last executing test programs: 32.441552128s ago: executing program 4 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x98a3, 0x4) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400002207000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) r3 = socket$rds(0x15, 0x5, 0x0) recvfrom(r3, 0x0, 0x0, 0x12120, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000680)=0x14) recvfrom$packet(r2, &(0x7f0000001900)=""/201, 0xc9, 0x2040, &(0x7f00000006c0)={0x11, 0x16, r5, 0x1, 0x40, 0x6, @local}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4, @ANYRESHEX=0x0], 0xe4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001dc0)={0x0, 0xffe, "a30499fa04dd0633f637beb81afe9b804bc4e8682edf261380775cf5580d3d59f8cf802169d404202a03e35cbb55e0c1e36f52c533ee56062dc07f3df1446b456136f3f0885f4f864d54b7b47e9355d9a8b87da5f4d9334dcdc5f611824b293077498bd6e6d12ddf3723a89543ffffb672ab4330451f01aba9e8a7b968e33d3fa8b38c463a1bcc3887419383136bef8cced63f5a63a1de96b68a78f33db6abbca6762040c7f9b63d1e0e33a4335accac1ba101ccbc7d610ad882a4086a3453415e12f3be3cca0d3c18a4f7ef2825a999550370da57b2e4d5b0b5ee63a235fb76ce4f19c57d7699368fdbff98bfe48352e63995d93dd1d056b743ab5157bf34ad587b9075b0efffb203a4668f467468a5511674c54eab905de6159f33c5c101634acf6ae5c9ffa9695dec299b9e38805a88fccec3cfb8a817550322cf907c94ecbd8baf65156dee8e7681264eca13db7b2e9dcdd258aa95aac34a4aa6fc14d2924dacda6a2e29358cd51a60777a17270b52fcb9abe21045568699f50e99fc6536a12bc599b92e30c0f4473e2db0d7f7cecaf59c0faaae1325510d605a4fe994c341786b73e389f7f5c9b3a8731ac6661496bf6a19b6688b59d0e60f7f7b95cb48a6a9f491192fc376344b9e29d69d805d24b6b907b7619079365ed6b8ccd73e7bcdc17e7b46808b8349585e606b4f62e1d1aef3220ba25e8a19c363c2a187b0ee5a3022b0ec3ea2b1866b60a696375f38cede8c88eb849be1b386a8a4f9075efcf3300ddc2b507535e307eb2e9e704cf75b4652ac0b88509065c289db7bfcf999677723294d02c03cb20047e6364c473b94a290ecc1020e3d55ad0410861fe47f7fc898d2b05ede8ce2810264a597951e573615094a553db604310fb884b77020dbd31d237fe730705a69f5b06379be48a6f4f1f8880f345e80748530711c1d5905bde6256ef934617909c2deeda4c23d7cbf1e5f4c16d6c5bbc0c42bbe44f6de5e219650eae448c37d797b527e7a4c3df4e9da3ab01ada6d5edc05060c13dc2911b0fdf422849a18bac9e1e924bc630c520c1be11c2516410ec24b9b16160b0857f2eebb1cc1e07d994d67971c6d34cc905cfdde2e4d497b342a74cadae979bd4ac19cc953f8c0b485ab75d0caa2a0b400630a658f0f2525ead26a8d649ae71a47750ccf22a5bedf6b645b49c0ff4edfd2fd5161fb1d59777f5d529ea66bfa9fb7241841dcc1b411e2bc3c4b84efc43696f48de77e41bbc5a182b5c826a6fbdfedc11bde08f3bf9aa22dcdadf00512f81ca997eddb28fe86737c39862df8667cd3565a0666769eaae0a6c34f434d974bf7d2903ecf04a4f7abc4afbef2c0370fe956294c8982a3abdf1b373e42e65049da18cc7860303ace5c7288144fe3b1ed69b9839368e1dbcfb59d0ab5de04e2a61faebfa7a236a9eb261a2430d2b87fa585bd80fe6b141ae0f5b73566627d2ba1c8c10ca524a81ab163a8cde32ce7b6da7585ee160ef2c47ec7d2544b675b479d7404c9542ae471f7125c6442a7081e6e757edf51e51b926f7e4932d5dcc67bb9c93b971771812fd8a2cf26fcd070eea810f4ad3da09ecfdfe3df04e8d605a4c87e44ad03c578a268988a613652e3ebb867a3d1b837f3769fcc8cb15438729e5726406e26675984245d2c0849a9e99e796f40d3e4f09b65b087bb636fd27434fa1e64431b0874b4f458e5b6496e27cc171490a5409cae908779ad29545687df8e46ff6073a1c638a7dceed4bcf6b2072b1df83b4c5f91a095385223eb8e0d2c58e25ab20ba29d405b443acd7cd1fb5de86405d32ea0d79823f4e8f812d495f5fc64a31dcc1541d9d6a0b9e2f4aa585b89c35e11f6896c6c982adefa4b5e7924aac44fbf9f31e95f235accd9615e4484584d71f9ecd8c4fc2bc1f34588fe0b15717b9160fb76fc5da131c9e549ece8cfd3acb8f6b4d851fec8260a66436a053d7f050ed3db8be91a040a58aadfd24fc3ef8a1b0d00fc862c28140d5b2bd9f397ec1b720860c85d186171371915ee208de6cc330f91cb2638ef88b975c848f7c97176c1a2cf024913e40ed95a0adbcc14eb1f37a520ddbd8596b094303a39335d630ba17723815873310a2e764ffb5267cd5061de69676060dbd4aa9bc4c209ab24d4b4e517755d17131271d850e4f48a00ae3c60188241472101088a11c9694755bbf443a33245cf44e8a4a7ebd30ba5df528eefa64eb8edb8f2d8f825dbfaa235a290d77226c43ac80ab2f34a2f10668d6448e228810cb815c16581b76541eaa3070d189c2381af2346e52318407eb19a2ffb90cb0f91dd5258673047c6178a9794b85e1a5cf3036271f4ee932a20e0b204f425e1ce4f67e1d65fa3123a19ed37f4536f38e56d7e3f8478500334f7610d6afac3ee7c5bcc96aaa30df6dc6ad95721644b8113fafedbbfafb6463937a0da6624fe426dd129f7c413c130107f95922fcc3b6b987f261d2111cb821e24ebc506dc5aaf16f8f740bebb83aec299a98e0dbe8745c2eb85be07ddf345ae61831b64a798d5b3da0e9ece75e1abc518eea864f258698c36359f06b752f93896805be56035e051c3cd49f211f8fe73b299ebdfb302916c8760caa7c695efd8e326bf2ddddd3603c65a731b2d9e81575b6848e8175485c5c168fd4f8ee153b3c3294ea9db3bb973bba5a40b3ef8f7ad367a163d4cc8a50de9687d0c3b5cdba021a14df6a6aee786c98b2d416c3f4c0c4fcba401c49357ca2d72c2adafc00256bf723ba9ed3f47fde2993f32ca004e0f4969dd9fcaf63aebd9fcfd608fecf9deac3d8610171824d312c325e625f2204b77b6a6e939008a2b87d634506ff29480d36e1fad3dcd37f1c5a73a2b7d3da476b51107370f3d220c2f596877d7d171cf507f76c21c4f536bfbdb0d777da63b3c78d2f9dc06769b1fc7bf1d772880bd78da030ee00912352712cde53436f28b2d96f98bfd5d83b738c5f5d7776861f450db7fe94cbd1c69f2cd623574428b57f88307fa7313f552941ada6ce4f37e8275e15c17854830d6c60de36906daa0aabcfa19e443ec7e6eff43ff8d48b32acb035216cda42df3175efba25a56046037d6425743ddcd18d5acc19196e034b66f5c73dd2fede4ec1464834233272f67264341637948c18963c9ad05df2556e241ccc0e398d92f9606cbc82c556491d6b2106944d13e6e327518d6743419d4b81c402b29bb9a0e1aced99369ac93f3812dad6d0b62731d75b2a570042cb37b80719cd8c37b02fbfdb97ed9c6030b84ceaddba9a8a0da0d9d634e6ad79abc2dc3e073dd53381eda49e46d49be84303959903c0d6c33da1c74aab44e30eef7ffb910b0185cff68580d99af3005b392fa17238dfa698ca8d403de54778b691267883ab87b9e6ca20ce9a82da3b8a9e2c69f449b648ac009ddb2bc0dfbade92158d3d9413c56fe4478cdd032cc8cf29f41b19d7d9d3ef680a7bf5f9ebfc54920ebf4381bfc028421ba041c9c0635acc47eb60dcbc5bbc5464169b2d6cc8092c209821be96d900c55837bfd1e6e51111e1d4e907847d621e5a1d4a4ef33463890c06c76d3b1b63a78ed56b93ea303b5a05921c56b0bd02b802d65e4fc4c56165c54f5d8ec1fa9b450b36472943eaf37f6b4c98fba05b56246f935e8937ad62793f87ead5a192fb8b8f23171751190bdc0af4d0e572a833c711f64756c437d0ff323cdd963ab2d1a70a85366705c895b6b34a42fc6c120930ea67b1ac908987d8b636ce6740d702ba9f8286fd92f8503e6b9a3c4b28a757a7319a7086fecc130d26283171e9f726bca1b12dacfdae1e21f13e4006f3ac8545cc830069527a3045a00350278fc868bb49c10b22d01f43a8cab43edbc22f77698160d993676721aa042012cef27dd410e771830bfb935866d63b43f150351d3f9d3f27a401efc99c448e851e38f147b4fd8b8339f918e9c3df1f843b92af5940891c3027ad03ae4ea56c87e38493bbd0f6c42ca673f807e46c47a39195099f176d9162e1f991ed48ed9f5964f9e9e8e91ddff01b1bfcf3bb86aaa8f169eeb6e27ea684947e946aa9279cb8e3a80e51d4b8bed3e09d5ef110275507a476f0ea037e55af9d675893cd6eca64007893d238e0c60f9f38f0ca4025a1148901cae4a39465b76d9b0ca4230aa9917a106c39455bcfe14512e70f16a2bf2c0258bd24d873ec6c728ffc9d9e1d9249519cb3a31ac6962df369bdb36ff7124c3fce2882f60b77a6429b86a07a214e5fb695a8f998281bf3a3cef1f54e040879d907ae8e61ec133252c6ca356df403cf57c6c02964cc6a42447cc109bda76e565ee218694220e3857f264dbae883129133fbbaf164e0dad5f09b07dfe63a0649343f40e82ff791e1996e8d14387c8df64a6a95cee75f1d7349d70ab3cf1dd696edd26c0832f6681ee35f7f85ffc25e07e41cdd9635c7da4a6ed4b9fe703b33e379a0aac654bb170ea8a5fec4c65f84d3d9af0235e539c58ef3785ad7ff0a07b6145bdec841cc4f5f373c9b69f9c80076b61bfd5673d6ab8d088696e8af17eb9f041254235b3ba326a57cf3d64153705566b52a542f5dba53724b15b350e8509ea563a5f49d727842be8ce1867996b5899d16c0d312788265494aebb51c046d89886ded403b22a8a2e27fd20f1b76458a53c03e6b202319b03000d4ec36ac441ab3044c05e5f7ccd3a4cead16a9c10785e6175ac3a3132c06558e79f675acb1ee5363632482d5ca6e4d67bca1e4165cc54bb21351cf917a9ded3cc6f3fa63b08f567f87d56c2676c1752990a6f84d92f4cfef2a10f5ce89a2080c3933551f4689aa93661e1f41f7f1f76272f893ecc327680d5c8bbd28e7bd7290bdd3210df31678d34e2993869ca7889555a3b58e637cbffe44b7e611cc6a6b343056f0a460f1e094d2efc52a5b4ffbacf140003bd0df37127428ec1a1f83b4047e040d965b24dc579f3dd2850d47cacadee3221b4c61074945eee55372177baf5721ac1aab4e8b57fb7467882fe00055ef1ecfc5a5d7a9e497229bfb03edc5d97ef8a1da9247d300e506ef1c9f8c402c9e7309c8e595b776a756dc8c15c03d52820d0dcc1d37540eaa50cf1ac97ea1ec3ee417b3fc78840c6d0b4c9ec96e2d4f5d0ab5ec8025dcfa30754dd2d3dd54a77234e7fe2318461698eca1d668cb3e46335e5e66a3e1e6e8487c41e94408d855b721b677a08a856594cb0efa27e88cff426922aa360766a8f58c734f1a811bffb4e65fbef43d711ea22588b0f9e68e934924b18c25515f2c0677be5e20bfb9daca30194ebc551ebe2b18a79f64ba24a59b718b441f5a7fe1d8d8e3f318b839a2d94453827a34d3ee9d8467a81400c02592dded29d150bce61187bb34b2b944171950f9bc91616a88be7f4b13053876a73e8e26bb54b9e9fe17f26e4f11b96ab9afc04c2220090d0d651464996001d755efff5b6a579b096d7b44d954ced44d2ed8fba3b345aa5e24e1bcc9518012c99da15af8754d84d6614c983de541abde0f5e7880fb66d3e60b5550a8579303de3993a8d13c18e61c822c8ed47eaa0d99eb5ced2f55fc9a0931bbeb9f6dff9987424c3cce786603fde88a1790c95875404991267f7f6f81b979fac51dfdecf7cdd2e3af4a103e4aacf8f40e5bff726f002f3a41625470e530793d0c3637f038bbf31e1f4f6fd856e874cc4a5a9f915c2c97ae3f5e4e6b7767dc6d95f1cba09b48e785fa425698e3181208310af45f9c9625c9586c5096915ef19df799779f1ded846e09f55aae71f63d687399966300d567e74eca078a8bcc5e2"}, &(0x7f0000000040)=0x1006) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000700)={0x30bd, 0x2, 0x202, 0x7, 0x1, 0x1000000c, 0x1, 0xffbffff7, r11}, 0x20) 31.429305064s ago: executing program 4 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newnexthop={0x50, 0x68, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x9}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0xb}]}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3b80}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x35e7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newnexthop={0x50, 0x68, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x9}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0xb}]}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3b80}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x35e7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) 31.271132079s ago: executing program 4 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x80000, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3606f15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'ip_vti0\x00', 0x1}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000340)={r7}, &(0x7f0000000240)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x73f}, 0x1c) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_NH_ID={0x8, 0x1e, 0x40}]}, 0x24}}, 0x0) (async, rerun: 32) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r12}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) (async, rerun: 64) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x3, 'ip6gretap0\x00', {0x2}, 0x8000}) (async, rerun: 32) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0xf, 0x0, 0xfffffff9}, 0xc) (rerun: 32) 31.133725992s ago: executing program 4 (id=2029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) (async) 30.96376638s ago: executing program 4 (id=2032): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff87) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r2], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 30.469395497s ago: executing program 4 (id=2038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x13, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000040)) (async) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x50, &(0x7f0000000040), 0x4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, 0x0, 0x14) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, 0x0, 0x14) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) 28.924844752s ago: executing program 2 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x22020600) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x5f, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) (async) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 28.911499924s ago: executing program 0 (id=2052): r0 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@in, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x1, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x3, 0xb1}, @ssrr={0x89, 0xb, 0x2a, [@rand_addr=0x64010102, @empty]}, @rr={0x7, 0x1b, 0xb2, [@rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @remote, @empty, @rand_addr=0x64010100]}, @noop, @timestamp={0x44, 0x24, 0x8e, 0x0, 0xe, [0x8, 0x4, 0x7, 0x5, 0xc9eb, 0x2, 0x5, 0x3]}, @ssrr={0x89, 0x1f, 0x5c, [@multicast2, @private=0xa010101, @local, @multicast2, @multicast2, @remote, @empty]}, @timestamp_addr={0x44, 0x24, 0x54, 0x1, 0x8, [{@rand_addr=0x64010100, 0x5371ecea}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0xfffffffe}, {@empty, 0x1}]}]}}}}}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x891d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 28.798757245s ago: executing program 2 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000000600)=[@iv={0xf0, 0x117, 0x2, 0xd6, "475f23c7e1da792598ee060d784009b86fa0d54a4fb2688f8116fdc67b1ce7c57c611a36522df03354cbe2ba6116891761abcc2e727986a9c5f80ecfbe585b5a11917fdcb6828035b1387a81f12b4bc4f293c81a0104c904db431fd550146a09c77dfe1e790c988a2567ab1479d5b59d9791f1be9115fe290dc0b6590cbe16e11f1368899e1cb4210078a238e23950fe496e9c50f43466af19066fefadf855d8834d043cdfba1ee0bec2736a5bc1e89543cb338b06d34a03751d03e8e4ae6b7e861532e69ef6600571bdd7e51e817c2e19a0a49f86eb"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x168, 0x9e5f951aef94339b}], 0x1, 0x24000800) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000bc5000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="ad000208", @ANYRES16=r6, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}}, 0x4044890) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000001900000014000000090000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x94) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 28.512572887s ago: executing program 2 (id=2055): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff0000000004000000000000001c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff0000000004000000000000001c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000580)=0x1, 0x4) r7 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) (async) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8eaa, @bcast, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000700001000abd7000f7dbdf2507000000", @ANYRES32=r9, @ANYBLOB="0c000180050003000200000059c6ba3157080d18ef6ddf1691b613874312e9dd08eea57789488ce1050011c00839809f873e04"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0xc0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x4000000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r10, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r10, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) 28.419233378s ago: executing program 0 (id=2058): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f00000008c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES32=0x0, @ANYBLOB="f549a248b4a2880cf9a99f71ebaa784b3f20689e71488b06520856e36a96c65a83ffb304064c5968abffa4dfa277925622e243f17159e904eed4f6b8d1bf2186ee51ab566c0e5c0353c87bd060931fa18eb0401f5ddfdebc367abfbc0c29e030fc77c460de3d6700ba60bcb72441a62f13264daf4cc010a614770b9461ab4e8b6604"], 0x1c}}, 0x0) r2 = socket(0x8, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa0}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0x4) 28.289098957s ago: executing program 2 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180)}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r4, 0x4004743c, &(0x7f0000000100)) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 27.97689583s ago: executing program 0 (id=2062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff00000000030000001801000020200c0000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kyber_adjust\x00', r0, 0x0, 0x10000}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 27.976185737s ago: executing program 3 (id=2063): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xf9, 0x0, &(0x7f0000000640)="e05becd9230462ee36db828d7ff675f39e0e02fd67308cc8ac3655cffa7e0626193dfc3c1c0300000000000000736113cb516c824bdb5a6b579597aa00000000000010002f5961967cd85d1dc795591002e038633cfbaec7260af9b563aeeaacb2e82495782d9d507554a16e48bc36d9105013686701eb157916e627cbf0fd334bdd036de0ea47f24a60735fedfbb8d41d938f2a4a72cc6acc8a9140a6edb500001b112e4818e3b4e49ee2127a410e24b9c6c5f95a3e7ba667e03560cf08d72bbb1cd9699beec8c88f32ca58822948b0f1a3e7d331175f8c4f8e17cb070b26ad7a319925460ec5761f4d506de6f3003170e4bb9a6acdf47bf5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x82, 0x5, 0xff, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x1, 0x1, 0xfffffffc, 0x7f}}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fddbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01400000000000020013000200000029bd700006350000"], 0x98}, 0x1, 0x7}, 0x0) 27.394623421s ago: executing program 0 (id=2064): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/223, 0xdf}, {0x0}], 0x2}, 0x80000001}, {{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000002040)=""/245, 0xf5}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/114, 0x72}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001d40)=""/221, 0xdd}, {&(0x7f0000001e40)=""/246, 0xf6}, {&(0x7f00000017c0)=""/182, 0xb6}], 0xd, &(0x7f0000001ac0)=""/198, 0xc6}, 0x3}], 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xe9, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0xe9, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe4"}}}}}}}}, 0x123) 27.220999789s ago: executing program 3 (id=2066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010001009112cf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 27.219153307s ago: executing program 2 (id=2067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x9cb, 0x0, 0x1, 0x2, 0x9, 0x2}, &(0x7f0000000100)=0x20) close(0x3) socket$alg(0x26, 0x5, 0x0) close(0x4) 27.093384843s ago: executing program 3 (id=2069): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x123c01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) recvmsg$qrtr(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x7) close(r0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000240)="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"}], 0x1) 26.901099145s ago: executing program 3 (id=2070): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0) 26.715542049s ago: executing program 1 (id=2071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x1, 0x8}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 26.695460244s ago: executing program 1 (id=2072): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0) 26.623078289s ago: executing program 1 (id=2073): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d00010000000800060009f300000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x51}, 0x20044810) 26.491598505s ago: executing program 1 (id=2074): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) write$tun(r4, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 26.423734186s ago: executing program 1 (id=2075): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x10001, 0x4c, 0x4, 0x1, 0x4, 0x9, 0x7, {r1, @in6={{0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0xc476, 0x8000, 0x3, 0x2, 0x5}}, &(0x7f0000000180)=0xb0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x2, 0x7, 0xfffffffffffffc00}) sendmsg$kcm(r4, &(0x7f0000000940)={&(0x7f0000000200)=@ethernet={0x306, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="7262ba9c4ae2a1fa29209ae61188df4af8d6550ef5c079905d2c7539f45cc52d783b8f906bfa55aa292821c767db2bf036105c634f11ec8fbcf1db2b3b5090fa8251df9a02a1b8bb11f35e17168297a75b107c3c08d70d36f37dba36bfade7380970bf241ee5d43f3111eff48b5d20a12f4ec69d75fd83cc70229d71dce3db544128b876c542d9054d", 0x89}, {&(0x7f0000000340)="aacfaa398adccfaccb2b70546c841977f8883a2e8529cabd291d6be6d3d5984b07d5487a5fec6d6457f0e3ce3a00d5307a7980032f6afc4398160b9ee08a9a62c9f3f1ac1d08a6335c58cea65d487f6285c377e4c3cf80524e325a774a110723c92fb3eb8ef4a85b03d0233f46069acf76e625a45f2620674e72565b98", 0x7d}, {&(0x7f00000003c0)="4a894cdd9738", 0x6}, {&(0x7f0000000400)="d5a6137e079b826b80cd27f433b29eb5ec9a8776d793d738e5a06e134330ffe48884b971bbefb620a84fdc3f3d60f5325ed518e7fb518cea04ee5b04269f058377cf925938f745481b98ba53c5e596ee", 0x50}, {&(0x7f0000000480)="c0bda9358d5a94cb9bb267c73e7fb7c0aa2fa553ca12d5231ce13cd785f6cd645f4436f15b4d47b82bc384ebe400b52021e5e332222dd367274d6474ec4f1d43ed213fc9c5fe1f34bdf7aca99bd7a6c0e0cc16f5cb51f13078b9772cb7c090dd1ce35fd3843f865f0887118f9e9e74e66aebd215416d939402941311196eef03a77caa94485f33e7ec3aaac380d6d5b4193dc56a6d2ae6f50d2dc48cb62bb1ad2945cd720a272885d695470ce74c95d2ac4ca0f4114dc4ebec55b918838201f95251291229a69c46cff9c8de7879d08c", 0xd0}, {&(0x7f0000000580)="d70dcbf0c8b186faf89f9fc955da0b9cdbaba8d6c983a2ad0f5fb5f736dbe4b56418488d61bebfc2e9e82572f8b2f41e08cd27669190a9d3da5668cc56fc36f69e9152880d072b42d3c19329e0e9cbf70c2ff6020c3378458ce9718589553a707241eb48ca090b5d878d9dbcc61380fdfab4bad42f78a3896d4bfa8511c0a858fe77ad3728a47c1bcb8e7017d7d1cfc0a252ecf3217e3f56ec2a3b8d0000b9553c", 0xa1}, {&(0x7f0000000640)="c887c1fed7d277a3c16a7a697de4eba61d71d241de3d8ac35c87c0f3a21d838db910b7f8d3e1ebbca98ab289cc40b5a546e17a921c7d9af9ecadfe7648eb8a2a57efd3d9df22f3ea755d47ae6ae802f9e1f39288167052295e42d1b3aed5a08a5f154f4c1610d2f11a9eb2ec6a07c1b67fbc5ae2fdc9c2de0f5b75db13c2d14d35f0a30afb82b5118f462dea00ee6425249ad03a", 0x94}, {&(0x7f0000000700)="38f0004e768a899a4f5ac5434789c7f1ef432e900e2f8331c19b50372b265b454d9b9cd88217b47fd34249946e77eabe896d84a7c75b7630474df0a811e1fe5d3015ff0bc545164d7428f55d3a78aa44ca46ce69dde5590c79d2da0c445a4a4630c20777238bb5280f0f02ba17dce2f7a0ec4536abb189ff19bf8b0cace3d88798c5a74dad8cabb853cd6ad6472d", 0x8e}], 0x8, &(0x7f0000000840)=[{0x70, 0x108, 0x40000, "93ab87ab9c75a1a7551e31e51eff59a74adc0d7815d00dd2fa8872ea33df0163777e97d95461305cefd87b97fc7606a4a1856055d0dbec65fc0e09887799c013ccece6860b58631d5994eeb6c4ad81e799297a70075529e7e63aea5623cb37b0"}, {0x60, 0x109, 0x7, "b24f117954e9be95c0878a422960a03025e11e548d21c003977e9a0dcf681bfb74f973224a30cac6249b27a639b42ec08b4957e4f6a3ce2de1f465513a0cdfa30491060cb291f9067155e2091d"}], 0xd0}, 0x40) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000980)={r2, 0x2, 0xfffffffb, 0x69b28448}, 0x10) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00)={r4}, 0x8) sendmsg$key(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2, 0x14, 0x4, 0x3, 0xc, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0xad, 0x0, 0xd}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bbf, 0x8, {0x6, 0x3c, 0xff, 0x9, 0x0, 0xfffffff7, 0x0, @in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x3c}}}]}, 0x60}}, 0x4048051) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000b40)=0x8e, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@ifindex, 0x26, 0x0, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r5, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000d40)=[0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)={@fallback=r5, r4, 0x8, 0x28, 0x0, @void, @void, @void, @value=r7, r6}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001000)={r2, @in6={{0xa, 0x4e24, 0xb2d4, @private0}}, 0x2, 0x6, 0xfffffffc, 0x3, 0x10, 0x6ed6, 0x5}, &(0x7f00000010c0)=0x9c) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r9, &(0x7f0000001100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r5, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000001200), 0x0, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xec, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001440)={r2, 0x1000, 0x7, 0x4, 0x4, 0x5}, 0x14) r10 = accept4(r5, &(0x7f0000001480)=@nfc, &(0x7f0000001500)=0x80, 0x100800) connect$inet(r5, &(0x7f0000001540)={0x2, 0x4e24, @empty}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, r11, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x10}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'syztnl1\x00', r8, 0x29, 0x8, 0x1, 0x7461, 0x61, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x7, 0x7fffffff, 0x4a1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001800)={@ifindex=r12, 0x2e, 0x0, 0x6, &(0x7f0000001700)=[0x0], 0x1, 0x0, &(0x7f0000001740)=[0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r13, 0x11, 0x64, &(0x7f0000001900)=0x4, 0x4) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000001940)=[{0x3, 0x1, {0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}, 0x0, 0x1}, {0x3, 0x0, {0x0, 0xf0, 0x3}, {0x0, 0x1, 0x4}, 0x0, 0xfd}, {0x2, 0x0, {0x1}, {0x0, 0xff, 0x3}, 0x2, 0x2}], 0x60) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000019c0)={0x8, 0x3, 0x9, 0x2, r3}, 0x10) 26.359804889s ago: executing program 0 (id=2076): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0xfffffcfb}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x107b8529, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112b00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 26.350081388s ago: executing program 1 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20000000000002aa, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001e000120fdffffff00000000020000004bdd964322a1e28f2e0100000600000000080004000100000008000100640101029b828fffa4f49c665dd65cbf39da7da2fe4e30bf73face07b5f6b3c1585fd5f045dc01366f77"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x44044) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3, 0x0, 0xe42}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async) socket$inet6(0xa, 0x2, 0x0) 26.186731056s ago: executing program 0 (id=2078): socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) bind$netlink(r3, 0x0, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, r5, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x72}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x1000) (async, rerun: 32) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xfc, 0x10, 0x713, 0x70bd2f, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x9d8c2e8008cd4c2c, 0x5}}]}, 0xfc}}, 0x0) (async, rerun: 32) ioctl$SIOCAX25NOUID(r8, 0x89e3, &(0x7f0000000440)=0x1) (async, rerun: 32) listen(r7, 0x0) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) 26.09709304s ago: executing program 2 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040040) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, 0x464, 0x2, 0x70bd29, 0x25dfdbfe, "cd0867706e9a0ac1f9d067f2a41f0348dba65eb2a5c24dddd9dd74173da3bbd30f3fed37dc7407c247feca89a5886b2aee5e5722998b62291eb029d4e4f0c1fb9a3e8faaeb9c157bcb6c78cedc78deea70edac7271a6a14589893bb017feea888c73fcb2bfffd28602a66cba2908487af9bc626820787644f186847dabbbb251b2354fcb5256b8bd87152c45c491046351de3af891b7df919455143030757c65d4d62e7c603d7df90acd0df326e7e930159057b93c", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x100, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r11 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r11, 0x0, 0x7, 0x0, &(0x7f0000000500)) (async) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r12, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0xc015, &(0x7f00000004c0)={0x11, 0x4, r12, 0x1, 0x7, 0x6, @local}, 0x14) 25.879618045s ago: executing program 3 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x14}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x48}}, 0x0) read(r0, &(0x7f0000000140)=""/172, 0xac) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000032c20"], 0xec}}, 0x4004054) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x800) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000200)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0xe, {0x2, 0x4e20, @rand_addr=0x64010100}, 'syzkaller0\x00'}) bind$llc(r3, &(0x7f0000000100)={0x1a, 0x7, 0x2, 0x86, 0x9a, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) 16.824154901s ago: executing program 3 (id=2081): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x887) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x28000600) connect$can_bcm(r3, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async) listen(r1, 0x1) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x80000000, @mcast1, 0x4}, 0x1c) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x21, "4b721b782a17a7b6a00d96363f7fdafd95073830fb8cfb34eb7cbd173ef6f0710e"}}) r8 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x72, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@llc={0x4, {@llc={0x4e, 0xf4, "7ce3", "4958ce6ff55b86bad919f6a3ff91c917ea1f311edab30da64e0d453d982f56e920c56406cfdf7574ac19ece12da68710a4fb3eabc0014bd2188eff314576e675627830604df60a63e50b6cd8af37fc2656ac54ba625f186f"}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x83f, 0x4de, 0x369, 0x4a4]}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080003009404000414000000f08e1099a39368287d7d2b7fe29983226be4835ceb44a44f5daf552b1622d1d51f16b45eac266b3b961e1e89363f5ae7d72c3fe1c84d1722f0653f10000000662bb1658a1610c2f2058fd939d8030ef4b1a27127fa600296b1ceb1af17eb0812e9427e29e0c26ef95353042b31db3b9f2039ede34932a7c7005a298db4e7e535c3628baebd3b98d98c280b7375fc9c1ef9"], 0x97) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) 13.329911443s ago: executing program 32 (id=2038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x13, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000040)) (async) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x50, &(0x7f0000000040), 0x4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, 0x0, 0x14) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, 0x0, 0x14) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) 8.131433109s ago: executing program 33 (id=2078): socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) bind$netlink(r3, 0x0, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, r5, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x72}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x1000) (async, rerun: 32) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xfc, 0x10, 0x713, 0x70bd2f, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x9d8c2e8008cd4c2c, 0x5}}]}, 0xfc}}, 0x0) (async, rerun: 32) ioctl$SIOCAX25NOUID(r8, 0x89e3, &(0x7f0000000440)=0x1) (async, rerun: 32) listen(r7, 0x0) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) 6.630229358s ago: executing program 34 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20000000000002aa, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001e000120fdffffff00000000020000004bdd964322a1e28f2e0100000600000000080004000100000008000100640101029b828fffa4f49c665dd65cbf39da7da2fe4e30bf73face07b5f6b3c1585fd5f045dc01366f77"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x44044) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3, 0x0, 0xe42}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async) socket$inet6(0xa, 0x2, 0x0) 5.310729617s ago: executing program 35 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040040) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, 0x464, 0x2, 0x70bd29, 0x25dfdbfe, "cd0867706e9a0ac1f9d067f2a41f0348dba65eb2a5c24dddd9dd74173da3bbd30f3fed37dc7407c247feca89a5886b2aee5e5722998b62291eb029d4e4f0c1fb9a3e8faaeb9c157bcb6c78cedc78deea70edac7271a6a14589893bb017feea888c73fcb2bfffd28602a66cba2908487af9bc626820787644f186847dabbbb251b2354fcb5256b8bd87152c45c491046351de3af891b7df919455143030757c65d4d62e7c603d7df90acd0df326e7e930159057b93c", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x100, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r11 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r11, 0x0, 0x7, 0x0, &(0x7f0000000500)) (async) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r12, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0xc015, &(0x7f00000004c0)={0x11, 0x4, r12, 0x1, 0x7, 0x6, @local}, 0x14) 0s ago: executing program 36 (id=2081): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x887) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x28000600) connect$can_bcm(r3, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) (rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async) listen(r1, 0x1) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x80000000, @mcast1, 0x4}, 0x1c) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x21, "4b721b782a17a7b6a00d96363f7fdafd95073830fb8cfb34eb7cbd173ef6f0710e"}}) r8 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x72, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@llc={0x4, {@llc={0x4e, 0xf4, "7ce3", "4958ce6ff55b86bad919f6a3ff91c917ea1f311edab30da64e0d453d982f56e920c56406cfdf7574ac19ece12da68710a4fb3eabc0014bd2188eff314576e675627830604df60a63e50b6cd8af37fc2656ac54ba625f186f"}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x83f, 0x4de, 0x369, 0x4a4]}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080003009404000414000000f08e1099a39368287d7d2b7fe29983226be4835ceb44a44f5daf552b1622d1d51f16b45eac266b3b961e1e89363f5ae7d72c3fe1c84d1722f0653f10000000662bb1658a1610c2f2058fd939d8030ef4b1a27127fa600296b1ceb1af17eb0812e9427e29e0c26ef95353042b31db3b9f2039ede34932a7c7005a298db4e7e535c3628baebd3b98d98c280b7375fc9c1ef9"], 0x97) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) kernel console output (not intermixed with test programs): gth. [ 132.176955][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 132.189269][ T7693] netlink: 'syz.3.409': attribute type 39 has an invalid length. [ 132.234786][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 132.340591][ T7689] bridge_slave_1: left allmulticast mode [ 132.359871][ T7689] bridge_slave_1: left promiscuous mode [ 132.381938][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.405217][ T7689] bridge_slave_0: left allmulticast mode [ 132.421081][ T7689] bridge_slave_0: left promiscuous mode [ 132.428443][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.259461][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.269332][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.898174][ T7757] netlink: 'syz.0.428': attribute type 29 has an invalid length. [ 133.936312][ T7757] netlink: 'syz.0.428': attribute type 29 has an invalid length. [ 134.038822][ T7760] syzkaller0: entered promiscuous mode [ 134.045001][ T7760] syzkaller0: entered allmulticast mode [ 134.617649][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 134.741340][ T7788] bridge2: entered allmulticast mode [ 135.098285][ T7795] netlink: 'syz.0.442': attribute type 21 has an invalid length. [ 135.133077][ T7795] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 135.248226][ T24] IPVS: starting estimator thread 0... [ 135.354558][ T7816] IPVS: using max 26 ests per chain, 62400 per kthread [ 135.512106][ T7829] netlink: 'syz.2.451': attribute type 29 has an invalid length. [ 135.529791][ T7832] netlink: 'syz.2.451': attribute type 29 has an invalid length. [ 135.693952][ T7834] tipc: Enabled bearer , priority 0 [ 135.860309][ T7839] __nla_validate_parse: 17 callbacks suppressed [ 135.860328][ T7839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 135.880814][ T7834] syzkaller0: entered promiscuous mode [ 135.905658][ T7834] syzkaller0: entered allmulticast mode [ 135.918451][ T7834] tipc: Resetting bearer [ 135.937433][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 135.955866][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 136.064186][ T7848] block nbd1: not configured, cannot reconfigure [ 136.072335][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 136.148000][ T7833] tipc: Resetting bearer [ 136.194069][ T7852] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 136.316317][ T7857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.323589][ T7857] IPv6: NLM_F_CREATE should be set when creating new route [ 136.330893][ T7857] IPv6: NLM_F_CREATE should be set when creating new route [ 136.371567][ T7857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.685754][ T7833] tipc: Disabling bearer [ 137.696642][ T7852] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.698840][ T7855] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 137.710574][ T7866] netlink: 96 bytes leftover after parsing attributes in process `syz.4.460'. [ 137.754847][ T7878] syzkaller1: entered promiscuous mode [ 137.765445][ T7878] syzkaller1: entered allmulticast mode [ 137.961820][ T7888] netlink: 120 bytes leftover after parsing attributes in process `syz.2.463'. [ 138.244088][ T7909] netlink: 'syz.2.471': attribute type 13 has an invalid length. [ 138.255296][ T7909] netlink: 'syz.2.471': attribute type 17 has an invalid length. [ 138.479596][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 138.504424][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 138.575352][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 138.592495][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 138.976941][ T7949] syzkaller1: entered promiscuous mode [ 138.982636][ T7949] syzkaller1: entered allmulticast mode [ 139.235323][ T7962] netlink: 'syz.2.487': attribute type 9 has an invalid length. [ 139.274951][ T7962] netlink: 'syz.2.487': attribute type 11 has an invalid length. [ 139.294344][ T7962] netlink: 'syz.2.487': attribute type 12 has an invalid length. [ 139.482528][ T7977] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 139.557093][ T7982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.588516][ T7982] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 139.648302][ T7987] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 139.821915][ T7994] bond5 (unregistering): Released all slaves [ 140.050032][ T8008] syzkaller1: entered promiscuous mode [ 140.066351][ T8008] syzkaller1: entered allmulticast mode [ 140.209260][ T8019] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.215673][ T8019] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.744231][ T8051] No such timeout policy "syz1" [ 140.902974][ T8070] xt_cgroup: invalid path, errno=-2 [ 141.031398][ T8077] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 141.091850][ T8077] __nla_validate_parse: 22 callbacks suppressed [ 141.091868][ T8077] netlink: 228 bytes leftover after parsing attributes in process `syz.3.518'. [ 141.312354][ T8078] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 141.329541][ T8078] netlink: 228 bytes leftover after parsing attributes in process `syz.3.518'. [ 141.374447][ T8084] netlink: 508 bytes leftover after parsing attributes in process `syz.3.518'. [ 141.739263][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 141.793314][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 141.920431][ T8115] ip6erspan0: entered allmulticast mode [ 141.943030][ T3548] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.959573][ T3548] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.981251][ T3548] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.019836][ T3548] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.124083][ T8122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.528'. [ 142.212656][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'. [ 142.714602][ T8152] netlink: 'syz.0.534': attribute type 13 has an invalid length. [ 142.722380][ T8152] netlink: 'syz.0.534': attribute type 17 has an invalid length. [ 142.898219][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 142.956993][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 143.069280][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 143.408886][ T8188] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 143.573111][ T8188] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.601446][ T8188] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 143.640459][ T8188] bond1: (slave vxcan3): making interface the new active one [ 143.688807][ T8188] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 143.724677][ T8197] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 143.751295][ T8197] bond1 (unregistering): Released all slaves [ 143.915682][ T8209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.389308][ T8224] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 144.928848][ T8242] validate_nla: 1 callbacks suppressed [ 144.928867][ T8242] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 145.000583][ T8245] xt_CONNSECMARK: invalid mode: 66 [ 145.120119][ T8237] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 145.122191][ T8241] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 145.521483][ T8278] syzkaller0: entered promiscuous mode [ 145.537374][ T8278] syzkaller0: entered allmulticast mode [ 145.679428][ T8283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.742771][ T8296] netlink: 'syz.3.570': attribute type 30 has an invalid length. [ 145.908579][ T8304] macsec1: entered promiscuous mode [ 145.921309][ T8304] syzkaller0: entered promiscuous mode [ 145.932937][ T8304] macsec1: entered allmulticast mode [ 145.954619][ T8304] syzkaller0: entered allmulticast mode [ 145.965741][ T8304] syzkaller0: left allmulticast mode [ 145.971059][ T8304] syzkaller0: left promiscuous mode [ 146.008521][ T8311] netlink: 'syz.4.573': attribute type 2 has an invalid length. [ 146.020230][ T8310] netlink: 'syz.3.574': attribute type 3 has an invalid length. [ 146.110431][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.295817][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 146.718334][ T8349] __nla_validate_parse: 15 callbacks suppressed [ 146.718353][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 146.778255][ T8349] syz.0.581 (8349) used obsolete PPPIOCDETACH ioctl [ 146.870177][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 146.883750][ T8357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 147.076254][ T8365] Bluetooth: MGMT ver 1.23 [ 147.277921][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 147.489847][ T8383] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 147.498760][ T8383] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 147.737062][ T8392] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 147.745262][ T8392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.866972][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 147.877616][ T8398] Cannot find del_set index 2 as target [ 148.025365][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 148.420653][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 148.666522][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 148.897988][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 148.965831][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.973801][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.318671][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.361165][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.589310][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 149.615784][ T8442] vlan0: left promiscuous mode [ 149.626210][ T8442] bond0: left promiscuous mode [ 149.631090][ T8442] bond_slave_0: left promiscuous mode [ 149.655186][ T8442] bond_slave_1: left promiscuous mode [ 149.674672][ T8442] team0: left promiscuous mode [ 149.684339][ T8442] team_slave_0: left promiscuous mode [ 149.690160][ T8442] team_slave_1: left promiscuous mode [ 149.715046][ T8442] dummy0: left promiscuous mode [ 149.774038][ T3548] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.809957][ T3548] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.855771][ T8460] netlink: 'syz.1.612': attribute type 29 has an invalid length. [ 149.869814][ T3548] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.879032][ T3548] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.887901][ T3548] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.898022][ T3548] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.936884][ T3548] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.957821][ T3548] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.028216][ T8476] netlink: 'syz.2.616': attribute type 10 has an invalid length. [ 150.087839][ T8478] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 150.122479][ T8476] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 150.151308][ T8476] batman_adv: batadv0: Adding interface: netdevsim0 [ 150.174456][ T8476] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.230036][ T8476] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 150.397784][ T8480] bond6: (slave bridge4): making interface the new active one [ 150.406828][ T8480] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 150.657159][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.724742][ T178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.790770][ T8493] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 150.801414][ T8492] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 150.960997][ T8500] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 151.059133][ T8504] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 151.124730][ T6043] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.571841][ T8537] syzkaller0: entered promiscuous mode [ 151.580932][ T8537] syzkaller0: entered allmulticast mode [ 151.637005][ T8537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.649329][ T8537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.740056][ T8537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.752083][ T8537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.770832][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.779631][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.897363][ T5921] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.932355][ T8537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.943817][ T8537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.001512][ T8555] tap0: tun_chr_ioctl cmd 2147767521 [ 152.032971][ T8537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.043765][ T8537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.066747][ T8558] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.255860][ T8570] __nla_validate_parse: 3 callbacks suppressed [ 152.255876][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 152.293943][ T178] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.317654][ T178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.342927][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 152.411773][ T178] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.435159][ T178] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.436782][ T8580] netlink: 596 bytes leftover after parsing attributes in process `syz.0.646'. [ 152.620748][ T178] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.634033][ T178] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.689317][ T8588] macsec1: entered promiscuous mode [ 152.696165][ T8588] macsec1: entered allmulticast mode [ 152.711392][ T8591] xt_hashlimit: size too large, truncated to 1048576 [ 152.721717][ T8588] sctp: [Deprecated]: syz.3.650 (pid 8588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.721717][ T8588] Use struct sctp_sack_info instead [ 152.738783][ T8591] xt_hashlimit: max too large, truncated to 1048576 [ 152.751467][ T8588] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 152.777453][ T8588] syzkaller1: linktype set to 778 [ 152.822971][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 152.832369][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 152.934944][ T5951] IPVS: starting estimator thread 0... [ 152.941865][ T8605] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 153.034864][ T8606] IPVS: using max 34 ests per chain, 81600 per kthread [ 153.183041][ T8619] tipc: Enabled bearer , priority 10 [ 153.298788][ T8623] netlink: 596 bytes leftover after parsing attributes in process `syz.3.658'. [ 153.543907][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 153.847082][ T8646] batman_adv: batadv0: Adding interface: vlan2 [ 153.853568][ T8646] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.887189][ T8646] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 154.031949][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 154.035711][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.663'. [ 154.072948][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 154.245068][ T8648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.273371][ T8538] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.309810][ T8538] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.522639][ T8538] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.589320][ T8538] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.769973][ T8665] team0: entered promiscuous mode [ 154.790319][ T8665] team_slave_0: entered promiscuous mode [ 154.800601][ T8674] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 154.804874][ T8665] team_slave_1: entered promiscuous mode [ 154.821975][ T8672] can: request_module (can-proto-0) failed. [ 154.836483][ T8665] team0: entered allmulticast mode [ 154.845923][ T8665] team_slave_0: entered allmulticast mode [ 154.853044][ T8665] team_slave_1: entered allmulticast mode [ 154.864945][ T8665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 154.922894][ T8538] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.933453][ T8538] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.393004][ T8690] netlink: 'syz.0.676': attribute type 18 has an invalid length. [ 155.427583][ T8685] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 155.577207][ T8697] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.589517][ T8697] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 155.638450][ T8685] bond2: (slave gretap1): making interface the new active one [ 155.648834][ T8685] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 155.725770][ T8700] macvlan2: entered promiscuous mode [ 155.738785][ T8700] macvlan2: entered allmulticast mode [ 155.760686][ T8700] bond2: entered promiscuous mode [ 155.792402][ T8700] gretap1: entered promiscuous mode [ 155.814490][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.819060][ T8700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.843967][ T8700] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 155.857237][ T8700] bond2: left promiscuous mode [ 155.862135][ T8700] gretap1: left promiscuous mode [ 155.907741][ T8701] tipc: Enabled bearer , priority 0 [ 155.927254][ T8685] syzkaller0: entered promiscuous mode [ 155.934012][ T8685] syzkaller0: entered allmulticast mode [ 156.008306][ T178] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.021264][ T178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.036098][ T8695] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.064448][ T194] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.072748][ T194] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.159411][ T8684] tipc: Resetting bearer [ 156.196600][ T8684] tipc: Disabling bearer [ 156.262247][ T194] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.281116][ T194] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.358224][ T178] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.378296][ T178] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.123314][ T8752] tipc: Enabling of bearer rejected, failed to enable media [ 157.629066][ T8772] __nla_validate_parse: 26 callbacks suppressed [ 157.629084][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'. [ 158.227433][ T8797] Cannot find map_set index 0 as target [ 158.449655][ T8802] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.706'. [ 158.512139][ T8806] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 158.534230][ T8806] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 158.544012][ T8806] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.612546][ T8812] openvswitch: netlink: IP tunnel dst address not specified [ 158.628253][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 159.040666][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 159.264943][ T8849] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.719'. [ 159.805253][ T8868] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.725'. [ 160.179067][ T8894] syzkaller0: entered promiscuous mode [ 160.198428][ T8894] syzkaller0: entered allmulticast mode [ 160.215333][ T8898] lo: entered allmulticast mode [ 160.269063][ T8898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.355666][ T8898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 160.532351][ T5907] IPVS: starting estimator thread 0... [ 160.668462][ T8911] IPVS: using max 37 ests per chain, 88800 per kthread [ 160.993261][ T8897] lo: left allmulticast mode [ 161.121800][ T8932] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 161.162639][ T8932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.203576][ T8932] syzkaller0: entered promiscuous mode [ 161.214611][ T8932] syzkaller0: entered allmulticast mode [ 161.278125][ T8932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.286765][ T8932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.330173][ T8932] bond3: (slave ip6gretap1): making interface the new active one [ 161.342524][ T8932] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.354786][ T8943] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 161.362823][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 161.375236][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 161.375462][ T8944] dummy0: entered promiscuous mode [ 161.385428][ T8943] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.393013][ T8944] macsec1: entered promiscuous mode [ 161.398750][ T8943] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.408589][ T8944] macsec1: entered allmulticast mode [ 161.411534][ T8943] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.418765][ T8944] dummy0: entered allmulticast mode [ 161.433736][ T8947] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 161.442464][ T8944] dummy0: left allmulticast mode [ 161.448541][ T8944] dummy0: left promiscuous mode [ 161.451864][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 161.481714][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 161.490861][ T8947] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.508336][ T8932] veth3: entered promiscuous mode [ 161.527139][ T8947] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.536189][ T8947] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 161.769387][ T8952] macsec0: entered allmulticast mode [ 161.789035][ T8952] veth1_macvtap: entered allmulticast mode [ 162.073099][ T8965] tipc: Enabling of bearer rejected, failed to enable media [ 162.172749][ T8965] bridge4: entered allmulticast mode [ 162.940977][ T9005] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 163.341832][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 163.974558][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.427153][ T9067] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 164.440509][ T9067] bond4 (unregistering): Released all slaves [ 164.468857][ T9069] tipc: Invalid UDP bearer configuration [ 164.468939][ T9069] tipc: Enabling of bearer rejected, failed to enable media [ 164.562731][ T9081] bridge0: entered promiscuous mode [ 164.570714][ T9081] bridge0: port 1(macvtap1) entered blocking state [ 164.619121][ T9081] bridge0: port 1(macvtap1) entered disabled state [ 164.636912][ T9081] macvtap1: entered allmulticast mode [ 164.651984][ T9081] bridge0: entered allmulticast mode [ 164.666563][ T9081] macvtap1: left allmulticast mode [ 164.671807][ T9081] bridge0: left allmulticast mode [ 164.686737][ T9081] bridge0: left promiscuous mode [ 164.857214][ T9088] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.885677][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 164.894777][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 164.929037][ T9086] bond4: entered promiscuous mode [ 164.934200][ T9086] bond4: entered allmulticast mode [ 164.940642][ T9086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.156166][ T9107] veth0_to_bridge: entered promiscuous mode [ 165.323147][ T3424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.335453][ T3424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.353798][ T9113] netlink: 88 bytes leftover after parsing attributes in process `syz.0.794'. [ 165.397640][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 165.450050][ T9120] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.637269][ T9120] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.705502][ T9120] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.767494][ T9140] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.780371][ T9136] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 165.782444][ T9140] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 165.807223][ T9120] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.966809][ T9106] veth0_to_bridge: left promiscuous mode [ 165.999427][ T3424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.044177][ T4537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.059162][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.800'. [ 166.074576][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.800'. [ 166.097573][ T137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.155852][ T3424] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.173534][ T9154] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.801'. [ 166.206881][ T9154] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.801'. [ 166.289878][ T9163] xt_TCPMSS: Only works on TCP SYN packets [ 166.435827][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 166.676149][ T9179] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 166.746968][ T9186] vlan1: entered promiscuous mode [ 166.755008][ T9186] dummy0: entered promiscuous mode [ 166.916726][ T9203] geneve3: entered promiscuous mode [ 166.976498][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.024646][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.033189][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.064600][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.350557][ T9225] bridge_slave_1: left allmulticast mode [ 167.356409][ T9225] bridge_slave_1: left promiscuous mode [ 167.362453][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.376971][ T9225] bridge_slave_0: left allmulticast mode [ 167.382988][ T9225] bridge_slave_0: left promiscuous mode [ 167.390747][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.538577][ T9219] validate_nla: 1 callbacks suppressed [ 167.538594][ T9219] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 168.343915][ T9251] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.363198][ T9251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.370705][ T9251] IPv6: NLM_F_CREATE should be set when creating new route [ 168.870366][ T9261] __nla_validate_parse: 10 callbacks suppressed [ 168.870382][ T9261] netlink: 252 bytes leftover after parsing attributes in process `syz.0.826'. [ 168.919769][ T9263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.938636][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.828'. [ 169.233306][ T5851] udevd[5851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 170.567158][ T9263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.703926][ T9263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.836904][ T9263] batman_adv: batadv0: Removing interface: netdevsim0 [ 170.846957][ T9263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.877029][ T9297] netlink: 96 bytes leftover after parsing attributes in process `syz.0.834'. [ 170.977332][ T9297] netlink: 96 bytes leftover after parsing attributes in process `syz.0.834'. [ 171.120553][ T3506] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.171904][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.190461][ T3548] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.264580][ T178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.322139][ T3506] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.392119][ T9317] syzkaller0: entered promiscuous mode [ 171.406771][ T9317] syzkaller0: entered allmulticast mode [ 171.450180][ T9322] netlink: 84 bytes leftover after parsing attributes in process `syz.0.839'. [ 171.530333][ T9330] netlink: 'syz.2.842': attribute type 142 has an invalid length. [ 171.553380][ T9322] veth0_to_bridge: entered promiscuous mode [ 171.614541][ T9335] FAULT_INJECTION: forcing a failure. [ 171.614541][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.638810][ T9332] netlink: 84 bytes leftover after parsing attributes in process `syz.0.839'. [ 171.666584][ T9335] CPU: 0 UID: 0 PID: 9335 Comm: syz.1.843 Not tainted syzkaller #0 PREEMPT(full) [ 171.666611][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.666630][ T9335] Call Trace: [ 171.666638][ T9335] [ 171.666648][ T9335] dump_stack_lvl+0xe8/0x150 [ 171.666693][ T9335] should_fail_ex+0x414/0x560 [ 171.666727][ T9335] _copy_to_iter+0x1de/0x1790 [ 171.666747][ T9335] ? __mutex_trylock_common+0x153/0x260 [ 171.666773][ T9335] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.666804][ T9335] ? __pfx__copy_to_iter+0x10/0x10 [ 171.666824][ T9335] ? __mutex_lock+0x335/0x1350 [ 171.666844][ T9335] ? is_bpf_text_address+0x292/0x2b0 [ 171.666872][ T9335] ? is_bpf_text_address+0x26/0x2b0 [ 171.666899][ T9335] ? kernel_text_address+0xa5/0xe0 [ 171.666944][ T9335] __skb_datagram_iter+0xf8/0x990 [ 171.666972][ T9335] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 171.666997][ T9335] ? do_raw_spin_lock+0x121/0x290 [ 171.667027][ T9335] skb_copy_datagram_iter+0xb5/0x210 [ 171.667060][ T9335] unix_stream_read_actor+0x6c/0xb0 [ 171.667089][ T9335] unix_stream_read_generic+0xa52/0x2340 [ 171.667145][ T9335] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 171.667196][ T9335] __unix_stream_recvmsg+0xe6/0x140 [ 171.667222][ T9335] ? lockdep_hardirqs_on+0x7b/0x110 [ 171.667248][ T9335] ? __pfx___unix_stream_recvmsg+0x10/0x10 [ 171.667275][ T9335] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 171.667311][ T9335] ? queue_rcu_work+0xe7/0x150 [ 171.667331][ T9335] ? sk_psock_drop+0x310/0x3f0 [ 171.667365][ T9335] unix_bpf_recvmsg+0xc1a/0xd90 [ 171.667405][ T9335] ? __pfx_unix_bpf_recvmsg+0x10/0x10 [ 171.667427][ T9335] ? __pfx_woken_wake_function+0x10/0x10 [ 171.667467][ T9335] unix_stream_recvmsg+0x144/0x1b0 [ 171.667495][ T9335] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 171.667511][ T9335] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 171.667540][ T9335] ? __lock_acquire+0x6b6/0x2cf0 [ 171.667556][ T9335] ? aa_sock_msg_perm+0xda/0x1b0 [ 171.667580][ T9335] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 171.667595][ T9335] ? security_socket_recvmsg+0x7e/0x2e0 [ 171.667632][ T9335] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 171.667648][ T9335] sock_recvmsg+0x22c/0x270 [ 171.667679][ T9335] ____sys_recvmsg+0x1c9/0x460 [ 171.667715][ T9335] ? __pfx_____sys_recvmsg+0x10/0x10 [ 171.667751][ T9335] ? import_iovec+0x74/0xa0 [ 171.667776][ T9335] ___sys_recvmsg+0x1b5/0x510 [ 171.667797][ T9335] ? get_pid_task+0x20/0x1f0 [ 171.667825][ T9335] ? __pfx____sys_recvmsg+0x10/0x10 [ 171.667852][ T9335] ? __fget_files+0x2a/0x420 [ 171.667893][ T9335] ? __fget_files+0x3a0/0x420 [ 171.667929][ T9335] __x64_sys_recvmsg+0x198/0x260 [ 171.667956][ T9335] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 171.667986][ T9335] ? __pfx_ksys_write+0x10/0x10 [ 171.668016][ T9335] do_syscall_64+0xec/0xf80 [ 171.668036][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.668054][ T9335] ? trace_irq_disable+0x37/0x100 [ 171.668078][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 171.668101][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.668119][ T9335] RIP: 0033:0x7f7c9c98f749 [ 171.668145][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.668161][ T9335] RSP: 002b:00007f7c9abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 171.668185][ T9335] RAX: ffffffffffffffda RBX: 00007f7c9cbe5fa0 RCX: 00007f7c9c98f749 [ 171.668199][ T9335] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 171.668211][ T9335] RBP: 00007f7c9abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.668223][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.668234][ T9335] R13: 00007f7c9cbe6038 R14: 00007f7c9cbe5fa0 R15: 00007ffc0daca7c8 [ 171.668264][ T9335] [ 172.077848][ T9346] veth0_to_bridge: left promiscuous mode [ 172.429753][ T9367] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 172.437677][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.850'. [ 172.463072][ T9367] bond0: (slave dummy0): Releasing backup interface [ 172.534247][ T9367] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 173.895062][ T9408] FAULT_INJECTION: forcing a failure. [ 173.895062][ T9408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.953480][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT(full) [ 173.953506][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.953515][ T9408] Call Trace: [ 173.953522][ T9408] [ 173.953531][ T9408] dump_stack_lvl+0xe8/0x150 [ 173.953561][ T9408] should_fail_ex+0x414/0x560 [ 173.953594][ T9408] _copy_to_user+0x31/0xb0 [ 173.953619][ T9408] simple_read_from_buffer+0xe1/0x170 [ 173.953648][ T9408] proc_fail_nth_read+0x1b3/0x220 [ 173.953672][ T9408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.953695][ T9408] ? rw_verify_area+0x2a6/0x4d0 [ 173.953722][ T9408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.953743][ T9408] vfs_read+0x200/0xa30 [ 173.953767][ T9408] ? fdget_pos+0x247/0x320 [ 173.953794][ T9408] ? __pfx___mutex_lock+0x10/0x10 [ 173.953816][ T9408] ? __pfx_vfs_read+0x10/0x10 [ 173.953834][ T9408] ? __fget_files+0x2a/0x420 [ 173.953859][ T9408] ? __fget_files+0x3a0/0x420 [ 173.953879][ T9408] ? __fget_files+0x2a/0x420 [ 173.953909][ T9408] ksys_read+0x145/0x250 [ 173.953928][ T9408] ? __pfx_ksys_read+0x10/0x10 [ 173.953953][ T9408] do_syscall_64+0xec/0xf80 [ 173.953971][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.953986][ T9408] ? trace_irq_disable+0x37/0x100 [ 173.954007][ T9408] ? clear_bhb_loop+0x60/0xb0 [ 173.954028][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.954044][ T9408] RIP: 0033:0x7f6d0e38e15c [ 173.954060][ T9408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.954074][ T9408] RSP: 002b:00007f6d0f214030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.954092][ T9408] RAX: ffffffffffffffda RBX: 00007f6d0e5e5fa0 RCX: 00007f6d0e38e15c [ 173.954106][ T9408] RDX: 000000000000000f RSI: 00007f6d0f2140a0 RDI: 0000000000000006 [ 173.954116][ T9408] RBP: 00007f6d0f214090 R08: 0000000000000000 R09: 0000000000000000 [ 173.954126][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.954136][ T9408] R13: 00007f6d0e5e6038 R14: 00007f6d0e5e5fa0 R15: 00007ffdcc9b1b48 [ 173.954165][ T9408] [ 174.248640][ T9423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'. [ 174.534599][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'. [ 174.578417][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'. [ 175.127168][ T9457] tipc: Enabled bearer , priority 0 [ 175.134180][ T9458] syzkaller0: entered promiscuous mode [ 175.160913][ T9458] syzkaller0: entered allmulticast mode [ 175.476678][ T9456] tipc: Resetting bearer [ 175.608362][ T9456] tipc: Disabling bearer [ 176.047547][ T9491] syzkaller0: entered promiscuous mode [ 176.053597][ T9491] syzkaller0: entered allmulticast mode [ 176.322814][ T9500] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 176.378580][ T9500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.390522][ T9505] bond5: option tlb_dynamic_lb: unable to set because the bond device is up [ 176.433163][ T9500] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 176.463668][ T9500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.883'. [ 176.656751][ T9517] netlink: 'syz.4.886': attribute type 8 has an invalid length. [ 176.782528][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 176.861541][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 177.227920][ T9545] syzkaller0: entered promiscuous mode [ 177.233506][ T9545] syzkaller0: entered allmulticast mode [ 177.267443][ T9541] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 177.288680][ T9534] tipc: Enabled bearer , priority 0 [ 177.314866][ T9533] tipc: Resetting bearer [ 177.426198][ T9559] netlink: 'syz.3.897': attribute type 39 has an invalid length. [ 177.475462][ T9533] tipc: Disabling bearer [ 178.085193][ T9587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 178.392851][ T9607] netlink: 'syz.0.910': attribute type 23 has an invalid length. [ 178.417169][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 178.548655][ T9607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.576771][ T9607] netlink: 'syz.0.910': attribute type 23 has an invalid length. [ 178.781171][ T9628] netlink: 616 bytes leftover after parsing attributes in process `syz.4.916'. [ 179.406121][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 179.908584][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.974487][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.237379][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 180.274646][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 180.483130][ T9716] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 180.534476][ T9716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.658094][ T9731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.732607][ T9731] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 180.767176][ T9731] gretap2: entered allmulticast mode [ 180.791299][ T9738] netlink: 'syz.3.949': attribute type 9 has an invalid length. [ 180.799338][ T9738] netlink: 'syz.3.949': attribute type 11 has an invalid length. [ 180.812514][ T9738] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.949'. [ 180.826359][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 180.862415][ T9741] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 181.822673][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 182.063613][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 182.672407][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'. [ 182.742122][ T9839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.972'. [ 182.755126][ T9835] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 182.818431][ T9835] bond7 (unregistering): Released all slaves [ 183.097159][ T9849] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 183.198744][ T9852] Cannot find add_set index 0 as target [ 184.814228][ T9895] delete_channel: no stack [ 184.994385][ T9905] __nla_validate_parse: 3 callbacks suppressed [ 184.994403][ T9905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.985'. [ 185.040489][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 185.107641][ T9911] sctp: [Deprecated]: syz.0.986 (pid 9911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.107641][ T9911] Use struct sctp_sack_info instead [ 185.208637][ T9913] netlink: 44 bytes leftover after parsing attributes in process `syz.4.987'. [ 185.357112][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 185.702815][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 185.878758][ T9947] validate_nla: 1 callbacks suppressed [ 185.878770][ T9947] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 185.898263][ T9947] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 185.920741][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 186.051343][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.999'. [ 186.065422][ T9955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.093339][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'. [ 186.138127][ T9960] netlink: 'syz.3.1002': attribute type 13 has an invalid length. [ 186.150792][ T9960] netlink: 'syz.3.1002': attribute type 17 has an invalid length. [ 186.330121][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.341174][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.356210][ T9960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.471595][ T9979] netlink: 'syz.2.1007': attribute type 13 has an invalid length. [ 186.802700][ T9979] gretap0: refused to change device tx_queue_len [ 186.809366][ T9979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.448898][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 187.812142][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 187.821297][T10044] netlink: 'syz.4.1024': attribute type 5 has an invalid length. [ 187.967054][T10060] tipc: Enabled bearer , priority 0 [ 188.041278][T10060] tipc: Disabling bearer [ 188.286521][T10080] netlink: 'syz.1.1032': attribute type 3 has an invalid length. [ 188.308013][T10080] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 188.323712][T10080] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 188.753382][T10107] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 189.343707][T10141] No such timeout policy "syz1" [ 189.401723][T10142] openvswitch: netlink: Flow key attr not present in new flow. [ 190.000316][T10173] syzkaller0: entered promiscuous mode [ 190.006226][T10173] syzkaller0: entered allmulticast mode [ 190.295334][T10180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.307616][T10181] veth0: entered promiscuous mode [ 190.319054][T10181] __nla_validate_parse: 9 callbacks suppressed [ 190.319072][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 190.345487][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 190.345546][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 190.587739][ T24] IPVS: starting estimator thread 0... [ 190.689341][T10194] IPVS: using max 35 ests per chain, 84000 per kthread [ 190.753083][T10197] syzkaller0: entered promiscuous mode [ 190.783426][T10197] syzkaller0: entered allmulticast mode [ 190.928247][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 190.945062][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 191.088961][T10217] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 191.109174][T10217] x_tables: duplicate underflow at hook 1 [ 191.156814][T10219] bond6: entered promiscuous mode [ 191.161894][T10219] bond6: entered allmulticast mode [ 191.171041][T10219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.227805][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 191.292624][T10237] ip6tnl4: entered allmulticast mode [ 191.316516][T10233] syzkaller0: entered promiscuous mode [ 191.322039][T10233] syzkaller0: entered allmulticast mode [ 191.362833][T10227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.703087][T10246] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1080'. [ 191.754176][T10255] : renamed from veth0_to_bond (while UP) [ 191.788105][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 191.798590][T10255] syzkaller0: entered promiscuous mode [ 191.804089][T10255] syzkaller0: entered allmulticast mode [ 191.828139][T10257] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 191.862279][T10260] netlink: 'syz.0.1082': attribute type 9 has an invalid length. [ 191.870402][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 191.887327][T10260] hsr0: entered promiscuous mode [ 191.892788][T10260] macvlan2: entered promiscuous mode [ 191.898998][T10260] macvlan2: entered allmulticast mode [ 191.904561][T10260] hsr0: entered allmulticast mode [ 191.909708][T10260] hsr_slave_0: entered allmulticast mode [ 191.915417][T10260] hsr_slave_1: entered allmulticast mode [ 191.928033][T10261] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 191.954955][T10257] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.967178][T10257] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 192.186806][T10276] netlink: 'syz.1.1089': attribute type 21 has an invalid length. [ 192.203348][T10276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1089'. [ 193.018483][T10336] netlink: 'syz.2.1103': attribute type 5 has an invalid length. [ 193.067775][T10336] geneve2: entered promiscuous mode [ 193.073023][T10336] geneve2: entered allmulticast mode [ 193.082500][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 193.130539][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 193.146336][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 193.203034][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 193.367053][T10358] Can't find ip_set type hash  [ 193.736446][T10386] bond_slave_0: entered promiscuous mode [ 193.742618][T10386] bond_slave_1: entered promiscuous mode [ 193.749373][T10386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.762484][T10386] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 193.778868][T10390] dvmrp0: entered allmulticast mode [ 193.875096][T10392] netlink: 'syz.4.1120': attribute type 10 has an invalid length. [ 193.897682][T10392] dummy0: entered promiscuous mode [ 193.903018][T10392] dummy0: entered allmulticast mode [ 193.909781][T10392] team0: Failed to send options change via netlink (err -105) [ 193.917890][T10392] team0: Port device dummy0 added [ 193.926596][T10392] netlink: 'syz.4.1120': attribute type 10 has an invalid length. [ 193.941036][T10392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.943907][T10396] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 193.956677][T10392] dummy0: left promiscuous mode [ 193.963066][T10392] dummy0: left allmulticast mode [ 193.969216][T10392] team0: Failed to send options change via netlink (err -105) [ 193.978655][T10392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.990656][T10392] team0: Port device dummy0 removed [ 193.999776][T10392] dummy0: entered promiscuous mode [ 194.009626][T10392] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 194.009824][T10398] netlink: 'syz.2.1121': attribute type 16 has an invalid length. [ 194.028361][T10398] netlink: 'syz.2.1121': attribute type 17 has an invalid length. [ 194.102260][T10396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.154047][T10396] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 194.206966][T10407] IPv6: NLM_F_REPLACE set, but no existing node found! [ 194.418212][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.425881][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.448661][T10418] netlink: 'syz.4.1127': attribute type 39 has an invalid length. [ 194.706765][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.772013][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.294015][T10418] veth0_macvtap: left promiscuous mode [ 195.373575][T10420] dummy0: entered promiscuous mode [ 195.389477][T10420] dummy0: left promiscuous mode [ 195.415773][ T137] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.425892][ T137] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 195.478048][ T137] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.503466][ T137] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 195.558450][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.577698][T10432] xt_hashlimit: max too large, truncated to 1048576 [ 195.578172][ T60] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 195.584592][T10431] xt_hashlimit: max too large, truncated to 1048576 [ 195.623730][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.659193][ T60] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 195.729209][T10428] bond8 (unregistering): Released all slaves [ 195.791424][T10453] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 195.999772][T10460] __nla_validate_parse: 8 callbacks suppressed [ 195.999784][T10460] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1139'. [ 210.057791][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.137676][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 212.138254][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 212.143762][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 256.137497][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.494552][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.577536][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.577298][T10475] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1144'. [ 319.610015][T10475] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1144'. [ 319.659653][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 319.952097][T10511] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1150'. [ 319.976029][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 319.985570][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 319.998185][T10514] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 320.011813][T10514] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 320.153345][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 320.354022][T10545] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1161'. [ 320.435624][T10551] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1162'. [ 320.457268][T10551] nbd: illegal input index 65508 [ 320.851356][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 321.618455][T10622] netlink: 'syz.3.1180': attribute type 11 has an invalid length. [ 321.982126][T10642] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.993162][T10641] syz_tun: entered allmulticast mode [ 322.000433][T10641] pimreg: left allmulticast mode [ 322.061152][T10646] siw: device registration error -23 [ 322.077800][T10646] team0: left promiscuous mode [ 322.083139][T10646] team_slave_0: left promiscuous mode [ 322.089727][T10646] team_slave_1: left promiscuous mode [ 322.097717][T10646] team0: left allmulticast mode [ 322.102629][T10646] team_slave_0: left allmulticast mode [ 322.111085][T10646] team_slave_1: left allmulticast mode [ 322.125202][T10646] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.145274][T10646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.819765][T10641] syz_tun: left allmulticast mode [ 323.866970][T10656] syzkaller1: entered promiscuous mode [ 323.885673][T10656] syzkaller1: entered allmulticast mode [ 324.269919][T10684] openvswitch: netlink: Message has 8 unknown bytes. [ 324.304835][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.438531][T10691] bridge5: port 1(veth5) entered blocking state [ 324.469276][T10691] bridge5: port 1(veth5) entered disabled state [ 324.537527][T10691] veth5: entered allmulticast mode [ 324.578028][T10691] veth5: entered promiscuous mode [ 324.592331][T10696] tipc: Enabled bearer , priority 10 [ 324.637549][T10697] bridge5: port 2(veth7) entered blocking state [ 324.638410][ T24] IPVS: starting estimator thread 0... [ 324.644826][T10697] bridge5: port 2(veth7) entered disabled state [ 324.652513][T10701] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 324.657274][T10697] veth7: entered allmulticast mode [ 324.683016][T10697] veth7: entered promiscuous mode [ 324.754998][T10702] IPVS: using max 26 ests per chain, 62400 per kthread [ 325.704999][ T24] tipc: Node number set to 3736706476 [ 326.228949][T10741] xt_policy: output policy not valid in PREROUTING and INPUT [ 326.407953][T10737] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 326.426966][T10737] bond8 (unregistering): Released all slaves [ 326.477386][T10734] Set syz0 is full, maxelem 0 reached [ 326.752339][T10747] __nla_validate_parse: 14 callbacks suppressed [ 326.752358][T10747] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1211'. [ 326.981825][T10753] trusted_key: syz.3.1212 sent an empty control message without MSG_MORE. [ 327.150834][T10763] : renamed from wg2 [ 327.891763][T10780] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 328.090160][T10780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.116619][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 328.144786][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 328.165957][T10785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.175500][T10785] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 328.189560][T10785] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 328.246039][T10787] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 328.266431][T10787] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 328.444246][T10674] Set syz1 is full, maxelem 65536 reached [ 329.987677][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 332.124452][T10871] netlink: 'syz.2.1247': attribute type 3 has an invalid length. [ 332.135024][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 332.223609][ T30] audit: type=1800 audit(1768060505.592:2): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1239" name="cgroup.controllers" dev="tmpfs" ino=1285 res=0 errno=0 [ 332.455766][T10890] atomic_op ffff888028470198 conn xmit_atomic 0000000000000000 [ 332.481943][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1250'. [ 332.491376][T10890] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1250'. [ 332.561415][T10894] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 332.569097][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 332.620025][T10895] x_tables: duplicate underflow at hook 1 [ 332.997847][T10914] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 333.965889][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1258'. [ 334.111101][T10954] ip6tnl0: entered allmulticast mode [ 334.255177][T10961] xt_recent: Unsupported userspace flags (000000a3) [ 334.492359][T10974] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 334.557742][T10974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.629453][T10974] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 334.793883][T10981] netlink: 'syz.2.1267': attribute type 21 has an invalid length. [ 334.812969][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1267'. [ 334.833290][T10981] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 335.045001][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 335.413386][T11008] syzkaller0: entered promiscuous mode [ 335.445000][T11008] syzkaller0: entered allmulticast mode [ 335.591124][T11019] can: request_module (can-proto-0) failed. [ 335.608124][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.617740][T11021] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 335.630552][T11021] bond0: (slave gre0): Error -95 calling set_mac_address [ 335.957107][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1282'. [ 336.129944][T11049] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.188712][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1287'. [ 336.261275][T11049] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.416577][T11049] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.469843][T11060] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 336.600486][T11065] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 336.638200][T11065] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 336.668820][T11049] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.898661][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.910331][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.959211][T11088] bond4: option lp_interval: invalid value (0) [ 336.966289][T11088] bond4: option lp_interval: allowed values 1 - 2147483647 [ 336.976354][T11088] bond4 (unregistering): Released all slaves [ 337.024163][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.075641][ T137] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.245404][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 337.266754][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 337.297376][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 337.335288][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 337.345014][T11118] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 337.544079][T11128] syzkaller1: entered promiscuous mode [ 337.589760][T11128] syzkaller1: entered allmulticast mode [ 337.682576][T11143] batadv1: entered promiscuous mode [ 337.831453][T11157] netlink: 'syz.1.1313': attribute type 2 has an invalid length. [ 337.897290][T11157] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 337.934701][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 338.050753][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 338.364528][T11185] tipc: Enabling of bearer rejected, failed to enable media [ 338.449734][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 338.482118][T11185] bridge4: entered allmulticast mode [ 338.618128][T11194] netlink: 'syz.0.1324': attribute type 11 has an invalid length. [ 338.626704][T11194] netlink: 'syz.0.1324': attribute type 23 has an invalid length. [ 338.641523][T11194] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1324'. [ 338.765843][T11199] netlink: 'syz.1.1322': attribute type 16 has an invalid length. [ 338.773952][T11199] netlink: 'syz.1.1322': attribute type 17 has an invalid length. [ 339.067698][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1316'. [ 339.126332][T11201] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 339.139020][T11197] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.177617][T11197] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.392434][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1328'. [ 339.425282][T11195] syzkaller0: entered promiscuous mode [ 339.435392][T11195] syzkaller0: entered allmulticast mode [ 339.480562][T11222] openvswitch: netlink: IP tunnel TTL not specified. [ 339.494934][T11199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.537831][T11227] netlink: 'syz.0.1332': attribute type 21 has an invalid length. [ 339.549266][T11228] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 339.577406][T11201] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.605869][T11203] bond8: (slave veth1): Enslaving as an active interface with a down link [ 341.184488][T11223] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 341.314893][T11239] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 341.402297][T11245] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 342.102905][T11282] syzkaller1: entered promiscuous mode [ 342.119183][T11282] syzkaller1: entered allmulticast mode [ 342.166521][T11282] syzkaller1: left promiscuous mode [ 342.172792][T11282] syzkaller1: left allmulticast mode [ 342.186099][T11285] netlink: 'syz.3.1345': attribute type 9 has an invalid length. [ 342.545239][T11308] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 342.631848][T11314] __nla_validate_parse: 8 callbacks suppressed [ 342.631865][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 342.680776][T11317] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1352'. [ 342.681211][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1351'. [ 342.702989][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 343.000916][T11322] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1355'. [ 343.147374][T11332] batadv1: entered promiscuous mode [ 343.592337][T11347] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1362'. [ 344.451217][T11364] netlink: zone id is out of range [ 344.467514][T11363] netlink: zone id is out of range [ 344.484309][T11363] netlink: zone id is out of range [ 344.491867][T11364] netlink: zone id is out of range [ 344.503522][T11363] netlink: zone id is out of range [ 344.515379][T11364] netlink: zone id is out of range [ 344.520794][T11363] netlink: zone id is out of range [ 344.524965][T11364] netlink: zone id is out of range [ 344.526937][T11363] netlink: get zone limit has 4 unknown bytes [ 344.549601][T11364] netlink: get zone limit has 4 unknown bytes [ 344.629628][T11376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'. [ 344.860059][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 344.959664][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1375'. [ 345.031607][T11393] netlink: 'syz.2.1376': attribute type 13 has an invalid length. [ 345.197094][T11402] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 345.210104][T11402] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1379'. [ 345.553504][T11410] af_packet: tpacket_rcv: packet too big, clamped from 65003 to 3966. macoff=82 [ 346.071008][T11437] nbd: illegal input index 65508 [ 346.086969][T11437] nbd: must specify a size in bytes for the device [ 347.808829][T11496] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 348.098592][T11512] geneve2: entered promiscuous mode [ 348.118240][T11518] netlink: 'syz.2.1413': attribute type 4 has an invalid length. [ 348.181045][T11520] sctp: [Deprecated]: syz.1.1412 (pid 11520) Use of int in max_burst socket option deprecated. [ 348.181045][T11520] Use struct sctp_assoc_value instead [ 348.226511][T11519] sctp: [Deprecated]: syz.1.1412 (pid 11519) Use of int in max_burst socket option. [ 348.226511][T11519] Use struct sctp_assoc_value instead [ 348.511630][T11522] vlan2: entered promiscuous mode [ 348.529887][T11522] bond0: entered promiscuous mode [ 348.544373][T11522] bond_slave_0: entered promiscuous mode [ 348.559323][T11522] bond_slave_1: entered promiscuous mode [ 348.575803][T11522] vlan2: entered allmulticast mode [ 348.588765][T11522] bond0: entered allmulticast mode [ 348.601709][T11522] bond_slave_0: entered allmulticast mode [ 348.618148][T11522] bond_slave_1: entered allmulticast mode [ 349.187386][T11537] __nla_validate_parse: 4 callbacks suppressed [ 349.187405][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1414'. [ 349.386164][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 349.453330][T11544] vlan0: entered promiscuous mode [ 349.459726][T11544] bond0: entered promiscuous mode [ 349.464941][T11544] bond_slave_0: entered promiscuous mode [ 349.470953][T11544] bond_slave_1: entered promiscuous mode [ 349.477182][T11544] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 349.484684][T11544] bridge0: entered promiscuous mode [ 349.490277][T11544] batadv0: entered promiscuous mode [ 349.582602][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1417'. [ 350.161509][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 350.198213][T11568] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1423'. [ 350.240342][T11568] wg1: entered promiscuous mode [ 350.254879][T11568] wg1: entered allmulticast mode [ 350.322133][T11575] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1427'. [ 351.409588][T11614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.734735][T11620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1432'. [ 352.145344][T11645] syz.4.1440 uses old SIOCAX25GETINFO [ 352.244379][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 352.287575][T11649] netlink: 'syz.3.1441': attribute type 13 has an invalid length. [ 352.385057][ T893] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.453062][T11655] syzkaller0: Caught tx_queue_len zero misconfig [ 352.544087][T11649] syzkaller0: left promiscuous mode [ 352.555701][T11649] syzkaller0: left allmulticast mode [ 352.684447][ T6137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.827952][T11685] netlink: 'syz.3.1449': attribute type 29 has an invalid length. [ 352.847015][T11687] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1449'. [ 353.117796][T11696] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 353.197637][T11699] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 353.537093][T11707] geneve3: entered promiscuous mode [ 353.542352][T11707] geneve3: entered allmulticast mode [ 353.751080][T11714] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 354.201077][ T30] audit: type=1800 audit(1768060527.552:3): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1459" name="memory.events" dev="tmpfs" ino=1487 res=0 errno=0 [ 354.879480][T11751] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1468'. [ 354.935958][T11751] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1468'. [ 354.955474][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 354.975362][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 355.022509][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 355.250049][T11773] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1473'. [ 355.261613][T11773] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1473'. [ 355.271409][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 355.293290][T11773] tipc: Enabled bearer , priority 0 [ 355.303349][T11773] syzkaller0: entered promiscuous mode [ 355.314752][T11773] syzkaller0: entered allmulticast mode [ 355.373328][T11777] netlink: 'syz.1.1475': attribute type 12 has an invalid length. [ 355.397664][T11777] IPv6: NLM_F_REPLACE set, but no existing node found! [ 355.397961][T11773] tipc: Resetting bearer [ 355.420488][T11776] netlink: 'syz.0.1474': attribute type 146 has an invalid length. [ 355.429283][T11776] netlink: 'syz.0.1474': attribute type 201 has an invalid length. [ 355.476894][T11772] tipc: Resetting bearer [ 355.536638][T11772] tipc: Disabling bearer [ 355.568443][T11781] pim6reg1: entered promiscuous mode [ 355.574042][T11781] pim6reg1: entered allmulticast mode [ 355.679424][T11780] delete_channel: no stack [ 355.789311][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 355.815303][T11793] chnl_net:caif_netlink_parms(): no params data found [ 355.876999][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 355.985258][T11805] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 355.998148][T11805] bond7 (unregistering): Released all slaves [ 356.019507][T11811] xt_hashlimit: invalid rate [ 356.035510][T11812] xt_hashlimit: invalid rate [ 356.113125][T11814] bond0: option min_links: invalid value (18446744071830523904) [ 356.121882][T11814] bond0: option min_links: allowed values 0 - 2147483647 [ 356.450689][T11832] netlink: 'syz.3.1493': attribute type 29 has an invalid length. [ 357.328624][ T5848] Bluetooth: hci4: link tx timeout [ 357.336209][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 359.278569][T11930] net_ratelimit: 1 callbacks suppressed [ 359.278590][T11930] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 359.414308][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 359.584492][T11946] netlink: 'syz.4.1515': attribute type 10 has an invalid length. [ 359.645200][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.670307][T11946] batadv0: entered promiscuous mode [ 359.677324][T11946] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 359.851149][T11953] A link change request failed with some changes committed already. Interface gre5 may have been left with an inconsistent configuration, please check. [ 360.366320][T11991] netlink: 'syz.1.1530': attribute type 11 has an invalid length. [ 360.550645][T12005] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20002 [ 360.562928][T12006] __nla_validate_parse: 10 callbacks suppressed [ 360.562950][T12006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 360.618651][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 360.688803][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 360.760498][T12023] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 360.991216][T12046] netlink: zone id is out of range [ 361.032918][T12046] netlink: zone id is out of range [ 361.054532][T12046] netlink: zone id is out of range [ 361.086344][T12046] netlink: zone id is out of range [ 361.101365][T12046] netlink: zone id is out of range [ 361.116050][T12046] netlink: zone id is out of range [ 361.131450][T12046] netlink: zone id is out of range [ 361.159814][T12046] netlink: zone id is out of range [ 361.287860][T12059] tipc: Enabling of bearer rejected, failed to enable media [ 361.298980][T12060] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1544'. [ 361.309764][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1544'. [ 361.374123][T12066] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 361.422093][T12066] bond0: (slave dummy0): Releasing backup interface [ 361.451841][T12066] dummy0: left promiscuous mode [ 361.495710][T12066] bond0: (slave batadv0): Releasing backup interface [ 361.517601][T12074] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1550'. [ 361.523386][T12066] batadv0: left promiscuous mode [ 361.597545][T12066] bond0: (slave bond_slave_0): Releasing backup interface [ 361.623265][T12066] bond_slave_0: left promiscuous mode [ 361.644159][T12066] bond0: (slave bond_slave_1): Releasing backup interface [ 361.658382][T12066] bond_slave_1: left promiscuous mode [ 361.686331][T12066] team0: Port device team_slave_0 removed [ 361.707940][T12066] team0: Port device team_slave_1 removed [ 361.715262][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.728640][T12066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.743013][T12066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.751675][T12066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.854821][ T12] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 361.957322][ T60] bond1: (slave macvlan2): link status definitely down, disabling slave [ 362.002512][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 362.113798][T12098] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1557'. [ 362.241279][T12101] ip6gre1: entered promiscuous mode [ 362.463142][T12105] netlink: 'syz.0.1560': attribute type 13 has an invalid length. [ 362.578911][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 362.823057][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 363.080837][T12138] tipc: Started in network mode [ 363.090110][T12138] tipc: Node identity 0000000000000000005885d6a76549cc, cluster identity 4711 [ 363.099241][T12138] tipc: Enabling of bearer rejected, failed to enable media [ 363.181053][T12144] syzkaller1: entered promiscuous mode [ 363.194358][T12144] syzkaller1: entered allmulticast mode [ 363.223318][T12148] netlink: 'syz.3.1573': attribute type 29 has an invalid length. [ 363.252188][T12148] netlink: 'syz.3.1573': attribute type 29 has an invalid length. [ 363.647651][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.668237][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.800214][T12181] IPVS: Scheduler module ip_vs_ not found [ 363.806994][T12181] IPVS: length: 24 != 12792 [ 364.148960][T12202] netlink: 'syz.2.1588': attribute type 21 has an invalid length. [ 364.157538][T12202] netlink: 'syz.2.1588': attribute type 22 has an invalid length. [ 364.167125][T12202] netlink: 'syz.2.1588': attribute type 23 has an invalid length. [ 364.175827][T12202] netlink: 'syz.2.1588': attribute type 25 has an invalid length. [ 364.183779][T12202] netlink: 'syz.2.1588': attribute type 26 has an invalid length. [ 364.326517][T12208] team0: Port device dummy0 added [ 364.369907][T12208] team0: Port device dummy0 removed [ 364.402376][T12208] dummy0: entered promiscuous mode [ 364.435708][T12208] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 364.574549][ T13] net_ratelimit: 4 callbacks suppressed [ 364.574569][ T13] bond1: (slave macvlan2): link status up again after 0 ms [ 364.648993][ T6362] bond1: (slave macvlan2): link status up again after 0 ms [ 364.674532][ T60] bond1: (slave macvlan2): link status up again after 0 ms [ 364.687804][ T60] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.009762][T12232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.074383][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.217307][T12236] bond0: left promiscuous mode [ 365.222248][T12236] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 365.299370][T12236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.364450][ T6362] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.494689][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.519453][T12250] validate_nla: 2 callbacks suppressed [ 365.519472][T12250] netlink: 'syz.4.1602': attribute type 10 has an invalid length. [ 365.563204][T12250] bond0: (slave dummy0): Releasing backup interface [ 365.617027][T12250] dummy0: left promiscuous mode [ 365.635745][T12250] team0: Port device dummy0 added [ 365.637736][T12252] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 365.652803][ T1156] bond1: (slave macvlan2): failed to get link speed/duplex [ 365.738027][T12259] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.774910][T12259] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.813252][T12259] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.004882][ T4567] bond1: (slave macvlan2): link status definitely down, disabling slave [ 366.068134][T12259] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.137341][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 366.196938][T12259] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.300425][T12259] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.447771][T12259] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.475684][T12259] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.507835][T12259] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.630432][T12259] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.674431][T12259] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.684557][T12259] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.907079][T12287] __nla_validate_parse: 25 callbacks suppressed [ 366.907099][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 366.985230][ T4567] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.988187][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 366.999322][ T4567] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.006940][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'. [ 367.013463][ T4567] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.053918][ T4567] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.067886][ T4567] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.077708][ T4567] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.108802][ T4567] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.122589][ T4567] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.132520][ T4567] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.182861][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.191863][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.217697][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.286824][T12296] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1611'. [ 367.533822][T12304] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1614'. [ 367.575225][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1615'. [ 367.613547][T12308] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 367.649592][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1615'. [ 367.772194][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 368.115324][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 368.115324][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 368.216103][T12334] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 368.254562][T12321] Bluetooth: MGMT ver 1.23 [ 368.276204][T12335] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 368.355895][T12334] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.574577][T12349] pim6reg1: entered promiscuous mode [ 368.583142][T12349] pim6reg1: entered allmulticast mode [ 369.319279][T12344] delete_channel: no stack [ 369.512990][T12400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.534820][T12400] bond_slave_0: left promiscuous mode [ 369.548835][T12400] bond_slave_0: left allmulticast mode [ 369.565561][T12400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.580732][T12400] bond_slave_1: left promiscuous mode [ 369.591104][T12400] bond_slave_1: left allmulticast mode [ 369.597690][T12400] bond0 (unregistering): Released all slaves [ 369.662799][T12406] tipc: Enabled bearer , priority 0 [ 370.004068][T12403] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 370.012082][T12403] netlink: 'syz.1.1640': attribute type 4 has an invalid length. [ 370.020662][T12403] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 370.043757][T12403] netlink: 'syz.1.1640': attribute type 4 has an invalid length. [ 370.169454][T12432] tipc: Enabling of bearer rejected, already enabled [ 370.187380][T12432] tipc: Resetting bearer [ 370.338838][T12436] syzkaller0: entered promiscuous mode [ 370.348227][T12436] syzkaller0: entered allmulticast mode [ 371.014940][T12465] gtp0: entered promiscuous mode [ 371.021986][T12465] gtp0: entered allmulticast mode [ 371.048142][T12468] netlink: 'syz.0.1653': attribute type 9 has an invalid length. [ 371.048854][T12469] FAULT_INJECTION: forcing a failure. [ 371.048854][T12469] name failslab, interval 1, probability 0, space 0, times 1 [ 371.060672][T12468] netlink: 'syz.0.1653': attribute type 11 has an invalid length. [ 371.091407][T12469] CPU: 1 UID: 0 PID: 12469 Comm: syz.4.1654 Not tainted syzkaller #0 PREEMPT(full) [ 371.091437][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.091457][T12469] Call Trace: [ 371.091465][T12469] [ 371.091474][T12469] dump_stack_lvl+0xe8/0x150 [ 371.091505][T12469] should_fail_ex+0x414/0x560 [ 371.091541][T12469] should_failslab+0xa8/0x100 [ 371.091567][T12469] __kmalloc_noprof+0xdf/0x800 [ 371.091595][T12469] ? kfree+0x4d/0x660 [ 371.091619][T12469] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 371.091652][T12469] tomoyo_realpath_from_path+0xe3/0x5d0 [ 371.091680][T12469] ? tomoyo_domain+0xd8/0x130 [ 371.091712][T12469] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 371.091734][T12469] tomoyo_path_number_perm+0x1e8/0x5a0 [ 371.091759][T12469] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 371.091784][T12469] ? sb_end_write+0xe9/0x1c0 [ 371.091809][T12469] ? vfs_write+0x956/0xb30 [ 371.091858][T12469] ? ksys_write+0x1e1/0x250 [ 371.091881][T12469] security_file_ioctl+0xcb/0x2d0 [ 371.091902][T12469] __se_sys_ioctl+0x47/0x170 [ 371.091934][T12469] do_syscall_64+0xec/0xf80 [ 371.091955][T12469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.091974][T12469] ? trace_irq_disable+0x37/0x100 [ 371.091999][T12469] ? clear_bhb_loop+0x60/0xb0 [ 371.092022][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.092044][T12469] RIP: 0033:0x7f6d0e38f749 [ 371.092062][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.092080][T12469] RSP: 002b:00007f6d0f214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.092101][T12469] RAX: ffffffffffffffda RBX: 00007f6d0e5e5fa0 RCX: 00007f6d0e38f749 [ 371.092117][T12469] RDX: 0000200000000080 RSI: 0000000000008901 RDI: 0000000000000003 [ 371.092130][T12469] RBP: 00007f6d0f214090 R08: 0000000000000000 R09: 0000000000000000 [ 371.092142][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.092154][T12469] R13: 00007f6d0e5e6038 R14: 00007f6d0e5e5fa0 R15: 00007ffdcc9b1b48 [ 371.092187][T12469] [ 371.092195][T12469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.230273][T12468] netlink: 'syz.0.1653': attribute type 12 has an invalid length. [ 371.480199][T12479] netlink: 'syz.3.1656': attribute type 13 has an invalid length. [ 371.514345][T12479] netlink: 'syz.3.1656': attribute type 17 has an invalid length. [ 371.682118][T12479] ip6tnl0: left allmulticast mode [ 371.769397][T12479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.871364][T12492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.917055][T12503] netlink: 'syz.2.1663': attribute type 29 has an invalid length. [ 371.932493][T12503] netlink: 'syz.2.1663': attribute type 29 has an invalid length. [ 371.941892][T12500] __nla_validate_parse: 143 callbacks suppressed [ 371.941912][T12500] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1662'. [ 372.076294][T12506] tipc: Enabled bearer , priority 0 [ 372.249343][T12516] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 372.258877][T12516] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 372.282642][T12516] tipc: Resetting bearer [ 372.309968][T12519] tipc: Resetting bearer [ 372.316207][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 372.385498][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 372.388988][T12526] macvtap1: entered promiscuous mode [ 372.414050][T12526] macvtap1: entered allmulticast mode [ 372.429180][T12526] veth1_vlan: entered allmulticast mode [ 372.451180][T12527] macvtap2: entered promiscuous mode [ 372.460378][T12527] macvtap2: entered allmulticast mode [ 372.473142][ T6362] tipc: Resetting bearer [ 372.613703][T12536] syzkaller0: entered promiscuous mode [ 372.619471][T12536] syzkaller0: entered allmulticast mode [ 372.638717][T12535] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 372.640307][T12539] netlink: 'syz.0.1674': attribute type 29 has an invalid length. [ 372.657589][T12535] syzkaller1: entered promiscuous mode [ 372.663445][T12535] syzkaller1: entered allmulticast mode [ 372.670831][T12539] netlink: 'syz.0.1674': attribute type 29 has an invalid length. [ 372.886952][T12547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.202823][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 373.212503][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'. [ 374.644953][ T6043] tipc: Node number set to 2805845018 [ 374.664381][T12574] netlink: 'syz.4.1685': attribute type 29 has an invalid length. [ 374.874566][T12592] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 374.882648][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 374.892153][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 374.913413][T12588] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 374.927673][T12588] bond3 (unregistering): Released all slaves [ 375.090756][T10943] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.119929][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 375.130163][ T4537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.179209][ T6362] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.298686][T10943] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.311278][T12601] Cannot find add_set index 2 as target [ 376.209589][T12627] dummy0: Caught tx_queue_len zero misconfig [ 376.420799][T12634] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1700'. [ 376.451787][T12634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1700'. [ 376.525658][T12639] validate_nla: 1 callbacks suppressed [ 376.525676][T12639] netlink: 'syz.2.1703': attribute type 13 has an invalid length. [ 376.612861][T12639] netlink: 'syz.2.1703': attribute type 17 has an invalid length. [ 376.876733][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.901810][T12639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.257833][ T4567] wlan0: Trigger new scan to find an IBSS to join [ 377.269279][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1716'. [ 377.304640][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1716'. [ 377.783311][T12711] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 377.827878][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.898050][T12711] bond0: (slave team0): Enslaving as an active interface with an up link [ 377.979640][T12711] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 378.174468][ T5921] hid-generic 0005:07C0:0400.0002: item fetching failed at offset 0/1 [ 378.216326][ T5921] hid-generic 0005:07C0:0400.0002: probe with driver hid-generic failed with error -22 [ 378.490961][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 378.620534][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 378.765807][T12763] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1740'. [ 379.010823][T12775] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 379.276614][T12797] netlink: 'syz.3.1747': attribute type 5 has an invalid length. [ 379.287174][T12745] netlink: 'syz.1.1735': attribute type 4 has an invalid length. [ 379.408694][T12799] IPVS: persistence engine module ip_vs_pe_ not found [ 379.916827][T12819] syzkaller1: entered promiscuous mode [ 379.923044][T12819] syzkaller1: entered allmulticast mode [ 380.092057][T12826] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 380.100415][T12826] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 380.108708][T12826] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 380.120384][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1754'. [ 380.151408][T12834] FAULT_INJECTION: forcing a failure. [ 380.151408][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 380.195807][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.2.1756 Not tainted syzkaller #0 PREEMPT(full) [ 380.195835][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.195847][T12834] Call Trace: [ 380.195855][T12834] [ 380.195863][T12834] dump_stack_lvl+0xe8/0x150 [ 380.195892][T12834] should_fail_ex+0x414/0x560 [ 380.195927][T12834] should_failslab+0xa8/0x100 [ 380.195965][T12834] __kmalloc_cache_noprof+0x84/0x700 [ 380.195986][T12834] ? f_setown+0xe4/0x300 [ 380.196017][T12834] f_setown+0xe4/0x300 [ 380.196043][T12834] sock_ioctl+0x5c5/0x790 [ 380.196078][T12834] ? __pfx_sock_ioctl+0x10/0x10 [ 380.196103][T12834] ? ksys_write+0x1e1/0x250 [ 380.196125][T12834] ? bpf_lsm_file_ioctl+0x9/0x20 [ 380.196144][T12834] ? __pfx_sock_ioctl+0x10/0x10 [ 380.196312][T12834] __se_sys_ioctl+0xfc/0x170 [ 380.196335][T12834] do_syscall_64+0xec/0xf80 [ 380.196348][T12834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.196358][T12834] ? trace_irq_disable+0x37/0x100 [ 380.196372][T12834] ? clear_bhb_loop+0x60/0xb0 [ 380.196384][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.196394][T12834] RIP: 0033:0x7fb66378f749 [ 380.196405][T12834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.196414][T12834] RSP: 002b:00007fb664675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.196426][T12834] RAX: ffffffffffffffda RBX: 00007fb6639e5fa0 RCX: 00007fb66378f749 [ 380.196434][T12834] RDX: 0000200000000080 RSI: 0000000000008901 RDI: 0000000000000003 [ 380.196441][T12834] RBP: 00007fb664675090 R08: 0000000000000000 R09: 0000000000000000 [ 380.196448][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.196454][T12834] R13: 00007fb6639e6038 R14: 00007fb6639e5fa0 R15: 00007ffefbc9cad8 [ 380.196470][T12834] [ 380.404861][ T4537] wlan0: Trigger new scan to find an IBSS to join [ 380.619537][T12841] netlink: 'syz.3.1760': attribute type 29 has an invalid length. [ 380.631430][T12841] netlink: 'syz.3.1760': attribute type 29 has an invalid length. [ 380.685221][T12844] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1761'. [ 380.875491][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1762'. [ 380.957616][T12847] tipc: Resetting bearer [ 380.990284][T12849] : entered promiscuous mode [ 381.099647][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 381.125145][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'. [ 381.255698][T12869] FAULT_INJECTION: forcing a failure. [ 381.255698][T12869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.309669][T12869] CPU: 0 UID: 0 PID: 12869 Comm: syz.1.1769 Not tainted syzkaller #0 PREEMPT(full) [ 381.309699][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.309711][T12869] Call Trace: [ 381.309719][T12869] [ 381.309728][T12869] dump_stack_lvl+0xe8/0x150 [ 381.309757][T12869] should_fail_ex+0x414/0x560 [ 381.309792][T12869] _copy_to_user+0x31/0xb0 [ 381.309818][T12869] simple_read_from_buffer+0xe1/0x170 [ 381.309847][T12869] proc_fail_nth_read+0x1b3/0x220 [ 381.309869][T12869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.309892][T12869] ? rw_verify_area+0x2a6/0x4d0 [ 381.309920][T12869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.309945][T12869] vfs_read+0x200/0xa30 [ 381.309962][T12869] ? f_setown+0x14f/0x300 [ 381.309995][T12869] ? __pfx_vfs_read+0x10/0x10 [ 381.310010][T12869] ? f_setown+0x14f/0x300 [ 381.310035][T12869] ? f_setown+0x14f/0x300 [ 381.310059][T12869] ? f_setown+0x2d6/0x300 [ 381.310095][T12869] ksys_read+0x145/0x250 [ 381.310121][T12869] ? __pfx_ksys_read+0x10/0x10 [ 381.310149][T12869] do_syscall_64+0xec/0xf80 [ 381.310169][T12869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.310188][T12869] ? trace_irq_disable+0x37/0x100 [ 381.310212][T12869] ? clear_bhb_loop+0x60/0xb0 [ 381.310234][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.310253][T12869] RIP: 0033:0x7f7c9c98e15c [ 381.310270][T12869] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 381.310287][T12869] RSP: 002b:00007f7c9abf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.310308][T12869] RAX: ffffffffffffffda RBX: 00007f7c9cbe5fa0 RCX: 00007f7c9c98e15c [ 381.310323][T12869] RDX: 000000000000000f RSI: 00007f7c9abf60a0 RDI: 0000000000000004 [ 381.310334][T12869] RBP: 00007f7c9abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.310345][T12869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.310356][T12869] R13: 00007f7c9cbe6038 R14: 00007f7c9cbe5fa0 R15: 00007ffc0daca7c8 [ 381.310385][T12869] [ 381.613373][T12877] validate_nla: 3 callbacks suppressed [ 381.613393][T12877] netlink: 'syz.0.1773': attribute type 29 has an invalid length. [ 381.633395][T12877] netlink: 'syz.0.1773': attribute type 29 has an invalid length. [ 381.716384][T12883] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 381.925058][T12900] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 382.213415][T12923] pim6reg: entered allmulticast mode [ 382.250649][T12914] pim6reg: left allmulticast mode [ 382.293581][T12926] macvlan1: entered promiscuous mode [ 382.300517][T12926] batman_adv: batadv0: Adding interface: macvlan1 [ 382.307326][T12926] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.334970][T12926] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 382.552076][T12934] __nla_validate_parse: 9 callbacks suppressed [ 382.552097][T12934] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1787'. [ 383.641223][T12929] netlink: 'syz.0.1787': attribute type 29 has an invalid length. [ 383.723356][T12938] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 383.723936][T12939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.763574][ T3548] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.778843][ T3548] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.801053][ T3548] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.825662][ T3548] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.006249][T12961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1793'. [ 384.107713][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 384.125061][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1794'. [ 384.460016][T12993] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1802'. [ 384.537868][T12983] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 384.550508][T13002] netlink: 'syz.0.1804': attribute type 4 has an invalid length. [ 384.559467][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 384.867069][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 384.900967][T13009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1806'. [ 384.911660][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 384.923946][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1809'. [ 385.110245][T13018] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.217184][T13018] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.257230][T13030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.264553][T13030] IPv6: NLM_F_CREATE should be set when creating new route [ 385.272018][T13030] IPv6: NLM_F_CREATE should be set when creating new route [ 385.319643][T13018] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.420670][T13018] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.564311][ T1156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.655340][ T1156] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.697281][ T1156] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.730470][ T1156] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.751261][T13056] x_tables: duplicate underflow at hook 3 [ 386.892405][T13089] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.910868][T13089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.949393][T13104] syzkaller0: Caught tx_queue_len zero misconfig [ 387.204472][ T30] audit: type=1107 audit(1768060560.562:4): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yCe4n6yWĝ߈Da' [ 387.639576][T13123] syzkaller0: entered promiscuous mode [ 387.648770][T13123] syzkaller0: entered allmulticast mode [ 387.694632][T13128] __nla_validate_parse: 13 callbacks suppressed [ 387.694652][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 387.817063][T13140] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 387.898375][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 387.915982][T13148] ip6gretap1: entered allmulticast mode [ 388.490671][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 388.500323][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1848'. [ 388.778929][T13176] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.928275][T13189] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 388.972495][T13189] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1858'. [ 389.225961][T13205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 389.254555][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.262062][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 389.288244][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1863'. [ 389.397401][T13214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1866'. [ 389.622204][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1865'. [ 389.676466][T13225] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.929046][T13244] netlink: Unknown conntrack attr (type=2304, max=9) [ 390.104404][T13252] can: request_module (can-proto-0) failed. [ 390.158973][T13259] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 390.386459][T13275] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 390.926004][T13309] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 391.021680][T13309] team0: entered promiscuous mode [ 391.030576][T13309] team_slave_0: entered promiscuous mode [ 391.043931][T13309] team_slave_1: entered promiscuous mode [ 391.056858][T13309] bond0: (slave team0): Releasing backup interface [ 392.009763][T13346] xt_TCPMSS: Only works on TCP SYN packets [ 392.743048][T13395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.018525][T13411] __nla_validate_parse: 19 callbacks suppressed [ 393.018546][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 393.055306][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.064371][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 393.074421][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.088836][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.100138][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.252871][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 393.282916][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'. [ 393.319775][T13419] wg1: left promiscuous mode [ 393.402725][T13419] geneve2: left promiscuous mode [ 393.466195][T13419] geneve3: left promiscuous mode [ 393.527507][T13419] vlan0: left promiscuous mode [ 393.532324][T13419] bond0: left promiscuous mode [ 393.565696][T13419] bond_slave_0: left promiscuous mode [ 393.571500][T13419] bond_slave_1: left promiscuous mode [ 393.594525][T13419] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 393.636634][T13419] bridge0: left promiscuous mode [ 393.673265][T13419] batadv0: left promiscuous mode [ 394.038882][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 394.332695][T13454] syzkaller0: entered promiscuous mode [ 394.338266][T13454] syzkaller0: entered allmulticast mode [ 394.932225][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 394.975282][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 395.169444][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 395.581753][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'. [ 395.722352][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1943'. [ 396.071385][T13519] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 396.497822][ T30] audit: type=1800 audit(1768060569.872:5): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1952" name="memory.events" dev="tmpfs" ino=1955 res=0 errno=0 [ 396.566979][T13545] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 396.669035][T13545] bond7: entered promiscuous mode [ 396.691885][T13545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 396.772000][T13549] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.798470][T13549] bond7: (slave bond8): making interface the new active one [ 396.815579][T13549] bond8: entered promiscuous mode [ 396.830697][T13549] bond7: (slave bond8): Enslaving as an active interface with an up link [ 397.060806][T13562] netlink: 'syz.4.1957': attribute type 32 has an invalid length. [ 397.188737][T13562] bond10: option coupled_control: invalid value (12) [ 397.237998][T13562] bond10 (unregistering): Released all slaves [ 397.384503][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.403879][T13571] netlink: 'syz.3.1961': attribute type 16 has an invalid length. [ 397.452271][T13571] netlink: 'syz.3.1961': attribute type 17 has an invalid length. [ 397.595597][T13571] team0: left promiscuous mode [ 397.609012][T13571] team_slave_0: left promiscuous mode [ 397.626721][T13571] team_slave_1: left promiscuous mode [ 397.634148][T13571] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.684422][T13571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.855101][T13598] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 397.875297][T13598] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 398.026148][T13605] netlink: 'syz.2.1971': attribute type 61 has an invalid length. [ 398.055212][T13605] netlink: 'syz.2.1971': attribute type 62 has an invalid length. [ 398.194375][T13609] xt_recent: Unsupported userspace flags (000000b1) [ 398.294447][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.620840][T13627] __nla_validate_parse: 14 callbacks suppressed [ 398.620860][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 398.664583][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1975'. [ 398.787748][T13630] xt_hashlimit: size too large, truncated to 1048576 [ 399.122549][T13640] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 399.245373][T13640] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 399.307059][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1981'. [ 399.438795][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1982'. [ 399.461393][T13649] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1981'. [ 399.630409][T13659] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1985'. [ 399.651824][T13661] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1986'. [ 399.680032][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 399.718977][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 399.781605][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 400.492878][T13693] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 400.670219][T13702] tipc: Enabling of bearer rejected, already enabled [ 400.791377][T13706] team0: Port device dummy0 removed [ 400.804941][T13706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.755913][T13745] sock: sock_timestamping_bind_phc: sock not bind to device [ 401.870797][T13751] netlink: 'syz.4.2011': attribute type 4 has an invalid length. [ 402.077369][T13761] block nbd0: shutting down sockets [ 402.278943][T13770] netlink: 'syz.2.2019': attribute type 13 has an invalid length. [ 402.587863][ T1156] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.601646][ T1156] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.620300][ T1156] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.669564][ T1156] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.755957][T13781] netlink: 'syz.0.2022': attribute type 29 has an invalid length. [ 402.775913][T13790] netlink: 'syz.0.2022': attribute type 29 has an invalid length. [ 403.062119][T13806] vlan3: entered promiscuous mode [ 403.068085][T13806] bridge0: entered promiscuous mode [ 403.339829][T13819] batadv1: entered promiscuous mode [ 403.854876][T13860] __nla_validate_parse: 10 callbacks suppressed [ 403.854895][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 403.885397][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2041'. [ 404.083495][T13866] tipc: Enabling of bearer rejected, already enabled [ 405.126856][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 405.137699][T13879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 405.159804][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 405.400524][T13911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 405.585126][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 405.602209][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 405.662684][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 405.683456][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 405.706702][T13921] openvswitch: netlink: Invalid VLAN frame [ 405.714427][T13920] openvswitch: netlink: Invalid VLAN frame [ 405.743153][T13923] ip6gretap2: entered promiscuous mode [ 405.764312][T13923] ip6gretap2: entered allmulticast mode [ 405.899473][T13929] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 405.974338][T13938] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2060'. [ 406.479906][T13938] syzkaller1: entered promiscuous mode [ 406.489346][T13938] syzkaller1: entered allmulticast mode [ 407.042017][T13978] xt_hashlimit: size too large, truncated to 1048576 [ 407.430833][T13992] netlink: 'syz.1.2072': attribute type 29 has an invalid length. [ 407.441228][T13992] netlink: 'syz.1.2072': attribute type 29 has an invalid length. [ 407.797608][T14005] tipc: Enabled bearer , priority 0 [ 407.919828][T14005] syzkaller0: entered promiscuous mode [ 407.925710][T14005] syzkaller0: entered allmulticast mode [ 408.004638][T14007] tipc: Resetting bearer [ 411.523240][T14023] __nla_validate_parse: 2 callbacks suppressed [ 411.523259][T14023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2080'. [ 411.853164][T14023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2080'. [ 430.103174][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.892684][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.032337][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.683761][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.011461][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.413165][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.593992][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.782796][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.861968][ T5848] Bluetooth: hci5: command tx timeout [ 435.381292][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.681638][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.002386][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 436.121422][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 436.541672][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 436.950666][ T5843] Bluetooth: hci5: command tx timeout [ 437.321437][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 437.561211][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 438.803709][ T5843] Bluetooth: hci6: command tx timeout [ 439.021643][ T5843] Bluetooth: hci5: command tx timeout [ 440.703222][ T5848] Bluetooth: hci7: command tx timeout [ 440.861773][ T5848] Bluetooth: hci6: command tx timeout [ 441.001667][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.124037][ T5846] Bluetooth: hci5: command tx timeout [ 441.202839][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 441.423221][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 442.291554][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 442.592382][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 442.791640][ T5846] Bluetooth: hci7: command tx timeout [ 442.942463][ T5846] Bluetooth: hci6: command tx timeout [ 444.611755][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.872614][ T5843] Bluetooth: hci7: command tx timeout [ 444.970796][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 445.022525][ T5843] Bluetooth: hci6: command tx timeout [ 445.273846][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 445.501925][ T5843] Bluetooth: hci8: command tx timeout [ 445.741396][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 446.224096][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 446.943354][ T5846] Bluetooth: hci7: command tx timeout [ 447.593700][ T5843] Bluetooth: hci8: command tx timeout [ 449.214132][ T5843] Bluetooth: hci9: command tx timeout [ 449.661564][ T5843] Bluetooth: hci8: command tx timeout [ 451.261658][ T5843] Bluetooth: hci9: command tx timeout [ 451.751700][ T5843] Bluetooth: hci8: command tx timeout [ 453.342421][ T5843] Bluetooth: hci9: command tx timeout [ 455.433936][ T5843] Bluetooth: hci9: command tx timeout [ 493.841692][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.071272][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.263471][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.792567][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.832632][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.963684][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.062305][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.213353][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.703231][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.992238][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.030744][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 498.231910][ T5836] Bluetooth: hci0: command tx timeout [ 498.263999][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 498.401924][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 498.821961][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 499.041257][ T5848] Bluetooth: hci4: command tx timeout [ 499.172142][ T5848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 499.300835][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 499.443155][ T5848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 499.571465][ T5848] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 500.312636][ T5848] Bluetooth: hci0: command tx timeout [ 500.412438][ T5848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 501.083981][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 501.101393][ T5846] Bluetooth: hci4: command tx timeout [ 502.301228][ T5836] Bluetooth: hci10: command tx timeout [ 502.382439][ T5836] Bluetooth: hci0: command tx timeout [ 503.188881][ T5836] Bluetooth: hci4: command tx timeout [ 503.911445][ T5843] Bluetooth: hci11: command tx timeout [ 504.393985][ T5843] Bluetooth: hci10: command tx timeout [ 504.461028][ T5843] Bluetooth: hci0: command tx timeout [ 505.279975][ T5843] Bluetooth: hci4: command tx timeout [ 505.991682][ T5843] Bluetooth: hci11: command tx timeout [ 506.172677][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 506.311343][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 506.421267][ T5846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 506.470890][ T5846] Bluetooth: hci10: command tx timeout [ 507.012709][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 507.351675][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 508.081382][ T5843] Bluetooth: hci11: command tx timeout [ 508.541823][ T5843] Bluetooth: hci10: command tx timeout [ 509.822136][ T5843] Bluetooth: hci12: command tx timeout [ 510.173495][ T5843] Bluetooth: hci11: command tx timeout [ 511.933599][ T5843] Bluetooth: hci12: command tx timeout [ 513.991524][ T5843] Bluetooth: hci12: command tx timeout [ 516.071502][ T5843] Bluetooth: hci12: command tx timeout [ 554.953456][ T5846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 555.164011][ T5846] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 555.193467][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 555.291565][ T5846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 555.960215][ T5846] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 556.121534][ T5846] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 557.010729][ T5846] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 557.312349][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 557.501923][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 557.762623][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 558.011494][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 558.862679][ T5843] Bluetooth: hci13: command tx timeout [ 560.313388][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 560.823405][ T5843] Bluetooth: hci14: command tx timeout [ 560.952036][ T5843] Bluetooth: hci13: command tx timeout [ 562.863763][ T5846] Bluetooth: hci14: command tx timeout [ 563.043627][ T5843] Bluetooth: hci13: command tx timeout [ 563.272825][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.332462][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.403398][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.972113][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 564.213078][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.942649][ T5846] Bluetooth: hci14: command tx timeout [ 564.963586][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 565.073261][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 565.120405][ T5846] Bluetooth: hci13: command tx timeout [ 565.203387][ T5846] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 565.452731][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 565.771541][ T5846] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 566.393411][ T5846] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 567.042471][ T5836] Bluetooth: hci14: command tx timeout [ 567.763238][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 567.871485][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 567.973703][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 568.301829][ T5843] Bluetooth: hci3: command tx timeout [ 568.721866][T14076] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 568.993832][T14076] Bluetooth: hci15: command tx timeout [ 569.078787][T14076] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 570.392622][T14076] Bluetooth: hci3: command tx timeout [ 570.580564][T14076] Bluetooth: hci8: command 0x0406 tx timeout [ 570.592837][ T5836] Bluetooth: hci9: command 0x0406 tx timeout [ 571.060911][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 571.122353][ T5836] Bluetooth: hci15: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.313143][ T31] Not tainted syzkaller #0 [ 571.492999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.733047][ T31] task:kworker/0:0 state:D stack:24504 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 571.851393][ T31] Workqueue: events tipc_net_finalize_work [ 571.991852][ T31] Call Trace: [ 572.001420][ T5836] Bluetooth: hci16: command tx timeout [ 572.413339][ T31] [ 572.481081][ T5836] Bluetooth: hci3: command tx timeout [ 572.503544][ T31] __schedule+0x149b/0x4fd0 [ 572.583627][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 572.720871][ T31] ? __pfx___schedule+0x10/0x10 [ 572.832378][ T31] ? schedule+0x91/0x360 [ 572.891521][ T31] schedule+0x165/0x360 [ 572.981561][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.071536][ T31] __mutex_lock+0x7e6/0x1350 [ 573.113233][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.202045][ T5836] Bluetooth: hci15: command tx timeout [ 573.251202][ T31] ? tipc_net_finalize_work+0x1e/0x90 [ 573.781648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.902434][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.022254][ T31] tipc_net_finalize_work+0x1e/0x90 [ 574.070922][ T5836] Bluetooth: hci16: command tx timeout [ 574.143636][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.303454][ T31] process_scheduled_works+0xad1/0x1770 [ 574.421946][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.540680][ T5836] Bluetooth: hci3: command tx timeout [ 574.583204][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.732571][ T31] worker_thread+0x8a0/0xda0 [ 574.822403][ T31] kthread+0x711/0x8a0 [ 574.901256][ T31] ? __pfx_worker_thread+0x10/0x10 [ 575.051699][ T31] ? __pfx_kthread+0x10/0x10 [ 575.143762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.231870][ T31] ? __pfx_kthread+0x10/0x10 [ 575.271085][ T5836] Bluetooth: hci15: command tx timeout [ 575.301312][ T31] ret_from_fork+0x510/0xa50 [ 575.330942][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.392565][ T31] ? __switch_to+0xc9e/0x1480 [ 575.431689][ T31] ? __pfx_kthread+0x10/0x10 [ 575.661457][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.691753][ T31] [ 575.802818][ T31] INFO: task kworker/u8:16:6362 blocked for more than 147 seconds. [ 575.992192][ T31] Not tainted syzkaller #0 [ 576.141336][ T5848] Bluetooth: hci16: command tx timeout [ 576.311949][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.501379][ T31] task:kworker/u8:16 state:D stack:22264 pid:6362 tgid:6362 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 576.723553][ T31] Workqueue: events_unbound linkwatch_event [ 576.861044][ T31] Call Trace: [ 576.942712][ T31] [ 577.013597][ T31] __schedule+0x149b/0x4fd0 [ 577.112437][ T31] ? __pfx___schedule+0x10/0x10 [ 577.221977][ T31] ? schedule+0x91/0x360 [ 577.351332][ T31] schedule+0x165/0x360 [ 577.483456][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.633085][ T31] __mutex_lock+0x7e6/0x1350 [ 577.761369][ T31] ? __mutex_lock+0x5bb/0x1350 [ 577.871488][ T31] ? linkwatch_event+0xe/0x60 [ 578.131442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.221462][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 578.222752][ T5848] Bluetooth: hci16: command tx timeout [ 578.411857][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 578.552546][ T31] linkwatch_event+0xe/0x60 [ 578.663925][ T31] process_scheduled_works+0xad1/0x1770 [ 578.784009][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.961191][ T31] ? do_raw_spin_lock+0x121/0x290 [ 579.063589][ T31] worker_thread+0x8a0/0xda0 [ 579.243093][ T31] ? __kthread_parkme+0x7b/0x200 [ 579.322642][ T31] kthread+0x711/0x8a0 [ 579.412305][ T31] ? __pfx_worker_thread+0x10/0x10 [ 579.501413][ T31] ? __pfx_kthread+0x10/0x10 [ 579.591501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.800715][ T31] ? __pfx_kthread+0x10/0x10 [ 579.872249][ T31] ret_from_fork+0x510/0xa50 [ 579.970665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.033797][ T31] ? __switch_to+0xc9e/0x1480 [ 580.092945][ T31] ? __pfx_kthread+0x10/0x10 [ 580.161591][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.242287][ T31] [ 580.291426][ T31] INFO: task syz.0.2078:14012 blocked for more than 152 seconds. [ 580.461591][ T31] Not tainted syzkaller #0 [ 580.491400][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.517458][ T31] task:syz.0.2078 state:D stack:28288 pid:14012 tgid:14010 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 580.562493][ T31] Call Trace: [ 580.593981][ T31] [ 580.622070][ T31] __schedule+0x149b/0x4fd0 [ 580.703250][ T31] ? stack_trace_save+0x9c/0xe0 [ 580.903693][ T31] ? stack_depot_save_flags+0x33/0x810 [ 580.983190][ T31] ? __pfx___schedule+0x10/0x10 [ 581.072234][ T31] ? schedule+0x91/0x360