x1200 [ 1158.423365][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1158.423390][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1158.423418][ C0] ? __schedule+0x17f3/0x5820 [ 1158.423456][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1158.423491][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1158.423518][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1158.423550][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1158.423581][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 1158.423607][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1158.423629][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1158.423655][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1158.423690][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1158.423721][ C0] kthread+0x38b/0x480 [ 1158.423741][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1158.423762][ C0] ? __pfx_kthread+0x10/0x10 [ 1158.423781][ C0] ret_from_fork+0x514/0xb70 [ 1158.423803][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.423822][ C0] ? __switch_to+0xc78/0x1410 [ 1158.423853][ C0] ? __pfx_kthread+0x10/0x10 [ 1158.423872][ C0] ret_from_fork_asm+0x1a/0x30 [ 1158.423900][ C0] [ 1158.434680][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1159.583538][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1159.592640][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1159.602693][ T32] Call Trace: [ 1159.605965][ T32] [ 1159.608888][ T32] vpanic+0x56d/0xa60 [ 1159.612877][ T32] ? __pfx___schedule+0x10/0x10 [ 1159.617730][ T32] ? __pfx_vpanic+0x10/0x10 [ 1159.622237][ T32] panic+0xc5/0xd0 [ 1159.625954][ T32] ? __pfx_panic+0x10/0x10 [ 1159.630364][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1159.635823][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1159.641192][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1159.647350][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1159.653516][ T32] watchdog+0x102b/0x1030 [ 1159.657846][ T32] ? watchdog+0x1c7/0x1030 [ 1159.662262][ T32] kthread+0x38b/0x480 [ 1159.666325][ T32] ? __pfx_watchdog+0x10/0x10 [ 1159.670991][ T32] ? __pfx_kthread+0x10/0x10 [ 1159.675578][ T32] ret_from_fork+0x514/0xb70 [ 1159.680159][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1159.685259][ T32] ? __switch_to+0xc78/0x1410 [ 1159.689936][ T32] ? __pfx_kthread+0x10/0x10 [ 1159.694518][ T32] ret_from_fork_asm+0x1a/0x30 [ 1159.699291][ T32] [ 1159.702599][ T32] Kernel Offset: disabled [ 1159.706917][ T32] Rebooting in 86400 seconds..