last executing test programs: 4.890860585s ago: executing program 2 (id=4282): sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfffffffe, 0x4, 0x4, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000b54803009500001000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x5) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)={0x10, 0x3f2, 0x10, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x100000c0}, 0x40c0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000a80)='./file0\x00', r1}, 0x18) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x1d0, 0x3c8, 0x2b0, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x400000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'wg0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0xff, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0x7, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0xa4}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) bind$nfc_llcp(r5, &(0x7f0000001300)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r5, &(0x7f0000001380)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000001440)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) pselect6(0x40, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000001500)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000001580)="580000001400ade227323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0040ffffffffffffffffffe7ea00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000001600)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x21004000}, 0xc, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="c4004c009a774345d387d7088430c64d50dd26432094bbf29afd4c4e303d6848c98c1f6fb733361f7861e05d83c6d961266e72faf93170a494716f08a188e22a94f138e4f34b79cadb74e7745f326e036f20e061b007e33ef50740a5c27b96c2a7c1167bacfd73e88feff020680f1552383651867ce8f4a8f067cc50d622963107e638b786667c713ca7827add5589556c48777616585cac257d996242b2d7537eb2d2646aa1b93db50aa49ed8abe215a8f024223327405eeb64bd4443160b91f037f8c0"], 0xe8}, 0x1, 0x0, 0x0, 0x80850}, 0x4000) r7 = socket(0x11, 0x3, 0xd) accept4$unix(r7, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000017c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a2050000000000000016"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001840)=ANY=[@ANYBLOB="0180c20000030180c20000000800000000000000004e21004a34ae6d7425cd23770ff21900001090786224000080000000"], 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000001880)={0x4, 0x9f4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r1, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0], 0x0, 0x76, &(0x7f0000001ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) 4.295772962s ago: executing program 3 (id=4289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'macsec0\x00', &(0x7f0000000680)=@ethtool_dump={0x3f, 0x0, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420003, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 4.192153166s ago: executing program 3 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0xffff, 0xc}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1002, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.17017937s ago: executing program 0 (id=4293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r1}, 0x50) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003cc0)={0x1, 0xc, &(0x7f0000003d80)=ANY=[@ANYBLOB="18000000000000000004000000000000001800f20000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000faffffff85000000010000009500000000000000"], &(0x7f0000003e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003e40)={r4, 0x0, 0xe, 0x0, &(0x7f0000003ec0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.039625734s ago: executing program 0 (id=4294): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0xc001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0005"], 0x28}}, 0x0) 3.985525776s ago: executing program 0 (id=4295): bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="6800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="441001000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="18a00300103294570f0001"], 0x68}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x4430}, &(0x7f00000003c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) splice(r4, 0x0, r4, 0x0, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="13000000000100a6"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500fc00", @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x18}, @broadcast, @broadcast, @random="1f97a01835e6", {0x3, 0x8}, @value=@ver_80211n={0x0, 0x434b, 0x1, 0x1, 0x0, 0x2}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x5, 0x74, 0x3}, @val={0x76, 0x6, {0x4, 0x4, 0x23, 0x23}}}}}, 0x2a) nanosleep(&(0x7f00000006c0)={0x0, 0x989680}, &(0x7f0000000700)) syz_80211_inject_frame(&(0x7f0000000740)=@device_b, &(0x7f0000000980)=ANY=[@ANYBLOB="80280200080211000001ffffffffffff505050505050090000000000001400000500002003012f0406060009000500060208000506076901769d3725030193053c494d1d37c25f7e4c092d35090401069d067206030303"], 0x57) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={0x1, 0xa2, "7a86ae360efab6fa8a8ca439b067454b4b973f62639854cdb862080bb8297f5e5a92064851f9dc3cd7bd043e122671c65810e8c87c205d9b80116aabb30a1bd01bad5482440f09bf208e578dab65341befae10e98a24a5799cc9e644c4f9727db19cf645be5fcf993a726e81c9d5863911c7f4f28181cca442f8747566bf4a9b3ba421814dd74cb97fd3e2479c50175c774ad9683bf4d818257a56024f3265809fa4"}, &(0x7f0000000280)=0xaa) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r8, 0x7, 0xdf4fb0f5, 0x7ff}, &(0x7f0000000300)=0x10) unshare(0x20000400) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000840)="47880ecd5a", 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000880)=0x5ba, 0x4) 3.939804384s ago: executing program 2 (id=4296): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000680)="8907040400", 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="010000002787520100"/18, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendto$inet(r0, 0x0, 0x0, 0x40010, &(0x7f0000000a00)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000a40)={&(0x7f0000000a80)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000ac0)=[{&(0x7f0000001080)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000002080)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r8) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffff}, {0xfff3, 0xc}, {0xc, 0x17}}, [{0xfffffffffffffec3}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendto$packet(r6, &(0x7f0000000740)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000780)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x10}}, 0x40080) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/17, 0x11}, 0x80}], 0x1, 0x20, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x4) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000072000000000026de7c86a3b85978b958fbd80000000000000000000000000000e3c8d0fa6d06dfbdd73a0c490e81f383417571364d9629cc57ff9a7d87a07a95e9c256ea38ba778130645215d6b5ca229c0d946b99386d2664bfeb816f7c2d13ee8e5d3ae10714df636d1f8c94b5619802e02e028e8b97b0f549fa19e5b6d3a93b47e4be4c7ba56fc5fe689218786e61cb07320ec460483f579bec0cf1468e153cff80a21df59e6a7662967171967c9ccc24e6616bcf23f504340316cb2fc93d5520f1b65a5ec7fe79e3a9ce12c0fa8e74fb00e4dbc0b9c0aa6ecab6b2179ba83bd5a30683f212b68576e65110854acf31ece4f8882c9d8e0853215b2fe3fa589f5c10536c0ad2f564e5b3d59dc1c2eb3910599507be70b21c7ec2820e566b625b492cad4add51e9f09a19f2b57b3af461825059b1314911fdc2762356d6d1"], 0x48) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.802822865s ago: executing program 2 (id=4297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000003a00)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000003a40)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000003b00)=0x84) (async, rerun: 32) sendmmsg$inet_sctp(r2, &(0x7f0000003b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000003bc0)={0x0, 0x9, 0xff}, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c80)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) write$tun(r0, 0x0, 0x22) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x3, 0xe, &(0x7f0000002dc0)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000003880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000038c0), 0xfffffedf, 0x10, &(0x7f0000003900)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003940)={r8, 0x108, 0xe, 0x0, &(0x7f00000039c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) (async, rerun: 32) close(r7) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x284c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2818, 0x3, 0x0, 0x1, [{0x15a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x101}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5d2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4e7e7251}, @NFTA_SET_ELEM_KEY={0x3d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x78, 0x1, "1192e1a3bc93985c8a5238e615d769bcd196f4236bcf5dab732537351d1628f6b133b9c8e63d342a93af2614cfa902528bb7419e4fefac0c1bdd27d59cc5d26ce7b7d894a7829c1703d433479b733c16ef17983c50550cfd55d86d996804ff9e5f0f223fe303c9429e9c54865b539982bdcb5a62"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x88, 0x1, "fec209961cd0ba09e98a01d4dfd60035104d611a7ebcd830c5a865361035975283f2654ec1c33982d2449407099dac91ae26c1b5595276d249b53fa0305c730781252bae9cacdeed0933a8c2eed790dd0c78323f9c0c61c131da2caa0a4829e4baf8fc5bc96604979895c8c9febfdef7ac4802c1838e256217d8986969e25a34e03b4913"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xde, 0x1, "0279e716b3dd559e14be62e8d18e5074d3816f11b4bb1e66039d3dc46cb7b44b8fce6174ef305d412d3388e6b76a7e0dfd9947c67daa4ad9153a528ca78e68c8450e536b48dc073372c4c8298bfc6b564099ecf65c4bce49f27dc1df01c9f70f794104cea2f699781bc6745defb2f30db3d5a73d8391d7bf0333f7de8ce9cc6e0c37ea1ec47294a6e070a983937fd9d21cc3e0cf2619b4970da1d64b50b8e9af74dac857368ba15405d6bf407683b83eb64ad31f41cf37e9aa4c6ef49bdaceb6a2aa8c00f202f131fef6937573dbf616719d6719244f296284f8"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "986e0b81823b01113af69705e8b74725063b37f7f2f049f9b3c3519315b906d7470fffc3dfdd6a5d0a5b5e827d3ceaf5b471db6eff4761dde96e99281bca7fb75ca68fbb9de804884a32629290fc0ab64fbc2bda5f1410e78ed2473a546279cd449c660bfccb0bbdf5fc025a83511c094d469e32475f40dbb262c85fac44073e5b097ddb6b713ac57b6e850078674c544bbd182ddf16a2ed961e759ea0e950106fef8513b273209230cd6c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x1120, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "404d543109e45187"}, @NFTA_DATA_VALUE={0x48, 0x1, "4fabf9d045763736818ad47f95be172dc4415b19f76356a3b635663d33fd6c035c9b9d804d0fef05fa16ee9e384bba365176f62c929f40b0f25af8c019b37020e1addce0"}, @NFTA_DATA_VALUE={0x63, 0x1, "9d4d86e1d66c7f4ca3f5cdf89f73596d113cfdc3ea3204f1e305cf8b256170e7f8c518ad24523efeefa0f2472eb98c97693df83e45dcb36cd8914eb55114c3487c21747b2d3e0a56c8748a1591c6515ae29fe3fe8ea5f9826ccea7e6404119"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x79}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x21}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1038, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xddd}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xce}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "dc44c2c5eff0213cdc76172830f3235977926bff0ed0ea4dcf688f3524207efaef86cf448d9c9ac9e11bfde3880654d994471ce14777978b9817957cf767c7188eabbce0e0589346a2568e3a99629b0de001addea4384dda2f314fe2ec5630f70d57f4794e2cbe5825d5f272a71f14b7767bc2d832bc096d7aeed36834cbfa8556a516bfb8c70be4c0b79553c047a7dd5fb8f5fec13a"}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0400"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2874}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000000)=0x7ff, 0x4) 3.718837382s ago: executing program 2 (id=4299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "3ebc6c"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "c1b14954cf0355d87893ddfc283eb9da897113429a52077cf0c2e4399c1c05748df7af3a9ec251b8017329e5b804c4e13676457883532180c6f3bc571dd7dd39b4ff5483863895448083770e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "177cfcc036d9b9d010468a5378f46422645e67ad35ec14911106000419e00187d79c3e0c93c475cb8537ab54deffabcf8cd66946"}]}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfff}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xf4}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000094) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x2c, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffa}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x39a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x9, 0x9, 0xb, 0x1, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call]}, &(0x7f00000017c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x61, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0x1, 0x5, 0x3ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000018c0)=[{0x5, 0x5, 0x6, 0x9}, {0x4, 0x4, 0x8}, {0x1, 0x1, 0xc, 0x4}, {0x2, 0x1, 0x0, 0x8}, {0x4, 0x4, 0xa, 0xd}], 0x10, 0x451c}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x884c, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) pipe(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@bloom_filter={0x1e, 0x24d, 0xfff, 0x2, 0x43002, 0x1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xc}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xa, 0x20, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x237}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x2, 0x4, 0x9, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x32}, @jmp={0x5, 0x0, 0x6, 0x4, 0x6, 0x6, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit, @jmp={0x5, 0x1, 0xa, 0x9, 0x5, 0x30, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x0, '\x00', r2, @fallback=0x11, r5, 0x8, &(0x7f0000001600)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x8, &(0x7f0000001d00)=[0xffffffffffffffff, r7, r8, r10, r11, r12, r13], &(0x7f0000001d40)=[{0x0, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x5, 0x5}, {0x2, 0x5, 0xa, 0xa}, {0x3, 0x5, 0x9, 0x8}, {0x3, 0x1, 0x0, 0x7}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x2, 0x8, 0x6}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0xb29}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r9, 0xffffffffffffffff}, &(0x7f0000001e80), &(0x7f0000001ec0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{r15}, &(0x7f0000001f40), &(0x7f0000001f80)=r14}, 0x20) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), r8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r16, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xe0af4301be42d563}, 0x4040040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000021c0)={'ip6_vti0\x00', &(0x7f0000002140)={'syztnl1\x00', r2, 0x4, 0x8, 0x4, 0xfffffffe, 0x20, @mcast1, @mcast1, 0x8, 0x80, 0xfffffffa, 0x3}}) sendmsg$can_j1939(r9, &(0x7f0000002340)={&(0x7f0000002200)={0x1d, r17, 0x3, {0x1}, 0x2}, 0x18, &(0x7f0000002300)={&(0x7f0000002240)="89bdd0ca5b46f653e1253614ddad2343aaf9932035d73dec505d641303d84e7ea41a31cb8788c52533d005ed8573041157548a7874d9b30ff6596c945e181b94b72fe26c8c093986916ffcdc5974aa81afda06f1106a3a614900e29e5f0e2da40e5acd05bb5122e3b137d1975f82f04e6b37ab07677039cb8cba24df73a293fc9125c436", 0x84}, 0x1, 0x0, 0x0, 0x4040840}, 0x881) r18 = syz_genetlink_get_family_id$gtp(&(0x7f00000023c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000024c0)={&(0x7f0000002380), 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x5c, r18, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_LINK={0x8, 0x1, r17}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x814) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r19, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x38, r20, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002680)={'sit0\x00', &(0x7f0000002640)={'gretap0\x00', r2, 0x20, 0x80, 0x7a, 0x5, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x65, 0x1, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@noop, @generic={0x88, 0x2}]}}}}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10}, @xdp={0x2c, 0x3, r21, 0x2c}, @phonet={0x23, 0x2, 0xd, 0x8}, 0x7cc3, 0x0, 0x0, 0x0, 0x4, &(0x7f00000026c0)='ip6tnl0\x00', 0xff, 0x2924, 0xfff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x5, &(0x7f0000002780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f00000027c0)='syzkaller\x00', 0x7ff, 0x7c, &(0x7f0000002800)=""/124, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x1, 0x1ff}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0x6, 0x3, 0x5}, 0x10, 0x0, r4, 0x1, &(0x7f0000002c00)=[r11, r13, r15], &(0x7f0000002c40)=[{0x0, 0x3, 0x6, 0x6}], 0x10, 0xc3}, 0x94) 3.555697184s ago: executing program 1 (id=4303): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.083089731s ago: executing program 0 (id=4304): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000500)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xa, 0x5}, 0x90) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='x', 0x1}], 0x1}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x7, 0x0, 0x0, 0xe, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x5, 0x52}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x48}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x16c, 0x10, 0x713, 0xffffffff, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in=@multicast2, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x1, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x100000000ebe2}, {0x7}, 0x70bd2c, 0x0, 0x2, 0x4, 0x1, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f00000003c0)=r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001600000000000000ebffffff911153000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.079450292s ago: executing program 1 (id=4305): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9", 0x1d}], 0x2}}], 0x1, 0x20008000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(khazad)\x00'}, 0xfffffe56) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9", 0x1d}], 0x2}}], 0x1, 0x20008000) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(khazad)\x00'}, 0xfffffe56) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) accept4(r0, 0x0, 0x0, 0x800) (async) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) 1.063962993s ago: executing program 3 (id=4306): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x22, &(0x7f00000003c0)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) sendmsg$rds(r0, &(0x7f0000000980)={&(0x7f00000004c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000580)=""/254, 0xfe}, {&(0x7f0000000680)=""/216, 0xd8}], 0x2, &(0x7f00000008c0)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffb, 0x17a3}, &(0x7f00000007c0)=0x3, &(0x7f0000000800)=0x8, 0x54fc, 0x9, 0x7, 0x1, 0x43, 0xa78}}, @cswp={0x58, 0x114, 0x7, {{0xc63, 0x8}, &(0x7f0000000840)=0x2, &(0x7f0000000880)=0x6, 0x6, 0x100000000, 0x8001, 0x9, 0x5, 0x100000000}}], 0xb0, 0xc008000}, 0x4000041) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r8, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="020440000e00000027bd7000fddbdf25020006002b0000000a004e2300001000fe800000000000000000000000000039000000000000000002000100000000000f0007010100000005002500002000000a004e2110000000ffe60000000000000000000000000001ff0f00000000000087ff4d099ac1fd171b3f004540aacf79a8f17b7cdf85fcf16c5cfa8bca7fa0d3b555b5ff8763399927110b459778dc4895e5411ed471a3e177691e0e4ab2a51c6ff81a12d2786b0e2eb7d3ab8bdff20bdd1816dd1f09a41e6daef1eaa269eed4c3b97afadc6e2dd534"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000004000000000000007f00"/112], 0xfffffe7f}}, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) 1.062747596s ago: executing program 4 (id=4307): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)='e', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="aa8e0cf56164be5b", 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x10, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c44}, 0x0) 1.012922575s ago: executing program 2 (id=4308): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001700)=[{&(0x7f00000001c0)="220b079a695e287e5f4a7f1dd1d865c91fbfd490b3624df8928afd8107a5946081", 0x21}, {&(0x7f0000000200)="f9c0d021a850cff826bf0a18d2368cd8b7363177c9a0b9aa96e119", 0x1b}, {&(0x7f00000002c0)="9e82192d80d81efbf86b45533c488d73b7e1e5f0512467883474513a4668f44476e92e269604a634bbe7fb82fac20c692b864c88f42795dc56f038d18990ff7ca11cf4a5a900005095b9f846f4103750a7a3da1f9a9a2d5c5e9d234ff0b3e0598c5a81ed80fe3e09b53d1369dece6549b008a45de715bd520c228499e68e60ad1a11c64cfea18bd33f6fb8cec8816c3db520265c577a4e79db16caf08411f0ef0a31772e9c0a15", 0xa7}, {&(0x7f0000000380)="c69e0716279a91ac74047b384466b2d4533696a42151c209f683d5b52d488f0ef3fbb4bfd17699a4e2b4b969a90efa7dd15eeb7173b054749f19c93386ebe79757ce729930be3964c7e56421e3e1183e5598bf5290bcecd4c46dd2b1e70e2ebbc9246dfb4ae5ee45da156a1e2ff6b063a7a547594e130f4fccce7c9cb7734f731af59c58ea639b5955c43dd9ac433b4ce9c3b3636c6a830fb388fc595d8d82a48a965e58bdd69963691c651dc5cf34954f8b94492cba00149dfcd79459fead966e97e0309aa7f89102239a3f9321c5993549093d551668085c9d640464ce1db8afacc2ba5cdd4c", 0xe7}, {&(0x7f0000000480)="3066d7ff38e6f900059869617407d335be954af25c1780226f3104712f5bc4e38a43fb21d3545a4d89fcfabeb4979b3a468642b026763934b31c63282df615ed33356a8542948a6881049ff350b9a7369d0f99d9476bb8605b99197167a32dc7ce33598dc61d5b2eb5d0ca62bb14bf973ff63544bd86b9835f", 0x79}, {&(0x7f0000000500)="6bdc4907fbd8139a09c19b11468f07518057a40393ca69af14813b0d6e661922a3c2b11ac70f26b5f45619ae561d15707f951925e6e62a7c3b610cf3db869af9423b45e5ffc5fa17381886a34e6fff5b58b290eaf58319bd3b79e98cd321bde39ce604ee203e1c8e73fed1b4ffd475119026b8982740744e08c11b300b15a6819cb59150c4fae0bbbf568a383c", 0x8d}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="3a6a7f2f321904b9b3f9aa396d7d4d8d2df0e9969dec3247652ac485d82b98185cb33096a82fa809deb9627c30ba310f3321c6f14495c599176393130a9e24939739a7374a54573498b5341bf8f43255f21f76e9244ea63ab4cac3a1f2a5b019749aaade5434eb2c8ed5733b89517e75da56c369394928b6b77c57911dfb24291b4e14d81e709275b68d0819842a127a3f05f1eeba88e518f98738405d6cba96a94a057ef84442304774c3f4e8779ef6eefe317af0001f7b93a24352efaa660567d2766c8039189827187592dd615c83daa22d7929", 0xd5}, {&(0x7f00000016c0)="819da06c8e2cfc05aba121494ba2978647", 0x11}], 0x9, 0x0, 0x0, 0x805}, 0x20040000) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x11, &(0x7f0000001980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r2, 0x0, 0x22, 0x0, &(0x7f0000001b00)="3d25ab555b19c4cbd0017085080040fee5a990ec7661bcf85f9871eb5f7eef2d45f0", 0x0, 0x304a0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) (async) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x7, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2, 0x36d, 0x0, 0x2}, 0x9, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@loopback, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x5, 0x0, 0x0, 0x9075, 0xee, 0x9}}, 0xe8) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) 927.878961ms ago: executing program 1 (id=4309): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b33, &(0x7f0000000080)) socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) unshare(0x8040480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000200)={0x7, 'vlan0\x00', {0x2}, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000e40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x366, 0x10, &(0x7f0000000f80), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000012000000000000004ca1e53c76b190697c342bd4a494124b99a20249dbbc7f3d97320a749c0becb2617ca73e35784d4bd73051ca726261ebf7e4fecbfdcb97d682bcdf614112065c8eb110640205bd9f67e261b38282795bc7fb4395ebde92d3c121fae11b8c8ab8934863ba313801ba78394175dc5ab40e3ce44d96cab81d3a6fdc71f07580a03328361f162531893dd803a8f58a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) close(r4) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x4, 0x5) bind$vsock_stream(r7, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x1) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r5}, &(0x7f0000001140), &(0x7f0000001180)=r4}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 927.216257ms ago: executing program 4 (id=4310): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @multicast2}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000780)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x5c, 0x65, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0xbfea782ca9645394, 0x0, @remote, {0xe, 0x4, 0x3, 0x3f, 0x505, 0x66, 0x7f2, 0x48, 0x1, 0x9, @rand_addr=0x64010102, @multicast2, {[@timestamp={0x44, 0x20, 0x9b, 0x0, 0x2, [0x9, 0x81, 0x80, 0xfff, 0x1000, 0x800, 0xd8]}, @end]}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x38, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf69, 0x5, 0xb, 0x2, 0x1, 0x66, 0x3, 0x6]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2}, {0x10, 0xfff2}, {0xc, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) recvfrom$phonet(r0, 0x0, 0xffffffffffffff70, 0x40000142, &(0x7f0000000180)={0x23, 0x9, 0xce, 0xe5}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) connect$tipc(r0, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x2}}, 0x10) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r8, 0x84, 0x80, &(0x7f0000000280)={r9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r9, 0x1, 0x5a5c, 0x67}, &(0x7f0000000300)=0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 808.987767ms ago: executing program 3 (id=4311): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000250002000000000005000200000000004500000000000000a500feff000000009500000000000000"], &(0x7f0000000640)='GPL\x00'}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='[@-[\x00', 0x20a202, &(0x7f0000000180)={@align=0x7, {0xae, 0x1, 0x1ff, 0x7fffffff}}, 0x4, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2320f26e}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd4d}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x20000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x6}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x41}}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_init_net_socket$nfc_raw(0x27, 0x9, 0x0) 761.775374ms ago: executing program 4 (id=4312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xd, 0x3}}}, 0x24}}, 0x1095) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000540)=0x9, 0x4) (async) bind$inet6(r4, &(0x7f0000000580)={0xa, 0xe22, 0x10000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000140)=0x7, 0x4) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x2, 0x8, 0x600, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc14}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8d}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000000408010200000000000000000a00000406000240e84a00000500030084000000efc0eb4c51c9ac7417fd6807873aac3339583aa6a079a6839eeaffd24e76633bd1709e8c290c79fa377e67ffa379a15e2abe6b297db350e4cb78a8eb546840a034de9abe5a714105ae72addd82c07078008e6a87aafcdfb5013866c0238cd8346edb1fca881d85f109c1aca8956f45cd953b4d27e17ae20ccc4abcc2a8d700906b8c7403f4f0526d26c12a02399a57ce26288989c296d41682328eb0e6939798ba5ab0357f0d74a351e66b220f95eeed6a19cc5d6fc758e01160b8bf430de3e466efc80ecefa1c47c8ca5b7fef65f967"], 0x24}}, 0x24000000) (async) listen(r6, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 627.417291ms ago: executing program 1 (id=4313): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 12) 626.772084ms ago: executing program 3 (id=4314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x400, 0x62, @private0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x700, 0x7800, 0x5b86, 0xffffffc0}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000fedbdf2502000000fc01c8090027000006001500020000001400168004000880"], 0x38}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000280)='})-/((%\x00', 0x600040, &(0x7f00000002c0)={@_ha_fsid={[0x5, 0xe9b]}, {0x9, 0x120, 0xfffffffa, 0x9}}, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x3}) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000500)={0x4, 0x0, 0x0, r7}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x1, 0x1, 0x5, r7, 0xffffff93}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000055000104000000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="01000000fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44c01}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 598.253256ms ago: executing program 4 (id=4315): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x8, 0x6, 0xfffff02c}, {0x6, 0x1, 0x0, 0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRESOCT, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f1ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 536.379509ms ago: executing program 1 (id=4316): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="99142f688ee6b8d2fd1273c7de1c35339490387628901a15f8270c2e7c9ef1fe32bc45de5fdd58fa7484da6a7b548e0c410658aa7de2365aa1c79d9e7ea8e38b"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x0, 0x8e, 0x0, 0x0, 0x6, 0x10000}, 0x28) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008", @ANYRES32=r2, @ANYRESOCT=r8, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x408d5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xcc, 0x3ff, 0x56, @private2, @private0, 0x10, 0x8, 0x276, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="000000000000000085000000"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x40000}, 0x9080) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a000000a5ae6054e57ecf18d091ca351ec6366815aa3453076dd8ec340d601ba398eb3bfcb78ce3faf177615c12ba1d79e34735fa9078"], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r15, &(0x7f0000000400)={&(0x7f0000000000), 0x10, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="44000000090605000000000000000007000000000500010038768a9a8ccceb070000000900020073797a30000000001c000780801400024000"/75], 0x44}}, 0x0) sendmsg$IPSET_CMD_DEL(r15, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000000a06050000000000000000000a0000000500106f070000000900020073797a30000000001c000780180001801400024000"/68], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500000000000000001b000000", @ANYRES32=r5, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="0102000020830600"], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 382.46789ms ago: executing program 4 (id=4317): socket$netlink(0x10, 0x3, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000700)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r4}, 0xc) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000002c0)={0x3, 0xd}) 245.557586ms ago: executing program 0 (id=4318): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x65, 0x0, 0x0, @str='^^\x00'}]}]}, 0x30}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000061147c000000000084000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_delrule={0x54, 0x21, 0x300, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x20, 0x80, 0x9, 0x0, 0x0, 0x1, 0x4}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_DST={0xfffffffffffffd93, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c890}, 0x4000041) 82.551427ms ago: executing program 3 (id=4319): socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x8000}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a40)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x20000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000cc0)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000d00)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x5}]}, 0x70}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x96}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074975}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf2c2f3255585eedd}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x70, &(0x7f00000009c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x62, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x7dfd, 0x5a]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x3, 0x101]}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x8}, 0x1, {0x4}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) 3.606759ms ago: executing program 2 (id=4320): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r1, 0x100}, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.033611ms ago: executing program 4 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) recvmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x3df, 0xffffffffffffffff, 0x1, 0xffff7fff}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006a0019052abd7000fddbdf250000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.458414ms ago: executing program 0 (id=4322): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), 0x76}, 0x48) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) (rerun: 64) close(r1) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="5766b1b827f6003300", 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) (async) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x57fb36209d97903c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "02722e3486ebd900"}]}}}}}}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(serpent)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 0s ago: executing program 1 (id=4323): r0 = socket(0x29, 0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x497, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): e. Setting the MTU to 1532 would solve the problem. [ 417.008265][T18641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.031158][T18821] netlink: 495 bytes leftover after parsing attributes in process `syz.1.3210'. [ 417.091354][T18641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.091369][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.091386][T18641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.323374][ T31] audit: type=1800 audit(1791842888.782:24): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3212" name="blkio.bfq.time_recursive" dev="tmpfs" ino=60 res=0 errno=0 [ 417.393616][T18641] hsr_slave_0: entered promiscuous mode [ 417.395554][T18641] hsr_slave_1: entered promiscuous mode [ 417.607809][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.694205][T18823] wg0 speed is unknown, defaulting to 1000 [ 417.843635][T10762] IPVS: stop unused estimator thread 0... [ 418.778862][T18834] wg0 speed is unknown, defaulting to 1000 [ 418.872857][ T5615] Bluetooth: hci4: ACL packet too small [ 418.875049][T18879] netlink: 'syz.1.3220': attribute type 10 has an invalid length. [ 418.922626][T18879] team0: Device veth0_vlan failed to register rx_handler [ 418.973280][T18876] IPVS: set_ctl: invalid protocol: 213 10.1.1.0:20001 [ 419.037986][ T5615] Bluetooth: hci1: command tx timeout [ 419.114775][T18884] netlink: 'syz.4.3221': attribute type 2 has an invalid length. [ 419.150307][T18884] tipc: Started in network mode [ 419.150335][T18884] tipc: Node identity ac14140f, cluster identity 4711 [ 419.153273][T18884] tipc: New replicast peer: 255.255.255.255 [ 419.154546][T18884] tipc: Enabled bearer , priority 10 [ 420.024667][T18641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.054180][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.060841][T18641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.120894][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.260708][T18641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.276578][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.281737][T18641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.301847][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.303946][ T30] tipc: Node number set to 2886997007 [ 420.643994][T18926] wg0 speed is unknown, defaulting to 1000 [ 420.800436][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 420.839980][T18641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.925042][T18938] netlink: 'syz.4.3226': attribute type 2 has an invalid length. [ 420.925063][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 420.932474][T18641] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.013091][T18938] ¿: entered promiscuous mode [ 421.046624][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.046729][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.053327][T18938] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 421.132794][T18938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.135049][T10762] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.135141][T10762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.183779][T18942] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 421.255362][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 421.339740][T18938] bridge1: entered promiscuous mode [ 421.356755][T18938] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 421.379265][T18641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.851264][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 422.111489][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 422.174250][T10762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.174271][T10762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.450530][T18960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3231'. [ 422.749872][T19009] 8021q: VLANs not supported on gre0 [ 423.091004][T18641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.272814][T18641] veth0_vlan: entered promiscuous mode [ 423.297334][T18641] veth1_vlan: entered promiscuous mode [ 423.421606][T18641] veth0_macvtap: entered promiscuous mode [ 423.456646][T18641] veth1_macvtap: entered promiscuous mode [ 423.516658][T18641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.594799][T18641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.613927][T19040] batman_adv: batadv0: Adding interface: syzkaller0 [ 423.614046][T19040] batman_adv: batadv0: Interface activated: syzkaller0 [ 423.634405][T19037] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 423.730715][T19037] batman_adv: batadv0: Removing interface: syzkaller0 [ 423.770129][T10763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.770174][T10763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.809846][T10763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.810008][T10763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.067093][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.067114][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.139630][ T1506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.139651][ T1506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.637985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.833423][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.849988][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.852000][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.854826][T19092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'. [ 424.855160][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.857196][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.945160][T19092] bridge_slave_0: left allmulticast mode [ 424.945185][T19092] bridge_slave_0: left promiscuous mode [ 424.945397][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.984003][T19092] bridge_slave_1: left allmulticast mode [ 424.984028][T19092] bridge_slave_1: left promiscuous mode [ 424.984245][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.209854][T19104] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 425.635199][T19126] wg0 speed is unknown, defaulting to 1000 [ 425.785750][T19132] tipc: Started in network mode [ 425.785779][T19132] tipc: Node identity 7a773aeccd14, cluster identity 4711 [ 425.785929][T19132] tipc: Enabled bearer , priority 0 [ 425.925464][T19132] syzkaller0: entered promiscuous mode [ 425.925488][T19132] syzkaller0: entered allmulticast mode [ 425.926078][T19132] tipc: Resetting bearer [ 425.950804][T19129] tipc: Resetting bearer [ 426.150662][T19145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.958838][ T5615] Bluetooth: hci3: command tx timeout [ 428.828505][T19129] tipc: Disabling bearer [ 428.851411][ T30] tipc: Node number set to 3076733676 [ 428.933773][T19089] wg0 speed is unknown, defaulting to 1000 [ 429.037164][T19210] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 429.039172][ T5615] Bluetooth: hci3: command tx timeout [ 429.140113][T19210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.326878][T19203] wg0 speed is unknown, defaulting to 1000 [ 429.512822][T19232] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 429.582789][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 429.748306][T19232] hsr_slave_1 (unregistering): left promiscuous mode [ 430.176387][T19254] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 430.354313][T19089] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.355642][T19089] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.355777][T19089] bridge_slave_0: entered allmulticast mode [ 430.423577][T19089] bridge_slave_0: entered promiscuous mode [ 430.434635][T19089] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.434803][T19089] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.434934][T19089] bridge_slave_1: entered allmulticast mode [ 430.454237][T19089] bridge_slave_1: entered promiscuous mode [ 430.698725][T19089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.715774][T19089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.969893][T19089] team0: Port device team_slave_0 added [ 430.972519][T19089] team0: Port device team_slave_1 added [ 431.034901][T19089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.034918][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.034936][T19089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.040579][T19089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.040594][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.040616][T19089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.117980][ T5615] Bluetooth: hci3: command tx timeout [ 431.245050][T19089] hsr_slave_0: entered promiscuous mode [ 431.253821][T19089] hsr_slave_1: entered promiscuous mode [ 431.254529][T19089] debugfs: 'hsr0' already exists in 'hsr' [ 431.254547][T19089] Cannot create hsr debugfs directory [ 431.284152][T19280] vlan2: entered promiscuous mode [ 431.284186][T19280] team0: entered promiscuous mode [ 431.284198][T19280] team_slave_0: entered promiscuous mode [ 431.286338][T19280] team_slave_1: entered promiscuous mode [ 431.341427][T19279] vlan2: entered promiscuous mode [ 431.412132][T19285] vcan0: entered promiscuous mode [ 431.412285][T19285] bond0: entered promiscuous mode [ 431.412299][T19285] bond_slave_0: entered promiscuous mode [ 431.412469][T19285] bond_slave_1: entered promiscuous mode [ 431.413915][T19285] team0: entered promiscuous mode [ 431.413930][T19285] team_slave_0: entered promiscuous mode [ 431.414109][T19285] team_slave_1: entered promiscuous mode [ 431.414265][T19285] dummy0: entered promiscuous mode [ 431.414901][T19285] nlmon0: entered promiscuous mode [ 431.415040][T19285] batadv0: entered promiscuous mode [ 431.415192][T19285] vxcan0: entered promiscuous mode [ 431.415331][T19285] vxcan1: entered promiscuous mode [ 431.415465][T19285] wg0: entered promiscuous mode [ 431.415600][T19285] wg1: entered promiscuous mode [ 431.415737][T19285] wg2: entered promiscuous mode [ 431.415905][T19285] veth0_to_bridge: entered promiscuous mode [ 431.416155][T19285] veth1_to_bridge: entered promiscuous mode [ 431.420718][T19285] veth0_to_bond: entered promiscuous mode [ 431.420991][T19285] veth1_to_bond: entered promiscuous mode [ 431.422419][T19285] veth0_to_team: entered promiscuous mode [ 431.422671][T19285] veth1_to_team: entered promiscuous mode [ 431.422921][T19285] veth0_to_batadv: entered promiscuous mode [ 431.423072][T19285] batadv_slave_0: entered promiscuous mode [ 431.423210][T19285] veth1_to_batadv: entered promiscuous mode [ 431.424156][T19285] batadv_slave_1: entered promiscuous mode [ 431.424298][T19285] xfrm0: entered promiscuous mode [ 431.425258][T19285] veth0_to_hsr: entered promiscuous mode [ 431.426689][T19285] veth1_to_hsr: entered promiscuous mode [ 431.426950][T19285] hsr0: entered promiscuous mode [ 431.427089][T19285] veth1_virt_wifi: entered promiscuous mode [ 431.427233][T19285] veth0_virt_wifi: entered promiscuous mode [ 431.427364][T19285] virt_wifi0: entered promiscuous mode [ 431.431049][T19285] vlan0: entered promiscuous mode [ 431.431322][T19285] vlan1: entered promiscuous mode [ 431.431583][T19285] macvlan0: entered promiscuous mode [ 431.433051][T19285] macvlan1: entered promiscuous mode [ 431.433183][T19285] ipvlan0: entered promiscuous mode [ 431.433322][T19285] ipvlan1: entered promiscuous mode [ 431.434084][T19285] macvtap0: entered promiscuous mode [ 431.434219][T19285] macsec0: entered promiscuous mode [ 431.434320][T19285] geneve0: entered promiscuous mode [ 431.434456][T19285] geneve1: entered promiscuous mode [ 431.434591][T19285] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 431.434707][T19285] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 431.434817][T19285] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 431.434928][T19285] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 431.436260][T19285] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 431.506635][T19285] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 431.529593][T19285] bridge1: entered promiscuous mode [ 431.529743][T19285] sit1: entered promiscuous mode [ 431.530260][T19285] bridge2: entered promiscuous mode [ 431.594810][T19285] bond1: entered promiscuous mode [ 431.888972][T19305] ip_tables: iptables: counters copy to user failed while replacing table [ 431.925642][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3290'. [ 431.936511][T19089] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 431.936544][T19089] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.993461][T19302] wg0 speed is unknown, defaulting to 1000 [ 432.025089][T19310] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 432.026978][T19309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 432.192477][T19089] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 432.192511][T19089] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.445175][T19089] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 432.445208][T19089] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.719439][T19089] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 432.719472][T19089] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.958377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.200515][ T5615] Bluetooth: hci3: command tx timeout [ 433.435407][T19346] netlink: 'syz.1.3301': attribute type 1 has an invalid length. [ 433.547089][T19346] bond2: entered promiscuous mode [ 433.547665][T19346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.633018][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 433.688177][T19350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.694957][T19350] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 433.694980][T19350] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 433.748997][T19350] bond2: (slave wireguard0): making interface the new active one [ 433.749020][T19350] wireguard0: entered promiscuous mode [ 433.751679][T19350] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 433.770137][T19089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.783228][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.784316][T19089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.791701][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.796454][T19089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.806325][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.842624][T19089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.879308][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.926335][T19354] wg0 speed is unknown, defaulting to 1000 [ 434.207483][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3303'. [ 434.209317][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3303'. [ 434.212564][T19089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.215552][T19365] 8021q: VLANs not supported on ip_vti0 [ 434.256087][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3303'. [ 434.256121][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3303'. [ 434.261916][T19366] 8021q: VLANs not supported on ip_vti0 [ 434.276316][T19089] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.313246][T10762] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.313353][T10762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.376223][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.376333][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.512453][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 434.960706][T19380] syzkaller0: entered promiscuous mode [ 434.960728][T19380] syzkaller0: entered allmulticast mode [ 434.991048][T19380] tipc: Started in network mode [ 434.991075][T19380] tipc: Node identity fe0caa8332e4, cluster identity 4711 [ 435.000496][T19380] tipc: Enabled bearer , priority 0 [ 435.016728][T19380] tipc: Resetting bearer [ 435.133149][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3309'. [ 435.166371][ T336] IPVS: starting estimator thread 0... [ 435.175805][T19376] tipc: Resetting bearer [ 435.247798][T19390] IPVS: using max 37 ests per chain, 88800 per kthread [ 435.266629][T19376] tipc: Disabling bearer [ 435.562063][T19406] netlink: 'syz.0.3314': attribute type 11 has an invalid length. [ 435.632479][T19409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3314'. [ 435.632511][T19409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3314'. [ 435.816567][T19089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.920142][T19089] veth0_vlan: entered promiscuous mode [ 435.939762][T19089] veth1_vlan: entered promiscuous mode [ 435.990366][T19089] veth0_macvtap: entered promiscuous mode [ 436.014216][T19089] veth1_macvtap: entered promiscuous mode [ 436.106211][T19089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.152099][T19089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.208079][ T336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.209133][T10764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.209565][T10764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.269204][T10764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.494166][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.494191][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.584258][ T1506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.584278][ T1506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.933735][T19459] sctp: [Deprecated]: syz.2.3249 (pid 19459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.933735][T19459] Use struct sctp_sack_info instead [ 437.214033][T19477] sctp: [Deprecated]: syz.0.3326 (pid 19477) Use of int in max_burst socket option. [ 437.214033][T19477] Use struct sctp_assoc_value instead [ 437.438703][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 437.738761][T19502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3331'. [ 437.884858][ T6897] IPVS: starting estimator thread 0... [ 437.973135][T19516] IPVS: using max 34 ests per chain, 81600 per kthread [ 437.975091][T19520] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3336'. [ 438.072719][T19527] openvswitch: netlink: IP tunnel dst address not specified [ 438.446331][T19546] ip_tables: iptables: counters copy to user failed while replacing table [ 438.457344][T19540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3342'. [ 438.525199][T19549] Cannot find set identified by id 0 to match [ 438.545820][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3346'. [ 438.545848][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3346'. [ 438.545865][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3346'. [ 438.545889][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3346'. [ 438.603697][T19552] sctp: [Deprecated]: syz.1.3348 (pid 19552) Use of int in max_burst socket option. [ 438.603697][T19552] Use struct sctp_assoc_value instead [ 438.684890][T19558] wg0 speed is unknown, defaulting to 1000 [ 439.356881][T19593] sctp: [Deprecated]: syz.2.3361 (pid 19593) Use of int in max_burst socket option. [ 439.356881][T19593] Use struct sctp_assoc_value instead [ 439.687301][T19604] hsr0: entered allmulticast mode [ 439.687324][T19604] hsr_slave_0: entered allmulticast mode [ 439.687341][T19604] hsr_slave_1: entered allmulticast mode [ 439.710820][T19604] hsr_slave_0: left promiscuous mode [ 439.714901][T19604] hsr_slave_1: left promiscuous mode [ 439.736019][T19604] hsr0 (unregistering): left allmulticast mode [ 440.012069][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.095705][T19619] syzkaller0: entered promiscuous mode [ 440.095730][T19619] syzkaller0: entered allmulticast mode [ 440.131804][T19618] vlan2: entered promiscuous mode [ 440.131825][T19618] veth0: entered promiscuous mode [ 440.223393][T19626] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 440.225609][T19626] 0ªX¹¦Dö»: entered allmulticast mode [ 440.330134][T19639] sctp: [Deprecated]: syz.2.3374 (pid 19639) Use of int in max_burst socket option. [ 440.330134][T19639] Use struct sctp_assoc_value instead [ 440.502712][T19644] netlink: 'syz.1.3377': attribute type 9 has an invalid length. [ 440.770660][ T31] audit: type=1800 audit(1791842912.232:25): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3375" name="memory.events" dev="tmpfs" ino=193 res=0 errno=0 [ 441.231623][T19671] __nla_validate_parse: 147 callbacks suppressed [ 441.231642][T19671] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3383'. [ 442.980605][T19676] macvlan0: left promiscuous mode [ 442.980774][T19676] netlink: 'syz.0.3384': attribute type 1 has an invalid length. [ 442.980788][T19676] netlink: 'syz.0.3384': attribute type 2 has an invalid length. [ 442.986904][T19680] sctp: [Deprecated]: syz.2.3386 (pid 19680) Use of int in max_burst socket option. [ 442.986904][T19680] Use struct sctp_assoc_value instead [ 443.071752][T19684] sctp: [Deprecated]: syz.4.3388 (pid 19684) Use of int in maxseg socket option. [ 443.071752][T19684] Use struct sctp_assoc_value instead [ 443.311007][T19695] batman_adv: batadv0: Adding interface: syzkaller0 [ 443.311025][T19695] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.311654][T19695] batman_adv: batadv0: Interface activated: syzkaller0 [ 443.534623][T19715] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 443.534645][T19715] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3397'. [ 443.564937][T19702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.613292][T19718] sctp: [Deprecated]: syz.3.3399 (pid 19718) Use of int in max_burst socket option. [ 443.613292][T19718] Use struct sctp_assoc_value instead [ 443.695365][T19702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.721622][T19693] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 443.765190][T19693] batman_adv: batadv0: Removing interface: syzkaller0 [ 443.812310][T19702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.951063][T19702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.030403][T19740] syzkaller0: entered promiscuous mode [ 444.030425][T19740] syzkaller0: entered allmulticast mode [ 444.274408][T19751] syzkaller1: entered promiscuous mode [ 444.274431][T19751] syzkaller1: entered allmulticast mode [ 444.331636][T19749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3407'. [ 444.331920][T19748] netlink: 'syz.3.3407': attribute type 32 has an invalid length. [ 444.358295][ T328] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.410844][T10756] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.411685][T10756] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.419724][ T328] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.460670][T19753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'. [ 444.554369][T19761] sctp: [Deprecated]: syz.2.3411 (pid 19761) Use of int in max_burst socket option. [ 444.554369][T19761] Use struct sctp_assoc_value instead [ 444.560760][T19755] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 444.591222][T19755] bond3 (unregistering): Released all slaves [ 444.661698][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 444.661718][T19755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'. [ 444.695581][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 444.695787][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 444.695955][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 444.696114][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 444.883381][T19774] syzkaller0: entered promiscuous mode [ 444.883403][T19774] syzkaller0: entered allmulticast mode [ 444.917920][T19780] wg0 speed is unknown, defaulting to 1000 [ 444.975110][T19783] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 444.979568][T19784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.039718][T19783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.250929][T19793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.342386][T19776] wg0 speed is unknown, defaulting to 1000 [ 445.490479][T19801] sctp: [Deprecated]: syz.4.3424 (pid 19801) Use of int in max_burst socket option. [ 445.490479][T19801] Use struct sctp_assoc_value instead [ 446.323889][T19837] syzkaller0: entered promiscuous mode [ 446.323911][T19837] syzkaller0: entered allmulticast mode [ 446.326622][T19837] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 446.330119][T19837] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 446.402366][T19837] : entered promiscuous mode [ 446.573455][T19859] sctp: [Deprecated]: syz.4.3436 (pid 19859) Use of int in max_burst socket option. [ 446.573455][T19859] Use struct sctp_assoc_value instead [ 446.945935][T19870] batman_adv: batadv0: Adding interface: syzkaller0 [ 446.945952][T19870] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.945978][T19870] batman_adv: batadv0: Interface activated: syzkaller0 [ 447.052372][T19873] xt_connbytes: Forcing CT accounting to be enabled [ 447.296866][T19869] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 447.360618][T19869] batman_adv: batadv0: Removing interface: syzkaller0 [ 447.419781][T19883] batman_adv: batadv0: Adding interface: syzkaller0 [ 447.419798][T19883] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.419824][T19883] batman_adv: batadv0: Interface activated: syzkaller0 [ 447.426425][T19880] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 447.440114][T19884] Unsupported ieee802154 address type: 0 [ 447.533129][T19880] batman_adv: batadv0: Removing interface: syzkaller0 [ 447.637295][T19895] __nla_validate_parse: 64 callbacks suppressed [ 447.637315][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 447.810876][T19905] batman_adv: batadv0: Adding interface: erspan0 [ 447.810893][T19905] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.810918][T19905] batman_adv: batadv0: Interface activated: erspan0 [ 448.164024][T19924] wg0 speed is unknown, defaulting to 1000 [ 448.296507][T19935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3460'. [ 448.516342][T19938] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 448.542723][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3463'. [ 448.604831][T19938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.645354][T19934] wg0 speed is unknown, defaulting to 1000 [ 448.780563][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3465'. [ 449.370435][T19969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3470'. [ 449.441013][T19963] pimreg: entered allmulticast mode [ 449.444696][T19963] pimreg: left allmulticast mode [ 449.515385][T19979] raw_sendmsg: syz.0.3473 forgot to set AF_INET. Fix it! [ 449.779994][T19971] bond1: option arp_validate: invalid value (1048579) [ 449.786137][T19971] bond1 (unregistering): Released all slaves [ 450.029416][T20011] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3477'. [ 450.536453][T20032] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 450.955740][T20027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.973717][T20027] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.003217][T20027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.092935][T20027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.107056][T20027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.133035][T20027] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 451.159260][T20034] macvtap1: entered allmulticast mode [ 451.175649][T20056] ip_tables: iptables: counters copy to user failed while replacing table [ 451.192926][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.193027][T10765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.194955][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.195051][T10765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.254328][T20054] netlink: 'syz.2.3487': attribute type 4 has an invalid length. [ 451.836520][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.896241][T20088] batman_adv: batadv0: Adding interface: syzkaller0 [ 451.896263][T20088] batman_adv: batadv0: Interface activated: syzkaller0 [ 451.947122][T20086] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 451.993265][T20086] batman_adv: batadv0: Removing interface: syzkaller0 [ 452.011384][ T31] audit: type=1804 audit(1791842923.472:26): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3496" name="/newroot/34/memory.events" dev="tmpfs" ino=195 res=1 errno=0 [ 452.011477][ T31] audit: type=1800 audit(1791842923.472:27): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3496" name="memory.events" dev="tmpfs" ino=195 res=0 errno=0 [ 452.245474][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 452.245499][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 452.272979][T20107] wg0 speed is unknown, defaulting to 1000 [ 452.295898][T20111] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 452.386211][T20111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.789070][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'. [ 452.844307][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 452.844329][T20142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 454.006885][T20179] netlink: 'syz.0.3517': attribute type 4 has an invalid length. [ 454.006905][T20179] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3517'. [ 454.071110][T20180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.375287][T20193] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 454.455262][T20193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.507265][T20198] bond3: (slave veth0_to_bond): Releasing backup interface [ 454.507288][T20198] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 454.562786][T20198] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 454.669597][T20198] bridge5: entered promiscuous mode [ 454.681077][T20198] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 454.727978][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.741252][T20189] wg0 speed is unknown, defaulting to 1000 [ 454.815108][T20199] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3523'. [ 455.087129][T20220] netlink: 'syz.2.3528': attribute type 39 has an invalid length. [ 455.815313][T20265] syzkaller1: entered promiscuous mode [ 455.815336][T20265] syzkaller1: entered allmulticast mode [ 455.884331][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3536'. [ 456.006905][T20268] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 456.068740][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 456.122944][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3539'. [ 456.347148][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 456.347170][T20293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 456.365836][T20289] batman_adv: batadv0: Adding interface: syzkaller0 [ 456.365852][T20289] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.365881][T20289] batman_adv: batadv0: Interface activated: syzkaller0 [ 456.413916][T20286] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 456.460302][T20286] batman_adv: batadv0: Removing interface: syzkaller0 [ 456.538930][T20296] syzkaller0: create flow: hash 383014067 index 0 [ 457.307259][T20334] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 457.364929][T20334] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 458.892654][T20290] syzkaller0 (unregistered): delete flow: hash 383014067 index 0 [ 459.055608][T20350] batman_adv: batadv0: Adding interface: syzkaller0 [ 459.055626][T20350] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.055653][T20350] batman_adv: batadv0: Interface activated: syzkaller0 [ 459.137212][T20347] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 459.250570][T20347] batman_adv: batadv0: Removing interface: syzkaller0 [ 459.290031][T20360] batman_adv: batadv0: Adding interface: syzkaller0 [ 459.290050][T20360] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.290077][T20360] batman_adv: batadv0: Interface activated: syzkaller0 [ 459.487212][T20366] Cannot find del_set index 3 as target [ 459.494256][T20367] Cannot find del_set index 3 as target [ 459.669589][T20356] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 459.688352][T20366] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.746286][T20356] batman_adv: batadv0: Removing interface: syzkaller0 [ 459.784010][T20382] __nla_validate_parse: 2 callbacks suppressed [ 459.784031][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 459.954495][T20388] netlink: 'syz.1.3568': attribute type 6 has an invalid length. [ 459.986228][T20390] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.986719][T20390] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.157103][T20393] tipc: Started in network mode [ 460.157133][T20393] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 460.177595][T20393] tipc: Enabled bearer , priority 7 [ 460.386582][T20409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3578'. [ 460.472288][T20411] netlink: 'syz.3.3579': attribute type 2 has an invalid length. [ 460.553207][T20411] netlink: 'syz.3.3579': attribute type 2 has an invalid length. [ 460.553736][T20411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.881913][T20430] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 460.925097][T20430] team0: Port device dummy0 added [ 460.932041][T20430] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 460.949213][T20430] team0: Port device dummy0 removed [ 461.187449][T20437] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.219421][T20437] bond3: (slave lo): Enslaving as an active interface with an up link [ 461.220629][T20437] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.223338][T20427] wg0 speed is unknown, defaulting to 1000 [ 461.278138][T19273] tipc: Node number set to 9480874 [ 461.506228][T20445] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 461.536563][T20445] bond4: entered promiscuous mode [ 461.546978][T20445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.567127][T20447] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 461.600126][T20447] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 461.730377][T20445] bond4: (slave bridge4): making interface the new active one [ 461.730402][T20445] bridge4: entered promiscuous mode [ 461.734709][T20456] netlink: zone id is out of range [ 461.734721][T20456] netlink: zone id is out of range [ 461.734728][T20456] netlink: zone id is out of range [ 461.734735][T20456] netlink: zone id is out of range [ 461.734742][T20456] netlink: zone id is out of range [ 461.734748][T20456] netlink: zone id is out of range [ 461.793915][T20445] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 461.921325][T20454] ipvlan2: entered allmulticast mode [ 461.921346][T20454] bond4: entered allmulticast mode [ 461.921358][T20454] bridge4: entered allmulticast mode [ 461.932437][T20454] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.932462][T20454] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 462.425167][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 462.477371][T20460] bond0: (slave gretap0): Opening slave failed [ 462.539870][T20461] vlan2: entered allmulticast mode [ 462.539895][T20461] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 462.546186][T20461] batman_adv: batadv0: Adding interface: vlan2 [ 462.546203][T20461] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 462.631725][T20463] netlink: 'syz.3.3594': attribute type 1 has an invalid length. [ 462.922043][T20476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'. [ 462.922080][T20476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'. [ 463.038754][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.696998][T20497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3598'. [ 463.752230][T20498] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 466.454781][T20531] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3603'. [ 466.802339][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 466.936228][T20565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3613'. [ 467.185034][T20577] netlink: 'syz.2.3618': attribute type 219 has an invalid length. [ 467.259866][T20578] netlink: 'syz.2.3618': attribute type 21 has an invalid length. [ 467.296279][T20585] tipc: Can't bind to reserved service type 2 [ 469.363107][T20578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3618'. [ 469.363141][T20578] netlink: 'syz.2.3618': attribute type 1 has an invalid length. [ 469.565243][T20603] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.611953][T20603] syzkaller1: entered promiscuous mode [ 469.611978][T20603] syzkaller1: entered allmulticast mode [ 469.796359][T20610] bridge_slave_0: left allmulticast mode [ 469.796385][T20610] bridge_slave_0: left promiscuous mode [ 469.796606][T20610] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.078024][ C0] net_ratelimit: 774 callbacks suppressed [ 470.078045][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 470.232089][T20632] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 470.391876][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 470.662849][T20659] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 470.681504][T20659] syz_tun: entered promiscuous mode [ 470.696155][T20659] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 470.752917][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 470.842035][T20663] ipvlan2: entered allmulticast mode [ 470.842057][T20663] virt_wifi0: entered allmulticast mode [ 470.845130][T20663] batman_adv: batadv0: Adding interface: ipvlan2 [ 470.845147][T20663] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.845175][T20663] batman_adv: batadv0: Interface activated: ipvlan2 [ 470.928409][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 471.398962][T20687] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3650'. [ 472.315978][T20703] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3655'. [ 472.332940][T20706] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3655'. [ 473.743303][T20663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.932090][T20721] netlink: 'syz.2.3658': attribute type 2 has an invalid length. [ 473.982286][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3658'. [ 473.982312][T20721] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 474.018314][T20722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3657'. [ 474.518430][T20754] ip_tables: iptables: counters copy to user failed while replacing table [ 474.695548][T20763] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3677'. [ 474.714574][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3676'. [ 474.727305][T20760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3676'. [ 474.845827][T20768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.864851][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 474.865049][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 475.191237][T20791] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 475.215564][T20791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.223613][T20791] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 475.228347][T20791] team0: Port device netdevsim1 added [ 475.229335][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3687'. [ 475.253608][T20790] ip6gre2: entered promiscuous mode [ 475.253630][T20790] ip6gre2: entered allmulticast mode [ 475.261939][T20795] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 475.262208][T20795] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 475.473308][T20795] team0: Port device netdevsim1 removed [ 475.489956][T20795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.495395][T20795] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 475.825075][T20814] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.281448][T20860] netlink: 'syz.0.3701': attribute type 15 has an invalid length. [ 476.364897][T20860] netlink: 'syz.0.3701': attribute type 15 has an invalid length. [ 476.401533][T10750] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 476.401664][T10750] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 476.401737][T10750] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 476.520550][T20872] batman_adv: batadv0: Adding interface: syzkaller0 [ 476.520571][T20872] batman_adv: batadv0: Interface activated: syzkaller0 [ 476.940048][T20885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.980333][T20888] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 477.124604][T20871] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 477.223243][T20871] batman_adv: batadv0: Removing interface: syzkaller0 [ 477.227452][T20900] sctp: [Deprecated]: syz.3.3714 (pid 20900) Use of int in max_burst socket option deprecated. [ 477.227452][T20900] Use struct sctp_assoc_value instead [ 477.346358][T20888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.360757][T20888] bond5: (slave bond6): making interface the new active one [ 477.361335][T20888] bond5: (slave bond6): Enslaving as an active interface with an up link [ 477.361449][T20908] __nla_validate_parse: 11 callbacks suppressed [ 477.361462][T20908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'. [ 477.425599][T20895] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 477.426354][T20901] bond5: entered promiscuous mode [ 477.426373][T20901] bond6: entered promiscuous mode [ 477.449735][T20901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.595004][T20952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.689705][T20951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.779336][T20951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.848517][T20964] ip6gre3: entered promiscuous mode [ 478.848540][T20964] ip6gre3: entered allmulticast mode [ 478.853618][T10756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 478.853830][T10756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 478.854727][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 478.854746][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 478.882851][T19271] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.402180][T19271] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.501075][T19271] bridge0: entered promiscuous mode [ 479.640204][T20994] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000 [ 479.838545][T19271] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.857884][T21008] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 480.225112][T21037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3747'. [ 480.300130][T21042] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3747'. [ 480.670512][T21050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3749'. [ 480.938279][T21063] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 481.131963][T21067] Bluetooth: MGMT ver 1.23 [ 481.222639][T21073] openvswitch: netlink: Multiple metadata blocks provided [ 481.260268][T21073] x_tables: duplicate underflow at hook 4 [ 481.267365][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'. [ 481.892828][T21088] tipc: Enabled bearer , priority 0 [ 481.955080][T21088] syzkaller0: MTU not usable for tipc bearer [ 481.955102][T21088] tipc: Disabling bearer [ 482.029551][T21092] dvmrp0: entered allmulticast mode [ 482.080492][T21094] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3764'. [ 482.091429][T21094] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3764'. [ 482.243171][T21103] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 482.557783][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.619891][T10756] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 482.677765][T21112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.273877][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 483.289641][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 483.421101][T21162] netlink: 'syz.3.3780': attribute type 2 has an invalid length. [ 483.495615][T21172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3782'. [ 483.642533][T21177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3784'. [ 483.644643][T21177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3784'. [ 483.764495][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3783'. [ 483.911429][T21184] batman_adv: batadv0: Interface deactivated: erspan0 [ 483.921923][T21184] netlink: 964 bytes leftover after parsing attributes in process `syz.4.3786'. [ 483.921944][T21184] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 484.102636][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 484.390562][T21219] netlink: 'syz.0.3796': attribute type 39 has an invalid length. [ 484.492845][T21222] ip6tnl1: entered allmulticast mode [ 484.519834][T21220] Bluetooth: MGMT ver 1.23 [ 484.539131][T10756] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.539259][T10756] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.568620][ T191] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.729651][ T5615] Bluetooth: hci1: connection err: -111 [ 484.756884][T21229] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 484.765741][T21229] team0: Device ipvlan2 is already an upper device of the team interface [ 485.278026][ T5807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.278289][ T5616] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.135791][T21207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.272343][T21240] Unsupported ieee802154 address type: 0 [ 487.274751][T21240] Unsupported ieee802154 address type: 0 [ 487.364761][T21244] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 487.524384][T21252] netlink: 'syz.3.3805': attribute type 61 has an invalid length. [ 487.524404][T21252] netlink: 'syz.3.3805': attribute type 105 has an invalid length. [ 487.741575][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3811'. [ 487.798432][T21264] wg0 speed is unknown, defaulting to 1000 [ 487.802603][T21279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.809687][T21275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3811'. [ 488.032009][T21286] netlink: 'syz.1.3814': attribute type 1 has an invalid length. [ 488.033187][T21286] syzkaller0: entered promiscuous mode [ 488.033205][T21286] syzkaller0: entered allmulticast mode [ 488.047732][T10754] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.048541][T10754] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.048573][T10754] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.048602][T10754] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.159664][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 488.391720][T21303] batman_adv: batadv0: Adding interface: syzkaller0 [ 488.391748][T21303] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.393437][T21303] batman_adv: batadv0: Interface activated: syzkaller0 [ 488.397873][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 488.451912][T21301] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 488.528924][T21301] batman_adv: batadv0: Removing interface: syzkaller0 [ 488.799502][T21316] FAULT_INJECTION: forcing a failure. [ 488.799502][T21316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.799534][T21316] CPU: 0 UID: 0 PID: 21316 Comm: syz.0.3822 Not tainted syzkaller #0 PREEMPT(full) [ 488.799554][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.799577][T21316] Call Trace: [ 488.799585][T21316] [ 488.799593][T21316] dump_stack_lvl+0xe8/0x150 [ 488.799626][T21316] should_fail_ex+0x410/0x560 [ 488.799657][T21316] _copy_from_user+0x2d/0xb0 [ 488.799686][T21316] ___sys_sendmsg+0x1c6/0x360 [ 488.799707][T21316] ? __lock_acquire+0x747/0x2de0 [ 488.799731][T21316] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.799755][T21316] ? kstrtouint+0x6e/0xe0 [ 488.799800][T21316] ? __fget_files+0x2a/0x420 [ 488.799826][T21316] ? __fget_files+0x3a2/0x420 [ 488.799859][T21316] __sys_sendmmsg+0x273/0x4d0 [ 488.799884][T21316] ? __pfx___sys_sendmmsg+0x10/0x10 [ 488.799915][T21316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.799954][T21316] ? ksys_write+0x242/0x270 [ 488.799975][T21316] ? __pfx_ksys_write+0x10/0x10 [ 488.800000][T21316] __x64_sys_sendmmsg+0xa0/0xc0 [ 488.800021][T21316] do_syscall_64+0x166/0x520 [ 488.800046][T21316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.800065][T21316] ? clear_bhb_loop+0x70/0xc0 [ 488.800088][T21316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.800106][T21316] RIP: 0033:0x7f648f39e1d9 [ 488.800123][T21316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.800138][T21316] RSP: 002b:00007f649029d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.800158][T21316] RAX: ffffffffffffffda RBX: 00007f648f625fa0 RCX: 00007f648f39e1d9 [ 488.800172][T21316] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 488.800184][T21316] RBP: 00007f649029d090 R08: 0000000000000000 R09: 0000000000000000 [ 488.800195][T21316] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000001 [ 488.800206][T21316] R13: 00007f648f626038 R14: 00007f648f625fa0 R15: 00007ffdf39e1458 [ 488.800237][T21316] [ 488.856804][T21318] netlink: 'syz.0.3823': attribute type 11 has an invalid length. [ 489.283268][T21326] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 489.302264][T21326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3825'. [ 489.424333][T21339] netlink: 'syz.1.3828': attribute type 219 has an invalid length. [ 489.721115][T21346] No such timeout policy "s" [ 489.721133][T21346] netlink: Failed to associated timeout policy 's' [ 489.820549][T21346] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3830'. [ 489.839214][T21349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3832'. [ 489.872562][T21353] FAULT_INJECTION: forcing a failure. [ 489.872562][T21353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.872583][T21353] CPU: 1 UID: 0 PID: 21353 Comm: syz.2.3833 Not tainted syzkaller #0 PREEMPT(full) [ 489.872595][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 489.872602][T21353] Call Trace: [ 489.872606][T21353] [ 489.872611][T21353] dump_stack_lvl+0xe8/0x150 [ 489.872630][T21353] should_fail_ex+0x410/0x560 [ 489.872647][T21353] _copy_from_user+0x2d/0xb0 [ 489.872663][T21353] __copy_msghdr+0x390/0x590 [ 489.872677][T21353] ___sys_sendmsg+0x213/0x360 [ 489.872687][T21353] ? __lock_acquire+0x747/0x2de0 [ 489.872700][T21353] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.872713][T21353] ? kstrtouint+0x6e/0xe0 [ 489.872737][T21353] ? __fget_files+0x2a/0x420 [ 489.872751][T21353] ? __fget_files+0x3a2/0x420 [ 489.872769][T21353] __sys_sendmmsg+0x273/0x4d0 [ 489.872783][T21353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 489.872798][T21353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.872819][T21353] ? ksys_write+0x242/0x270 [ 489.872830][T21353] ? __pfx_ksys_write+0x10/0x10 [ 489.872843][T21353] __x64_sys_sendmmsg+0xa0/0xc0 [ 489.872855][T21353] do_syscall_64+0x166/0x520 [ 489.872867][T21353] ? trace_irq_disable+0x3b/0x140 [ 489.872878][T21353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.872888][T21353] ? clear_bhb_loop+0x70/0xc0 [ 489.872900][T21353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.872910][T21353] RIP: 0033:0x7f7e32f9e1d9 [ 489.872920][T21353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.872929][T21353] RSP: 002b:00007f7e33d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.872941][T21353] RAX: ffffffffffffffda RBX: 00007f7e33225fa0 RCX: 00007f7e32f9e1d9 [ 489.872948][T21353] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 489.872954][T21353] RBP: 00007f7e33d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.872961][T21353] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000001 [ 489.872966][T21353] R13: 00007f7e33226038 R14: 00007f7e33225fa0 R15: 00007ffe95a29b68 [ 489.872982][T21353] [ 489.927711][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 490.324888][T21372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3840'. [ 490.544023][T21382] ieee802154 phy1 wpan1: encryption failed: -22 [ 490.625483][T21391] FAULT_INJECTION: forcing a failure. [ 490.625483][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 490.625515][T21391] CPU: 0 UID: 0 PID: 21391 Comm: syz.4.3846 Not tainted syzkaller #0 PREEMPT(full) [ 490.625535][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 490.625544][T21391] Call Trace: [ 490.625551][T21391] [ 490.625558][T21391] dump_stack_lvl+0xe8/0x150 [ 490.625587][T21391] should_fail_ex+0x410/0x560 [ 490.625616][T21391] should_failslab+0xa8/0x100 [ 490.625641][T21391] __kmalloc_cache_noprof+0xa3/0x600 [ 490.625662][T21391] ? sctp_association_new+0x89/0x25d0 [ 490.625684][T21391] ? sctp_association_new+0x89/0x25d0 [ 490.625705][T21391] ? sctp_has_association+0x2f/0x1f0 [ 490.625730][T21391] sctp_association_new+0x89/0x25d0 [ 490.625750][T21391] ? sctp_has_association+0x2f/0x1f0 [ 490.625772][T21391] ? __ipv6_addr_type+0x108/0x2f0 [ 490.625925][T21391] sctp_connect_new_asoc+0x2e4/0x6b0 [ 490.625958][T21391] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 490.625977][T21391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.625998][T21391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.626017][T21391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 490.626037][T21391] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 490.626065][T21391] ? security_sctp_bind_connect+0x7e/0x2c0 [ 490.626090][T21391] sctp_sendmsg+0x159b/0x2d00 [ 490.626125][T21391] ? __pfx_sctp_sendmsg+0x10/0x10 [ 490.626149][T21391] ? __lock_acquire+0x747/0x2de0 [ 490.626181][T21391] ? aa_sock_msg_perm+0xf5/0x210 [ 490.626205][T21391] ? sock_rps_record_flow+0x19/0x350 [ 490.626236][T21391] ? inet_sendmsg+0x298/0x320 [ 490.626260][T21391] ? apparmor_socket_sendmsg+0x98/0x360 [ 490.626284][T21391] ? __pfx_inet_sendmsg+0x10/0x10 [ 490.626309][T21391] sock_sendmsg_nosec+0x10f/0x190 [ 490.626337][T21391] ____sys_sendmsg+0x54e/0x850 [ 490.626361][T21391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.626389][T21391] ? import_iovec+0x73/0xa0 [ 490.626419][T21391] ___sys_sendmsg+0x2a5/0x360 [ 490.626436][T21391] ? __lock_acquire+0x747/0x2de0 [ 490.626459][T21391] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.626483][T21391] ? kstrtouint+0x6e/0xe0 [ 490.626530][T21391] ? __fget_files+0x2a/0x420 [ 490.626554][T21391] ? __fget_files+0x3a2/0x420 [ 490.626588][T21391] __sys_sendmmsg+0x273/0x4d0 [ 490.626611][T21391] ? __pfx___sys_sendmmsg+0x10/0x10 [ 490.626640][T21391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.626679][T21391] ? ksys_write+0x242/0x270 [ 490.626700][T21391] ? __pfx_ksys_write+0x10/0x10 [ 490.626726][T21391] __x64_sys_sendmmsg+0xa0/0xc0 [ 490.626748][T21391] do_syscall_64+0x166/0x520 [ 490.626770][T21391] ? trace_irq_disable+0x3b/0x140 [ 490.626787][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.626805][T21391] ? clear_bhb_loop+0x70/0xc0 [ 490.626825][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.626842][T21391] RIP: 0033:0x7fade599e1d9 [ 490.626860][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.626873][T21391] RSP: 002b:00007fade679a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.626891][T21391] RAX: ffffffffffffffda RBX: 00007fade5c25fa0 RCX: 00007fade599e1d9 [ 490.626903][T21391] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 490.626914][T21391] RBP: 00007fade679a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.626925][T21391] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000001 [ 490.626936][T21391] R13: 00007fade5c26038 R14: 00007fade5c25fa0 R15: 00007ffd1f174e48 [ 490.626974][T21391] [ 491.089166][T21400] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 491.130211][T21400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3848'. [ 491.336209][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'. [ 491.337634][T21408] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3852'. [ 491.338621][T21406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3852'. [ 491.396149][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3855'. [ 491.526677][T21429] batman_adv: batadv0: Adding interface: syzkaller0 [ 491.526695][T21429] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.526722][T21429] batman_adv: batadv0: Interface activated: syzkaller0 [ 491.662923][T21439] netlink: 'syz.1.3860': attribute type 3 has an invalid length. [ 491.662944][T21439] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3860'. [ 492.010789][T21427] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 492.102985][T21427] batman_adv: batadv0: Removing interface: syzkaller0 [ 492.300531][T21467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.354461][T21473] Set syz0 is full, maxelem 2 reached [ 492.458697][T21485] ip_tables: iptables: counters copy to user failed while replacing table [ 492.526353][T21489] tipc: Enabled bearer , priority 0 [ 493.115654][T21514] netlink: 'syz.4.3880': attribute type 1 has an invalid length. [ 493.167332][T21514] bond6: option mode: invalid value (10) [ 493.181991][T21514] bond6 (unregistering): Released all slaves [ 493.267233][T21519] netlink: 'syz.4.3880': attribute type 10 has an invalid length. [ 493.301658][T21519] dummy0: entered promiscuous mode [ 493.330906][T21517] IPVS: Unknown mcast interface:  [ 493.639652][ T191] tipc: Node number set to 3437800067 [ 493.686993][T21532] netlink: 'syz.1.3887': attribute type 2 has an invalid length. [ 493.687016][T21532] nbd: illegal input index -2130444284 [ 493.732487][T21532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.008880][T21549] netlink: 'syz.4.3893': attribute type 62 has an invalid length. [ 494.011260][T21548] netlink: 'syz.4.3893': attribute type 62 has an invalid length. [ 494.274361][T21566] FAULT_INJECTION: forcing a failure. [ 494.274361][T21566] name failslab, interval 1, probability 0, space 0, times 0 [ 494.274391][T21566] CPU: 1 UID: 0 PID: 21566 Comm: syz.0.3898 Not tainted syzkaller #0 PREEMPT(full) [ 494.274410][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.274420][T21566] Call Trace: [ 494.274426][T21566] [ 494.274432][T21566] dump_stack_lvl+0xe8/0x150 [ 494.274458][T21566] should_fail_ex+0x410/0x560 [ 494.274484][T21566] should_failslab+0xa8/0x100 [ 494.274506][T21566] __kmalloc_cache_noprof+0xa3/0x600 [ 494.274527][T21566] ? sctp_transport_new+0x7e/0x620 [ 494.274647][T21566] ? sctp_transport_new+0x7e/0x620 [ 494.274668][T21566] ? sctp_add_bind_addr+0x8c/0x370 [ 494.274691][T21566] sctp_transport_new+0x7e/0x620 [ 494.274712][T21566] sctp_assoc_add_peer+0x299/0x1430 [ 494.274741][T21566] sctp_connect_new_asoc+0x329/0x6b0 [ 494.274763][T21566] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 494.274782][T21566] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 494.274800][T21566] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 494.274816][T21566] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 494.274836][T21566] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 494.274858][T21566] ? security_sctp_bind_connect+0x7e/0x2c0 [ 494.274880][T21566] sctp_sendmsg+0x159b/0x2d00 [ 494.274908][T21566] ? __pfx_sctp_sendmsg+0x10/0x10 [ 494.274932][T21566] ? __lock_acquire+0x747/0x2de0 [ 494.274961][T21566] ? aa_sock_msg_perm+0xf5/0x210 [ 494.274985][T21566] ? sock_rps_record_flow+0x19/0x350 [ 494.275013][T21566] ? inet_sendmsg+0x298/0x320 [ 494.275035][T21566] ? apparmor_socket_sendmsg+0x98/0x360 [ 494.275059][T21566] ? __pfx_inet_sendmsg+0x10/0x10 [ 494.275081][T21566] sock_sendmsg_nosec+0x10f/0x190 [ 494.275107][T21566] ____sys_sendmsg+0x54e/0x850 [ 494.275135][T21566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.275161][T21566] ? import_iovec+0x73/0xa0 [ 494.275190][T21566] ___sys_sendmsg+0x2a5/0x360 [ 494.275217][T21566] ? __lock_acquire+0x747/0x2de0 [ 494.275241][T21566] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.275266][T21566] ? kstrtouint+0x6e/0xe0 [ 494.275313][T21566] ? __fget_files+0x2a/0x420 [ 494.275339][T21566] ? __fget_files+0x3a2/0x420 [ 494.275376][T21566] __sys_sendmmsg+0x273/0x4d0 [ 494.275401][T21566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.275430][T21566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.275470][T21566] ? ksys_write+0x242/0x270 [ 494.275490][T21566] ? __pfx_ksys_write+0x10/0x10 [ 494.275515][T21566] __x64_sys_sendmmsg+0xa0/0xc0 [ 494.275537][T21566] do_syscall_64+0x166/0x520 [ 494.275560][T21566] ? trace_irq_disable+0x3b/0x140 [ 494.275579][T21566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.275598][T21566] ? clear_bhb_loop+0x70/0xc0 [ 494.275622][T21566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.275639][T21566] RIP: 0033:0x7f648f39e1d9 [ 494.275658][T21566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.275671][T21566] RSP: 002b:00007f649029d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.275692][T21566] RAX: ffffffffffffffda RBX: 00007f648f625fa0 RCX: 00007f648f39e1d9 [ 494.275705][T21566] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 494.275716][T21566] RBP: 00007f649029d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.275728][T21566] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000001 [ 494.275739][T21566] R13: 00007f648f626038 R14: 00007f648f625fa0 R15: 00007ffdf39e1458 [ 494.275769][T21566] [ 494.682686][T21579] __nla_validate_parse: 3 callbacks suppressed [ 494.682705][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 494.705214][T21585] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 494.709497][T21585] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 494.733114][ T31] audit: type=1107 audit(1791842966.192:28): pid=21588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�FN®Û' [ 494.804557][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 494.804717][T21596] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 494.805409][T21596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3904'. [ 494.991610][T21602] netlink: 'syz.0.3906': attribute type 8 has an invalid length. [ 494.991630][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.991882][T21602] netlink: 'syz.0.3906': attribute type 8 has an invalid length. [ 494.991894][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.992032][T21602] netlink: 'syz.0.3906': attribute type 8 has an invalid length. [ 494.992044][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.992182][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.992305][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.992430][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 495.024200][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 495.083652][T21620] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 495.311281][T21631] bridge_slave_1: left allmulticast mode [ 495.311511][T21631] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.348915][T21631] bridge_slave_0: left allmulticast mode [ 495.349259][T21631] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.540788][T21643] FAULT_INJECTION: forcing a failure. [ 495.540788][T21643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.540819][T21643] CPU: 1 UID: 0 PID: 21643 Comm: syz.3.3919 Not tainted syzkaller #0 PREEMPT(full) [ 495.540839][T21643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.540849][T21643] Call Trace: [ 495.540857][T21643] [ 495.540865][T21643] dump_stack_lvl+0xe8/0x150 [ 495.540895][T21643] should_fail_ex+0x410/0x560 [ 495.540923][T21643] _copy_from_user+0x2d/0xb0 [ 495.540951][T21643] __sys_bpf+0x2e7/0xd90 [ 495.541013][T21643] ? vfs_write+0x900/0xba0 [ 495.541032][T21643] ? __pfx___sys_bpf+0x10/0x10 [ 495.541080][T21643] ? ksys_write+0x1fc/0x270 [ 495.541103][T21643] ? __pfx_ksys_write+0x10/0x10 [ 495.541122][T21643] __x64_sys_bpf+0xba/0xd0 [ 495.541144][T21643] do_syscall_64+0x166/0x520 [ 495.541167][T21643] ? trace_irq_disable+0x3b/0x140 [ 495.541185][T21643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.541201][T21643] ? clear_bhb_loop+0x70/0xc0 [ 495.541224][T21643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.541242][T21643] RIP: 0033:0x7f579619e1d9 [ 495.541259][T21643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.541272][T21643] RSP: 002b:00007f5797147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.541291][T21643] RAX: ffffffffffffffda RBX: 00007f5796425fa0 RCX: 00007f579619e1d9 [ 495.541304][T21643] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000009 [ 495.541316][T21643] RBP: 00007f5797147090 R08: 0000000000000000 R09: 0000000000000000 [ 495.541327][T21643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.541337][T21643] R13: 00007f5796426038 R14: 00007f5796425fa0 R15: 00007fffddb35398 [ 495.541367][T21643] [ 495.976678][T21652] batman_adv: batadv0: Adding interface: syzkaller0 [ 495.976696][T21652] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.976723][T21652] batman_adv: batadv0: Interface activated: syzkaller0 [ 496.188496][T21650] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 496.317709][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 496.322169][T21650] batman_adv: batadv0: Removing interface: syzkaller0 [ 496.614425][T21675] syzkaller0: entered promiscuous mode [ 496.614445][T21675] syzkaller0: entered allmulticast mode [ 497.129558][T21711] batman_adv: batadv0: Adding interface: syzkaller0 [ 497.129577][T21711] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.129602][T21711] batman_adv: batadv0: Interface activated: syzkaller0 [ 497.184487][T21707] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 497.243630][T21707] batman_adv: batadv0: Removing interface: syzkaller0 [ 497.377789][T21721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.383676][T21724] bond5: (slave veth0_to_bond): Releasing backup interface [ 497.383699][T21724] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 497.430919][T21724] bond6: (slave veth0_to_bond): making interface the new active one [ 497.432330][T21724] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 497.472946][T21721] macvlan2: entered promiscuous mode [ 497.473035][T21721] macvlan2: entered allmulticast mode [ 497.475519][T21730] bond6: entered promiscuous mode [ 497.475538][T21730] veth0_to_bond: entered promiscuous mode [ 497.475722][T21730] bond6: entered allmulticast mode [ 497.475734][T21730] veth0_to_bond: entered allmulticast mode [ 497.581667][T21742] vcan0: tx address claim with dlc 1 [ 497.581777][T21742] vcan0: tx address claim with dlc 1 [ 497.581975][T21742] vcan0: tx address claim with dlc 1 [ 497.582065][T21742] vcan0: tx address claim with dlc 1 [ 497.582151][T21742] vcan0: tx address claim with dlc 1 [ 497.582237][T21742] vcan0: tx address claim with dlc 1 [ 497.582322][T21742] vcan0: tx address claim with dlc 1 [ 497.582407][T21742] vcan0: tx address claim with dlc 1 [ 497.582489][T21742] vcan0: tx address claim with dlc 1 [ 497.582573][T21742] vcan0: tx address claim with dlc 1 [ 497.582660][T21742] vcan0: tx address claim with dlc 1 [ 497.582746][T21742] vcan0: tx address claim with dlc 1 [ 497.582839][T21742] vcan0: tx address claim with dlc 1 [ 497.582969][T21742] vcan0: tx address claim with dlc 1 [ 497.583057][T21742] vcan0: tx address claim with dlc 1 [ 497.583143][T21742] vcan0: tx address claim with dlc 1 [ 497.583607][T21742] vcan0: tx address claim with dlc 1 [ 497.583703][T21742] vcan0: tx address claim with dlc 1 [ 497.583800][T21742] vcan0: tx address claim with dlc 1 [ 497.583893][T21742] vcan0: tx address claim with dlc 1 [ 497.583980][T21742] vcan0: tx address claim with dlc 1 [ 497.584066][T21742] vcan0: tx address claim with dlc 1 [ 497.584153][T21742] vcan0: tx address claim with dlc 1 [ 497.584240][T21742] vcan0: tx address claim with dlc 1 [ 497.584327][T21742] vcan0: tx address claim with dlc 1 [ 497.584412][T21742] vcan0: tx address claim with dlc 1 [ 497.584498][T21742] vcan0: tx address claim with dlc 1 [ 497.584584][T21742] vcan0: tx address claim with dlc 1 [ 497.584670][T21742] vcan0: tx address claim with dlc 1 [ 497.584793][T21742] vcan0: tx address claim with dlc 1 [ 497.584903][T21742] vcan0: tx address claim with dlc 1 [ 497.584989][T21742] vcan0: tx address claim with dlc 1 [ 497.585073][T21742] vcan0: tx address claim with dlc 1 [ 497.585160][T21742] vcan0: tx address claim with dlc 1 [ 497.592181][T21742] vcan0: tx address claim with dlc 1 [ 497.592319][T21742] vcan0: tx address claim with dlc 1 [ 497.592467][T21742] vcan0: tx address claim with dlc 1 [ 497.592552][T21742] vcan0: tx address claim with dlc 1 [ 497.592634][T21742] vcan0: tx address claim with dlc 1 [ 497.592715][T21742] vcan0: tx address claim with dlc 1 [ 497.592797][T21742] vcan0: tx address claim with dlc 1 [ 497.592887][T21742] vcan0: tx address claim with dlc 1 [ 497.592969][T21742] vcan0: tx address claim with dlc 1 [ 497.593052][T21742] vcan0: tx address claim with dlc 1 [ 497.593132][T21742] vcan0: tx address claim with dlc 1 [ 497.593215][T21742] vcan0: tx address claim with dlc 1 [ 497.593296][T21742] vcan0: tx address claim with dlc 1 [ 497.593375][T21742] vcan0: tx address claim with dlc 1 [ 497.593469][T21742] vcan0: tx address claim with dlc 1 [ 497.593554][T21742] vcan0: tx address claim with dlc 1 [ 497.593639][T21742] vcan0: tx address claim with dlc 1 [ 497.593724][T21742] vcan0: tx address claim with dlc 1 [ 497.593807][T21742] vcan0: tx address claim with dlc 1 [ 497.605951][T21742] vcan0: tx address claim with dlc 1 [ 497.606056][T21742] vcan0: tx address claim with dlc 1 [ 497.606139][T21742] vcan0: tx address claim with dlc 1 [ 497.606223][T21742] vcan0: tx address claim with dlc 1 [ 497.606341][T21742] vcan0: tx address claim with dlc 1 [ 497.606448][T21742] vcan0: tx address claim with dlc 1 [ 497.606530][T21742] vcan0: tx address claim with dlc 1 [ 497.606612][T21742] vcan0: tx address claim with dlc 1 [ 497.606693][T21742] vcan0: tx address claim with dlc 1 [ 497.606775][T21742] vcan0: tx address claim with dlc 1 [ 497.606883][T21742] vcan0: tx address claim with dlc 1 [ 497.607000][T21742] vcan0: tx address claim with dlc 1 [ 497.628872][T21729] bond7: ARP target 9.0.0.0 is already present [ 497.628895][T21729] bond7: option arp_ip_target: invalid value (9) [ 497.683735][T21729] bond7 (unregistering): Released all slaves [ 497.973698][ T6894] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.973808][ T6894] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.988666][T10757] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.988762][T10757] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.097108][T21750] syzkaller1: entered promiscuous mode [ 498.097130][T21750] syzkaller1: entered allmulticast mode [ 498.663553][T21788] veth0_to_hsr: entered promiscuous mode [ 498.665992][T21788] batman_adv: batadv0: Adding interface: macvlan3 [ 498.666006][T21788] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.666031][T21788] batman_adv: batadv0: Interface activated: macvlan3 [ 498.667970][T21797] syzkaller1: entered promiscuous mode [ 498.667988][T21797] syzkaller1: entered allmulticast mode [ 498.850884][T21807] tipc: Invalid UDP bearer configuration [ 498.850930][T21807] tipc: Enabling of bearer rejected, failed to enable media [ 499.151126][T21820] validate_nla: 33 callbacks suppressed [ 499.151146][T21820] netlink: 'syz.1.3967': attribute type 4 has an invalid length. [ 499.496685][T21843] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 499.497068][T21843] syzkaller1: entered promiscuous mode [ 499.497085][T21843] syzkaller1: entered allmulticast mode [ 499.675994][T21858] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 499.743098][T21861] __nla_validate_parse: 43 callbacks suppressed [ 499.743117][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3981'. [ 499.800341][T21863] 8021q: adding VLAN 0 to HW filter on device bond8 [ 499.802557][T21863] bond7: (slave bond8): making interface the new active one [ 499.803790][T21863] bond7: (slave bond8): Enslaving as an active interface with an up link [ 499.843451][T21865] bond7: entered allmulticast mode [ 499.864606][T21858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3979'. [ 499.870638][T21858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.872082][T21865] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3982'. [ 499.975892][T21865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 499.983148][T21865] bond8: entered allmulticast mode [ 499.985537][T21865] bond7: (slave bond8): Enslaving as an active interface with an up link [ 500.008712][T21876] nbd3: detected capacity change from 0 to 63 [ 500.010965][T21876] block nbd3: NBD_DISCONNECT [ 500.019114][T21869] bond7 (unregistering): (slave bond8): Releasing backup interface [ 500.049254][T21876] block nbd3: Disconnected due to user request. [ 500.049814][T21876] block nbd3: shutting down sockets [ 500.052648][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.052757][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 500.052982][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 500.053005][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 500.053019][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 500.053033][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 500.054320][T21869] bond8: left allmulticast mode [ 500.070360][T21869] bond7 (unregistering): Released all slaves [ 500.134602][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.134633][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 500.134730][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.134751][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 500.134832][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.134853][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 500.134935][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.134957][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 500.135058][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.135078][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 500.135160][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.135181][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 500.135261][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.135353][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 500.136940][T21020] ldm_validate_partition_table(): Disk read failed. [ 500.161590][T21020] Dev nbd3: unable to read RDB block 0 [ 500.162315][T21020] nbd3: unable to read partition table [ 500.259622][T21020] ldm_validate_partition_table(): Disk read failed. [ 500.262872][T21020] Dev nbd3: unable to read RDB block 0 [ 500.265213][T21020] nbd3: unable to read partition table [ 500.327267][T21876] dvmrp8: entered allmulticast mode [ 500.791562][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3994'. [ 500.841488][T21920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.913806][T21924] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 500.917407][T10756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.919059][T10756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.922555][T10756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.042081][T21924] ipt_rpfilter: unknown options [ 501.078586][T21928] batman_adv: batadv0: Adding interface: syzkaller0 [ 501.078604][T21928] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.078648][T21928] batman_adv: batadv0: Interface activated: syzkaller0 [ 501.084629][T21929] sctp: [Deprecated]: syz.3.3995 (pid 21929) Use of int in max_burst socket option deprecated. [ 501.084629][T21929] Use struct sctp_assoc_value instead [ 501.091451][T21931] netlink: zone id is out of range [ 501.094542][T21926] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 501.192341][T21926] batman_adv: batadv0: Removing interface: syzkaller0 [ 501.210843][T21931] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 501.210865][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3997'. [ 501.283776][T21938] ip6tnl1: entered promiscuous mode [ 501.449318][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.223894][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 502.223919][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 502.320639][T21973] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.415904][T21994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4010'. [ 502.525489][T21973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.536170][T21973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.709583][T21973] tipc: Resetting bearer [ 502.772491][T21976] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 502.779081][T21985] batman_adv: batadv0: Adding interface: syzkaller0 [ 502.779098][T21985] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.779126][T21985] batman_adv: batadv0: Interface activated: syzkaller0 [ 502.817286][T21994] ipvlan2: entered allmulticast mode [ 502.817306][T21994] geneve1: entered allmulticast mode [ 502.890018][T10756] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.890051][T10756] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.890193][T10756] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.890216][T10756] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.890247][T10756] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.890268][T10756] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.890300][T10756] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.890323][T10756] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.893128][T21975] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 503.040502][T21975] batman_adv: batadv0: Removing interface: syzkaller0 [ 503.059845][T22002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4011'. [ 503.241216][T22011] netlink: 'syz.3.4014': attribute type 2 has an invalid length. [ 503.484237][T22022] FAULT_INJECTION: forcing a failure. [ 503.484237][T22022] name failslab, interval 1, probability 0, space 0, times 0 [ 503.484269][T22022] CPU: 1 UID: 0 PID: 22022 Comm: syz.3.4018 Not tainted syzkaller #0 PREEMPT(full) [ 503.484290][T22022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.484301][T22022] Call Trace: [ 503.484308][T22022] [ 503.484316][T22022] dump_stack_lvl+0xe8/0x150 [ 503.484347][T22022] should_fail_ex+0x410/0x560 [ 503.484376][T22022] ? __alloc_skb+0x1db/0x7a0 [ 503.484403][T22022] should_failslab+0xa8/0x100 [ 503.484429][T22022] ? __alloc_skb+0x1db/0x7a0 [ 503.484452][T22022] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 503.484471][T22022] ? __alloc_skb+0x18d/0x7a0 [ 503.484497][T22022] ? __alloc_skb+0x1db/0x7a0 [ 503.484525][T22022] __alloc_skb+0x1db/0x7a0 [ 503.484555][T22022] sctp_packet_transmit+0x2f2/0x2bb0 [ 503.484579][T22022] ? __sctp_packet_append_chunk+0x943/0xcf0 [ 503.484615][T22022] ? sctp_packet_append_chunk+0xafc/0x1070 [ 503.484647][T22022] sctp_packet_singleton+0x22f/0x340 [ 503.484676][T22022] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 503.484709][T22022] ? sctp_outq_select_transport+0x485/0x590 [ 503.484734][T22022] ? sctp_transport_burst_limited+0x19c/0x280 [ 503.484765][T22022] sctp_outq_flush+0x4fb/0x3380 [ 503.484804][T22022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 503.484908][T22022] ? __pfx_sctp_outq_flush+0x10/0x10 [ 503.484943][T22022] ? sctp_outq_uncork+0x4d/0xa0 [ 503.484968][T22022] sctp_do_sm+0x55a1/0x5dd0 [ 503.485026][T22022] ? kasan_save_track+0x3e/0x80 [ 503.485053][T22022] ? __sys_sendmmsg+0x273/0x4d0 [ 503.485072][T22022] ? do_syscall_64+0x166/0x520 [ 503.485095][T22022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.485120][T22022] ? __pfx_sctp_do_sm+0x10/0x10 [ 503.485182][T22022] ? __sk_mem_raise_allocated+0x292/0x1250 [ 503.485204][T22022] ? __genradix_ptr+0x1e1/0x220 [ 503.485245][T22022] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 503.485271][T22022] sctp_sendmsg_to_asoc+0x13a9/0x18e0 [ 503.485317][T22022] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 503.485343][T22022] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 503.485366][T22022] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 503.485387][T22022] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 503.485406][T22022] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 503.485428][T22022] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 503.485454][T22022] ? security_sctp_bind_connect+0x7e/0x2c0 [ 503.485479][T22022] sctp_sendmsg+0x1bb5/0x2d00 [ 503.485514][T22022] ? __pfx_sctp_sendmsg+0x10/0x10 [ 503.485540][T22022] ? __lock_acquire+0x747/0x2de0 [ 503.485573][T22022] ? aa_sock_msg_perm+0xf5/0x210 [ 503.485598][T22022] ? sock_rps_record_flow+0x19/0x350 [ 503.485629][T22022] ? inet_sendmsg+0x298/0x320 [ 503.485653][T22022] ? apparmor_socket_sendmsg+0x98/0x360 [ 503.485679][T22022] ? __pfx_inet_sendmsg+0x10/0x10 [ 503.485704][T22022] sock_sendmsg_nosec+0x10f/0x190 [ 503.485730][T22022] ____sys_sendmsg+0x54e/0x850 [ 503.485756][T22022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.485784][T22022] ? import_iovec+0x73/0xa0 [ 503.485814][T22022] ___sys_sendmsg+0x2a5/0x360 [ 503.485832][T22022] ? __lock_acquire+0x747/0x2de0 [ 503.485855][T22022] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.485879][T22022] ? kstrtouint+0x6e/0xe0 [ 503.485928][T22022] ? __fget_files+0x2a/0x420 [ 503.485954][T22022] ? __fget_files+0x3a2/0x420 [ 503.485990][T22022] __sys_sendmmsg+0x273/0x4d0 [ 503.486016][T22022] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.486045][T22022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.486083][T22022] ? ksys_write+0x242/0x270 [ 503.486103][T22022] ? __pfx_ksys_write+0x10/0x10 [ 503.486129][T22022] __x64_sys_sendmmsg+0xa0/0xc0 [ 503.486152][T22022] do_syscall_64+0x166/0x520 [ 503.486176][T22022] ? trace_irq_disable+0x3b/0x140 [ 503.486195][T22022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.486220][T22022] ? clear_bhb_loop+0x70/0xc0 [ 503.486244][T22022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.486263][T22022] RIP: 0033:0x7f579619e1d9 [ 503.486282][T22022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.486298][T22022] RSP: 002b:00007f5797147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.486318][T22022] RAX: ffffffffffffffda RBX: 00007f5796425fa0 RCX: 00007f579619e1d9 [ 503.486332][T22022] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 503.486345][T22022] RBP: 00007f5797147090 R08: 0000000000000000 R09: 0000000000000000 [ 503.486357][T22022] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000002 [ 503.486368][T22022] R13: 00007f5796426038 R14: 00007f5796425fa0 R15: 00007fffddb35398 [ 503.486400][T22022] [ 504.256896][T22047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4023'. [ 504.693777][T22064] FAULT_INJECTION: forcing a failure. [ 504.693777][T22064] name failslab, interval 1, probability 0, space 0, times 0 [ 504.693811][T22064] CPU: 0 UID: 0 PID: 22064 Comm: syz.3.4030 Not tainted syzkaller #0 PREEMPT(full) [ 504.693831][T22064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.693843][T22064] Call Trace: [ 504.693850][T22064] [ 504.693861][T22064] dump_stack_lvl+0xe8/0x150 [ 504.693891][T22064] should_fail_ex+0x410/0x560 [ 504.693919][T22064] should_failslab+0xa8/0x100 [ 504.693945][T22064] ? sctp_chunkify+0x5a/0x260 [ 504.693965][T22064] kmem_cache_alloc_noprof+0xa1/0x600 [ 504.693984][T22064] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 504.694002][T22064] ? __alloc_skb+0x27a/0x7a0 [ 504.694029][T22064] ? sctp_chunkify+0x5a/0x260 [ 504.694054][T22064] sctp_chunkify+0x5a/0x260 [ 504.694075][T22064] _sctp_make_chunk+0x122/0x290 [ 504.694097][T22064] sctp_make_datafrag_empty+0x12a/0x240 [ 504.694124][T22064] ? __kasan_kmalloc+0x93/0xb0 [ 504.694150][T22064] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 504.694178][T22064] ? sctp_datamsg_from_user+0x88/0xef0 [ 504.694203][T22064] ? sctp_datamsg_from_user+0x88/0xef0 [ 504.694228][T22064] ? sctp_auth_send_cid+0x69/0x250 [ 504.694260][T22064] sctp_datamsg_from_user+0x735/0xef0 [ 504.694313][T22064] sctp_sendmsg_to_asoc+0x137d/0x18e0 [ 504.694359][T22064] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 504.694381][T22064] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 504.694404][T22064] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 504.694426][T22064] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 504.694446][T22064] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 504.694468][T22064] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 504.694496][T22064] ? security_sctp_bind_connect+0x7e/0x2c0 [ 504.694522][T22064] sctp_sendmsg+0x1bb5/0x2d00 [ 504.694558][T22064] ? __pfx_sctp_sendmsg+0x10/0x10 [ 504.694584][T22064] ? __lock_acquire+0x747/0x2de0 [ 504.694618][T22064] ? aa_sock_msg_perm+0xf5/0x210 [ 504.694643][T22064] ? sock_rps_record_flow+0x19/0x350 [ 504.694675][T22064] ? inet_sendmsg+0x298/0x320 [ 504.694697][T22064] ? apparmor_socket_sendmsg+0x98/0x360 [ 504.694723][T22064] ? __pfx_inet_sendmsg+0x10/0x10 [ 504.694748][T22064] sock_sendmsg_nosec+0x10f/0x190 [ 504.694774][T22064] ____sys_sendmsg+0x54e/0x850 [ 504.694800][T22064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.694828][T22064] ? import_iovec+0x73/0xa0 [ 504.694858][T22064] ___sys_sendmsg+0x2a5/0x360 [ 504.694877][T22064] ? __lock_acquire+0x747/0x2de0 [ 504.694901][T22064] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.694926][T22064] ? kstrtouint+0x6e/0xe0 [ 504.694973][T22064] ? __fget_files+0x2a/0x420 [ 504.694999][T22064] ? __fget_files+0x3a2/0x420 [ 504.695037][T22064] __sys_sendmmsg+0x273/0x4d0 [ 504.695062][T22064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.695091][T22064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.695132][T22064] ? ksys_write+0x242/0x270 [ 504.695153][T22064] ? __pfx_ksys_write+0x10/0x10 [ 504.695179][T22064] __x64_sys_sendmmsg+0xa0/0xc0 [ 504.695202][T22064] do_syscall_64+0x166/0x520 [ 504.695225][T22064] ? trace_irq_disable+0x3b/0x140 [ 504.695244][T22064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.695268][T22064] ? clear_bhb_loop+0x70/0xc0 [ 504.695292][T22064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.695311][T22064] RIP: 0033:0x7f579619e1d9 [ 504.695328][T22064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.695345][T22064] RSP: 002b:00007f5797147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.695365][T22064] RAX: ffffffffffffffda RBX: 00007f5796425fa0 RCX: 00007f579619e1d9 [ 504.695379][T22064] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 504.695391][T22064] RBP: 00007f5797147090 R08: 0000000000000000 R09: 0000000000000000 [ 504.695404][T22064] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000002 [ 504.695416][T22064] R13: 00007f5796426038 R14: 00007f5796425fa0 R15: 00007fffddb35398 [ 504.695447][T22064] [ 505.165411][T22077] __nla_validate_parse: 1 callbacks suppressed [ 505.165431][T22077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4034'. [ 505.277671][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 506.128939][T22124] syzkaller1: entered promiscuous mode [ 506.128961][T22124] syzkaller1: entered allmulticast mode [ 506.528575][T22136] batman_adv: batadv0: Adding interface: syzkaller0 [ 506.528592][T22136] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.528620][T22136] batman_adv: batadv0: Interface activated: syzkaller0 [ 506.583605][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4050'. [ 506.646640][T22139] sock: sock_timestamping_bind_phc: sock not bind to device [ 506.966785][T22134] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 507.022735][T22134] batman_adv: batadv0: Removing interface: syzkaller0 [ 507.102723][T22155] IPv6: sit1: Disabled Multicast RS [ 507.193579][T22157] netlink: zone id is out of range [ 507.193594][T22157] netlink: zone id is out of range [ 507.193602][T22157] netlink: zone id is out of range [ 507.193610][T22157] netlink: zone id is out of range [ 507.193618][T22157] netlink: zone id is out of range [ 507.193625][T22157] netlink: zone id is out of range [ 507.193633][T22157] netlink: zone id is out of range [ 507.193641][T22157] netlink: zone id is out of range [ 507.193649][T22157] netlink: zone id is out of range [ 507.193656][T22157] netlink: set zone limit has 4 unknown bytes [ 507.282733][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'. [ 507.299517][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'. [ 507.314928][T22163] netlink: 'syz.0.4059': attribute type 3 has an invalid length. [ 507.314947][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'. [ 507.380267][T22164] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 507.380288][T22164] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4060'. [ 507.618685][T22181] netlink: 'syz.4.4065': attribute type 1 has an invalid length. [ 507.714607][T22180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4064'. [ 507.716393][T22181] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.759635][T22181] bond7: (slave bridge7): making interface the new active one [ 507.760810][T22181] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 507.766419][T22194] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 507.887476][T22186] bond7: (slave veth3): Enslaving as an active interface with a down link [ 507.979858][T22194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4064'. [ 507.979916][T22194] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4064'. [ 508.243537][T22209] batman_adv: batadv0: Adding interface: syzkaller0 [ 508.243554][T22209] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.243587][T22209] batman_adv: batadv0: Interface activated: syzkaller0 [ 508.477087][T22219] dummy0: entered promiscuous mode [ 508.525758][T22207] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 508.611014][T22207] batman_adv: batadv0: Removing interface: syzkaller0 [ 508.620111][T22222] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4075'. [ 508.642571][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 508.789849][T22236] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 508.868745][T22231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.091047][T22093] udevd[22093]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 509.469184][T22265] syzkaller0: entered promiscuous mode [ 509.469207][T22265] syzkaller0: entered allmulticast mode [ 509.737933][T22278] batman_adv: batadv0: Adding interface: syzkaller0 [ 509.737952][T22278] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.737982][T22278] batman_adv: batadv0: Interface activated: syzkaller0 [ 509.743815][T22276] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 509.857067][T22276] batman_adv: batadv0: Removing interface: syzkaller0 [ 510.043986][T22285] wg0 speed is unknown, defaulting to 1000 [ 510.142158][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.154158][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.159483][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.162828][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.167352][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.171385][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.174967][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.180167][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.184076][T22297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.188258][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.195287][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.205616][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.212282][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.218012][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.221235][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.224324][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.229093][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.233353][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.235607][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.241773][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.245720][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.249792][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.253011][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.260894][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.263833][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.270048][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.274162][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.280922][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.285692][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.295202][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.300786][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.305764][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.310207][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.315837][T22301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.191269][T22312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.364736][T22323] ip6gretap0: entered promiscuous mode [ 511.364858][T22323] macsec1: entered allmulticast mode [ 511.364867][T22323] ip6gretap0: entered allmulticast mode [ 511.370745][T22321] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 511.401189][T22321] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 511.690744][T22331] batman_adv: batadv0: Adding interface: syzkaller0 [ 511.690768][T22331] batman_adv: batadv0: Interface activated: syzkaller0 [ 512.150531][T22337] tipc: New replicast peer: 127.0.0.1 [ 512.152358][T22337] tipc: Enabled bearer , priority 10 [ 512.196907][T22330] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 512.253724][T22330] batman_adv: batadv0: Removing interface: syzkaller0 [ 512.494350][T22355] __nla_validate_parse: 6 callbacks suppressed [ 512.494369][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 512.494395][T22355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4114'. [ 512.494418][T22355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4114'. [ 512.584102][T22357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4115'. [ 512.802374][T22365] batman_adv: batadv0: Adding interface: syzkaller0 [ 512.802393][T22365] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.802422][T22365] batman_adv: batadv0: Interface activated: syzkaller0 [ 512.841002][T22364] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 512.963997][T22097] udevd[22097]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 512.973843][T22093] udevd[22093]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 512.976177][T22364] batman_adv: batadv0: Removing interface: syzkaller0 [ 513.015737][T22370] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4117'. [ 513.169987][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 513.170430][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4117'. [ 513.511787][T22406] netlink: 'syz.0.4127': attribute type 4 has an invalid length. [ 513.511809][T22406] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4127'. [ 513.511834][T22406] .`: renamed from bond0 (while UP) [ 513.682937][T22419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4131'. [ 513.850267][T22418] macsec2: entered promiscuous mode [ 514.128790][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'. [ 514.129340][T22432] netlink: 'syz.1.4134': attribute type 1 has an invalid length. [ 514.194276][T22432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.271300][T22441] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 514.740722][T22462] FAULT_INJECTION: forcing a failure. [ 514.740722][T22462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.740753][T22462] CPU: 0 UID: 0 PID: 22462 Comm: syz.2.4145 Not tainted syzkaller #0 PREEMPT(full) [ 514.740773][T22462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.740784][T22462] Call Trace: [ 514.740791][T22462] [ 514.740800][T22462] dump_stack_lvl+0xe8/0x150 [ 514.740829][T22462] should_fail_ex+0x410/0x560 [ 514.740857][T22462] _copy_from_user+0x2d/0xb0 [ 514.740886][T22462] vmemdup_user+0x5e/0xd0 [ 514.740910][T22462] map_get_next_key+0x1c3/0x610 [ 514.740935][T22462] ? bpf_lsm_bpf+0x9/0x20 [ 514.740952][T22462] ? security_bpf+0x7e/0x2d0 [ 514.740978][T22462] __sys_bpf+0xb83/0xd90 [ 514.741010][T22462] ? __pfx___sys_bpf+0x10/0x10 [ 514.741043][T22462] ? __fget_files+0x2a/0x420 [ 514.741086][T22462] ? ksys_write+0x242/0x270 [ 514.741107][T22462] ? __pfx_ksys_write+0x10/0x10 [ 514.741130][T22462] __x64_sys_bpf+0xba/0xd0 [ 514.741154][T22462] do_syscall_64+0x166/0x520 [ 514.741178][T22462] ? trace_irq_disable+0x3b/0x140 [ 514.741198][T22462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.741223][T22462] ? clear_bhb_loop+0x70/0xc0 [ 514.741246][T22462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.741264][T22462] RIP: 0033:0x7f7e32f9e1d9 [ 514.741282][T22462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.741297][T22462] RSP: 002b:00007f7e33d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.741318][T22462] RAX: ffffffffffffffda RBX: 00007f7e33225fa0 RCX: 00007f7e32f9e1d9 [ 514.741332][T22462] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000004 [ 514.741344][T22462] RBP: 00007f7e33d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.741356][T22462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.741367][T22462] R13: 00007f7e33226038 R14: 00007f7e33225fa0 R15: 00007ffe95a29b68 [ 514.741398][T22462] [ 515.152311][T22479] netlink: 'syz.0.4151': attribute type 17 has an invalid length. [ 515.427140][T22496] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 515.645450][T10754] IPVS: starting estimator thread 0... [ 515.727983][T22504] IPVS: using max 29 ests per chain, 69600 per kthread [ 515.855386][T22516] syzkaller1: entered promiscuous mode [ 515.855411][T22516] syzkaller1: entered allmulticast mode [ 515.986370][T22525] netlink: 'syz.2.4166': attribute type 10 has an invalid length. [ 516.063958][T22525] geneve2: entered promiscuous mode [ 516.063980][T22525] geneve2: entered allmulticast mode [ 516.663639][T22558] batman_adv: batadv0: Adding interface: syzkaller0 [ 516.663752][T22558] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.663781][T22558] batman_adv: batadv0: Interface activated: syzkaller0 [ 516.797693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.125361][T22563] dummy0: left promiscuous mode [ 517.125434][T22563] dummy0: entered allmulticast mode [ 517.194430][T22557] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 517.282293][T22557] batman_adv: batadv0: Removing interface: syzkaller0 [ 517.498303][T22582] netlink: 'syz.3.4184': attribute type 1 has an invalid length. [ 517.498323][T22582] __nla_validate_parse: 14 callbacks suppressed [ 517.498335][T22582] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4184'. [ 517.587205][T22584] wg0 speed is unknown, defaulting to 1000 [ 517.761400][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4188'. [ 517.762185][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4188'. [ 517.766108][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4188'. [ 517.766136][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4188'. [ 517.861674][T22594] ip6erspan0: entered allmulticast mode [ 517.932448][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'. [ 518.060469][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4192'. [ 518.062107][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4192'. [ 518.062842][T22604] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 518.143393][T22604] xt_CT: No such helper "netbios-ns" [ 518.234204][T22611] batman_adv: batadv0: Adding interface: syzkaller0 [ 518.234223][T22611] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.234252][T22611] batman_adv: batadv0: Interface activated: syzkaller0 [ 518.279987][T10765] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.280137][T10765] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.280167][T10765] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.280198][T10765] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.610433][T22631] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.611006][T22631] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.878399][T22641] Bluetooth: hci4: command 0x0406 tx timeout [ 519.145260][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 519.498435][T22668] batman_adv: batadv0: Adding interface: syzkaller0 [ 519.498458][T22668] batman_adv: batadv0: Interface activated: syzkaller0 [ 519.525993][T22666] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 519.571452][T22666] batman_adv: batadv0: Removing interface: syzkaller0 [ 520.322457][T22704] net_ratelimit: 1 callbacks suppressed [ 520.322478][T22704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.326588][T22704] netlink: 'syz.4.4217': attribute type 16 has an invalid length. [ 520.326609][T22704] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4217'. [ 520.694773][T22722] 8021q: adding VLAN 0 to HW filter on device bond9 [ 520.699174][T22722] team0: Port device bond9 added [ 520.725444][T22719] can: request_module (can-proto-0) failed. [ 520.803491][ T5620] Bluetooth: hci3: command 0x0405 tx timeout [ 520.831785][T22732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.070421][ T5615] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 521.090239][T22744] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 522.004136][T22809] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 522.432200][T22816] netlink: 'syz.3.4250': attribute type 1 has an invalid length. [ 522.543593][T22816] bond1: entered promiscuous mode [ 522.543911][T22816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.717432][T22824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.727076][T22824] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 522.727099][T22824] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 522.755351][T22824] bond1: (slave xfrm1): making interface the new active one [ 522.755378][T22824] xfrm1: entered promiscuous mode [ 522.773517][T22824] xfrm1: left promiscuous mode [ 523.031486][T22846] batman_adv: batadv0: Adding interface: syzkaller0 [ 523.031509][T22846] batman_adv: batadv0: Interface activated: syzkaller0 [ 523.053397][T22844] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 523.125231][T22844] batman_adv: batadv0: Removing interface: syzkaller0 [ 523.315707][T22856] netlink: 'syz.2.4258': attribute type 4 has an invalid length. [ 523.315728][T22856] __nla_validate_parse: 5 callbacks suppressed [ 523.315740][T22856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4258'. [ 523.322909][T22856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 523.488469][T22874] FAULT_INJECTION: forcing a failure. [ 523.488469][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 523.488502][T22874] CPU: 0 UID: 0 PID: 22874 Comm: syz.0.4260 Not tainted syzkaller #0 PREEMPT(full) [ 523.488523][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 523.488534][T22874] Call Trace: [ 523.488542][T22874] [ 523.488551][T22874] dump_stack_lvl+0xe8/0x150 [ 523.488581][T22874] should_fail_ex+0x410/0x560 [ 523.488611][T22874] should_failslab+0xa8/0x100 [ 523.488638][T22874] __kmalloc_cache_noprof+0xa3/0x600 [ 523.488657][T22874] ? __mutex_unlock_slowpath+0x731/0x900 [ 523.488684][T22874] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 523.488792][T22874] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 523.488819][T22874] __xdp_reg_mem_model+0x1e9/0x5a0 [ 523.488846][T22874] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 523.488876][T22874] xdp_reg_mem_model+0x22/0x40 [ 523.488897][T22874] bpf_test_run_xdp_live+0x292/0x1c20 [ 523.488926][T22874] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 523.488964][T22874] ? __mutex_unlock_slowpath+0x731/0x900 [ 523.488994][T22874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 523.489023][T22874] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 523.489048][T22874] ? 0xffffffffa0404d00 [ 523.489109][T22874] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 523.489142][T22874] ? _copy_from_user+0x94/0xb0 [ 523.489169][T22874] ? bpf_test_init+0x113/0x150 [ 523.489190][T22874] ? xdp_convert_md_to_buff+0x5b/0x330 [ 523.489219][T22874] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 523.489258][T22874] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 523.489287][T22874] ? __fget_files+0x2a/0x420 [ 523.489318][T22874] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 523.489344][T22874] bpf_prog_test_run+0x2c5/0x340 [ 523.489371][T22874] __sys_bpf+0xa22/0xd90 [ 523.489407][T22874] ? __pfx___sys_bpf+0x10/0x10 [ 523.489438][T22874] ? __fget_files+0x2a/0x420 [ 523.489481][T22874] ? ksys_write+0x242/0x270 [ 523.489501][T22874] ? __pfx_ksys_write+0x10/0x10 [ 523.489525][T22874] __x64_sys_bpf+0xba/0xd0 [ 523.489548][T22874] do_syscall_64+0x166/0x520 [ 523.489570][T22874] ? trace_irq_disable+0x3b/0x140 [ 523.489589][T22874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.489608][T22874] ? clear_bhb_loop+0x70/0xc0 [ 523.489631][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.489649][T22874] RIP: 0033:0x7f648f39e1d9 [ 523.489665][T22874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.489680][T22874] RSP: 002b:00007f649029d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.489700][T22874] RAX: ffffffffffffffda RBX: 00007f648f625fa0 RCX: 00007f648f39e1d9 [ 523.489714][T22874] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 523.489726][T22874] RBP: 00007f649029d090 R08: 0000000000000000 R09: 0000000000000000 [ 523.489737][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.489748][T22874] R13: 00007f648f626038 R14: 00007f648f625fa0 R15: 00007ffdf39e1458 [ 523.489776][T22874] [ 523.969684][T22885] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4262'. [ 523.969705][T22885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4262'. [ 524.135818][T22885] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4262'. [ 524.363531][T22903] netlink: 'syz.0.4266': attribute type 1 has an invalid length. [ 524.454264][T22903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.655816][T22907] bond0: (slave veth1): Enslaving as an active interface with a down link [ 524.719560][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4267'. [ 524.792864][T22915] 8021q: adding VLAN 0 to HW filter on device bond10 [ 524.810591][T22907] syzkaller0: entered promiscuous mode [ 524.810613][T22907] syzkaller0: entered allmulticast mode [ 524.858772][T22922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.861344][T22922] bond10: (slave bond0): Enslaving as an active interface with an up link [ 524.904002][T22903] .`: (slave syz_tun): Releasing backup interface [ 524.909458][T22903] syz_tun: left promiscuous mode [ 524.964776][T22903] bond0: (slave syz_tun): making interface the new active one [ 524.970718][T22903] syz_tun: entered promiscuous mode [ 524.984904][T22903] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 525.157000][T22942] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 525.157023][T22942] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4273'. [ 525.300064][T22948] netlink: 'syz.2.4275': attribute type 10 has an invalid length. [ 525.300086][T22948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4275'. [ 525.300110][T22948] batadv0: entered promiscuous mode [ 525.300125][T22948] batadv0: entered allmulticast mode [ 525.300813][T22948] bridge0: port 1(batadv0) entered blocking state [ 525.300986][T22948] bridge0: port 1(batadv0) entered disabled state [ 525.305158][T22948] bridge0: port 1(batadv0) entered blocking state [ 525.305261][T22948] bridge0: port 1(batadv0) entered forwarding state [ 525.552073][T22962] rdma_rxe: rxe_newlink: failed to add ip_vti0 [ 525.705327][T22970] sctp: [Deprecated]: syz.2.4278 (pid 22970) Use of int in max_burst socket option deprecated. [ 525.705327][T22970] Use struct sctp_assoc_value instead [ 525.780270][ T328] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 525.780292][ T328] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 526.182662][T22992] SET target dimension over the limit! [ 526.859165][T23032] syzkaller0: entered promiscuous mode [ 526.859188][T23032] syzkaller0: entered allmulticast mode [ 526.923913][T23035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.941104][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 526.982955][T22992] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 527.038437][T23039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4295'. [ 527.048883][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.092977][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 527.550691][T23071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.554279][T23071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.555664][T23071] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 527.556994][T23071] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 527.563684][T23071] bond0 (unregistering): Released all slaves [ 529.773079][T23025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.402362][T23113] __nla_validate_parse: 3 callbacks suppressed [ 530.402382][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4314'. [ 530.521579][T23119] pim6reg: entered allmulticast mode [ 530.562600][T23118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4316'. [ 530.588227][T23118] vxcan2: entered allmulticast mode [ 530.993621][T23133] 0: reclassify loop, rule prio 0, protocol 03 [ 531.013567][T23133] ip_tables: iptables: counters copy to user failed while replacing table [ 531.059212][ T5615] block nbd0: Receive control failed (result -107) [ 531.064180][ T5615] [ 531.073013][ T5615] ====================================================== [ 531.080109][ T5615] WARNING: possible circular locking dependency detected [ 531.082834][T23140] block nbd0: reconnected socket [ 531.092076][ T5615] syzkaller #0 Not tainted [ 531.096496][ T5615] ------------------------------------------------------ [ 531.103526][ T5615] kworker/u9:2/5615 is trying to acquire lock: [ 531.109685][ T5615] ffff8880524b4360 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 531.118842][ T5615] [ 531.118842][ T5615] but task is already holding lock: [ 531.126211][ T5615] ffff888076b42268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 531.135218][ T5615] [ 531.135218][ T5615] which lock already depends on the new lock. [ 531.135218][ T5615] [ 531.145617][ T5615] [ 531.145617][ T5615] the existing dependency chain (in reverse order) is: [ 531.154627][ T5615] [ 531.154627][ T5615] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 531.162275][ T5615] __mutex_lock+0x19d/0x1550 [ 531.167392][ T5615] nbd_queue_rq+0x373/0xff0 [ 531.172422][ T5615] blk_mq_dispatch_rq_list+0x499/0x1990 [ 531.178573][ T5615] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 531.185487][ T5615] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 531.191981][ T5615] blk_mq_run_work_fn+0x16c/0x300 [ 531.197520][ T5615] process_scheduled_works+0xc3d/0x1630 [ 531.203582][ T5615] worker_thread+0xa47/0xfb0 [ 531.208684][ T5615] kthread+0x38b/0x480 [ 531.213260][ T5615] ret_from_fork+0x514/0xb70 [ 531.218391][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.223671][ T5615] [ 531.223671][ T5615] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 531.230864][ T5615] __mutex_lock+0x19d/0x1550 [ 531.235965][ T5615] nbd_queue_rq+0xc1/0xff0 [ 531.240890][ T5615] blk_mq_dispatch_rq_list+0x499/0x1990 [ 531.246950][ T5615] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 531.253783][ T5615] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 531.260273][ T5615] blk_mq_run_work_fn+0x16c/0x300 [ 531.265811][ T5615] process_scheduled_works+0xc3d/0x1630 [ 531.271864][ T5615] worker_thread+0xa47/0xfb0 [ 531.276971][ T5615] kthread+0x38b/0x480 [ 531.281543][ T5615] ret_from_fork+0x514/0xb70 [ 531.286645][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.291923][ T5615] [ 531.291923][ T5615] -> #4 (set->srcu){.+.+}-{0:0}: [ 531.299028][ T5615] __synchronize_srcu+0xc9/0x2f0 [ 531.304473][ T5615] elevator_switch+0x1e8/0x7b0 [ 531.309840][ T5615] elevator_change+0x2fa/0x480 [ 531.315114][ T5615] elevator_set_default+0x375/0x440 [ 531.320819][ T5615] blk_register_queue+0x3f3/0x4e0 [ 531.326397][ T5615] __add_disk+0x6b8/0xdb0 [ 531.331239][ T5615] add_disk_fwnode+0x100/0x3a0 [ 531.336514][ T5615] nbd_dev_add+0x733/0xb60 [ 531.341466][ T5615] nbd_init+0x168/0x1f0 [ 531.346269][ T5615] do_one_initcall+0x250/0x870 [ 531.351550][ T5615] do_initcall_level+0x10a/0x1a0 [ 531.357054][ T5615] do_initcalls+0x59/0xa0 [ 531.361896][ T5615] kernel_init_freeable+0x29d/0x3e0 [ 531.367605][ T5615] kernel_init+0x22/0x1d0 [ 531.372447][ T5615] ret_from_fork+0x514/0xb70 [ 531.377556][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.382861][ T5615] [ 531.382861][ T5615] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 531.390663][ T5615] __mutex_lock+0x19d/0x1550 [ 531.395765][ T5615] elevator_change+0x1af/0x480 [ 531.401043][ T5615] elevator_set_none+0xb5/0x140 [ 531.406404][ T5615] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 531.412724][ T5615] nbd_start_device+0x189/0xb30 [ 531.418087][ T5615] nbd_genl_connect+0x167d/0x1cd0 [ 531.423621][ T5615] genl_family_rcv_msg_doit+0x233/0x340 [ 531.429673][ T5615] genl_rcv_msg+0x614/0x7a0 [ 531.434681][ T5615] netlink_rcv_skb+0x226/0x4a0 [ 531.439951][ T5615] genl_rcv+0x28/0x40 [ 531.444465][ T5615] netlink_unicast+0x7bd/0x940 [ 531.449743][ T5615] netlink_sendmsg+0x813/0xb40 [ 531.455021][ T5615] sock_sendmsg_nosec+0x14e/0x190 [ 531.460552][ T5615] ____sys_sendmsg+0x54e/0x850 [ 531.465827][ T5615] ___sys_sendmsg+0x2a5/0x360 [ 531.471008][ T5615] __x64_sys_sendmsg+0x1b1/0x290 [ 531.476458][ T5615] do_syscall_64+0x166/0x520 [ 531.481560][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.487963][ T5615] [ 531.487963][ T5615] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 531.496549][ T5615] blk_alloc_queue+0x544/0x690 [ 531.501822][ T5615] __blk_mq_alloc_disk+0x194/0x390 [ 531.507441][ T5615] nbd_dev_add+0x494/0xb60 [ 531.512381][ T5615] nbd_init+0x168/0x1f0 [ 531.517056][ T5615] do_one_initcall+0x250/0x870 [ 531.522337][ T5615] do_initcall_level+0x10a/0x1a0 [ 531.527796][ T5615] do_initcalls+0x59/0xa0 [ 531.532633][ T5615] kernel_init_freeable+0x29d/0x3e0 [ 531.538339][ T5615] kernel_init+0x22/0x1d0 [ 531.543175][ T5615] ret_from_fork+0x514/0xb70 [ 531.548276][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.553548][ T5615] [ 531.553548][ T5615] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 531.560767][ T5615] fs_reclaim_acquire+0x71/0x100 [ 531.566214][ T5615] __kmalloc_cache_noprof+0x61/0x600 [ 531.572025][ T5615] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 531.577819][ T5615] mptcp_sendmsg_fastopen+0x17b/0x540 [ 531.583746][ T5615] mptcp_sendmsg+0x1a4a/0x1cf0 [ 531.589019][ T5615] sock_sendmsg_nosec+0x10f/0x190 [ 531.594561][ T5615] ____sys_sendmsg+0x54e/0x850 [ 531.599829][ T5615] ___sys_sendmsg+0x2a5/0x360 [ 531.605012][ T5615] __x64_sys_sendmsg+0x1b1/0x290 [ 531.610465][ T5615] do_syscall_64+0x166/0x520 [ 531.615565][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.621965][ T5615] [ 531.621965][ T5615] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 531.629767][ T5615] __lock_acquire+0x164c/0x2de0 [ 531.635130][ T5615] lock_acquire+0x115/0x350 [ 531.640137][ T5615] lock_sock_nested+0x41/0x100 [ 531.645410][ T5615] inet_shutdown+0x6a/0x390 [ 531.650422][ T5615] nbd_mark_nsock_dead+0x2cb/0x550 [ 531.656051][ T5615] recv_work+0x1cee/0x1e10 [ 531.660979][ T5615] process_scheduled_works+0xc3d/0x1630 [ 531.667036][ T5615] worker_thread+0xa47/0xfb0 [ 531.672142][ T5615] kthread+0x38b/0x480 [ 531.676715][ T5615] ret_from_fork+0x514/0xb70 [ 531.681815][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.687091][ T5615] [ 531.687091][ T5615] other info that might help us debug this: [ 531.687091][ T5615] [ 531.697557][ T5615] Chain exists of: [ 531.697557][ T5615] k-sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 531.697557][ T5615] [ 531.710313][ T5615] Possible unsafe locking scenario: [ 531.710313][ T5615] [ 531.717843][ T5615] CPU0 CPU1 [ 531.723194][ T5615] ---- ---- [ 531.728539][ T5615] lock(&nsock->tx_lock); [ 531.732944][ T5615] lock(&cmd->lock); [ 531.739427][ T5615] lock(&nsock->tx_lock); [ 531.746344][ T5615] lock(k-sk_lock-AF_INET); [ 531.750918][ T5615] [ 531.750918][ T5615] *** DEADLOCK *** [ 531.750918][ T5615] [ 531.759041][ T5615] locks held by kworker/u9:2/5615: 3, last CPU#0: [ 531.765446][ T5615] #0: ffff888022b4f140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 531.776658][ T5615] #1: ffffc900045efc40 ((work_completion)(&args->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 531.788648][ T5615] #2: ffff888076b42268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 531.797943][ T5615] [ 531.797943][ T5615] stack backtrace: [ 531.803813][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 531.813251][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 531.823291][ T5615] Workqueue: nbd0-recv recv_work [ 531.828223][ T5615] Call Trace: [ 531.831487][ T5615] [ 531.834410][ T5615] dump_stack_lvl+0xe8/0x150 [ 531.838993][ T5615] print_circular_bug+0x2e2/0x300 [ 531.844009][ T5615] check_noncircular+0x12f/0x150 [ 531.848946][ T5615] __lock_acquire+0x164c/0x2de0 [ 531.853787][ T5615] ? irqentry_exit+0x218/0x920 [ 531.858544][ T5615] ? lockdep_hardirqs_on+0x7b/0x110 [ 531.863822][ T5615] lock_acquire+0x115/0x350 [ 531.868312][ T5615] ? inet_shutdown+0x6a/0x390 [ 531.872993][ T5615] lock_sock_nested+0x41/0x100 [ 531.877753][ T5615] ? inet_shutdown+0x6a/0x390 [ 531.882425][ T5615] inet_shutdown+0x6a/0x390 [ 531.886919][ T5615] nbd_mark_nsock_dead+0x2cb/0x550 [ 531.892020][ T5615] recv_work+0x1cee/0x1e10 [ 531.896435][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 531.901102][ T5615] ? __lock_acquire+0x1511/0x2de0 [ 531.906115][ T5615] ? __pfx_recv_work+0x10/0x10 [ 531.910873][ T5615] ? rcu_is_watching+0x16/0xb0 [ 531.915628][ T5615] ? process_scheduled_works+0x97a/0x1630 [ 531.921336][ T5615] process_scheduled_works+0xc3d/0x1630 [ 531.926890][ T5615] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.932860][ T5615] ? assign_work+0x3cf/0x5d0 [ 531.937439][ T5615] worker_thread+0xa47/0xfb0 [ 531.942034][ T5615] kthread+0x38b/0x480 [ 531.946087][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 531.951185][ T5615] ? __pfx_kthread+0x10/0x10 [ 531.955761][ T5615] ret_from_fork+0x514/0xb70 [ 531.960345][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 531.965448][ T5615] ? __switch_to+0xc89/0x1420 [ 531.970117][ T5615] ? __pfx_kthread+0x10/0x10 [ 531.974694][ T5615] ret_from_fork_asm+0x1a/0x30 [ 531.979457][ T5615] [ 532.007972][T23145] netlink: 'syz.4.4321': attribute type 4 has an invalid length. [ 534.237862][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 534.717635][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 536.877734][T10754] syz_tun: left promiscuous mode [ 537.278057][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257