last executing test programs: 3m1.537080203s ago: executing program 0 (id=3818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x10603, &(0x7f0000000040)={@_ha_fsid={[0x4]}, {0x6, 0x101, 0x6, 0x4}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000140)={0xc021, 0x2}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x1d, 0x2, 0x6) (async) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x10603, &(0x7f0000000040)={@_ha_fsid={[0x4]}, {0x6, 0x101, 0x6, 0x4}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000140)={0xc021, 0x2}) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) (async) 3m1.378197757s ago: executing program 0 (id=3820): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2}}}], 0x40}}], 0x1, 0x40) 3m1.241186274s ago: executing program 0 (id=3823): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffffb, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x34, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f00000017c0)}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x80) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffffb, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x34, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f00000017c0)}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x80) (async) socket$inet6(0xa, 0x2, 0x0) (async) 3m1.124427325s ago: executing program 0 (id=3825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007babf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000760800000000000085000000c6000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) 3m0.919236877s ago: executing program 0 (id=3828): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r0, 0x3b3a1000) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2005a041}, 0x4801) 3m0.755899318s ago: executing program 0 (id=3830): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xee00}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x14, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="00000c00b8"], 0x118}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) (async) syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="142d0c0202710310c9faedeb264063b7bd3b62fc06f843ed7e5c63171f612cccac552292a06d76eb5a1b871e6c2879ddcca31cec26c5ce25f4c70d5c30f00735b54c8a26ee"}}}}}, 0x0) 2m45.716592382s ago: executing program 32 (id=3830): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xee00}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r1, r2+10000000}) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x14, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="00000c00b8"], 0x118}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) (async) syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="142d0c0202710310c9faedeb264063b7bd3b62fc06f843ed7e5c63171f612cccac552292a06d76eb5a1b871e6c2879ddcca31cec26c5ce25f4c70d5c30f00735b54c8a26ee"}}}}}, 0x0) 2m37.304397509s ago: executing program 5 (id=3972): write$tun(0xffffffffffffffff, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf25240000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="ff8b41330000b669"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x28, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r5, @ANYRES16=r6, @ANYRES64=r4], 0xc4}}, 0x0) shutdown(r0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 2m36.318933124s ago: executing program 5 (id=4041): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000000c0)=""/141, &(0x7f0000000180)=0x8d) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x9785, 0x10081, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xf}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x1, 0x1, 0x5, 0x1, {{0xc, 0x4, 0x3, 0x13, 0x30, 0x65, 0x0, 0x1d, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x58, [@dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @lsrr={0x83, 0xf, 0xfa, [@multicast1, @broadcast, @private=0xa010102]}, @noop]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0xc3, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc65, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x4, 0x18}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4f1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x8, r0}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x27, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0xa, 0x2, 0x4, 0xffffffffffffffc1, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x2, 0xa, 0x4, 0xfffffffffffffff0}, @map_fd={0x18, 0x4}, @generic={0x80, 0x7, 0x8, 0x4, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000440)='GPL\x00', 0xc8, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x1, 0xea8, 0x7}, 0x10, r4, r5, 0x0, &(0x7f0000000900)=[r6, r7, r8, 0x1, r9, r10, r11], 0x0, 0x10, 0xffff74f4}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.cpu/syz0\x00', 0x1ff) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000b00)={@private0, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0x0, 0x8, @private0, @local, 0x8, 0x80, 0x200, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x144, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000885}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000000fc0)={&(0x7f0000000e80)=0xffffffff, 0x6, &(0x7f0000000ec0)=[{}], &(0x7f0000000f80)}) close(r2) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000001000)) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f0000001140)={r2, &(0x7f0000001040)='\x00', 0x28000, &(0x7f0000001080)={@align=0x5, {0x40, 0x9, 0x8, 0x88}}, 0x646, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x7}) ioctl$TUNSETSTEERINGEBPF(r16, 0x800454e0, &(0x7f0000001180)=r12) (async) r17 = socket$netlink(0x10, 0x3, 0xb) sendto(r15, &(0x7f00000011c0)="e30da0e10f0385d11e578e5fc4ec7e29a8112e8d17c548fd02d7021e8ec8cd22758e49e475a01623784861e79b7f5db2c0d8138222a3e75374f144bb2e2c", 0x3e, 0x0, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, r17, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x5, 0x3, 0x4}}, 0x80) r18 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r17, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x58, r18, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x440c4) 2m36.207386627s ago: executing program 5 (id=4043): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000e92dd9f501000000", @ANYRES32=0x1, @ANYBLOB='@\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f00000007c0)="6e660f", 0x3, 0x20000000, &(0x7f0000000880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRES16=r7], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="01", 0x1) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00000004", @ANYRES32], 0x48) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 2m21.148278374s ago: executing program 33 (id=4043): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000e92dd9f501000000", @ANYRES32=0x1, @ANYBLOB='@\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f00000007c0)="6e660f", 0x3, 0x20000000, &(0x7f0000000880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRES16=r7], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="01", 0x1) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00000004", @ANYRES32], 0x48) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 5.203092913s ago: executing program 3 (id=5297): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400001b0800180002ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async) sendmmsg$sock(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000400)}, {&(0x7f0000000b40)="7bb9f3e3a6c6e578cc2f04dd585733fa441b0e73feb54bcba8fb95030468b998c6763757657dfa83563acb327f3d823fe1c3d2d709933ab79e8f66a49556a55cb24610c2c7e53c8349f750541a9df82c2cceeae610f35828e6be7224aec9659506575ea8fde3a9b97c9ef32bdfcf2b986ebc6751b345880a42ccf2380db619790b4bec1835da601018494bc3a16c0c8d820d42cf6bd5d9af0c24bc81fc69112854206a196808d5b7557445d92052f154b92293e5ea943544429fa3ca78942d44abfd0cea699ab9321b0e679bdff3b110bb85688596d9c7416252f95c8e6e43393f177f6ad49a00e6ee2bfce6445cc21b9775ffc5a8a7ae325c8af33131ee3def2e1575fa4840d0da2f9af286745866c5729a531580281d5644702c2341e5d2d25812ed76e7357c2ff65e585506356b98ec6d9a79f7378eb6b2da7e9ceadca98efecba9bd22f8ab98dff03c1e1fcb8f8247dbc9e5d33a16ba31c52b0a06b8f29facba33a5d2ab9eedaa48c14c7589fe26f0f1a76e15f867e0f146c66602d88d0b60d89beb934423d00df5a4a4ee36e33e005b3099d914a51b2951c5171f3fed9da8d8fc90896a18f91b67559d457d7e48a36692e0398ea0b16f64d05037280617803d5a21675ca23a4056c282b035554aa15875394b119811f99ff2b8268e8feeb28ff0817f3b398183c7e07af18484660d5dda48de250e98a46b12a429445cbef35bcfc183ce7d0b71c3a006325b3426c3396546246611e145e093d82423e8472f437444ba00be43636277de4142f151656ca2274cd4ce16ef513d3198d9aef2d78579ced197bf41e4eb18aa77de637e8bf869ca8746bf831c463cdaad14f10b3c3abf6fabb8b2e2ea35a384623ab236bbba2e315b1d7647e9404cc5b42e22c49d27480ceb0f7cbd1bbc7946a384186fce33b0a47fcdfbc16073993afa94929684101df77e1597ef137aa6dfb5176c1a6c93bf0d84e192feb88e8c0466ab13849f020e90c4e2471d4f6390b01f63c174d4e88e0e66ef67e407328fd038caae61958e71aa14ac21b15a45639325321c12fcf55e5b5658eb45a63f48dde402add98778764250b4dd630ce94532f61b9816e18641b956b812c0aa148d189b5fa0e023d024cee0de992df0ad7c72cbd533a3cd97c90a1d814220955cbf054c857b3169e5d776c14dbbbd42ec38818e5af54667d74a227580ca1ccbd71c4a99b5cd929401f3b10b5820ee1e0fcdb13314da63a58f504097c80ef7521758e56a350d0b49a8311666d84c6da5419652fa20c60e3238a140447ac62e97995964234d13163b77f0d29d2a66dbb29d91b8068a17d9714ef6f13195d0c9b43e84ad97a7b719d59f3891b822cf3d4679da018e65d20375477024892bc3386416c99288ad6e214d6fd4225389c074d9acd77e061c08afbdc6274bbfbac74b031f5c82d312d0c5ebf885e7c66e5206adfcdc8e5b634b513f1959afd0f1654cc7dc397c5afd3319533ca8a915f8f352166d963e4df1aa413999096fe079ef92cce265a3015bc4e632bd1948465603c5e776d7b08ad1ec898e432db69bd0e55f28549062c6eb18e8a23699cdf0f38b3bdf6bde4ea6cedb91ccfa4718181c3a66cfb1e8f1d41c5c0aa71ad40a40560c7259c9f59a275b867378ebd07eeb34ee3cbee3732e2ba8129e93ac0672d804bbaa19b044d04287cc9e0fa44278185cae8322ee783fcdf795531430bea1aae477bbfe58c3e7e74ade72d404d094af2e69b87d923e8f30b02a6f2bbe545c3305e9def5dd5d6d17a01c3d54fd1454f04f4b21e873e6d11299b28dc0dabea66157a9dac5a9ff129a3f2c3d58ab0509c9586d0a94390042396ee8eb534eaa1d92180eb5af588d59e01b720702e24b0f997dddfb85a53dcf08fc5340cfab431e1c012a4ad730768ad51e6dc0db91196fa1319ca9043053bbb237ab730205867e6a7933f1496d87877d5f01fa6fe3efef8603b336506d8479ae46aeff61f0c828f6b14a2b134b24b3c708c029a27124f28c8277a2ce18cf421fa38df0584f6191cba6f23129f765028820ee7975decf7cf3a221868136fbdd851019619f03554dd0384bcc93ef9fab53a85b3be36470556ab9dccad2573d2d1cf555271b051a376cfb9b0ff913e538aff6be5da7ccff98d7f93381784e4280bb2ab758b544d0b17e572afdbe7a2ced5c2a7224dbb6ccf03b31205d194a5797ba515902dc913dbd2b9896b4846e3b8ea80b725e32c4723349555172cb79ea15064e3cbf77d7049e9859f2b7a75c2444eb11ac1007f6f602d8e34c2e6a34b2499ca6e359b96079e0def33849a5e0beae1efd89ea8d5bb45770d0c5fbce83eae285b0785536188d05e87a56caa3e6acd26a5887e8986b60a8a1e543160d78ee250f8beef3e7bbb96b4990475f18a5c959140b2c1b338606fd62b0061a86ba592beda10990af0eacc06f7edd01f26084a1ab61a1e55be71b6d6a0b9e1a7e7be174c8b0b30355b86fb1ac762b3694c8f16489a368ce13eb83056c5a385af26d4210e1c2955209ae3fd79d92a44d32bc1f840787c9c7fcf7bce80e2dda4cec36bafae4f17d8754995876d4b2ed1fb6dd313ee199c42d06ad25ecec95511347c2fd6b3fd27b9d1c8621a6383234465028e701b6238b91bd8c2bf5ede47adb2b8e2e37dd9e9e6debc59d575a81be11d769464d89c9e33b04be6943384cfecc82a623f81c06e9dd393778466f7e8575535bdccafdf7b87b3782272682c575db70e0b6b4cfbe995793db897caacc301a468402c4437d4bc984002b5a9ce53a4b8f6b617b91bf7f2e20ba05717696a250880d42d78aef9b79749ffe33c323b42e6f76d933e75a6002d6230f111eb436b266a22fa87c88d955747aaafc332319f94e630b11071793c11d747d4fac5e8c6152576fca31d03b0a31d92a3279be1926832d99a59521e869ca52458d2159f96d3c8ce20da2402d61ecc5efc22fb17dc076f30b4d3337c0e03320e591e888a44a272cfbad62fd2f22691c1ff8a06cb4ac9592a8a22b6e7b40d58d3da94c18e13955577b8a6150c27a23b7b5d8897adfd75c2e01009fe2cbc0cd417c95dbcf00823bbe35cb038e641ba2ac6bc19cc0f150ef3e71e3193ab630523c20bf7f757d1c389424a2c57bcea04e89de6160f6fa9a4ef9cd9f6b27d60429fee1094ed42fdf2c4e1a7f791aaa0c89d51175413c9270d373efc7870344d29101a4e6ae1aed58151b49448c6f42f96e36ccb1f762cb442a55c83e336a7bc0102de6f38d7b82319f18bc1f1c3432c7472472dfffb279121bab835d6b3b61eb19dd999ab157c00b8608ce450737074350e5bfaf99c07477e91d00aabe554483195c769b395ae71188685894f19c05d3cbb72652ec20e396b7693ddc6ff74f39d0a9f3bc8b44b9e668b417b02af535773892764cd62764ce6f0f51607cdfd717147b2e8a8b769a95b48d6de39a640fd26ef22d692a2ce248453929749d7e2c81a1c352a4f4d0074279d6402806a4cb73bc7d310ea4fa50a8ab66cb024164e9b965ebe038e31e08d204944757694e63dbc393411a564ca1b2864f46378663f7e444021c80f4c6b1e6ccb03eedbe3f7e7c54b82827ac23f65d39cbcf180225c7d6d4f7b3767e277c12c82d190cbc7f3400c13b8882d9c7c7119d00944edf9c6353814d95e875a102021f5d820e4c07b5d68a17115dbd66862f825f3bb59f673add6760f7de64cf72db1a18c67d3297abb8fec458aabf52543674947960ab845d23484806d2b0788135ee27346facab028012fadb6d7ba46a3c13025aadd1125effc97d2098a6d094a05a511df4a0a940c4dd033e5d3b08371089bfdba11a5b4442f2538416f2ce770a7540e78c71cda1969ec0bbf210a87c9cd422796b9681e5a101fa277d278533a50026f02c5203df0c711ac46ab3c3f664010595e639350f301c40281de957cfdd70bb1b4ac6eb7e9990afc4b840e617a0243e935728756fd0b87578a89c2a402ef15e6e9594d1c5155fb359136d79c1ca0c96cd843393845dfea245d65708a7f35fb7800e6889a8ed2992c2d6250812d6750f240a1191d946d72efebf77aabe9b4acba4c725e260a8143312ee402f149d30e257fae8ae57bbe6e4b7e5254184f34e31b49695de4ca448ba2805852a8a9de17184a0ab0d961b5eab958dc53bb0f045e14761e4d956afe5892db9581a487ebe5bfbdb4ae42d5920539f78b82219c078e254cc3d202f0ff919a57036d6652f74b31c5683c106713f917d4736ca8fe551ecd2a361cbf81e347746fea48b54a3b551866d0b2a1bf3889fa54fe14d59abf26fe8304a49077d234aa9534acb9f1416992fb9c8f26d205de254b88848289177646699fcf4e82c4eea841da2ecd2eb94bd60aff97d8a2b0140ec3d32754cc65f53ed36d3966e47f13fbc9b22f9bb2d43a6ee0671606eecef4513b69dd6eedf86b3fce34a8f0d2eff0055abe36e08f76619e3a7ececb8359fc8a99016bd42dcca4aee13791caf19f66e6791acec5321f3e27f9332f832cdf1dda39ea7882caafb647fd1a760e321336f0952f34b6a33508097e6c91eb7bd0fdd689189cbf6629684d82e73f59d2b1d78fe5ecb0d588e54f24200519a44775800eb56e9b80b5356a822c8018542196c1bfff8eca107a2e7ab99a4b6bfcbc29b5410ecce392caef4d34626164ceef8f7c7fde057185ee26bcd10038b8f8bfad1a7619c22c1d61454fd25a1866a880be019d5656105e4fdb3f0d0fc1ae195ea267568aba3d692d21285eab2b3d889fb46c5aba00028da4dcbf53a276ce3c78b87195da5f2f2d62be95ef0b4f2effafe9cb3fd549cb577121d1a0b2458b960c6a478a8f2d5239cf955d4af7878b20218e9f9dc1609d8884e7397cf22a6fd7aadbc3c44be9a54e0b3d874f0e81ddae55b60b4b4c8a6ba5ea1b9206e916381a6bb4f312f81fdb2e7b5fef447bdc82ac6cbf121cca9c19d682644ed7ec0dccab1830fd55e23a04f00a6c00888d7df9d3f8c32800671807456edc5db49cdd698a1a1c502a8c5349c914c842e0d7d7d0d6eb14cc90e680716b7eb09f0ae910b44a60e4c963fb50271d8d7c4bf9a4d23ba9f85137718977287f14ac77054a9638ddcc89d5e600c2ff0ea35e9869431c81300c9626c730d37f779482498f2f5ddcecc129beb148cee59d3ccbcb42685707361ead5316da7719206edc51918b9a6600f58e1f06c859cc446ef7783b3071841e5afb028954bdfa80f31b6b684a9f502dd0358d5360e8c559ee8a160cea2b815456bed78d767b755812359c77a61498bc7d4a1736a519f9499e555b603b82070b0a6bba5dc12ef05a94ecfe29c34a9816066949ab2e266037933703301f8dc8be4a8f277670b10f470f4893f9cbbd0126b3169d61fadf9ac1e515145adf12dbab9d411ce549b119fcfe2cc1c15d69b34cb7e8eb45a9734fd794e70e21e2186a86fc3874af50bc35b002dc907c0ebe86732f786ffcd02507edb48f3ea39562fa5a649e39d574cad3693d1e1832a4bf093d59b1e7259424664a56e1b6bbf0942cbc7c3d998cb6ca44c3c3e9acdb7b114fc6e339237cd8f6847a75beaebba9f232f6bf071b755cd8b80c2f9df4780cee9ae2b0c2418d43821727b21b7a06937827ffe23c80376373767a36adedc873a867fa0cc854a1eca598e806b82497b6d50438a64889ec8070717a6b60060db5b728137541f6398b2368bffff227e5a14e7ab99495f70b1bcbbef51edcb3f55a8f65639a0e43635015ff1a749687928ba95b56dcce51d9fc567584ed871c0d61072d47609", 0x1000}, {&(0x7f0000001b40)="524df854ced714d9de006200bca05a5d1c349d24be3ceea2fbec372c7f99e66e965ac302c03652dfa08927f464788c714e76a66ca0233cb810efd0466b4b8b638be93f831800ee01a8585f4422652c", 0x4f}, {&(0x7f0000001bc0)="fe4faf5ecafcca4de8da145a194ecede7d2301fe341bdb6bb38182aaabce40165a926fcb3f941e2cfff7094fd2c385be75b6ac80747848e1e9788e7898250b309bba9fbaaa9646064e919a0edd8f64900b34601e0461f8aee7", 0x59}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="7eb4a05d96f2e2e21f65dbf9be8c8f699fa2d02f58c41a1a9acfb839c3128cf07f", 0x21}, {&(0x7f0000002c80)="ce724eace37cbc85853490ca64a60e6421a08bcac51edd773902f08adef167a594a19324e65769e29eeb8cc18ccbf3cb257e907743a7202fb626c4d91bfce81c513b4674d1caac4ea92adcfbc7082df52c9e4c1ebd70bfade779fef3d3190b1df8702663a65f5acff55c3d708462c4dc83d364dac07eda09b174990f0e9c8cc7760cb0d977aeb495dce5b5304dfd4ac76258ca04aad62464ddb82c70296dad2a8b8380c691c10549715317cb270e34cdf3fe0cddedca2260efdb9ea0489f1a133cce6642dcde916331274587efa5b9ee089ccf", 0xd3}, {&(0x7f0000002d80)="746da682b7fb38f5995c988e404590db55ae8c7602a25af37cadc68b1cf060046b34b898d200ff201230485539b4f02e52d33b759b12b48b202bb351fec07c4c554a357823f82551c5230f1c03d40bc66b154bb256d72c8e65f72f750eee357146e93546cc62b61d0fbf99182bb9c8646b9a85a03d6a13bfa73a", 0x7a}], 0x8, &(0x7f0000002e80)=[@txtime={{0x18, 0x1, 0x3d, 0x855}}], 0x18}}], 0x1, 0x48000) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private1, 0x6}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)="7d624559cc71c137e43ff7b83da92b7c25", 0x11}], 0x1, &(0x7f0000000840)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@enc_lim]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3a, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0xc, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x20, {0x1, 0x6, 0x59, 0xd, [0x7, 0x7, 0xe600]}}, @jumbo={0xc2, 0x4, 0xffffff61}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x1, 0x80, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xe8}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x5, @empty, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000480)="624b9f91f8020bfef78296fe830af3e227eb5a7903f559be63d3865d4c1f46f92f2bd76f15ada4e66636b974fa1036af4748751426426a7d11bb913d55f1c904b81d54231ebbb11f8a461be164103c711eadbdff873f62aec766a7122cba48d375e0247e5979502e7e8400ce0877d8ca11d360e23b8ddda8e07b815a40f1424764f5818f35c7b338e554a0c98f2840a8c71a46e878987f996295566f5afe9ce929dc1c", 0xa3}, {&(0x7f0000000540)="c526546bb79b7c7c8fa56b0292896305ac913e4e09368285d9630f592873b10ab54937767e85d40a9984b95783e214d09c5262b6ff9d7f03f3b6c1696c7a61d2dc312a7c81d047836046640f1400b5a0710abae7093b2a69f13bb33ce0d9d7c1253ff9f0d77bf041dc08bb22", 0x6c}, {&(0x7f00000005c0)="9bb1556124", 0x5}, {&(0x7f0000000600)="ef748de599fa6031fe6712a2018f68bd91b5dc6d156e8c88d202926857caac4623e40b6d2b0ff726c04664f2bda4ef3485218972e1387ba37d3c371b9ed19c8dac3ccf9021a69f28a39e06c97de8a114f120e4968b6d8993e3c23c1c84", 0x5d}, {&(0x7f0000000680)="ba963bcd7bb6069835c7f624ead733bd4a2d8f6cbcadff671af18540bd1c81dee5d0a0fcffbcdf0aac6a7a1c6ee87c323efd95fba63f6266e0dd865d39abae54b926bb2190d2771e6b42646461802c1a651437df19c890134bfdfceae50d14612ba4feb3bce722c2cb2bec3d87bb25383399ec56445f2bf856923c8b64837f481eeec02b9c735792d4d8c5f7f3c363fb", 0x90}, {&(0x7f0000000740)="00aa1f06b667c16e1e29bbd7d04c1f9a219c825671cba4fc1f638c7b9f5dced168000000002ab55cc0023102de53a724429fd211bc2e8344d1b75c6c0bbfe9e5ea4aef175e2852adb77a3539ddea2883d51173307eae7c34bab29d54a7808e64bbeb9aaa94826102d901007e0000004f0f6dfa833738ca", 0x77}], 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xe0}}], 0x2, 0xc011) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x810) 4.853447634s ago: executing program 6 (id=5298): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="05000000010008", 0x7) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0x61c4d6c00d17ab5a}}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="6bbba11fc79b9e7bb4dcadb88f626e011479ffae527c19eccbabfc07f3cc7dd17fbf0d2a2eb385167ae64e6dc3600a05484371dcb4c41dca1420d3b427b58c1ee3b6e93079898423746366ff2113d05cfb64f42d6a87bf8f54870f412e9b5ffede17f51e2aa5cf0f3afb28e429ce1ef63c9291bb12f17a8d940f243c171ae77aec2d4e09612421b51fcd2c6a136d1e75b89319aaf76e85db1bddc004c99fa5825fd95ab43bd115cd69fa5fce46f84dec9b86bacfcf25539a0a906fbb7fe9c1a6f761ae78", 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/598], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000080)="05000000010008", 0x7) (async) socket(0x840000000002, 0x3, 0x100) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) (async) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0x61c4d6c00d17ab5a}}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="6bbba11fc79b9e7bb4dcadb88f626e011479ffae527c19eccbabfc07f3cc7dd17fbf0d2a2eb385167ae64e6dc3600a05484371dcb4c41dca1420d3b427b58c1ee3b6e93079898423746366ff2113d05cfb64f42d6a87bf8f54870f412e9b5ffede17f51e2aa5cf0f3afb28e429ce1ef63c9291bb12f17a8d940f243c171ae77aec2d4e09612421b51fcd2c6a136d1e75b89319aaf76e85db1bddc004c99fa5825fd95ab43bd115cd69fa5fce46f84dec9b86bacfcf25539a0a906fbb7fe9c1a6f761ae78", 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/598], 0x0) (async) 4.767334746s ago: executing program 3 (id=5302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x40) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8080) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r4, &(0x7f0000000080)="a6458ba65edded456b0404e742bd2f44eedd92050000", 0x16) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000002c0)=""/203, &(0x7f0000000400)=0xcb) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.152746805s ago: executing program 3 (id=5308): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000700)={0x0, 0xfffffffffffffec3, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX, @ETHTOOL_A_RINGS_RX_JUMBO={0x0, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x0, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a8a00000000", 0x41d) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 3.639784919s ago: executing program 6 (id=5313): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @local}, 0x48, {0x2, 0x4e22, @private=0xa010100}, 'bond_slave_1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x5, 0x5, 0xff, 0x7}, {0x9, 0x4, 0x6, 0xeacf}, {0x8, 0x6, 0x7, 0x4}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x2) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000779119c00000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) 3.542952752s ago: executing program 4 (id=5314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000000c0)={@empty, @loopback}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) writev(r5, &(0x7f0000000880)=[{&(0x7f00000007c0)="ed8c93b2748f6b93e7341177fba88de7c329f419e6948921c2857f7d9416f6f5ea9c8998c224977f2b606bfb5ca0935529cb209892dd9d985767c814e00d1e1d2af5dec1812ce1223abadbe36e6a360ed740faa0aff4e913a77cd73cd4178f285710b39ae03bef107233dabd7d8980421b69f1914719905275b201f458cf3ce443ba3fd740249f5a49132a3496dd4a5bf40648ad22edfb696355e7e74f7bafbdc87ad5d2dd69191d68cd424b423d04264950df1e", 0xb4}], 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01072bbd7000fddbdf250100000008000100020000003bff06000100000001000000ca36d4c8eb33a984cd51ea890562a9d5440a44f47f0e5cd1b37da7e60f188c6b1a39a7ea25f487ed8e5db6604f24bc7c27154d4bf6661a388710d6f0eaa0a054be0741415fb0fd9638912301a2ae9c141fb1b62841415dba9ca9823d0837ed4119126bec98edac635dd5afed5ef7b30a6bc95d5d6839115242d15c6c0ccb28a11e87c963f79713a364e1d29cbd3ec89cf4010969218ada1ea4070c0398741d18d3b623431e39f409e2dee7b6436b9a449f4dcd72c495b5b3b5fb00f60b5d636e9180f3eca24b7ec09fb5a3305c4b7e2297f5a2ab"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) socket(0x6, 0xa, 0x5) 3.505050771s ago: executing program 6 (id=5316): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.292019524s ago: executing program 6 (id=5317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x16e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x1, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x40000000, 0xe, 0xe1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) (async) write$nci(r3, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) (async) write$nci(r3, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20050881}, 0x40050) (async) write$nci(r3, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4e}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000c00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000c40)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c80)=[r2, 0x1, r2, r1], &(0x7f0000000cc0)=[{0x3, 0x4, 0x0, 0x8}, {0x3, 0x1, 0xc, 0x6}, {0x5, 0x3, 0x3, 0x8}, {0x1, 0x4, 0x9}, {0x0, 0x2}, {0x3, 0x5, 0x2, 0x3}], 0x10, 0x4d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r2}, &(0x7f00000000c0), &(0x7f0000000e00)=r7}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ed00000000bf008833010000002c22c6a86eca618075efaa0c655fe26595000b1600000000"], &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94) 1.006725906s ago: executing program 3 (id=5318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5100}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) 934.191137ms ago: executing program 6 (id=5319): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x8, 0x80005, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000028ec00003b0000002c00000000000000"], 0x18}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket(0xa, 0x3, 0xff) (async) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x8, 0x80005, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000028ec00003b0000002c00000000000000"], 0x18}, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async) 883.915812ms ago: executing program 4 (id=5321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400", @ANYRESHEX], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) socket$nl_netfilter(0x10, 0x3, 0xc) 828.361072ms ago: executing program 3 (id=5323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001bc0)={r0, 0x0, 0x0, 0x494bf96d869690d4}, 0x20) socket(0x1d, 0x2, 0x2) 760.812088ms ago: executing program 1 (id=5324): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="28005a80240003801400030006000a0004000700cb000500c87c040004000200040001"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x5, 0x1}, {0x7, 0x2, 0x1}]}]}, {0x0, [0x61, 0x0, 0x30, 0x5f]}}, &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x6}, 0x28) 752.482489ms ago: executing program 6 (id=5325): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SPORT={0x6, 0x19, 0x4e24}]}, 0x24}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x3d}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 693.364656ms ago: executing program 3 (id=5326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback, @mcast2}}}, 0xfdef) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) r4 = epoll_create1(0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000002800)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002840)=0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x2017be00}) (async) listen(r0, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080010) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01052cbd7000fedbdf251d00000008001d0004000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) setsockopt$inet6_int(r8, 0x29, 0x49, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 619.515327ms ago: executing program 1 (id=5327): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="68000000000905040000000000000000020000000900010073790030000000001400028006000100000a0000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080103000000001ef70c596d", 0x6c}], 0x1}, 0x4080) 597.604778ms ago: executing program 2 (id=5328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 576.137368ms ago: executing program 1 (id=5329): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x3, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffdc5}}, {0x4}}]}]}, 0x70}}, 0x4000010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x8, 0xa04, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xeadb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 464.602948ms ago: executing program 4 (id=5330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) unshare(0x400) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'wg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc25, 0xffb, 0xae, 0x4, 0xbd, 0x81, 0x1, 0x8ee2, 0x5, 0xe, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0xb, 0x5, 0x9, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xf, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x2004003, 0x80002, 0x2, 0x2af, 0xf7, 0x100, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x106, 0x3, 0x9b, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x10, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) unshare(0x400) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'wg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc25, 0xffb, 0xae, 0x4, 0xbd, 0x81, 0x1, 0x8ee2, 0x5, 0xe, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0xb, 0x5, 0x9, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xf, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x2004003, 0x80002, 0x2, 0x2af, 0xf7, 0x100, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x106, 0x3, 0x9b, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x10, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 464.164008ms ago: executing program 1 (id=5331): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x2c, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 462.746808ms ago: executing program 2 (id=5332): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0x0, 0x8, 0x8, 0x20, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0x0, 0x8, 0x8, 0x20, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x94) (async) 391.399336ms ago: executing program 2 (id=5333): socket$l2tp6(0xa, 0x2, 0x73) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @x25={0x3, 0x5, 0xe6, "2ad6b74aea62581645598c9d682a69d30f506046c734e2c24fdb4b835ed903a348f314e7e380244533118b0b2ba8e18e46a26613ffbe9868962489a63bdf7f64bd0245327745cd8e8e6b391f0b2fb4ae9e5f294e2c699c9efa96682a929b2fad6d72d2f3a674c8860d58cfdacc14bda00578c3f166aaef25ab2205769ac3d2d912949776ecb9315f5c44222eee67c50491f7e2ea2f9f2eb8866c2a5b5e7b32fea205467829dd5c79865cbbeea641bdbb6c2e3ee53527e9e5eaa1d6a6690ab5cd4d"}}, 0xc4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x810) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xcc2}}, [0x1, 0x3d5, 0xfffffffffffffff9, 0x1, 0x3, 0x8000000000000000, 0x3, 0xc, 0xf, 0xf2ad, 0x8, 0xd1f5, 0x5b36020d, 0xe816]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r2, 0x5}, &(0x7f00000003c0)=0x8) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000400)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x9, 0xb, 0x3, 0x2}, {0x800, 0xa, 0x7, 0x1dd}, {0xffff, 0xe, 0x9, 0xe47}, {0xfffc, 0x3, 0xc6, 0x8}]}) (async) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) write$ppp(r4, &(0x7f0000000500)="e658759cf71750f3e37b717eb2235ae36d6fd48c308c9150c7dd1d97ee58fc0a31aba38b41212248457dab23d8d4207d17de88688d1230dbf47258834fe77c0aa7fc2c3ebbcf1badd107fb91f1bd2ac9d418b16fc7dae16db1fa5c5b154afabe88cb48681f0a29cc8e22fd59c5e3a6af134d851df802ebcd21a73872adddb64391192da740b42068561d1c1101c69873e5c395786a7655527e45378aca23994d19e3308082bf75a524afcdb8349f046f0e86ea3885ef47c91deaa5fabdcda3635beba10bcb9ca2bcf9d9ffa3a7f88ccee132ed38ca", 0xd5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000680)={r3, 0x48, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}, 0x31b}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xfffff43c, @empty, 0x2}]}, &(0x7f00000006c0)=0x10) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x320) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3f6, 0x120, 0x70bd26, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) (async) ioctl$XFS_IOC_GETBMAPA(r8, 0xc020582c, &(0x7f0000000880)={0x3, 0x0, 0xb69e, 0xfff, 0x9}) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000940)={'vxcan0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x114, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd6dd1f1ba33181b4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44890}, 0x84800) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000d00)={r6, &(0x7f0000000c00)=',-\x00', 0x101000, &(0x7f0000000c40)={@align, {0x2, 0xfffe, 0x1000, 0x1}}, 0xfffffffa, &(0x7f0000000c80)={@_ha_fsid}, &(0x7f0000000cc0)=0x7}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000000d40)={r5, 0x6}, 0x8) (async) bind$bt_hci(r13, &(0x7f0000000d80)={0x1f, 0x4, 0x3}, 0x6) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), r14) 271.10861ms ago: executing program 4 (id=5334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getqdisc={0x2c, 0x26, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x0, 0xf}, {0x6, 0x1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NFT_BATCH(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68020000060a05000000000000000000020000060900020073797a310000000018020480340001800b00010074756e6e656c000024000280080002400000000f080002400000000e0800034000000000080002400000000d6c0101800a000100696e6e65720000005c0102801c0105800e000100696d6d6564696174650000000801028054000280050001006e00000048000280080003400000000308000180ffffffff08000340000000020900020073797a300000000008000340000000010900020073797a31000000000900020073797a3200000000080001400000000344000280400002800900020073797a310000000008000340000000010900020073797a3100000000080003400000000408000180ffffffff0900020073797a310000000008000140000000124c0002802400028008000180fffffffb08000180ffffffff080001800000000008000340000000012400028008000340000000040900020073797a30000000000900020073797a30000000000800014000000004080001400000000e080002400000005808000140000000001c000580090001006d657461000000000c000280080003400000000d08000340000000000800044000000029140001800e000100627974656f72646572000000100001800b0001007461726765740000100001800a0001006d617463680000000c00018008000100636d70003400018011000100666c6f775f6f66666c6f6164000000001c0002800900010073797a31000000000900010073797a310000000018000480140001800e000100627974656f726465720000000900010073797a31000000000c000340000000000000000530000000090a010a000000000000b100010000010c001040000000000000000208000c40000007ff080007400000002840000000030a010100000000000000000000000a140004800800014000000003080002407d279ef808000b4000000003080007006e61740008000a400000000408020000160a01020000000000000000020000090900020073797a32000000000c00054000000000000000030900010073797a30000000000c00054000000000000000059000038008000140000000007c0003801400010067726530000000000000000000000000140001006970766c616e300000000000000000001400010064716d6d79300000000000000000000014000100766c616e31000000000000000000000014000100687372300000000000000000000000001400010073797a6b616c6c65723100000000000008000140000000000800074000000000140103807c0003801400010064766d7270300000000000000000000014000100776c616e3100000000000000000000001400010067656e65766530000000000000000000140001006e657470636930000000000000000000140001007663616e300000000000000000000000140001007465616d5f736c6176655f3000000000080002400000000908000140000000007c0003801400010076657468315f746f5f627269646765001400010070696d726567000000000000000000001400010073797a5f74756e0000000000000000001400010063616966300000000000000000000000140001006970766c616e31000000000000000000140001006272696467655f736c6176655f31000008000240000000050900010073797a30000000000900020073797a310000000050010000030a0103000000000000000003000007c5000c0087b61fffa34d2b2bbf5b3d95f83247b61a2d1e18043225300c5c10091535372da3126401221dedd5eeb5a1cedc4c7a106039316e2f68b3f9533800abe37a19d550a8f482babb2eb4c60fcafe042cb43001164778a1d1f62d14d4267832c30a13882cbfb07c1989b1d716b00176a382a34c3acf362cdf86299fabb1db0827cf2abe90118dbc5e114955110d631d960172b7e89799c3374fe777fadf89b392e2770d9e58320a524896a44cb878468202e2b04ed0da4e6c63bd9d663be5a4264b1ce50000000c000240000000000000000308000540fffffffe08000a40000000005800048008000140000000021400030068737230000000000000000000000000140003006261746164765f736c6176655f3000000800014000000000080002401f1ade7a1400030073697430000000000000000000000000140000001100010000000000000000000100000a"], 0x658}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000700000000002c00000000000000180000000000000000000000000000009500000000000000950000000000000068495829473baf9b60bd9c735d164959838035e13aaa5285be72bf315959524a31f66d05daceed4fe7abc8e0ede3b76a988217981214dbffdeedd9fca9a7726da03b730fc3e8e853e6fb1c04a9a88639c8210aec7d46c3f45ae778d5cc0cd16e"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000001c0)) 180.210902ms ago: executing program 2 (id=5335): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 175.010035ms ago: executing program 1 (id=5336): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b41900000d0a01080000000000000000050000090900010073797a30000000000900010073797a30000000005c190380e8010080dc010a803c0002800900020073797a3100000000080003400000000408000180ffffffff08000180ffffffff0900020073797a310000000008000180fffffffe0c00028008000340000000021800028008000180fffffffb0900020073797a3100000000b8000100f3f6bd796e5e05d80e999616383a07ae99000ee109e97b6f7e0c779538d422ae496e7b33f4c4274fc34be82ba0fdb71dcff9e10ee79f9b7909a263e03002bae469aedccead60a8d6a717f1ce35b8801ac9886cfd917984bc4c3159cb84f6c50a7020317c511f61c1b0a342d9caf836e417824212bf68a9bb06d525f2ede2b312d3e2dcb56e8d4c75e7ab3a3a1a86d60b3ef7260dca3918c9c51ed9c3c8619886a38aab0fd5db1859ad4078e39e5ef6bdd049ab942200010085349079be942c58fd8c1c727b51018805c3fd1d9b34e4ba0684d04c544a00004c0002800900020073797a300000000008000180b07f327d0900020073797a310000000008540fad3195cae8dce01e97a1f8dd0003400000000408000180fffffffb08000180ffffffff080001800000000008000180fffffffe240002800800034000000003080003400000000208000180fffffffc08000180000000002b000100b950b40a31bfbf3ac3dd3018eed430a622a8e70136dd319a36de74510ffaa3f9a6c0ce0e90dc2f000800034000000001701700806c1707800a00010072616e67650000005c1702807c000380240002800900020073797a310000000008000180fffffffd0900020073797a3100000000540002800900020073797a310000000008000180fffffffb08000180ffffffff080003400000000308000180fffffffb08000340000000020900020073797a300000000008000180fffffffe08000180fffffffd440103800c00028008000340000000010e0001000969b0153b3b7f3ca5580000fb0001006017d47426817f8f7f90bfc7254fa592462d215b0c0e40d503f9a09faa4631d504c62c0f98ec15c94dd7d6a6b45fd2a5f2659307ff32791b058d3d3aab107028cbe7fef5e60ffd0fc55cb8ec8c4d761b8af5e9d578aaa3d941548112b48862559c9cbbf185058f877bb6d6f08fcdbcd44844e267401c1affa1c18ebb8fbb9624aca0648852a1bd3f3018f919c64a7350a6c05f0c806e6cfa25229cf52e83067f3cbe6b741f947b3432918030646a4d25994f7bbe7db32b5bc9587ba5ba90a8278024b3a04c4617fcc937b90a63eef6c302afc7d0356b0563c93e5bb494048c8c7fd8cda22be0e32d5e82888b69d2dc1d335ce07df1c1ef002800028008000340000000020900020073797a300000000008000180fffffffb080003400000000240020480300002800900020073797a310000000008000180fffffffb0800034000000002080003400000800108000180fffffffc2c0002800900020073797a30000000000900020073797a310000000008000180fffffffd08000180fffffffe38000100b0405d65c8a5614eaa1204074af0e2490b4a2fdd5f24c2167eee571eed29c0e9f35a51dd9e90a7b64ce04c351c3feed543d48dcd3c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a30000000000900020073797a30000000000400010057000100a462a6867a355a6b3411ddb9cce73164958966abec36b4d83b920810e79a97441ecdb7c1cae22eb2857284a7846033acec13c895c087aa08108dbe8ecf90409f750627b1e0713e0295e6a9135c4ba049105987003800028008000340000000020900020073797a31000000000900020073797a300000000008000340000000020900020073797a3100000000c9000100279919fe48c96337aa6bb1b56f11fb8995ca21658a7e394bec7a5a8169d3763f5cc7bd0d7e0927fa8d18e7fbdaa3a6f06cc7d7db6ab0a04242f5005271d7312ed34633c026444a100b797636057e503bb3163b4a8f8e35cd47d1c7512ae07048be209feb169919ac5a2f00df838fd958ee4cf8a64c9ce3f449b1e861e2b76d9e7167336b27656e24048f69d980fa65c1b206e8a2559056add2e850edb0a054f5dacb80b1e80acd12387452e8bdde6e48753f7d0e897cdeed2a6115095a2c10c768e1079fa70000000c000280080003400000000108000140000000102000048010000100ba2c8254fb2a7d5722960b590c0002800800034000000001fc000480600002800900020073797a320000000008000180ffffffff08000180000000000900020073797a32000000000900020073797a32000000000900020073797a3100000000080001800000000008000340000000010900020073797a3000000000970001009d2790711a5642056db80e4dd8cbb68a3bdb04e1976596013d2d9f18b6d55c3c3b807d348264b11fe1f5a1fd509ba2b851a42de52bfaf4ab1195ccc3347eb25a7f835c4dc4785d34d2d7035159bd3582a1c673ecc0be94c13d6def8f375a9e15be746e455c24987d33657a23018c7830ef0a001af51f20d69415255a16c93bf5d2bc11652f22112c6547ab482d42b7abb3a98d0018120380100002800900020073797a30000000004f000100500cbdf56085d41b7edd3c31bb080a1c7b885e0432e9118fdcf745629e98cbb37617e6f669615b3a00611aac6fb77b86b74d4f5e7a63322668dff66af2558fbf043903c04e8f3128925bd10004100100442f0e3ba8d65e6c7f5bf7437568061626b23ee0504847f6d4d2fb23cfc55401f64dd86e3e5634c387c87f3c19ce6a777c8a67d6c3546664350e961c7e3e54c6d26269d52b05535993e622e67e6bcbdd3f6813f6f4a4f6a58f8ed5c4fb7edb850d8a1a8ca44cc4b76f0d44b411e87432862b0f2f2371372e6ace9d453ba828568b53c71ba8d81513e453b2035602d84333878d8e81f1a163f6c1a0cf09a30b9127fab131cf974801607c755e328a66c2ab09609313bebb568c806a087061ddb99882fc726e0e50f96c089e46c463362d43f13f0cd190e3d823c03720259c6dd8430ecd42e002280d42bfc20d47e4436fdd777237c84a710b37cc03241ed8e3ba2fb65ae3e59a8abd3eb6a64c9edf4b74b4ee6f16baf80f16ff8db42381e5573a2c1fd497856bff4e46f8e92e982d8aad6707f72a3260d488462ab7ed5cd30708d724cd80ef25b0f8cc4a5462617ef533824a2d199ea3e31c6ef376d5b9a7cd558206bb137487411e3501a92b0600eb93935b63e6432e88a0bc51a4aa4a1225a2d29fe2e58c5facb8ab9e5102f75b891df788a463be602ab940c97eacf702136d10f6bb0b40dc7124bf4486192c3e76e39579546e6752390e754d3c34f3f4c7d4b13b40bb31287c30c4d1dc8ea1ee944234bc8389eb9ffe5bfa86fdbd669bf84c529d070947c662a0e988f05a315202b5838b3c0ffa8bb6d19b50049cd3b59b7205f0d848e951c3b900ee54a8236928ef782417e0b7001868fa7071ae57ba5bd4d2b92158284ad5075c612b4def345b6e21238935f2c06c6068f368a0a91fe4d8fcc6815a5d59c8b37eb01c0d7d1cd8410c97725cb117b80cc9bbb8cbec0cef39639085d6f0fc0f62776536ec3ebfbef408c1e60c5cbc7d16f1312478f05b01e2e16cc9a13c78f20f683b8dbd78b58aa12c3975a539f2c4e2c641bacf404b215b7f605ecf6912babda063b0fd18c3e053d624edb0af368101b39509819708c3846eb006f8bb2b09a81bba014e1c67264e00c16b632d6856e7fe62171837c9442096fcd82b6201b2e2aeac8954bf3fde2bd3e02b89fae82a59618a57fafe3ce329af34bc0ca7428d164e11ae37263977467b6584eb07a4a74f396af6c5090023c171759786ef08f9847098b636118de89ec511c5f2e90b22f8c8948151e95d0c9f7def6669381aceae202b01af85ed8fc24f6efe49a5ce64008081d53be660d707f8667b57f73bd5f6c26f0756ab3881a328d2a73fce00130eef2b89b8d195faea13dc586c775c0ac40fda5fbda67b0869e9d897fc01100039392029ea9180be61c5fab964cbe9ea902d1aa41c4e367fa4a6ac7afc724c2e28b1173969a4e618625a91386238f155b7035dc11082839c57dfd196492743cbc6fac0644c604209f8ede2a6f7c3d92002854f640e74c0e73ca83a5f968c8cbbf3ac2d598157d3adee228feb6b666c0dea9de8a48438741f79a204a3235ee05003638a45a22bee0e2882bb21b51384d46b2116f998b49e42587df5fe8325ed63f30b6d551dd10ada3a3bcd1a0db84cab0c81b8eeb2a3eb128f2ab9fe60f5eeec69fe24c8d465205f94b328b7e79a688864eed529f8a50f504f2c0f4733580fa3cf66331e5e11060c535c492bcf89a4076f6f1b7979ec2d041c0e9d114b2ce3bd73b7777b09dd8a53052f6a33f455cac47eea562da7076ac1caf938576a7c83f6b34be5e691293d6fe3352b836bf982afa68de804772962db2123419e941eb60846e827d6b26b84657ec4a873d3c11a533402877edc01ebe436326388dfe987bce644401fa45a961c669d060ac9a8464a5c575c2a714437278312103f9ba2e76dc17fa76a3b8dfcf88d29a9fd5e4f68896bbd64d86109523d0eeaed1f4e1e6a6bd3cd392f3062f8bed85455216084d7d012a095c2155cb035ad1a675715f6e3a50d97d9b3ecee8615c2c4e7c6a6a283053a7aad5cee0edc67dbf93713bf8c42b8c2cfe59b33f8c9d0c1c4c395363b529414671d6a30ecf9a5d165213b15daac9dcf03f16c62d6f8cc820b74064a65fa91dd9fb82700f66c4ca3742db4d9c3bacb4400bf921307de71b93174904ea6517ab823533b91c9aae098b6dd6b516c0c909ed217a0d50d244deffd7cad15f0297a172047e57c2d73ed4e565ba475e4c1548d542c720f5dc04caa30ebc753c9d317e901e85c6ddada3ac21318037c15d76ffb7491c6cf585d9a81154a72778cf79e701f40b7edbe2953d75fc0f224a21b2e842b21b039a4134b2af090e5e2283e6df1233247a3f149356713b4ecaded40cb7d3ff91619e9099e583c06d2bd8204cd43f53b5deb610e00b8c6670b2487f28668c5bf4f87dd1c05e9971bec274361addad9c87e4fd23b214eb7c247ba239f46a082bd3a3b3ac634e19f802ff46186b81e88f2a30f4ee988f73c09d4fc3852649002678c8c20550000cb2b144e424b1fba192ab83822582d9ec978a7e85e4920e1ec41b14c97d5fe3de1e1acf5f6737c00b94b918c0312405b8c0fc7daf9ad9c318f9c50c20681781cb98a4ffa40a8403ee481d379791e8a46e2875643d6bf8763cfe77985aa4abd70ee9683fcfec47dfce47809f031337ebdc2b3df912d953d8798f5f3227124a71780d293b33ff64f310ca9feb224884a7d8e786fce6ae425b13142d6a2390eb0d36e1d7d95f4379c22da6a6b5b51108db1687ca175a5efc54cea6076ebe7599b2961c3c65a8d115e43cd9d2159da1a2aefd7b6690b92ae347b1308f9e048901475a3d823cb92f4b2e63544d397eb70744f48f69625d7069350f73bde929664ac4cdf02b077803d8dde3d5e569a688730fa37dfeaa091fa0deea0b45eb001f31af2615eaee33bf25d88fe56719e463da6635f1df787a193437ff126ae6885d0944bd093592dd58a8b3be9b69c472e5324ec4a6d6313b40bec40fe7695db57ebd8bbba73d6fc955077aab60b78422f8be2734d59e8f0088f635014844e16147f237b3a70c9d0baa8ad5ecf7e7120955e72fe73254777749383a35d7eb95b7371327a6955cb39a282ce27998eafb17c74d1c3eb719a926c633310b3a039c3b8eb92a3fcdbf42e6c4360e48da14d35153b31fbe954e86975bc958a657ed7c56c25451b7fbc999149ff9f57ad5bacea297df727299086100b5d71f2df4c5ebca18ac8b1551bb41829a44a898b55273fa1961d73b4ea27376a07a6529e8ce633b76e70c71524062e013ed5e6b71e0330eb2341d1b5a819d2838192df453992ac657a1e46e38e11580d5ab1cb719535fc510dc7d055a490917f391a8da37543bd9d2f53f0185ebca65ed4c5066bb6afb833858aa133625c3446b53163ec685810182ec9c455fa4fde63848f1c9ba511512954daaf8a014ac27d56d93cfb1f4078a20e7b2b89c220871fb4d2672530f83379fdb71502bf99a2f829e59d0e131359fc3ae5bf596f6d9856ea601788bd906bf736a95557db6c22c3aacbf8da80c3be59bd52b2cd7d07285fc5eda1346331fb4eb7a2d394ef8a03756fb0d19984fde5f9da506644a6257a48a8804b5c4aa7b0cd2f3c312df7905908eff134e902400f993dc07f377b44b448c84b74f0bfe5c04ee25d487e7e2f98dc36bae8efb0fe4bc0ff98e5a9d874acc63567c82418d07e1cd9c9663c7ab4e95fa1aaa9075028cb61fd5aa6d3051c10cf0d1758ebf910ab44cd298bcf03ff4da06cc266bbc967b1ab4d77eb00e2459726a43d30b95e079e4dbf9128e14c81f072a60481424a0d9721bea0aa42e42e1f4d0892c2f297676fccc7fbc598edd5d5930cf5d1debb0b4f1f52b97289d8bc2ff26fd49ca987560be5dfad3219425f7628b93b759cd6d3a5ea1ab2e3c521ab26ca70099a764ba1591dccbbc6d714f47cbbe3694a1fedbea46d80310b295f282c8544964a5f48367a5aca9d3cd7de3992de7bb834ec960e5f9b60d2380d2125fd9c68d47fd63738554acb38aad31fe5ba70de53b0f3c78552e593fddd04170f79987c8d68439b9b28c9b827c2752fe980093827461483d57209e58a1e81f092dd8ea92a36fe2e90c9627e710f91fa3d8617765fb6e5d22dc81ab5953eafd631018c75537984bff953d4ec1e2c941ab4c919b98483694c0a6c186b0575b7f3a58f4b2372761778465fa4e98ef54fd276ae58689635383555049e1fb71324549334a9591360888d733fd5a9f4ecd4e50c02e424d3c00501976e71aea4032c6820c3fbb8d6d71bae28fdf9c4ca3de510e3297da3ad04bab7c4446899f74588f79c14318e4a8e7b172138a2249634cbc30220566be2a55d73a233b43f89f7ab4577907d3f9341f17d02059645b52a147a44e9a86861aeff9af591129d7d0527da4844805d7f871324c3d309886791cc8e1b85e9484e27ed418194021a1f6b699baa31288a848491bb33a3a14517b81612499bcc7fde14383e3e2a0622fda88bd6ae864f62ea5075cb927baa77fd14bcdf6e0e37465e422a830bba536dd2c70509c67bfe8081a99b3aca2645e2d241ef6bdd0430f5cd79c64044a75dff9061fb6be345bb70c1822f49e199d2c8ab871724a234a16bbfce29ef3f1f8d4c95f4cf1a7d33a722548d1e0ca0e52d03d78550ae599269003a1921294549bb996f0d21142f31321066a09c2127900b635f90335ecc2f212660294a8767408a5b961f0c87f2f4902a078b2cb4b688136272a3390bbc9f49b9b53017c522ec2048297b4bc0a00e5ab102d8f9a1f3135ece63551a1c560427e9a89f74d2c931543b9491f1f4bba0c98093ad7024bbdb5fa056f64aa22e88ade1bf711b9f1ace03747e24da3b0fe603a0ffb44b709488f53eccd0c870911f64a212de18fb1e780fa754022ccc58078bc5afa2ddc5abd4737a2f47f7ee89d0b326c7952c71acd30cd001543282496bae5b2ccba85709a626ce0f215c38f2fabc1b26a6545c11fc4f68065a5d48252eaaf4e5438d2342130cab792a0f83e396ed2ba6bed92878b95133788f79f53da4b6dc7651926888ea334a8fbee097c2889ac8469fd6f125c6b0c37783e5c79375883487e8b7bdc63dea7f486b051989d71964ea0d8dc4232837b7659e0c59ceb7582090d0de3fc31cb1eb850e8b2fea1eb207b5bc8fbee55bad5514ec4cb6308792727824b7960a6c55ea6f5f54f315110bab25f1211357701be897013bc232acc84122b1ee1da5b014b99e939f1e25b74e654ffe4e4102a7267244f4aa10b5117de32a2603dcce2701773921904751424fd9ec9ce35e5aaeee92e699e3a120b25a37ab59515f144e19248917667c1e16eb8c6f640ae68110c923769af70bbe425da76c9c71e7d8bc734d7cc239cc565d7508370fc698dd9580de737f33d5ffe2176ed442f8a44fbe9b237568fb56fa6e9a83553d91d610e6e9c3ac8a2ac3dd7ef95b4a75e8b88af78e5b4b8ea787fb34e14703b1d7f6dd538a7f741785824c30fa6df108192daa512b0e3db54c65ec38b8923ab1f923897eb621f8a622bb601c2e18a851ddb74ef1bf0ce6474b19e652aef29bc2ab1fd795c7ec097ce647e8a63b133752a5d89b6ad28d8cd00df8617c657d713a76110ac6f93d34ea533f2c8069503d49a04254607689c75e100114ddfb26839ff8cc0d236395082a164ce81bc2e3875dc09f3ab94e4588303c112acd941aa8c6f86b2e18c297496353766322b7ea40bad49f6e764f95f33f0a882a23e5708584978f60e864c84fa88e92d3e22224aa14d5726d5010b0266a6ebda5b209de0400b3a5785b8f9c78a7eb44c2a8c9c64ffd949b7c36b4f9e508c31dbe9a9a20019fd2fab4da5f94b6a8ca0001008b91d41a09e9ff03a9839b6919395ca02ccb3192e6fb84a49eb6ab8a0aa3142ee3cc1a820dbdc846e0d93ee543fae574b77e42027dffb53690cb0fde8f6e8635da5280725cc11410570e95701f010a2620c416c800d221372b982adbafba9df54e507a392ebbb27e4bbf193e5edf881e0dcc07869e01b68a7614154089a74f734a3a350339620dd3f45d1e2b5df3c7e7d4a870180f56a2e647c4f26fbdf20eb6cb97e49e1c42d1612ae882782eb18706e98efbd74695e9938a9e4fbf9aa7060f96886066b7610000e4000100d423bb0fc18e732f215ce2f64a090b8e7000eab4375560c8f3918018b4df24095aae34392b5ae315ac45592b93dd1381601b4106bc7286abb62828dc57ef742d2a2bae5fd6522ab1af8ac87283dd589a4b30a830e2246f8051821ff90d990da5f8a427696b75a22a68f78174d00b9d1c643d5530eaa036cdfa0c5a00c538520a1270b68ae7b2495ec6e6408827dd91e2a1196ffb2e39f2c1192ce15fed78fe1713684cd7a7477304b8e5ddaa256e7a7a5a8cf73070ea8456775d0e9cd2c12efc923899eb36f5590c98004f174fdba406d19907fe3a79800b83e1e32eb654bc5408000240000000010c00048006000100c44f000008000240000000010900010073797a31000000000900010073797a3000000000090001007379"], 0x19b4}, 0x1, 0x0, 0x0, 0x4004890}, 0x40000) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) r8 = socket(0x10, 0x803, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1c0012800b00010062726964676500000c000280050007000600"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 164.670289ms ago: executing program 2 (id=5337): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4971d6f6f33acb19cedc5e0954365675f42e7242b21bd3d35ddcbb1e0f8ad1c3a136df7b483b39e17c503ff458ab95f42ca3cdb5d3b94a21a036dd0e60155fb9a7fe4aec497c5a8cd00d19a283482bb43b74c42cf9bd0e", @ANYRES16=r0, @ANYBLOB="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"/842], 0x350}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) unshare(0x22020400) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4000}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@RTM_GETNSID={0x64, 0x5a, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}]}, 0x64}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x9, 0x80000000, {{0x22, 0x4, 0x2, 0xe, 0x88, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@timestamp_prespec={0x44, 0x54, 0x93, 0x3, 0x9, [{@empty, 0x1}, {@loopback, 0xf}, {@loopback, 0x15}, {@loopback, 0x10}, {@broadcast, 0xcec}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xa3e}, {@loopback, 0x1}, {@multicast1, 0x7}, {@broadcast, 0xe}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x371f2428}]}, @timestamp={0x44, 0x20, 0x36, 0x0, 0xe, [0x8000, 0x40, 0x3, 0xc150, 0x6, 0x3, 0x70]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000840)={@loopback, 0x0}, &(0x7f0000000880)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x40, 0x1, 0x3, 0x5, {{0x33, 0x4, 0x2, 0x6, 0xcc, 0x66, 0x0, 0x6a, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@end, @lsrr={0x83, 0x1f, 0x43, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @loopback, @broadcast, @local, @broadcast]}, @ssrr={0x89, 0x27, 0x6d, [@broadcast, @empty, @rand_addr=0x64010102, @multicast1, @local, @broadcast, @private=0xa010100, @remote, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0x2, [{@private=0xa010100, 0x2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x92, 0x3, 0x7, [{@empty, 0x4a}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x400}, {@local, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@rand_addr=0x64010101, 0x1ff}]}, @ssrr={0x89, 0x7, 0xb, [@broadcast]}, @timestamp={0x44, 0x20, 0xb8, 0x0, 0x5, [0x17a, 0x886, 0x40, 0xffffff5a, 0x10001, 0x80, 0x6]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x2, 0x8, 0x64, @mcast2, @remote, 0x20, 0x80, 0x8, 0x7}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000010c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x224, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x224}}, 0x8000) 157.905246ms ago: executing program 4 (id=5338): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="100000000400fedbdfa8d046"], 0x10}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) 28.047551ms ago: executing program 4 (id=5339): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318329bd7040ff9bdf25190000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x39, 0x100, 0x70bd2b, 0x25dfdbfb, {0xe}}, 0x14}}, 0x4010) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x29, 0x6, 0x7, {0x3, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x401, 0x10}, {0x0, @local, 0x9, 0xc, [0x8, 0x9]}, @udp_ip6_spec={@loopback, @private1, 0x4e24, 0x4e21, 0x2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 0xfffe, 0x1c, [0x9, 0x20000]}, 0xffffffffffff7fff, 0x7fff}}}) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318329bd7040ff9bdf25190000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_generic(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x39, 0x100, 0x70bd2b, 0x25dfdbfb, {0xe}}, 0x14}}, 0x4010) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x29, 0x6, 0x7, {0x3, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x401, 0x10}, {0x0, @local, 0x9, 0xc, [0x8, 0x9]}, @udp_ip6_spec={@loopback, @private1, 0x4e24, 0x4e21, 0x2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 0xfffe, 0x1c, [0x9, 0x20000]}, 0xffffffffffff7fff, 0x7fff}}}) (async) 27.637655ms ago: executing program 2 (id=5340): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x1d, 0x12, "400053e0c9d32076c99dd6cea46c5d7b"}, @md5sig={0x13, 0x12, "be58b864b222bf56e5de595fbe659615"}]}}}}}}}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) sendmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f0000000000), 0x10, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="03000000100100006318000000000000f88321e04f0534a877c35293150750fb9b0100000001000000b9f77f48616fd9482bef8e067ece9c9560b182cf5d9832055a32a50199d82a898aa4e621d85cb00f7fce0c8d11b02000b96bf6cec81f5b4d61fa74b4be34c72df4bc95408e0e402d65f6692be24d95b14882f31904037506ca4435726fe548455a4e90d1", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000c001000000030000c03e01000078b663dbdf81e7c01754fe656f2b046159cbe96ae6c4013ece347f34928fe8429430beee5ce66626ac70f3085f4393ffe00add1bb0ba2eb5a03ffc7ea928a895"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, 0xfffffffffffffffe, 0x1, 0xb) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fc010000000000000000000000000000ff0200000000000000000000000000014e224e22", @ANYRES32=0x1000, @ANYRES32=0x41424344, @ANYBLOB="5010001490780000c62f7bffac9a919a07a0113101a6b10e6a59ee15d03bdb3277895b4292440d21aceb8b5c4cb2efd4831b29e61dc3613a4d084472ab2083a3a2996d49663ebc83260af5a29be8e7c8314a72f6909b9117987a"], 0x0) 0s ago: executing program 1 (id=5341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x3221}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0x10}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "4934a50af7431d591cd760dfcac6c5724d2f7e1aa0976488c4b9360afeef9792adf375ea20edb9c5fbdd5e79cfcb182a65c7678bd38bbd16aeaef1079e4ad1c1dece381dc48e5452ef90dab6a3c5768160989553eb569df1bd346f37ac37348bf64dfb2987be173358392cdd1092d003e894719838a81ff04cb7331f74da275e69a44c8926689e0a4e32df0bf5327ae4d0dc0fa2aafdba0f3982f8154a33d9b731d4c396c421854690ced6accac3e06494"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000804}, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x5dfdbff, {0x0, 0x0, 0x0, r4, {0x4}, {0x0, 0xc}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xf261}, @TCA_RATE={0x6, 0x5, {0x41, 0x9b}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r7 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000000280)=0x8) kernel console output (not intermixed with test programs): m5 netdevsim1: renamed from eth1 [ 588.208281][T23702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.209646][T23819] SET target dimension over the limit! [ 588.211280][T23702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.222260][T23840] x_tables: duplicate underflow at hook 1 [ 588.228598][T23702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.232619][T23702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 588.242832][T23702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.392220][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 588.427724][T23859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 588.592584][T23702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.639115][T23702] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.679337][T13313] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.679434][T13313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.699500][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.699598][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.739435][T23873] netlink: 'syz.4.4011': attribute type 23 has an invalid length. [ 588.739570][T23873] netlink: 'syz.4.4011': attribute type 23 has an invalid length. [ 588.803850][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 588.866449][T23882] xt_nfacct: accounting object `' does not exist [ 588.880996][T23883] xt_nfacct: accounting object `' does not exist [ 588.913582][T23882] netlink: 'syz.2.4014': attribute type 2 has an invalid length. [ 588.914100][T23882] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4014'. [ 588.965810][ T4935] Bluetooth: hci3: command tx timeout [ 589.025533][T23887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4015'. [ 589.038667][T23887] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4015'. [ 589.038832][T23887] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4015'. [ 589.342759][T23909] netlink: 'syz.2.4020': attribute type 3 has an invalid length. [ 589.517895][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 589.517918][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4021'. [ 589.549600][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 589.684214][T23702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.211233][T23937] netlink: 'syz.4.4023': attribute type 12 has an invalid length. [ 590.353392][T23702] veth0_vlan: entered promiscuous mode [ 590.368569][T23702] veth1_vlan: entered promiscuous mode [ 590.418492][T23702] veth0_macvtap: entered promiscuous mode [ 590.423669][T23702] veth1_macvtap: entered promiscuous mode [ 590.465622][T23702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.486516][T23702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.487249][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 590.517113][T13315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.517304][T13315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.517363][T13315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.544681][T13313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.671586][T10017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.671604][T10017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.732392][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.732411][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.807418][T23949] bridge_slave_0: Caught tx_queue_len zero misconfig [ 591.001050][T23966] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 591.045477][ T5619] Bluetooth: hci3: command tx timeout [ 591.061210][T23962] syz.2.4032: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 591.061300][T23962] CPU: 0 UID: 0 PID: 23962 Comm: syz.2.4032 Not tainted syzkaller #0 PREEMPT(full) [ 591.061324][T23962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 591.061340][T23962] Call Trace: [ 591.061348][T23962] [ 591.061357][T23962] dump_stack_lvl+0xe8/0x150 [ 591.061391][T23962] warn_alloc+0x24d/0x270 [ 591.061417][T23962] ? kasan_save_track+0x4f/0x80 [ 591.061438][T23962] ? kasan_save_track+0x3e/0x80 [ 591.061462][T23962] ? __pfx_warn_alloc+0x10/0x10 [ 591.061480][T23962] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 591.061506][T23962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.061546][T23962] __vmalloc_node_range_noprof+0x127/0x1540 [ 591.061598][T23962] ? rcu_is_watching+0x16/0xb0 [ 591.061629][T23962] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 591.061658][T23962] ? __kmalloc_cache_noprof+0x321/0x600 [ 591.061680][T23962] ? __kmalloc_cache_noprof+0x14d/0x600 [ 591.061700][T23962] ? xskq_create+0x56/0x220 [ 591.061730][T23962] xskq_create+0x148/0x220 [ 591.061757][T23962] ? xsk_init_queue+0x8a/0xe0 [ 591.061786][T23962] xsk_init_queue+0x8a/0xe0 [ 591.061814][T23962] xsk_setsockopt+0x52a/0x960 [ 591.061842][T23962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 591.061867][T23962] ? __pfx_aa_sk_perm+0x10/0x10 [ 591.061903][T23962] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 591.061928][T23962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 591.061954][T23962] do_sock_setsockopt+0x17c/0x1b0 [ 591.061985][T23962] __x64_sys_setsockopt+0x13d/0x1b0 [ 591.062018][T23962] do_syscall_64+0x166/0x520 [ 591.062048][T23962] ? trace_irq_disable+0x3b/0x140 [ 591.062068][T23962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.062089][T23962] ? clear_bhb_loop+0x70/0xc0 [ 591.062114][T23962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.062149][T23962] RIP: 0033:0x7f03a719e159 [ 591.062169][T23962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.062188][T23962] RSP: 002b:00007f03a8114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.062211][T23962] RAX: ffffffffffffffda RBX: 00007f03a7425fa0 RCX: 00007f03a719e159 [ 591.062227][T23962] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 591.062240][T23962] RBP: 00007f03a723506b R08: 0000000000000004 R09: 0000000000000000 [ 591.062254][T23962] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.062268][T23962] R13: 00007f03a7426038 R14: 00007f03a7425fa0 R15: 00007ffff272a958 [ 591.062302][T23962] [ 591.062326][T23962] Mem-Info: [ 591.062339][T23962] active_anon:5886 inactive_anon:0 isolated_anon:0 [ 591.062339][T23962] active_file:1 inactive_file:43359 isolated_file:0 [ 591.062339][T23962] unevictable:1 dirty:114 writeback:0 [ 591.062339][T23962] slab_reclaimable:11705 slab_unreclaimable:112078 [ 591.062339][T23962] mapped:34505 shmem:529 pagetables:1317 [ 591.062339][T23962] sec_pagetables:0 bounce:0 [ 591.062339][T23962] kernel_misc_reclaimable:0 [ 591.062339][T23962] free:1292817 free_pcp:16644 free_cma:0 [ 591.062393][T23962] Node 0 active_anon:23544kB inactive_anon:0kB active_file:4kB inactive_file:173232kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:138020kB dirty:452kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14992kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 591.062449][T23962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 591.062502][T23962] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.062564][T23962] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 591.062601][T23962] Node 0 DMA32 free:1214480kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23544kB inactive_anon:0kB active_file:4kB inactive_file:173232kB unevictable:4kB writepending:452kB zspages:0kB present:3129332kB managed:2547096kB mlocked:4kB bounce:0kB free_pcp:66416kB local_pcp:45176kB free_cma:0kB [ 591.065731][T23962] lowmem_reserve[]: 0 0 0 0 0 [ 591.065770][T23962] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.065829][T23962] lowmem_reserve[]: 0 0 0 0 0 [ 591.065863][T23962] Node 1 Normal free:3941428kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB [ 591.066028][T23962] lowmem_reserve[]: 0 0 0 0 0 [ 591.066122][T23962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.066246][T23962] Node 0 DMA32: 250*4kB (UM) 667*8kB (UME) 540*16kB (UME) 425*32kB (UME) 493*64kB (UME) 208*128kB (UM) 41*256kB (UM) 12*512kB (UM) 5*1024kB (UM) 2*2048kB (UE) 269*4096kB (UM) = 1214432kB [ 591.066402][T23962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.066499][T23962] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 1*32kB (M) 3*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941332kB [ 591.066652][T23962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.066669][T23962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.066685][T23962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.066702][T23962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.066717][T23962] 43885 total pagecache pages [ 591.066734][T23962] 0 pages in swap cache [ 591.066741][T23962] Free swap = 124996kB [ 591.066749][T23962] Total swap = 124996kB [ 591.066756][T23962] 2097051 pages RAM [ 591.066764][T23962] 0 pages HighMem/MovableOnly [ 591.066771][T23962] 428661 pages reserved [ 591.066778][T23962] 0 pages cma reserved [ 591.269965][T23963] bridge_slave_0: left allmulticast mode [ 591.269991][T23963] bridge_slave_0: left promiscuous mode [ 591.270195][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.323283][T23963] bridge_slave_1: left allmulticast mode [ 591.323304][T23963] bridge_slave_1: left promiscuous mode [ 591.323498][T23963] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.526758][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.528836][T23963] bond0: (slave bond_slave_0): Releasing backup interface [ 591.560778][T23963] bond_slave_0: left allmulticast mode [ 591.646689][T23963] bond0: (slave bond_slave_1): Releasing backup interface [ 591.674470][T23963] bond_slave_1: left allmulticast mode [ 591.702894][T23963] team0: Port device team_slave_0 removed [ 591.754731][T23963] team0: Port device team_slave_1 removed [ 591.756654][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.758819][T23963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.770885][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.776770][T23963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.797089][T23963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.883660][T23985] netlink: 'syz.4.4038': attribute type 1 has an invalid length. [ 591.969763][T23985] bond6: option mode: invalid value (13) [ 591.973277][T23985] bond6 (unregistering): Released all slaves [ 592.117648][T24016] FAULT_INJECTION: forcing a failure. [ 592.117648][T24016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.117680][T24016] CPU: 1 UID: 0 PID: 24016 Comm: syz.3.4045 Not tainted syzkaller #0 PREEMPT(full) [ 592.117703][T24016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.117714][T24016] Call Trace: [ 592.117722][T24016] [ 592.117730][T24016] dump_stack_lvl+0xe8/0x150 [ 592.117762][T24016] should_fail_ex+0x410/0x560 [ 592.117788][T24016] _copy_from_user+0x2d/0xb0 [ 592.117814][T24016] __sys_connect+0x155/0x450 [ 592.117839][T24016] ? __pfx___sys_connect+0x10/0x10 [ 592.117872][T24016] ? rcu_is_watching+0x16/0xb0 [ 592.117906][T24016] __x64_sys_connect+0x7a/0x90 [ 592.117931][T24016] do_syscall_64+0x166/0x520 [ 592.117959][T24016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.117980][T24016] ? clear_bhb_loop+0x70/0xc0 [ 592.118004][T24016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.118024][T24016] RIP: 0033:0x7f5739b9e159 [ 592.118051][T24016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.118068][T24016] RSP: 002b:00007f573aa74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 592.118090][T24016] RAX: ffffffffffffffda RBX: 00007f5739e25fa0 RCX: 00007f5739b9e159 [ 592.118104][T24016] RDX: 000000000000000d RSI: 0000200000000c40 RDI: 0000000000000003 [ 592.118117][T24016] RBP: 00007f573aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 592.118130][T24016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.118142][T24016] R13: 00007f5739e26038 R14: 00007f5739e25fa0 R15: 00007fff8d63ab78 [ 592.118175][T24016] [ 592.122243][T24013] netlink: zone id is out of range [ 592.122255][T24013] netlink: zone id is out of range [ 592.122263][T24013] netlink: zone id is out of range [ 592.122271][T24013] netlink: zone id is out of range [ 592.122278][T24013] netlink: zone id is out of range [ 592.122286][T24013] netlink: zone id is out of range [ 592.122297][T24013] netlink: zone id is out of range [ 592.122306][T24013] netlink: zone id is out of range [ 592.232737][T24021] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 592.248833][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 592.678199][T24034] xt_connbytes: Forcing CT accounting to be enabled [ 592.678214][T24034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 592.802652][T24046] bond6 (unregistering): Released all slaves [ 593.091923][T24064] syzkaller0: entered promiscuous mode [ 593.091944][T24064] syzkaller0: entered allmulticast mode [ 593.251872][T24078] sctp: [Deprecated]: syz.2.4062 (pid 24078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.251872][T24078] Use struct sctp_sack_info instead [ 593.272748][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.272993][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.273203][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.273402][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.273599][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.275418][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.275621][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.279960][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.280155][T24078] netlink: 'syz.2.4062': attribute type 4 has an invalid length. [ 593.510948][T24093] __nla_validate_parse: 8 callbacks suppressed [ 593.510966][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.511185][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.511391][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.511655][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.511856][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.512101][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.512302][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.520736][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.520946][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.521195][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 593.671213][T24097] vlan2: entered allmulticast mode [ 593.671227][T24097] bond0: entered allmulticast mode [ 593.671234][T24097] bond_slave_0: entered allmulticast mode [ 593.750432][T24098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.752435][T24098] bond7: (slave bond8): making interface the new active one [ 593.752862][T24098] bond7: (slave bond8): Enslaving as an active interface with an up link [ 593.815177][T24098] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 593.818954][T24098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 593.862418][T24106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.936036][T24106] batman_adv: batadv0: Adding interface: virt_wifi0 [ 593.936053][T24106] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.936202][T24106] batman_adv: batadv0: Interface activated: virt_wifi0 [ 594.103584][T24122] ip6t_hbh: too many supported opts specified [ 594.243223][T24126] geneve2: entered promiscuous mode [ 594.254668][T13315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.254709][T13315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.254742][T13315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.254775][T13315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.805160][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 595.281862][T24183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.282778][T24183] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.283229][T24183] : left promiscuous mode [ 595.307220][T24183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.333060][T24183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.334430][T24183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.352374][T24183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.352388][T24183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.353148][T24183] veth1_vlan: left promiscuous mode [ 595.353785][T24183] veth0_vlan: left promiscuous mode [ 595.366944][T24183] veth0_vlan: entered promiscuous mode [ 595.372463][T24183] veth1_vlan: entered promiscuous mode [ 595.380003][T24183] veth1_macvtap: left promiscuous mode [ 595.381260][T24183] veth0_macvtap: left promiscuous mode [ 595.382707][T24183] veth0_macvtap: entered promiscuous mode [ 595.383925][T24183] veth1_macvtap: entered promiscuous mode [ 595.401179][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.410675][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.415903][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.419687][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.465464][T24183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.470542][T24183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.472768][T24183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.503698][T24183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.512393][T24183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.521547][T24183] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.537670][T24183] geneve2: left promiscuous mode [ 595.549763][T13315] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.549822][T13315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.552742][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.552800][T13315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.702870][T24201] macsec0: entered promiscuous mode [ 595.717633][T24201] veth1_macvtap: left promiscuous mode [ 595.735243][T24201] macsec0 (unregistering): left promiscuous mode [ 595.996151][T13313] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.996192][T13313] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.996225][T13313] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.075406][T13315] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.397040][ T30] audit: type=1804 audit(1791122875.748:23): pid=24217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4099" name="/newroot/167/cgroup.controllers" dev="tmpfs" ino=880 res=1 errno=0 [ 596.397174][ T30] audit: type=1800 audit(1791122875.748:24): pid=24217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4099" name="cgroup.controllers" dev="tmpfs" ino=880 res=0 errno=0 [ 596.725197][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.966874][T24252] validate_nla: 26 callbacks suppressed [ 596.966893][T24252] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 597.012997][T24252] bond7: entered promiscuous mode [ 597.013318][T24252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.045219][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 597.086498][T24252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.092781][T24252] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 597.092802][T24252] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 597.126894][T24252] bond7: (slave gre2): making interface the new active one [ 597.126915][T24252] gre2: entered promiscuous mode [ 597.132958][T24252] bond7: (slave gre2): Enslaving as an active interface with an up link [ 597.236257][T24272] IPVS: length: 191 != 8 [ 597.371057][T10012] net_ratelimit: 503 callbacks suppressed [ 597.371077][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.536356][T24270] netlink: ct family unspecified [ 597.536387][T24270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.905419][T24307] netlink: 'syz.3.4120': attribute type 1 has an invalid length. [ 597.955455][T24307] gretap2: entered allmulticast mode [ 597.959189][T24307] bond9: (slave gretap2): making interface the new active one [ 597.959865][T24307] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 598.671600][T24339] __nla_validate_parse: 141 callbacks suppressed [ 598.671619][T24339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4126'. [ 598.698028][T24329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'. [ 598.698111][T24329] bridge_slave_1: left allmulticast mode [ 598.698132][T24329] bridge_slave_1: left promiscuous mode [ 598.698359][T24329] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.741997][T24329] bridge_slave_0: left allmulticast mode [ 598.742021][T24329] bridge_slave_0: left promiscuous mode [ 598.742240][T24329] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.822592][T24345] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4129'. [ 598.834348][T24345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.834843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.939189][T24354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4131'. [ 599.262735][T24363] netlink: Failed to add ¦â—k\ helper -22 [ 599.262769][T24363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.282789][T24366] xt_hashlimit: max too large, truncated to 1048576 [ 599.382995][T24372] bond8: option ad_user_port_key: invalid value (65535) [ 599.383011][T24372] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 599.384001][T24372] bond8 (unregistering): Released all slaves [ 599.413181][T24377] syzkaller0: entered promiscuous mode [ 599.413193][T24377] syzkaller0: entered allmulticast mode [ 599.465950][T24377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 599.574722][T10013] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 599.574756][T10013] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 599.574780][T10013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.773590][T24386] veth1_to_bond: mtu less than device minimum [ 599.979049][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4147'. [ 600.680908][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 600.835963][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 601.185826][T24458] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 601.185847][T24458] netlink: 'syz.3.4158': attribute type 2 has an invalid length. [ 601.320793][T24464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.473019][T24471] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 601.485578][T24471] netlink: 'syz.4.4163': attribute type 2 has an invalid length. [ 601.598295][T24484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.648047][T24484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4166'. [ 601.727150][T24495] netlink: 'syz.4.4167': attribute type 21 has an invalid length. [ 601.727197][T24495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4167'. [ 601.815370][T24495] netlink: 'syz.4.4167': attribute type 4 has an invalid length. [ 601.815384][T24495] netlink: 'syz.4.4167': attribute type 3 has an invalid length. [ 602.091678][T24511] bond10: (slave team0): Device is not bonding slave [ 602.091693][T24511] bond10: option active_slave: invalid value (team0) [ 602.098954][T24511] bond10 (unregistering): Released all slaves [ 602.552996][T24539] xt_bpf: check failed: parse error [ 602.568969][T24539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.131406][T10012] net_ratelimit: 1 callbacks suppressed [ 603.131427][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.256619][ T30] audit: type=1804 audit(1791122882.608:25): pid=24552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4182" name="/newroot/211/cgroup.controllers" dev="tmpfs" ino=1109 res=1 errno=0 [ 603.258639][ T30] audit: type=1800 audit(1791122882.608:26): pid=24552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4182" name="cgroup.controllers" dev="tmpfs" ino=1109 res=0 errno=0 [ 603.497591][T24554] x_tables: duplicate underflow at hook 2 [ 603.705978][ T5754] s`z1: Port: 1 Link DOWN [ 603.735061][T13313] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 603.735102][T13313] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 603.735126][T13313] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.745153][T13313] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 603.745182][T13313] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 603.745206][T13313] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.746690][T10013] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 603.746716][T10013] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 603.746740][T10013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.862674][T24566] netlink: 'syz.3.4186': attribute type 1 has an invalid length. [ 603.913077][T24566] bond10: entered promiscuous mode [ 603.913503][T24566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 604.001942][T24572] __nla_validate_parse: 18 callbacks suppressed [ 604.001960][T24572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4188'. [ 604.185310][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 604.225584][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 604.385888][T24580] netlink: 'syz.1.4191': attribute type 11 has an invalid length. [ 604.467527][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 604.503794][T24588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4193'. [ 604.892118][T24612] syzkaller0: entered promiscuous mode [ 604.892144][T24612] syzkaller0: entered allmulticast mode [ 604.990501][T24624] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 604.993908][T24623] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 605.023473][T24623] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 605.048661][T24623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4203'. [ 605.110092][T24627] ip6tnl2: entered allmulticast mode [ 605.111904][T13315] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 605.112033][T13315] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 605.135132][ T5814] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 605.254831][ T5814] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 605.436535][T24639] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4207'. [ 605.436566][T24639] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4207'. [ 605.437493][T24641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4208'. [ 605.480062][T24641] syzkaller0: entered promiscuous mode [ 605.480075][T24641] syzkaller0: entered allmulticast mode [ 605.483784][T24641] tipc: Enabled bearer , priority 0 [ 605.489164][T24641] tipc: Resetting bearer [ 605.508980][T24640] tipc: Resetting bearer [ 605.537954][T24640] tipc: Disabling bearer [ 605.775459][ T5814] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 607.264371][ T4935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 607.280583][ T4935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 607.295923][ T4935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 607.308051][ T4935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 607.315539][ T4935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 608.159372][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'. [ 608.420668][T24695] netlink: 'syz.2.4218': attribute type 9 has an invalid length. [ 608.699460][T24715] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 608.727090][T24707] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 608.886900][T10013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.125507][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 609.302311][T24667] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.302450][T24667] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.302586][T24667] bridge_slave_0: entered allmulticast mode [ 609.330137][T24667] bridge_slave_0: entered promiscuous mode [ 609.365102][T24667] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.365207][T24667] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.365333][T24667] bridge_slave_1: entered allmulticast mode [ 609.371364][T24667] bridge_slave_1: entered promiscuous mode [ 609.445227][ T4935] Bluetooth: hci6: command tx timeout [ 609.479547][T24667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.494069][T24667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.551277][T24750] xt_HMARK: spi-set and port-set can't be combined [ 609.632655][T24667] team0: Port device team_slave_0 added [ 609.638705][T24667] team0: Port device team_slave_1 added [ 609.768587][T24667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.768605][T24667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.768632][T24667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.774322][T24667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.774336][T24667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.774361][T24667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.866053][T24770] __nla_validate_parse: 7 callbacks suppressed [ 609.866064][T24770] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4232'. [ 609.893292][T24770] gretap0: entered promiscuous mode [ 609.922519][T24770] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4232'. [ 609.929609][T24667] hsr_slave_0: entered promiscuous mode [ 609.930592][T24667] hsr_slave_1: entered promiscuous mode [ 609.931356][T24667] debugfs: 'hsr0' already exists in 'hsr' [ 609.931374][T24667] Cannot create hsr debugfs directory [ 609.931654][T24770] 0ªî{X¹¦: renamed from gretap0 [ 609.939535][T24770] 0ªî{X¹¦: left promiscuous mode [ 609.939554][T24770] 0ªî{X¹¦: entered allmulticast mode [ 609.944314][T24770] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 610.141123][T24782] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 610.155889][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 610.311164][T24667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 610.323855][T24667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.332670][T24667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 610.346523][T24667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.347354][T24667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 610.369862][T24667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.372941][T24667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 610.393246][T24667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.586023][T24667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.614366][T24667] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.650192][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.650291][T10013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.653423][T24804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4242'. [ 610.691280][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.691393][T10013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.909662][T24815] netlink: 'syz.4.4244': attribute type 4 has an invalid length. [ 611.505486][T24667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.525291][ T4935] Bluetooth: hci6: command tx timeout [ 611.782824][T24667] veth0_vlan: entered promiscuous mode [ 611.800750][T24667] veth1_vlan: entered promiscuous mode [ 611.840855][T24667] veth0_macvtap: entered promiscuous mode [ 611.849232][T24667] veth1_macvtap: entered promiscuous mode [ 611.871367][T24667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.879486][T24667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.978307][ T151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.979549][T10013] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.979587][T10013] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.979620][T10013] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.605114][ T4935] Bluetooth: hci6: command tx timeout [ 613.929510][T24818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.942624][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.042142][T10054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.042162][T10054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.142692][T13315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.142713][T13315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.373301][T24898] netlink: 'syz.6.4262': attribute type 2 has an invalid length. [ 614.373321][T24898] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4262'. [ 614.555326][T24904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4260'. [ 614.579317][T24914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4265'. [ 614.663602][T24918] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 614.665359][T24922] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 614.892912][T24918] syzkaller1: entered promiscuous mode [ 614.892935][T24918] syzkaller1: entered allmulticast mode [ 615.083844][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4271'. [ 615.083975][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4271'. [ 615.145128][T24943] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4271'. [ 615.192742][T10054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.192763][T10054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.318056][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'. [ 615.685145][ T4935] Bluetooth: hci6: command tx timeout [ 616.484801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.664253][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 616.682887][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 616.864601][T25013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4290'. [ 616.971100][T25012] netlink: 964 bytes leftover after parsing attributes in process `syz.4.4290'. [ 616.971116][T25012] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 617.011087][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 617.201999][T25027] v: renamed from veth0_vlan (while UP) [ 617.522928][T25046] netlink: 'syz.4.4300': attribute type 10 has an invalid length. [ 617.542031][T25046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.565024][T25046] team0: Port device netdevsim1 added [ 617.599008][T25046] netlink: 'syz.4.4300': attribute type 10 has an invalid length. [ 617.627615][T25046] team0: Port device netdevsim1 removed [ 617.633453][T25046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.649658][T25046] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 617.844753][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 617.923917][ T9213] bridge0: entered promiscuous mode [ 617.928392][T25070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 617.928413][T25070] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 618.028602][T25065] netlink: 'syz.4.4308': attribute type 1 has an invalid length. [ 618.401387][T25093] syzkaller1: entered promiscuous mode [ 618.401409][T25093] syzkaller1: entered allmulticast mode [ 619.297287][T25119] netlink: 'syz.3.4319': attribute type 4 has an invalid length. [ 619.367033][T25120] vlan3: entered promiscuous mode [ 619.780472][T10013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.111942][T25182] __nla_validate_parse: 9 callbacks suppressed [ 620.111961][T25182] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4331'. [ 620.167872][T25190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4332'. [ 620.407188][ T5619] Bluetooth: hci6: command 0x0405 tx timeout [ 622.585935][T25139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.342523][T25238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4342'. [ 623.390689][T25238] netlink: 'syz.2.4342': attribute type 5 has an invalid length. [ 623.475949][T25243] netlink: 'syz.6.4344': attribute type 9 has an invalid length. [ 623.613037][T25253] tipc: Started in network mode [ 623.613070][T25253] tipc: Node identity be51381b43ed, cluster identity 4711 [ 623.628271][T25253] tipc: Enabled bearer , priority 0 [ 623.630334][T25245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4345'. [ 623.656365][T25253] syzkaller1: entered promiscuous mode [ 623.656384][T25253] syzkaller1: entered allmulticast mode [ 623.903458][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4350'. [ 623.949402][T25277] netlink: zone id is out of range [ 623.949417][T25277] netlink: zone id is out of range [ 623.949425][T25277] netlink: zone id is out of range [ 623.949433][T25277] netlink: zone id is out of range [ 623.949441][T25277] netlink: zone id is out of range [ 623.949449][T25277] netlink: zone id is out of range [ 623.949460][T25277] netlink: zone id is out of range [ 623.949468][T25277] netlink: zone id is out of range [ 623.949475][T25277] netlink: zone id is out of range [ 624.039946][T25277] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4352'. [ 624.126328][T25280] syzkaller1: entered promiscuous mode [ 624.126350][T25280] syzkaller1: entered allmulticast mode [ 624.409824][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 624.409846][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4354'. [ 624.410082][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 624.410098][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4354'. [ 624.590310][T25292] sctp: [Deprecated]: syz.1.4355 (pid 25292) Use of int in max_burst socket option. [ 624.590310][T25292] Use struct sctp_assoc_value instead [ 624.605661][ T9213] tipc: Node number set to 4256970779 [ 624.635587][T25298] GUP no longer grows the stack in syz.4.4356 (25298): 200000003000-20000000a000 (200000001000) [ 624.635619][T25298] CPU: 1 UID: 0 PID: 25298 Comm: syz.4.4356 Not tainted syzkaller #0 PREEMPT(full) [ 624.635643][T25298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 624.635656][T25298] Call Trace: [ 624.635663][T25298] [ 624.635672][T25298] dump_stack_lvl+0xe8/0x150 [ 624.635707][T25298] __get_user_pages+0x23b6/0x2750 [ 624.635740][T25298] ? lock_acquire+0x115/0x350 [ 624.635778][T25298] ? __gup_longterm_locked+0xc3b/0x15c0 [ 624.635815][T25298] __gup_longterm_locked+0xd52/0x15c0 [ 624.635847][T25298] ? lock_acquire+0x115/0x350 [ 624.635885][T25298] gup_fast_fallback+0x1d92/0x20e0 [ 624.635946][T25298] ? __pfx_gup_fast_fallback+0x10/0x10 [ 624.635978][T25298] ? lock_acquire+0x115/0x350 [ 624.636007][T25298] ? is_valid_gup_args+0x11f/0x200 [ 624.636037][T25298] ? get_user_pages_fast+0x4d/0xb0 [ 624.636069][T25298] __iov_iter_get_pages_alloc+0x378/0xa40 [ 624.636104][T25298] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 624.636132][T25298] iov_iter_get_pages2+0x5e/0xa0 [ 624.636168][T25298] __se_sys_vmsplice+0x7b5/0x1660 [ 624.636221][T25298] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 624.636252][T25298] ? __pfx_futex_wait+0x10/0x10 [ 624.636357][T25298] do_syscall_64+0x166/0x520 [ 624.636387][T25298] ? trace_irq_disable+0x3b/0x140 [ 624.636407][T25298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.636428][T25298] ? clear_bhb_loop+0x70/0xc0 [ 624.636455][T25298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.636476][T25298] RIP: 0033:0x7fdc7299e159 [ 624.636494][T25298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.636513][T25298] RSP: 002b:00007fdc70bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 624.636536][T25298] RAX: ffffffffffffffda RBX: 00007fdc72c25fa0 RCX: 00007fdc7299e159 [ 624.636552][T25298] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 624.636565][T25298] RBP: 00007fdc72a3506b R08: 0000000000000000 R09: 0000000000000000 [ 624.636579][T25298] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 624.636591][T25298] R13: 00007fdc72c26038 R14: 00007fdc72c25fa0 R15: 00007ffd46ea2c98 [ 624.636626][T25298] [ 625.132221][T25309] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4358'. [ 625.527242][T10017] net_ratelimit: 1704 callbacks suppressed [ 625.527261][T10017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.609769][T25326] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 625.650341][T25329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4365'. [ 625.845070][T25337] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 626.964838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.965046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.965262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.045110][ T5733] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 627.124897][ T5733] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 627.367741][T25398] netlink: 'syz.1.4379': attribute type 1 has an invalid length. [ 627.461450][T25393] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.533222][T25398] bond2: entered promiscuous mode [ 627.533684][T25398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.557284][T25406] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 1, id = 0 [ 627.643604][T25405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.644057][T25405] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 627.644078][T25405] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 627.674167][T25405] bond2: (slave ip6gre2): making interface the new active one [ 627.674190][T25405] ip6gre2: entered promiscuous mode [ 627.683687][T25405] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 628.055781][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4388'. [ 628.103307][T25430] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 628.131280][T25430] team0: Port device dummy0 added [ 628.197106][T25446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.222298][T25448] netlink: 8684 bytes leftover after parsing attributes in process `syz.3.4390'. [ 628.527167][T25466] netlink: 'syz.1.4397': attribute type 23 has an invalid length. [ 628.588301][T25471] ip_tables: iptables: counters copy to user failed while replacing table [ 628.608097][T25471] tipc: Enabling of bearer rejected, already enabled [ 628.714446][T25475] v: left promiscuous mode [ 628.721576][T25475] v: entered promiscuous mode [ 628.749979][T25475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.751767][T25475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.803756][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.803858][T13310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.099781][T25496] batman_adv: batadv0: Adding interface: syzkaller0 [ 629.099803][T25496] batman_adv: batadv0: Interface activated: syzkaller0 [ 629.129300][T25496] netlink: 'syz.2.4408': attribute type 1 has an invalid length. [ 629.293705][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 629.412724][T25515] ip6t_srh: unknown srh invflags 4000 [ 629.539739][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4416'. [ 629.663839][T25528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4415'. [ 629.780329][T25535] sctp: [Deprecated]: syz.6.4419 (pid 25535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.780329][T25535] Use struct sctp_sack_info instead [ 629.894366][ T30] audit: type=1804 audit(1791122909.238:27): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4421" name="/newroot/330/memory.events" dev="tmpfs" ino=1704 res=1 errno=0 [ 629.894414][ T30] audit: type=1800 audit(1791122909.238:28): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.919225][ T30] audit: type=1804 audit(1791122909.268:29): pid=25538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4421" name="/newroot/330/memory.events" dev="tmpfs" ino=1704 res=1 errno=0 [ 629.928680][ T30] audit: type=1800 audit(1791122909.278:30): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.928721][ T30] audit: type=1800 audit(1791122909.278:31): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.928757][ T30] audit: type=1800 audit(1791122909.278:32): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.928792][ T30] audit: type=1800 audit(1791122909.278:33): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.928826][ T30] audit: type=1800 audit(1791122909.278:34): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 629.928861][ T30] audit: type=1800 audit(1791122909.278:35): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4421" name="memory.events" dev="tmpfs" ino=1704 res=0 errno=0 [ 630.068787][T25546] pim6reg1: entered promiscuous mode [ 630.068807][T25546] pim6reg1: entered allmulticast mode [ 630.114426][T25549] netlink: 'syz.4.4423': attribute type 1 has an invalid length. [ 630.223959][T25549] bond8: entered promiscuous mode [ 630.224015][T25549] bond8: entered allmulticast mode [ 630.224350][T25549] 8021q: adding VLAN 0 to HW filter on device bond8 [ 630.265160][T25551] bridge0: entered promiscuous mode [ 630.265352][T25551] bridge0: entered allmulticast mode [ 630.265970][T25551] bond8: (slave bridge0): Enslaving as a backup interface with an up link [ 630.270443][T25560] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4426'. [ 630.335003][T13315] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 630.393145][T25564] xt_socket: unknown flags 0x8 [ 630.444741][T10017] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 630.560311][T25580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.613435][T25575] tipc: Started in network mode [ 630.613465][T25575] tipc: Node identity 221b5db4df1a, cluster identity 4711 [ 630.613620][T25575] tipc: Enabled bearer , priority 0 [ 630.622311][T25575] syzkaller0: entered promiscuous mode [ 630.622330][T25575] syzkaller0: entered allmulticast mode [ 630.651274][T10054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.675274][T25575] tipc: Resetting bearer [ 630.681103][T25573] tipc: Resetting bearer [ 630.735403][T25573] tipc: Disabling bearer [ 631.171583][T25610] sctp: [Deprecated]: syz.6.4437 (pid 25610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.171583][T25610] Use struct sctp_sack_info instead [ 631.284850][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 631.693902][T25630] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4444'. [ 631.693932][T25630] netlink: 239 bytes leftover after parsing attributes in process `syz.4.4444'. [ 631.733314][T25630] netlink: zone id is out of range [ 631.733328][T25630] netlink: zone id is out of range [ 631.733337][T25630] netlink: zone id is out of range [ 631.733344][T25630] netlink: zone id is out of range [ 631.733353][T25630] netlink: zone id is out of range [ 631.733360][T25630] netlink: zone id is out of range [ 631.733367][T25630] netlink: zone id is out of range [ 631.733375][T25630] netlink: zone id is out of range [ 631.900968][T25637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4448'. [ 631.902784][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4448'. [ 631.957793][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 631.959727][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4452'. [ 631.980740][T25643] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 632.005832][T25648] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4452'. [ 632.076687][T25648] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4452'. [ 632.076714][T25648] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4452'. [ 632.445074][T25675] netlink: 'syz.3.4461': attribute type 1 has an invalid length. [ 632.489585][T25675] 8021q: adding VLAN 0 to HW filter on device bond11 [ 632.530999][T25678] bridge4: entered promiscuous mode [ 632.531019][T25678] bridge4: entered allmulticast mode [ 632.543083][T25678] team0: Port device bridge4 added [ 632.571069][T25678] bridge0: port 1(team0) entered blocking state [ 632.571152][T25678] bridge0: port 1(team0) entered disabled state [ 632.571263][T25678] team0: entered allmulticast mode [ 632.571277][T25678] team_slave_0: entered allmulticast mode [ 632.571294][T25678] team_slave_1: entered allmulticast mode [ 632.571308][T25678] bond1: entered allmulticast mode [ 632.591115][T25678] team0: entered promiscuous mode [ 632.591133][T25678] team_slave_0: entered promiscuous mode [ 632.591302][T25678] team_slave_1: entered promiscuous mode [ 632.591443][T25678] bond1: entered promiscuous mode [ 633.347559][T25738] netlink: 'syz.2.4475': attribute type 1 has an invalid length. [ 633.347580][T25738] netlink: 'syz.2.4475': attribute type 2 has an invalid length. [ 633.492505][T25748] sctp: [Deprecated]: syz.4.4477 (pid 25748) Use of int in max_burst socket option deprecated. [ 633.492505][T25748] Use struct sctp_assoc_value instead [ 633.637507][T25760] sctp: [Deprecated]: syz.6.4481 (pid 25760) Use of int in maxseg socket option. [ 633.637507][T25760] Use struct sctp_assoc_value instead [ 633.949363][T25813] netlink: 'syz.2.4486': attribute type 7 has an invalid length. [ 634.487106][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 635.204023][T25866] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 635.258012][T25863] bond3: entered promiscuous mode [ 635.258036][T25863] bond3: entered allmulticast mode [ 635.313289][T25863] __nla_validate_parse: 15 callbacks suppressed [ 635.313307][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 635.313322][T25863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4495'. [ 635.422060][T25875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4498'. [ 635.454330][T25870] xt_CT: No such helper "syz1" [ 635.524228][T25880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4499'. [ 635.524262][T25880] netlink: 'syz.1.4499': attribute type 4 has an invalid length. [ 635.524277][T25880] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 635.544248][T25878] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4496'. [ 635.615928][T25866] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 635.744410][T25885] pim6reg: left allmulticast mode [ 635.771659][T25884] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4501'. [ 635.785301][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 635.931920][T25891] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 635.933817][T25891] batman_adv: batadv0: Adding interface: macvlan2 [ 635.933832][T25891] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.933863][T25891] batman_adv: batadv0: Interface activated: macvlan2 [ 636.032389][T25896] pim6reg1: entered allmulticast mode [ 636.113140][T25900] netlink: 'syz.6.4508': attribute type 16 has an invalid length. [ 636.113160][T25900] netlink: 'syz.6.4508': attribute type 3 has an invalid length. [ 636.113173][T25900] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.4508'. [ 636.292481][T25916] net_ratelimit: 9 callbacks suppressed [ 636.292502][T25916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.468209][T25916] sit1: entered promiscuous mode [ 636.650536][T25924] netlink: 964 bytes leftover after parsing attributes in process `syz.6.4511'. [ 636.650560][T25924] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 636.900723][T25945] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4516'. [ 637.056920][T25944] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 637.057014][T25944] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 637.057167][T25944] veth0_virt_wifi: entered allmulticast mode [ 637.061057][T25944] veth0_virt_wifi: entered promiscuous mode [ 637.400460][T25973] atomic_op ffff8880296269e0 conn xmit_atomic 0000000000000000 [ 637.710261][T25992] TCP: TCP_TX_DELAY enabled [ 637.783340][T25995] syzkaller0: entered promiscuous mode [ 637.783362][T25995] syzkaller0: entered allmulticast mode [ 637.810910][T25997] netlink: 'syz.6.4527': attribute type 10 has an invalid length. [ 637.869772][T25998] netlink: 'syz.6.4527': attribute type 10 has an invalid length. [ 637.916222][T25997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.921056][T25997] team0: Port device netdevsim1 added [ 637.948955][T25998] team0: Port device netdevsim1 removed [ 637.951978][T25998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.956959][T25998] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 638.053408][T26001] bridge2: left promiscuous mode [ 638.068109][T26001] bond2: left promiscuous mode [ 638.068129][T26001] ip6gre2: left promiscuous mode [ 638.069241][T26001] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 638.072121][T26001] bond3: left promiscuous mode [ 638.072608][T26001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 638.073276][T26001] sit1: left promiscuous mode [ 640.212618][T26063] Bluetooth: MGMT ver 1.23 [ 640.419486][T26072] __nla_validate_parse: 4 callbacks suppressed [ 640.419506][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 640.419529][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 640.736917][T26084] netlink: 'syz.1.4543': attribute type 4 has an invalid length. [ 640.762268][T26085] netlink: 'syz.3.4544': attribute type 39 has an invalid length. [ 640.782075][T26085] ip_tables: iptables: counters copy to user failed while replacing table [ 641.213415][T26106] Cannot find set identified by id 0 to match [ 641.213733][T26106] : renamed from bond0 (while UP) [ 641.592798][T26125] syz_tun: entered allmulticast mode [ 641.603548][T26124] IPVS: set_ctl: invalid protocol: 99 172.20.20.170:20002 [ 641.616060][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4554'. [ 641.713276][T26129] syzkaller0: entered promiscuous mode [ 641.713299][T26129] syzkaller0: entered allmulticast mode [ 641.766269][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 641.766289][T26134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'. [ 642.071001][T26147] syzkaller0: entered promiscuous mode [ 642.071023][T26147] syzkaller0: entered allmulticast mode [ 642.253920][T26158] netlink: zone id is out of range [ 642.254096][T26158] netlink: zone id is out of range [ 642.258896][T26158] netlink: zone id is out of range [ 642.258908][T26158] netlink: zone id is out of range [ 642.259539][T26158] netlink: zone id is out of range [ 642.259913][T26158] netlink: zone id is out of range [ 642.263154][T26158] netlink: zone id is out of range [ 642.364392][T26170] netlink: 'syz.3.4567': attribute type 2 has an invalid length. [ 642.364411][T26170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 642.385109][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 642.385138][T26170] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 642.385153][T26170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4567'. [ 642.389294][T26170] netlink: 'syz.3.4567': attribute type 2 has an invalid length. [ 642.389311][T26170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 642.394221][T26174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 642.394249][T26174] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 642.862149][T26200] geneve1: entered promiscuous mode [ 643.082868][T26206] xt_CT: No such helper "snmp" [ 643.213182][T26219] netlink: 'syz.3.4578': attribute type 2 has an invalid length. [ 643.869770][T26241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.873704][T26244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.958423][T26253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.025866][T13310] bond8: (slave bridge0): link status up again after 0 ms [ 645.111298][ T1003] bond8: (slave bridge0): link status definitely down, disabling slave [ 645.192326][T26323] netlink: 'syz.6.4601': attribute type 1 has an invalid length. [ 645.807734][T26363] syzkaller0: entered promiscuous mode [ 645.807757][T26363] syzkaller0: entered allmulticast mode [ 646.759155][T26376] ip6tnl0: Caught tx_queue_len zero misconfig [ 646.759183][T26376] __nla_validate_parse: 144 callbacks suppressed [ 646.759198][T26376] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4616'. [ 646.941876][T26385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.061080][T26395] syzkaller0: left promiscuous mode [ 647.061103][T26395] syzkaller0: left allmulticast mode [ 647.126884][T26394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.261234][T26410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4627'. [ 647.481923][T26429] netlink: 'syz.4.4634': attribute type 1 has an invalid length. [ 647.483292][T26423] netlink: 45 bytes leftover after parsing attributes in process `syz.6.4633'. [ 647.514757][T26429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 647.547755][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 647.621282][T26433] bond5: option arp_validate: invalid value (8192) [ 647.634408][T26433] bond5 (unregistering): Released all slaves [ 647.737798][T26445] bond9: (slave bridge5): making interface the new active one [ 647.740095][T26445] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 647.845184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.980090][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'. [ 648.046542][T26461] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 648.049251][T26462] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 648.296604][T26477] IPv6: addrconf: prefix option has invalid lifetime [ 648.311822][T26471] bond6: option arp_validate: invalid value (8192) [ 648.320969][T26471] bond6 (unregistering): Released all slaves [ 648.722740][T26494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4650'. [ 648.931580][T26517] netlink: 'syz.4.4655': attribute type 3 has an invalid length. [ 648.931600][T26517] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4655'. [ 648.974310][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4654'. [ 648.985890][T26510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4654'. [ 649.014046][T26524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4654'. [ 649.019577][T26532] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 649.062665][T26532] bond5: entered promiscuous mode [ 649.063071][T26532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 649.104941][T26532] bond5 (unregistering): Released all slaves [ 649.235371][T26541] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 649.759629][T10013] IPVS: starting estimator thread 0... [ 649.862504][T26574] IPVS: using max 29 ests per chain, 69600 per kthread [ 650.078709][T26589] Cannot find map_set index 2 as target [ 650.258476][T26602] bond5: option primary_reselect: invalid value (6) [ 650.265402][T26602] bond5 (unregistering): Released all slaves [ 650.368470][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.390355][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.390670][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.390949][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.391215][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.391525][T26616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.822034][T26652] netlink: 'syz.1.4680': attribute type 16 has an invalid length. [ 650.822056][T26652] netlink: 'syz.1.4680': attribute type 17 has an invalid length. [ 650.916692][T26635] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.920686][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.148877][T26652] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.148996][T26652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.158094][T26652] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.158204][T26652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.277265][T26652] ip6gretap1: left allmulticast mode [ 651.291174][T26652] bridge2: left allmulticast mode [ 651.340093][T26652] bond3: left allmulticast mode [ 651.353007][T26652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.751826][T26692] pimreg: entered allmulticast mode [ 651.764364][T26692] pimreg: left allmulticast mode [ 651.926911][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 652.071571][T26714] xt_nfacct: accounting object `' does not exist [ 652.288292][T13313] IPVS: starting estimator thread 0... [ 652.395477][T26722] IPVS: using max 29 ests per chain, 69600 per kthread [ 652.575970][T26732] __nla_validate_parse: 9 callbacks suppressed [ 652.575989][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846201][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846322][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846419][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846516][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846623][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846723][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846821][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.846918][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 652.847015][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 653.118344][T26750] tipc: Enabled bearer , priority 0 [ 653.203516][T26750] syzkaller0: entered promiscuous mode [ 653.203543][T26750] syzkaller0: entered allmulticast mode [ 653.204153][T26750] tipc: Resetting bearer [ 653.248161][T26749] tipc: Resetting bearer [ 653.605000][ C1] net_ratelimit: 29 callbacks suppressed [ 653.605015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.624347][T26749] tipc: Disabling bearer [ 655.699830][ T9211] tipc: Node number set to 4244725172 [ 655.905444][T26798] syzkaller0: entered promiscuous mode [ 655.905466][T26798] syzkaller0: entered allmulticast mode [ 656.241012][T10013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.241034][T10013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.539675][T26822] netlink: 'syz.6.4715': attribute type 1 has an invalid length. [ 656.650271][T26822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.694479][T26831] bond0: (slave veth3): Enslaving as an active interface with a down link [ 656.762744][T26822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.804180][T26822] geneve1: left promiscuous mode [ 656.820105][T26822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.909331][T26831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.912389][T26831] bond0: (slave batadv1): making interface the new active one [ 656.913671][T26831] batadv1: entered promiscuous mode [ 656.940340][T26831] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 656.957168][T10013] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 657.011780][T26853] gre0: entered promiscuous mode [ 657.011803][T26853] gre0: entered allmulticast mode [ 657.338662][T26868] dummy0: entered promiscuous mode [ 657.358485][T26864] dummy0: left promiscuous mode [ 657.477440][T26873] syzkaller0: entered promiscuous mode [ 657.477463][T26873] syzkaller0: entered allmulticast mode [ 657.863677][T26895] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 657.864401][T26895] tipc: Enabled bearer , priority 10 [ 658.212923][T26903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 658.244327][T26903] __nla_validate_parse: 31 callbacks suppressed [ 658.244345][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4734'. [ 658.287974][T26910] dvmrp0: entered allmulticast mode [ 658.321478][T26903] bond5 (unregistering): Released all slaves [ 658.419786][T26904] dvmrp0: left allmulticast mode [ 658.571476][T26927] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4739'. [ 658.750951][T26937] syzkaller0: entered promiscuous mode [ 658.750974][T26937] syzkaller0: entered allmulticast mode [ 659.015932][T26948] netlink: Failed to add helper -22 [ 659.015984][T26948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.118437][T26948] bond10: option mode: invalid value (7) [ 659.124319][T26948] bond10 (unregistering): Released all slaves [ 659.181593][T26953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4745'. [ 659.262577][T26959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4747'. [ 659.350276][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 659.364764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.514465][T26989] netlink: 'syz.6.4750': attribute type 4 has an invalid length. [ 659.514487][T26989] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4750'. [ 659.525321][T26989] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 659.675620][T26997] syzkaller0: entered promiscuous mode [ 659.675643][T26997] syzkaller0: entered allmulticast mode [ 659.705010][T10012] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.705042][T10012] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.886514][T27007] netlink: 'syz.3.4756': attribute type 1 has an invalid length. [ 659.911567][T27007] bond12: entered promiscuous mode [ 659.911852][T27007] 8021q: adding VLAN 0 to HW filter on device bond12 [ 659.928466][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 659.932034][T27007] bond12 (unregistering): Released all slaves [ 660.033445][T27010] syzkaller0: entered promiscuous mode [ 660.033460][T27010] syzkaller0: entered allmulticast mode [ 660.262588][T27016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4758'. [ 662.309111][T26968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.499931][ T30] audit: type=1804 audit(1791122941.848:36): pid=27026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4761" name="/newroot/113/cgroup.controllers" dev="tmpfs" ino=592 res=1 errno=0 [ 662.505678][ T30] audit: type=1800 audit(1791122941.848:37): pid=27026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4761" name="cgroup.controllers" dev="tmpfs" ino=592 res=0 errno=0 [ 662.521517][ T30] audit: type=1800 audit(1791122941.858:38): pid=27026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4761" name="cgroup.controllers" dev="tmpfs" ino=592 res=0 errno=0 [ 663.166282][T27062] syzkaller0: entered promiscuous mode [ 663.166306][T27062] syzkaller0: entered allmulticast mode [ 663.203270][T27065] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4769'. [ 663.428469][T27079] IPVS: set_ctl: invalid protocol: 183 100.1.1.4:20000 [ 663.429653][T27078] netlink: 'syz.2.4773': attribute type 1 has an invalid length. [ 663.478066][T27083] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 663.528377][T27084] macvtap0: entered allmulticast mode [ 663.564411][T27087] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4776'. [ 663.845646][T27099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4779'. [ 664.026029][T27093] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4777'. [ 664.043150][T27117] netlink: 'syz.1.4783': attribute type 1 has an invalid length. [ 664.186627][T10013] IPVS: starting estimator thread 0... [ 664.189510][T27118] ip_tables: iptables: counters copy to user failed while replacing table [ 664.273289][T27126] xt_l2tp: missing protocol rule (udp|l2tpip) [ 664.275915][T27122] IPVS: using max 31 ests per chain, 74400 per kthread [ 664.323449][T27106] bond12: option lacp_rate: invalid value (128) [ 664.340357][T27106] bond12 (unregistering): Released all slaves [ 664.570554][T27138] xt_l2tp: missing protocol rule (udp|l2tpip) [ 664.664495][T27146] xt_l2tp: invalid flags combination: 0 [ 665.102061][T27158] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 665.103413][ C1] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 665.124901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.204267][T27170] syzkaller0: entered promiscuous mode [ 665.204290][T27170] syzkaller0: entered allmulticast mode [ 665.485407][T27188] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4794'. [ 665.599640][T27196] netlink: 'syz.3.4800': attribute type 3 has an invalid length. [ 665.636262][T27194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4794'. [ 665.842115][T27204] bond3 (unregistering): Released all slaves [ 666.009482][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4803'. [ 666.093709][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4803'. [ 666.108281][T27227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4805'. [ 666.135299][T27227] bond12: entered promiscuous mode [ 666.135696][T27227] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.198713][T27227] netlink: 'syz.3.4805': attribute type 15 has an invalid length. [ 666.484880][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 666.586232][T27240] syzkaller0: entered promiscuous mode [ 666.586255][T27240] syzkaller0: entered allmulticast mode [ 667.015145][T27255] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 667.018616][T27255] bond13 (unregistering): Released all slaves [ 667.616263][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4820'. [ 667.697697][T27293] ip6gre2: entered allmulticast mode [ 667.971629][T27311] netlink: 'syz.1.4825': attribute type 33 has an invalid length. [ 667.971651][T27311] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4825'. [ 668.000651][T27313] FAULT_INJECTION: forcing a failure. [ 668.000651][T27313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.000684][T27313] CPU: 1 UID: 0 PID: 27313 Comm: syz.3.4826 Not tainted syzkaller #0 PREEMPT(full) [ 668.000707][T27313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 668.000720][T27313] Call Trace: [ 668.000728][T27313] [ 668.000737][T27313] dump_stack_lvl+0xe8/0x150 [ 668.000770][T27313] should_fail_ex+0x410/0x560 [ 668.000800][T27313] _copy_to_user+0x31/0xb0 [ 668.000830][T27313] simple_read_from_buffer+0xe1/0x170 [ 668.000865][T27313] proc_fail_nth_read+0x1bb/0x230 [ 668.000892][T27313] ? common_file_perm+0x20e/0x2b0 [ 668.000921][T27313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.000946][T27313] ? rw_verify_area+0x24a/0x4c0 [ 668.000977][T27313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.000997][T27313] vfs_read+0x213/0xa80 [ 668.001034][T27313] ? __pfx___mutex_lock+0x10/0x10 [ 668.001066][T27313] ? __pfx_vfs_read+0x10/0x10 [ 668.001098][T27313] ? __fget_files+0x2a/0x420 [ 668.001130][T27313] ? __fget_files+0x3a2/0x420 [ 668.001157][T27313] ? __fget_files+0x2a/0x420 [ 668.001194][T27313] ksys_read+0x150/0x270 [ 668.001226][T27313] ? __pfx_ksys_read+0x10/0x10 [ 668.001265][T27313] do_syscall_64+0x166/0x520 [ 668.001292][T27313] ? trace_irq_disable+0x3b/0x140 [ 668.001313][T27313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.001334][T27313] ? clear_bhb_loop+0x70/0xc0 [ 668.001360][T27313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.001380][T27313] RIP: 0033:0x7f5739b5e98e [ 668.001400][T27313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 668.001418][T27313] RSP: 002b:00007f573aa73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.001440][T27313] RAX: ffffffffffffffda RBX: 00007f573aa746c0 RCX: 00007f5739b5e98e [ 668.001456][T27313] RDX: 000000000000000f RSI: 00007f573aa740a0 RDI: 0000000000000005 [ 668.001469][T27313] RBP: 00007f573aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 668.001482][T27313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.001494][T27313] R13: 00007f5739e26038 R14: 00007f5739e25fa0 R15: 00007fff8d63ab78 [ 668.001529][T27313] [ 668.288527][T13310] batadv1: left promiscuous mode [ 668.307853][T27324] xt_hashlimit: size too large, truncated to 1048576 [ 668.582934][T27359] netlink: 'syz.6.4834': attribute type 2 has an invalid length. [ 668.664402][T27361] Cannot find add_set index 0 as target [ 668.849923][T27363] Set syz1 is full, maxelem 2076 reached [ 668.958606][T27367] syzkaller0: entered promiscuous mode [ 668.958629][T27367] syzkaller0: entered allmulticast mode [ 669.189761][T27378] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4841'. [ 669.391576][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 669.427891][T27385] vlan2: entered allmulticast mode [ 669.427919][T27385] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 669.428344][T27385] bridge0: port 3(vlan2) entered blocking state [ 669.429117][T27385] bridge0: port 3(vlan2) entered disabled state [ 669.439854][T27385] vlan2: entered promiscuous mode [ 669.439879][T27385] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 669.459025][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 669.459708][T27386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4842'. [ 669.721687][T27394] macsec0: entered promiscuous mode [ 669.722210][T27395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4844'. [ 669.722442][T27395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.769301][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4843'. [ 669.777645][T27369] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 669.795943][T27395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.903440][T27391] macsec0 (unregistering): left promiscuous mode [ 670.064311][T27395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4844'. [ 670.244792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.341184][T27412] ip_tables: iptables: counters copy to user failed while replacing table [ 670.363080][T27414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4848'. [ 670.376292][T27414] netlink: 'syz.4.4848': attribute type 83 has an invalid length. [ 670.454965][T27422] ip_tables: iptables: counters copy to user failed while replacing table [ 670.476937][T27418] syzkaller0: entered promiscuous mode [ 670.476958][T27418] syzkaller0: entered allmulticast mode [ 670.567698][T27427] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 670.719267][T27436] syzkaller1: entered promiscuous mode [ 670.719289][T27436] syzkaller1: entered allmulticast mode [ 670.736379][T27436] openvswitch: netlink: Message has 4 unknown bytes. [ 670.776524][T27432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4852'. [ 670.777239][T27438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4852'. [ 670.993532][T27448] netlink: 'syz.4.4856': attribute type 1 has an invalid length. [ 671.032094][T27448] 8021q: adding VLAN 0 to HW filter on device bond10 [ 671.136218][T27451] batadv_slave_1: Caught tx_queue_len zero misconfig [ 671.298604][T27455] netlink: 'syz.1.4858': attribute type 39 has an invalid length. [ 671.356362][T27460] netlink: 'syz.4.4861': attribute type 4 has an invalid length. [ 671.356914][T27460] netlink: 'syz.4.4861': attribute type 4 has an invalid length. [ 671.647363][T27466] syzkaller0: entered promiscuous mode [ 671.647386][T27466] syzkaller0: entered allmulticast mode [ 672.020544][T27480] ip_tables: iptables: counters copy to user failed while replacing table [ 672.036378][T27490] netlink: 'syz.1.4871': attribute type 1 has an invalid length. [ 672.191137][T27496] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 672.516880][T27516] syzkaller1: entered promiscuous mode [ 672.516902][T27516] syzkaller1: entered allmulticast mode [ 672.706336][T27520] netlink: 'syz.2.4878': attribute type 4 has an invalid length. [ 673.081082][T27543] tipc: Enabling of bearer rejected, failed to enable media [ 673.097312][T27543] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 673.097312][T27543] Please contact the netfilter-devel mailing list or update your nftables rules. [ 673.120613][T27545] lo: Caught tx_queue_len zero misconfig [ 673.321751][T27536] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 673.753848][T27588] team0: Port device dummy0 removed [ 673.775616][T27588] bridge_slave_0: left allmulticast mode [ 673.775643][T27588] bridge_slave_0: left promiscuous mode [ 673.775833][T27588] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.787013][T27597] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 673.838899][T27599] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 674.019502][T27588] bridge_slave_1: left promiscuous mode [ 674.019726][T27588] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.126487][T27588] bond0: (slave bond_slave_0): Releasing backup interface [ 676.004965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.546055][T27588] bond0: (slave bond_slave_1): Releasing backup interface [ 676.566626][T27583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.596593][T27588] team0: Port device team_slave_0 removed [ 676.630376][T27588] team0: Port device team_slave_1 removed [ 676.637554][T27588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 676.686223][T27599] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 676.849560][T27617] IPVS: length: 78 != 24 [ 676.927945][T27613] tipc: Enabling of bearer rejected, failed to enable media [ 676.933695][T27619] __nla_validate_parse: 73 callbacks suppressed [ 676.933712][T27619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4899'. [ 676.960817][T27625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4899'. [ 677.083989][T27636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'. [ 677.267417][T27636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4901'. [ 677.267443][T27636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4901'. [ 677.267461][T27636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4901'. [ 677.267688][T27636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4901'. [ 677.420706][T27647] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 677.421378][T27647] team0: Device ipvlan2 is already an upper device of the team interface [ 677.434336][T27651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4904'. [ 677.546969][T27655] netlink: 'syz.3.4904': attribute type 11 has an invalid length. [ 677.626095][T27650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.867154][T27664] netlink: 'syz.4.4908': attribute type 40 has an invalid length. [ 677.867270][T27664] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 677.867828][T27664] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 678.050974][T27671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 678.053073][T27672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 678.738254][T27706] syzkaller1: entered promiscuous mode [ 678.738277][T27706] syzkaller1: entered allmulticast mode [ 679.197537][T27739] netlink: 'syz.4.4926': attribute type 8 has an invalid length. [ 679.241995][T27745] syzkaller0: left promiscuous mode [ 679.242017][T27745] syzkaller0: left allmulticast mode [ 681.764868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.783460][T27719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.033759][T27761] __nla_validate_parse: 6 callbacks suppressed [ 682.033780][T27761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4930'. [ 682.045573][T27752] veth0_to_team: Caught tx_queue_len zero misconfig [ 682.107734][T27761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4930'. [ 682.178871][T27770] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 682.630083][T27793] netlink: 'syz.6.4938': attribute type 1 has an invalid length. [ 682.689366][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4938'. [ 682.797095][T27793] bond3: option lacp_active: invalid value (5) [ 682.802656][T27793] bond3 (unregistering): Released all slaves [ 682.880988][T27764] macsec0: entered promiscuous mode [ 682.881374][T27762] macsec0: left promiscuous mode [ 683.158460][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.158489][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.192486][T27819] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.212635][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.212668][T27821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.260199][T27825] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4943'. [ 683.396322][T27834] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4947'. [ 683.396348][T27834] openvswitch: netlink: Message has 512 unknown bytes. [ 683.752420][T27851] netlink: 'syz.6.4950': attribute type 29 has an invalid length. [ 683.752444][T27851] netlink: 'syz.6.4950': attribute type 31 has an invalid length. [ 683.844296][T27863] netlink: 'syz.2.4948': attribute type 83 has an invalid length. [ 683.850074][T27859] netlink: 'syz.2.4948': attribute type 83 has an invalid length. [ 683.886216][T27865] IPVS: Error connecting to the multicast addr [ 684.641046][T27895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.647225][T27891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.688630][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.692488][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.718389][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.751137][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.772086][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.796635][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.822727][T27897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.982671][T27901] ovs-s!: entered promiscuous mode [ 685.165839][T27914] Bluetooth: hci0: unsupported parameter 5135 [ 685.165862][T27914] Bluetooth: hci0: unsupported parameter 8192 [ 685.165876][T27914] Bluetooth: hci0: unsupported parameter 5135 [ 685.165889][T27914] Bluetooth: hci0: unsupported parameter 8192 [ 686.109999][T27918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.884805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.831279][T28008] netlink: 'syz.4.4984': attribute type 11 has an invalid length. [ 687.831302][T28008] __nla_validate_parse: 10 callbacks suppressed [ 687.831316][T28008] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.4984'. [ 688.141474][T28020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4988'. [ 688.182179][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4989'. [ 688.182215][T28023] netlink: 'syz.6.4989': attribute type 2 has an invalid length. [ 688.182231][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4989'. [ 688.202107][T28025] netlink: 'syz.1.4990': attribute type 2 has an invalid length. [ 688.207290][T28025] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4990'. [ 688.207453][T28025] batman_adv: batadv0: Interface deactivated: dummy0 [ 688.255591][T28025] batman_adv: batadv0: Removing interface: dummy0 [ 688.559345][T28056] ip_tables: iptables: counters copy to user failed while replacing table [ 688.646459][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4996'. [ 688.646499][T28057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4996'. [ 688.695887][T28059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 688.696989][T28061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 688.755812][ T151] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 688.755906][ T151] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 688.755940][ T151] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 688.755981][ T151] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 688.814834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.362855][T28050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 689.616284][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5002'. [ 689.704945][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 689.745797][T28088] netlink: 'syz.2.5005': attribute type 1 has an invalid length. [ 689.817371][T28098] pim6reg: entered allmulticast mode [ 690.093365][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5010'. [ 690.492567][T28141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.493400][T28141] gre0: entered promiscuous mode [ 690.493420][T28141] gre0: entered allmulticast mode [ 692.644982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.404732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.045184][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 703.444888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.644830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.375005][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 713.764835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.524754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.971299][T28157] netlink: 'syz.3.5020': attribute type 27 has an invalid length. [ 721.971321][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5020'. [ 721.971342][T28157] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 722.051287][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 722.074987][T28172] vlan4: entered promiscuous mode [ 722.091071][T28168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5023'. [ 722.091422][T28176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 722.098618][T28170] netlink: 'syz.4.5023': attribute type 8 has an invalid length. [ 722.098636][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5023'. [ 722.098666][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5023'. [ 722.221806][T28181] nbd: must specify at least one socket [ 722.328691][T28192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5031'. [ 722.458042][T28203] netlink: 516 bytes leftover after parsing attributes in process `syz.1.5025'. [ 722.551852][T28210] veth1_to_bond: Caught tx_queue_len zero misconfig [ 722.908038][T28229] netlink: 'syz.3.5038': attribute type 2 has an invalid length. [ 722.939072][T28232] netlink: 'syz.3.5038': attribute type 2 has an invalid length. [ 723.152128][T28239] tipc: Cannot configure node identity twice [ 723.213358][T28237] netlink: 'syz.1.5039': attribute type 13 has an invalid length. [ 723.213383][T28237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 723.213408][T28237] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 723.369500][T28251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 723.370103][T28251] batman_adv: batadv0: Adding interface: gretap1 [ 723.370121][T28251] batman_adv: batadv0: Interface activated: gretap1 [ 723.475944][T28254] pim6reg99999999: entered allmulticast mode [ 723.560638][T28264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.633699][T28271] IPVS: length: 114 != 24 [ 723.886591][T28293] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 723.892102][T28296] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 723.907388][T28292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5054'. [ 724.108273][T28314] netlink: 'syz.2.5056': attribute type 1 has an invalid length. [ 724.123564][T28304] xfrm1: entered allmulticast mode [ 724.184003][T28315] gretap1: entered allmulticast mode [ 724.515672][T28337] netlink: 'syz.1.5061': attribute type 10 has an invalid length. [ 724.575429][T28337] team0 (unregistering): Port device team_slave_0 removed [ 724.625750][T28337] team0 (unregistering): Port device team_slave_1 removed [ 724.632947][T28337] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.633540][T28337] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.657898][T28337] team0 (unregistering): Port device bridge0 removed [ 725.145803][T28362] syzkaller0: entered promiscuous mode [ 725.145826][T28362] syzkaller0: entered allmulticast mode [ 725.284716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.788801][T28400] vlan0: entered allmulticast mode [ 725.789105][T28400] bridge0: port 2(vlan0) entered blocking state [ 725.790888][T28400] bridge0: port 2(vlan0) entered disabled state [ 725.819193][T28400] vlan0: entered promiscuous mode [ 725.819218][T28400] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 725.901791][T28407] syzkaller0: entered promiscuous mode [ 725.901813][T28407] syzkaller0: entered allmulticast mode [ 725.980962][T28414] xt_hashlimit: size too large, truncated to 1048576 [ 725.981260][T28414] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 726.081672][T28422] ip6gre1: entered allmulticast mode [ 726.268723][T28429] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 726.564065][T28398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.824409][T28446] bridge0: port 3(veth1_to_bridge) entered blocking state [ 726.826878][T28446] bridge0: port 3(veth1_to_bridge) entered disabled state [ 726.827069][T28446] veth1_to_bridge: entered allmulticast mode [ 726.828797][T28446] veth1_to_bridge: entered promiscuous mode [ 726.887212][T28450] tipc: Enabling of bearer rejected, already enabled [ 727.073225][T28461] Bluetooth: hci0: invalid len left 17, exp >= 93 [ 727.164072][T28447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.179486][T28447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.369144][T28469] __nla_validate_parse: 12 callbacks suppressed [ 727.369165][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5096'. [ 727.396271][T28447] ip6erspan0: left allmulticast mode [ 727.427415][T28447] vlan2: left allmulticast mode [ 727.427435][T28447] bond0: left allmulticast mode [ 727.427449][T28447] bond_slave_0: left allmulticast mode [ 727.447616][T28447] bond7: left promiscuous mode [ 727.447634][T28447] gre2: left promiscuous mode [ 727.567837][T28447] ip6tnl2: left allmulticast mode [ 727.570508][T28447] bond8: left promiscuous mode [ 727.570526][T28447] bridge0: left promiscuous mode [ 727.570685][T28447] bond8: left allmulticast mode [ 727.570698][T28447] bridge0: left allmulticast mode [ 727.620689][T28447] batman_adv: batadv0: Interface deactivated: gretap1 [ 727.625883][T28447] ip6gre1: left allmulticast mode [ 727.638184][T28460] syzkaller0: entered promiscuous mode [ 727.638237][T28460] syzkaller0: entered allmulticast mode [ 727.646522][T25911] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.646553][T25911] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.646591][T25911] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.646614][T25911] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.646649][T25911] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.646673][T25911] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.646706][T25911] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.646731][T25911] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.924663][ T4935] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 727.933531][T28484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.980437][T28495] Unknown options in mask 6 [ 728.002599][T28487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.132417][T28506] xt_TCPMSS: Only works on TCP SYN packets [ 728.290730][T28516] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5106'. [ 728.290755][T28516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5106'. [ 728.315048][T28515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.392632][T28506] netlink: zone id is out of range [ 728.392648][T28506] netlink: zone id is out of range [ 728.392657][T28506] netlink: zone id is out of range [ 728.392666][T28506] netlink: zone id is out of range [ 728.392675][T28506] netlink: zone id is out of range [ 728.392683][T28506] netlink: zone id is out of range [ 728.392692][T28506] netlink: zone id is out of range [ 728.451185][T28521] syz.1.5108: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 728.451266][T28521] CPU: 0 UID: 0 PID: 28521 Comm: syz.1.5108 Not tainted syzkaller #0 PREEMPT(full) [ 728.451289][T28521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 728.451302][T28521] Call Trace: [ 728.451310][T28521] [ 728.451320][T28521] dump_stack_lvl+0xe8/0x150 [ 728.451353][T28521] warn_alloc+0x24d/0x270 [ 728.451374][T28521] ? kasan_save_track+0x4f/0x80 [ 728.451395][T28521] ? kasan_save_track+0x3e/0x80 [ 728.451418][T28521] ? __pfx_warn_alloc+0x10/0x10 [ 728.451436][T28521] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 728.451463][T28521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.451503][T28521] __vmalloc_node_range_noprof+0x127/0x1540 [ 728.451556][T28521] ? rcu_is_watching+0x16/0xb0 [ 728.451586][T28521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.451616][T28521] ? __kmalloc_cache_noprof+0x321/0x600 [ 728.451636][T28521] ? __kmalloc_cache_noprof+0x14d/0x600 [ 728.451657][T28521] ? xskq_create+0x56/0x220 [ 728.451688][T28521] xskq_create+0x148/0x220 [ 728.451715][T28521] ? xsk_init_queue+0x8a/0xe0 [ 728.451751][T28521] xsk_init_queue+0x8a/0xe0 [ 728.451779][T28521] xsk_setsockopt+0x52a/0x960 [ 728.451807][T28521] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.451832][T28521] ? __pfx_aa_sk_perm+0x10/0x10 [ 728.451868][T28521] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 728.451893][T28521] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.451920][T28521] do_sock_setsockopt+0x17c/0x1b0 [ 728.451951][T28521] __x64_sys_setsockopt+0x13d/0x1b0 [ 728.451984][T28521] do_syscall_64+0x166/0x520 [ 728.452012][T28521] ? trace_irq_disable+0x3b/0x140 [ 728.452032][T28521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.452053][T28521] ? clear_bhb_loop+0x70/0xc0 [ 728.452076][T28521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.452095][T28521] RIP: 0033:0x7f598bd9e159 [ 728.452113][T28521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.452130][T28521] RSP: 002b:00007f598cc2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 728.452150][T28521] RAX: ffffffffffffffda RBX: 00007f598c025fa0 RCX: 00007f598bd9e159 [ 728.452164][T28521] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 728.452175][T28521] RBP: 00007f598be3506b R08: 0000000000000004 R09: 0000000000000000 [ 728.452186][T28521] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.452198][T28521] R13: 00007f598c026038 R14: 00007f598c025fa0 R15: 00007ffd80704ec8 [ 728.452231][T28521] [ 728.452239][T28521] Mem-Info: [ 728.452249][T28521] active_anon:13193 inactive_anon:0 isolated_anon:0 [ 728.452249][T28521] active_file:1 inactive_file:43414 isolated_file:0 [ 728.452249][T28521] unevictable:25 dirty:102 writeback:0 [ 728.452249][T28521] slab_reclaimable:12103 slab_unreclaimable:123292 [ 728.452249][T28521] mapped:40735 shmem:1174 pagetables:1406 [ 728.452249][T28521] sec_pagetables:0 bounce:0 [ 728.452249][T28521] kernel_misc_reclaimable:0 [ 728.452249][T28521] free:1265534 free_pcp:11883 free_cma:0 [ 728.452313][T28521] Node 0 active_anon:52772kB inactive_anon:0kB active_file:4kB inactive_file:173452kB unevictable:100kB isolated(anon):0kB isolated(file):0kB mapped:162940kB dirty:408kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16316kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.452368][T28521] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.452418][T28521] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.452472][T28521] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 728.452505][T28521] Node 0 DMA32 free:1105268kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52772kB inactive_anon:0kB active_file:4kB inactive_file:173452kB unevictable:100kB writepending:408kB zspages:0kB present:3129332kB managed:2547096kB mlocked:100kB bounce:0kB free_pcp:47532kB local_pcp:27752kB free_cma:0kB [ 728.452563][T28521] lowmem_reserve[]: 0 0 0 0 0 [ 728.452595][T28521] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.452711][T28521] lowmem_reserve[]: 0 0 0 0 0 [ 728.452751][T28521] Node 1 Normal free:3941508kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.452805][T28521] lowmem_reserve[]: 0 0 0 0 0 [ 728.452838][T28521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 728.452950][T28521] Node 0 DMA32: 656*4kB (UE) 931*8kB (UME) 669*16kB (UME) 510*32kB (UME) 85*64kB (UME) 30*128kB (UM) 28*256kB (UME) 16*512kB (UME) 5*1024kB (M) 9*2048kB (UM) 249*4096kB (UM) = 1105192kB [ 728.453106][T28521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.453204][T28521] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UM) 3*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941508kB [ 728.453357][T28521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.453375][T28521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.453391][T28521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.453406][T28521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.453422][T28521] 44585 total pagecache pages [ 728.453430][T28521] 0 pages in swap cache [ 728.453437][T28521] Free swap = 124996kB [ 728.453445][T28521] Total swap = 124996kB [ 728.453454][T28521] 2097051 pages RAM [ 728.453461][T28521] 0 pages HighMem/MovableOnly [ 728.453469][T28521] 428661 pages reserved [ 728.453477][T28521] 0 pages cma reserved [ 729.028887][T28533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5110'. [ 729.057832][T28537] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 729.284438][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5115'. [ 729.284465][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5115'. [ 729.303388][T28552] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5115'. [ 729.402580][T28557] veth0: entered promiscuous mode [ 729.551405][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5120'. [ 729.551440][T28575] netlink: 'syz.4.5120': attribute type 10 has an invalid length. [ 729.551456][T28575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5120'. [ 729.600312][T28556] veth0: left promiscuous mode [ 729.831719][T28581] netlink: 'syz.3.5122': attribute type 2 has an invalid length. [ 730.156883][T28611] netlink: 'syz.1.5129': attribute type 6 has an invalid length. [ 730.178779][T28611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5129'. [ 730.357931][T28631] netlink: 'syz.1.5134': attribute type 4 has an invalid length. [ 730.514056][T28641] net_ratelimit: 379 callbacks suppressed [ 730.514077][T28641] ip_tables: iptables: counters copy to user failed while replacing table [ 730.889529][T28657] xt_limit: Overflow, try lower: 6/2147483648 [ 730.950978][T28660] netlink: 'syz.2.5138': attribute type 2 has an invalid length. [ 731.044918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.315031][T28689] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20002 [ 731.316371][T28691] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20002 [ 731.330652][T28690] syzkaller0: entered promiscuous mode [ 731.330669][T28690] syzkaller0: entered allmulticast mode [ 731.426290][T28701] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 731.428854][T28703] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 731.429322][T28701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.430292][T28701] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 731.431809][T28701] team0: Port device netdevsim1 added [ 731.432247][T28703] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 731.460858][T28703] team0: Port device netdevsim1 removed [ 731.463799][T28703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.227400][T28744] tipc: Enabling of bearer rejected, failed to enable media [ 732.888517][T28767] bridge_slave_1: Caught tx_queue_len zero misconfig [ 732.968145][T28763] __nla_validate_parse: 24 callbacks suppressed [ 732.968165][T28763] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5167'. [ 732.991260][T28774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.991523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.991716][T28774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.993685][T28774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.994395][T28773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.004645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.034175][T28773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.184167][T28779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5173'. [ 733.303981][T28793] xt_l2tp: invalid flags combination: 0 [ 733.362428][T28797] syzkaller0: entered promiscuous mode [ 733.362450][T28797] syzkaller0: entered allmulticast mode [ 733.375585][T28800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5176'. [ 733.391722][T28796] xt_hashlimit: size too large, truncated to 1048576 [ 733.867065][T28820] C: renamed from veth1_to_team [ 733.879955][T28820] netlink: 'syz.3.5179': attribute type 1 has an invalid length. [ 733.879990][T28820] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5179'. [ 733.880009][T28820] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 734.099915][T28826] netlink: 'syz.4.5180': attribute type 10 has an invalid length. [ 734.150718][T28826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.563970][T28840] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5184'. [ 734.591223][T28843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5184'. [ 734.851654][ T9205] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 734.853399][T28849] macsec1: entered promiscuous mode [ 734.853670][T28849] macsec1: entered allmulticast mode [ 734.853691][T28849] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 734.857816][T28849] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 734.892122][T28849] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 734.946341][ T9205] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 735.015445][T28849] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5186'. [ 735.249390][T28866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5190'. [ 735.494173][T28884] veth1_to_team: entered promiscuous mode [ 735.503346][T28884] veth1_to_team: left promiscuous mode [ 735.585154][T28895] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5199'. [ 735.587696][T28898] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5199'. [ 735.864123][T28910] netlink: 'syz.3.5206': attribute type 2 has an invalid length. [ 736.006734][T28924] netlink: 'syz.1.5203': attribute type 4 has an invalid length. [ 736.060149][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.060357][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.060519][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.060673][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.060819][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.060962][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.061156][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.061435][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.061590][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.061750][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.061898][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062042][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062221][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062367][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062577][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062721][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.062867][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063012][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063159][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063302][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063439][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063653][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063806][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.063950][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.064187][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.064332][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.075063][T28917] netlink: 'syz.1.5203': attribute type 4 has an invalid length. [ 736.076413][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225109][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225204][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225293][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225377][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225460][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.225549][ T4935] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 736.360925][T28917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.360950][T28917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.371687][T28917] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 736.371708][T28917] batman_adv: batadv0: Removing interface: ip6gretap1 [ 736.462635][T28933] Bluetooth: MGMT ver 1.23 [ 736.480120][T28924] netlink: 'syz.1.5203': attribute type 1 has an invalid length. [ 736.804717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.031841][T28975] macvlan0: entered promiscuous mode [ 737.031992][T28975] netlink: 'syz.3.5221': attribute type 1 has an invalid length. [ 737.032008][T28975] netlink: 'syz.3.5221': attribute type 2 has an invalid length. [ 737.499501][T28978] bridge3: left promiscuous mode [ 737.500202][T28978] syzkaller0: left promiscuous mode [ 737.500791][T28978] bond5: left promiscuous mode [ 737.519121][T28978] vlan3: left promiscuous mode [ 737.538668][T28978] 8021q: adding VLAN 0 to HW filter on device bond6 [ 737.540592][T28978] bond6: entered allmulticast mode [ 737.541010][T28978] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 737.551854][T28978] vlan4: left promiscuous mode [ 737.560393][T28978] 8021q: adding VLAN 0 to HW filter on device bond7 [ 738.097953][T29034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 738.188031][T29032] syzkaller1: entered promiscuous mode [ 738.188055][T29032] syzkaller1: entered allmulticast mode [ 738.512371][T29059] __nla_validate_parse: 10 callbacks suppressed [ 738.512391][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5240'. [ 738.926987][T29088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5245'. [ 738.927011][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5245'. [ 739.270404][T29110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5249'. [ 739.284401][T29110] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 739.758745][T29127] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5256'. [ 739.853018][T29134] macsec0: entered promiscuous mode [ 739.861089][T29133] veth1_macvtap: left promiscuous mode [ 739.888225][T29133] macsec0 (unregistering): left promiscuous mode [ 740.095942][ T4935] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 740.096073][ T4935] Bluetooth: hci5: Injecting HCI hardware error event [ 740.098793][ T5619] Bluetooth: hci5: hardware error 0x00 [ 740.132647][T29138] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 740.287975][T29146] netlink: 'syz.6.5260': attribute type 1 has an invalid length. [ 740.323568][T29146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5260'. [ 740.327651][T29146] bond3: entered promiscuous mode [ 740.338931][T29146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 740.347911][T29146] lo: entered allmulticast mode [ 740.348651][T29146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.644926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.645077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.724916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.725165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.725381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.725587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.725961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.872436][T29170] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5267'. [ 740.986211][ T4935] Bluetooth: hci6: link tx timeout [ 740.986232][ T4935] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 741.000706][T19111] Bluetooth: hci6: link tx timeout [ 741.000722][T19111] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 741.129793][T29188] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5273'. [ 742.083849][T29221] syzkaller0: entered promiscuous mode [ 742.083873][T29221] syzkaller0: entered allmulticast mode [ 742.174677][ T5619] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 742.270674][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5283'. [ 742.297659][T29230] netlink: 'syz.3.5284': attribute type 2 has an invalid length. [ 742.297679][T29230] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5284'. [ 742.730123][T29251] hsr_slave_0 (unregistering): left promiscuous mode [ 742.904424][T29262] net_ratelimit: 4 callbacks suppressed [ 742.904443][T29262] ip_tables: iptables: counters copy to user failed while replacing table [ 742.909577][T29264] ip_tables: iptables: counters copy to user failed while replacing table [ 743.056941][ T5619] Bluetooth: hci6: command 0x0405 tx timeout [ 743.583095][T29286] netlink: 'syz.3.5302': attribute type 1 has an invalid length. [ 743.595187][T29289] netlink: 'syz.4.5303': attribute type 21 has an invalid length. [ 743.701817][T29286] bond15: entered promiscuous mode [ 743.703006][T29286] 8021q: adding VLAN 0 to HW filter on device bond15 [ 743.811294][T29286] bond15: (slave bridge7): making interface the new active one [ 743.811319][T29286] bridge7: entered promiscuous mode [ 743.829203][T29286] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 743.887529][T29297] __nla_validate_parse: 4 callbacks suppressed [ 743.887549][T29297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5305'. [ 743.996576][T29305] netlink: 'syz.4.5307': attribute type 11 has an invalid length. [ 744.140582][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5309'. [ 744.187382][T29307] syzkaller0: entered promiscuous mode [ 744.187409][T29307] syzkaller0: entered allmulticast mode [ 744.570228][T29323] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5312'. [ 744.771997][T29336] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5315'. [ 744.826140][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5314'. [ 746.655131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.655342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.134374][T29329] bridge0: port 4(batadv3) entered blocking state [ 747.134436][T29329] bridge0: port 4(batadv3) entered disabled state [ 747.144690][T29329] batadv3: entered allmulticast mode [ 747.147626][T29329] batadv3: entered promiscuous mode [ 747.465130][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5324'. [ 747.547910][T29373] netlink: 'syz.6.5325': attribute type 25 has an invalid length. [ 747.563663][T29361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5321'. [ 747.633293][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5326'. [ 747.638776][T25911] batman_adv: batadv3: IGMP Querier appeared [ 747.638791][T25911] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 747.756674][T29391] netlink: 'syz.4.5330': attribute type 1 has an invalid length. [ 747.819000][T29391] 8021q: adding VLAN 0 to HW filter on device bond11 [ 748.045303][T29415] netlink: 'syz.1.5336': attribute type 1 has an invalid length. [ 748.065605][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5336'. [ 748.193262][T29430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 748.248169][T29435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5341'. [ 748.406123][ T31] INFO: task syz.5.4043:24005 blocked for more than 143 seconds. [ 748.406147][ T31] Not tainted syzkaller #0 [ 748.406157][ ** replaying previous printk message ** [ 748.406157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.406167][ T31] task:syz.5.4043 state:D stack:25576 pid:24005 tgid:24003 ppid:23702 task_flags:0x400140 flags:0x00080002 [ 748.406222][ T31] Call Trace: [ 748.406229][ T31] [ 748.406242][ T31] __schedule+0x17db/0x58f0 [ 748.406305][ T31] ? __pfx___schedule+0x10/0x10 [ 748.406342][ T31] ? schedule+0x90/0x2b0 [ 748.406381][ T31] schedule+0x164/0x2b0 [ 748.407720][ T31] schedule_preempt_disabled+0x13/0x30 [ 748.407750][ T31] __mutex_lock+0x7c1/0x1550 [ 748.407780][ T31] ? __mutex_lock+0x5d4/0x1550 [ 748.407808][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 748.407834][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 748.407859][ T31] ? net_generic+0x1e/0x240 [ 748.407887][ T31] ? net_generic+0x1e/0x240 [ 748.407908][ T31] ? net_generic+0x1e/0x240 [ 748.407926][ T31] ? net_generic+0x1e/0x240 [ 748.407952][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 748.407976][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 748.408009][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 748.408046][ T31] ? bpf_lsm_capable+0x9/0x20 [ 748.408064][ T31] ? security_capable+0x7e/0x2c0 [ 748.408095][ T31] genl_rcv_msg+0x614/0x7a0 [ 748.408127][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.408150][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 748.408190][ T31] netlink_rcv_skb+0x226/0x4a0 [ 748.408211][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.408236][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.408271][ T31] ? down_read+0x2be/0x330 [ 748.408292][ T31] genl_rcv+0x28/0x40 [ 748.408314][ T31] netlink_unicast+0x7bd/0x940 [ 748.408354][ T31] netlink_sendmsg+0x813/0xb40 [ 748.408394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.408423][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 748.408447][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.408465][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 748.408489][ T31] ____sys_sendmsg+0x54e/0x850 [ 748.408523][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.408561][ T31] ? import_iovec+0x73/0xa0 [ 748.408591][ T31] ___sys_sendmsg+0x2a5/0x360 [ 748.408617][ T31] ? __lock_acquire+0x747/0x2de0 [ 748.408644][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.408676][ T31] ? futex_wake+0x51b/0x5f0 [ 748.408731][ T31] ? __fget_files+0x2a/0x420 [ 748.408758][ T31] ? __fget_files+0x3a2/0x420 [ 748.408795][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 748.408825][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.408874][ T31] do_syscall_64+0x166/0x520 [ 748.408900][ T31] ? trace_irq_disable+0x3b/0x140 [ 748.408920][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.408940][ T31] ? clear_bhb_loop+0x70/0xc0 [ 748.408965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.408986][ T31] RIP: 0033:0x7f2ae739e159 [ 748.409003][ T31] RSP: 002b:00007f2ae8196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.409024][ T31] RAX: ffffffffffffffda RBX: 00007f2ae7625fa0 RCX: 00007f2ae739e159 [ 748.409038][ T31] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 000000000000000a [ 748.409052][ T31] RBP: 00007f2ae743506b R08: 0000000000000000 R09: 0000000000000000 [ 748.409064][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.409076][ T31] R13: 00007f2ae7626038 R14: 00007f2ae7625fa0 R15: 00007ffd89b09028 [ 748.409108][ T31] [ 748.409157][ T31] [ 748.409157][ T31] Showing all locks held in the system: [ 748.409169][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 748.409184][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 748.409246][ T31] locks held by kworker/u8:4/59: 2, on CPU#1: [ 748.409260][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409313][ T31] #1: ffffc9000200fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409390][ T31] locks held by getty/5380: 2, on CPU#0: [ 748.409405][ T31] #0: ffff88803323c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 748.409462][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 748.409520][ T31] locks held by kworker/u8:16/10013: 2, on CPU#0: [ 748.409535][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409586][ T31] #1: ffffc9001028fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409636][ T31] locks held by kworker/u8:21/10054: 2, on CPU#0: [ 748.409651][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409701][ T31] #1: ffffc900104f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409753][ T31] locks held by kworker/u8:41/13313: 2, on CPU#0: [ 748.409768][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409820][ T31] #1: ffffc90003077c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 748.409879][ T31] locks held by syz.0.3830/23068: 2, on CPU#0: [ 748.409894][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 748.409943][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 748.409995][ T31] locks held by syz.5.4043/24005: 2, on CPU#1: [ 748.410008][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 748.410056][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 748.410109][ T31] locks held by kworker/u8:5/25918: 2, on CPU#0: [ 748.410124][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 748.417979][ T31] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 748.418032][ T31] locks held by syz.6.5325/29373: 2, on CPU#0: [ 748.418046][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 748.418096][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 748.418146][ T31] locks held by syz.3.5326/29375: 2, on CPU#0: [ 748.418160][ T31] #0: ffff888077124740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 748.418209][ T31] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 748.418261][ T31] locks held by syz.2.5340/29429: 1, on CPU#0: [ 748.418275][ T31] #0: ffff888024c36540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 748.418324][ T31] locks held by syz.2.5340/29446: 2, last CPU#0: [ 748.418337][ T31] #0: ffff888024c36540 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 748.418392][ T31] #1: ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 748.418438][ T31] locks held by modprobe/29437: 4, last CPU#0: [ 748.418463][ T31] #0: ffff8880601ea1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 748.418518][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 748.418561][ T31] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 748.418961][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 748.419012][ T31] locks held by modprobe/29442: 1, last CPU#0: [ 748.419026][ T31] #0: ffff888024c34cc0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 748.419073][ T31] locks held by modprobe/29448: 1, last CPU#0: [ 748.419087][ T31] #0: ffff888024c32800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 748.419134][ T31] locks held by modprobe/29450: 1, last CPU#1: [ 748.419148][ T31] #0: ffff8880467c4080 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 748.419196][ T31] [ 748.419202][ T31] ============================================= [ 748.419202][ T31] [ 748.419220][ T31] NMI backtrace for cpu 0 [ 748.419232][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 748.419253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 748.419264][ T31] Call Trace: [ 748.419272][ T31] [ 748.419280][ T31] dump_stack_lvl+0xe8/0x150 [ 748.419307][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 748.419334][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 748.419371][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 748.419397][ T31] sys_info+0x135/0x170 [ 748.419418][ T31] watchdog+0xfd7/0x1030 [ 748.419444][ T31] ? watchdog+0x1c7/0x1030 [ 748.419470][ T31] kthread+0x38b/0x480 [ 748.419488][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.419506][ T31] ? __pfx_kthread+0x10/0x10 [ 748.419525][ T31] ret_from_fork+0x514/0xb70 [ 748.419556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.419585][ T31] ? __switch_to+0xc89/0x1420 [ 748.419613][ T31] ? __pfx_kthread+0x10/0x10 [ 748.419633][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.419674][ T31] [ 748.419704][ T31] Sending NMI from CPU 0 to CPUs 1: [ 748.419800][ C1] NMI backtrace for cpu 1 [ 748.419814][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 748.419834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 748.419845][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 748.419878][ C1] Code: e8 fe 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 7e 75 06 cc 44 89 f9 80 e1 07 [ 748.419895][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 748.419911][ C1] RAX: 1ffffffff35a6200 RBX: 00000000000003fd RCX: 0000000000000000 [ 748.419924][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 748.419936][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 748.419948][ C1] R10: dffffc0000000000 R11: ffffffff85736ac0 R12: dffffc0000000000 [ 748.419962][ C1] R13: 0000000000000000 R14: ffffffff9ad31300 R15: 0000000000000000 [ 748.419975][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 748.419990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.420004][ C1] CR2: 00007fc9a21ae000 CR3: 000000004e504000 CR4: 00000000003526f0 [ 748.420020][ C1] Call Trace: [ 748.420027][ C1] [ 748.420036][ C1] wait_for_lsr+0x184/0x2f0 [ 748.420059][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 748.420090][ C1] serial8250_console_write+0xaa1/0x1200 [ 748.420115][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 748.420136][ C1] ? rcu_is_watching+0x16/0xb0 [ 748.420165][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 748.420194][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 748.420218][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 748.420245][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 748.420271][ C1] nbcon_kthread_func+0x679/0x880 [ 748.420295][ C1] ? nbcon_kthread_func+0x163/0x880 [ 748.420313][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 748.420336][ C1] ? __kthread_parkme+0x71/0x1f0 [ 748.420361][ C1] ? __kthread_parkme+0x199/0x1f0 [ 748.420389][ C1] kthread+0x38b/0x480 [ 748.420406][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 748.420425][ C1] ? __pfx_kthread+0x10/0x10 [ 748.420442][ C1] ret_from_fork+0x514/0xb70 [ 748.420470][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 748.420496][ C1] ? __switch_to+0xc89/0x1420 [ 748.420520][ C1] ? __pfx_kthread+0x10/0x10 [ 748.420538][ C1] ret_from_fork_asm+0x1a/0x30 [ 748.420572][ C1] [ 748.430833][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 749.545858][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 749.554957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 749.564996][ T31] Call Trace: [ 749.568264][ T31] [ 749.571182][ T31] vpanic+0x56d/0xa60 [ 749.575169][ T31] ? __pfx___schedule+0x10/0x10 [ 749.580016][ T31] ? __pfx_vpanic+0x10/0x10 [ 749.584529][ T31] panic+0xc5/0xd0 [ 749.588257][ T31] ? __pfx_panic+0x10/0x10 [ 749.592664][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 749.598115][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 749.603478][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 749.609628][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 749.615782][ T31] watchdog+0x1030/0x1030 [ 749.620109][ T31] ? watchdog+0x1c7/0x1030 [ 749.624522][ T31] kthread+0x38b/0x480 [ 749.628588][ T31] ? __pfx_watchdog+0x10/0x10 [ 749.633249][ T31] ? __pfx_kthread+0x10/0x10 [ 749.637842][ T31] ret_from_fork+0x514/0xb70 [ 749.642433][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 749.647540][ T31] ? __switch_to+0xc89/0x1420 [ 749.652211][ T31] ? __pfx_kthread+0x10/0x10 [ 749.656791][ T31] ret_from_fork_asm+0x1a/0x30 [ 749.661566][ T31] [ 749.664860][ T31] Kernel Offset: disabled [ 749.669175][ T31] Rebooting in 86400 seconds..