last executing test programs: 10m40.767587718s ago: executing program 0 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='b *:4\twww'], 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close(0x3) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000000)='/dev/net/tun\x00', &(0x7f0000000040)='syzkaller1\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) syz_emit_ethernet(0xfc1, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40040) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) 10m38.520228989s ago: executing program 3 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x1a, 0x4008001, 0x80) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) r6 = socket$kcm(0x2d, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$bt_hci(r6, 0x11d, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000280)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000003c0)=""/225, &(0x7f00000004c0)=0xe1) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 10m37.149420177s ago: executing program 0 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350e05006304d9002400128009000100626f6e64000000001400028008000200", @ANYRES32=r1, @ANYBLOB="0500010005"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x68) 10m36.928801463s ago: executing program 3 (id=161): r0 = socket(0x21, 0x80805, 0x11) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x1b8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x89, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x10}, 0x287, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x1, 0x2}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x8, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=@in={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x20000880) sendmmsg$inet_sctp(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=@in={0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x30}], 0x1, 0x0) 10m35.276904686s ago: executing program 3 (id=165): socket$netlink(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0xffd9, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) 10m34.864852393s ago: executing program 0 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 10m34.54745143s ago: executing program 3 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000006900)={0xa, 0xe, &(0x7f0000006c00)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000006c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006cc0)={r0, 0x0, 0x36, 0x0, &(0x7f0000006d40)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000301", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m34.484468534s ago: executing program 0 (id=170): writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000080)}, {&(0x7f00000197c0)="1902", 0x2}], 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f00000000c0)=0x4c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 10m34.090810835s ago: executing program 3 (id=172): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000022c0), 0x8, 0x10, &(0x7f0000002300)={0xffffffff}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006a0001002dbd7000fbdbdf25000000000000000008000100030051"], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x810) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x31}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000001680)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e171200000000a44340e5a252cba6cd0800e2649fcb61c2bcfbfe672bfd3a9b863ffe8a", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x40000c4) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, @none, 0x7}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0xe, 0x4, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000090000000000000008000000911175000000000095"], &(0x7f0000002500)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000003e00)={0xa, 0x3, &(0x7f0000003ec0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x9, &(0x7f0000004fc0), 0x8, 0x10, &(0x7f0000005000), 0x10}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001700)={'ip6gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000001740)={0x11, 0x6, r9, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001780)={@mcast1, 0x45, r9}) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @private}, &(0x7f0000000340)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000003d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d00)={&(0x7f0000008a00)={0x1450, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x1130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "168063d6fe1bdcf83bf0ff4b107ce8808c4e15102ef45c81539386af5270406fbddaf09bc98844e8bf79723b0b5ec7c44baa6a31760c536b825093155bc5f9cf2de798698c41b225d5166414bebcaf382238a0a398751f908ad436d71eb383c3439e71d8899c19bf74c8d8184eb0751f124b95110b6123fd0423f39f7cb1805995217d2fa23e99838e610f0338436679999a247018"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "f54131db56058830fdcb37afb387207fbeadf75be0f5cc269f45e72a1ce0aa920365b159dfeaafe5803885e2d5a4f70b888d201ddf6916b166d7f076a5f31caee1e45ea21311224010212e5fbced7f2e105c347c7d9218829df85102f7e9bc311a86590bb2c7526f24b93e96ad3091236faa3e8f75"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_MODES={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x236}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xe9, 0x3, "010b36fbdc2e596738c8b0d4af23cfbad637bf50fb9d1ee1dad98ec3ca7108c3450eecaf87ae7873b233a5e5b81091742c62435b7cfd12e1d3f1f6abb7e0e2072a1767b28b9fee42cf0b6145a26828670783dc0fd6792d068ed882fe7b38584e8daf61bc943d955b0dd25688efd7c630e6ef1e56a286630936c4c6a5a13d11d9cffcaf81a50f8541497578b8f325f2a018d8f302f349db0c6ed5e129bf411219ac1fbbe3832bbf1a9709915c96a6451573afd601306eb18c7ec5f5064780fd8a08e7dfc778a29bdfe7f4fd1ac468b056d1b7a5ec1333ce754880f78e996fd84f3d8bee149e"}, @ETHTOOL_A_WOL_SOPASS={0x12, 0x3, "a0a6f00b984795b2a98aa9982b6a"}, @ETHTOOL_A_WOL_MODES={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%)*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xf3\xc3*-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.^\x00'}]}]}]}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20000008}, 0x80) 10m32.545555348s ago: executing program 0 (id=174): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204907b1ae0ff00000000b7010000000000207b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m32.252690425s ago: executing program 3 (id=176): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000300)=0x1a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000003c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r5, &(0x7f0000000400), 0x8) listen(r5, 0x0) close(0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="100300", 0x3, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}}], 0x3, 0x40488c1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x8, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) close(0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x19, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth0_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 10m30.712842348s ago: executing program 0 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001500)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000001580)={&(0x7f00000015c0)=@xdp={0x2c, 0xa888, r5, 0x109}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001680)="da", 0x14}], 0x1}, 0x20000885) 10m19.032457612s ago: executing program 32 (id=164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001480)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000014c0)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000001500)=0x4) pwritev(r1, &(0x7f0000001540)=[{&(0x7f0000001580)="00214500002c00000000400600000a0000010a000002005000500000000100001901601009000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f00000015c0)=[{&(0x7f0000002a40)="00214500002c00000000400600000a0000010a0000020050005000000b0100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad08009a3fc36e961e1500e4340cd6", 0xf) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000050a0300000000000000000000000002400008800c000240000000000f69dd930c00014000000000000000090c00024000000000000000020c00014000000000000000000c00024000000000000002000900010073797a300000000020000000030a010200000000000000000200fffe0900030073797a32000000001c000000020a01010000000000000000000000080800024000000002107b28f4deafbdf6e81400000011000100000000"], 0xc4}}, 0x20048000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000002f00)={&(0x7f0000002f40)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002f80)=0x200000, 0x4) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000002fc0)) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000003000)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000003080)=[{&(0x7f00000030c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f0000003140)="14a3db2a", 0x4}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003180)='memory.events\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000031c0), 0xa2f01, 0x0) syz_80211_inject_frame(&(0x7f0000003200)=@device_b, &(0x7f0000003240)=ANY=[@ANYBLOB="84000f000802110000010802110000010610000055006ef5623e820684ee6c761e7a31833f27c7d9ba7534c36a90fd4945c2010f54c479dd66834543bb6ff58e496c1d286e46e35a3249d7ffa01165a93dd92c8c43440e7915a6972dc37b80f5ff4fd1193916e2af2e9b1d893898a4a1"], 0x1e) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000032c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000003300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000003340)=ANY=[@ANYRESHEX=r6], 0x50) 10m16.850051231s ago: executing program 33 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xe, 0x0, &(0x7f0000000580)="000000000008000073a8ecb2c344", 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 10m16.425629766s ago: executing program 34 (id=176): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000300)=0x1a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000003c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r5, &(0x7f0000000400), 0x8) listen(r5, 0x0) close(0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="100300", 0x3, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}}], 0x3, 0x40488c1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x8, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) close(0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x19, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth0_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 10m15.023888814s ago: executing program 35 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001500)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000001580)={&(0x7f00000015c0)=@xdp={0x2c, 0xa888, r5, 0x109}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001680)="da", 0x14}], 0x1}, 0x20000885) 8m3.326592115s ago: executing program 4 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000340)={r2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000000940)={0x1858, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x2ec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2b0, 0xd, 0x0, 0x1, [{0xd, 0x0, "4231cf82253abb57f4"}, {0xfc, 0x0, "2e556d81e6563896ba7c49a9f6908b877a2a8c1eccb05f444db7adc7fee98def1e01481c8c78c394b3ca37b427acc4a6ecfddf397bbe5cd2471b5e6bb82c945eb3ecf6ef62eaa04aa4fbebf3c00ad2e535016d5b0e95f48145710ae4b5a860f2e10b58b4a4855aac707e12ee7cbcea71962b37e037f372762ebbf9d2f732819f3114d5e98a924f0613a7d2bab2f80aed3ca162dfc50d44666b78b06f3e3b9cd717454167998c0e375dcaf0e31853f2cb0fbc22239428cf24b0bd574c5d8c6611ab8996590582516386679056a06c3234a72fd658dc9fb1821d40bd0bee9e2a6955a0951405ab612c6fe213b02283697e236a60cd125d3a5e"}, {0x7b, 0x0, "e25f5cc49c14ee69cd93ca168004286f10a24c1e584f2d07dc373ee5754e5c709285e17294db8ff5d856a966f11d2d03d0200cfb5c8dd3c743b153b87e7a49dbdd937a8cea9777fba07c7189238caab2b713ca565b67b955b7cc319b8ccb7110ad5e88a2be8afdec91577f8dfe3fd563949310c8177513"}, {0x29, 0x0, "1553232785f086b316603440ecd030898bd0adf827a4539f41d66a371ac97ea17d12622622"}, {0xf7, 0x0, "1e500892cdd12767b20d09556fa637058415c30d21e806f42fdd88ed893bbb014816cebcfd8386f5c295fdf27e1b0e5d665ec46f696744ff20222f2c13fb64c565659822f695657653c8ae61dee272760371aa3d78efff6c23b1c85815b2b253963052a1a1e5c19add47ee9293af925a4c217c65525d0bd7bc24f84b5cd44253871fec36758b794a6d5366deef9d166ab2c9afef19147f49b56b8dd0f1f8df97f1aaa7f90100712098fd492d0283cf1b67fa21db38c87d5d528481af4120c3dc4d108e4d87aee536c1019c34d9b22fdd57ad4bd5a4363ac53dbff083b1121134018ca0bce9035cca7bd0eb2cdc849250dcf39c"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x52faef4d}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x1370, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1364, 0xe, 0x0, 0x1, [{0xb8, 0x0, "5d448a73aaff8e6f45d5b48f6586792324d90f907fe19a43dfe38577a49368d2d4d5e8bf0076515e3d0ef76aad003e1c46eb5fcf72dfebb9ee627829572cf28cab9a3027d06e53b54985380c7ed0338f322a705d2adc5ffc28306b39d40cf35c59adaa4fe506b5586c67987a5ca5f19e97bd85348debf2b8cda6cd6326cdce996ff1e42a47cc32fcfd42a754877ea76d8ebed32f04f43b965468c80ee0fd7f0da0e4fb453ef374687ea5a5596365b9c71b0a4c7c"}, {0xdd, 0x0, "93aa3fed57dcb3a74f87ef200a00fb44fe827fcb80aa3b32faea930cc417d67fb16fb1ed7ec44ef012c9d13fa79593f31f1bf7dc4dad9b15a7dc260cb9ce77892a511499693c64695b2f02c22c6d00239c24d45ed2ab0ca77c95920678d1b5d7f7e2bee4d42cb029a8efd39da0caa0370ec00e652dce23d41cebb67cfdfad85300a3f55c2b1b4c7aad4a243edc4730b80e84a7556a2857511100c949c703b82c9d4ee76d5cb2a505369b1a9aa3cb5f694ce13391eabea5b0f0defdf086ec77f34aae860cef5583f8e4df029adf49fe9089cbc5ae82a210edf7"}, {0x5c, 0x0, "ac466b950d32761bbed84087821f1e09bbe00ad455ded2f65fa5928ea33e3ff4e68916a2ee8665e888e383046d58a7d6c6982b172bef2e77a090f560153da8b9e63106001eb4a433da1889a83668b1fb529cbc7160359e90"}, {0x6d, 0x0, "8e29abf15d6fef0623b8d13febf19a78e52405b76f1104de9af2a9d296a2b0076730a6fa72f5091ddcdb7aa80aaa31da1cdeb8acc1f55250bb1c4f2a9cd3b25e431b3fc595a8fa8708e9e241bf0d5874fc68b6773040f5ba927fbf0d4462a5f8efc1ed802f6a27b1c3"}, {0x1004, 0x0, "84aac8d837498ee12cb36de680d77f15c61afc35e6ab42eec385c7f9bd927b99afde7442e42985eab55b864b0c9b6f58b451e28699376008b222f1a10f4daa1d1ee13fb372a1317f7713de66064de8499eb25f7e1a32ec4c43a861d12f4f0d4fe174a9f498604d2190ff947804804568b892594b5fa36d668e3ef9bdc8e791741fa8e26fa4b628d95a889c5c12c298ecb9ac2ba44750ba64cb515db5ac30ba7f37dc5d0292299702c8526cdc80ed4a376e0a862e5fde4b1a51f13577a651211d92d111682beaf8f475d49e8716ada2f53d3d9f33b4375e30a740ce7f6b3f3d65a5f206d8ae33e4b09fd6d5b585f7e89b33642ecbdf3fa182548f23cfe42868736568255cc2101c543f86846fcac602316e8b22998d0f41719f11879a97a97f6ee864bbc6d51eba02fd28b2951d91ae67502bdb6e1a382929e01187a2978748b97df22e29b65146e5af088c1af8605eaae668a8436c9f3e7f66e56f910c0c83846339552bde837ecd7fd5931f77df3feb4cd2fa956c8babfca89defe9fcfc65256a5372a24af02d382b3dc19bcdb5dfa2447f653b1beb22bde78dffb81aeb031f6fd8cb3460275a8ebaa924531452c24922751c51e81c403af14fb8546563704ea5c7b25cf5f80a6346401fad1836468233cf79cb4e5df1f9122979d1612f374b2ca6ee9a8650f4cf90dcdf5f55ee31dbcf331bb1ca0ca2d3b7c38fa6f570e88314198933824f51a560ef81cda27acb197bcd99cc57340625711c61ff17d571330b8b69da464e0493c25b2dd6c5347d31cc2b80fb8b6ac7b48a051295d7dd9f06db4c9391e54b791ee3739146afdbeaeeb26cb41ba9e6bc6e9773c6ab9f943de355af40e08cfa806b32d3ccf0688b224a9f5f6e3cd62072415347cf50b2f378efc9c015dfbff27660582ee8fc846b5519764cd90bdaabf8df5a1dded0e878d3fd838432d8dc4d6a99d1c5f305050334a1d1ce57e6674c739e371c7b53a322a2a4bdcc6ab4b1363ed13a85c7bcd5aacb29e1fe121200625f99a13ffee795a9aa652a163f1e8176364b81af858b94fa1bf1f8574b36eb40b5bf21ee928c8f106d68b82c36aedb610e6a2523a00f943fa8578d9b48e912ce69a2969566271fc4985dea8d35c5b74f287bfa0fa477acbacbae71abbf1e12a57fabd490da9816029a2224d3042f2e701b678b5fbb978cbf79d36b091773d187cdcdad0743766f184f4f56d7c9762cc63afbf41be39171a2c5ab6e7848ceefcd6b207dba6d6399e8fa0aae5a25435b90236f6a06ddece2605ac81ba52f3018e81b5672e0d08084cd24d20ca575905d2190a8e7e637d7314722b9662cc79e771bccd17f4156ff12898798da27f9356ae51af373ca3cf233e30def76b862d6405d33e66f296ec4b93bd0367c53a15d022d9a8ad662dacb9d744cefe58f515b09a4341dd881679f77971a8ac9c38bab5d45cf70684641a6de525a8fddd57d1fcb1b9cffbade780572058e4e1e40f83de21d31afe3b6437e5e6546cb2d63588423a8493ba473e105a6e405f7555f46456e06741087b3f0308647de69563f85ce3bd043d32b1a06b00875428eedf43d9ac3232c2ebc2fd5e5f03b31cb1df0a320ab33ecab17551afb66e2d5d137d8538f1cf3612d7baa913397161ac7362e55b1ae2245ad757c9bb4ca81673515af37147b9107ffc90427805c6ebbd63fc1c01f76198f271bae92d76b6e2b7868a70c5399f787ffa54b31be8b34d327f74863cf55dc276e3b421aeee5acd2d7af8b9721c8b6be8c145726f22f0e544682555f7b08fa0df5a8b532c3447072cf7318682ea8743e06e3cc876da2ab38ec5820a9f3f8d1e3078ce399e5c980f6175c488a2f5609edd685819a4eb03e2e6f4d3152f8a041b6d2efe19ed82808cb71e16c82dafb59f3cbea2afe7500c2d5fe4ea095318624c596fe193f7f41f4af96958cee602f493b69f7cc2a9bf0b1ccd02935de50682cc6c3c32357f4aa89991b5853b55b70d3aee6babbcdc7b53191477cf6f665349c9e35be5643a73531393e9a3a5e8321c98ad00c301328734355d33f2c22089c495eb5060c7a9798acbe12ae0937ede6b0158343fe3f0479301a9af0b175fc21041704ba12aecba6853f82821d8cbe60784c9174182ffc4f4074ed7cdfbbb00ae30c316ce5d8aabf53e061ecf8e6bd9c99a2f5dce08c640b662ad8fc3bb6df4a7545bd4739cb99f62a431313525513d813c457d1c9d6ccc8d66f6cd0be1eca8c89ef5c00f34553898074aac3ee8e54263acc8d35c9ad3b4c75f8b10033c88c7e3077cc4c52ca760c1a4c9fc1da4cf37755942edc40c01dd19b838d6c12acb97ccb49f54770d19da07effeb102173c06d99dca97a07a2b55af054c67fb1d7d803ba0f535a9cc174acbb29e7a6c33b656ba8ac26e8ae87caee139b8f7e1f089954649cb5eb13e01b9db6d142c87dc7e52bc9771be4dbf26bd2c977db02522ae220d35c2dd95ef9a6e64f025172434092ef823293af4b4646e1c04c75b1d7ce3ae1a625c10e10ccfa7eb6758a9db3f4374111e2d535946634187b2a2022ac185dd72bc1bea36eb7f7d236df937f098f4fd7d175ea0879f857cec9513b5b7722abf0ff81ff9aecb7bc789aae1ff868dfe6804b1604b426e67561dec7f7002369974f33307443688cf1acbe456cc969617000bc365a99d3bf6d224506a5bf6bcd45c45a5c21117625899ec8b3dfd5f64202c269a2ce77e1be82dbcfee4c1c63191301236ccb8b18dfcbbd26613633018bd332f785f97e5911c13681b977873cf4c189313faa40282ec8be9eaa301b6c8038e38fce948115aed0cc6a87fb77a6cd2f12f18d3b3f3bd09cf46be5cf2eb8ad9bb6cfba17e9a726afd878967f4768a8742e8eb7f0e9f2f37b771bffe7b00f5bef046c7632f12238403dd389b5b7bfbc9081a0c6e9e2af2bfee0d78dd8295a9aff0eecaf04bde3723128ecd0cf44f505b054efd52ffdb7449edc0d4cd358e83682243d91f618c9e906fced882afeb418eaca8d7c83ea8cd1a6c94240b3f0e7e00630f1280c54cfcc9758d79741a78048abe646797e94656db597655819f7157fa65889b22eeae743ed600e35839ef4c0ce8cb2c6a2c2bd354803507ab13aabb73f4ecdb1a19538542c40b6d7626afc8d0904aac4d24b48cf1edb83217b51d42f6b171e5f1cea01460063422b1643c726fd042c84150453b24e4fcc55981ceb663ac9ef9b0743e1f02a8c493265800691b055c52214b3ab1bd26b015f3d4283cd141ddab4a09f70bde18f12aa7d07b8a8b054a1216246d23dd6f70f1552337ea5e859f9bbabc5d41afdc857b3902b543dbad26a1a8862b78959812a3e42128587f5328682857b43fd265f2983fdab272218284afea006e5c468bd727825ddf2eb59fbad62b11750c1ea21f36362600944b732f1b0cc7b0cc79ece376a164b36d01f7d5b3182f78cbc3b7fe9a1b49119c16fa5da894c1ba2a3bc880e2d2dec7eda411aa2b67ac8a8329726cb477bd5a44207737e42f409222901ea8523a0cbcb6c8ec53a055da60bb5f163e228e1e61f19f4c6734071930f8be4c81721010d85cae966a6fbfbf7c2d68e1e3d1872fb36fe675e35ba262022adae51ee7f66670cdac4a7dbbfa16dc56c52542578e77a364457455d85f5c8cd397c7f3943c6e987f18b3f2235a378f4a30a407e0a8df800adb7dae634fbe795700f69ad27e148d8eff3898d810330886761d218a986abbafab583ea776b786fbf74415e11330c071627849f7defc23f25013b46272fe59a836df9c2964561424ea1c1afcc8cbdfa0852a4e1f56dafed3df08b9e06af0c50e7240e538b2f393c2b9848cbbdf99cc79ce5ac37d0a11604a8a0aa10392ce20468a5ce9625a006994ffbda667e3862b5ab73f89c8a96c4d5b982d882c7ca21147753d53fb999c213c14d57bcfb1ff765c5727e78a22a59d7fdebf3fd9bbff5ce54569b2c48bdb82c0adade98ef531db3764c3510d74f5f744eee652851e962f515de6f6bad0be93de348d575a0cabcaaa25c76a57a6ff60ecd9dbeab50868e1084f5b8c33839f72b43f2d7961627795e3b77a775ee77ddd7c0fd589b13a8e8da8944b9aca135ae4b5bd2623256ec0979cf1890388a17dc35514e87ebdc18ecb5b76bc8a602c3c200151c1151985aad8a82dc66b56d5b197c4017f9743ff7e0fab5dbbdbe6a58243947bf1bcae11935934519ab90d8077336628bc2ccc96921bfdfc530abd7d786da6d65122236171fcd5e635231473cf1c88370ef3dc9df41a76ddd64a96806a38b7488b943981201f133f4ae06c1b1257e4f4037f8708c39b8d56b4c07c5bdccfd9385fa212b873dcf0f6ef951a71166ebc331a52613c4f860bae9cb7705e0718976397388c91db5cf83db1974c954169f2e462afd5687e9d59f68cfb6160d7f81f396b4e0ac5d0c58f9eb9bb4bf2ffcceb96130f008115d77c69aad619c0e9a8a8611ecd8027ab4c39e3020784d0ffa1b9eaff8db19d0224ed11475152d53e415b1d188cab1c6a0dd41f78dfd497ab8650b569b1cdf915b5b425cc39bb154f18a8ba9c4215688cfd0ee3f683ec19be18b9a19d7c4508dd32f48c90423fc507632aba3ead3ffd67137e66365ad9b9916acdca8ac39521cb1a23b5826e976a97f406a4520bbca86d94af911bf5a1618f3e17c0027c0f3a563e81542483a36fbed5017980cf4f20c54d59e82a21da8dbc1759d3e96334d0d8ba675dd051ef2aeabb5e69e98235e757aa3d4b385560ec9b62b0b4fbb3b52ea322d22591ad20d8b67d7ec8602261d4decaf481de171e16fe47c6de6944fa0a12c61af9418e471785c07a897fa1f4326c4d3c4fbaa84b1fb83e978eb3a3ec2646fcaa10d9cce84374cdd64732499a5d67bc4aa47b9ef842362b2b2707cd8513fd624d2f9bac63741a5fb57e2ecb14358f097d2e9d2b1138e2cb188e345d8ca3f625915a8eb0a7470e63c5efd4b2db05a06a248d8018f3ad986c881338ec6ebeb8c29a3ae0967705d9a2cc8edfa4594ffa7337fa10d94459025bf5764b95fb3ab818f26b6cf2ab33b513aa097ca08d92838a802c1d32042a9314fdbda64d65e13cb349bce2d7af42fb52edbaf61cc4a6ddbe90ac80e4c5be3762e26d6db6102a01de781385cee5cb1552bb3c492544e54dc6622d05fdc83330ab618247e73b35606c21a9424a62fad6c78026708bfd6de713bd0a8e6bff5d86320384dbe0de43c867ebd8f73b0652384f923ec73045c7733f3a5bb8265229ad67b248f707b208fab1a2d7afdd0fd04a45649675028365e98cf106ead7af534105f5d87d2f4c3a0d0b6327f4b6ebfad18b2c375bb47527f0201893521391a6e8b85eb56d865fed3a8d7b7bdee2ee21fef389909fe408c8cc8cd2031ac53e228c2a582640adad6f05be98f423cbee9361bb0691c850fe7837b70ce8ef590c594c7ec54775c1b96ad58817206e4d071b8dcddf2c6ad63accf4bb197007bc8140bdb92d787e8b3e8fb10164130b185f5db24e0744691a5e8dceb16f8409373064f92d12bdb8585f9b13df1a86a0b96d77084214f25197180072ca544bdb2cd82f12309b6989b55cc6184e619d5c7d86da08e4abed0711d835fdf5b3142e581791c4f9048df27c6ef8ea5554cc08e8ff18972c30127b58ec90d3ef4370fecde3fe181113dddb6f0ca62bf476329531ff2523bb8f758a7161a887494b2dc04fd6a4297919efeb37eacc249a40e2603a570674cf0f810ef7e3b7998531f71ad725145d2a2a815e1508062b09bc6daf7e49588241a876e154d32c7"}, {0xf8, 0x0, "4f4d15e8a394aef4504f4adc9018b9996a00acd025e9a0a50d759c50a05a73951fa9f7805d10818c994e38f8ee60a168ec26ae37a480d2cd7db38f2f8fb84fc4f7161b9a7b442da644506a6b11cdc76a46ae578a3268f6e35eae325a40b37c8a4d4009c060fbb3fb77854b3cc7737138a6fd381ffeb81865e5c3a74b8eae282223bce4cfb420993274bda04760938e304132ce470354db34761bcbf4c726ac9c11c3fb408ae7809a69e4cfcf59895bb61b8cac5a8379459c8dcf3b9e90ef4ae848f755737406b5658c52a1063124258d6921ef3cba7d11020ff6e0b5ef5f908c254047e2717f698c0f0de793c6cd1d41aa77f69b"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xb}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x43}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xa0}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x16c, 0xe, 0x0, 0x1, [{0x50, 0x0, "fc061ce6b326a917a847d0fdd4c8ef3a4cb2d8caf785a1cc4ee1d3be8dbf60ad18fee0c443fbb13f1a51a8b73fa127013791c4a073deda602e2758bd9d3132427482471c90af00f21b711074"}, {0x3c, 0x0, "0cafb5111b149b68ee5322b765b72356e9869f314477d3e9eb32fc387309a70685707f8499a5d8f29d9b3501afed207dafb20be49835f755"}, {0xd9, 0x0, "b9fc818cf808d8f8bfe9087a6e5f95ea5d93463f545edfda49707d6162973096b11d3af694f666aacccea20819f55a8cc9df641b257c29cc6c40411c797194790bbbf2bd113bd82f485f427bd6b2ccf316f18bd33a02db291ed7df6bf53c4d21c7455bc316d55fb28b1a8cd7a35cf3f3392e59dcaa9b2d7e4fd287165ba70e3fdcb7f6f3877af734b24265e03fbf5e7530db61fbea7d4aca531f7fde106376dc8357c433985c0871a1f69084bcba85070c6daf8f1cf6096ac2380f6081987019bc7f827d43a81843ab787766add8e8854ee226712c"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x1858}, 0x1, 0x0, 0x0, 0x10}, 0x4000002) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x74, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "606bed"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, '+'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 8m1.982081731s ago: executing program 4 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000001c0)={0x6, 0x400, 0x2, @random="90ffe105efdc", 'pim6reg0\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000300030000000000080006000001000005000d000100000008000600290000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0x5) connect$unix(r3, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = epoll_create(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x3, 0x4, 0x0, 0x1, 0x0, 0xb, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0xd, 0x1, 0x7, 0x4], 0x3, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000600)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') poll(&(0x7f0000000400), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000003c0)={0x10}) sendmmsg(r3, &(0x7f0000000400), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r6 = socket(0x23, 0x5, 0x0) socket(0x8, 0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2c048844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7m59.475431127s ago: executing program 4 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700fdff0000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m58.412406244s ago: executing program 4 (id=245): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006780)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x9a, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000020100004e22006490"], 0x0) 7m55.284025126s ago: executing program 4 (id=246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000500)='hello', 0x5) 7m52.401944414s ago: executing program 4 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000000c0), 0x1a, 0x4008001, 0x80) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) r7 = socket$kcm(0x2d, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$bt_hci(r7, 0x11d, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f00000003c0)=""/225, &(0x7f00000004c0)=0xe1) sendfile(r3, r2, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 7m36.312416738s ago: executing program 36 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000000c0), 0x1a, 0x4008001, 0x80) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x200448c0) r7 = socket$kcm(0x2d, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$bt_hci(r7, 0x11d, 0x2, 0x0, &(0x7f0000000140)) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f00000003c0)=""/225, &(0x7f00000004c0)=0xe1) sendfile(r3, r2, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 2m48.113791291s ago: executing program 9 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000780), 0x4) recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800), 0x60}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x100000000000ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000540)={@private2, 0x5a}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in=@local, 0x4e22, 0xfff9, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x6c, 0x0, 0xee00}, {0xb8, 0x4, 0x95, 0x5, 0x101, 0x0, 0x9, 0x4}, {0x9, 0x2, 0xffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x1, 0x2, 0x95cb37eded9a0a23}, {{@in6=@remote, 0x4d5}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x10, 0x4}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000980)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000ac0), &(0x7f0000000b00)='%ps \x00'}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r6, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m47.612456108s ago: executing program 9 (id=1453): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) 2m47.287478023s ago: executing program 9 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000087000000000800000091117f0000efe2fef8646817efafdc0000009500000000000200f9baa86029e1e664689a6a94b8b440e48edcfe5104ab6b95041e0d4160bf413a7cc72a75c4d49f8d7dbef8329d6ba2d262ded1e16bc97ba2b68259c89a60c620a34f49b37d6dd81135a011f62a21cf79356519b4a13005981f5d6810ad3afd00de464fdd5792c7e9d154f0e7b2eef7dae1138d7be5a917b5523da03da616e995539deb719fd796294d50f97906d3dcddf23015042ce41d6606f13931ef4bed202fc1c41d06e38d78931e698491971d377d589fc479bf6ed8ebf924e77e7f95dd181e851956f182f0e70000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) 2m47.094549216s ago: executing program 9 (id=1460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x4, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="bc010000130001010000000000000000fe8000000000000000000000000000bbe00000010000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2m46.842591503s ago: executing program 9 (id=1463): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x14e24, 0x1000}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x44) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r2, &(0x7f0000000480)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f00000004c0)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x3, 0x2, 0x81, 0x8, 0x9, 0x399, 0xe8e, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0xfffffff7, 0x7, 0xf, 0x640, 0x10, 0x6, 0x6}, 0x9c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000d5ec000000e1000000ff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000002c0), 0x0}, 0x20) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) write(r1, &(0x7f0000000500)="02ceb35c11dc56bd55c3bbdfa167c3299550e997c0ffbccf82b610c40dcc546c011243c04013dbe91e63bf4cba855526ed3cbca892396f8304f5ac00c49cc337ed769a5888ac6e89eb51d2489d88db9d0257479fa7d8a2bf377ea874f2069b1fc948bd10bb696a9fb9d97beb847292ed09d1e3b9f4b63ab00b132e0a", 0x7c) 2m46.280473232s ago: executing program 9 (id=1470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x5, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x20) 2m37.884786189s ago: executing program 7 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001ffffff840008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 2m37.778694711s ago: executing program 7 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000840)="4b0003000000", 0x6) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="25f9447271ab0cbc0fa8ceaac04601f8a1722436", @ANYRES16=r0, @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r4, 0x24, 0x0, 0xfff2, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e1f, @local}, 0x0, 0x0, 0x0, 0x0, 0xffc, &(0x7f0000000080)='gre0\x00', 0x1, 0x7fffffff, 0x4}) syz_genetlink_get_family_id$l2tp(0x0, r3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ppoll(&(0x7f0000000700)=[{r9, 0x228}], 0x1, 0x0, 0x0, 0x0) 2m37.551777266s ago: executing program 7 (id=1564): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x18, &(0x7f0000000340)=""/24, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b7050000000000008500000063000000150002000000000081010cff00000000850000005600000095"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) (async) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.39966263s ago: executing program 7 (id=1567): r0 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000040)=""/120, 0x78}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x1, 0x6, 0x2}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x351, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x4e22}, &(0x7f0000000280)=0x90) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000480)={r1, 0x3, 0x8, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x1c, 0x7, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x82}, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000840)={&(0x7f0000000680), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r10, 0xd2e, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = accept4$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0x0, @none}, &(0x7f00000008c0)=0xe, 0x800) setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000000900)={0x0, 0x9}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x9, 0xc, 0x2, 0x5, 0x2, r2, 0x9, '\x00', r14, 0xffffffffffffffff, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000a00)={"8d9fc60736b7da71d9d01c9d9e4b6558", 0x0, 0x0, {0x3ff, 0x53df}, {0x7, 0x4}, 0x100000001, [0x3, 0x34f, 0x8000000000, 0x1, 0x6, 0x3, 0x4, 0x3, 0x200000000, 0x60000000000, 0xe, 0x40, 0x9, 0x7, 0x80000001, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000b80)={{r7}, r15, 0x12, @inherit={0x78, &(0x7f0000000b00)={0x0, 0x6, 0x2, 0x7, {0x5daf8824051295d4, 0xffff, 0x80000000, 0x0, 0x2}, [0x2, 0x8000000000000000, 0x736, 0x8, 0xe, 0x2]}}, @subvolid=0x6}) r16 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r16, 0xc0109428, &(0x7f0000001b80)={0x1, 0x1}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r8) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r17, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x2) 2m36.485530088s ago: executing program 7 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000940)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, 0x0, 0xfdef) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff050000000000f5ff000000000000014f194e20"], 0x9e) 2m36.22535288s ago: executing program 7 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1000000004000087a2e1e33ca0175e92d14307a6221429115a980c9e3d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000fcdfffff850000000f0000009500000000000000eab1b441739491dfcc39e50de5492f4a396db7b45eabc05247ab823d967dff426a27dc1b68c080e5d2"], &(0x7f00000019c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="34000000430001000000000000000000020000000e0001006172705f6361636865000000100006800c001300070000000000001a"], 0x34}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x2000cc0, r1}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001a40), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001a80)={0x60000016}) epoll_pwait(r4, &(0x7f0000001ac0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) close(r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1, r1}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000014c0)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000001700)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050007"], 0x4a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000002900050000000000000000000f000000b3"], 0x14}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x5, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r10 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) socket$nl_generic(0x10, 0x3, 0x10) 2m30.895436796s ago: executing program 37 (id=1470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x5, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x20) 2m21.16760473s ago: executing program 38 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1000000004000087a2e1e33ca0175e92d14307a6221429115a980c9e3d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000fcdfffff850000000f0000009500000000000000eab1b441739491dfcc39e50de5492f4a396db7b45eabc05247ab823d967dff426a27dc1b68c080e5d2"], &(0x7f00000019c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="34000000430001000000000000000000020000000e0001006172705f6361636865000000100006800c001300070000000000001a"], 0x34}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x2000cc0, r1}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001a40), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001a80)={0x60000016}) epoll_pwait(r4, &(0x7f0000001ac0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) close(r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1, r1}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000014c0)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000001700)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050007"], 0x4a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000002900050000000000000000000f000000b3"], 0x14}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x5, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r10 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) socket$nl_generic(0x10, 0x3, 0x10) 8.86084725s ago: executing program 6 (id=3217): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x3, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002d00], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/680]}, 0x320) 8.660129015s ago: executing program 6 (id=3220): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000001300"], &(0x7f0000000240)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="3c1204"], 0x98) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000300)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x17, 0x300}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000006c0)=0x4, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x1, 0x40000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xb, &(0x7f0000000940)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r7, 0x0, 0xe, 0x0, &(0x7f0000000a80)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r5, &(0x7f0000000700)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}], 0x30}}], 0x2, 0xf00) syz_emit_ethernet(0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="66e2baceef06ff00000000000000"], 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)={0x0, 0x3, [0x7d2, 0x821, 0x195, 0x3ec]}) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0xa020480) accept(r12, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 7.934934494s ago: executing program 6 (id=3226): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000180)={{@align=0xe4, {0xfffe, 0x7, 0x800, 0x80000000}}, {{[0x7, 0x3, 0xffffffa2, 0x3790]}, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000100)=[{{@align=0x1ff, {0x5, 0x2, 0x3, 0x26d}}, 0xffff, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0xbfe6]}, {0x77, 0x92b, 0x5, 0x9}}, 0x81, 0x0, '-\x00'}]}}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@generic={0x10, "882d54a81788715b64a7de6fe4b9b0f7263a8441c2921a9b3e074ab35e8f0018ce3f38b14ce998b35b82c5329d70273754d7f650046532b928e558fe52fbc6756f9c38be8aad8aa94c796468bfea1e77f3e4351fec2dcc1c849c67"}}}, &(0x7f0000000340)={0x1, 0x2, [0x2c5, 0xa, 0x81c, 0x630]}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000ffdbd8e273120ca0d4ade5190534de5ad4bff4d21200"/35, @ANYRES32=0x0, @ANYBLOB="4db2020030790500140003006e657464657673696d3000000000000034001680300001802c000c80140001000d000000ff01000000000100810000001400010008000000900700000600000081000000"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x804) 4.972196544s ago: executing program 6 (id=3230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000006900)={0xa, 0xe, &(0x7f0000006c00)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000006c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006cc0)={r0, 0x0, 0x36, 0x0, &(0x7f0000006d40)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}, 0x50) 4.843572515s ago: executing program 6 (id=3234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r2, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001300)={0x0, 0x2, @start={r4, 0x0, "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", "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"}, [0x1, 0x8000, 0x0, 0x12, 0x5, 0xb, 0x1, 0xc49f, 0x5, 0x2, 0x3, 0x733a4e6f, 0x2bc00000000, 0x3, 0xe55e, 0x0, 0x8000000000000001, 0x1ff, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0x1cf8, 0x2, 0x2, 0x9, 0x4, 0xcf, 0x3, 0x6, 0x5, 0x7fffffffffffffff, 0x80000001, 0x1, 0x1, 0x8000, 0x6, 0x9, 0x0, 0x4, 0x6, 0x81, 0x8a41, 0x2, 0xa, 0x4b, 0xfffffffffffffffc, 0x7b62d339, 0x2, 0x5, 0x9, 0xff, 0x28, 0x6, 0x7, 0x4, 0x200, 0xd, 0x7fffffffffffffff, 0x1, 0x7, 0x6, 0x2, 0x5]}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00\x00\x00', 0x3}], 0x1}, 0x4490) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1, &(0x7f00000006c0)=""/185, 0xb9}, 0x22) close(0x3) 4.668030326s ago: executing program 6 (id=3235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="000008004500002012340000402f54970a0000010a0000023039"], 0x24) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000080000ff000000970800000095114e0000000000950000000000000096e9914b7565eb8224573873a0e0dbe96df23304a271a17f20e675d43cf8720ae34b2a854a1a4ec2e5e819c6aa87abb687484949ea22ed490a3b844decd6f9592f5f4c57bc265b0a92810bc30cda08346f60d2d2f8f79825289c0ef75606c3b5b39f4b15c3c074ebfc6c0b82de21877f3d3064000000992a31093c2bab71d2b0907132d25ce728d8bb2c8619ebf13eae62336802e505c253c07ef75f32320bb592b818e14ec5ae586a656cf4573e6ce486e171475419"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r7) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000400)={'virt_wifi0\x00', @multicast}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000440)={0x4}) (async) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000140)="480000001400190d09004b", 0xb}, {0x0}], 0x2) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x2, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r11 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, &(0x7f00000002c0)='/dev/net/tun\x00', 0xd) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) 3.204510759s ago: executing program 5 (id=3252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000100)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x47}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400b996094248f99876906414000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000300"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000240)="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", &(0x7f0000000380)=""/46, &(0x7f00000003c0)="0f606e2e642375acf088014bb271db394382b396adee787ac191f885ad133b37d80476feeb74d8ac82f7a187fb64c1377e05457b438ab001f0b93d3c91155950065ae5524c77022fe03a20163f42c61d951173abc7341e3f572a164434244c59c6a2e877a4e7f6060e4be55212fe00db24a372729782d1328e1d1cd87a6e4179307abf4132d806857fe3749dcd5463d8139d80036b59a938e756038f4b20fa6632cb1666bc6c67ab588346d9d2c24a8722047bf6e28df6bd952761d25c11529bad4c9eb1835b2146ec374ade", &(0x7f00000004c0)="0c7f7ed37ca0cc0955e72e21feba95554056c9600da608d8b3532832831d25b1a92a8abea804fdfac91718ec03c9047bc7eaf88c051c313c75f59decfc15274f78bca5464ac255c2573ac6d0bb4597539a82f3dc31cd067427cc953183dd8961d1e22636113bc7eb6f48bbca9609a36c4af0b41e1f37bda78f7d5df850", 0x29b6, r2, 0x4}, 0x38) (async) r3 = socket$kcm(0x29, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000800)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15c, 0x15c, 0xb, [@datasec={0xa, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x828, 0x3}, {0x3, 0xd, 0x5}, {0x4, 0xffffff00}, {0x5, 0x1, 0x1}, {0x2, 0xbe, 0x6}, {0x5, 0x5, 0x2}], "067297"}, @enum={0x5, 0x9, 0x0, 0x6, 0x4, [{0xe, 0x2}, {0xc, 0x5c6}, {0x9, 0x6}, {0x10, 0xf}, {0xa, 0x4}, {0x3, 0x1}, {0x7, 0xd6c4}, {0xa, 0xd}, {0x6, 0x1}]}, @int={0xd, 0x0, 0x0, 0x1, 0x11, 0x45, 0x0, 0x1, 0x2}, @union={0x8, 0x6, 0x0, 0x5, 0x0, 0x3, [{0x1, 0x0, 0x1}, {0x5, 0x5, 0x9}, {0xb, 0x2, 0xfffffffc}, {0xf, 0x5, 0x4}, {0x1, 0x1, 0xff}, {0x6, 0x4, 0x6}]}, @datasec={0xf, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x9e28, 0x1}, {0x2, 0x8000}, {0x5, 0x2, 0x9}, {0x1, 0x8, 0x1}], "cf"}, @var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x30, 0x2e, 0x5f, 0x61, 0x0, 0x5f, 0x30, 0x5f, 0x30]}}, &(0x7f00000009c0)=""/122, 0x17f, 0x7a, 0x1, 0x1, 0x10000}, 0x28) r10 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r10, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f0000001280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r0}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)='%+9llu \x00'}, 0x20) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0x0, 0x7, 0x8}, 0xc) (async) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.events\x00', 0x275a, 0x0) write$tun(r17, &(0x7f0000001280)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r17, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x10, 0x16, &(0x7f00000014c0)=ANY=[@ANYBLOB="61123000000000006113340000000000bf20000000000000160003000ee600f03d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee60070670200001f00000016030000feffffffbf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xa, 0x1b, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x58}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @generic={0x4, 0x0, 0x0, 0x2aa3, 0x8}, @generic={0x0, 0x5, 0xd, 0x2, 0x10000}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x1, 0x1, 0x5, 0x1, 0x6}], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x3f, &(0x7f0000000780)=""/63, 0x41000, 0x4, '\x00', r8, @fallback=0xf, r9, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0xe, 0x8, 0x3}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f00000012c0)=[r12, r0, 0x1, r13, 0x1, r15, r16, r17], &(0x7f0000001300)=[{0x0, 0x4, 0x9, 0x6}], 0x10, 0xa}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 2.907306563s ago: executing program 8 (id=3254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000006900)={0xa, 0xe, &(0x7f0000006c00)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000006c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006cc0)={r0, 0x0, 0x36, 0x0, &(0x7f0000006d40)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000001000000000000000001000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.604184307s ago: executing program 8 (id=3256): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x7, 0x0, 0x0, 0x7, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x452, 0x0, @loopback, @private0, 0x8, 0x8000, 0x4, 0x371d5bc3}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f00000019c0)='GPL\x00', 0xfffff7fe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x0, 0xe, 0x0, &(0x7f0000001a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000300)="ff548dc72d2329fa017f8760bf1188c4", 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0xfffffffffffffffe) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80000, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) 2.543572806s ago: executing program 1 (id=3257): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ffffffff3f7a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.416860343s ago: executing program 8 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000000000000000ff0f000085200000ae48030095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x10b, &(0x7f0000000e80)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@llc_tr={0x11, {@llc={0xfc, 0xf8, 'd', "5b71209c3a41dae55d168fd83be867b25d7d54e9c471c67e8afd099da5537277581ed0419a3bc335c12ff9407dc2362efa03bbac7e5aa8e56cc43e0fa47bab9df58ab88b875c2348488ecb1de53360528974de4edc02f8358f75526e0c552ad48ce1d44fa0b2b59b2f8299a5e3abb6fb842fae9251ef8b6f47b4b494c25baf5509cb5c8e87bd394a227713ef64b1faf4c63aaa7c02cda1d313faada65ef902981e52b72e7eb3a2b7a78c895fb64f7e771a5ad58e5eeddeac1b9e193ae88dca66eaec3f9f1fce6cbbb080cf3428740af64e7a06ba17e9b1db4a6cee2c41a30af8cb2317a3ffefcd27feabfd859546828c6dc0bff0a08291e1cf2f"}}}}}, &(0x7f0000000340)={0x1, 0x1, [0x5cd, 0x80006e2, 0xcf8, 0x4df]}) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) recvfrom(r0, &(0x7f0000000b40)=""/42, 0x2a, 0x40012002, &(0x7f0000000b80)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a000000000000a54605cf9c91f85687a99203d53133a104fe86cf1232da36eba06c3cacaf67585841d5b457c94cd9598b76b606464370d87715b5482b05812cdce6c070a0fc9e82be08a253fcf849b104a66cf4ba1f2d40f55c5537bbb266ff99615f0ffa5bba9e44483f1c925d"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f0000000240)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) sendmmsg$alg(r0, &(0x7f0000000540), 0x492492492492627, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000009c0), 0x56) sendmsg$kcm(r9, &(0x7f0000000a00)={&(0x7f0000000a40)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8804) getsockname(r0, &(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000005c0)=0x80) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000600)={0x80000000, 0x40}) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008885}, 0x0) 2.280574976s ago: executing program 1 (id=3259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x88c0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffffffffffd5) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000400)={0x0, &(0x7f0000000440)}) writev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="1a5a84648bc61793438471d9944ff308c10dcf4e661c88eb7c3989451fb8861c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f00"/102, 0x66}], 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8881) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="38010000100001000000000000000012fc010000000000000000000000000001fc0177000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="180000001ca41d9223c45c46bd00000000000000"], 0x18}}, 0x0) nanosleep(&(0x7f0000000a80)={0x0, 0xbebc200}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000ac0)=0x1) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{&(0x7f0000000bc0)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80), 0x1}}], 0x3, 0x1c000) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000cc0)=0x1) 2.147670808s ago: executing program 5 (id=3260): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40082) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250c000000200005"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066747000"], 0x90}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r2}, 0x14) syz_emit_ethernet(0x102a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) 1.650150653s ago: executing program 2 (id=3263): bpf$PROG_LOAD(0x5, &(0x7f0000019e80)={0x3, 0xc, &(0x7f0000019f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000019fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.621041396s ago: executing program 2 (id=3264): r0 = epoll_create1(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2006}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x8, 0x1000000}, 0xfffffffffffffd59, 0x10, &(0x7f00000015c0), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$packet(r3, &(0x7f0000000540)={0x11, 0x1c, 0x0, 0x1, 0x47, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x178, 0xc, 0x160, 0x178, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x242}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0xa, 0x44, '\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0xe22, 0xffffffff, @mcast1, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="a6", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x40880) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) preadv(r7, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f0000000700)}, {&(0x7f0000001980)=""/213, 0xd5}], 0x3, 0x5, 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000780)={0x60, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xe8, 0x11, 0x1, @private1, @mcast2, {[@srh={0x21, 0x4, 0x4, 0x4, 0x8, 0xc0, 0xbe, [@local, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0x4, 0x4, 0x1, 0x40, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x87, 0x0, 0x4, 0x0, 0x7f, 0x20, 0xfa4}, @hopopts={0x11, 0x2, '\x00', [@pad1, @pad1]}], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "eae24e197aba9b2ef7009459ea4376e7d4b597d2b697cbdf", "14859840c641a632226ae39943eb69277043785f79f4d0a2f97c30c7f1ac419f"}}}}}}}, 0x0) 1.578616268s ago: executing program 5 (id=3265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket(0x28, 0x5, 0x0) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000000300)=[{r0, 0x9200}, {r0, 0x6000}, {r1, 0x1000}, {r2, 0x10}, {r0, 0x1480}], 0x5, 0x18ad) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="e977e82a0d0f0b11c3e35739287f", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.550628576s ago: executing program 1 (id=3266): r0 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0xfffffff, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.191076702s ago: executing program 1 (id=3267): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) write$tun(r0, 0x0, 0x22) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xffffffff, @local, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x4, 0xa34, 0x0, r2}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x1}}, 0x8, 0x2003, 0x7, 0x38, 0xa}, &(0x7f0000000040)=0x98) 1.190554115s ago: executing program 2 (id=3268): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x3, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002d00], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/680]}, 0x320) 1.070783059s ago: executing program 2 (id=3269): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000018e040000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 789.935706ms ago: executing program 8 (id=3270): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3b, 0x300, 0x20, 0x25dfdc00, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 640.718973ms ago: executing program 2 (id=3271): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01072cbd7000fedbdf2506000000080003000e"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x48) (async) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc00000bc0957d465d6275c4159d001000070200", @ANYRES32=0x0, @ANYBLOB="04010100010a0000140035007767310000000000000000000000000018001680140001801000060004000000ff0f00000a000000"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000001aaff843e864508e44803009500000000000000c51de67c98ecb194d0c804e6d579d6ae76e2f42f8bf0e85383677d00d761076be646856eb91891f76eebb7e9b8f102a1400d24518bacae6dda2df5a582fe43baa823a41dc04ab34dcb64dbeb2274966f864a456340e0649336adf7e54fdf5800"/142], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 638.738359ms ago: executing program 8 (id=3272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002ff02"], 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000340)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)=0x2000004) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd7295}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000540)={r1, &(0x7f0000000440)='/dev/ppp\x00', 0x290100, &(0x7f0000000480)={@_ha_fsid={[0x5, 0xe]}, {0x9, 0x6, 0x9, 0x10000}}, 0x1, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xe7}) 529.085725ms ago: executing program 5 (id=3273): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x11, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000c0000000000000008eaff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300003f0040008500000083000000bf0920000000e2ff5509010000000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0xa, 0x1011, &(0x7f0000001480)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 481.538809ms ago: executing program 2 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4048}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="71050f02020501030409faf7"], 0x13) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000f7030000000000000000006f40000b6c38e9cb14fc29102e60ed66e95721f0d01dc513d89fdbd62712bc0133b090ef075d9de9a2ca86bde8e17d65aeaa95816b034bea63ea63aae8aa076ba4cac8cdfd740111e9511b938f5d1b85d0dc6badc2", @ANYRES32=0x0, @ANYBLOB="0000000000000000330012800b00010065727370616e00001400028008001400000000000500160000000000"], 0x44}}, 0x2400d081) 368.446259ms ago: executing program 5 (id=3275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x88c0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffffffffffd5) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000400)={0x0, &(0x7f0000000440)}) writev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="1a5a84648bc61793438471d9944ff308c10dcf4e661c88eb7c3989451fb8861c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f00"/102, 0x66}], 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8881) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="38010000100001000000000000000012fc010000000000000000000000000001fc0177000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="180000001ca41d9223c45c46bd00000000000000"], 0x18}}, 0x0) nanosleep(&(0x7f0000000a80)={0x0, 0xbebc200}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000ac0)=0x1) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{&(0x7f0000000bc0)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80), 0x1}}], 0x3, 0x1c000) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000cc0)=0x1) 200.993959ms ago: executing program 8 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000700000030000580080004"], 0x44}}, 0x0) socket(0x2a, 0x6, 0xde97) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1ac, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="794f0642b43057409b260a86d68b02c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2eea8b25b38db5ad"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f24c77e923936b71a2491a01fcca50ee12d96f886193b79ac21ee17cf06890c7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f072dce288ca6eca08850a2e4fa98a8a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "059c3c490d12142d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ea4b98833419f363b29afc80f006159f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b6e442a415699e4ba8a2924272f13a35"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2673553e615e71ee"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="14ab73369df50754a42d05207ae05ee82800"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="36cf60eb00a479fb286b84ed7463c8c72cbe63a9108765c4b0cec7d33a2ec131"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b0f310dae50dc119"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac3b0bd1a847526b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7e491e2a4851b876db3adb230f2df729fb288293a7ad33080524b0fa2fd4983a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "379888f58e1ed012"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a03adb6975a86ab"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fe7701227bc15987"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0155d2df0dff4ed0cb04c8562d225e926203e2eac1ad9a2b7c187279ea58ffad"}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$nl_route(r5, &(0x7f0000000b40)={0x0, 0xff9b, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) recvfrom$phonet(r4, 0x0, 0xffffffffffffff70, 0x40000142, &(0x7f0000000a40)={0x23, 0x9, 0xce, 0xe5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x0, 0x1, 0x1, 0x3}}, 0xfffffffffffffd05) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x4}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000020000000900000000000000", @ANYRES32, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180500000000000000000000060001008500000011000000850000000700000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000e80)={0x1, &(0x7f0000000dc0)=[{@none}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xd, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r10, r8}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0xe, 0xb4, 0x11d8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1384}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendto$inet(r2, &(0x7f0000000000)="a4f302388a3d6d7f", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 197.72493ms ago: executing program 1 (id=3277): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x6f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x1005, &(0x7f0000003900)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) 83.457295ms ago: executing program 1 (id=3278): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x24, 0x25, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0x1, 0xb}, {0xfff6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 0s ago: executing program 5 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfffffffffffffffc}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x8491}, 0x4000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="03", 0x8000}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x700, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @private=0xa010100}}}], 0x20}, 0x24000090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000500)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="20005080050002"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.8.2160'. [ 663.509246][T16234] netlink: 'syz.8.2163': attribute type 21 has an invalid length. [ 663.509267][T16234] netlink: 'syz.8.2163': attribute type 22 has an invalid length. [ 663.509278][T16234] netlink: 'syz.8.2163': attribute type 23 has an invalid length. [ 663.509290][T16234] netlink: 'syz.8.2163': attribute type 25 has an invalid length. [ 663.509302][T16234] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2163'. [ 663.807219][T16239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 663.886347][T16243] FAULT_INJECTION: forcing a failure. [ 663.886347][T16243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.886380][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.1.2169 Not tainted syzkaller #0 PREEMPT(full) [ 663.886401][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 663.886411][T16243] Call Trace: [ 663.886418][T16243] [ 663.886426][T16243] dump_stack_lvl+0xe8/0x150 [ 663.886457][T16243] should_fail_ex+0x410/0x560 [ 663.886486][T16243] _copy_from_iter+0x1d3/0x1660 [ 663.886511][T16243] ? __alloc_skb+0x27a/0x7a0 [ 663.886540][T16243] ? __alloc_skb+0x27a/0x7a0 [ 663.886568][T16243] ? __alloc_skb+0x27a/0x7a0 [ 663.886593][T16243] ? __pfx__copy_from_iter+0x10/0x10 [ 663.886615][T16243] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 663.886635][T16243] ? __alloc_skb+0x27a/0x7a0 [ 663.886659][T16243] ? __alloc_skb+0x27a/0x7a0 [ 663.886690][T16243] ? netlink_sendmsg+0x650/0xb40 [ 663.886714][T16243] ? skb_put+0x112/0x210 [ 663.886734][T16243] netlink_sendmsg+0x6c0/0xb40 [ 663.886767][T16243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.886798][T16243] ? apparmor_socket_sendmsg+0x98/0x360 [ 663.886824][T16243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.886846][T16243] sock_sendmsg_nosec+0x14e/0x190 [ 663.886873][T16243] ____sys_sendmsg+0x54e/0x850 [ 663.886897][T16243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.886926][T16243] ? import_iovec+0x73/0xa0 [ 663.886957][T16243] ___sys_sendmsg+0x2a5/0x360 [ 663.886982][T16243] ? __lock_acquire+0x747/0x2de0 [ 663.887008][T16243] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.887061][T16243] ? __fget_files+0x2a/0x420 [ 663.887087][T16243] ? __fget_files+0x3a2/0x420 [ 663.887123][T16243] __x64_sys_sendmsg+0x1b1/0x290 [ 663.887145][T16243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.887185][T16243] do_syscall_64+0x166/0x520 [ 663.887209][T16243] ? trace_irq_disable+0x3b/0x140 [ 663.887228][T16243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.887247][T16243] ? clear_bhb_loop+0x70/0xc0 [ 663.887270][T16243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.887288][T16243] RIP: 0033:0x7f09e9b9e559 [ 663.887305][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.887320][T16243] RSP: 002b:00007f09eaa4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.887340][T16243] RAX: ffffffffffffffda RBX: 00007f09e9e25fa0 RCX: 00007f09e9b9e559 [ 663.887354][T16243] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 663.887365][T16243] RBP: 00007f09eaa4a090 R08: 0000000000000000 R09: 0000000000000000 [ 663.887377][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.887387][T16243] R13: 00007f09e9e26038 R14: 00007f09e9e25fa0 R15: 00007ffe2092b2d8 [ 663.887418][T16243] [ 664.034151][T16245] xt_hashlimit: size too large, truncated to 1048576 [ 664.733429][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 667.815862][T16310] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2182'. [ 667.816131][T16311] FAULT_INJECTION: forcing a failure. [ 667.816131][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 667.816155][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.5.2181 Not tainted syzkaller #0 PREEMPT(full) [ 667.816171][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.816181][T16311] Call Trace: [ 667.816188][T16311] [ 667.816196][T16311] dump_stack_lvl+0xe8/0x150 [ 667.816225][T16311] should_fail_ex+0x410/0x560 [ 667.816256][T16311] ? __alloc_skb+0x1db/0x7a0 [ 667.816284][T16311] should_failslab+0xa8/0x100 [ 667.816311][T16311] ? __alloc_skb+0x1db/0x7a0 [ 667.816335][T16311] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 667.816355][T16311] ? __alloc_skb+0x18d/0x7a0 [ 667.816380][T16311] ? __alloc_skb+0x1db/0x7a0 [ 667.816412][T16311] __alloc_skb+0x1db/0x7a0 [ 667.816442][T16311] netlink_dump+0x1e7/0xee0 [ 667.816466][T16311] ? __netlink_lookup+0xc6/0x8b0 [ 667.816499][T16311] ? __pfx_netlink_dump+0x10/0x10 [ 667.816531][T16311] ? netlink_lookup+0x30/0x200 [ 667.816563][T16311] ? netlink_lookup+0x30/0x200 [ 667.816591][T16311] __netlink_dump_start+0x589/0x7b0 [ 667.816619][T16311] rtnetlink_rcv_msg+0xa48/0xc00 [ 667.816646][T16311] ? netlink_sendmsg+0x5d4/0xb40 [ 667.816670][T16311] ? __pfx_tc_dump_tclass+0x10/0x10 [ 667.816792][T16311] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 667.816819][T16311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 667.816846][T16311] ? __pfx_rtnl_dumpit+0x10/0x10 [ 667.816870][T16311] ? __pfx_tc_dump_tclass+0x10/0x10 [ 667.816905][T16311] netlink_rcv_skb+0x226/0x4a0 [ 667.816928][T16311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 667.816956][T16311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.816993][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.817016][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.817044][T16311] netlink_unicast+0x7bd/0x940 [ 667.817074][T16311] netlink_sendmsg+0x813/0xb40 [ 667.817103][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.817131][T16311] ? apparmor_socket_sendmsg+0x98/0x360 [ 667.817157][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.817179][T16311] sock_sendmsg_nosec+0x14e/0x190 [ 667.817203][T16311] ____sys_sendmsg+0x54e/0x850 [ 667.817227][T16311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.817253][T16311] ? import_iovec+0x73/0xa0 [ 667.817281][T16311] ___sys_sendmsg+0x2a5/0x360 [ 667.817297][T16311] ? __lock_acquire+0x747/0x2de0 [ 667.817322][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.817370][T16311] ? __fget_files+0x2a/0x420 [ 667.817394][T16311] ? __fget_files+0x3a2/0x420 [ 667.817428][T16311] __x64_sys_sendmsg+0x1b1/0x290 [ 667.817450][T16311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.817486][T16311] do_syscall_64+0x166/0x520 [ 667.817509][T16311] ? trace_irq_disable+0x3b/0x140 [ 667.817528][T16311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.817557][T16311] ? clear_bhb_loop+0x70/0xc0 [ 667.817580][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.817598][T16311] RIP: 0033:0x7fe399d9e559 [ 667.817615][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.817630][T16311] RSP: 002b:00007fe39acd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.817649][T16311] RAX: ffffffffffffffda RBX: 00007fe39a026090 RCX: 00007fe399d9e559 [ 667.817661][T16311] RDX: 0000000000048082 RSI: 0000200000000300 RDI: 0000000000000003 [ 667.817673][T16311] RBP: 00007fe39acd0090 R08: 0000000000000000 R09: 0000000000000000 [ 667.817684][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.817695][T16311] R13: 00007fe39a026128 R14: 00007fe39a026090 R15: 00007ffdf6243158 [ 667.817727][T16311] [ 667.858941][T16310] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2182'. [ 668.281093][T16321] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2184'. [ 668.287403][T16321] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2184'. [ 668.292176][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2184'. [ 668.297191][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2184'. [ 668.458977][T16324] xt_hashlimit: size too large, truncated to 1048576 [ 669.643874][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2201'. [ 669.969375][T16402] xt_hashlimit: size too large, truncated to 1048576 [ 670.316521][T16424] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2213'. [ 670.316553][T16424] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2213'. [ 670.483655][ C0] ip6_tunnel: 8 xmit: Local address not yet configured! [ 670.566669][T16439] FAULT_INJECTION: forcing a failure. [ 670.566669][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 670.566701][T16439] CPU: 0 UID: 0 PID: 16439 Comm: syz.1.2217 Not tainted syzkaller #0 PREEMPT(full) [ 670.566722][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.566733][T16439] Call Trace: [ 670.566740][T16439] [ 670.566749][T16439] dump_stack_lvl+0xe8/0x150 [ 670.566780][T16439] should_fail_ex+0x410/0x560 [ 670.566810][T16439] should_failslab+0xa8/0x100 [ 670.566836][T16439] ? skb_clone+0x212/0x3a0 [ 670.566857][T16439] kmem_cache_alloc_noprof+0xa1/0x600 [ 670.566880][T16439] ? skb_clone+0x212/0x3a0 [ 670.566905][T16439] skb_clone+0x212/0x3a0 [ 670.566929][T16439] __netlink_deliver_tap+0x355/0x6e0 [ 670.566967][T16439] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.566993][T16439] netlink_deliver_tap+0x19c/0x1b0 [ 670.567019][T16439] __netlink_sendskb+0x47/0x90 [ 670.567043][T16439] netlink_dump+0xa8c/0xee0 [ 670.567064][T16439] ? __netlink_lookup+0xc6/0x8b0 [ 670.567100][T16439] ? __pfx_netlink_dump+0x10/0x10 [ 670.567133][T16439] ? netlink_lookup+0x30/0x200 [ 670.567155][T16439] ? netlink_lookup+0x30/0x200 [ 670.567198][T16439] __netlink_dump_start+0x589/0x7b0 [ 670.567229][T16439] rtnetlink_rcv_msg+0xa48/0xc00 [ 670.567259][T16439] ? __pfx_tc_dump_tclass+0x10/0x10 [ 670.567352][T16439] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 670.567378][T16439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.567406][T16439] ? __pfx_rtnl_dumpit+0x10/0x10 [ 670.567432][T16439] ? __pfx_tc_dump_tclass+0x10/0x10 [ 670.567472][T16439] netlink_rcv_skb+0x226/0x4a0 [ 670.567497][T16439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.567527][T16439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.567563][T16439] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.567587][T16439] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.567616][T16439] netlink_unicast+0x7bd/0x940 [ 670.567649][T16439] netlink_sendmsg+0x813/0xb40 [ 670.567683][T16439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.567715][T16439] ? apparmor_socket_sendmsg+0x98/0x360 [ 670.567742][T16439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.567765][T16439] sock_sendmsg_nosec+0x14e/0x190 [ 670.567792][T16439] ____sys_sendmsg+0x54e/0x850 [ 670.567817][T16439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.567846][T16439] ? import_iovec+0x73/0xa0 [ 670.567874][T16439] ___sys_sendmsg+0x2a5/0x360 [ 670.567892][T16439] ? __lock_acquire+0x747/0x2de0 [ 670.567917][T16439] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.567973][T16439] ? __fget_files+0x2a/0x420 [ 670.567999][T16439] ? __fget_files+0x3a2/0x420 [ 670.568036][T16439] __x64_sys_sendmsg+0x1b1/0x290 [ 670.568059][T16439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.568100][T16439] do_syscall_64+0x166/0x520 [ 670.568125][T16439] ? trace_irq_disable+0x3b/0x140 [ 670.568146][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.568165][T16439] ? clear_bhb_loop+0x70/0xc0 [ 670.568188][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.568206][T16439] RIP: 0033:0x7f09e9b9e559 [ 670.568224][T16439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.568240][T16439] RSP: 002b:00007f09eaa4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.568260][T16439] RAX: ffffffffffffffda RBX: 00007f09e9e25fa0 RCX: 00007f09e9b9e559 [ 670.568281][T16439] RDX: 0000000000048082 RSI: 0000200000000300 RDI: 0000000000000003 [ 670.568292][T16439] RBP: 00007f09eaa4a090 R08: 0000000000000000 R09: 0000000000000000 [ 670.568304][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.568314][T16439] R13: 00007f09e9e26038 R14: 00007f09e9e25fa0 R15: 00007ffe2092b2d8 [ 670.568346][T16439] [ 671.952292][T16498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 672.197831][T16513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2232'. [ 672.544899][T16526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 672.875286][T16544] __nla_validate_parse: 1 callbacks suppressed [ 672.875307][T16544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2245'. [ 673.317991][T16556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2250'. [ 673.500628][T16569] FAULT_INJECTION: forcing a failure. [ 673.500628][T16569] name failslab, interval 1, probability 0, space 0, times 0 [ 673.500659][T16569] CPU: 1 UID: 0 PID: 16569 Comm: syz.2.2255 Not tainted syzkaller #0 PREEMPT(full) [ 673.500679][T16569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 673.500690][T16569] Call Trace: [ 673.500697][T16569] [ 673.500706][T16569] dump_stack_lvl+0xe8/0x150 [ 673.500737][T16569] should_fail_ex+0x410/0x560 [ 673.500769][T16569] should_failslab+0xa8/0x100 [ 673.500794][T16569] ? security_inode_alloc+0x39/0x310 [ 673.500822][T16569] kmem_cache_alloc_noprof+0xa1/0x600 [ 673.500844][T16569] ? security_inode_alloc+0x39/0x310 [ 673.500878][T16569] security_inode_alloc+0x39/0x310 [ 673.500905][T16569] inode_init_always_gfp+0x97e/0xd30 [ 673.500936][T16569] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 673.501139][T16569] alloc_inode+0x82/0x1b0 [ 673.501172][T16569] new_inode+0x1f/0x170 [ 673.501202][T16569] __debugfs_create_file+0xb8/0x400 [ 673.501228][T16569] debugfs_create_file_full+0x3f/0x60 [ 673.501252][T16569] ref_tracker_dir_debugfs+0x197/0x360 [ 673.501315][T16569] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 673.501367][T16569] ? __kvmalloc_node_noprof+0x52f/0x820 [ 673.501391][T16569] ? __kvmalloc_node_noprof+0x345/0x820 [ 673.501418][T16569] ? __raw_spin_lock_init+0x45/0x100 [ 673.501447][T16569] alloc_netdev_mqs+0x275/0x1240 [ 673.501470][T16569] ? __pfx_snprintf+0x10/0x10 [ 673.501524][T16569] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 673.501595][T16569] rtnl_create_link+0x321/0xd70 [ 673.501626][T16569] rtnl_newlink_create+0x258/0x7b0 [ 673.501653][T16569] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 673.501677][T16569] ? __pfx___mutex_lock+0x10/0x10 [ 673.501711][T16569] ? ns_capable+0x89/0xe0 [ 673.501738][T16569] rtnl_newlink+0x167a/0x1c30 [ 673.501769][T16569] ? __pfx_rtnl_newlink+0x10/0x10 [ 673.501785][T16569] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 673.501806][T16569] ? netlink_deliver_tap+0x19c/0x1b0 [ 673.501827][T16569] ? netlink_unicast+0x781/0x940 [ 673.501846][T16569] ? netlink_sendmsg+0x813/0xb40 [ 673.501867][T16569] ? sock_sendmsg_nosec+0x14e/0x190 [ 673.501889][T16569] ? ____sys_sendmsg+0x54e/0x850 [ 673.501906][T16569] ? ___sys_sendmsg+0x2a5/0x360 [ 673.501922][T16569] ? __x64_sys_sendmsg+0x1b1/0x290 [ 673.501939][T16569] ? do_syscall_64+0x166/0x520 [ 673.501961][T16569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.502017][T16569] ? kasan_quarantine_put+0xbb/0x1f0 [ 673.502049][T16569] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.502076][T16569] ? nlmon_xmit+0xb0/0x100 [ 673.502146][T16569] ? kmem_cache_free+0x182/0x650 [ 673.502176][T16569] ? __lock_acquire+0x747/0x2de0 [ 673.502204][T16569] ? __dev_queue_xmit+0x29b/0x3920 [ 673.502263][T16569] ? __local_bh_enable_ip+0xd6/0x140 [ 673.502287][T16569] ? lockdep_hardirqs_on+0x7b/0x110 [ 673.502337][T16569] ? __pfx_rtnl_newlink+0x10/0x10 [ 673.502354][T16569] rtnetlink_rcv_msg+0x802/0xc00 [ 673.502387][T16569] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 673.502413][T16569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.502444][T16569] ? __copy_skb_header+0xa3/0x4a0 [ 673.502476][T16569] netlink_rcv_skb+0x226/0x4a0 [ 673.502501][T16569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.502528][T16569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.502566][T16569] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.502589][T16569] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.502619][T16569] netlink_unicast+0x7bd/0x940 [ 673.502652][T16569] netlink_sendmsg+0x813/0xb40 [ 673.502686][T16569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.502720][T16569] ? apparmor_socket_sendmsg+0x98/0x360 [ 673.502747][T16569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.502770][T16569] sock_sendmsg_nosec+0x14e/0x190 [ 673.502798][T16569] ____sys_sendmsg+0x54e/0x850 [ 673.502822][T16569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.502851][T16569] ? import_iovec+0x73/0xa0 [ 673.502879][T16569] ___sys_sendmsg+0x2a5/0x360 [ 673.502897][T16569] ? __lock_acquire+0x747/0x2de0 [ 673.502920][T16569] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.502970][T16569] ? __fget_files+0x2a/0x420 [ 673.502993][T16569] ? __fget_files+0x3a2/0x420 [ 673.503037][T16569] __x64_sys_sendmsg+0x1b1/0x290 [ 673.503060][T16569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.503102][T16569] do_syscall_64+0x166/0x520 [ 673.503124][T16569] ? trace_irq_disable+0x3b/0x140 [ 673.503140][T16569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.503158][T16569] ? clear_bhb_loop+0x70/0xc0 [ 673.503180][T16569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.503198][T16569] RIP: 0033:0x7faac5b9e559 [ 673.503217][T16569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.503232][T16569] RSP: 002b:00007faac69f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.503252][T16569] RAX: ffffffffffffffda RBX: 00007faac5e25fa0 RCX: 00007faac5b9e559 [ 673.503265][T16569] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 673.503277][T16569] RBP: 00007faac69f9090 R08: 0000000000000000 R09: 0000000000000000 [ 673.503288][T16569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.503299][T16569] R13: 00007faac5e26038 R14: 00007faac5e25fa0 R15: 00007ffe807ccb28 [ 673.503331][T16569] [ 673.506098][T16569] debugfs: out of free dentries, can not create file 'netdev@ffff888078244700' [ 675.819603][T16539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.047615][T16589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2262'. [ 676.432126][T16617] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2270'. [ 676.444952][T16617] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2270'. [ 676.460495][T16614] ip_tables: iptables: counters copy to user failed while replacing table [ 676.871559][T16639] netlink: 'syz.5.2275': attribute type 61 has an invalid length. [ 676.871583][T16639] netlink: 'syz.5.2275': attribute type 268 has an invalid length. [ 676.944378][T16643] xt_hashlimit: size too large, truncated to 1048576 [ 676.999065][T16645] xt_hashlimit: size too large, truncated to 1048576 [ 679.663485][T16662] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2283'. [ 679.678617][T16662] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2283'. [ 679.924274][T16677] tipc: Started in network mode [ 679.924302][T16677] tipc: Node identity def17d0a610c, cluster identity 4711 [ 679.924947][T16677] tipc: Enabled bearer , priority 0 [ 679.932650][T16680] netlink: 'syz.2.2288': attribute type 8 has an invalid length. [ 679.932669][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 680.029266][T16680] veth1_to_team: entered promiscuous mode [ 680.032434][T16680] gretap0: entered promiscuous mode [ 680.037094][T16680] team_slave_0: entered promiscuous mode [ 680.037284][T16680] team_slave_0: left promiscuous mode [ 680.040763][T16680] veth1_to_team: left promiscuous mode [ 680.057253][T16680] gretap0: left promiscuous mode [ 680.281734][T16695] ip_tables: iptables: counters copy to user failed while replacing table [ 680.654725][T16717] geneve0: entered promiscuous mode [ 680.743443][T16723] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2304'. [ 680.768361][ T1282] IPVS: starting estimator thread 0... [ 680.841669][T16720] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 680.853742][T16726] IPVS: using max 32 ests per chain, 76800 per kthread [ 680.901337][T16720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.920269][T16735] bond1: entered promiscuous mode [ 680.920293][T16735] bond1: entered allmulticast mode [ 681.029503][T16741] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2313'. [ 681.029540][T16741] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2313'. [ 681.056406][ T5763] tipc: Node number set to 3221060874 [ 681.251405][T16754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2317'. [ 681.251427][T16754] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2317'. [ 681.835565][T16779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.999347][T16791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2329'. [ 681.999384][T16791] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2329'. [ 682.350649][T16803] netlink: 'syz.5.2333': attribute type 11 has an invalid length. [ 682.353519][T16803] openvswitch: netlink: IPv6 tunnel dst address is zero [ 682.354193][T16803] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 682.522074][T16801] netlink: Failed to add helper -22 [ 682.522129][T16801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.548221][T16801] netlink: 'syz.2.2334': attribute type 3 has an invalid length. [ 682.689944][T16818] FAULT_INJECTION: forcing a failure. [ 682.689944][T16818] name failslab, interval 1, probability 0, space 0, times 0 [ 682.690006][T16818] CPU: 0 UID: 0 PID: 16818 Comm: syz.8.2337 Not tainted syzkaller #0 PREEMPT(full) [ 682.690027][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 682.690038][T16818] Call Trace: [ 682.690045][T16818] [ 682.690054][T16818] dump_stack_lvl+0xe8/0x150 [ 682.690085][T16818] should_fail_ex+0x410/0x560 [ 682.690116][T16818] should_failslab+0xa8/0x100 [ 682.690142][T16818] __kmalloc_cache_noprof+0xa3/0x600 [ 682.690164][T16818] ? alloc_netdev_mqs+0xc4a/0x1240 [ 682.690187][T16818] ? alloc_netdev_mqs+0xc4a/0x1240 [ 682.690210][T16818] ? __xdp_rxq_info_reg+0x171/0x280 [ 682.690235][T16818] alloc_netdev_mqs+0xc4a/0x1240 [ 682.690264][T16818] rtnl_create_link+0x321/0xd70 [ 682.690295][T16818] rtnl_newlink_create+0x258/0x7b0 [ 682.690321][T16818] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 682.690346][T16818] ? __pfx___mutex_lock+0x10/0x10 [ 682.690382][T16818] ? ns_capable+0x89/0xe0 [ 682.690410][T16818] rtnl_newlink+0x167a/0x1c30 [ 682.690444][T16818] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.690460][T16818] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 682.690479][T16818] ? netlink_deliver_tap+0x19c/0x1b0 [ 682.690497][T16818] ? netlink_unicast+0x781/0x940 [ 682.690515][T16818] ? netlink_sendmsg+0x813/0xb40 [ 682.690536][T16818] ? sock_sendmsg_nosec+0x14e/0x190 [ 682.690556][T16818] ? ____sys_sendmsg+0x54e/0x850 [ 682.690573][T16818] ? ___sys_sendmsg+0x2a5/0x360 [ 682.690588][T16818] ? __x64_sys_sendmsg+0x1b1/0x290 [ 682.690604][T16818] ? do_syscall_64+0x166/0x520 [ 682.690625][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.690682][T16818] ? kasan_quarantine_put+0xbb/0x1f0 [ 682.690700][T16818] ? lockdep_hardirqs_on+0x7b/0x110 [ 682.690727][T16818] ? nlmon_xmit+0xb0/0x100 [ 682.690746][T16818] ? kmem_cache_free+0x182/0x650 [ 682.690775][T16818] ? __lock_acquire+0x747/0x2de0 [ 682.690802][T16818] ? __dev_queue_xmit+0x29b/0x3920 [ 682.690827][T16818] ? __local_bh_enable_ip+0xd6/0x140 [ 682.690852][T16818] ? lockdep_hardirqs_on+0x7b/0x110 [ 682.690899][T16818] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.690916][T16818] rtnetlink_rcv_msg+0x802/0xc00 [ 682.690946][T16818] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 682.690972][T16818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.691001][T16818] ? __copy_skb_header+0xa3/0x4a0 [ 682.691030][T16818] netlink_rcv_skb+0x226/0x4a0 [ 682.691054][T16818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.691084][T16818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.691121][T16818] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.691151][T16818] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.691180][T16818] netlink_unicast+0x7bd/0x940 [ 682.691213][T16818] netlink_sendmsg+0x813/0xb40 [ 682.691245][T16818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.691275][T16818] ? apparmor_socket_sendmsg+0x98/0x360 [ 682.691300][T16818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.691322][T16818] sock_sendmsg_nosec+0x14e/0x190 [ 682.691347][T16818] ____sys_sendmsg+0x54e/0x850 [ 682.691373][T16818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.691401][T16818] ? import_iovec+0x73/0xa0 [ 682.691432][T16818] ___sys_sendmsg+0x2a5/0x360 [ 682.691450][T16818] ? __lock_acquire+0x747/0x2de0 [ 682.691473][T16818] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.691528][T16818] ? __fget_files+0x2a/0x420 [ 682.691554][T16818] ? __fget_files+0x3a2/0x420 [ 682.691590][T16818] __x64_sys_sendmsg+0x1b1/0x290 [ 682.691612][T16818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.691662][T16818] do_syscall_64+0x166/0x520 [ 682.691686][T16818] ? trace_irq_disable+0x3b/0x140 [ 682.691705][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.691723][T16818] ? clear_bhb_loop+0x70/0xc0 [ 682.691747][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.691765][T16818] RIP: 0033:0x7f466699e559 [ 682.691782][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.691797][T16818] RSP: 002b:00007f4667816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.691817][T16818] RAX: ffffffffffffffda RBX: 00007f4666c25fa0 RCX: 00007f466699e559 [ 682.691831][T16818] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 682.691842][T16818] RBP: 00007f4667816090 R08: 0000000000000000 R09: 0000000000000000 [ 682.691853][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.691864][T16818] R13: 00007f4666c26038 R14: 00007f4666c25fa0 R15: 00007ffcf1aaab08 [ 682.691896][T16818] [ 683.075105][T16825] ip_tables: iptables: counters copy to user failed while replacing table [ 683.635280][T16860] syzkaller0: left promiscuous mode [ 683.635302][T16860] syzkaller0: left allmulticast mode [ 683.794279][T16869] lo: left promiscuous mode [ 683.799568][T16869] tunl0: left promiscuous mode [ 683.802421][T16869] gre0: left promiscuous mode [ 683.821208][T16869] erspan0: left promiscuous mode [ 683.829699][T16869] ip_vti0: left promiscuous mode [ 683.831858][T16869] ip6_vti0: left promiscuous mode [ 683.845628][T16869] sit0: left promiscuous mode [ 683.848023][T16869] ip6tnl0: left promiscuous mode [ 683.848617][T16869] ip6gre0: left promiscuous mode [ 683.871642][T16869] ip6gretap0: left promiscuous mode [ 683.883981][T16869] vcan0: left promiscuous mode [ 683.886646][T16869] bond0: left promiscuous mode [ 683.887470][T16869] dummy0: left promiscuous mode [ 683.887588][T16869] nlmon0: left promiscuous mode [ 683.890789][T16869] veth0: left promiscuous mode [ 683.893568][T16869] veth1: left promiscuous mode [ 683.900655][T16869] wg0: left promiscuous mode [ 683.908770][T16869] wg1: left promiscuous mode [ 683.912836][T16869] wg2: left promiscuous mode [ 683.913894][T16869] veth0_to_bridge: left promiscuous mode [ 683.919472][T16869] veth1_to_bridge: left promiscuous mode [ 683.922556][T16869] bridge_slave_1: left promiscuous mode [ 683.928428][T16880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.936826][T16869] veth0_to_bond: left promiscuous mode [ 683.939834][T16869] veth1_to_bond: left promiscuous mode [ 683.942182][T16869] bond_slave_1: left promiscuous mode [ 683.942339][T16869] veth0_to_team: left promiscuous mode [ 683.946991][T16869] team_slave_0: left promiscuous mode [ 683.948122][T16869] veth1_to_team: left promiscuous mode [ 683.948767][T16869] team_slave_1: left promiscuous mode [ 683.951071][T16869] veth0_to_batadv: left promiscuous mode [ 683.956559][T16869] batadv_slave_0: left promiscuous mode [ 683.964036][T16869] veth1_to_batadv: left promiscuous mode [ 683.965372][T16869] batadv_slave_1: left promiscuous mode [ 683.968409][T16869] xfrm0: left promiscuous mode [ 683.969125][T16869] veth0_to_hsr: left promiscuous mode [ 683.974220][T16869] hsr_slave_0: left promiscuous mode [ 683.974860][T16869] veth1_to_hsr: left promiscuous mode [ 683.987143][T16869] hsr_slave_1: left promiscuous mode [ 683.996441][T16869] veth1_virt_wifi: left promiscuous mode [ 684.005737][T16869] veth0_virt_wifi: left promiscuous mode [ 684.009772][T16869] virt_wifi0: left promiscuous mode [ 684.037888][T16869] macvtap0: left promiscuous mode [ 684.038777][T16869] macsec0: left promiscuous mode [ 684.051441][T16869] geneve0: left promiscuous mode [ 684.062277][T16869] geneve1: left promiscuous mode [ 684.076489][T16869] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 684.086217][T16869] netdevsim netdevsim6 netdevsim2: left promiscuous mode [ 684.089039][T16869] netdevsim netdevsim6 netdevsim3: left promiscuous mode [ 684.094802][T16869] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 684.095369][T16869] ipvlan2: left promiscuous mode [ 684.217767][T16886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 684.809507][T16903] __nla_validate_parse: 6 callbacks suppressed [ 684.809530][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 684.926530][T16917] vlan3: entered promiscuous mode [ 684.926550][T16917] macvlan0: entered promiscuous mode [ 685.192612][T16939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.356110][T16946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.433650][T16948] xt_hashlimit: size too large, truncated to 1048576 [ 685.851858][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.954710][T16969] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2380'. [ 686.222833][T16922] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 686.292230][T16984] FAULT_INJECTION: forcing a failure. [ 686.292230][T16984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.292262][T16984] CPU: 0 UID: 0 PID: 16984 Comm: syz.8.2387 Not tainted syzkaller #0 PREEMPT(full) [ 686.292283][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 686.292293][T16984] Call Trace: [ 686.292301][T16984] [ 686.292309][T16984] dump_stack_lvl+0xe8/0x150 [ 686.292340][T16984] should_fail_ex+0x410/0x560 [ 686.292369][T16984] _copy_from_iter+0x1d3/0x1660 [ 686.292394][T16984] ? __alloc_skb+0x27a/0x7a0 [ 686.292423][T16984] ? __alloc_skb+0x27a/0x7a0 [ 686.292450][T16984] ? __alloc_skb+0x27a/0x7a0 [ 686.292476][T16984] ? __pfx__copy_from_iter+0x10/0x10 [ 686.292498][T16984] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 686.292517][T16984] ? __alloc_skb+0x27a/0x7a0 [ 686.292540][T16984] ? __alloc_skb+0x27a/0x7a0 [ 686.292570][T16984] ? netlink_sendmsg+0x650/0xb40 [ 686.292594][T16984] ? skb_put+0x112/0x210 [ 686.292614][T16984] netlink_sendmsg+0x6c0/0xb40 [ 686.292645][T16984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.292676][T16984] ? apparmor_socket_sendmsg+0x98/0x360 [ 686.292702][T16984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.292725][T16984] sock_sendmsg_nosec+0x14e/0x190 [ 686.292751][T16984] ____sys_sendmsg+0x54e/0x850 [ 686.292775][T16984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.292809][T16984] ? import_iovec+0x73/0xa0 [ 686.292837][T16984] ___sys_sendmsg+0x2a5/0x360 [ 686.292855][T16984] ? __lock_acquire+0x747/0x2de0 [ 686.292878][T16984] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.292927][T16984] ? __fget_files+0x2a/0x420 [ 686.292950][T16984] ? __fget_files+0x3a2/0x420 [ 686.292983][T16984] __x64_sys_sendmsg+0x1b1/0x290 [ 686.293002][T16984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.293035][T16984] do_syscall_64+0x166/0x520 [ 686.293059][T16984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.293077][T16984] ? clear_bhb_loop+0x70/0xc0 [ 686.293099][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.293117][T16984] RIP: 0033:0x7f466699e559 [ 686.293134][T16984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.293149][T16984] RSP: 002b:00007f4667816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.293169][T16984] RAX: ffffffffffffffda RBX: 00007f4666c25fa0 RCX: 00007f466699e559 [ 686.293182][T16984] RDX: 0000000002000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 686.293194][T16984] RBP: 00007f4667816090 R08: 0000000000000000 R09: 0000000000000000 [ 686.293205][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.293215][T16984] R13: 00007f4666c26038 R14: 00007f4666c25fa0 R15: 00007ffcf1aaab08 [ 686.293245][T16984] [ 686.698023][T16998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 686.714045][T16988] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2388'. [ 686.855518][T17007] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2393'. [ 686.855556][T17007] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2393'. [ 686.995300][T17014] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2396'. [ 687.056685][T17009] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 687.114288][T17023] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2398'. [ 687.114329][T17023] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2398'. [ 687.409436][T17041] macvlan1: entered promiscuous mode [ 687.409663][T17041] macvlan1: entered allmulticast mode [ 687.409677][T17041] veth1_vlan: entered allmulticast mode [ 687.432287][T17042] Unsupported ieee802154 address type: 0 [ 687.504660][T17045] netlink: 'syz.6.2405': attribute type 11 has an invalid length. [ 687.628338][T17050] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2409'. [ 687.681702][T17052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 687.836158][T17060] netlink: Conntrack attr has 8 unknown bytes [ 687.836194][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.252477][T17074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.351409][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 688.497405][T17082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 688.890999][T17099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.896008][T17096] netlink: 'syz.5.2428': attribute type 2 has an invalid length. [ 689.323323][T17125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.586721][T17143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.792133][T17151] xt_hashlimit: size too large, truncated to 1048576 [ 689.861443][T17152] xt_hashlimit: size too large, truncated to 1048576 [ 690.222019][T17167] bond3 (unregistering): Released all slaves [ 690.313352][T17174] __nla_validate_parse: 7 callbacks suppressed [ 690.313372][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 690.394652][T17177] IPv6: NLM_F_CREATE should be specified when creating new route [ 690.394745][T17177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 690.394754][T17177] IPv6: NLM_F_CREATE should be set when creating new route [ 690.394792][T17177] IPv6: NLM_F_CREATE should be set when creating new route [ 690.394814][T17177] IPv6: NLM_F_CREATE should be set when creating new route [ 690.413311][T17177] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2454'. [ 690.497205][T17181] netlink: 'syz.5.2456': attribute type 21 has an invalid length. [ 690.497230][T17181] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2456'. [ 690.497309][T17181] netlink: 'syz.5.2456': attribute type 4 has an invalid length. [ 690.497321][T17181] netlink: 'syz.5.2456': attribute type 3 has an invalid length. [ 690.497333][T17181] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2456'. [ 690.636679][T17187] vlan2: entered promiscuous mode [ 690.636698][T17187] syz_tun: entered promiscuous mode [ 690.748740][T17189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.552688][T17218] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 691.598278][T17218] bond1: entered promiscuous mode [ 691.600179][T17218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.631760][T17218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2469'. [ 691.643738][T17218] netlink: 'syz.1.2469': attribute type 13 has an invalid length. [ 691.648363][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2470'. [ 691.992459][T17238] team0: No ports can be present during mode change [ 692.092489][T17243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 692.157109][T17245] syzkaller0: entered promiscuous mode [ 692.157130][T17245] syzkaller0: entered allmulticast mode [ 692.337459][T17257] syzkaller1: entered promiscuous mode [ 692.337481][T17257] syzkaller1: entered allmulticast mode [ 692.504578][T17276] ip_tables: iptables: counters copy to user failed while replacing table [ 692.590229][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2490'. [ 692.626155][T17280] syzkaller0: entered promiscuous mode [ 692.626177][T17280] syzkaller0: entered allmulticast mode [ 692.992564][T17298] xt_hashlimit: size too large, truncated to 1048576 [ 693.056986][T17302] xt_hashlimit: size too large, truncated to 1048576 [ 693.520513][T17328] ip_tables: iptables: counters copy to user failed while replacing table [ 693.860295][T17350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2513'. [ 693.973452][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2517'. [ 694.155686][T17359] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2519'. [ 694.230945][T17356] bond4: entered promiscuous mode [ 694.357345][T17117] udevd[17117]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 694.408567][T17372] FAULT_INJECTION: forcing a failure. [ 694.408567][T17372] name failslab, interval 1, probability 0, space 0, times 0 [ 694.408601][T17372] CPU: 1 UID: 0 PID: 17372 Comm: syz.6.2521 Not tainted syzkaller #0 PREEMPT(full) [ 694.408619][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 694.408630][T17372] Call Trace: [ 694.408637][T17372] [ 694.408645][T17372] dump_stack_lvl+0xe8/0x150 [ 694.408676][T17372] should_fail_ex+0x410/0x560 [ 694.408706][T17372] should_failslab+0xa8/0x100 [ 694.408730][T17372] ? skb_clone+0x212/0x3a0 [ 694.408751][T17372] kmem_cache_alloc_noprof+0xa1/0x600 [ 694.408770][T17372] ? skb_clone+0x212/0x3a0 [ 694.408794][T17372] skb_clone+0x212/0x3a0 [ 694.408818][T17372] __netlink_deliver_tap+0x355/0x6e0 [ 694.408852][T17372] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.408877][T17372] netlink_deliver_tap+0x19c/0x1b0 [ 694.408902][T17372] netlink_unicast+0x781/0x940 [ 694.408950][T17372] netlink_sendmsg+0x813/0xb40 [ 694.408981][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.409012][T17372] ? apparmor_socket_sendmsg+0x98/0x360 [ 694.409038][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.409059][T17372] sock_sendmsg_nosec+0x14e/0x190 [ 694.409085][T17372] ____sys_sendmsg+0x54e/0x850 [ 694.409108][T17372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.409136][T17372] ? import_iovec+0x73/0xa0 [ 694.409164][T17372] ___sys_sendmsg+0x2a5/0x360 [ 694.409181][T17372] ? __lock_acquire+0x747/0x2de0 [ 694.409205][T17372] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.409256][T17372] ? __fget_files+0x2a/0x420 [ 694.409281][T17372] ? __fget_files+0x3a2/0x420 [ 694.409317][T17372] __x64_sys_sendmsg+0x1b1/0x290 [ 694.409337][T17372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.409376][T17372] do_syscall_64+0x166/0x520 [ 694.409399][T17372] ? trace_irq_disable+0x3b/0x140 [ 694.409416][T17372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.409435][T17372] ? clear_bhb_loop+0x70/0xc0 [ 694.409457][T17372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.409479][T17372] RIP: 0033:0x7f2a3759e559 [ 694.409496][T17372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.409510][T17372] RSP: 002b:00007f2a3838e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.409529][T17372] RAX: ffffffffffffffda RBX: 00007f2a37825fa0 RCX: 00007f2a3759e559 [ 694.409540][T17372] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 694.409550][T17372] RBP: 00007f2a3838e090 R08: 0000000000000000 R09: 0000000000000000 [ 694.409561][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.409570][T17372] R13: 00007f2a37826038 R14: 00007f2a37825fa0 R15: 00007ffd55714d78 [ 694.409605][T17372] [ 694.437866][T17372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.677445][T17373] team0: Unable to change to the same mode the team is in [ 694.922395][T17393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.037684][T17397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 695.161261][T17409] veth1_to_bond: entered promiscuous mode [ 695.333054][T17409] veth1_to_bond (unregistering): left promiscuous mode [ 695.419801][T17420] __nla_validate_parse: 1 callbacks suppressed [ 695.419838][T17420] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2538'. [ 695.546135][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.546328][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.547139][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.547333][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.547518][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.547692][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.547863][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.548081][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.548252][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'. [ 695.998120][T17460] x_tables: duplicate entry at hook 3 [ 696.564126][T17490] bond0: (slave gretap0): Opening slave failed [ 697.586290][T17546] xt_hashlimit: size too large, truncated to 1048576 [ 697.643487][T17549] tipc: Enabled bearer , priority 10 [ 697.976897][ T30] audit: type=1800 audit(1792084540.380:7): pid=17568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2583" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2460 res=0 errno=0 [ 698.287811][T17573] xt_CT: No such helper "netbios-ns" [ 698.764995][T17623] ip_tables: iptables: counters copy to user failed while replacing table [ 698.792666][T17627] gre0: left promiscuous mode [ 698.792689][T17627] gre0: left allmulticast mode [ 698.800760][T17627] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 698.875102][T17623] syzkaller0: entered allmulticast mode [ 699.373267][T17671] ip_tables: iptables: counters copy to user failed while replacing table [ 700.312846][T17676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 700.355174][T17678] netlink: 'syz.8.2604': attribute type 4 has an invalid length. [ 701.239500][T17584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.335999][T17683] __nla_validate_parse: 31 callbacks suppressed [ 701.336018][T17683] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2605'. [ 701.802402][T17708] openvswitch: netlink: Multiple metadata blocks provided [ 701.888062][T17705] netlink: 'syz.1.2614': attribute type 2 has an invalid length. [ 702.332643][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2629'. [ 702.368144][T17750] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 702.474840][T17759] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2629'. [ 702.649861][T17759] hsr_slave_1 (unregistering): left promiscuous mode [ 702.900261][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'. [ 702.908295][T17779] netlink: 'syz.5.2637': attribute type 21 has an invalid length. [ 702.908318][T17779] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2637'. [ 702.908364][T17779] netlink: 'syz.5.2637': attribute type 4 has an invalid length. [ 702.908375][T17779] netlink: 'syz.5.2637': attribute type 5 has an invalid length. [ 702.908386][T17779] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2637'. [ 703.101917][T17791] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 703.114759][T17790] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2642'. [ 703.309261][T17802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 703.449184][T17808] ip_tables: iptables: counters copy to user failed while replacing table [ 703.509562][T17815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 703.530463][T17816] tipc: Resetting bearer [ 703.557308][T17818] ip_tables: iptables: counters copy to user failed while replacing table [ 703.585561][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 704.088065][ T6891] IPVS: starting estimator thread 0... [ 704.104343][T17811] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 704.161330][ T6891] IPVS: starting estimator thread 0... [ 704.173160][T17835] IPVS: using max 33 ests per chain, 79200 per kthread [ 704.200725][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2660'. [ 704.254833][T17843] IPVS: using max 39 ests per chain, 93600 per kthread [ 704.652119][T17869] ip_tables: iptables: counters copy to user failed while replacing table [ 704.681811][T17869] netlink: 'syz.2.2668': attribute type 12 has an invalid length. [ 704.681833][T17869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2668'. [ 704.741989][T17870] netlink: 'syz.1.2670': attribute type 22 has an invalid length. [ 704.742025][T17870] bond0: option ad_select: unable to set because the bond device is up [ 704.788325][T17877] xt_ecn: cannot match TCP bits for non-tcp packets [ 705.359534][T17889] gretap0: left allmulticast mode [ 705.463299][ T50] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.463334][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.464762][ T6891] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.464804][ T6891] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.464990][ T6891] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.465013][ T6891] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.465119][ T6891] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.465142][ T6891] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.764390][T17912] gretap0: left promiscuous mode [ 705.807041][T17912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.910202][T17912] veth1_macvtap: left promiscuous mode [ 705.922072][T17912] veth0_macvtap: left promiscuous mode [ 705.927095][T17923] Bluetooth: MGMT ver 1.23 [ 705.940624][T17912] veth0_macvtap: entered promiscuous mode [ 705.954336][T17912] veth1_macvtap: entered promiscuous mode [ 705.985541][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.996342][T17912] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 706.003734][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.004826][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.026203][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.088359][T17912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.099611][T17912] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 706.112725][T17912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.116110][T17912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.119495][T17912] gretap0: entered promiscuous mode [ 706.119510][T17912] gretap0: entered allmulticast mode [ 706.130632][T17912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.168791][ T8706] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 706.311069][T17948] openvswitch: netlink: Flow key attr not present in new flow. [ 706.312547][T17955] openvswitch: netlink: Flow key attr not present in new flow. [ 706.456231][T17942] batadv0: entered promiscuous mode [ 706.456335][T17942] macsec2: entered promiscuous mode [ 706.456509][T17942] macsec2: entered allmulticast mode [ 706.456523][T17942] batadv0: entered allmulticast mode [ 706.460238][T17942] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 706.494555][T17942] batadv0: left allmulticast mode [ 706.494771][T17942] batadv0: left promiscuous mode [ 706.573603][T17967] __nla_validate_parse: 7 callbacks suppressed [ 706.573623][T17967] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2685'. [ 706.646753][ T1282] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.646786][ T1282] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.646818][ T1282] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.646840][ T1282] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.646869][ T1282] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.646891][ T1282] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.664258][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.664290][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.955446][T17976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2689'. [ 706.988506][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2686'. [ 707.158014][T17976] ip_tables: iptables: counters copy to user failed while replacing table [ 707.182406][T17986] veth1: entered promiscuous mode [ 707.182427][T17986] veth1: entered allmulticast mode [ 707.201350][T17987] lo: entered promiscuous mode [ 707.201604][T17987] tunl0: entered promiscuous mode [ 707.241110][T17987] gre0: entered promiscuous mode [ 707.395365][T17996] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2691'. [ 707.396068][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2690'. [ 707.467850][T17987] gretap0: entered promiscuous mode [ 707.554133][T17987] erspan0: entered promiscuous mode [ 707.561904][T17987] ip_vti0: entered promiscuous mode [ 707.576336][T17987] ip6_vti0: entered promiscuous mode [ 707.588656][T17987] sit0: entered promiscuous mode [ 707.595650][T18009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 707.599237][T17987] ip6tnl0: entered promiscuous mode [ 707.620706][T17987] ip6gre0: entered promiscuous mode [ 707.632311][T17987] syz_tun: entered promiscuous mode [ 707.646988][T17987] ip6gretap0: entered promiscuous mode [ 707.650980][T17987] bond0: entered promiscuous mode [ 707.729033][T17987] nlmon0: entered promiscuous mode [ 707.734759][T17987] batadv0: entered promiscuous mode [ 707.743091][T17987] vxcan0: entered promiscuous mode [ 707.745066][T17987] vxcan1: entered promiscuous mode [ 707.749717][T17987] veth0: entered promiscuous mode [ 707.759800][T17987] veth1: entered promiscuous mode [ 707.779389][T17987] wg0: entered promiscuous mode [ 707.796547][T17987] wg2: entered promiscuous mode [ 707.811715][T17987] veth0_to_bridge: entered promiscuous mode [ 707.819942][T17987] bridge_slave_0: entered promiscuous mode [ 707.825435][T17987] veth1_to_bridge: entered promiscuous mode [ 707.830691][T17987] bridge_slave_1: entered promiscuous mode [ 707.840695][T17987] veth0_to_bond: entered promiscuous mode [ 707.848577][T17987] bond_slave_0: entered promiscuous mode [ 707.849169][T17987] veth0_to_team: entered promiscuous mode [ 707.852090][T17987] team_slave_0: entered promiscuous mode [ 707.856351][T17987] veth1_to_team: entered promiscuous mode [ 707.859197][T17987] team_slave_1: entered promiscuous mode [ 707.859482][T17987] veth0_to_batadv: entered promiscuous mode [ 707.869703][T17987] batadv_slave_0: entered promiscuous mode [ 707.875831][T17987] veth1_to_batadv: entered promiscuous mode [ 707.888826][T17987] xfrm0: entered promiscuous mode [ 707.896309][T17987] veth0_to_hsr: entered promiscuous mode [ 707.898049][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 707.909655][T17987] tipc: Resetting bearer [ 707.912898][T17987] tipc: Resetting bearer [ 707.913303][T17987] hsr0: entered promiscuous mode [ 707.916154][T17987] veth1_virt_wifi: entered promiscuous mode [ 707.918886][T17987] veth0_virt_wifi: entered promiscuous mode [ 707.929725][T17987] virt_wifi0: entered promiscuous mode [ 707.940467][T17987] vlan0: entered promiscuous mode [ 707.943804][T17987] vlan1: entered promiscuous mode [ 707.956291][T17987] macvlan1: entered promiscuous mode [ 707.959132][T17987] ipvlan0: entered promiscuous mode [ 707.967221][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 707.975607][T17987] ipvlan1: entered promiscuous mode [ 708.008461][T17987] macvtap0: entered promiscuous mode [ 708.072212][T17987] macsec0: entered promiscuous mode [ 708.089439][T17987] geneve0: entered promiscuous mode [ 708.106149][T17987] geneve1: entered promiscuous mode [ 708.121884][T17987] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 708.138074][T17987] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 708.153783][T17987] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 708.161885][T17987] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 708.181452][T17987] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 708.188406][T17987] ip6gre1: entered promiscuous mode [ 708.200456][T17987] syztnl2: entered promiscuous mode [ 708.200595][T17987] vx0: entered promiscuous mode [ 708.200669][T17987] mac80211_hwsim hwsim25 wlan2: entered promiscuous mode [ 708.200750][T17987] bridge1: entered promiscuous mode [ 708.204877][T17987] bridge2: entered promiscuous mode [ 708.217771][T17987] ip6erspan0: entered promiscuous mode [ 708.217920][T17987] geneve2: entered promiscuous mode [ 708.232100][T17987] bridge0: entered promiscuous mode [ 708.253698][T17987] macsec1: entered promiscuous mode [ 708.258622][T17987] veth2: entered promiscuous mode [ 708.258743][T17987] veth3: entered promiscuous mode [ 708.260709][T17987] bond2: entered promiscuous mode [ 708.260724][T17987] geneve3: entered promiscuous mode [ 708.278151][T17987] vxlan0: entered promiscuous mode [ 708.278304][T17987] syztnl1: entered promiscuous mode [ 708.292271][T17987] bridge3: entered promiscuous mode [ 708.292423][T17987] bridge4: entered promiscuous mode [ 708.292535][T17987] bond3: entered promiscuous mode [ 708.292653][T17987] bond5: entered promiscuous mode [ 708.292767][T17987] bond6: entered promiscuous mode [ 708.292875][T17987] bond7: entered promiscuous mode [ 708.294695][T17987] bond8: entered promiscuous mode [ 708.294808][T17987] bond9: entered promiscuous mode [ 708.294917][T17987] bond10: entered promiscuous mode [ 708.295041][T17987] bond11: entered promiscuous mode [ 708.295231][T17987] bond12: entered promiscuous mode [ 708.295335][T17987] bond13: entered promiscuous mode [ 708.295442][T17987] bond14: entered promiscuous mode [ 708.295545][T17987] bond15: entered promiscuous mode [ 708.295650][T17987] bond16: entered promiscuous mode [ 708.295758][T17987] bond17: entered promiscuous mode [ 708.295863][T17987] bond18: entered promiscuous mode [ 708.295986][T17987] bond19: entered promiscuous mode [ 708.296090][T17987] bond20: entered promiscuous mode [ 708.296199][T17987] bond21: entered promiscuous mode [ 708.296305][T17987] bond22: entered promiscuous mode [ 708.296408][T17987] bond23: entered promiscuous mode [ 708.296510][T17987] bond24: entered promiscuous mode [ 708.296612][T17987] bond25: entered promiscuous mode [ 708.296716][T17987] bond26: entered promiscuous mode [ 708.296817][T17987] bond27: entered promiscuous mode [ 708.296919][T17987] bond28: entered promiscuous mode [ 708.299043][ T1282] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.347824][ T7027] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.349530][ T50] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.349614][ T50] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.491470][T18015] syzkaller0: left promiscuous mode [ 708.491493][T18015] syzkaller0: left allmulticast mode [ 708.785518][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 708.853638][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2709'. [ 708.853659][T18041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2709'. [ 708.932281][T18050] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 708.932301][T18050] netlink: 'syz.2.2711': attribute type 2 has an invalid length. [ 708.952621][T18050] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 708.987304][T18050] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.016298][T18050] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 709.043650][T18061] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.091607][T18058] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 709.091630][T18058] netlink: 'syz.2.2711': attribute type 2 has an invalid length. [ 709.210316][ T52] Bluetooth: hci5: link tx timeout [ 709.210334][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.211587][ T52] Bluetooth: hci5: link tx timeout [ 709.211602][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.220424][ T52] Bluetooth: hci5: link tx timeout [ 709.220461][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.220489][ T52] Bluetooth: hci5: link tx timeout [ 709.220498][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.220519][ T52] Bluetooth: hci5: link tx timeout [ 709.220528][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.228564][ T52] Bluetooth: hci5: link tx timeout [ 709.228583][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.233162][ T52] Bluetooth: hci5: link tx timeout [ 709.233181][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.236037][ T52] Bluetooth: hci5: link tx timeout [ 709.236052][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.255185][ T52] Bluetooth: hci5: link tx timeout [ 709.255204][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.450802][T18073] bridge0: port 1(vlan4) entered blocking state [ 709.451656][T18073] bridge0: port 1(vlan4) entered disabled state [ 709.451784][T18073] vlan4: entered allmulticast mode [ 709.451798][T18073] geneve0: entered allmulticast mode [ 709.456541][T18073] vlan4: entered promiscuous mode [ 709.506718][T18078] Bluetooth: hci0: unsupported parameter 5135 [ 709.506738][T18078] Bluetooth: hci0: unsupported parameter 8192 [ 709.506750][T18078] Bluetooth: hci0: unsupported parameter 5135 [ 709.506761][T18078] Bluetooth: hci0: unsupported parameter 8192 [ 709.864630][T18097] lo: left promiscuous mode [ 709.864797][T18097] tunl0: left promiscuous mode [ 709.864974][T18097] gre0: left promiscuous mode [ 709.865085][T18097] gretap0: left promiscuous mode [ 709.866425][T18097] erspan0: left promiscuous mode [ 709.866556][T18097] ip_vti0: left promiscuous mode [ 709.866697][T18097] ip6_vti0: left promiscuous mode [ 709.866797][T18097] sit0: left promiscuous mode [ 709.866908][T18097] ip6tnl0: left promiscuous mode [ 709.867063][T18097] ip6gre0: left promiscuous mode [ 709.867168][T18097] syz_tun: left promiscuous mode [ 709.867305][T18097] ip6gretap0: left promiscuous mode [ 709.867921][T18097] bond0: left promiscuous mode [ 709.868066][T18097] team0: left promiscuous mode [ 709.868204][T18097] nlmon0: left promiscuous mode [ 709.868342][T18097] batadv0: left promiscuous mode [ 709.869672][T18097] vxcan0: left promiscuous mode [ 709.870268][T18097] vxcan1: left promiscuous mode [ 709.870403][T18097] veth0: left promiscuous mode [ 709.870610][T18097] veth1: left promiscuous mode [ 709.870814][T18097] wg0: left promiscuous mode [ 709.870974][T18097] wg2: left promiscuous mode [ 709.871105][T18097] veth0_to_bridge: left promiscuous mode [ 709.871246][T18097] bridge_slave_0: left promiscuous mode [ 709.871384][T18097] veth1_to_bridge: left promiscuous mode [ 709.871532][T18097] bridge_slave_1: left promiscuous mode [ 709.871666][T18097] veth0_to_bond: left promiscuous mode [ 709.872324][T18097] bond_slave_0: left promiscuous mode [ 709.876789][T18097] veth0_to_team: left promiscuous mode [ 709.877003][T18097] team_slave_0: left promiscuous mode [ 709.877142][T18097] veth1_to_team: left promiscuous mode [ 709.877273][T18097] team_slave_1: left promiscuous mode [ 709.877404][T18097] veth0_to_batadv: left promiscuous mode [ 709.877543][T18097] batadv_slave_0: left promiscuous mode [ 709.877673][T18097] veth1_to_batadv: left promiscuous mode [ 709.877912][T18097] xfrm0: left promiscuous mode [ 709.878069][T18097] veth0_to_hsr: left promiscuous mode [ 709.878323][T18097] hsr0: left promiscuous mode [ 709.880970][T18097] veth1_virt_wifi: left promiscuous mode [ 709.881117][T18097] veth0_virt_wifi: left promiscuous mode [ 709.882446][T18097] virt_wifi0: left promiscuous mode [ 709.882847][T18097] vlan0: left promiscuous mode [ 709.887609][T18097] vlan1: left promiscuous mode [ 709.888044][T18097] macvlan1: left promiscuous mode [ 709.888181][T18097] ipvlan0: left promiscuous mode [ 709.888318][T18097] ipvlan1: left promiscuous mode [ 709.889892][T18097] macvtap0: left promiscuous mode [ 709.890053][T18097] macsec0: left promiscuous mode [ 709.891547][T18097] geneve1: left promiscuous mode [ 709.891701][T18097] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 709.894829][T18097] netdevsim netdevsim8 netdevsim1: left promiscuous mode [ 709.894972][T18097] netdevsim netdevsim8 netdevsim2: left promiscuous mode [ 709.895085][T18097] netdevsim netdevsim8 netdevsim3: left promiscuous mode [ 709.895193][T18097] mac80211_hwsim hwsim21 wlan1: left promiscuous mode [ 709.897480][T18097] ip6gre1: left promiscuous mode [ 709.897598][T18097] syztnl2: left promiscuous mode [ 709.898304][T18097] vx0: left promiscuous mode [ 709.899836][T18097] mac80211_hwsim hwsim25 wlan2: left promiscuous mode [ 709.900007][T18097] bond1: left promiscuous mode [ 709.900118][T18097] bridge1: left promiscuous mode [ 709.900233][T18097] bridge2: left promiscuous mode [ 709.900355][T18097] ip6erspan0: left promiscuous mode [ 709.900490][T18097] geneve2: left promiscuous mode [ 709.914729][T18097] bridge0: left promiscuous mode [ 709.914908][T18097] vlan4: left promiscuous mode [ 709.914921][T18097] geneve0: left promiscuous mode [ 709.915380][T18097] macsec1: left promiscuous mode [ 709.915496][T18097] veth2: left promiscuous mode [ 709.915637][T18097] veth3: left promiscuous mode [ 709.921442][T18097] bond2: left promiscuous mode [ 709.921704][T18097] geneve3: left promiscuous mode [ 709.932428][T18097] vxlan0: left promiscuous mode [ 709.932554][T18097] syztnl1: left promiscuous mode [ 709.932690][T18097] vlan3: left promiscuous mode [ 709.932704][T18097] macvlan0: left promiscuous mode [ 709.933111][T18097] bridge3: left promiscuous mode [ 709.933230][T18097] bridge4: left promiscuous mode [ 709.933340][T18097] bond3: left promiscuous mode [ 709.933458][T18097] bond4: left promiscuous mode [ 709.933566][T18097] bond5: left promiscuous mode [ 709.933667][T18097] bond6: left promiscuous mode [ 709.933769][T18097] bond7: left promiscuous mode [ 709.941764][T18097] bond8: left promiscuous mode [ 709.941894][T18097] bond9: left promiscuous mode [ 709.942022][T18097] bond10: left promiscuous mode [ 709.942127][T18097] bond11: left promiscuous mode [ 709.942231][T18097] bond12: left promiscuous mode [ 709.942337][T18097] bond13: left promiscuous mode [ 709.942448][T18097] bond14: left promiscuous mode [ 709.942556][T18097] bond15: left promiscuous mode [ 709.942662][T18097] bond16: left promiscuous mode [ 709.965171][T18097] bond17: left promiscuous mode [ 709.965290][T18097] bond18: left promiscuous mode [ 709.965394][T18097] bond19: left promiscuous mode [ 709.965524][T18097] bond20: left promiscuous mode [ 709.965628][T18097] bond21: left promiscuous mode [ 709.965732][T18097] bond22: left promiscuous mode [ 709.965836][T18097] bond23: left promiscuous mode [ 709.965941][T18097] bond24: left promiscuous mode [ 709.969462][T18097] bond25: left promiscuous mode [ 709.969603][T18097] bond26: left promiscuous mode [ 709.969707][T18097] bond27: left promiscuous mode [ 709.987401][T18097] bond28: left promiscuous mode [ 710.273178][T18111] x_tables: duplicate underflow at hook 1 [ 710.293976][T18111] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 710.510610][T18120] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 710.858773][T18139] bridge0: port 1(macsec2) entered blocking state [ 710.861381][T18139] bridge0: port 1(macsec2) entered disabled state [ 710.861991][T18139] macsec2: entered allmulticast mode [ 710.862009][T18139] bridge0: entered allmulticast mode [ 710.862047][T18139] bridge0: entered promiscuous mode [ 710.909678][T18139] macsec2: left allmulticast mode [ 710.909700][T18139] bridge0: left allmulticast mode [ 711.059227][ T8728] bridge0: left promiscuous mode [ 711.139352][T18151] bond2: ARP target 9.0.0.0 is already present [ 711.139368][T18151] bond2: option arp_ip_target: invalid value (9) [ 711.171096][T18151] bond2 (unregistering): Released all slaves [ 711.283332][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 711.354766][T18171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.668285][T18192] netlink: 'syz.5.2758': attribute type 1 has an invalid length. [ 711.847786][T18208] netlink: 'syz.8.2767': attribute type 4 has an invalid length. [ 711.847809][T18208] __nla_validate_parse: 5 callbacks suppressed [ 711.847821][T18208] netlink: 5620 bytes leftover after parsing attributes in process `syz.8.2767'. [ 711.908726][T18208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.929230][T18216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2765'. [ 711.929256][T18216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'. [ 711.929274][T18216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'. [ 714.781091][T18202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.913939][T18242] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2775'. [ 714.938544][T18242] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2775'. [ 714.951905][T18244] netlink: 'syz.2.2776': attribute type 1 has an invalid length. [ 715.010828][T18250] x_tables: duplicate underflow at hook 2 [ 715.090463][T18244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 715.156366][T18244] bond2: (slave geneve2): making interface the new active one [ 715.159530][T18244] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 715.180143][T18259] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.195361][T18259] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 715.229422][T18259] ip_tables: iptables: counters copy to user failed while replacing table [ 715.270008][T18263] syzkaller0: entered promiscuous mode [ 715.270029][T18263] syzkaller0: entered allmulticast mode [ 715.329988][T18270] xt_hashlimit: size too large, truncated to 1048576 [ 715.368872][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2780'. [ 715.725241][T18279] batman_adv: batadv0: Adding interface: ipvlan0 [ 715.725260][T18279] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.726015][T18279] batman_adv: batadv0: Interface activated: ipvlan0 [ 715.827983][T18295] netlink: 'syz.1.2789': attribute type 3 has an invalid length. [ 715.828073][T18289] syzkaller0: entered promiscuous mode [ 715.828090][T18289] syzkaller0: entered allmulticast mode [ 715.978321][T18299] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2791'. [ 715.988668][T18299] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2791'. [ 716.017087][T18302] netlink: 'syz.5.2792': attribute type 10 has an invalid length. [ 716.032217][T18302] team0 (unregistering): Port device team_slave_1 removed [ 716.114257][T18308] xt_hashlimit: size too large, truncated to 1048576 [ 716.179732][T18313] xt_hashlimit: size too large, truncated to 1048576 [ 716.203417][T18316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.417227][T18327] xt_hashlimit: size too large, truncated to 1048576 [ 716.872568][T18344] sctp: [Deprecated]: syz.1.2803 (pid 18344) Use of int in max_burst socket option. [ 716.872568][T18344] Use struct sctp_assoc_value instead [ 716.999539][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2805'. [ 716.999564][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2805'. [ 717.019414][T18357] FAULT_INJECTION: forcing a failure. [ 717.019414][T18357] name failslab, interval 1, probability 0, space 0, times 0 [ 717.019444][T18357] CPU: 0 UID: 0 PID: 18357 Comm: syz.1.2810 Not tainted syzkaller #0 PREEMPT(full) [ 717.019463][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 717.019474][T18357] Call Trace: [ 717.019481][T18357] [ 717.019489][T18357] dump_stack_lvl+0xe8/0x150 [ 717.019521][T18357] should_fail_ex+0x410/0x560 [ 717.019548][T18357] ? __alloc_skb+0x1db/0x7a0 [ 717.019573][T18357] should_failslab+0xa8/0x100 [ 717.019599][T18357] ? __alloc_skb+0x1db/0x7a0 [ 717.019623][T18357] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 717.019643][T18357] ? __alloc_skb+0x18d/0x7a0 [ 717.019667][T18357] ? __alloc_skb+0x1db/0x7a0 [ 717.019719][T18357] __alloc_skb+0x1db/0x7a0 [ 717.019749][T18357] alloc_skb_with_frags+0xc6/0x760 [ 717.019877][T18357] sock_alloc_send_pskb+0xb66/0xc90 [ 717.019906][T18357] ? kernel_text_address+0xa5/0xe0 [ 717.019931][T18357] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 717.019954][T18357] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 717.019976][T18357] ? do_raw_spin_lock+0x12b/0x2f0 [ 717.020005][T18357] ? __lock_acquire+0x747/0x2de0 [ 717.020028][T18357] __ip_append_data+0x29ea/0x3cf0 [ 717.020107][T18357] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 717.020148][T18357] ? ipv4_mtu+0x23/0x670 [ 717.020175][T18357] ? __pfx___ip_append_data+0x10/0x10 [ 717.020199][T18357] ? ipv4_mtu+0x561/0x670 [ 717.020231][T18357] ? ip_setup_cork+0x512/0x920 [ 717.020260][T18357] ip_make_skb+0x22e/0x440 [ 717.020281][T18357] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 717.020308][T18357] ? __pfx_ip_make_skb+0x10/0x10 [ 717.020341][T18357] udp_sendmsg+0x1937/0x2140 [ 717.020363][T18357] ? lock_acquire+0x115/0x350 [ 717.020395][T18357] ? __pfx_udp_sendmsg+0x10/0x10 [ 717.020411][T18357] ? process_measurement+0x7b2/0x1c10 [ 717.020497][T18357] ? begin_current_label_crit_section+0x2a3/0x830 [ 717.020525][T18357] ? lock_acquire+0x115/0x350 [ 717.020548][T18357] udpv6_sendmsg+0x915/0x2610 [ 717.020613][T18357] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 717.020656][T18357] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 717.020696][T18357] ? inet_send_prepare+0x5b/0x260 [ 717.020725][T18357] ? inet6_sendmsg+0xe4/0x120 [ 717.020781][T18357] ? __pfx_inet6_sendmsg+0x10/0x10 [ 717.020805][T18357] sock_sendmsg_nosec+0x90/0x190 [ 717.020830][T18357] sock_write_iter+0x2de/0x3e0 [ 717.020853][T18357] ? __pfx_sock_write_iter+0x10/0x10 [ 717.020880][T18357] ? bpf_lsm_file_permission+0x9/0x20 [ 717.020906][T18357] ? security_file_permission+0x75/0x260 [ 717.020935][T18357] vfs_write+0x612/0xba0 [ 717.020961][T18357] ? __pfx_vfs_write+0x10/0x10 [ 717.020987][T18357] ? __fget_files+0x2a/0x420 [ 717.021021][T18357] ksys_write+0x150/0x270 [ 717.021042][T18357] ? __pfx_ksys_write+0x10/0x10 [ 717.021069][T18357] do_syscall_64+0x166/0x520 [ 717.021092][T18357] ? trace_irq_disable+0x3b/0x140 [ 717.021110][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.021129][T18357] ? clear_bhb_loop+0x70/0xc0 [ 717.021150][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.021167][T18357] RIP: 0033:0x7f09e9b9e559 [ 717.021183][T18357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.021197][T18357] RSP: 002b:00007f09eaa4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.021222][T18357] RAX: ffffffffffffffda RBX: 00007f09e9e25fa0 RCX: 00007f09e9b9e559 [ 717.021235][T18357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 717.021244][T18357] RBP: 00007f09eaa4a090 R08: 0000000000000000 R09: 0000000000000000 [ 717.021255][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.021265][T18357] R13: 00007f09e9e26038 R14: 00007f09e9e25fa0 R15: 00007ffe2092b2d8 [ 717.021293][T18357] [ 717.235320][T18364] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2808'. [ 717.240016][T18363] netlink: 'syz.6.2805': attribute type 2 has an invalid length. [ 717.240036][T18363] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2805'. [ 717.242065][T18364] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2808'. [ 717.252234][T18345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 717.341190][T18354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.467116][T18354] bond4: (slave bond0): Enslaving as an active interface with a down link [ 717.528397][T18358] bond4 (unregistering): (slave bond0): Releasing active interface [ 717.549398][T18358] bond4 (unregistering): Released all slaves [ 717.641523][T18363] : entered promiscuous mode [ 717.649397][T18372] netlink: 'syz.2.2813': attribute type 4 has an invalid length. [ 717.819095][T18384] ip_tables: iptables: counters copy to user failed while replacing table [ 717.858269][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'. [ 717.886112][T18387] xt_hashlimit: size too large, truncated to 1048576 [ 717.961863][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.963980][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.992551][T18391] netlink: 'syz.5.2819': attribute type 1 has an invalid length. [ 718.118175][T18391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 718.193917][T18405] gretap1: entered promiscuous mode [ 718.316457][T18416] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2824'. [ 718.346110][T18391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 718.350588][T18391] bond4: (slave bond5): Enslaving as an active interface with a down link [ 718.377768][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 718.377789][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 718.377811][T18419] netlink: 'syz.1.2823': attribute type 14 has an invalid length. [ 718.377823][T18419] netlink: 'syz.1.2823': attribute type 13 has an invalid length. [ 718.378558][T18405] bond4 (unregistering): (slave bond5): Releasing active interface [ 718.401739][T18405] bond4 (unregistering): Released all slaves [ 718.669567][T18388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 718.905173][T18447] ip_tables: iptables: counters copy to user failed while replacing table [ 719.011618][T18451] erspan0: entered promiscuous mode [ 719.016225][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 719.016710][T18454] netlink: 'syz.8.2836': attribute type 64 has an invalid length. [ 719.098708][T18456] xt_hashlimit: size too large, truncated to 1048576 [ 719.969705][T18506] netlink: 'syz.5.2850': attribute type 11 has an invalid length. [ 719.970896][T18512] netlink: 'syz.5.2850': attribute type 11 has an invalid length. [ 720.106821][T18518] xt_hashlimit: size too large, truncated to 1048576 [ 720.398876][T18532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.648800][T18545] netlink: 'syz.6.2861': attribute type 7 has an invalid length. [ 721.229506][T18582] openvswitch: netlink: Message has 9864 unknown bytes. [ 721.548794][T18608] FAULT_INJECTION: forcing a failure. [ 721.548794][T18608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.548827][T18608] CPU: 1 UID: 0 PID: 18608 Comm: syz.6.2879 Not tainted syzkaller #0 PREEMPT(full) [ 721.548846][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 721.548857][T18608] Call Trace: [ 721.548864][T18608] [ 721.548873][T18608] dump_stack_lvl+0xe8/0x150 [ 721.548903][T18608] should_fail_ex+0x410/0x560 [ 721.548931][T18608] _copy_from_user+0x2d/0xb0 [ 721.548962][T18608] ___sys_sendmsg+0x1c6/0x360 [ 721.548981][T18608] ? __lock_acquire+0x747/0x2de0 [ 721.549006][T18608] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.549052][T18608] ? __fget_files+0x2a/0x420 [ 721.549072][T18608] ? __fget_files+0x3a2/0x420 [ 721.549101][T18608] __x64_sys_sendmsg+0x1b1/0x290 [ 721.549119][T18608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.549152][T18608] do_syscall_64+0x166/0x520 [ 721.549172][T18608] ? trace_irq_disable+0x3b/0x140 [ 721.549187][T18608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.549202][T18608] ? clear_bhb_loop+0x70/0xc0 [ 721.549220][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.549235][T18608] RIP: 0033:0x7f2a3759e559 [ 721.549250][T18608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.549262][T18608] RSP: 002b:00007f2a3838e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.549279][T18608] RAX: ffffffffffffffda RBX: 00007f2a37825fa0 RCX: 00007f2a3759e559 [ 721.549289][T18608] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 721.549299][T18608] RBP: 00007f2a3838e090 R08: 0000000000000000 R09: 0000000000000000 [ 721.549308][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.549316][T18608] R13: 00007f2a37826038 R14: 00007f2a37825fa0 R15: 00007ffd55714d78 [ 721.549341][T18608] [ 721.578067][T18609] syzkaller1: entered promiscuous mode [ 721.578089][T18609] syzkaller1: entered allmulticast mode [ 721.839800][T18617] bond4: entered allmulticast mode [ 721.840301][T18617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 722.105305][T18636] netlink: 'syz.8.2884': attribute type 1 has an invalid length. [ 722.165952][T18639] __nla_validate_parse: 5 callbacks suppressed [ 722.165996][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2884'. [ 722.173056][T18636] 8021q: adding VLAN 0 to HW filter on device bond29 [ 722.226561][T18642] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2888'. [ 722.507065][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2890'. [ 722.536357][T18636] netlink: 'syz.8.2884': attribute type 10 has an invalid length. [ 722.536380][T18636] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2884'. [ 722.555353][T18659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 722.575567][T18659] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 722.621915][T18659] bond4: (slave wlan1): Enslaving as an active interface with an up link [ 722.622062][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 722.634062][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2890'. [ 722.691785][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 722.791299][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 722.845411][T18661] netlink: 279 bytes leftover after parsing attributes in process `syz.6.2891'. [ 723.107138][T18687] ip6gretap0: entered promiscuous mode [ 723.110368][T18687] batadv0: entered promiscuous mode [ 723.111670][T18687] debugfs: 'hsr1' already exists in 'hsr' [ 723.111692][T18687] Cannot create hsr debugfs directory [ 723.111750][T18687] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 723.111766][T18687] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 723.255482][T18692] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 723.310937][T18692] bond3: entered promiscuous mode [ 723.311421][T18692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.401876][T18700] bridge_slave_0: left allmulticast mode [ 723.401903][T18700] bridge_slave_0: left promiscuous mode [ 723.402137][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.428879][T18700] bridge_slave_1: left allmulticast mode [ 723.428906][T18700] bridge_slave_1: left promiscuous mode [ 723.429148][T18700] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.460204][T18700] bond0: (slave bond_slave_0): Releasing backup interface [ 723.491200][T18700] bond0: (slave bond_slave_1): Releasing backup interface [ 723.511329][T18700] team0: Port device team_slave_0 removed [ 723.530645][T18700] team0: Port device team_slave_1 removed [ 723.531588][T18700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.531608][T18700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.544285][T18700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.544307][T18700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.559803][T18700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 723.850709][T18709] veth5: entered allmulticast mode [ 723.860927][T18709] bond3: (slave veth5): making interface the new active one [ 723.860981][T18709] veth5: entered promiscuous mode [ 723.903133][T18709] bond3: (slave veth5): Enslaving as an active interface with an up link [ 724.080227][T18724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 724.119763][T18724] netlink: 964 bytes leftover after parsing attributes in process `syz.1.2908'. [ 724.447709][T18743] netlink: 'syz.8.2915': attribute type 2 has an invalid length. [ 724.447731][T18743] netlink: 'syz.8.2915': attribute type 1 has an invalid length. [ 725.362760][T18740] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 725.572254][T18821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.609397][T18825] netlink: 'syz.6.2938': attribute type 7 has an invalid length. [ 726.059149][T18837] xt_hashlimit: size too large, truncated to 1048576 [ 726.424891][T18865] netlink: 'syz.5.2948': attribute type 7 has an invalid length. [ 726.492403][T18869] xt_hashlimit: size too large, truncated to 1048576 [ 726.548935][T18873] xt_hashlimit: size too large, truncated to 1048576 [ 726.589217][T18874] xt_hashlimit: size too large, truncated to 1048576 [ 726.688306][T18876] xt_hashlimit: size too large, truncated to 1048576 [ 726.928823][T18886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 727.109050][T18894] tipc: Failed to remove unknown binding: 66,0,0/0:133771920/133771922 [ 727.109078][T18894] tipc: Failed to remove unknown binding: 66,0,0/0:133771920/133771921 [ 727.110357][T18894] tipc: Failed to remove unknown binding: 66,0,0/0:133771920/133771922 [ 727.146731][T18894] tipc: Failed to remove unknown binding: 66,0,0/0:133771920/133771921 [ 727.219116][T18900] __nla_validate_parse: 7 callbacks suppressed [ 727.219135][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 727.356032][T18912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.480318][T18916] syzkaller0: left promiscuous mode [ 727.480339][T18916] syzkaller0: left allmulticast mode [ 727.652106][T18932] netlink: 320 bytes leftover after parsing attributes in process `syz.8.2971'. [ 727.668479][T18932] 8021q: VLANs not supported on sit0 [ 727.676210][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2971'. [ 727.690835][T18932] hsr_slave_0: left promiscuous mode [ 727.702515][T18932] tipc: Disabling bearer [ 728.039191][ T30] audit: type=1800 audit(1792084570.440:8): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2979" name="memory.events" dev="tmpfs" ino=1346 res=0 errno=0 [ 728.810621][T18985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.204942][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 729.209710][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 729.210563][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 729.211459][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 729.237050][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 729.466856][T19020] netlink: 'syz.5.2998': attribute type 10 has an invalid length. [ 729.506114][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 729.512367][T19020] netlink: 'syz.5.2998': attribute type 1 has an invalid length. [ 729.512390][T19020] netlink: 'syz.5.2998': attribute type 2 has an invalid length. [ 729.581274][T19009] FAULT_INJECTION: forcing a failure. [ 729.581274][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 729.581305][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.2.2997 Not tainted syzkaller #0 PREEMPT(full) [ 729.581325][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 729.581337][T19009] Call Trace: [ 729.581344][T19009] [ 729.581353][T19009] dump_stack_lvl+0xe8/0x150 [ 729.581384][T19009] should_fail_ex+0x410/0x560 [ 729.581413][T19009] ? __alloc_skb+0x1db/0x7a0 [ 729.581438][T19009] should_failslab+0xa8/0x100 [ 729.581462][T19009] ? __alloc_skb+0x1db/0x7a0 [ 729.581485][T19009] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 729.581505][T19009] ? __alloc_skb+0x18d/0x7a0 [ 729.581538][T19009] ? __alloc_skb+0x1db/0x7a0 [ 729.581570][T19009] __alloc_skb+0x1db/0x7a0 [ 729.581601][T19009] netlink_ack+0x136/0xb30 [ 729.581622][T19009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.581653][T19009] ? __copy_skb_header+0xa3/0x4a0 [ 729.581683][T19009] netlink_rcv_skb+0x2a4/0x4a0 [ 729.581708][T19009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.581737][T19009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.581772][T19009] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.581796][T19009] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.581825][T19009] netlink_unicast+0x7bd/0x940 [ 729.581857][T19009] netlink_sendmsg+0x813/0xb40 [ 729.581890][T19009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.581922][T19009] ? apparmor_socket_sendmsg+0x98/0x360 [ 729.581951][T19009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.581973][T19009] sock_sendmsg_nosec+0x14e/0x190 [ 729.581999][T19009] ____sys_sendmsg+0x54e/0x850 [ 729.582024][T19009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.582052][T19009] ? import_iovec+0x73/0xa0 [ 729.582081][T19009] ___sys_sendmsg+0x2a5/0x360 [ 729.582099][T19009] ? __lock_acquire+0x747/0x2de0 [ 729.582123][T19009] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.582177][T19009] ? __fget_files+0x2a/0x420 [ 729.582203][T19009] ? __fget_files+0x3a2/0x420 [ 729.582239][T19009] __x64_sys_sendmsg+0x1b1/0x290 [ 729.582262][T19009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.582302][T19009] do_syscall_64+0x166/0x520 [ 729.582323][T19009] ? trace_irq_disable+0x3b/0x140 [ 729.582342][T19009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.582361][T19009] ? clear_bhb_loop+0x70/0xc0 [ 729.582384][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.582402][T19009] RIP: 0033:0x7faac5b9e559 [ 729.582420][T19009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.582435][T19009] RSP: 002b:00007faac69f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.582454][T19009] RAX: ffffffffffffffda RBX: 00007faac5e25fa0 RCX: 00007faac5b9e559 [ 729.582468][T19009] RDX: 0000000000000044 RSI: 0000200000000300 RDI: 0000000000000003 [ 729.582479][T19009] RBP: 00007faac69f9090 R08: 0000000000000000 R09: 0000000000000000 [ 729.582491][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.582502][T19009] R13: 00007faac5e26038 R14: 00007faac5e25fa0 R15: 00007ffe807ccb28 [ 729.582539][T19009] [ 730.128410][T19039] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3001'. [ 730.141940][T19039] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3001'. [ 730.281855][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.299443][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.300366][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.350731][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 730.350756][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 730.405639][T19054] netlink: 'syz.2.3004': attribute type 30 has an invalid length. [ 730.406123][T19053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 730.896912][T19004] infiniband rxe0: set active [ 730.896996][ T5744] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.897058][T19004] infiniband rxe0: added rxe_eth0 [ 730.986345][T19004] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 730.986379][T19004] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 730.986410][T19004] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 731.036323][T19081] syzkaller0: entered promiscuous mode [ 731.036343][T19081] syzkaller0: entered allmulticast mode [ 731.266901][T19004] RDS/IB: rxe0: added [ 731.266998][T19004] smc: adding ib device rxe0 with port count 1 [ 731.267018][T19004] smc: ib device rxe0 port 1 has no pnetid [ 731.267090][ T5744] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.268761][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.298489][ T4934] Bluetooth: hci7: command tx timeout [ 731.681529][T19115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3022'. [ 731.711873][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3023'. [ 731.884833][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 732.052983][T19141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 732.358690][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 732.656176][T19165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 732.753500][T19169] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 732.753521][T19169] __nla_validate_parse: 3 callbacks suppressed [ 732.753532][T19169] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3040'. [ 732.942367][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 733.027935][T19181] netlink: 279 bytes leftover after parsing attributes in process `syz.5.3045'. [ 733.229974][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 733.363252][ T4934] Bluetooth: hci7: command tx timeout [ 733.430809][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3046'. [ 733.430835][T19187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3046'. [ 733.516906][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 733.696706][T19192] netlink: 804 bytes leftover after parsing attributes in process `syz.5.3048'. [ 733.981325][T19203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 734.005888][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 734.339801][T19211] gretap0: entered promiscuous mode [ 734.345251][T19211] vlan4: entered promiscuous mode [ 734.381272][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 734.492218][T19217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3055'. [ 734.983765][ T5744] rxe_eth0 speed is unknown, defaulting to 1000 [ 735.377230][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 735.444865][ T4934] Bluetooth: hci7: command tx timeout [ 735.598983][T19273] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3065'. [ 736.057893][T19004] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.059674][T19004] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.059836][T19004] bridge_slave_0: entered allmulticast mode [ 736.061720][T19004] bridge_slave_0: entered promiscuous mode [ 736.068760][T19004] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.070510][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.070672][T19004] bridge_slave_1: entered allmulticast mode [ 736.074756][T19004] bridge_slave_1: entered promiscuous mode [ 736.111426][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 736.206327][T19004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.242803][T19004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.397635][T19299] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 736.397659][T19299] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3071'. [ 737.348450][T19321] xt_hashlimit: size too large, truncated to 1048576 [ 737.411179][T19324] xt_hashlimit: size too large, truncated to 1048576 [ 737.415940][T19327] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 737.415999][T19327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.525430][ T4934] Bluetooth: hci7: command tx timeout [ 737.636979][T19004] team0: Port device team_slave_0 added [ 737.730401][T19320] geneve2: entered promiscuous mode [ 737.730428][T19320] geneve2: entered allmulticast mode [ 737.731684][ T8607] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.731892][ T8607] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.731978][ T8607] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.732012][ T8607] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.811164][T19335] vlan1: entered allmulticast mode [ 737.811186][T19335] bond0: entered allmulticast mode [ 737.811198][T19335] bond_slave_0: entered allmulticast mode [ 737.811214][T19335] bond_slave_1: entered allmulticast mode [ 737.840022][T19004] team0: Port device team_slave_1 added [ 738.153407][T19355] __nla_validate_parse: 2 callbacks suppressed [ 738.153426][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3081'. [ 738.168429][T19354] ip_tables: iptables: counters copy to user failed while replacing table [ 738.210378][T19363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 738.328068][T19004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.328098][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.328121][T19004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.330014][T19004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.330029][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.330050][T19004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.737235][T19004] hsr_slave_0: entered promiscuous mode [ 738.750475][T19004] hsr_slave_1: entered promiscuous mode [ 738.751233][T19004] debugfs: 'hsr0' already exists in 'hsr' [ 738.751252][T19004] Cannot create hsr debugfs directory [ 738.949122][T19399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 739.128879][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 739.495732][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 739.495842][T19419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3094'. [ 739.725062][ T8603] vlan4: left allmulticast mode [ 739.725083][ T8603] geneve0: left allmulticast mode [ 739.725216][ T8603] bridge0: port 1(vlan4) entered disabled state [ 739.860264][ T8603] ip6gretap0 (unregistering): left promiscuous mode [ 740.039146][ T8603] bond2 (unregistering): (slave geneve3): Releasing active interface [ 740.109321][ T8603] bond0 (unregistering): Released all slaves [ 740.118835][ T8603] bond1 (unregistering): Released all slaves [ 740.130163][ T8603] bond2 (unregistering): Released all slaves [ 740.145915][ T8603] bond3 (unregistering): Released all slaves [ 740.159367][ T8603] bond4 (unregistering): Released all slaves [ 740.169763][ T8603] bond5 (unregistering): Released all slaves [ 740.182770][ T8603] bond6 (unregistering): Released all slaves [ 740.199641][ T8603] bond7 (unregistering): Released all slaves [ 740.210029][ T8603] bond8 (unregistering): Released all slaves [ 740.224599][ T8603] bond9 (unregistering): Released all slaves [ 740.232135][ T8603] bond10 (unregistering): Released all slaves [ 740.248353][ T8603] bond11 (unregistering): Released all slaves [ 740.259497][ T8603] bond12 (unregistering): Released all slaves [ 740.286104][ T8603] bond13 (unregistering): Released all slaves [ 740.296433][ T8603] bond14 (unregistering): Released all slaves [ 740.308636][ T8603] bond15 (unregistering): Released all slaves [ 740.328484][ T8603] bond16 (unregistering): Released all slaves [ 740.338770][ T8603] bond17 (unregistering): Released all slaves [ 740.350970][ T8603] bond18 (unregistering): Released all slaves [ 740.361630][ T8603] bond19 (unregistering): Released all slaves [ 740.372685][ T8603] bond20 (unregistering): Released all slaves [ 740.388305][ T8603] bond21 (unregistering): Released all slaves [ 740.412893][ T8603] bond22 (unregistering): Released all slaves [ 740.421683][ T8603] bond23 (unregistering): Released all slaves [ 740.434507][ T8603] bond24 (unregistering): Released all slaves [ 740.447879][ T8603] bond25 (unregistering): Released all slaves [ 740.461612][ T8603] bond26 (unregistering): Released all slaves [ 740.479768][ T8603] bond27 (unregistering): Released all slaves [ 740.492168][ T8603] bond28 (unregistering): Released all slaves [ 740.507512][ T8603] bond29 (unregistering): Released all slaves [ 740.869312][ T8603] : left promiscuous mode [ 740.895519][T19447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 741.117379][T19459] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3100'. [ 741.221189][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3103'. [ 741.289312][ T8603] tipc: Disabling bearer [ 741.298666][ T8603] tipc: Left network mode [ 742.247562][T19496] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3111'. [ 742.291818][T19496] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3111'. [ 742.650952][T19508] netlink: 'syz.1.3115': attribute type 3 has an invalid length. [ 742.867321][T19512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3116'. [ 742.869523][T19004] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 742.879148][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.882969][T19004] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 742.920035][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.967343][T19004] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 742.970462][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.975427][T19004] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 742.987461][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.085868][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3118'. [ 743.217278][T19533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 743.558638][ T8603] batadv0: left promiscuous mode [ 743.645382][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3124'. [ 743.712088][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 744.141637][T19566] xt_hashlimit: size too large, truncated to 1048576 [ 744.586094][T19004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.645202][T19004] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.657477][ T811] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.657582][ T811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.700223][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.700339][ T8607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.930758][ T8603] IPVS: stop unused estimator thread 0... [ 745.094493][T19598] xt_hashlimit: size too large, truncated to 1048576 [ 745.252757][T19592] netlink: 'syz.6.3130': attribute type 1 has an invalid length. [ 745.438012][T19592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 745.438680][T19592] netlink: 'syz.6.3130': attribute type 1 has an invalid length. [ 745.542138][T19627] sctp: [Deprecated]: syz.2.3134 (pid 19627) Use of int in maxseg socket option. [ 745.542138][T19627] Use struct sctp_assoc_value instead [ 745.576125][T19592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.579845][T19592] netlink: 'syz.6.3130': attribute type 1 has an invalid length. [ 745.700226][T19625] veth0_vlan: left promiscuous mode [ 745.702197][T19625] veth0_vlan: entered promiscuous mode [ 745.751600][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 745.797912][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 745.798814][T19592] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 745.854574][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 745.928984][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 745.988569][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.099178][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.160311][T19639] netlink: 'syz.6.3136': attribute type 1 has an invalid length. [ 746.182518][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.240489][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.311326][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.393236][T19639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 746.429022][T19638] gretap2: entered promiscuous mode [ 746.496715][T19643] bond8 (unregistering): Released all slaves [ 746.528078][T19655] netlink: 'syz.5.3141': attribute type 1 has an invalid length. [ 746.528101][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3141'. [ 746.528120][T19655] netlink: 'syz.5.3141': attribute type 1 has an invalid length. [ 746.650708][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.676821][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3139'. [ 746.902135][T19625] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.905072][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.916268][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.920295][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.036184][T19673] ip_tables: iptables: counters copy to user failed while replacing table [ 747.125002][T19004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.206509][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3148'. [ 747.206532][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 747.206555][T19682] netlink: 'syz.5.3148': attribute type 19 has an invalid length. [ 747.206567][T19682] netlink: 'syz.5.3148': attribute type 20 has an invalid length. [ 747.257181][ T811] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.257267][ T811] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.257331][ T811] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.257364][ T811] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.582386][T19704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3154'. [ 747.582420][T19704] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 747.702937][T19004] veth0_vlan: entered promiscuous mode [ 747.719252][T19004] veth1_vlan: entered promiscuous mode [ 747.761302][T19004] veth0_macvtap: entered promiscuous mode [ 747.774195][T19004] veth1_macvtap: entered promiscuous mode [ 747.828326][T19004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.845842][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c714400: rx timeout, send abort [ 747.848902][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c714400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 747.881355][T19004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.908543][ T8607] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.908590][ T8607] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.908621][ T8607] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.919399][T19714] openvswitch: netlink: IP tunnel TTL not specified. [ 747.960997][T19714] tipc: Started in network mode [ 747.961027][T19714] tipc: Node identity 1e3c8cca6c0f, cluster identity 4711 [ 747.987246][T19714] tipc: Enabled bearer , priority 0 [ 748.023587][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.259844][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.259866][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.400940][ T811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.400961][ T811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.543922][T19742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 748.767329][T19750] tipc: Enabling of bearer rejected, already enabled [ 749.085857][ T25] tipc: Node number set to 1915981002 [ 749.450674][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.462116][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.478775][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.480374][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.482539][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.528044][T19777] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3172'. [ 749.684272][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 749.744725][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3171'. [ 749.759368][T19786] bridge_slave_1: left allmulticast mode [ 749.759396][T19786] bridge_slave_1: left promiscuous mode [ 749.759650][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.806215][T19786] bridge_slave_0: left allmulticast mode [ 749.806243][T19786] bridge_slave_0: left promiscuous mode [ 749.806495][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.187440][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3176'. [ 750.215771][ T811] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.215808][ T811] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.466463][T19810] pim6reg1: entered promiscuous mode [ 750.466487][T19810] pim6reg1: entered allmulticast mode [ 750.492260][ T811] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.492294][ T811] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.649457][ T811] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.649490][ T811] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.733505][T19825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 750.780286][T19772] rxe_eth0 speed is unknown, defaulting to 1000 [ 750.802700][ T811] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.802734][ T811] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.846470][ T8913] IPVS: starting estimator thread 0... [ 750.911300][T19832] xt_hashlimit: size too large, truncated to 1048576 [ 750.933954][T19833] IPVS: using max 30 ests per chain, 72000 per kthread [ 751.093632][T19837] xt_hashlimit: size too large, truncated to 1048576 [ 751.460764][T19854] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3191'. [ 751.603578][ T52] Bluetooth: hci0: command tx timeout [ 751.643232][T19866] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3192'. [ 751.655523][T19866] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3192'. [ 751.721443][ T811] pim6reg: left allmulticast mode [ 751.863574][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3196'. [ 751.863611][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3196'. [ 751.971798][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3196'. [ 752.099762][ T811] bond2 (unregistering): (slave gre1): Releasing backup interface [ 752.164188][ T811] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 752.209732][ T811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.210058][ T811] bond_slave_0: left allmulticast mode [ 752.211176][ T811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.211563][ T811] bond_slave_1: left allmulticast mode [ 752.211778][ T811] bond0 (unregistering): Released all slaves [ 752.220838][ T811] bond1 (unregistering): Released all slaves [ 752.236476][ T811] bond2 (unregistering): Released all slaves [ 752.262130][ T811] bond3 (unregistering): Released all slaves [ 752.287670][ T811] bond5 (unregistering): Released all slaves [ 752.300736][ T811] bond4 (unregistering): (slave wlan1): Releasing backup interface [ 752.317275][ T811] bond4 (unregistering): Released all slaves [ 752.326338][ T811] bond6 (unregistering): Released all slaves [ 752.443155][ T1298] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.444195][ T1298] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.444258][ T1298] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.444291][ T1298] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.511795][T19882] tipc: Started in network mode [ 752.511814][T19882] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 752.512808][T19882] tipc: New replicast peer: 88cc:cdf9:9ed4:0000:0000:0000:0000:0001 [ 752.515769][T19882] tipc: Enabled bearer , priority 10 [ 752.548191][ T811] : left promiscuous mode [ 753.543481][ T25] tipc: Node number set to 1 [ 753.546796][T19930] tipc: Failed to remove unknown binding: 66,0,0/1915981002:2177785103/2177785105 [ 753.546826][T19930] tipc: Failed to remove unknown binding: 66,0,0/1915981002:2177785103/2177785104 [ 753.606621][T19933] tipc: Failed to remove unknown binding: 66,0,0/1915981002:2177785103/2177785105 [ 753.606653][T19933] tipc: Failed to remove unknown binding: 66,0,0/1915981002:2177785103/2177785104 [ 753.683608][ T52] Bluetooth: hci0: command tx timeout [ 753.720348][ T811] hsr_slave_0: left promiscuous mode [ 753.721150][ T811] hsr_slave_1: left promiscuous mode [ 753.722477][ T811] veth1_vlan: left allmulticast mode [ 754.177562][T19772] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.177678][T19772] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.177789][T19772] bridge_slave_0: entered allmulticast mode [ 754.178869][T19772] bridge_slave_0: entered promiscuous mode [ 754.208290][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 754.210422][T19772] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.210574][T19772] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.210717][T19772] bridge_slave_1: entered allmulticast mode [ 754.212411][T19772] bridge_slave_1: entered promiscuous mode [ 754.284367][T19772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.290625][T19772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.347292][T19772] team0: Port device team_slave_0 added [ 754.360548][T19772] team0: Port device team_slave_1 added [ 754.398403][T19772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.398421][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.398443][T19772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.400268][T19772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.400281][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.400303][T19772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.573822][T19772] hsr_slave_0: entered promiscuous mode [ 754.574517][T19772] hsr_slave_1: entered promiscuous mode [ 754.574917][T19772] debugfs: 'hsr0' already exists in 'hsr' [ 754.574934][T19772] Cannot create hsr debugfs directory [ 755.594920][T19891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.615340][T19912] netlink: 'syz.1.3203': attribute type 11 has an invalid length. [ 755.615366][T19912] netlink: 'syz.1.3203': attribute type 11 has an invalid length. [ 755.615378][T19912] __nla_validate_parse: 1 callbacks suppressed [ 755.615389][T19912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3203'. [ 755.640604][T19772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 755.732811][T19772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.741514][T19772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.760831][T19772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.763277][ T52] Bluetooth: hci0: command tx timeout [ 755.768422][T19772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 755.800235][T19772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.805288][T19772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 755.834120][T19772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.119256][T19772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.191763][T19772] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.234769][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.234878][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.271997][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.272132][ T8603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.590070][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3220'. [ 756.752008][T19990] netlink: 'syz.6.3220': attribute type 13 has an invalid length. [ 757.506342][T19772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.790926][T19772] veth0_vlan: entered promiscuous mode [ 757.799488][T19772] veth1_vlan: entered promiscuous mode [ 757.827939][T19772] veth0_macvtap: entered promiscuous mode [ 757.834692][T19772] veth1_macvtap: entered promiscuous mode [ 757.845303][ T52] Bluetooth: hci0: command tx timeout [ 757.855644][T19772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.871594][T19772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.896841][ T8913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.898239][ T8913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.898274][ T8913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.898318][ T8913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.742604][T20001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.902022][ T8913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.902042][ T8913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.010802][ T8607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.010823][ T8607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.161106][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 760.532686][T20072] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3236'. [ 761.388978][T20117] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3247'. [ 761.408991][T20117] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3247'. [ 761.409776][T20113] team0: No ports can be present during mode change [ 761.657660][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 761.668739][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 761.672599][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 761.690792][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 761.693407][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 761.781375][T20131] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3253'. [ 761.881927][T20131] xt_socket: unknown flags 0x4 [ 761.917854][T20131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'. [ 762.291628][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3256'. [ 762.411037][ T8914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.411073][ T8914] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.498669][T20153] syzkaller1: entered promiscuous mode [ 762.498692][T20153] syzkaller1: entered allmulticast mode [ 762.717900][ T8914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.717934][ T8914] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.900164][T20183] syzkaller0: entered promiscuous mode [ 762.900187][T20183] syzkaller0: entered allmulticast mode [ 763.046907][ T8914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.046940][ T8914] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.096950][T20188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3260'. [ 763.149713][T20121] rxe_eth0 speed is unknown, defaulting to 1000 [ 763.356568][ T8914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.356604][ T8914] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.360463][T20203] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 763.442831][T20209] net_ratelimit: 2 callbacks suppressed [ 763.442855][T20209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 763.768693][ T52] Bluetooth: hci3: command tx timeout [ 763.947391][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 764.326253][T20235] netlink: NAT attribute has 8 unknown bytes [ 764.326289][T20235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.327134][T20235] netlink: 'syz.8.3272': attribute type 5 has an invalid length. [ 764.771281][ T8914] tipc: Resetting bearer [ 765.179358][ T8914] gretap0 (unregistering): left allmulticast mode [ 765.509810][ T8914] tipc: Disabling bearer [ 765.592741][ T8914] bond0 (unregistering): Released all slaves [ 765.599820][ T8914] bond1 (unregistering): Released all slaves [ 765.611452][ T8914] bond2 (unregistering): Released all slaves [ 765.626422][ T8914] bond3 (unregistering): Released all slaves [ 765.642376][ T8914] bond4 (unregistering): Released all slaves [ 765.668237][ T8914] bond5 (unregistering): Released all slaves [ 765.687574][ T8914] bond6 (unregistering): Released all slaves [ 765.702096][ T8914] bond7 (unregistering): Released all slaves [ 765.840888][ T8914] : left promiscuous mode [ 765.860184][ T52] Bluetooth: hci3: command tx timeout [ 765.976106][ T8914] tipc: Left network mode [ 766.045625][T20121] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.047659][T20121] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.047821][T20121] bridge_slave_0: entered allmulticast mode [ 766.050701][T20121] bridge_slave_0: entered promiscuous mode [ 766.066092][T20121] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.066204][T20121] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.068373][T20121] bridge_slave_1: entered allmulticast mode [ 766.070371][T20121] bridge_slave_1: entered promiscuous mode [ 766.152244][T20121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.156491][T20121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.215719][T20121] team0: Port device team_slave_0 added [ 766.218679][T20121] team0: Port device team_slave_1 added [ 766.373953][T20121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.373971][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.373993][T20121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.377219][T20121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.377236][T20121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.377259][T20121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.424147][T20121] hsr_slave_0: entered promiscuous mode [ 766.425077][T20121] hsr_slave_1: entered promiscuous mode [ 766.425730][T20121] debugfs: 'hsr0' already exists in 'hsr' [ 766.425747][T20121] Cannot create hsr debugfs directory [ 766.866584][ T8914] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 766.866608][ T8914] batman_adv: batadv0: Removing interface: ipvlan0 [ 766.872674][ T8914] veth1_macvtap: left promiscuous mode [ 766.872709][ T8914] veth0_macvtap: left promiscuous mode [ 767.125797][ T31] INFO: task syz.7.1586:13824 blocked for more than 143 seconds. [ 767.125815][ T31] Not tainted syzkaller #0 [ 767.125821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 767.125826][ T31] task:syz.7.1586 state:D stack:25792 pid:13824 tgid:13820 ppid:7502 task_flags:0x400140 flags:0x00080002 [ 767.125859][ T31] Call Trace: [ 767.125863][ T31] [ 767.125873][ T31] __schedule+0x17db/0x58f0 [ 767.125909][ T31] ? __pfx___schedule+0x10/0x10 [ 767.125926][ T31] ? schedule+0x90/0x2b0 [ 767.125940][ T31] schedule+0x164/0x2b0 [ 767.125958][ T31] schedule_preempt_disabled+0x13/0x30 [ 767.125978][ T31] __mutex_lock+0x7c1/0x1550 [ 767.126008][ T31] ? __mutex_lock+0x5d4/0x1550 [ 767.126033][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 767.126164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 767.126177][ T31] ? net_generic+0x1e/0x240 [ 767.126192][ T31] ? net_generic+0x1e/0x240 [ 767.126204][ T31] ? net_generic+0x1e/0x240 [ 767.126214][ T31] ? net_generic+0x1e/0x240 [ 767.126229][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 767.126244][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 767.126261][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 767.126278][ T31] ? bpf_lsm_capable+0x9/0x20 [ 767.126291][ T31] ? security_capable+0x7e/0x2c0 [ 767.126310][ T31] genl_rcv_msg+0x614/0x7a0 [ 767.126324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.126333][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 767.126355][ T31] netlink_rcv_skb+0x226/0x4a0 [ 767.126368][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.126379][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 767.126399][ T31] ? down_read+0x2be/0x330 [ 767.126416][ T31] genl_rcv+0x28/0x40 [ 767.126431][ T31] netlink_unicast+0x7bd/0x940 [ 767.126461][ T31] netlink_sendmsg+0x813/0xb40 [ 767.126489][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.126518][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 767.126551][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.126564][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 767.126581][ T31] ____sys_sendmsg+0x54e/0x850 [ 767.126595][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.126611][ T31] ? import_iovec+0x73/0xa0 [ 767.126628][ T31] ___sys_sendmsg+0x2a5/0x360 [ 767.126638][ T31] ? __lock_acquire+0x747/0x2de0 [ 767.126653][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.126665][ T31] ? futex_wait+0x2a2/0x390 [ 767.126699][ T31] ? __fget_files+0x2a/0x420 [ 767.126714][ T31] ? __fget_files+0x3a2/0x420 [ 767.126733][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 767.126745][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.126767][ T31] do_syscall_64+0x166/0x520 [ 767.126780][ T31] ? trace_irq_disable+0x3b/0x140 [ 767.126791][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.126803][ T31] ? clear_bhb_loop+0x70/0xc0 [ 767.126815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.126826][ T31] RIP: 0033:0x7fa797b9e559 [ 767.126837][ T31] RSP: 002b:00007fa798b29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.126849][ T31] RAX: ffffffffffffffda RBX: 00007fa797e25fa0 RCX: 00007fa797b9e559 [ 767.126856][ T31] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 000000000000000c [ 767.126863][ T31] RBP: 00007fa797c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 767.126869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.126875][ T31] R13: 00007fa797e26038 R14: 00007fa797e25fa0 R15: 00007ffd87a5a788 [ 767.126892][ T31] [ 767.126924][ T31] [ 767.126924][ T31] Showing all locks held in the system: [ 767.126966][ T31] locks held by kworker/u8:1/13: 3, on CPU#0: [ 767.127013][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127075][ T31] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127101][ T31] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 767.127130][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 767.127175][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 767.127214][ T31] locks held by kworker/u8:3/50: 3, last CPU#0: [ 767.127221][ T31] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127247][ T31] #1: ffffc90000bb7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127273][ T31] #2: ffff8880594c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 767.127552][ T31] locks held by dhcpcd/5277: 2, on CPU#0: [ 767.127561][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.127586][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.127610][ T31] locks held by getty/5370: 2, on CPU#0: [ 767.127617][ T31] #0: ffff888033cfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 767.127685][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 767.127744][ T31] locks held by kworker/u8:16/8914: 5, on CPU#1: [ 767.127752][ T31] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127778][ T31] #1: ffffc900057efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 767.127803][ T31] #2: ffffffff91247348 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 767.127842][ T31] #3: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 767.127870][ T31] #4: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 767.127903][ T31] locks held by syz.9.1470/13344: 2, on CPU#1: [ 767.127910][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.127932][ T31] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 767.127971][ T31] locks held by syz.7.1586/13824: 2, on CPU#1: [ 767.127983][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128012][ T31] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 767.128046][ T31] locks held by syz-executor/20121: 7, on CPU#0: [ 767.128053][ T31] #0: ffff888032a02460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 767.128088][ T31] #1: ffff888033d1d480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 767.128129][ T31] #2: ffff88802a5e2788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 767.128157][ T31] #3: ffffffff90accee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 767.128273][ T31] #4: ffff888068303128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 767.128361][ T31] #5: ffff888068302258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 767.128417][ T31] #6: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 767.128445][ T31] locks held by syz.2.3274/20246: 1, on CPU#1: [ 767.128452][ T31] #0: ffff888035717140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 767.128532][ T31] locks held by syz.2.3274/20247: 4, on CPU#1: [ 767.128540][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128562][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.128584][ T31] #2: ffff888035717140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 767.128607][ T31] #3: ffff888048ace348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 767.128654][ T31] locks held by syz.8.3276/20257: 2, on CPU#1: [ 767.128661][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128684][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.128706][ T31] locks held by syz.8.3276/20260: 2, on CPU#1: [ 767.128713][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128734][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.128757][ T31] locks held by syz.1.3278/20276: 2, on CPU#0: [ 767.128764][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128785][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.128807][ T31] locks held by syz.5.3279/20268: 2, on CPU#1: [ 767.128814][ T31] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 767.128844][ T31] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 767.128869][ T31] [ 767.128872][ T31] ============================================= [ 767.128872][ T31] [ 767.128882][ T31] NMI backtrace for cpu 0 [ 767.128891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 767.128902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.128908][ T31] Call Trace: [ 767.128913][ T31] [ 767.128919][ T31] dump_stack_lvl+0xe8/0x150 [ 767.128935][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 767.128949][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 767.128989][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 767.129007][ T31] sys_info+0x135/0x170 [ 767.129016][ T31] watchdog+0xfd7/0x1030 [ 767.129040][ T31] ? watchdog+0x1c7/0x1030 [ 767.129053][ T31] kthread+0x38b/0x480 [ 767.129063][ T31] ? __pfx_watchdog+0x10/0x10 [ 767.129072][ T31] ? __pfx_kthread+0x10/0x10 [ 767.129082][ T31] ret_from_fork+0x514/0xb70 [ 767.129111][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 767.129124][ T31] ? __switch_to+0xc89/0x1420 [ 767.129139][ T31] ? __pfx_kthread+0x10/0x10 [ 767.129149][ T31] ret_from_fork_asm+0x1a/0x30 [ 767.129171][ T31] [ 767.129175][ T31] Sending NMI from CPU 0 to CPUs 1: [ 767.129246][ C1] NMI backtrace for cpu 1 [ 767.129260][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 767.129280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.129292][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 767.129319][ C1] Code: 6b 8a 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 65 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 767.129335][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 767.129351][ C1] RAX: 000000000009607f RBX: ffffffff819bfbe0 RCX: 8000000000000001 [ 767.129364][ C1] RDX: 0000000000000001 RSI: ffffffff8e459e4b RDI: ffffffff8c6dd880 [ 767.129378][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 767.129392][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 767.129406][ C1] R13: 1ffff11003ed1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 767.129420][ C1] FS: 0000000000000000(0000) GS:ffff888123bd0000(0000) knlGS:0000000000000000 [ 767.129436][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.129449][ C1] CR2: 00007fb837883b87 CR3: 0000000068144000 CR4: 00000000003526f0 [ 767.129466][ C1] Call Trace: [ 767.129472][ C1] [ 767.129479][ C1] default_idle+0x9/0x20 [ 767.129505][ C1] default_idle_call+0x72/0xb0 [ 767.129532][ C1] do_idle+0x2e0/0x540 [ 767.129551][ C1] ? __pfx_do_idle+0x10/0x10 [ 767.129568][ C1] ? do_idle+0x11/0x540 [ 767.129588][ C1] cpu_startup_entry+0x43/0x60 [ 767.129605][ C1] start_secondary+0x101/0x110 [ 767.129633][ C1] common_startup_64+0x13e/0x157 [ 767.129664][ C1] [ 767.130201][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 768.269469][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 768.281028][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.294007][ T31] Call Trace: [ 768.298417][ T31] [ 768.301532][ T31] vpanic+0x56d/0xa60 [ 768.306586][ T31] ? __pfx_vpanic+0x10/0x10 [ 768.312166][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 768.318038][ T31] panic+0xc5/0xd0 [ 768.324110][ T31] ? __pfx_panic+0x10/0x10 [ 768.330145][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 768.336034][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 768.342911][ T31] watchdog+0x1030/0x1030 [ 768.347908][ T31] ? watchdog+0x1c7/0x1030 [ 768.353397][ T31] kthread+0x38b/0x480 [ 768.357485][ T31] ? __pfx_watchdog+0x10/0x10 [ 768.362389][ T31] ? __pfx_kthread+0x10/0x10 [ 768.367213][ T31] ret_from_fork+0x514/0xb70 [ 768.372349][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 768.377745][ T31] ? __switch_to+0xc89/0x1420 [ 768.382810][ T31] ? __pfx_kthread+0x10/0x10 [ 768.387601][ T31] ret_from_fork_asm+0x1a/0x30 [ 768.392393][ T31] [ 768.395711][ T31] Kernel Offset: disabled [ 768.400160][ T31] Rebooting in 86400 seconds..