last executing test programs: 3m54.187235826s ago: executing program 1 (id=2981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m54.029274s ago: executing program 1 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000e9860000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000000000b703000001000000850000009b0000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001140)='\x00'/14, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000340)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000f69a2a42363a493a7c2c5e33caf46f97d6b60c51dc2a1c2bc2", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdb5f250c0000002000038013000100180003801400018005000200000000000800010002000000180001801400020076657468305f746f5f626f6e64000000"], 0x4c}}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000001900010000b05403df12f46520bf5cfd05e99f000000fcdbdf250a010101000000000000000000000000ac1e00010000f56f5ad972eae7d100004e2100004e24fffc020000005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff030000000000000000000000008000000300000000000000fdffffffff1f0000000000000000000000000000000000000100010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 3m53.80105025s ago: executing program 1 (id=2988): socketpair(0x1, 0x5, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x101e0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) write(r3, &(0x7f0000000000)="01000000", 0x4) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f31"], 0xcd0}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x4000000) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRES16=r6, @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f00000004c0)=ANY=[], 0xb6) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x19, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x40, 0x618}}) 3m52.534794147s ago: executing program 1 (id=2995): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff69, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xf4bb108a29525ace, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0x0, 0xb, 0x2}, @TCA_NETEM_LOSS={0x0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x0, 0x2, {0x2c0b, 0x9, 0x6, 0x6}}, @NETEM_LOSS_GI={0x0, 0x1, {0x1, 0x2, 0xdc5, 0x7ff, 0x1}}, @NETEM_LOSS_GI={0x0, 0x1, {0xfff, 0xfffffffe, 0xb, 0x7fff, 0x1a}}, @NETEM_LOSS_GI={0x0, 0x1, {0x0, 0x3, 0xffffffff, 0x2, 0x17bacd4c}}, @NETEM_LOSS_GE={0x0, 0x2, {0x5, 0x3, 0x0, 0x7}}, @NETEM_LOSS_GE={0x0, 0x2, {0x80, 0xaf5, 0x200, 0x6}}, @NETEM_LOSS_GI={0x0, 0x1, {0x101, 0x8000008, 0x1, 0x7f, 0x4}}, @NETEM_LOSS_GE={0x0, 0x2, {0x6, 0x2, 0xf, 0xffffff76}}]}, @TCA_NETEM_JITTER64={0x0, 0xb, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640040f0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x27dfdffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x24080) (async) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f00000000c0)={0x4c}) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x20000844) (async) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x8, 0x3a, 0x0, @private0, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfb9, 0x2}}}}}}, 0x0) 3m51.790304479s ago: executing program 1 (id=2999): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000004c0)={{0x73, @rand_addr=0x64010100, 0xdffd, 0xfffffffe, 'nq\x00', 0x3d, 0x2000031, 0x3}, {@multicast2, 0xfffb, 0x4, 0x8, 0xfffffffe, 0x2000040}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000001740)=""/32, 0x20}], 0x2}, 0x9}], 0x3, 0x2022, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xf9, @b={0x2, 0x3, 0x6, 0x1, 0x9, 0xff, 0x70, {0xb0, "8139d02b2ed5dc7c92b1d94576960f5ebdfdd9b6fffbd64b78223658fe845bf5417afde28fd37efd6b38fd6b1c7a04e5b751dc1442162b843df105899ee523ebbe15cfe862d5055f287c976f3da45cbb92ff1fa653dd83f7555cfdf7e5cf5a95e3e80935c362d176e78c7eaf7d9922a867b47a1cf437ec3271fb5a6419e75266ca0e9849f0191a38c14f12c5de64d10847d558692342c306038f559023d4444a4d9eba42f98ef2c54afc79e523553691"}, 0x7, 0x8, 0x3, 0x6, 0x3c, "d4f25b957318940e6c124367f25681c6f40a4156a9448cf36f481768060ec19749834248bf77f861b7107a181433958794dd2c1ad8499095878527ac"}}, 0xfc) 3m51.144508767s ago: executing program 1 (id=3003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xee00}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x40c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r4, r5+10000000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3m36.064327545s ago: executing program 32 (id=3003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xee00}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x40c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r4, r5+10000000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m41.075073394s ago: executing program 5 (id=3432): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0x3, "91abc12404cf378042f26c"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000240)={'virt_wifi0\x00', @random="0600"}) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x130, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e21], [0x4e21, 0x4e22], 0x2, 0x4, 0x804, 0x9}}, @common=@icmp={{0x28}, {0xb, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0x3, "91abc12404cf378042f26c"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000240)={'virt_wifi0\x00', @random="0600"}) (async) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x130, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e21], [0x4e21, 0x4e22], 0x2, 0x4, 0x804, 0x9}}, @common=@icmp={{0x28}, {0xb, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) (async) 2m40.757937009s ago: executing program 5 (id=3436): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x23, &(0x7f0000000340), 0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x29, 0xd0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) 2m37.461078554s ago: executing program 5 (id=3440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x5, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x84, 0x1c, 0x1, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x5, 0x6, 'v'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000d"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000180)=0xac, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000100000061106d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.106284085s ago: executing program 5 (id=3447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x4, 0x0, 0x2, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x8000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x13) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0xd0, r2, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "78fa8d364664456a194b3772ede5c4a08884670df70979233c7d3c3a1ab798"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "0749a27c7d595b21af2e15b2f96cf95733a04198faf77e4d59209351b7579ef5"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) 2m35.602219063s ago: executing program 5 (id=3451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000040801010000008a92fd637c9a1ea5cfc72e56b28f7ad100000000000a0000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket(0x2, 0x80805, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x400c844) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={0x168, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2877}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x95}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x11, 0x3, "b4d3ebe789fec81a7421304679"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44080}, 0x4000800) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]}) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl802154(0x0, r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x30, r11, 0x303, 0x0, 0x0, {0x13}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 2m34.719311542s ago: executing program 5 (id=3454): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010324bd7022ffdbdf250b000000d755a4ca97c23499fc62024d4f0304c1b9dc21b65d9920ed43cd3bc5721f0006d423d0c857d7ae2915228ef600b8e9f09180211f4e6876f77ef1d368e5a7f062b272eae1ec005680797666344d"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x102}, &(0x7f0000000340)=0x8) r6 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0x400461f1, 0x0) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) 2m19.651806955s ago: executing program 33 (id=3454): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002700010324bd7022ffdbdf250b000000d755a4ca97c23499fc62024d4f0304c1b9dc21b65d9920ed43cd3bc5721f0006d423d0c857d7ae2915228ef600b8e9f09180211f4e6876f77ef1d368e5a7f062b272eae1ec005680797666344d"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x102}, &(0x7f0000000340)=0x8) r6 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0x400461f1, 0x0) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) 1m38.190007803s ago: executing program 3 (id=3734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x2000400) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x98, 0x1000000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000b10000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0xa3, &(0x7f00000004c0)=""/163, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m37.865799854s ago: executing program 3 (id=3737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b211a13f0a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20040808) 1m37.425599059s ago: executing program 3 (id=3739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="30c5d725adb7fb8f6f5fd8b6953923febb3734824d421ff60f3833f0e7a6df22e0256343e400b9f717237902a322377fdd25e8e20b77d42b0ce34f74f0728a92bd49a106273a00118445e29edbbf1d3dd9f97d1105d889042b39bea2265d0efbc764c63f05fff5748d3d9c9883a06112de1a0185a3045d3ecc98e96829dad09cd4bbb5918b5109aa56328791fba3cd83b19ce321f3063fa89cd8a23a4c844918e68920ecdfa4683941941532a0ca2a28b617ef4a866d187d2780970a580e98636ff5e05481e6baa4def6593ad6bc876f800d19a117", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x408d4}, 0x10) (async) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 1m37.303056074s ago: executing program 3 (id=3740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c0000800500060004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000500)={r2, &(0x7f0000000080)='\x00', 0x20a000, &(0x7f00000002c0)={@_ha_fsid={[0x7, 0x4]}, {0x76, 0x3, 0x81, 0x7}}, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x20}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x8010) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r12, &(0x7f0000000380)='k', 0x1, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 1m37.162016385s ago: executing program 3 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) (async) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cpq\x00'], 0x5) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) (async) unshare(0x20000400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x10, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}}, 0x440b0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000cb0400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1m36.780808534s ago: executing program 3 (id=3744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010028bd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='?}\x00', 0x400, &(0x7f0000000080)={@align=0x1, {0x4, 0x1, 0x96, 0x1}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r12) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040029bd7000fbdbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r15, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) 1m21.022587536s ago: executing program 34 (id=3744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010028bd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='?}\x00', 0x400, &(0x7f0000000080)={@align=0x1, {0x4, 0x1, 0x96, 0x1}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r12) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040029bd7000fbdbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r15, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) 49.608362106s ago: executing program 2 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x6, 0xe4a8, 0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080)="09f57f1477420db2fd2f926d683168e36a4b892aadb5a35e7c401461f5fbafbd25c72ca9c46bb2c6563af7880cd3bd5a3d213990237eaad4d71feb", &(0x7f00000000c0)=""/56}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x6, 0x20, 0x0, 0xe55}, &(0x7f00000001c0)=0x18) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f140003000200001e0002000000200000", 0x17) 49.411907144s ago: executing program 2 (id=4094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[], 0xcd0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007060000000000000000f380500028804c"], 0x6c}}, 0x4000090) 49.292611929s ago: executing program 2 (id=4095): r0 = socket$inet(0x2, 0x2000000080002, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 48.897682972s ago: executing program 2 (id=4099): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0x0, 0x6}], 0x10, 0xfffffffb}, 0x94) 48.535081783s ago: executing program 2 (id=4101): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86df6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @private=0xa010100, @broadcast, @multicast1}}}}, &(0x7f00000000c0)={0x0, 0x2, [0xbb1, 0xca4, 0x493, 0x738]}) 48.26411986s ago: executing program 2 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0xfffffffc, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x40000000}) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r2, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 33.220663105s ago: executing program 35 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0xfffffffc, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x40000000}) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r2, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10.390273225s ago: executing program 8 (id=4367): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000b3b20000000000009400000095000000e89d6c00000000186a00002400000000000000050000000000000003000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40, '\x00', r3}, 0x94) 9.714214214s ago: executing program 8 (id=4375): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x8) (async) r5 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a00)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)=0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) (async) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r12, 0x0, 0x0) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) (async) sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) r13 = socket$inet_sctp(0x2, 0x5, 0x84) r14 = getuid() (async) r15 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002280)='memory.low\x00', 0x2, 0x0) (async) r16 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000022c0)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000023c0)=0xe8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(r18, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r19, r19]}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x50, 0x40800}}], 0x1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="b23e0d83a0c0ab7c7dd84788f7197f64d1ed5c9439f11ebfe1cd4de2c3c49a47948fc65add172531d1c071aed1e8d2dc96e2dc25d87a51ea81c4426c82b38001688ffaee2b4310d4e888b6a66a84d71fe3e53a76783a5b1da01ecc9ab5e5807a80a113b7818257dcf302a034aacdd4f9dc8fdba9fd0654b1e60f632bafa42b0c3520c5f1c02ed49b452f1c13341e4dddb016c66e902e5cdba78c92bad50e2064c3391fc79086cea475ebaf6963a45eb447e5eb324eb0d2acd30344d222389e086f0bf99502fcdfa262f9762bad01d617bb3800e5e180610f3b8ca47fc0a933479d70673a0b3dfa59d8aee662dc0d", 0xee}, {&(0x7f0000000200)="5c96460e0ed632412520fac65c7e42058ec311d5e41e0fda593951eb231a5a4835bb4141a7f84e6298a24c6ed115ccffa5e7d131de5f3fc5213f737934", 0x3d}], 0x2, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}], 0xf0}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)="9446350b12335ee45ac99d3740a7dbc7c1ace3959f4ce0f16064d0e207fd6aa5c2dd7469b1d1c940c355d2b596ff66cf7ca27a9e93d33f568a609f61baf935284a6339daef22b09c6c07645037cd8551f4b271c2a3a89f0302d71e8fcc7c64b4e319e24c58543affab", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="cde944468c4e4d4d199862625c4317aef388050d2a4acc7ff0168463bcb324824a0e2a76fad4af5fada0d04046eb5239100a7f58fb082cd504a5ca1df8de4b5f8210e274ddf0659fe7da546cbc907b0abe81fd41140cce1837abfa4ce688c452588984c205d26ce18d4defebd2844682159c9e0ade21358ddc502291d04174bb9e1cd520dab03634d19eddd0d810e6970bed0ca82861575832beddcb0a9221485664631658f365c5caa6095268930269a961f3616621f55dd8c0e9d47ebe56052c62b70ef2bbbbe974a26002e3fbf5d9ee73e7fa434c5dab12370634a77710c5ad6292e3069df20626a6527005", 0xed}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee01}}}], 0x78, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000c80)="75c6f892800315b021d882c85ee9b613ffd7f003794547ac55c19e063bf52187ec9baea1fbd773ee51700d6f80c195d45eaae6d6e0b54b4dfa76bd12e0727f91c925893e235c5061904afd1cf63484a4da0d30b9d7df4be10b84fc78f19988bec8b22baef24e55c488c37893f1b4963091deab1e82827cd193bd304df3c7f11fad43b1750bb164e27aa888163788147388e53db5d154ce8c1f725ddae5a9d5cc0eb3d390bc6b04cfa7cf41b2cb4feb72a20880033661f945f61dd5c75949b053146f", 0xc2}, {&(0x7f0000000d80)="2de8651a1c06ac71767620876a60b6a9edfae3b988e7264c598eef63a03159d3727bccc3adc5f6f3d471ee187c2447c3e25254b580dffd4a7d2c3404bc17fd466b6fd41e4201d5de4ca732f7db490659fa13c0f9181f190d0479f4445b", 0x5d}, {&(0x7f0000000e00)="0145bf27ef00d35d083b6a29bfdf909bb1fcd5ae7c75795bbcf69d7f1ca8b54ca470097eb8d396518282fa9b74b1b64d879553231c0adf49750a40b5b791367f9e7c70d8707ec5b978b3350ce5705ff9d3b47606a79934937374fc8cdc4f55a35ff41ee65ce30b5056ff0a1a8d93d9d8117a5322b8f79177275335de15d12e4f2eabd6a32babe229ca9eeb2a4ee168f7d6588ac2474d985ee860c88c0c948c654880104dbcf174cc86b690402fc3a6dde688a8f1645f59dc2ae1e7d82f3a3ca75a8313b5266c6ccc30d4e5632806090d3bb26cc77198889612d02346a5e883bc4e89e02267330663b8c00531e51eef0a4a", 0xf1}, {&(0x7f0000000f00)="d66c2f6666c498a2dad5774d11fbcd60123cae375abb5657a115919dac61569448ac9fef2f00c077e14cb66ba9492d7345a5b36099cdcf798d0fc50e6e011d0fa66a98eac045f8c0940632b96337b62ca6e469c9ff890917a6bb0b7cc74bd1317776babadb00a0d0ba866b376dc105e6141619f52948d2a673b22f0aeeacee95a36ec47dd0e8c930a3ccb73629720b9d20d5eec6fbcb2e420ecea90e9b10b75b9fa39c", 0xa3}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="af2491fb332efde4cd13d2230a7b6a3ba8cf69722a43cb92db57978f974a5a3e9f7fe34ea980255796723f2198f1d35e0ca8c5bfbf1ea5659bf85fd5423587d452e0840749f3aa5dcf6198", 0x4b}], 0x6, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r22}}}], 0x38, 0x4}}], 0x4, 0x0) (async) r23 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r23, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) 9.107676907s ago: executing program 8 (id=4379): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="9b20c0bc2fb6b0c55cbb", 0xa) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="9b20c0bc2fb6b0c55cbb", 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8.779763628s ago: executing program 8 (id=4385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24000840}, 0x24008050) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) syz_emit_ethernet(0x204, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a812008100440008004b0001ee0000000000069078ac1414aaac1414aa440c07c1e00000020000100007886d1d8d200bdcac1414bbac14142f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe907800042d245c0fb34f81e3ee70a340d23c1c2db35f5bcdb3ea05608165b739fb1077320e541a18e7a590ee327d910f4db0e2a817f3696de4f47a948f6e88ef225986d67ba5bc5e328bf119010790c000000000000000c63008a80d56061b5bb1b3fd2f5b80d58802169ebc1bc5efe24cae55bac9b399ac217d9c1e55b508b0453d1efd39edc9825369f3e3df875fa68864ded90567f4370ab71dc3b7fb9528183a8a083edf2d835a569fe86bcf690b1d9fe388b05132bc7a7eb2bc154b90aae348601a190fb1320a726166579d8598f8193c81870107"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x8040010}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x3, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@base={0x7, 0x2, 0x0, 0x2, 0x8600, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @value=r4}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x23, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080002fe800000000000000000000000000012fe8000005cc5000000000000000000aa3200020400"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4000c041) 6.995105354s ago: executing program 6 (id=4396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x6000}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000003a0029020000000004dbdf250a0000"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ae4af0000000a050000000000000000000100fffc0900010073797a30000000002c000000030a010100000000001c5b49a7e6a2be4e1201fb7606972b90000000010000000900030073857a31000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000020500020003000000100001800c000100636f756e7465720008000b40000000000900010073797a3000000000140000001100010000000000000000000000000aaa51f5dcfd"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendfile(r1, r1, &(0x7f0000000400)=0x4, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000100)={r3, &(0x7f0000000000)='\x00', 0x414000, &(0x7f0000000040)={@align=0x7, {0xc13, 0xc, 0xfffff2a0, 0x8}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x40}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {0x4}, {0xffe0, 0xffff}, {0xead645bf07882c32, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xa2, &(0x7f0000000480)={@empty, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x94, 0x64, 0x0, 0x8, 0x1, 0x0, @broadcast, @remote}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x1c, 0x4, 0x1, 0x6, 0x7fff, 0x66, 0x8000, 0xff, 0x2e, 0x5, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, {[@generic={0x7, 0xe, "c43708fcd28bca81b5818e10"}, @end, @lsrr={0x83, 0x17, 0x31, [@local, @empty, @multicast1, @rand_addr=0x64010101, @loopback]}, @generic={0x7, 0x6, '!\tkQ'}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@loopback, 0x4}, {@empty, 0x80}]}, @rr={0x7, 0xf, 0xa9, [@multicast2, @empty, @remote]}]}}, "2e5168a1a222889f"}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0xa4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0x4, 0x5, 0x8, 0x0, 0x2, 0x7ff, 0x2b, [{0xfffffff7, 0xcf, 0xffffb44b, 0x4}, {0x9, 0x400, 0x2, 0x8}, {0x8, 0x400, 0x3, 0xfffffff7}, {0x6, 0x6, 0x7fff, 0x51f3}, {0x3ff, 0xffff, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x4}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0xfffffbff, 0x4) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r13, 0x8030942b, &(0x7f0000000000)={0x3804df18, {0x10, 0xb27, 0xfff, 0xb0c1, 0x80}}) 6.182083748s ago: executing program 0 (id=4399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xbf, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xbc, 0x30, 0x871a15abc695fb3f, 0x70bd2d, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x5, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x2, 0x101, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4000054) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 5.791178942s ago: executing program 7 (id=4400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x2c150}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 5.504398249s ago: executing program 0 (id=4401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101"], 0x24}}, 0x4004000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.220072779s ago: executing program 7 (id=4403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24040800) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.13560968s ago: executing program 0 (id=4404): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000240)) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000080)=ANY=[], 0x28}, {&(0x7f0000000040)=ANY=[@ANYBLOB="1000206ce78e96ce7e00001d00040026"], 0x10}], 0x2, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 5.095018722s ago: executing program 6 (id=4405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="120000000b000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fcffff000000000000000000000000000000009ce36f222469e1044280df62c4831f1d803acd754cfe4a8bf5d58734b071851d46bc49557cd8a9e5a649e7b8b47e7dbea71165c0865492c3168152481d39105400074b7f7ca5fc2a01a1d0fa01c40de564830eb22913a6c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x1, 0xf, "5dd9df453931d37eeee485225f"}]}}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xa0000008}) close(r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x270, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x8881) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r13, 0x89e7, &(0x7f0000000f40)="00c3") r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x958, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x9702, 0x72, &(0x7f00000004c0)=""/114, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x9, 0xb0dd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x2, 0x1, 0xe, 0x6}, {0x0, 0x5, 0x10, 0x6}, {0x5, 0x1, 0xf, 0x6}, {0x5, 0x1, 0x5, 0x4}, {0x6, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x3}, {0x4, 0x1, 0xb, 0x1}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x7}, 0x94) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801}, [@IFLA_XDP={0x4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5}]}}}, @IFLA_IFALIASn={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 4.814743687s ago: executing program 0 (id=4407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r4, 0x100, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r8, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0}, 0x20001) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) ioctl$EXT4_IOC_SETFSUUID(r9, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "ed08dbbb2476093e9374afff4da9807d"}) mmap(&(0x7f00000e7000/0x4000)=nil, 0x4000, 0x5, 0x80010, 0xffffffffffffffff, 0x2fd15000) socket$nl_route(0x10, 0x3, 0x0) 4.515615318s ago: executing program 7 (id=4408): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.331867208s ago: executing program 7 (id=4409): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, &(0x7f0000000240), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28d44, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x18) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r5, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) mmap(&(0x7f00000bf000/0x1000)=nil, 0x1000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xe4772000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$igmp(0x2, 0x3, 0x2) 1.343428314s ago: executing program 0 (id=4411): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) r2 = socket$inet(0x2, 0x5, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c0002"], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000033000111000001f500010244132403b1fd606412c3258e3d67aa5b0001000000000633000000000000c1334d04000280040003"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0xcb, 0x10001, 0x7}) accept$alg(r5, 0x0, 0x0) write(r4, &(0x7f0000000280)="190000000800aaaaaaaaaa11e002", 0xe) socket$nl_crypto(0x10, 0x3, 0x15) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000080)=0xffc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xe, &(0x7f0000003040)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.342933573s ago: executing program 7 (id=4412): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x28, 0x200, 0x70bd2a, 0x25dfdbfb, {0x3}, [@generic="2349d0c5807a", @generic="f2689efc9cc225aa96143d64b8a592ec7d8e03bedac1675ad32f6bc9f6aaf2a42001fdd55590dd01e4f8e33927b6d54c06f9bcb483360d003268a9f5"]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x13, 0x4) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) (async) splice(r0, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) 1.33150499s ago: executing program 4 (id=4413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbf0400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) listen(r0, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="8000e8bef79dbcf6", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x3}, 0x260cc885) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="02000040560000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000030000800601000045d402a23d0b9093"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc084) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r8, @ANYBLOB="ffaf00000000000000006700000008000100030000000800c400ff0300000800c3"], 0x10c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4880) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000000090500090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000241400001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2000000000000219, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r13, @ANYRES64=r13, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfffffff}, 0x94) 1.266015836s ago: executing program 6 (id=4414): r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb200400e100000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000540)='GPL\x00', 0x2, 0xde, &(0x7f0000000940)=""/222, 0x41100, 0x8}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 966.276026ms ago: executing program 6 (id=4415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300c887f2feaef97e3535bc1a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) (async) recvmmsg(r4, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x39, 0x825, 0x70bd35, 0x25dfdbfa, {0xc}, [@nested={0x10, 0x5, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x805, 0x0, 0x0, @fd=r5}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 855.721165ms ago: executing program 4 (id=4416): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4000090) 771.980375ms ago: executing program 8 (id=4417): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7000000a0000000b7090000000000005509010000000000950000000000000085000000b702000000000000850800000000000000030000000000009500"/92], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x35, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x3f, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x8000, 0x7f}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ffdfffffff312ac8ff00000000b702000000010100000020000000000007020000c0fff2ffb707390040000000b704000000000000850000003658160095"], &(0x7f0000000000)='GPL\x00', 0x36, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r0, 0xd, 0x1, 0x3c9dac4d, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20026, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x64321c044132d22e, 0x7) 647.109622ms ago: executing program 4 (id=4418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x3) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x6) (async) close(0x3) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c10000010e9662031508b9a1b9898583c42f70b547036b700f7aebb1e9346da9f46c4b3324d404c42c68829408d20a1e9dcee5a728a88261d43d504e09547f406e81ae7b7a86567a89a823ead9fcbbb10f31f21a5a2729eeb62e436ad30ff0ca6290cf88ae51ef091c87e7b65c8ba9a70d9dee074db962eff024f28c05bc14517767161", @ANYRES16=r3, @ANYBLOB="0100fdfffffffedbdf25010000000c0008000100000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c000200fc7f000000000000"], 0x3c}}, 0xc800) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) 491.668115ms ago: executing program 6 (id=4419): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 491.210194ms ago: executing program 8 (id=4420): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f0000000300)=""/216}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x40040) write$nci(r4, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r4, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r4, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 440.31995ms ago: executing program 4 (id=4421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="046e00000000000008003f006563e60008001b"], 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x40020) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32) 342.405157ms ago: executing program 0 (id=4422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0000000000000000000100fb21000001000000", @ANYRES32=r0, @ANYBLOB="070001d2fa00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500000002000000010000000300"/28], 0x50) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff01a705"], 0x48) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x70}}, 0x484) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0xcb3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x11, r2, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYRESDEC=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000180)=r7) (async) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000001800), &(0x7f0000000540)=0x8b) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000480)=0x7, 0x4) (async) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x0) 287.543214ms ago: executing program 6 (id=4423): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x15, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000100)) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) (rerun: 64) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 252.651212ms ago: executing program 4 (id=4424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x200}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x10, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 69.668094ms ago: executing program 7 (id=4425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000033000111000001f500010244132403b1fd606412c3258e3d67aa5b0001000000000633000000000000c1334d04000280040003"], 0x64}}, 0x0) (fail_nth: 9) 0s ago: executing program 4 (id=4426): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a"], 0xe0}}, 0x0) kernel console output (not intermixed with test programs): e netdevsim0 [ 459.843327][T19563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 459.867369][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.879543][T19563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.900503][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.902340][T19563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 459.957702][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.187064][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.243622][T19563] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.271966][T19737] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3128'. [ 460.293437][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.293552][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.298117][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.298223][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.832604][ T5626] Bluetooth: hci1: command tx timeout [ 462.149334][T19780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.343648][T19563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.065703][T19563] veth0_vlan: entered promiscuous mode [ 463.140040][T19563] veth1_vlan: entered promiscuous mode [ 463.148770][T19796] tc_dump_action: action bad kind [ 463.303130][T19797] 8021q: VLANs not supported on nlmon0 [ 463.318476][T19563] veth0_macvtap: entered promiscuous mode [ 463.339280][T19563] veth1_macvtap: entered promiscuous mode [ 463.403970][T19563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.525975][T19563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.549875][T19803] __nla_validate_parse: 1 callbacks suppressed [ 463.549895][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 463.594717][ T151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.712789][ T6486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.746528][ T6386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.766158][ T6386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.916255][T19821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3144'. [ 463.988636][ T6487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.988660][ T6487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.042285][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.129426][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.144160][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.174684][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.178500][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.210935][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.214227][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.214246][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.215920][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.216997][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.228965][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.265119][T19818] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 464.666562][T19827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.010809][T19835] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 465.619656][T19850] IPVS: set_ctl: invalid protocol: 33 172.20.20.19:20001 [ 465.855266][T19857] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3151'. [ 465.855304][T19857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3151'. [ 466.183427][ T31] audit: type=1800 audit(1791124841.399:5): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3153" name=FFFFFFFF01 dev="tmpfs" ino=24 res=0 errno=0 [ 466.230641][ T31] audit: type=1804 audit(1791124841.449:6): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3153" name=2F6E6577726F6F742F312FFFFFFFFF01 dev="tmpfs" ino=24 res=1 errno=0 [ 466.946353][T19881] netlink: 'syz.0.3159': attribute type 1 has an invalid length. [ 466.999597][T19883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3159'. [ 466.999621][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'. [ 467.053928][T19881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.074188][T19887] openvswitch: netlink: Geneve option length err (len 283, max 255). [ 467.664777][T19901] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 467.812986][T19903] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 468.143751][T19915] xt_connbytes: Forcing CT accounting to be enabled [ 468.279247][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 468.478708][T19939] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3175'. [ 468.493038][T19926] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 468.515104][T19940] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3175'. [ 468.518059][T19926] bond3 (unregistering): Released all slaves [ 468.925719][T19939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3175'. [ 469.488726][T19963] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3185'. [ 469.869350][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 469.869384][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 469.869412][T19983] netlink: 'syz.3.3189': attribute type 18 has an invalid length. [ 470.012240][T19993] tipc: Started in network mode [ 470.012274][T19993] tipc: Node identity ac14142f, cluster identity 4711 [ 470.033038][T19993] tipc: Enabled bearer , priority 10 [ 470.033311][ T6487] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 470.033353][ T6487] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 470.033398][ T6487] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 470.033433][ T6487] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 470.034725][T19995] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3188'. [ 470.549703][T20008] bridge0: port 1(netdevsim0) entered blocking state [ 470.549803][T20008] bridge0: port 1(netdevsim0) entered disabled state [ 470.765253][T20006] syzkaller1: entered promiscuous mode [ 470.765280][T20006] syzkaller1: entered allmulticast mode [ 470.870844][T20016] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 470.870868][T20016] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3196'. [ 471.227828][ T30] tipc: Node number set to 2886997039 [ 471.487568][ T31] audit: type=1800 audit(1791124846.709:7): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3205" name="blkio.bfq.time_recursive" dev="tmpfs" ino=66 res=0 errno=0 [ 471.729752][T20053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3206'. [ 471.729783][T20053] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3206'. [ 471.729801][T20053] netlink: 'syz.0.3206': attribute type 5 has an invalid length. [ 471.729815][T20053] netlink: 'syz.0.3206': attribute type 6 has an invalid length. [ 471.729829][T20053] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3206'. [ 471.788704][ T5626] Bluetooth: hci1: SCO packet too small [ 471.889483][T20055] syzkaller0: entered promiscuous mode [ 471.889508][T20055] syzkaller0: entered allmulticast mode [ 472.874661][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3214'. [ 472.902140][T20079] netlink: 'syz.4.3214': attribute type 12 has an invalid length. [ 472.902162][T20079] netlink: 'syz.4.3214': attribute type 29 has an invalid length. [ 472.902200][T20079] netlink: 'syz.4.3214': attribute type 2 has an invalid length. [ 473.743044][ T31] audit: type=1800 audit(1791124848.969:8): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3222" name="memory.events" dev="tmpfs" ino=321 res=0 errno=0 [ 473.963038][T20111] bridge0: port 3(macsec1) entered blocking state [ 473.966381][T20111] bridge0: port 3(macsec1) entered disabled state [ 473.966564][T20111] macsec1: entered allmulticast mode [ 473.966582][T20111] bridge0: entered allmulticast mode [ 473.966619][T20111] bridge0: entered promiscuous mode [ 474.087591][T20111] macsec1: left allmulticast mode [ 474.087618][T20111] bridge0: left allmulticast mode [ 474.296972][ T30] bridge0: left promiscuous mode [ 474.858115][T20123] __nla_validate_parse: 6 callbacks suppressed [ 474.858149][T20123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3225'. [ 474.858177][T20123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3225'. [ 474.953632][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3225'. [ 474.953672][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3225'. [ 475.026069][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3227'. [ 475.067711][T20134] netlink: 'syz.0.3229': attribute type 1 has an invalid length. [ 475.136702][T20134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.138852][T20125] tipc: MTU too low for tipc bearer [ 475.188010][T20131] PKCS7: Unknown OID: [4] (bad) [ 475.188030][T20131] PKCS7: Only support pkcs7_signedData type [ 475.308810][T20138] bond3: (slave geneve3): making interface the new active one [ 475.337072][T20138] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 475.632746][T20145] netlink: 'syz.5.3232': attribute type 10 has an invalid length. [ 475.640006][T20145] syz_tun: entered promiscuous mode [ 475.815688][T20146] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3232'. [ 475.832976][T20148] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3232'. [ 475.851455][T20145] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 476.281041][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3236'. [ 476.771099][T20165] netlink: 'syz.5.3238': attribute type 1 has an invalid length. [ 476.788079][T20165] netlink: ct family unspecified [ 476.788152][T20165] openvswitch: netlink: Actions may not be safe on all matching packets [ 477.168810][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 477.443093][T20186] netlink: 'syz.3.3242': attribute type 2 has an invalid length. [ 477.443124][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3242'. [ 478.014576][T20197] veth5: entered allmulticast mode [ 478.203475][T20201] xt_policy: output policy not valid in PREROUTING and INPUT [ 478.606725][T20214] IPv6: Can't replace route, no match found [ 478.608563][T20214] IPv6: Can't replace route, no match found [ 479.229312][T20246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.753633][T20291] xt_check_target_common: 13 callbacks suppressed [ 480.753660][T20291] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 480.756892][T20292] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 481.146500][T20302] __nla_validate_parse: 6 callbacks suppressed [ 481.146522][T20302] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3259'. [ 481.195711][T20305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.257893][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 482.296692][T20339] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3269'. [ 482.934210][T20360] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 483.053408][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 483.225805][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 483.282306][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 483.299797][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 483.476320][T20374] lo: entered promiscuous mode [ 483.477949][T20374] tunl0: entered promiscuous mode [ 483.578719][T20374] gre0: entered promiscuous mode [ 483.622430][T20374] gretap0: entered promiscuous mode [ 483.639733][T20383] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 483.648933][T20374] erspan0: entered promiscuous mode [ 483.662806][T20374] ip_vti0: entered promiscuous mode [ 483.664753][T20374] ip6_vti0: entered promiscuous mode [ 483.667525][T20374] sit0: entered promiscuous mode [ 483.689015][T20374] ip6tnl0: entered promiscuous mode [ 483.698850][T20374] ip6gre0: entered promiscuous mode [ 483.709194][T20374] syz_tun: entered promiscuous mode [ 483.728116][T20374] ip6gretap0: entered promiscuous mode [ 483.742147][T20374] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.742796][T20374] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.745417][T20374] bridge0: entered promiscuous mode [ 483.826959][T20397] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3280'. [ 483.848755][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3278'. [ 483.863569][T20374] vcan0: entered promiscuous mode [ 483.864992][T20374] bond_slave_0: left promiscuous mode [ 483.865018][T20374] bond_slave_1: left promiscuous mode [ 483.865052][T20374] bond0: entered promiscuous mode [ 483.865065][T20374] bond_slave_0: entered promiscuous mode [ 483.865261][T20374] bond_slave_1: entered promiscuous mode [ 483.868737][T20374] team0: entered promiscuous mode [ 483.868753][T20374] team_slave_0: entered promiscuous mode [ 483.868908][T20374] team_slave_1: entered promiscuous mode [ 483.927110][T20374] dummy0: entered promiscuous mode [ 483.937394][T20374] nlmon0: entered promiscuous mode [ 483.939211][T20374] batadv0: entered promiscuous mode [ 483.961578][T20374] vxcan0: entered promiscuous mode [ 483.962540][T20374] vxcan1: entered promiscuous mode [ 483.963449][T20374] veth0: entered promiscuous mode [ 483.965951][T20374] veth1: entered promiscuous mode [ 484.008741][T20374] wg0: entered promiscuous mode [ 484.016503][T20374] wg1: entered promiscuous mode [ 484.017147][T20374] wg2: entered promiscuous mode [ 484.019172][T20374] veth0_to_bridge: entered promiscuous mode [ 484.041750][T20374] veth1_to_bridge: entered promiscuous mode [ 484.048633][T20374] veth0_to_bond: entered promiscuous mode [ 484.065644][T20374] veth1_to_bond: entered promiscuous mode [ 484.082953][T20374] veth0_to_team: entered promiscuous mode [ 484.087141][T20374] veth1_to_team: entered promiscuous mode [ 484.112857][T20374] veth0_to_batadv: entered promiscuous mode [ 484.115945][T20374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.116005][T20374] batadv_slave_0: entered promiscuous mode [ 484.119094][T20374] veth1_to_batadv: entered promiscuous mode [ 484.155567][T20374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.155625][T20374] batadv_slave_1: entered promiscuous mode [ 484.159169][T20374] xfrm0: entered promiscuous mode [ 484.184738][T20374] veth0_to_hsr: entered promiscuous mode [ 484.189814][T20374] veth1_to_hsr: entered promiscuous mode [ 484.208088][T20374] hsr0: entered promiscuous mode [ 484.218514][T20374] veth1_virt_wifi: entered promiscuous mode [ 484.228768][T20374] veth0_virt_wifi: entered promiscuous mode [ 484.241119][T20374] virt_wifi0: entered promiscuous mode [ 484.247943][T20374] vlan1: entered promiscuous mode [ 484.263147][T20374] macvlan0: entered promiscuous mode [ 484.269495][T20374] macvlan1: entered promiscuous mode [ 484.289284][T20374] ipvlan1: entered promiscuous mode [ 484.306065][T20374] macvtap0: entered promiscuous mode [ 484.321591][T20374] macsec0: entered promiscuous mode [ 484.327703][T20374] geneve0: entered promiscuous mode [ 484.346256][T20374] geneve1: entered promiscuous mode [ 484.373603][T20374] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 484.378940][T20374] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 484.474327][T20374] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 484.503095][T20374] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 484.524574][T20374] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 484.526680][T20374] veth2: entered promiscuous mode [ 484.526923][T20374] veth3: entered promiscuous mode [ 484.527092][T20374] geneve2: entered promiscuous mode [ 484.527269][T20374] bond1: entered promiscuous mode [ 484.527286][T20374] macvlan2: entered promiscuous mode [ 484.568246][T20374] bond2: entered promiscuous mode [ 484.578301][T20374] bond3: entered promiscuous mode [ 484.578322][T20374] geneve3: entered promiscuous mode [ 484.592603][T20374] vlan0: entered promiscuous mode [ 484.650840][ T1010] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.650987][ T1010] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.651028][ T1010] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.741823][T20392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.748862][T20392] bond1: (slave bond2): making interface the new active one [ 484.749503][T20392] bond1: (slave bond2): Enslaving as an active interface with an up link [ 484.786852][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 484.788303][T20393] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 484.815995][T20398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.955168][T20415] xt_cgroup: path and classid specified [ 484.980732][T20415] xt_hashlimit: size too large, truncated to 1048576 [ 485.661322][T20428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1958867972/1958867974 [ 485.661359][T20428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1958867972/1958867973 [ 485.710672][T20428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1958867972/1958867974 [ 485.710705][T20428] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1958867972/1958867973 [ 486.513676][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3291'. [ 486.513701][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3291'. [ 486.513728][T20449] netlink: 'syz.5.3291': attribute type 11 has an invalid length. [ 486.513742][T20449] netlink: 'syz.5.3291': attribute type 14 has an invalid length. [ 486.699216][T20453] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 486.817052][T20462] xt_REDIRECT: bad MAP_IPS. [ 486.834672][T20454] xt_hashlimit: size too large, truncated to 1048576 [ 486.834694][T20454] xt_hashlimit: max too large, truncated to 1048576 [ 486.934367][T20451] xt_CT: No such helper "netbios-ns" [ 487.040955][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.040980][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.041006][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.045320][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.045342][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.045366][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.106541][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.106565][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.106593][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.136046][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.136068][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3295'. [ 487.136095][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.139844][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.178006][T20470] netlink: 'syz.5.3295': attribute type 13 has an invalid length. [ 487.372922][T20478] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.851476][T20493] dvmrp0: entered allmulticast mode [ 487.998527][T20505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.194686][T20498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.237377][T20548] xt_ecn: cannot match TCP bits for non-tcp packets [ 489.465440][T20546] macvlan0: entered promiscuous mode [ 489.468228][T20546] validate_nla: 59 callbacks suppressed [ 489.468246][T20546] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 489.468262][T20546] netlink: 'syz.3.3315': attribute type 2 has an invalid length. [ 489.770616][ T6487] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.770674][ T6487] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.770714][ T6487] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.770780][ T6487] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.890606][T20544] ip6gre1: entered promiscuous mode [ 489.890632][T20544] ip6gre1: entered allmulticast mode [ 490.011613][T20554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.014241][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.016284][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.044980][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.116173][T20564] netlink: 'syz.0.3320': attribute type 70 has an invalid length. [ 490.320370][T20567] bond13: option ad_select: invalid value (34) [ 490.328795][T20567] bond13 (unregistering): Released all slaves [ 490.531296][T11636] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 490.532547][ T6487] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 490.532604][ T6487] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 490.532644][ T6487] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 490.600271][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.790591][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.072178][T20591] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 491.860293][T11636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.860324][T11636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.962919][T20630] syzkaller0: entered promiscuous mode [ 491.963118][T20630] syzkaller0: entered allmulticast mode [ 492.106580][T20625] __nla_validate_parse: 136 callbacks suppressed [ 492.106608][T20625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3335'. [ 492.616603][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3341'. [ 492.943905][T20650] batman_adv: batadv0: Interface deactivated: vlan4 [ 492.949768][T20650] batman_adv: batadv0: Removing interface: vlan4 [ 493.005516][T20662] netlink: 'syz.4.3342': attribute type 21 has an invalid length. [ 493.081413][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 493.181637][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3343'. [ 493.314851][T20670] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 493.391579][T20678] netlink: 'syz.3.3344': attribute type 4 has an invalid length. [ 493.391602][T20678] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3344'. [ 493.840638][T20695] bond0: left promiscuous mode [ 493.858554][T20695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.070192][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.645328][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3358'. [ 494.798103][T20747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3359'. [ 494.843227][T20747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3359'. [ 495.069711][T20751] xt_TCPMSS: Only works on TCP SYN packets [ 495.632226][T20763] ip6tnl1: entered promiscuous mode [ 495.632252][T20763] ip6tnl1: entered allmulticast mode [ 495.679309][T20764] netlink: 'syz.5.3364': attribute type 27 has an invalid length. [ 495.829890][T20768] bridge_slave_0: left allmulticast mode [ 495.858383][T20768] bridge_slave_0: left promiscuous mode [ 495.859271][T20768] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.975732][T20768] bridge_slave_1: left allmulticast mode [ 495.976148][T20768] bridge_slave_1: left promiscuous mode [ 495.978914][T20768] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.071793][T20768] bond0: (slave bond_slave_0): Releasing backup interface [ 496.273408][T20768] bond0: (slave bond_slave_1): Releasing backup interface [ 496.344483][T20768] team0: Port device team_slave_0 removed [ 496.483529][T20768] team0: Port device team_slave_1 removed [ 496.487242][T20768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.487436][T20768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.541201][T20768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.541400][T20768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.569790][T20768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.925895][T20778] syzkaller1: entered promiscuous mode [ 496.925923][T20778] syzkaller1: entered allmulticast mode [ 498.934288][T20853] syzkaller0: entered promiscuous mode [ 498.934317][T20853] syzkaller0: entered allmulticast mode [ 499.662100][T20902] netlink: 652 bytes leftover after parsing attributes in process `syz.4.3392'. [ 502.800108][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.241421][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.241446][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.602629][T20932] syzkaller1: entered promiscuous mode [ 503.602817][T20932] syzkaller1: entered allmulticast mode [ 503.706947][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.706973][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.781927][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.781951][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.783319][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.783339][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 503.808468][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 504.451366][ T31] audit: type=1800 audit(1791124879.679:9): pid=20951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3403" name=CB dev="tmpfs" ino=490 res=0 errno=0 [ 504.744923][T20961] __nla_validate_parse: 58 callbacks suppressed [ 504.744945][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 504.744962][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 505.292904][T20973] syz_tun: entered allmulticast mode [ 505.302350][T20972] syz_tun: left allmulticast mode [ 505.644658][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3416'. [ 505.885384][T20998] sctp: [Deprecated]: syz.0.3418 (pid 20998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.885384][T20998] Use struct sctp_sack_info instead [ 505.886546][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'. [ 505.979820][T20999] syzkaller1: entered promiscuous mode [ 505.979844][T20999] syzkaller1: entered allmulticast mode [ 506.233139][T21000] tipc: Enabling of bearer rejected, failed to enable media [ 506.745815][T21024] sctp: [Deprecated]: syz.5.3426 (pid 21024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.745815][T21024] Use struct sctp_sack_info instead [ 506.784610][T21024] veth0: entered promiscuous mode [ 506.933899][T21024] veth0: left promiscuous mode [ 507.079565][T21030] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3425'. [ 507.426332][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 507.464716][T21036] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3429'. [ 507.542663][T21036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3429'. [ 507.606050][T21016] infiniband syz2: set down [ 507.606074][T21016] infiniband syz2: added team_slave_0 [ 507.624270][T21016] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 507.629060][T21016] infiniband syz2: Couldn't open port 1 [ 507.629382][T21016] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 507.629417][T21016] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 507.629459][T21016] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 507.714657][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 507.741402][T21016] RDS/IB: syz2: added [ 507.741461][T21016] smc: adding ib device syz2 with port count 1 [ 507.741482][T21016] smc: ib device syz2 port 1 has no pnetid [ 507.778796][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 511.378082][T21068] tipc: Started in network mode [ 511.378115][T21068] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 511.378784][T21068] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 511.410650][T21068] tipc: Enabled bearer , priority 10 [ 511.411014][T21067] tipc: Enabling of bearer rejected, already enabled [ 511.529179][T21072] syzkaller0: entered promiscuous mode [ 511.529221][T21072] syzkaller0: entered allmulticast mode [ 511.914317][T21090] openvswitch: netlink: Multiple metadata blocks provided [ 512.418220][T21101] netlink: 'syz.0.3444': attribute type 16 has an invalid length. [ 512.418248][T21101] netlink: 'syz.0.3444': attribute type 17 has an invalid length. [ 512.418452][T21101] lo: left promiscuous mode [ 512.419538][T21101] tunl0: left promiscuous mode [ 512.420460][T21101] gre0: left promiscuous mode [ 512.442399][T21101] gretap0: left promiscuous mode [ 512.444152][T21101] erspan0: left promiscuous mode [ 512.445552][T21101] ip_vti0: left promiscuous mode [ 512.446682][T21101] ip6_vti0: left promiscuous mode [ 512.447712][T21101] sit0: left promiscuous mode [ 512.448769][T21101] ip6tnl0: left promiscuous mode [ 512.449786][T21101] ip6gre0: left promiscuous mode [ 512.509224][T21101] syz_tun: left promiscuous mode [ 512.509405][T21101] ip6gretap0: left promiscuous mode [ 512.509541][T21101] bridge0: left promiscuous mode [ 512.564631][T21101] team0: left promiscuous mode [ 512.568060][T21101] dummy0: left promiscuous mode [ 512.568247][T21101] nlmon0: left promiscuous mode [ 512.568409][T21101] batadv0: left promiscuous mode [ 512.568583][T21101] vxcan0: left promiscuous mode [ 512.568747][T21101] vxcan1: left promiscuous mode [ 512.568903][T21101] veth0: left promiscuous mode [ 512.569070][T21101] veth1: left promiscuous mode [ 512.569228][T21101] wg0: left promiscuous mode [ 512.569391][T21101] wg1: left promiscuous mode [ 512.569502][T21101] wg2: left promiscuous mode [ 512.588099][T21101] veth0_to_bridge: left promiscuous mode [ 512.588867][T21101] veth1_to_bridge: left promiscuous mode [ 512.644623][T21101] veth0_to_bond: left promiscuous mode [ 512.644813][T21101] bond_slave_0: left promiscuous mode [ 512.644995][T21101] veth1_to_bond: left promiscuous mode [ 512.645152][T21101] bond_slave_1: left promiscuous mode [ 512.645322][T21101] veth0_to_team: left promiscuous mode [ 512.645479][T21101] team_slave_0: left promiscuous mode [ 512.645729][T21101] veth1_to_team: left promiscuous mode [ 512.645887][T21101] team_slave_1: left promiscuous mode [ 512.646046][T21101] veth0_to_batadv: left promiscuous mode [ 512.646209][T21101] batadv_slave_0: left promiscuous mode [ 512.667516][T21101] veth1_to_batadv: left promiscuous mode [ 512.667982][T21101] batadv_slave_1: left promiscuous mode [ 512.668495][T21101] xfrm0: left promiscuous mode [ 512.668925][T21101] veth0_to_hsr: left promiscuous mode [ 512.686873][T21101] veth1_to_hsr: left promiscuous mode [ 512.696238][T21101] hsr0: left promiscuous mode [ 512.696633][T21101] veth1_virt_wifi: left promiscuous mode [ 512.697047][T21101] veth0_virt_wifi: left promiscuous mode [ 512.697444][T21101] virt_wifi0: left promiscuous mode [ 512.726066][T21101] vlan1: left promiscuous mode [ 512.753641][T21101] macvlan0: left promiscuous mode [ 512.753851][T21101] macvlan1: left promiscuous mode [ 512.754150][T21101] ipvlan1: left promiscuous mode [ 512.775058][T21101] macvtap0: left promiscuous mode [ 512.775249][T21101] macsec0: left promiscuous mode [ 512.775374][T21101] geneve0: left promiscuous mode [ 512.775544][T21101] geneve1: left promiscuous mode [ 512.802312][T21101] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 512.802528][T21101] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 512.802669][T21101] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 512.802804][T21101] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 512.802972][T21101] veth2: left promiscuous mode [ 512.803139][T21101] veth3: left promiscuous mode [ 512.803337][T21101] geneve2: left promiscuous mode [ 512.803498][T21101] bond1: left promiscuous mode [ 512.803771][T21101] macvlan2: left promiscuous mode [ 512.832777][T21101] bond2: left promiscuous mode [ 512.833602][T21101] vlan0: left promiscuous mode [ 512.833644][T21101] bond3: left promiscuous mode [ 512.850478][T21101] geneve3: left promiscuous mode [ 512.938373][T21101] ip6tnl1: left promiscuous mode [ 512.938401][T21101] ip6tnl1: left allmulticast mode [ 512.938601][ T30] tipc: Node number set to 1 [ 512.997846][T21104] __nla_validate_parse: 6 callbacks suppressed [ 512.997868][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 513.073693][T21108] openvswitch: netlink: Message has 8 unknown bytes. [ 513.073734][T21108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.783965][T21132] syzkaller1: entered promiscuous mode [ 513.783992][T21132] syzkaller1: entered allmulticast mode [ 514.287396][T21144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3453'. [ 514.648145][T21151] sock: sock_timestamping_bind_phc: sock not bind to device [ 515.268893][T21166] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 515.269022][T21166] syzkaller0: linktype set to 7 [ 515.675265][T21180] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 515.687495][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 515.775532][T21184] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 515.859684][T21180] : entered promiscuous mode [ 516.076642][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 516.187586][T21195] netlink: 'syz.0.3464': attribute type 1 has an invalid length. [ 516.342988][T21195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.397162][T21195] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 516.397189][T21195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3464'. [ 516.484978][T21192] bond4: (slave veth5): Enslaving as an active interface with a down link [ 516.508219][T21198] bond4: (slave dummy0): making interface the new active one [ 516.533595][T21198] dummy0: entered promiscuous mode [ 516.534421][T21198] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 516.585632][T21195] bond4: (slave dummy0): Releasing active interface [ 516.903624][T21204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3466'. [ 517.054077][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 517.054180][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 517.855682][T21223] netlink: 4564 bytes leftover after parsing attributes in process `syz.4.3473'. [ 517.855807][T21223] netlink: 4564 bytes leftover after parsing attributes in process `syz.4.3473'. [ 518.616479][T21237] sctp: [Deprecated]: syz.3.3477 (pid 21237) Use of int in maxseg socket option. [ 518.616479][T21237] Use struct sctp_assoc_value instead [ 519.393478][T21247] netlink: 'syz.3.3480': attribute type 1 has an invalid length. [ 519.518638][T21249] gretap1: entered allmulticast mode [ 519.538306][T21249] bond3: (slave gretap1): making interface the new active one [ 519.568177][T21249] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 519.899715][T21258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'. [ 520.120192][T21266] macsec0: entered promiscuous mode [ 520.226083][T21271] netlink: 'syz.3.3487': attribute type 61 has an invalid length. [ 520.226112][T21271] netlink: 'syz.3.3487': attribute type 62 has an invalid length. [ 520.246139][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'. [ 520.274212][T21271] veth1_macvtap: left promiscuous mode [ 520.302749][T21271] macsec0 (unregistering): left promiscuous mode [ 520.403659][T21277] Cannot find del_set index 17 as target [ 520.710370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.083757][T21295] syzkaller0: entered promiscuous mode [ 521.083783][T21295] syzkaller0: entered allmulticast mode [ 521.124348][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3497'. [ 521.149278][T21303] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 521.238936][T21306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3497'. [ 522.197620][T21329] ipip0: entered promiscuous mode [ 522.463123][T21337] netlink: 'syz.4.3503': attribute type 1 has an invalid length. [ 522.508723][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3505'. [ 522.508746][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 522.547632][T21337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.579090][T21342] netlink: 'syz.3.3504': attribute type 3 has an invalid length. [ 522.579113][T21342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3504'. [ 522.624564][T21346] macsec4: entered promiscuous mode [ 522.827259][T21347] bond3: (slave veth3): Enslaving as an active interface with a down link [ 522.873792][T21337] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 522.874089][T21337] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 522.929256][T21360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3508'. [ 523.159612][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 523.215954][T21358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 523.701319][T21378] netlink: 'syz.4.3510': attribute type 12 has an invalid length. [ 523.709814][T21388] 8021q: adding VLAN 0 to HW filter on device bond13 [ 523.778705][T21382] caif0: entered allmulticast mode [ 524.066420][T21393] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 524.171372][T21398] ip_tables: iptables: counters copy to user failed while replacing table [ 524.355764][T21394] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.565960][T21394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.583038][T21394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.285001][ T8117] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 525.285042][ T8117] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 525.285073][ T8117] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.303018][ T8117] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 525.303113][ T8117] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 525.303184][ T8117] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.307306][ T8117] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 525.309350][ T8117] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 525.309399][ T8117] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.309461][ T8117] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 525.309703][ T8117] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 525.309770][ T8117] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.339581][T21404] pimreg: entered allmulticast mode [ 525.483697][T21407] syzkaller0: entered promiscuous mode [ 525.483903][T21407] syzkaller0: entered allmulticast mode [ 525.696104][T21418] erspan0: left promiscuous mode [ 525.748941][T21418] ip6gretap0: left promiscuous mode [ 525.778771][T21418] bridge0: left promiscuous mode [ 525.792228][T21418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.811769][T21418] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.818720][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.921874][T21418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.921906][T21418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.927654][T21418] veth1_vlan: left promiscuous mode [ 525.929110][T21418] veth0_vlan: left promiscuous mode [ 525.966432][T21418] veth0_vlan: entered promiscuous mode [ 525.967843][T21418] veth1_vlan: entered promiscuous mode [ 525.985534][T21418] veth1_vlan: entered allmulticast mode [ 525.998053][T21418] veth0_macvtap: left promiscuous mode [ 525.999536][T21418] veth0_macvtap: entered promiscuous mode [ 526.023236][T21418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.023988][T21418] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 526.024543][T21418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.026119][T21418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.027387][T21418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.079490][T21418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.093038][T21418] batman_adv: batadv0: Interface activated: ipvlan2 [ 526.096739][T21418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.099441][T21418] erspan0: entered promiscuous mode [ 526.099463][T21418] erspan0: entered allmulticast mode [ 526.134253][T21418] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 526.138368][T21407] pimreg: left allmulticast mode [ 526.274227][T21428] __nla_validate_parse: 2 callbacks suppressed [ 526.274249][T21428] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3519'. [ 526.276852][T11860] syz2: Port: 1 Link ACTIVE [ 526.308046][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.308085][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.434510][ T6487] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.434539][ T6487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.474294][ T6487] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.474334][ T6487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.499860][ T151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.499886][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.519578][T21389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.544763][T21379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.890681][T21449] ip_tables: iptables: counters copy to user failed while replacing table [ 526.966133][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 527.968883][T21488] tap0: tun_chr_ioctl cmd 35108 [ 528.307234][T21505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3534'. [ 528.875208][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3537'. [ 529.744484][T21541] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3542'. [ 529.790214][T21541] netlink: 'syz.3.3542': attribute type 21 has an invalid length. [ 529.790255][T21541] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3542'. [ 529.790355][T21541] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3542'. [ 530.112320][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 530.114646][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 530.121078][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 530.144639][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 530.145685][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 530.299096][T21564] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.454597][T21560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3545'. [ 530.612155][T21564] netlink: 'syz.3.3546': attribute type 13 has an invalid length. [ 530.744203][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 531.466658][T21594] xt_policy: output policy not valid in PREROUTING and INPUT [ 532.238169][ T5624] Bluetooth: hci6: command tx timeout [ 532.260898][T21624] xt_connbytes: Forcing CT accounting to be enabled [ 532.260949][T21624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.854329][T21640] tipc: Enabling of bearer rejected, failed to enable media [ 533.284074][T21656] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3561'. [ 533.565088][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3563'. [ 533.702276][T21670] tc_dump_action: action bad kind [ 533.712861][T21675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3563'. [ 533.713656][T21669] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3563'. [ 533.754855][T21674] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3564'. [ 533.819808][T21674] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3564'. [ 533.819835][T21674] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 533.879182][T21674] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3564'. [ 533.879218][T21674] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 533.890886][T21674] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3564'. [ 534.119978][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3566'. [ 534.310281][ T5624] Bluetooth: hci6: command tx timeout [ 535.108722][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 535.576639][T21700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.097003][T21700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.391715][ T5624] Bluetooth: hci6: command tx timeout [ 536.985492][T21552] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.985703][T21552] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.986262][T21552] bridge_slave_0: entered allmulticast mode [ 537.003819][T21552] bridge_slave_0: entered promiscuous mode [ 537.018608][T21552] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.028234][T21552] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.028643][T21552] bridge_slave_1: entered allmulticast mode [ 537.058270][T21552] bridge_slave_1: entered promiscuous mode [ 537.268399][T21700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.510915][T21552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.743195][T21700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.829653][T21552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.093941][T21552] team0: Port device team_slave_0 added [ 538.122169][T21552] team0: Port device team_slave_1 added [ 538.289679][T21778] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 538.316138][T21552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.316156][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.316185][T21552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.378240][T21552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.378261][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.378291][T21552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.457642][T21785] __nla_validate_parse: 2 callbacks suppressed [ 538.457665][T21785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3582'. [ 538.457695][T21785] netlink: 'syz.3.3582': attribute type 7 has an invalid length. [ 538.457710][T21785] netlink: 'syz.3.3582': attribute type 8 has an invalid length. [ 538.457724][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3582'. [ 538.479170][ T5624] Bluetooth: hci6: command tx timeout [ 538.968856][T21552] hsr_slave_0: entered promiscuous mode [ 538.973845][T21552] hsr_slave_1: entered promiscuous mode [ 538.983629][T21552] debugfs: 'hsr0' already exists in 'hsr' [ 538.983653][T21552] Cannot create hsr debugfs directory [ 539.440443][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 539.462269][ T6386] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.464562][ T6386] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.464604][ T6386] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.464640][ T6386] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.662041][T21814] netlink: 'syz.2.3586': attribute type 8 has an invalid length. [ 539.662065][T21814] netlink: 'syz.2.3586': attribute type 9 has an invalid length. [ 539.662079][T21814] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 539.662094][T21814] netlink: 'syz.2.3586': attribute type 11 has an invalid length. [ 539.662108][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 539.741630][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 540.450564][T21838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3589'. [ 540.829805][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842321][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842362][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842392][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842421][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842450][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.842478][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.848865][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.848906][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.848937][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.848965][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.848993][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849021][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849050][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849078][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849106][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849134][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849162][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849191][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849218][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849245][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849271][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849297][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849325][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849353][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849381][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849420][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849447][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849474][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849500][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849528][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849554][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.849581][T21858] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 540.944015][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3593'. [ 540.944039][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 541.163259][T21867] IPv6: Can't replace route, no match found [ 541.163460][T21867] IPv6: Can't replace route, no match found [ 541.582677][T21552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.628501][T21552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.783416][T21552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.811226][T21552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.815900][T21552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.868685][T21552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.881103][T21552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 541.907561][T21552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.471191][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 542.526468][T21552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.646958][T21552] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.713433][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.713545][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.755471][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.755589][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.298742][T21921] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 543.305799][T21921] syzkaller1: entered promiscuous mode [ 543.306417][T21921] syzkaller1: entered allmulticast mode [ 543.613185][T21937] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3605'. [ 544.034388][T21950] netlink: 'syz.2.3606': attribute type 5 has an invalid length. [ 544.067065][T21950] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 544.212831][T21958] ip_tables: iptables: counters copy to user failed while replacing table [ 544.215831][T21958] xt_hashlimit: size too large, truncated to 1048576 [ 544.269778][T21965] netlink: 'syz.3.3609': attribute type 1 has an invalid length. [ 544.308997][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 544.951480][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 545.100087][T21979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3610'. [ 545.140138][T21979] x_tables: duplicate underflow at hook 1 [ 545.444142][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'. [ 545.494766][T21990] ip6gre2: entered promiscuous mode [ 545.494791][T21990] ip6gre2: entered allmulticast mode [ 545.523068][T21552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.011033][T22007] syzkaller0: entered promiscuous mode [ 546.011239][T22007] syzkaller0: entered allmulticast mode [ 546.867224][T21552] veth0_vlan: entered promiscuous mode [ 546.898610][T21552] veth1_vlan: entered promiscuous mode [ 546.955835][T22034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3623'. [ 546.998635][T21552] veth0_macvtap: entered promiscuous mode [ 547.016281][T21552] veth1_macvtap: entered promiscuous mode [ 547.046331][T21552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.075479][T21552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.201554][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.204208][ T8117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.204394][ T8117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.204556][ T8117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.514823][T22048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3627'. [ 547.515985][T22052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3626'. [ 547.547306][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3626'. [ 547.585365][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.585388][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.914694][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 548.027867][ T8117] erspan0: left allmulticast mode [ 548.027894][ T8117] erspan0: left promiscuous mode [ 548.028123][ T8117] bridge5: port 1(erspan0) entered disabled state [ 548.067554][ T8117] pim6reg: left allmulticast mode [ 548.114838][T22062] l2tp_mt_check: 23 callbacks suppressed [ 548.114858][T22062] xt_l2tp: invalid flags combination: 8 [ 548.636302][T22069] openvswitch: netlink: Key type 16374 is out of range max 32 [ 549.441718][ T8117] bond2 (unregistering): (slave geneve2): Releasing active interface [ 549.828422][ T8117] bond4 (unregistering): (slave macvlan2): Releasing active interface [ 549.853908][ T8117] bond0 (unregistering): Released all slaves [ 549.877404][ T8117] bond1 (unregistering): Released all slaves [ 549.922552][ T8117] bond2 (unregistering): Released all slaves [ 549.963635][ T8117] bond3 (unregistering): Released all slaves [ 550.009438][ T8117] bond4 (unregistering): Released all slaves [ 550.074349][ T8117] bond5 (unregistering): Released all slaves [ 550.138844][ T8117] bond6 (unregistering): (slave veth6): Releasing active interface [ 550.149144][ T8117] bond6 (unregistering): Released all slaves [ 550.195570][ T8117] bond7 (unregistering): Released all slaves [ 550.228298][ T8117] bond8 (unregistering): Released all slaves [ 550.263330][ T8117] bond9 (unregistering): Released all slaves [ 550.284091][ T8117] bond10 (unregistering): Released all slaves [ 550.307486][ T8117] bond11 (unregistering): Released all slaves [ 550.341749][ T8117] bond12 (unregistering): Released all slaves [ 550.376834][ T8117] bond13 (unregistering): Released all slaves [ 550.452633][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.452940][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.453159][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.453383][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.453602][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.453830][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.454105][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.458818][T12496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.458838][T12496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.544235][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.544487][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.544747][T22085] netlink: 'syz.4.3637': attribute type 4 has an invalid length. [ 550.863928][ T8117] : left promiscuous mode [ 551.132726][ T8117] ovs0: left promiscuous mode [ 551.277556][T22092] syzkaller1: entered promiscuous mode [ 551.277770][T22092] syzkaller1: entered allmulticast mode [ 551.306188][ T8117] tipc: Disabling bearer [ 551.357198][ T8117] tipc: Left network mode [ 551.434040][T22108] __nla_validate_parse: 1 callbacks suppressed [ 551.434063][T22108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3642'. [ 551.480580][ T8117] IPVS: stopping backup sync thread 14341 ... [ 551.829160][T22109] macsec1: entered allmulticast mode [ 551.829191][T22109] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 551.853124][T22109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 551.972948][T22109] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 552.411167][T22124] udevd[22124]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 552.452254][T22124] udevd[22124]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 552.687054][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 552.705837][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 552.708403][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 552.734393][ T5618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 552.735462][ T5618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.717670][ T9136] bond0: (slave syz_tun): Releasing backup interface [ 553.717697][ T9136] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 553.839504][T22148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3651'. [ 554.791118][ T5626] Bluetooth: hci7: command tx timeout [ 554.791132][ T5618] Bluetooth: hci2: command 0x0405 tx timeout [ 554.822781][T22183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3662'. [ 554.822819][T22183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3662'. [ 554.822837][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 554.996572][T22182] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.914427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.873615][ T5624] Bluetooth: hci7: command tx timeout [ 557.815170][T22255] FAULT_INJECTION: forcing a failure. [ 557.815170][T22255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.815220][T22255] CPU: 0 UID: 0 PID: 22255 Comm: syz.3.3676 Not tainted syzkaller #0 PREEMPT(full) [ 557.815244][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.815262][T22255] Call Trace: [ 557.815270][T22255] [ 557.815279][T22255] dump_stack_lvl+0xe8/0x150 [ 557.815314][T22255] should_fail_ex+0x410/0x560 [ 557.815343][T22255] _copy_from_iter+0x1d3/0x1660 [ 557.815375][T22255] ? _copy_from_iter+0x21b/0x1660 [ 557.815401][T22255] ? __pfx__copy_from_iter+0x10/0x10 [ 557.815431][T22255] ? __pfx__copy_from_iter+0x10/0x10 [ 557.815464][T22255] copy_page_from_iter+0x219/0x2d0 [ 557.815493][T22255] skb_copy_datagram_from_iter+0x2f4/0x720 [ 557.815538][T22255] tun_get_user+0xc7f/0x44d0 [ 557.815576][T22255] ? aa_file_perm+0x18b/0x15f0 [ 557.815610][T22255] ? aa_file_perm+0x4ed/0x15f0 [ 557.815637][T22255] ? __pfx_tun_get_user+0x10/0x10 [ 557.815662][T22255] ? __lock_acquire+0x747/0x2de0 [ 557.815687][T22255] ? kstrtoull+0x137/0x1d0 [ 557.815714][T22255] ? ref_tracker_alloc+0x172/0x530 [ 557.815739][T22255] ? lock_acquire+0x115/0x350 [ 557.815761][T22255] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 557.815788][T22255] ? lock_acquire+0x115/0x350 [ 557.815809][T22255] ? tun_get+0x1c/0x2f0 [ 557.815837][T22255] ? tun_get+0x1c/0x2f0 [ 557.815860][T22255] ? tun_get+0x1c/0x2f0 [ 557.815889][T22255] tun_chr_write_iter+0x113/0x200 [ 557.815915][T22255] vfs_write+0x612/0xba0 [ 557.815969][T22255] ? __pfx_vfs_write+0x10/0x10 [ 557.816013][T22255] ? __fget_files+0x2a/0x420 [ 557.816053][T22255] ksys_write+0x150/0x270 [ 557.816089][T22255] ? __pfx_ksys_write+0x10/0x10 [ 557.816136][T22255] do_syscall_64+0x166/0x520 [ 557.816169][T22255] ? trace_irq_disable+0x3b/0x140 [ 557.816193][T22255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.816216][T22255] ? clear_bhb_loop+0x70/0xc0 [ 557.816244][T22255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.816274][T22255] RIP: 0033:0x7fdb07d9e159 [ 557.816295][T22255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.816316][T22255] RSP: 002b:00007fdb08c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.816341][T22255] RAX: ffffffffffffffda RBX: 00007fdb08025fa0 RCX: 00007fdb07d9e159 [ 557.816358][T22255] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 557.816373][T22255] RBP: 00007fdb08c13090 R08: 0000000000000000 R09: 0000000000000000 [ 557.816387][T22255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.816400][T22255] R13: 00007fdb08026038 R14: 00007fdb08025fa0 R15: 00007ffecf5e9988 [ 557.816436][T22255] [ 558.910505][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'. [ 558.951114][ T5624] Bluetooth: hci7: command tx timeout [ 559.942347][T22301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3687'. [ 560.098009][ T8117] hsr_slave_0: left promiscuous mode [ 560.099055][ T8117] hsr_slave_1: left promiscuous mode [ 560.821059][T22316] tc_dump_action: action bad kind [ 560.822584][T22318] tc_dump_action: action bad kind [ 561.030175][ T5624] Bluetooth: hci7: command tx timeout [ 561.113527][T22137] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.113698][T22137] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.113834][T22137] bridge_slave_0: entered allmulticast mode [ 561.115879][T22137] bridge_slave_0: entered promiscuous mode [ 561.153745][T22137] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.153870][T22137] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.154081][T22137] bridge_slave_1: entered allmulticast mode [ 561.157376][T22137] bridge_slave_1: entered promiscuous mode [ 561.220419][T22137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.223537][T22137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.275321][T22137] team0: Port device team_slave_0 added [ 561.279030][T22137] team0: Port device team_slave_1 added [ 561.336014][T22137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.336033][T22137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.336071][T22137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.338087][T22137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.338103][T22137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.338132][T22137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.476886][T22137] hsr_slave_0: entered promiscuous mode [ 561.477954][T22137] hsr_slave_1: entered promiscuous mode [ 561.602786][T22331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 561.814545][ T8117] IPVS: stop unused estimator thread 0... [ 561.854228][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 561.872887][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 562.192514][T22137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.192563][T22137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.493251][T22137] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 562.516126][T22137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.516163][T22137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.833645][T22137] bond0: (slave netdevsim1): Releasing backup interface [ 562.934678][T22137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.934729][T22137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.378506][T22137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.378540][T22137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.406178][T22388] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3702'. [ 563.763650][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3705'. [ 564.146813][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 564.246679][T22412] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3708'. [ 564.487456][T22137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 564.507215][T22137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.509392][T22137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 564.546599][T22137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.549736][T22137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 564.598778][T22137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.620460][T22137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 564.643601][T22137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.751019][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3711'. [ 564.773028][T22425] validate_nla: 23 callbacks suppressed [ 564.773050][T22425] netlink: 'syz.6.3711': attribute type 2 has an invalid length. [ 565.036853][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 565.791925][T22447] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 565.792584][T22447] team0: Device ipvlan2 is already an upper device of the team interface [ 567.667313][T22421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.102401][T22137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.247758][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3719'. [ 568.248613][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3719'. [ 568.862102][T22137] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.125521][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.125643][T12497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.189868][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.190011][T12497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.868229][T22507] netlink: 'syz.0.3728': attribute type 27 has an invalid length. [ 570.146216][T22513] x_tables: duplicate underflow at hook 1 [ 571.132990][T22541] netlink: 'syz.4.3735': attribute type 1 has an invalid length. [ 571.337944][T22541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3735'. [ 571.382469][T22545] bond5: (slave geneve2): making interface the new active one [ 571.385997][T22545] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 571.437416][T22541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.473744][T12497] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.474091][T12497] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.474133][T12497] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.474171][T12497] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.766013][T22137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.855520][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c04800: rx timeout, send abort [ 571.856161][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056c04800: 0x1ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 572.225410][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3743'. [ 572.248743][T22137] veth0_vlan: entered promiscuous mode [ 572.346715][T22137] veth1_vlan: entered promiscuous mode [ 572.396812][T22569] netlink: 'syz.4.3745': attribute type 7 has an invalid length. [ 572.582319][T22575] syzkaller0: entered promiscuous mode [ 572.582345][T22575] syzkaller0: entered allmulticast mode [ 572.639500][T22579] vlan2: entered allmulticast mode [ 572.639526][T22579] bond0: entered allmulticast mode [ 572.639544][T22579] bond_slave_0: entered allmulticast mode [ 572.643507][T22579] bond_slave_1: entered allmulticast mode [ 572.726706][T22137] veth0_macvtap: entered promiscuous mode [ 572.930738][T22137] veth1_macvtap: entered promiscuous mode [ 573.003512][T22582] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 573.069926][T22137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.192000][T22137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.198437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.599113][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3751'. [ 573.747949][T22604] syzkaller0: entered promiscuous mode [ 573.747977][T22604] syzkaller0: entered allmulticast mode [ 573.764988][ T6386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.766582][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.766628][ T3000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.766679][ T3000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.170906][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 574.327100][T12497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.327126][T12497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.386206][T22620] netlink: 'syz.6.3754': attribute type 1 has an invalid length. [ 574.519073][T22620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.598092][T22622] bond1: (slave geneve2): making interface the new active one [ 574.607573][T22622] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.665451][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.665474][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.045519][T22629] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 575.131900][T22638] macvlan1: entered promiscuous mode [ 575.307583][T22645] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000 [ 575.821166][T22653] IPVS: Scheduler module ip_vs_sip not found [ 575.828196][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'. [ 575.997637][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3765'. [ 577.760153][T22702] geneve1: mtu greater than device maximum [ 577.764682][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 577.764704][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 577.764731][T22702] netlink: 'syz.2.3775': attribute type 12 has an invalid length. [ 577.764746][T22702] netlink: 'syz.2.3775': attribute type 14 has an invalid length. [ 577.839096][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 577.839122][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 577.839148][T22702] netlink: 'syz.2.3775': attribute type 12 has an invalid length. [ 577.839164][T22702] netlink: 'syz.2.3775': attribute type 14 has an invalid length. [ 577.894148][T12495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.908603][ T3000] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.908809][ T3000] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.908964][ T3000] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.965913][T22707] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002 [ 580.139091][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3784'. [ 580.215617][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'. [ 580.381021][T22747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3786'. [ 580.395245][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 580.538419][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 580.549570][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 580.671699][T22743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.158426][T22753] IPVS: Scheduler module ip_vs_sip not found [ 581.291657][T22758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3788'. [ 581.645196][T22772] x_tables: duplicate underflow at hook 3 [ 581.752889][T22774] ip_tables: iptables: counters copy to user failed while replacing table [ 581.758360][T22772] xt_hashlimit: size too large, truncated to 1048576 [ 581.869532][T22777] ip_tables: iptables: counters copy to user failed while replacing table [ 581.999107][T22778] xt_hashlimit: size too large, truncated to 1048576 [ 583.001791][T22818] __nla_validate_parse: 1 callbacks suppressed [ 583.001815][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3804'. [ 583.002139][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3804'. [ 583.137934][T22820] digital: digital_start_poll: Unknown protocol [ 583.326477][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3808'. [ 583.425969][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 583.537672][T22830] vlan2: entered promiscuous mode [ 583.712507][T22836] netlink: 316 bytes leftover after parsing attributes in process `syz.2.3813'. [ 584.018400][T22845] netlink: 'syz.4.3815': attribute type 2 has an invalid length. [ 584.018425][T22845] netlink: 'syz.4.3815': attribute type 1 has an invalid length. [ 584.018440][T22845] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3815'. [ 584.158969][T22849] digital: digital_start_poll: Unknown protocol [ 584.963230][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3825'. [ 584.963259][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3825'. [ 585.050863][T12495] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.053066][T12495] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.053166][T12495] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.053206][T12495] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.475927][T22895] xt_hashlimit: size too large, truncated to 1048576 [ 585.781737][T22911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.836366][T22911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.133531][T22913] netlink: 'syz.6.3833': attribute type 1 has an invalid length. [ 586.220603][T22915] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3833'. [ 586.308536][T22913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.411899][T22916] macvlan2: entered promiscuous mode [ 586.411926][T22916] macvlan2: entered allmulticast mode [ 586.413833][T22916] bond2: entered promiscuous mode [ 586.417524][T22916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 586.467123][T22916] bond2: left promiscuous mode [ 586.731899][T22920] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3835'. [ 587.770445][T22933] syzkaller0: entered promiscuous mode [ 587.770475][T22933] syzkaller0: entered allmulticast mode [ 588.548207][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.574158][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.595353][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.620083][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.620711][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.640735][ T5626] Bluetooth: hci3: command tx timeout [ 592.383594][T22973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3842'. [ 592.410193][T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3841'. [ 592.412246][T22975] syzkaller0: entered promiscuous mode [ 592.412267][T22975] syzkaller0: entered allmulticast mode [ 592.711715][ T5626] Bluetooth: hci3: command tx timeout [ 593.288523][T23007] netlink: 'syz.0.3850': attribute type 13 has an invalid length. [ 593.868582][T23023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'. [ 594.065299][T23023] netlink: 'syz.0.3853': attribute type 10 has an invalid length. [ 594.114999][T23036] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3855'. [ 594.115026][T23036] openvswitch: netlink: Flow key attr not present in new flow. [ 594.456199][T23023] team0 (unregistering): Port device team_slave_0 removed [ 594.483765][T23023] team0 (unregistering): Port device team_slave_1 removed [ 594.585889][T23041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 594.585920][T23041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 594.586243][T23042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 594.586262][T23042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 594.791146][ T5626] Bluetooth: hci3: command tx timeout [ 594.821152][T23048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.957237][T23049] sctp: [Deprecated]: syz.6.3856 (pid 23049) Use of int in max_burst socket option. [ 594.957237][T23049] Use struct sctp_assoc_value instead [ 595.375234][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 595.375265][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 595.808931][T23074] netlink: 'syz.2.3865': attribute type 10 has an invalid length. [ 596.315883][T22957] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.319882][T22957] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.335192][T22957] bridge_slave_0: entered allmulticast mode [ 596.356226][T22957] bridge_slave_0: entered promiscuous mode [ 596.357131][T23089] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20001 [ 596.391300][T22957] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.398504][T22957] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.398685][T22957] bridge_slave_1: entered allmulticast mode [ 596.447443][T22957] bridge_slave_1: entered promiscuous mode [ 596.645487][T22957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.871767][ T5626] Bluetooth: hci3: command tx timeout [ 596.997973][T22957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.173252][T22957] team0: Port device team_slave_0 added [ 597.194853][T22957] team0: Port device team_slave_1 added [ 597.333443][T22957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.333461][T22957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.333490][T22957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.403314][T22957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.403331][T22957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.403361][T22957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.649164][T23123] __nla_validate_parse: 3 callbacks suppressed [ 597.649185][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3887'. [ 597.743199][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 597.743230][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 597.743248][T23127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3885'. [ 597.820132][T22957] hsr_slave_0: entered promiscuous mode [ 597.839335][T23129] netlink: 'syz.6.3891': attribute type 29 has an invalid length. [ 597.847974][T22957] hsr_slave_1: entered promiscuous mode [ 597.857666][T22957] debugfs: 'hsr0' already exists in 'hsr' [ 597.857693][T22957] Cannot create hsr debugfs directory [ 597.873577][T23129] netlink: 'syz.6.3891': attribute type 29 has an invalid length. [ 597.874332][T23129] netlink: 'syz.6.3891': attribute type 29 has an invalid length. [ 598.907637][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'. [ 599.178213][T22957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 599.202008][T22957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.203857][T22957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.229196][T22957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.238872][T22957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 599.264765][T22957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.267639][T22957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 599.296568][T23170] netlink: 716 bytes leftover after parsing attributes in process `syz.4.3908'. [ 599.347090][T22957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.477280][T23174] netlink: 'syz.0.3912': attribute type 31 has an invalid length. [ 599.874215][T22957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.921015][T22957] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.935004][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.935280][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.036005][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.036112][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.384252][T22957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.384279][T22957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.033808][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 601.734884][T23247] netlink: zone id is out of range [ 601.986769][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 601.986796][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 602.323881][T22957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.405222][T22957] veth0_vlan: entered promiscuous mode [ 603.458458][T22957] veth1_vlan: entered promiscuous mode [ 603.602928][T22957] veth0_macvtap: entered promiscuous mode [ 603.637773][T22957] veth1_macvtap: entered promiscuous mode [ 603.738768][T23294] netlink: 520 bytes leftover after parsing attributes in process `syz.2.3958'. [ 603.738799][T23294] netlink: 520 bytes leftover after parsing attributes in process `syz.2.3958'. [ 603.791460][T22957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.847915][T23288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3956'. [ 603.866379][T22957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.960873][ T8117] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.961077][ T8117] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.961117][ T8117] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.961156][ T8117] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.386306][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.386329][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.568501][T12497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.568525][T12497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.806937][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 605.024273][T23320] ip_tables: iptables: counters copy to user failed while replacing table [ 605.251963][T23330] xt_limit: Overflow, try lower: 150994954/0 [ 606.471718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.488002][T23402] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3997'. [ 607.766978][T23423] netlink: 'syz.0.3999': attribute type 49 has an invalid length. [ 607.987747][T23423] ip6gretap0: entered promiscuous mode [ 607.987774][T23423] ip6gretap0: entered allmulticast mode [ 608.474455][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 608.547811][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 608.603550][T23436] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 608.658561][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 609.126644][T23464] xt_socket: unknown flags 0x4c [ 609.744715][T23477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.767179][T23476] bridge2: entered promiscuous mode [ 609.767202][T23476] bridge2: entered allmulticast mode [ 609.837874][T23476] team0: Port device bridge2 added [ 610.665226][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4028'. [ 610.767862][T23510] bond6: option min_links: invalid value (18446744073709551612) [ 610.767889][T23510] bond6: option min_links: allowed values 0 - 2147483647 [ 610.799685][T23510] bond6 (unregistering): Released all slaves [ 611.710169][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4035'. [ 611.811615][T23551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4036'. [ 612.914880][T23596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4045'. [ 613.035251][T23610] netlink: 'syz.2.4049': attribute type 23 has an invalid length. [ 613.155058][T23613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 613.373502][T23620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.939020][T23631] x_tables: duplicate entry at hook 1 [ 614.062482][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 614.289815][T23631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4055'. [ 614.296120][T23631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4055'. [ 614.296379][T23631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4055'. [ 614.296631][T23631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4055'. [ 614.296822][T23631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4055'. [ 614.572332][T23662] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 614.723370][T23663] netlink: 'syz.6.4061': attribute type 1 has an invalid length. [ 614.928829][T23675] netlink: 'syz.0.4068': attribute type 4 has an invalid length. [ 615.240563][ T31] audit: type=1800 audit(1791124990.459:10): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4071" name=680B20 dev="tmpfs" ino=436 res=0 errno=0 [ 615.723635][T23710] __nla_validate_parse: 62 callbacks suppressed [ 615.723655][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4074'. [ 615.902725][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4074'. [ 615.902748][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4074'. [ 615.946295][T23708] ip_tables: iptables: counters copy to user failed while replacing table [ 615.948810][T23710] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4074'. [ 615.999369][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 615.999407][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4076'. [ 616.057757][T23721] SET target dimension over the limit! [ 616.395472][T23731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4075'. [ 616.534934][T23734] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4078'. [ 617.238893][T23709] veth3: entered allmulticast mode [ 617.466529][T23721] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 617.768351][T23758] netlink: 'syz.6.4081': attribute type 40 has an invalid length. [ 617.768444][T23758] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 617.807475][T23758] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 617.943682][T23767] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4083'. [ 617.970085][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4080'. [ 618.665000][T23783] syzkaller0: entered promiscuous mode [ 618.665026][T23783] syzkaller0: entered allmulticast mode [ 619.508274][T23809] Bluetooth: hci0: unsupported parameter 5135 [ 619.508298][T23809] Bluetooth: hci0: unsupported parameter 8192 [ 619.508311][T23809] Bluetooth: hci0: unsupported parameter 5135 [ 619.508325][T23809] Bluetooth: hci0: unsupported parameter 8192 [ 619.741151][ T31] audit: type=1804 audit(1791124994.959:11): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4093" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=162 res=1 errno=0 [ 619.748012][ T31] audit: type=1800 audit(1791124994.969:12): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4093" name="cgroup.controllers" dev="tmpfs" ino=162 res=0 errno=0 [ 620.268672][T23830] syzkaller0: entered promiscuous mode [ 620.268698][T23830] syzkaller0: entered allmulticast mode [ 620.445331][T23819] macsec1: entered promiscuous mode [ 620.853880][T23844] __nla_validate_parse: 3 callbacks suppressed [ 620.853902][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4103'. [ 621.321758][T23862] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4108'. [ 621.321784][T23862] nbd: must specify at least one socket [ 622.923044][T23903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.107224][T23897] netlink: 'syz.0.4117': attribute type 16 has an invalid length. [ 623.107248][T23897] netlink: 'syz.0.4117': attribute type 3 has an invalid length. [ 623.107263][T23897] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.4117'. [ 623.445317][T23919] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 623.475640][T23917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.506410][T23917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.526576][T23917] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 623.542417][T23917] bond0 (unregistering): Released all slaves [ 623.985156][T23941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4126'. [ 623.989016][T23941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4126'. [ 624.158208][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4127'. [ 625.208515][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 625.233712][T23970] macvlan3: entered promiscuous mode [ 625.377381][T23973] bond1: option mode: unable to set because the bond device has slaves [ 625.383861][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4132'. [ 625.383914][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 625.526823][T23975] netlink: 'syz.0.4132': attribute type 2 has an invalid length. [ 625.526849][T23975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4132'. [ 625.591543][T23973] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 625.593973][T23973] bond1 (unregistering): Released all slaves [ 625.668558][T23975] : entered promiscuous mode [ 625.734438][T23894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.092591][T23988] Bluetooth: MGMT ver 1.23 [ 626.137287][T23983] xt_CT: No such helper "netbios-ns" [ 626.205471][T23990] xt_CT: No such helper "netbios-ns" [ 626.415337][T23999] netlink: 'syz.0.4139': attribute type 4 has an invalid length. [ 627.467329][T24026] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4146'. [ 627.467359][T24026] netlink: 'syz.0.4146': attribute type 1 has an invalid length. [ 627.702937][T24030] sctp: [Deprecated]: syz.7.4148 (pid 24030) Use of int in max_burst socket option. [ 627.702937][T24030] Use struct sctp_assoc_value instead [ 627.902546][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 627.902584][T24036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4149'. [ 627.945891][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 627.945927][T24036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4149'. [ 627.974915][ T8117] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.991558][ T6386] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.992173][ T6386] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.992215][ T6386] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.086270][T24039] netlink: 'syz.4.4150': attribute type 61 has an invalid length. [ 628.086296][T24039] netlink: 'syz.4.4150': attribute type 62 has an invalid length. [ 628.086677][T24039] netlink: 'syz.4.4150': attribute type 1 has an invalid length. [ 628.355405][T24042] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 628.483815][T24042] gre2: entered allmulticast mode [ 628.518792][T24052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 628.706231][T24054] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 628.830184][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 629.027895][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 629.028305][T24062] xt_cgroup: path and classid specified [ 629.074968][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 629.075140][T24065] xt_cgroup: path and classid specified [ 629.078238][T24059] netlink: 'syz.7.4156': attribute type 1 has an invalid length. [ 629.587387][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.587770][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.616098][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.634714][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.635102][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.635446][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.636316][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.686643][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.687065][T24080] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 629.862919][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4161'. [ 630.416071][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 631.884065][T24123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.884993][T24123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.172691][T24147] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 633.389764][T24151] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.409200][T24151] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.455703][T24163] __nla_validate_parse: 3 callbacks suppressed [ 633.455725][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4188'. [ 633.629209][T24167] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4189'. [ 633.781858][T24151] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 633.818058][T24151] bridge2: left allmulticast mode [ 634.212919][T24191] netlink: 'syz.0.4194': attribute type 12 has an invalid length. [ 634.212942][T24191] netlink: 'syz.0.4194': attribute type 29 has an invalid length. [ 634.212955][T24191] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4194'. [ 634.692400][T24210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 634.692430][T24210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 634.734897][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4200'. [ 634.850587][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 634.850614][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4201'. [ 635.662134][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4208'. [ 635.662498][T24250] 8021q: VLANs not supported on ip6gre0 [ 636.162002][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 636.180524][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 636.181584][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 636.183447][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 636.184595][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 636.700118][T24274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4215'. [ 637.339867][T24296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.355031][T24296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.358085][T24296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.358106][T24296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.584131][T24302] net_ratelimit: 11 callbacks suppressed [ 637.584154][T24302] netlink: zone id is out of range [ 637.584778][T24302] netlink: zone id is out of range [ 638.094449][T24313] pimreg: entered allmulticast mode [ 638.308765][T24317] pimreg: left allmulticast mode [ 638.311115][ T5626] Bluetooth: hci8: command tx timeout [ 639.082226][T24347] __nla_validate_parse: 47 callbacks suppressed [ 639.082249][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 640.390394][ T5626] Bluetooth: hci8: command tx timeout [ 640.505954][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4247'. [ 640.547362][T24382] bond0: Unable to set up delay as MII monitoring is disabled [ 641.279918][T24394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4250'. [ 641.389750][T24399] netlink: 'syz.4.4251': attribute type 1 has an invalid length. [ 641.462816][T24399] bond6: option mode: invalid value (10) [ 641.477740][T24399] bond6 (unregistering): Released all slaves [ 641.999984][T24416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4254'. [ 642.030689][T24416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4254'. [ 642.099701][T24255] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.105755][T24255] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.105913][T24255] bridge_slave_0: entered allmulticast mode [ 642.133574][T24255] bridge_slave_0: entered promiscuous mode [ 642.168289][T24421] netlink: 'syz.6.4254': attribute type 1 has an invalid length. [ 642.168311][T24421] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4254'. [ 642.210318][T24416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.251821][T24255] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.251985][T24255] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.252440][T24255] bridge_slave_1: entered allmulticast mode [ 642.255582][T24255] bridge_slave_1: entered promiscuous mode [ 642.333650][T24418] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4256'. [ 642.376019][T24255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.392419][T24255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.470545][ T5626] Bluetooth: hci8: command tx timeout [ 642.657058][T24255] team0: Port device team_slave_0 added [ 642.689278][T24255] team0: Port device team_slave_1 added [ 642.791038][T24433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.120422][T24255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.120442][T24255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.120471][T24255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.180465][T24255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.180485][T24255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.180516][T24255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.428555][T24439] netlink: 'syz.4.4259': attribute type 10 has an invalid length. [ 643.569822][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4261'. [ 643.778358][T24255] hsr_slave_0: entered promiscuous mode [ 643.788066][T24255] hsr_slave_1: entered promiscuous mode [ 643.796742][T24255] debugfs: 'hsr0' already exists in 'hsr' [ 643.796805][T24255] Cannot create hsr debugfs directory [ 643.816867][T24451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 644.555012][ T5626] Bluetooth: hci8: command tx timeout [ 644.565472][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 644.695588][T24474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4267'. [ 644.875795][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 645.247805][T24490] FAULT_INJECTION: forcing a failure. [ 645.247805][T24490] name failslab, interval 1, probability 0, space 0, times 0 [ 645.247841][T24490] CPU: 1 UID: 0 PID: 24490 Comm: syz.7.4272 Not tainted syzkaller #0 PREEMPT(full) [ 645.247868][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 645.247883][T24490] Call Trace: [ 645.247891][T24490] [ 645.247901][T24490] dump_stack_lvl+0xe8/0x150 [ 645.247939][T24490] should_fail_ex+0x410/0x560 [ 645.247973][T24490] should_failslab+0xa8/0x100 [ 645.248002][T24490] ? skb_clone+0x212/0x3a0 [ 645.248035][T24490] kmem_cache_alloc_noprof+0xa1/0x600 [ 645.248073][T24490] ? skb_clone+0x212/0x3a0 [ 645.248113][T24490] skb_clone+0x212/0x3a0 [ 645.248150][T24490] __netlink_deliver_tap+0x355/0x6e0 [ 645.248186][T24490] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.248212][T24490] netlink_deliver_tap+0x19c/0x1b0 [ 645.248238][T24490] netlink_unicast+0x781/0x940 [ 645.248286][T24490] netlink_sendmsg+0x813/0xb40 [ 645.248322][T24490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.248356][T24490] ? apparmor_socket_sendmsg+0x18b/0x360 [ 645.248386][T24490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.248409][T24490] sock_sendmsg_nosec+0x14e/0x190 [ 645.248438][T24490] ____sys_sendmsg+0x54e/0x850 [ 645.248475][T24490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.248518][T24490] ? import_iovec+0x73/0xa0 [ 645.248553][T24490] ___sys_sendmsg+0x2a5/0x360 [ 645.248584][T24490] ? __lock_acquire+0x747/0x2de0 [ 645.248613][T24490] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.248695][T24490] ? __fget_files+0x2a/0x420 [ 645.248725][T24490] ? __fget_files+0x3a2/0x420 [ 645.248774][T24490] __x64_sys_sendmsg+0x1b1/0x290 [ 645.248810][T24490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.248867][T24490] do_syscall_64+0x166/0x520 [ 645.248900][T24490] ? trace_irq_disable+0x3b/0x140 [ 645.248924][T24490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.248947][T24490] ? clear_bhb_loop+0x70/0xc0 [ 645.248976][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.248999][T24490] RIP: 0033:0x7f739e19e159 [ 645.249020][T24490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.249040][T24490] RSP: 002b:00007f739f066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.249065][T24490] RAX: ffffffffffffffda RBX: 00007f739e425fa0 RCX: 00007f739e19e159 [ 645.249082][T24490] RDX: 0000000020040808 RSI: 0000200000000600 RDI: 0000000000000004 [ 645.249098][T24490] RBP: 00007f739f066090 R08: 0000000000000000 R09: 0000000000000000 [ 645.249113][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.249127][T24490] R13: 00007f739e426038 R14: 00007f739e425fa0 R15: 00007ffef80277b8 [ 645.249164][T24490] [ 645.817042][T24255] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 645.866337][T24255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.888650][T24255] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.962312][T24255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.969010][T24255] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 646.019491][T24255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.043682][T24255] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.108837][T24255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.632630][T24255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.652914][T24521] netlink: 'syz.0.4279': attribute type 40 has an invalid length. [ 646.661487][T24521] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 646.699110][T24521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.708029][T24521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 646.777612][T24521] IPVS: Error connecting to the multicast addr [ 646.867783][T24255] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.985527][T12495] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.985644][T12495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.192735][T24535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4280'. [ 647.192831][T24535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4280'. [ 647.678837][T24548] ip6t_srh: unknown srh invflags BA61 [ 647.984014][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.984126][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.984855][T24527] syzkaller0: entered promiscuous mode [ 647.984878][T24527] syzkaller0: entered allmulticast mode [ 648.851484][T24577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4291'. [ 648.851534][T24577] netlink: 'syz.0.4291': attribute type 4 has an invalid length. [ 648.851548][T24577] netlink: 'syz.0.4291': attribute type 1 has an invalid length. [ 649.062256][T24586] netlink: 868 bytes leftover after parsing attributes in process `syz.4.4294'. [ 649.168681][T24586] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4294'. [ 649.282009][T24591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.284076][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4295'. [ 649.336882][T24589] netlink: 'syz.7.4295': attribute type 62 has an invalid length. [ 650.364459][T24255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.622518][T24630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 650.770651][T24637] nla_validate_range_unsigned: 9 callbacks suppressed [ 650.770674][T24637] netlink: 'syz.4.4307': attribute type 11 has an invalid length. [ 651.327268][T24653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4310'. [ 651.327305][T24653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4310'. [ 651.369294][T24653] gretap1: entered allmulticast mode [ 651.584446][T24255] veth0_vlan: entered promiscuous mode [ 651.610152][T24255] veth1_vlan: entered promiscuous mode [ 651.755134][T24255] veth0_macvtap: entered promiscuous mode [ 651.795437][T24255] veth1_macvtap: entered promiscuous mode [ 651.932363][T24255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.973741][T24255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.996809][T12495] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.011750][T12495] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.012106][T12495] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.012150][T12495] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.100642][T24668] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 652.191914][T24671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4316'. [ 652.518029][T12495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.518054][T12495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.706078][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.706102][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.059829][ T1038] IPVS: starting estimator thread 0... [ 653.153127][T24705] IPVS: using max 27 ests per chain, 64800 per kthread [ 655.074693][T24745] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4331'. [ 655.789209][T24790] tc_dump_action: action bad kind [ 656.119441][T24805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4344'. [ 656.464596][T24819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 656.493078][T24819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 656.521400][T24819] xt_recent: hitcount (2147483650) is larger than allowed maximum (65535) [ 656.853278][T24812] bond6: option updelay: invalid value (18446744073709518847) [ 656.853305][T24812] bond6: option updelay: allowed values 0 - 2147483647 [ 656.944203][T24812] bond6 (unregistering): Released all slaves [ 657.293129][T24840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.367804][T24840] batman_adv: batadv0: Adding interface: virt_wifi0 [ 657.367824][T24840] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.372089][T24840] batman_adv: batadv0: Interface activated: virt_wifi0 [ 657.479256][ T8117] IPVS: starting estimator thread 0... [ 657.580142][T24852] IPVS: using max 25 ests per chain, 60000 per kthread [ 657.627418][T24835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.694575][T24830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.828091][T24860] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4357'. [ 657.906729][T24863] ip6tnl2: entered allmulticast mode [ 657.938921][T12495] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 657.939204][T12495] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 657.961143][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 658.071047][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 658.397103][T24886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4364'. [ 658.710760][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 658.963929][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4371'. [ 659.115616][T24913] netlink: zone id is out of range [ 659.115638][T24913] netlink: zone id is out of range [ 659.115647][T24913] netlink: zone id is out of range [ 659.115657][T24913] netlink: zone id is out of range [ 659.115667][T24913] netlink: zone id is out of range [ 659.115675][T24913] netlink: zone id is out of range [ 659.115689][T24913] netlink: zone id is out of range [ 659.115698][T24913] netlink: zone id is out of range [ 659.115725][T24913] netlink: zone id is out of range [ 659.115734][T24913] netlink: zone id is out of range [ 659.356119][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4374'. [ 659.497097][T24931] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4374'. [ 659.518616][T24932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4374'. [ 659.566538][T24917] bond1: option lp_interval: invalid value (0) [ 659.567408][T24917] bond1: option lp_interval: allowed values 1 - 2147483647 [ 659.589454][T24917] bond1 (unregistering): Released all slaves [ 659.653802][T24908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.659419][T24899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.965809][T24938] netlink: 'syz.7.4378': attribute type 3 has an invalid length. [ 659.965833][T24938] netlink: 'syz.7.4378': attribute type 1 has an invalid length. [ 659.965847][T24938] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4378'. [ 660.026776][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 660.027189][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 660.028024][T24944] : renamed from bond_slave_1 [ 661.688089][T24973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.748243][T24969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.750241][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 661.936558][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'. [ 661.938988][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'. [ 663.013584][T24984] macsec1: left promiscuous mode [ 663.028522][T24984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.041980][T24984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.746632][T25023] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 664.963257][T25032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.984431][T25025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.264008][T25046] net_ratelimit: 499 callbacks suppressed [ 665.264032][T25046] ip_tables: iptables: counters copy to user failed while replacing table [ 667.061653][T25023] bond3 (unregistering): Released all slaves [ 667.314056][T25026] pim6reg1: entered promiscuous mode [ 667.314080][T25026] pim6reg1: entered allmulticast mode [ 667.802512][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4411'. [ 667.944008][T25058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4413'. [ 668.157998][T25063] hsr0: entered allmulticast mode [ 668.158022][T25063] hsr_slave_0: entered allmulticast mode [ 668.158402][T25063] hsr_slave_1: entered allmulticast mode [ 668.217034][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4415'. [ 668.217837][T25063] hsr_slave_0: left promiscuous mode [ 668.239191][T25063] hsr_slave_1: left promiscuous mode [ 668.279519][T25063] hsr0 (unregistering): left allmulticast mode [ 669.041430][T25101] FAULT_INJECTION: forcing a failure. [ 669.041430][T25101] name failslab, interval 1, probability 0, space 0, times 0 [ 669.041484][T25101] CPU: 1 UID: 0 PID: 25101 Comm: syz.7.4425 Not tainted syzkaller #0 PREEMPT(full) [ 669.041509][T25101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.041523][T25101] Call Trace: [ 669.041532][T25101] [ 669.041541][T25101] dump_stack_lvl+0xe8/0x150 [ 669.041578][T25101] should_fail_ex+0x410/0x560 [ 669.041626][T25101] should_failslab+0xa8/0x100 [ 669.041655][T25101] ? ovs_flow_alloc+0x24/0x1f0 [ 669.041680][T25101] kmem_cache_alloc_noprof+0xa1/0x600 [ 669.041717][T25101] ? ovs_flow_alloc+0x24/0x1f0 [ 669.041748][T25101] ovs_flow_alloc+0x24/0x1f0 [ 669.041775][T25101] ovs_packet_cmd_execute+0x5b6/0xf10 [ 669.041830][T25101] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 669.041862][T25101] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 669.041894][T25101] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 669.041933][T25101] genl_family_rcv_msg_doit+0x233/0x340 [ 669.041970][T25101] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 669.042014][T25101] ? bpf_lsm_capable+0x9/0x20 [ 669.042035][T25101] ? security_capable+0x7e/0x2c0 [ 669.042070][T25101] genl_rcv_msg+0x614/0x7a0 [ 669.042106][T25101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.042133][T25101] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 669.042176][T25101] netlink_rcv_skb+0x226/0x4a0 [ 669.042200][T25101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.042231][T25101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.042271][T25101] ? down_read+0x2be/0x330 [ 669.042297][T25101] genl_rcv+0x28/0x40 [ 669.042323][T25101] netlink_unicast+0x7bd/0x940 [ 669.042368][T25101] netlink_sendmsg+0x813/0xb40 [ 669.042403][T25101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.042435][T25101] ? apparmor_socket_sendmsg+0x98/0x360 [ 669.042463][T25101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.042486][T25101] sock_sendmsg_nosec+0x14e/0x190 [ 669.042513][T25101] ____sys_sendmsg+0x54e/0x850 [ 669.042550][T25101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.042590][T25101] ? import_iovec+0x73/0xa0 [ 669.042649][T25101] ___sys_sendmsg+0x2a5/0x360 [ 669.042680][T25101] ? __lock_acquire+0x747/0x2de0 [ 669.042709][T25101] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.042781][T25101] ? __fget_files+0x2a/0x420 [ 669.042812][T25101] ? __fget_files+0x3a2/0x420 [ 669.042856][T25101] __x64_sys_sendmsg+0x1b1/0x290 [ 669.042903][T25101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.042957][T25101] do_syscall_64+0x166/0x520 [ 669.042990][T25101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.043013][T25101] ? clear_bhb_loop+0x70/0xc0 [ 669.043040][T25101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.043063][T25101] RIP: 0033:0x7f739e19e159 [ 669.043083][T25101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.043104][T25101] RSP: 002b:00007f739f066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.043128][T25101] RAX: ffffffffffffffda RBX: 00007f739e425fa0 RCX: 00007f73 ** replaying previous printk message ** [ 669.043128][T25101] RAX: ffffffffffffffda RBX: 00007f739e425fa0 RCX: 00007f739e19e159 [ 669.043145][T25101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 669.043160][T25101] RBP: 00007f739f066090 R08: 0000000000000000 R09: 0000000000000000 [ 669.043174][T25101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.043188][T25101] R13: 00007f739e426038 R14: 00007f739e425fa0 R15: 00007ffef80277b8 [ 669.043224][T25101] [ 669.193258][ T32] INFO: task syz.5.3454:21150 blocked for more than 143 seconds. [ 669.193332][ T32] Not tainted syzkaller #0 [ 669.193377][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.193407][ T32] task:syz.5.3454 state:D stack:26976 pid:21150 tgid:21146 ppid:19563 task_flags:0x400140 flags:0x00080002 [ 669.194166][ T32] Call Trace: [ 669.194174][ T32] [ 669.194188][ T32] __schedule+0x17db/0x58f0 [ 669.194252][ T32] ? __pfx___schedule+0x10/0x10 [ 669.194291][ T32] ? schedule+0x90/0x2b0 [ 669.194374][ T32] schedule+0x164/0x2b0 [ 669.194634][ T32] schedule_preempt_disabled+0x13/0x30 [ 669.194717][ T32] __mutex_lock+0x7c1/0x1550 [ 669.194815][ T32] ? __mutex_lock+0x5d4/0x1550 [ 669.194910][ T32] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 669.194996][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 669.195096][ T32] ? net_generic+0x1e/0x240 [ 669.195154][ T32] ? net_generic+0x1e/0x240 [ 669.195724][ T32] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 669.195840][ T32] ? rcu_is_watching+0x16/0xb0 [ 669.195940][ T32] ? trace_kmalloc+0x2a/0xf0 [ 669.196006][ T32] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 669.196081][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 669.196148][ T32] ? netlink_dump+0x1e7/0xee0 [ 669.196193][ T32] ? netlink_dump+0x1e7/0xee0 [ 669.196270][ T32] genl_dumpit+0x10b/0x1b0 [ 669.196355][ T32] netlink_dump+0x711/0xee0 [ 669.196451][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 669.196541][ T32] ? genl_start+0x497/0x6d0 [ 669.204502][ T32] __netlink_dump_start+0x589/0x7b0 [ 669.204619][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 669.204716][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 669.204815][ T32] ? __pfx_genl_start+0x10/0x10 [ 669.204884][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 669.204910][ T32] ? __pfx_genl_done+0x10/0x10 [ 669.204942][ T32] ? bpf_lsm_capable+0x9/0x20 [ 669.204961][ T32] ? security_capable+0x7e/0x2c0 [ 669.204995][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 669.218241][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.218315][ T32] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 669.218363][ T32] netlink_rcv_skb+0x226/0x4a0 [ 669.218389][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 669.218420][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.218460][ T32] ? down_read+0x2be/0x330 [ 669.218486][ T32] genl_rcv+0x28/0x40 [ 669.218563][ T32] netlink_unicast+0x7bd/0x940 [ 669.218682][ T32] netlink_sendmsg+0x813/0xb40 [ 669.218776][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.218854][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 669.218929][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.218976][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 669.219064][ T32] ____sys_sendmsg+0x54e/0x850 [ 669.219150][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.219296][ T32] ? import_iovec+0x73/0xa0 [ 669.219384][ T32] ___sys_sendmsg+0x2a5/0x360 [ 669.219460][ T32] ? __lock_acquire+0x747/0x2de0 [ 669.219538][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.219646][ T32] ? futex_wait+0x2a2/0x390 [ 669.219811][ T32] ? __fget_files+0x2a/0x420 [ 669.239296][ T32] ? __fget_files+0x3a2/0x420 [ 669.239427][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 669.239521][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.239688][ T32] do_syscall_64+0x166/0x520 [ 669.239789][ T32] ? trace_irq_disable+0x3b/0x140 [ 669.239813][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.239837][ T32] ? clear_bhb_loop+0x70/0xc0 [ 669.255046][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.255076][ T32] RIP: 0033:0x7fa82599e159 [ 669.255096][ T32] RSP: 002b:00007fa8268fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.255118][ T32] RAX: ffffffffffffffda RBX: 00007fa825c26090 RCX: 00007fa82599e159 [ 669.255134][ T32] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000007 [ 669.255149][ T32] RBP: 00007fa825a3506b R08: 0000000000000000 R09: 0000000000000000 [ 669.255164][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.255177][ T32] R13: 00007fa825c26128 R14: 00007fa825c26090 R15: 00007ffccd170168 [ 669.255212][ T32] [ 669.259756][ T32] [ 669.259756][ T32] Showing all locks held in the system: [ 669.259771][ T32] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 669.259788][ T32] #0: ffff888057871c98 (&p->tcfa_lock){+.-.}-{3:3}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 669.260476][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 669.260519][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 669.260681][ T32] #1: ffffffff9ad312d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 669.263656][ T32] locks held by kworker/1:1/30: 4, on CPU#1: [ 669.263698][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.263860][ T32] #1: ffffc90000a57c40 ((work_completion)(&w->w)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.264014][ T32] #2: ffffffff905a7760 (nfc_devlist_mutex){+.+.}-{4:4}, at: nfc_urelease_event_work+0xb5/0x330 [ 669.264135][ T32] #3: ffff8880299fd560 (&genl_data->genl_data_mutex){+.+.}-{4:4}, at: nfc_urelease_event_work+0x11e/0x330 [ 669.264287][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 669.264328][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 669.264459][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 669.264475][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.282896][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.283155][ T32] #2: ffff888034943258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 669.283416][ T32] locks held by klogd/4973: 1, last CPU#1: [ 669.283458][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sk_filter_trim_cap+0x192/0xd70 [ 669.283595][ T32] locks held by getty/5376: 2, on CPU#1: [ 669.286190][ T32] #0: ffff88807fe630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 669.286552][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 669.286761][ T32] locks held by kworker/u8:21/12495: 3, last CPU#1: [ 669.286802][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.302955][ T32] #1: ffffc90002e77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 669.303136][ T32] #2: ffff88807d767258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 669.303386][ T32] locks held by syz.1.3003/19138: 2, on CPU#1: [ 669.303426][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.303558][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 669.303710][ T32] locks held by syz-executor/19204: 4, last CPU#1: [ 669.303758][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 669.303963][ T32] #1: ffff8880367db440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 669.304116][ T32] #2: ffff888078a44080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 669.304284][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 669.304381][ T32] locks held by syz.5.3454/21150: 3, on CPU#1: [ 669.304426][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.319813][ T32] #1: ffff888049a326e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 669.320223][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 669.320396][ T32] locks held by syz.3.3744/22580: 3, on CPU#1: [ 669.320424][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.320568][ T32] #1: ffff8880500c66e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 669.320703][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 669.320920][ T32] locks held by syz.2.4104/23848: 2, on CPU#1: [ 669.320963][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.321114][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 669.321227][ T32] locks held by syz.8.4420/25095: 5, on CPU#1: [ 669.321242][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.321341][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 669.321509][ T32] #2: ffff8880299fd560 (&genl_data->genl_data_mutex){+.+.}-{4:4}, at: nfc_genl_start_poll+0x1cd/0x370 [ 669.331960][ T32] #3: ffff8880299fd140 (&dev->mutex){....}-{4:4}, at: nfc_start_poll+0x53/0x300 [ 669.332143][ T32] #4: ffff8880511bc348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_start_poll+0x8da/0xd70 [ 669.332275][ T32] locks held by syz.8.4420/25098: 1, on CPU#1: [ 669.332308][ T32] #0: ffff8880299fd140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 669.332461][ T32] locks held by syz.0.4422/25087: 2, last CPU#1: [ 669.332492][ T32] #0: ffff88807eef0f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 669.332786][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 669.333001][ T32] locks held by syz.6.4423/25096: 2, on CPU#1: [ 669.333053][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 669.333196][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 669.333356][ T32] locks held by syz.7.4425/25101: 2, last CPU#1: [ 669.333398][ T32] #0: ffff888078a45900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 669.343550][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 669.348598][ T32] [ 669.348605][ T32] ============================================= [ 669.348605][ T32] [ 669.348631][ T32] NMI backtrace for cpu 1 [ 669.348648][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 669.348671][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.348685][ T32] Call Trace: [ 669.348693][ T32] [ 669.348702][ T32] dump_stack_lvl+0xe8/0x150 [ 669.348735][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 669.348762][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 669.348809][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 669.348838][ T32] sys_info+0x135/0x170 [ 669.348860][ T32] watchdog+0xfd7/0x1030 [ 669.348889][ T32] ? watchdog+0x1c7/0x1030 [ 669.348918][ T32] kthread+0x38b/0x480 [ 669.348939][ T32] ? __pfx_watchdog+0x10/0x10 [ 669.348957][ T32] ? __pfx_kthread+0x10/0x10 [ 669.348978][ T32] ret_from_fork+0x514/0xb70 [ 669.349013][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 669.349045][ T32] ? __switch_to+0xc89/0x1420 [ 669.349076][ T32] ? __pfx_kthread+0x10/0x10 [ 669.349098][ T32] ret_from_fork_asm+0x1a/0x30 [ 669.349145][ T32] [ 669.349204][ T32] Sending NMI from CPU 1 to CPUs 0: [ 669.349239][ C0] NMI backtrace for cpu 0 [ 669.349251][ C0] CPU: 0 UID: 0 PID: 17022 Comm: kworker/0:28 Not tainted syzkaller #0 PREEMPT(full) [ 669.349272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.349284][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 669.349314][ C0] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 669.349333][ C0] Code: f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 ad 6d 8c <48> c7 c6 60 ad 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 669.349349][ C0] RSP: 0018:ffffc900039679e8 EFLAGS: 00000283 [ 669.349364][ C0] RAX: 0000000000000000 RBX: ffffffff8f996ae0 RCX: ffff8880345e9f40 [ 669.349378][ C0] RDX: 0000000000000000 RSI: ffffffff86aa6322 RDI: ffffffff8c6dad20 [ 669.349391][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 669.349403][ C0] R10: dffffc0000000000 R11: fffff5200072cf40 R12: ffff888058c59fc0 [ 669.349417][ C0] R13: ffffffff86aa6322 R14: ffffffff8f996af8 R15: 0000000000000000 [ 669.349430][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 669.349446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.349458][ C0] CR2: 0000200000000000 CR3: 000000007ab20000 CR4: 00000000003526f0 [ 669.349474][ C0] Call Trace: [ 669.349481][ C0] [ 669.349487][ C0] rcu_is_watching+0x16/0xb0 [ 669.349511][ C0] lock_release+0x4b/0x3c0 [ 669.349532][ C0] ? process_scheduled_works+0x97a/0x1630 [ 669.349556][ C0] _raw_spin_unlock+0x16/0x50 [ 669.349579][ C0] wg_ratelimiter_gc_entries+0x382/0x450 [ 669.349608][ C0] ? process_scheduled_works+0x97a/0x1630 [ 669.349631][ C0] process_scheduled_works+0xc3d/0x1630 [ 669.349669][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.349695][ C0] ? assign_work+0x3cf/0x5d0 [ 669.349719][ C0] worker_thread+0xa47/0xfb0 [ 669.349750][ C0] ? __kthread_parkme+0x71/0x1f0 [ 669.349780][ C0] kthread+0x38b/0x480 [ 669.349796][ C0] ? __pfx_worker_thread+0x10/0x10 [ 669.349818][ C0] ? __pfx_kthread+0x10/0x10 [ 669.349835][ C0] ret_from_fork+0x514/0xb70 [ 669.349870][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 669.349902][ C0] ? __switch_to+0xc89/0x1420 [ 669.349932][ C0] ? __pfx_kthread+0x10/0x10 [ 669.349951][ C0] ret_from_fork_asm+0x1a/0x30 [ 669.349991][ C0] [ 669.365271][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 670.713621][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 670.722767][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.733040][ T32] Call Trace: [ 670.736336][ T32] [ 670.739369][ T32] vpanic+0x56d/0xa60 [ 670.743400][ T32] ? __pfx___schedule+0x10/0x10 [ 670.748278][ T32] ? __pfx_vpanic+0x10/0x10 [ 670.752833][ T32] panic+0xc5/0xd0 [ 670.756584][ T32] ? __pfx_panic+0x10/0x10 [ 670.761062][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 670.766546][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 670.771934][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 670.778113][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 670.784293][ T32] watchdog+0x1030/0x1030 [ 670.788653][ T32] ? watchdog+0x1c7/0x1030 [ 670.793109][ T32] kthread+0x38b/0x480 [ 670.797197][ T32] ? __pfx_watchdog+0x10/0x10 [ 670.801892][ T32] ? __pfx_kthread+0x10/0x10 [ 670.806513][ T32] ret_from_fork+0x514/0xb70 [ 670.811123][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 670.816283][ T32] ? __switch_to+0xc89/0x1420 [ 670.820993][ T32] ? __pfx_kthread+0x10/0x10 [ 670.825599][ T32] ret_from_fork_asm+0x1a/0x30 [ 670.830403][ T32] [ 670.833614][ T32] Kernel Offset: disabled [ 670.837951][ T32] Rebooting in 86400 seconds..