last executing test programs: 2m51.080746063s ago: executing program 0 (id=1226): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000a40)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001b80)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="e6de1629531a14e8847c6a0f181b60b3e81db206d384e6c38a7f727e7567da714f61b8b50c6b23b6fe7ff81b79fd53fe1df31ee375535257414d7f1715b357cf1ca7cb433075b48229502913706e0c1567ec44fdc53fde84ea720d4257497b1a62905f6cbaafe7db9101b7e59cd939024f07ed6da50976cb1ed0e139dfdde3d3db13000e06", 0x85) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41800}, 0x8880) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) 2m50.051222804s ago: executing program 0 (id=1231): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000c000865d600a843500142f00fe80000000000000000000d8c10000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5000000090780002"], 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="3cf699a6f756a24f0d00000000005b2b7658bb0003d46b41ed1e974b630e19e94c939a59b78ee17d1b00c454329ae92e972a82f4e3055cf92c6da3cb3ff4b7f79b17f47384547068fd586d9368992d4d0d0000000000000000003f252bf03eccbab093d336da10d8c4aebc0fe5e8ac353590f895ea15bac322aaec539a777a4841637e17b6ef8b9d05b582990e72ad5cafc31417c13c794ffbef4c14b30ca3e9006a80909b56d559c97d70d0207faa053ac6afee3d0fc253e5e901feae102ccbbecf0fc58da1c41724078d1693d2e11667b76199563512f05ef48a5490cf66c89579a3b5b7222b9e70816a8c47702987417eb2fad0b5bfd8a42555f10616dcab17a5281e8b58bef9a3458b9976b49e2760fb22430820407feb0730e847a81cc8cc743da2b199750c9c548ba1b6d497eddf6d039a07fec94970218d98d27dc2e347"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x2, 0xfffffffffffffff8, 0x7, 0x8000000000000000, 0x2, 0xdbd, 0x3}, &(0x7f0000000340)={0xffffffffffff8f00, 0x8, 0x6, 0x3, 0x185, 0x7, 0x5, 0x7ff}, &(0x7f0000000700)={0x321, 0x4, 0x5, 0x1, 0x3, 0x1b7a, 0xa4, 0x5}, &(0x7f0000000780)={r8, r9+60000000}, 0x0) 2m49.261596386s ago: executing program 0 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x200000c8}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94) 2m49.156516419s ago: executing program 0 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x2, 0x704, 0x4}, 0x30}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000b80)=ANY=[], 0x40) 2m48.776537457s ago: executing program 0 (id=1241): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000330023000000000000000000000010006c00000000000000000000000000fc0200000000000000e1004000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) socket$inet6(0xa, 0x3, 0x9) (async) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000003888fe8000000000000000000000000000aa00000000000000000000000000000000caa05f4c8611160bacad60d95ee5dc83a5f0e4924713940b6b6de217c2ce3c18ad98db68af693717e05e04dd2699a9fc239174a8c1312ea90b89a86dc79fb04f533c6a144f4bf3dd6c6c611fc8270e4eba2f5e7f0bfb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYRESOCT=r1], 0x158}}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x87654321}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000400006803c00040067"], 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) 2m48.33579372s ago: executing program 0 (id=1247): unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xc5, &(0x7f0000000380)=""/197, 0x0, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2b, 0x0, 0x0) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffd14) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x57, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0x3f, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x24008004) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xff08) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r7, 0x0, &(0x7f0000000240)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000001800000008000000400000004200000031bbb283c0b3d6ceff1c3bff81078891203e4431665e0c828e50813f1e85d08ebd07b1feeae573f162e1ddfe7815556f5f90e2cc08fb4253608b0ac2e9e1081db173c1501b2663ae7ec446405364de058ded3c6b8f295e1d317b988dff85200429c51c461977681b7c8c343785b3e0f75c8abc1648f5928c829323774b9455eeb9962cb98c83db24801a8c9b37f500cb248a19d8c2c1a1bea79d90cab98925f680ec955237fc10cab86e265c9253758f716c15cd9efb9324d253bb47", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.457469472s ago: executing program 4 (id=1361): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r2, 0xc) listen(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a0000000210001000000000008000000fc010005000000000000000000000000200100000000000000000000000000004e200005000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x74, 0x10, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xd4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2001000, 0x100008}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffffffb}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m36.306259172s ago: executing program 4 (id=1364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00'}) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="000010000000000086922d1213f749975536c31e0fe4289939ce0c28bbba180afc9ae5e89df278c8250b017c0cd806d0f9a373032ef35705212672dc72d5b3042cfb39d4739b616fb5c7c75fabf517f46641036207ac163b6a9d0b0712bf0bc2d7b8b937be68a587e4d6f94f785d9a670c64fb256d24e3ede8f127712ada1d4942ba69eae91fcf6ae096c86a326472f7b23a159da5b299a634d0f91b373738068b27f44b86d8f5bcba5e735b7efa00a29b13e1b5ff7783d02165d036200624a39542612e160d1b734e45ff072bdecd1de88ea76cd17275942b5bea90dc4865d08792"], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="90", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0xfffffef0}], 0x3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f00000002c0)=0x8) 2m36.133435054s ago: executing program 4 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5, r3}) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3f22f322", @ANYRES16=r1, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m36.03537311s ago: executing program 4 (id=1372): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000180)="6c9406d5a64bd7a74eb79af101d4d0390b7ac27effe6", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)="5495", 0x2}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRES64=r1], 0x198}}], 0x2, 0x4008440) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x2, 0x0) close(r9) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002140)={r1, 0x20, &(0x7f0000002100)={&(0x7f0000001080)=""/4096, 0x1000, 0x0, &(0x7f0000002080)=""/65, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa, 0x9}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0xc, 0x0, 0x0, 0x0}, 0x94) 2m35.903737024s ago: executing program 4 (id=1374): r0 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8954, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r1, &(0x7f0000005480), 0x400000000000344, 0x2100, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="fe0000001600010a00000000060000000a004000"], 0x14}}, 0x0) 2m34.911456396s ago: executing program 4 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x14, 0x2, 0x201, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x7}, [@typed={0x5, 0x67, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x4000040) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff0300000000000005000000851000000500000018160000", @ANYRES32, @ANYBLOB="0000eb7d920000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018510000020000000000000000000000852000000300000004320100f8ffffff18470000feffffff00000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x3, &(0x7f0000000400)=""/3, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x4, 0x3e1df29008669d71}, {0x3, 0x3, 0xe, 0xc}]}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r7, 0x100000, {0x2, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000c06000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000c06000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4040840) 2m33.007877511s ago: executing program 32 (id=1247): unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xc5, &(0x7f0000000380)=""/197, 0x0, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2b, 0x0, 0x0) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffd14) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x57, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0x3f, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x24008004) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xff08) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r7, 0x0, &(0x7f0000000240)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000001800000008000000400000004200000031bbb283c0b3d6ceff1c3bff81078891203e4431665e0c828e50813f1e85d08ebd07b1feeae573f162e1ddfe7815556f5f90e2cc08fb4253608b0ac2e9e1081db173c1501b2663ae7ec446405364de058ded3c6b8f295e1d317b988dff85200429c51c461977681b7c8c343785b3e0f75c8abc1648f5928c829323774b9455eeb9962cb98c83db24801a8c9b37f500cb248a19d8c2c1a1bea79d90cab98925f680ec955237fc10cab86e265c9253758f716c15cd9efb9324d253bb47", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m19.738608743s ago: executing program 33 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x14, 0x2, 0x201, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x7}, [@typed={0x5, 0x67, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x4000040) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff0300000000000005000000851000000500000018160000", @ANYRES32, @ANYBLOB="0000eb7d920000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018510000020000000000000000000000852000000300000004320100f8ffffff18470000feffffff00000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x3, &(0x7f0000000400)=""/3, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x4, 0x3e1df29008669d71}, {0x3, 0x3, 0xe, 0xc}]}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r7, 0x100000, {0x2, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000c06000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000c06000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4040840) 2m0.131946756s ago: executing program 6 (id=1736): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m0.115803949s ago: executing program 6 (id=1738): syz_emit_ethernet(0x3b6, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3b6, &(0x7f0000000040)=ANY=[], 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) (async) 1m59.938446197s ago: executing program 6 (id=1742): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0xb79, 0x0, 0x1, 0x5, 0x8}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002600010000000000040000001f0100800c00010002"], 0x114}], 0x1}, 0x0) 1m59.69316668s ago: executing program 6 (id=1746): unshare(0x2020600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000002000000090000000800000040000000", @ANYRES32, @ANYBLOB="f4aa641d1ad28aa0000000000000000000000188", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r8}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r5, 0x5, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r10, 0x0, 0x0}, 0x10) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000340)={0x0, 0x0, 0xf1, 0x3, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x3e, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x50) 1m59.368740553s ago: executing program 6 (id=1749): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xfffffffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000003c0)={0x2, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000240)="94", 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3ff3df33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m58.990856534s ago: executing program 6 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m50.984512316s ago: executing program 5 (id=1851): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x33}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 1m50.376918086s ago: executing program 5 (id=1852): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100"], 0x94}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="667b6c746572000000000000000000000000000000000000000000000000000002"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000080)=0x8, 0x4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=0x0], 0x6c}}, 0x0) 1m50.347571413s ago: executing program 5 (id=1853): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r7, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34018018) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f00)=@newtaction={0x74, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x60, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x2c, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x40, 0xc, 0x0, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) 1m50.346320989s ago: executing program 5 (id=1855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r4, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) 1m50.342949854s ago: executing program 5 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000240)={0x6, 0x5, 0x4, 0x3, 0x4, 0xd, 0x7}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001800010025bd7000fbdbdf251d0103001500010002000040050300007bd6615d5d76246005000000080005000600fc4c0c000b00010000c0020000e008000e"], 0xa8}}, 0x4040) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x346, 0x2, 0x0, 0x0, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000003000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000000)={'sit0\x00', 0x0}) r5 = socket(0xa, 0x6, 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}}, 0x8010) unshare(0x400) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301f8000000005c0016805400018028000100f6ffffff000000000000000000000000000000000000000000000000000000000000000004000c80104406000200000003f50000d900000014000b000c0000000000000006000000000000000400018014000300776c616e30"], 0x98}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1m50.296304175s ago: executing program 5 (id=1861): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000500)={0x8, 'vlan1\x00', {'veth0_to_batadv\x00'}, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001540)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, 0x0, 0x0, 0x4d, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4620, 0x7, @private1, 0x9}}, 0x0, 0x0, 0x0, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc61579dc502b0efd595a0a4267f683c3cade7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r7, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}}, 0x14008080) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x2, 0x9}, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="436410", 0x3}], 0x1}}], 0x2, 0x41) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r11}, 0x20) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c00)={r8, 0x6, 0xb0}) 1m43.630939951s ago: executing program 34 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m35.248361877s ago: executing program 35 (id=1861): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000500)={0x8, 'vlan1\x00', {'veth0_to_batadv\x00'}, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001540)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, 0x0, 0x0, 0x4d, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4620, 0x7, @private1, 0x9}}, 0x0, 0x0, 0x0, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc61579dc502b0efd595a0a4267f683c3cade7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r7, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}}, 0x14008080) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x2, 0x9}, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="436410", 0x3}], 0x1}}], 0x2, 0x41) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r11}, 0x20) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c00)={r8, 0x6, 0xb0}) 13.035875357s ago: executing program 2 (id=2842): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x1, 0x18e, 0x800, r0, 0x101, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xf}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000005c0012800e00010069703667726574617000000048000280060011004e23000014000700fe8000000000000000000000000000aa060018000200000006000e0000f9e61b"], 0x7c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="47100000"], 0xc4}}, 0x0) 12.747836407s ago: executing program 2 (id=2845): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="05000000010008", 0x7) socket$nl_route(0x10, 0x3, 0x0) 12.535190908s ago: executing program 2 (id=2847): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x1000000000000217) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r2, 0x80000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e0000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70800000100b5137b8af8ff00000000bfa200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a7c000000060a010400000000000000000a0004050900010073797a3100000000500004804c0001800a000100696e6e65720000003c00028008000440000000171800058006000100696d6d656469617465000000040002800800034000000002080002400000008408000140000000000900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r10, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r11, 0x8918, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) 11.462260185s ago: executing program 2 (id=2851): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 10.837362087s ago: executing program 2 (id=2857): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x1402, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7020fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d007f400000"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @remote, 0x1000}, 0x1c) 9.823012981s ago: executing program 2 (id=2863): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000003"], 0x0, 0x34}, 0x28) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'ip6gre0\x00'}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYBLOB="00000000000002002c00128008000100736974002000028014000b00ff02000000000000000000000000000108000100", @ANYRES32=r3, @ANYBLOB="00980f0361b7efec48221dcdced74ab438d5a7a48fbfa31e9028bc8940a3be627e469b21dcf30e2bca65bc8cca7d2cac2cf35619e23c8fd2f0f4cc9a85b2000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 3.483294192s ago: executing program 8 (id=2912): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x1000000000000217) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r2, 0x80000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e0000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70800000100b5137b8af8ff00000000bfa200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a7c000000060a010400000000000000000a0004050900010073797a3100000000500004804c0001800a000100696e6e65720000003c00028008000440000000171800058006000100696d6d656469617465000000040002800800034000000002080002400000008408000140000000000900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x30}}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r10, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r11, 0x8918, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) 2.456674805s ago: executing program 8 (id=2927): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x80801, 0x1) poll(&(0x7f00000000c0)=[{r3, 0x1040}, {r2, 0x2187}], 0x16, 0x403) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d7930000008001f3f04000000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x8000) 2.151927548s ago: executing program 7 (id=2928): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0xf0bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20040054) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, 0xffffffffffffffff, 0x36, 0x16}, 0x20) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x7fff, 0x20, 0x5, 0xaf88, 0x8, 0x0, [{0xffff, 0xd2, 0x6, '\x00', 0x220c}, {0x4, 0x1000, 0x4, '\x00', 0x1}, {0xad, 0x6713, 0x8, '\x00', 0x800}, {0x0, 0x8, 0x6, '\x00', 0x1109}, {0x6, 0x1, 0xd, '\x00', 0x2}, {0x7, 0x6, 0x1, '\x00', 0x808}, {0xfffffffffffffffb, 0xa9, 0x9, '\x00', 0x100}, {0x92d8, 0xaa, 0xffffffffffffff80, '\x00', 0x809}]}) 2.151349115s ago: executing program 3 (id=2929): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x18, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.769967828s ago: executing program 1 (id=2931): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.743627505s ago: executing program 3 (id=2932): r0 = socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)}}], 0x1, 0x2, 0x0) 1.557173617s ago: executing program 7 (id=2933): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bdbad6fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290009200600080028"], 0x48}, 0x1, 0x0, 0x0, 0x20886}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x9, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000fabc3f35b05c158effff0008000300b4e9d5556d99f019b4abedacf8bc5184e524cdda68a45ce8df56ee868315a5b2ec2e94f5645662228e2c7d23a3538b91f93570f7318d6b84a0bc3fad9908687b23dd77f27489832a815005777fadceb2ed63f68eed2341db56f09a0fc5ec4fa492dafc5bea759709e6c6a2578191bec084918d6d015ffe6cbade8144725b2abc06a12c323a3594cc86fc146e44dd1766be17a59ca3771c69f3992b8cc6b4e3a92620b3d08ad6ff6a46310ca85a4ccc83f5898592c79045e4cbc8", @ANYRES32=r8, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x24004811) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="8020010042000000500012800e00010069703665727370616e0000003c0002800800", @ANYRES32=0x0, @ANYBLOB="08001500d7a31d000400120014000600000000000000000000000000000000000600188000f8000008000d00ff"], 0x70}, 0x1, 0xba01}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r14, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88140002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x10}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xfd}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.556240046s ago: executing program 1 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 33) 1.55545249s ago: executing program 3 (id=2935): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xe, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x100}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.403832492s ago: executing program 3 (id=2936): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x1000000000000217) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r2, 0x80000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e0000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70800000100b5137b8af8ff00000000bfa200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x60000000}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a7c000000060a010400000000000000000a0004050900010073797a3100000000500004804c0001800a000100696e6e65720000003c00028008000440000000171800058006000100696d6d656469617465000000040002800800034000000002080002400000008408000140000000000900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x30}}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r10, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r11, 0x8918, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) 1.360258562s ago: executing program 1 (id=2937): unshare(0x60600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcf1fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe092302f5fb9887db5fdb899b64442c11a5c77671df9188f524169816d192902fb5ed"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x18}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x2000010}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@newtfilter={0x8b8, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x888, 0x2, [@TCA_CGROUP_ACT={0x3d8, 0x1, [@m_vlan={0xcc, 0x1e, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2d1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x1, 0x8, 0x2, 0x129}, 0x1}}]}, {0x5a, 0x6, "c61ce70b4ede4660766a8d45cb36f905c0dc9477c33e088a5fc41e45020b23a5a81e9176e54a1c85cf15621bab2089ecb99ef0c4971653f350af71f87132e3d7edb001b45b93aeb143f42323a678e8768512b308a204"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xf8, 0xc, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x2, 0x7, 0x9, 0x9}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x86, 0x6, "3a55ac6dea2bd21b018075c567ef6eb0d39df93eb68588e9312024cc7e83d976155856b4681d8e71e71e117b316d471188f1dbe1b1866eb022e497712e6f34770a57138f53033f82bffb51cdf8f34a0e8c941712fac7dff8e22e1e4ad5afa76a8afd1d8da7523f6965aa0f8e895ee156422814ede3bc4bd65ac51a75074a309b0d4b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x17c, 0x6, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "1b21a127b6625a34c5da4081359633f1"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "23de58b16dc1bd7af9adb33ef46d0230"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d50666bb3c431240001602a48f67983b"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0xef, 0x6, "7ac02294da11ad5febbce81bff25fcfb6ad1093c21f32884054249810bd6fd890238a214c5897cfa6a888f1c90557c74a77d11bae2f6a787e98d9bd67d9b1e5ec065322fb46cd09bba2038e0ed8f8422dbb41dc6371c5e101f3cc203ac4dc5525f413e43355ce9df85a1b50f456e7d1b06198a8b5e8a0b6585fcb40e4df5419e0ad83edca1032131f2358ce1de25538247d80f7381ec3f36ce77b44fd8f9577e576b5328f8bba9e6f9051bd2f3c8e89a23e8bda320c62085e3fa2ca2b32fcee65357ae0e333a8d1e67087981c0fab5ab7469db5f8ac29df70fd47711191ed790921e558e31273eb24fdc24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x94, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x6, 0x0, 0x7}, @local, @remote, 0xffffffff, 0x1}}]}, {0x42, 0x6, "a9440dc28503d7aeaac70ba0005449fb2e4f29f840c1a5aa732590e43680ce76b64e8d6f793288e137ce40c04b13fa639817f2a21e604ddbacf07b138b73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x4ac, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0xf4c, 0x80, 0x7, {0xe5, 0x1, 0x2, 0x81, 0x0, 0x2}, {0xf8, 0x0, 0xf, 0x3, 0x7ff, 0x4}, 0xfffffffe, 0xfffffffc, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x80000000, 0x9, 0x8, 0x1ff, 0x40, 0x3, 0xfffffffe, 0x100, 0x7, 0x401, 0x8, 0x0, 0x2c29, 0x9, 0x5, 0xc, 0x59, 0x5, 0x40, 0x3, 0x3, 0x80000000, 0x668, 0x1, 0x0, 0xfffffff9, 0x4, 0x7f, 0xfffff001, 0x6, 0x200, 0x4, 0x54, 0xb509, 0x5, 0x495, 0x2, 0x6, 0xbc4, 0xdac4, 0x2, 0xfffffffb, 0x3, 0x38, 0x8, 0x7, 0x7fff, 0x5, 0x401, 0x8, 0x0, 0x0, 0x7, 0x8, 0x7fff, 0x57, 0x2, 0x7ff, 0xa6ec, 0x3, 0x9c, 0x2, 0x8, 0x80000000, 0x948, 0x4c, 0xd4c8, 0x8, 0x72e, 0xfff, 0x10001, 0x3, 0x800, 0x0, 0x4, 0xd, 0x6, 0x3ff, 0x8, 0x3, 0xb0d, 0x7fff, 0x37, 0x8, 0x9, 0x4, 0x1, 0x8000, 0x9, 0x40000000, 0xedf, 0x6, 0xd, 0xe4, 0x7fffffff, 0x80000001, 0x3, 0x21, 0x4, 0x1, 0x8, 0x4, 0x5, 0x7, 0xe, 0x200, 0x9, 0xfffffff9, 0x40, 0xffffffff, 0x8, 0x0, 0xff, 0x5d1dd90c, 0xfffffffd, 0x40, 0x9, 0x0, 0x7, 0xfffffffa, 0xfffffffb, 0xb, 0x4be, 0x101, 0x4, 0x1800000, 0x4, 0x80000001, 0x300, 0x5, 0xa8b, 0x10000, 0x4, 0x2, 0xb561, 0xcc000000, 0x910, 0x5, 0x7fffffff, 0x6, 0x7, 0x7b3, 0x76f, 0x400, 0x2c, 0x3, 0x1ff, 0x7, 0xa6e3, 0x5, 0xfffff473, 0xed, 0x4, 0x6, 0x5, 0x7e6a, 0x1, 0x7, 0x7, 0x8, 0x7ff, 0x7541, 0x5, 0xa6d, 0xf7f1, 0xcca, 0x10001, 0x4, 0x7, 0x8, 0xc8f, 0xffff, 0xfffffffb, 0x3, 0x7, 0x4, 0x0, 0x0, 0xfffffff8, 0x6, 0x5, 0x5, 0x1, 0x6, 0x6, 0x8, 0xfffffffc, 0x7fff, 0x7, 0x10001, 0x9, 0x80, 0x8, 0x80000000, 0x5, 0x1, 0x10000, 0x200, 0x39b, 0x5, 0x3, 0xf6ca, 0x9, 0x0, 0x1, 0x7, 0x3, 0x97ad, 0x1000, 0x1b1d7826, 0x9, 0x8, 0x9, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100, 0xaecb, 0x8, 0x4, 0x80000001, 0x0, 0x3ff, 0x4, 0x7f, 0x1ff, 0x8, 0x10000, 0x6, 0x3, 0x6, 0x2, 0xcd, 0x9, 0xeebe, 0x8, 0x5088, 0x7, 0x6, 0xfffffff7, 0xed, 0x2, 0xaf9, 0x81, 0xe, 0x7, 0x6, 0x8c5, 0x8, 0xe37, 0x40, 0x8, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x10000000, 0x9, 0x3, 0x9, {0x7e, 0x0, 0xa02, 0x66, 0x1, 0x8}, {0x1, 0x0, 0x4, 0x3, 0x1, 0x8}, 0x401, 0x1, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x404f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x8, 0x2, 0x1c, {0xa, 0x4e24, 0xbe, @loopback, 0x68a65c99}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) 1.30325557s ago: executing program 7 (id=2938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x202, 0x4}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x75d, 0xc0000000, {{0xe, 0x4, 0x0, 0x23, 0x38, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0x24, 0x1b, 0x0, 0x8, [0x400, 0x1, 0x8, 0x83ef, 0x7fffffff, 0xca, 0xf5df, 0x10000]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x71d, 0x3509, 0x3, 0x10000, 0x9, 0x1002, 0x9, 0x3, 0x3, 0x802e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xfffc, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x2, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0xa, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x1, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x4001, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0x13, 0x6, 0x556, 0x1, 0x2c, 0x4, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x82, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x1, 0xff, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x8, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512f, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x6, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xa, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x0, 0x7, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x10000, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0xa, 0x4e22, 0x8, @empty, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="a89ce65eed7b943ca7e8f2a03e0a85bcd9f0286d642c60c6f94e9034db5fd1c2b280bd5bf83e4c368f6bde6c357253266d32de2c45b98e2c9581c9b147a461a1d354ffe17bfd2a1f938271605b763b7ba8fdae5849408279f213229c6867a15453fd6564eb113eadcced130001af2fd96a6a81fd58c24ee0f921f5b3f0406db862aa31e5b4e8938309e324e49af04f2f31aee60af483241e68143a53a054aace96ca9d9f092aa41b691f", 0xaa}, {&(0x7f0000000200)="d00fb7cba0e93d9267b8ee232e17efd3f5f555bd93eed144ef7ae7c1c8a565233d74fe7e358026b2a5f2ffa4e65a907554da7f98ab4b9e4b16a09f9b8b712b25d0536261ae5dfba86b01e49bf8ab5b9e67303a7c800eaf6dcf9ae96ae1cedb75ec562133f60b2b7af22aaad754150d5fa09a74d1d9aec24a808b3377db3a5f6db3c23d583991fcb1742a577a11abe1e4fef175b5751b09f72705bae2bfa2cf", 0x9f}, {&(0x7f00000002c0)="7a18996ced9764b12d9e0286aa10dd8ae098728cb71c1e6574e5ce2f7a95ad14c147aee5e2fedb617240904c3837ff710af455ee31d55c7a8450d6879ce2c86b52d031469832ad317e3a126e65e80af002199121d009f7625cc1d6be34f299373c018d497174516d56e05fe497ce976cc8cd4469", 0x74}, {&(0x7f0000000340)="87bc152977fee9a56bec33dc90af4e08a218b602e374ac36f73fc2f1eecae12f7638fcf09e33304103dd4da91d4212312311b9ebac9553e323df4ff9c7fdebaffbf7b602ffedc61c8e4b0b9ec91cfaa153e1c890640da3895d29f72e168865f94240be7508c6f8fd13aeea42797fb89a1d144337d942de9db4fedbfb6d4c1a1aa6af1eeb91d3b90797b4749acea0d92bc16a63948534f238d91c17fef759692ca1581691a3c5b4969a63d0c1dff1e47ce45ec276020ada676fc742040ade214b12f1dd1ffc82ab8b25de3dd38133ea638910051987cf40446a3ea6cf13c2955ccdc401ab73cadb24869900c8e96b108c705570e473", 0xf5}], 0x4, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}, r1}}}, @hopopts={{0xd0, 0x29, 0x36, {0x2f, 0x16, '\x00', [@jumbo, @generic={0x0, 0x82, "4a3c7074152b4b3270fb2148590d12232a724b93d678ad2b9e02654f0a6c3c7f832a7170af5c39fdd670be9da4c700d401bc524ca28c028900e1819d00da5358dd795bf01d6bcfa8e9a7feb4be82d713bdaa26468a6bc7885683a765051e0b8d800689750056239f5f09d4b056353a1f49ef10e4243fca912d97e5b709652c218017"}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x0, 0x18, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0xbe, 0xf000, [0x400, 0x8, 0x57853677, 0x7, 0x9, 0x3, 0x7fff800000000000, 0x7fffffff]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x9}, @ra, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0xad, 0x7, [0xc0]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0xc2, 0x9, [0x0, 0x7ff, 0x6, 0x7, 0x7, 0x6, 0x4, 0x40]}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0xff, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x178, 0x29, 0x37, {0x2f, 0x2b, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @ra, @generic={0x6, 0xfd, "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"}, @calipso={0x7, 0x48, {0x1, 0x10, 0xff, 0x0, [0x1, 0x0, 0x2, 0x100, 0x8, 0x8000000000000000, 0xbc, 0x9]}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0xfffffcdd}, @enc_lim={0x4, 0x1, 0xc}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}}}], 0x3f8}, 0x40040) 1.103654752s ago: executing program 7 (id=2939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x274, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x594}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9142}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe41d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb456a9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9010}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x93}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x24008004}, 0x8800) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x100}}], 0x18}, 0x3400c8d4) r7 = getpid() recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1}, 0x40000100) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='c', 0x1}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}], 0x20, 0x2400c000}, 0x40c0) r8 = socket$kcm(0x29, 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x4c, 0x12, 0x8, 0x70bd2c, 0x25dfdbfc, {0x2c, 0x6, 0x89, 0x2, {0x4e20, 0x4e22, [0x7, 0x5, 0x5, 0xbeee], [0x2, 0x6, 0x200, 0xfffffffb], 0x0, [0x0, 0x26580]}, 0x0, 0x5}}, 0x4c}, 0x1, 0x0, 0x0, 0x24008080}, 0x40000) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) 937.716427ms ago: executing program 7 (id=2940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bdcce515d27e90afa68ce0876d7b9ed16b54cb9ad0a0450525cdaec6759cacc3d3fab31575b37ab2eff3ea3fccc2fbd2c608f5645942ad8a74b3ae907c593b8747dae9a013b20803a264a1354668609be1e3fa8df037b780f94dfb12d90848e850fa929a720c6a8573ca912b752d2140a170dd8dd122879c5bfd7139c5f07127c279b887367200c710aa6a94f0384b3d7e33ffa316079cf4807cd3351e75b338aec1a2ef2fab80b0c4abeb12e9c7b23f", @ANYRES16=r2, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d00000057000e0088800900080211000001080211000000ec03f3b85ad3000004008181a1ffffffffffffff040000000006010101010101030100060243832a0100720603030303030371070100ff0101040876060ff42200040000"], 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r5, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000380)=0x60dc, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r9, 0x408, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000850}, 0x24040001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc000) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x54, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB, @ANYRES8=r2, @ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x36000001}, 0x4052) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 929.393644ms ago: executing program 8 (id=2941): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0xb}, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) 819.64402ms ago: executing program 1 (id=2942): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='|\x00', 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="80ab8144e469f0a2b99270ef4b911714a01fa4bdc4c804af8468e434b1f8ac4adf5f44df66067011fdd0c68296d7bca02997ad619ad09320175bf757c23d8d57c6866fc1f900210263536ed803c048c1787ac16827a537c7d368cb22d3486dbf3acedae0341735a4", 0x68}, {&(0x7f0000000140)="bc047ffecd62fa7edd3f4c94c1b6221a17a7fe9a6fc812ce534aa3722fdb76bae96468ce7de7af78a987ce520d7d87e44f5222b0ab385014c4e97b09fd6a1661b66321b80cbf70ed2e0301cc91eca18d72ab6dbd095faf98ff898fb39a3635f3d1a00531cf5b65d219200c904f35983e91abb8", 0x73}, {&(0x7f00000001c0)="4939b9b5b666a2f06525c5090cfa98695f573806792a9d8b5653033d4a4e7bc815332761a4a7d4234f3c93fb15ed3f16aa790c110fe3e1f25c2a5d4cef4a6dc967063d0aafecbda09f80e244c18cb46b4164f11eeb41697633642f13c0490182dafb0efb6bca0bed398006906b7aa5ecc54a248d69cb7165166ccdf6e6154f66d8e7f62176b33c7379c6dac7e955ec38271760334ba6ac1c1c3627296ba8ae384b2257add9cbf241b7cab1ea30d9762748396070f7d40e423cbd73cba1606d3cbb36f65cdf1b8fb2b6aa495dce747cfcd14afa3668726d8152437699da", 0xdd}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, 0x2) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001300)=@id, &(0x7f0000001340)=0x10, 0x180000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001380)={0x42, 0x2}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000013c0)) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000001400)=@caif, 0x80, &(0x7f0000003780)=[{&(0x7f0000001480)=""/81, 0x51}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/117, 0x75}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/201, 0xc9}, {&(0x7f0000003680)=""/16, 0x10}, {&(0x7f00000036c0)=""/189, 0xbd}], 0x7, &(0x7f0000003800)=""/52, 0x34}, 0x4}, {{&(0x7f0000003840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f00000038c0)=""/227, 0xe3}, {&(0x7f00000039c0)=""/131, 0x83}, {&(0x7f0000003a80)=""/116, 0x74}, {&(0x7f0000003b00)=""/51, 0x33}, {&(0x7f0000003b40)=""/231, 0xe7}, {&(0x7f0000003c40)=""/170, 0xaa}], 0x6}, 0xc75}], 0x2, 0x2120, &(0x7f0000003e00)={0x0, 0x989680}) socket$tipc(0x1e, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x841) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x30, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x84, 0x3}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000004200)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x44990) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000004300)={'ip6_vti0\x00', &(0x7f0000004280)={'syztnl0\x00', 0x0, 0x2f, 0xb, 0x10, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x7, 0x8, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f0000004400)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000043c0)={&(0x7f0000004340)=@newtfilter={0x74, 0x2c, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x1, 0xfff2}, {0xb, 0x4}, {0x0, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xd0}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x200}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000c5) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000004440), r6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004480), 0x2000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f00000044c0)) listen(r10, 0x1) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000004500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r12) 563.776657ms ago: executing program 1 (id=2943): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0xe4, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc4afd7d6003dc31f4a665ecb2e52354"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f49ecda755e3deb63200e30de230a0488f06dbe8a30013bd3f1f5ef613ba10bc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1535ba3637e96c5a0bb0beaf89570ac2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "52de5f0a0e1ce4b14dad5107df20aa55"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e77f674779927abe0ef3d6911590b50"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80da54ec5c3bbdc70864f9b1d138aa5619bfdc698e332c953a69f352cc1149db"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 396.314938ms ago: executing program 8 (id=2944): r0 = socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)}}], 0x1, 0x2, 0x0) 385.086837ms ago: executing program 7 (id=2945): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff76, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r2], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0407000000000000000000000000000d00000000000000000000001302000000000000000000000a03000000000000005f00"], 0x0, 0x52}, 0x28) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7, 0x9, [0xf59, 0xee9, 0x1, 0x6, 0x0, 0x2, 0x1, 0x3, 0x3]}, &(0x7f0000000340)=0x1a) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e25, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0xf, 0x0) 359.513641ms ago: executing program 3 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 34) 279.831586ms ago: executing program 1 (id=2947): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bdbad6fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290009200600080028"], 0x48}, 0x1, 0x0, 0x0, 0x20886}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x9, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000fabc3f35b05c158effff0008000300b4e9d5556d99f019b4abedacf8bc5184e524cdda68a45ce8df56ee868315a5b2ec2e94f5645662228e2c7d23a3538b91f93570f7318d6b84a0bc3fad9908687b23dd77f27489832a815005777fadceb2ed63f68eed2341db56f09a0fc5ec4fa492dafc5bea759709e6c6a2578191bec084918d6d015ffe6cbade8144725b2abc06a12c323a3594cc86fc146e44dd1766be17a59ca3771c69f3992b8cc6b4e3a92620b3d08ad6ff6a46310ca85a4ccc83f5898592c79045e4cbc8", @ANYRES32=r8, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x24004811) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="8020010042000000500012800e00010069703665727370616e0000003c000280080001", @ANYRES32=0x0, @ANYBLOB="08001500d7a31d000400120014000600000000000000000000000000000000000600188000f8000008000d00ff"], 0x70}, 0x1, 0xba01}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r14, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88140002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x10}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xfd}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 206.049583ms ago: executing program 8 (id=2948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) listen(r1, 0x100101) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x4) (async) accept(r1, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x58, 0x42, 0x1, 0x0, 0x0, {0xb, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040006"]}, 0x58}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) 173.452681ms ago: executing program 3 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x1, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x4, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x0, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0x3}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0xe, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x480dc}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 0s ago: executing program 8 (id=2950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): evice eth1 [ 277.116271][T13561] 8021q: adding VLAN 0 to HW filter on device eth2 [ 277.118302][T13561] 8021q: adding VLAN 0 to HW filter on device eth3 [ 277.166737][ T5615] Bluetooth: hci7: command tx timeout [ 277.187852][T13570] syzkaller0: entered promiscuous mode [ 277.187891][T13570] syzkaller0: entered allmulticast mode [ 277.194288][T10563] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.197880][T10563] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 277.198063][T10563] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 277.230490][T10563] bond3: (slave veth5): making interface the new active one [ 277.239626][T10563] bond3: active interface up! [ 277.254018][T10564] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.255700][T10563] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.255740][T10563] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.255788][T10563] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.258800][T10564] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 277.268850][T10564] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 277.311901][T13576] netlink: 'syz.7.1920': attribute type 3 has an invalid length. [ 277.319787][T13576] netlink: 'syz.7.1920': attribute type 1 has an invalid length. [ 277.329988][T13576] NCSI netlink: No device for ifindex 0 [ 277.415725][T13578] ip6gretap0: entered promiscuous mode [ 277.670132][T13592] tipc: Can't bind to reserved service type 1 [ 277.781229][T13601] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 277.857639][T13601] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.932577][T13601] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 277.945401][T13601] bond10: (slave batadv1): making interface the new active one [ 277.958426][T13601] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 278.144695][T13614] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 278.151623][T13621] netlink: 'syz.1.1968': attribute type 11 has an invalid length. [ 278.208499][T13614] syzkaller0: entered promiscuous mode [ 278.208528][T13614] syzkaller0: entered allmulticast mode [ 279.244078][ T5615] Bluetooth: hci7: command tx timeout [ 281.088598][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.117553][T13622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.135768][T13622] nci: nci_start_poll: failed to set local general bytes [ 281.163875][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 281.164147][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.186276][T13615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.327273][ T5615] Bluetooth: hci7: command tx timeout [ 281.685586][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 281.696017][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 281.707968][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 281.720519][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 281.737821][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.647750][T13716] __nla_validate_parse: 10 callbacks suppressed [ 283.647802][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 283.662478][T13716] ip6gre1: entered promiscuous mode [ 283.662498][T13716] ip6gre1: entered allmulticast mode [ 283.671351][ T97] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.673030][ T97] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.693789][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.704661][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'. [ 283.814569][ T5615] Bluetooth: hci8: command tx timeout [ 284.006986][T13730] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1988'. [ 284.086205][T13687] lo speed is unknown, defaulting to 1000 [ 284.164108][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.525856][ T5713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.646743][T13769] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 284.662073][T13769] SET target dimension over the limit! [ 284.668163][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 284.677631][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 284.726946][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2001'. [ 284.740595][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'. [ 284.807240][T13769] bond10: entered promiscuous mode [ 284.812547][T13769] bond10: entered allmulticast mode [ 284.834981][T13781] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 284.897320][T13786] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2005'. [ 284.898778][T13778] xt_hashlimit: max too large, truncated to 1048576 [ 284.898860][T13778] xt_hashlimit: overflow, try lower: 0/0 [ 284.919119][T13786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 285.077518][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2008'. [ 285.126673][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.134253][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.134423][T13687] bridge_slave_0: entered allmulticast mode [ 285.154724][T13687] bridge_slave_0: entered promiscuous mode [ 285.176768][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.185534][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.185701][T13687] bridge_slave_1: entered allmulticast mode [ 285.202559][T13687] bridge_slave_1: entered promiscuous mode [ 285.345939][T13687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.372885][T13687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.459814][T13687] team0: Port device team_slave_0 added [ 285.472607][T13687] team0: Port device team_slave_1 added [ 285.597404][T13810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.611237][T13810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.636039][T13687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.636070][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.636120][T13687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.639220][T13687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.639234][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.639256][T13687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.670953][T13815] hsr_slave_1 (unregistering): left promiscuous mode [ 285.760117][T13687] hsr_slave_0: entered promiscuous mode [ 285.766866][T13687] hsr_slave_1: entered promiscuous mode [ 285.777534][T13687] debugfs: 'hsr0' already exists in 'hsr' [ 285.783390][T13687] Cannot create hsr debugfs directory [ 285.797783][T13790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.895325][ T5615] Bluetooth: hci8: command tx timeout [ 286.359215][T13836] tipc: Enabling of bearer rejected, failed to enable media [ 286.494681][ T30] audit: type=1804 audit(1788008699.919:10): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2023" name="/newroot/461/cgroup.controllers" dev="tmpfs" ino=2379 res=1 errno=0 [ 286.517744][ T30] audit: type=1800 audit(1788008699.949:11): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2023" name="cgroup.controllers" dev="tmpfs" ino=2379 res=0 errno=0 [ 286.545652][ T30] audit: type=1804 audit(1788008699.969:12): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2023" name="/newroot/461/cgroup.controllers" dev="tmpfs" ino=2379 res=1 errno=0 [ 286.592376][T10564] IPVS: starting estimator thread 0... [ 286.674743][T13845] IPVS: using max 29 ests per chain, 69600 per kthread [ 286.711709][T13847] siw: device registration error -23 [ 286.732360][T13687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 286.749228][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.769955][T13687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 286.781484][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.817449][T13852] veth0_macvtap: left allmulticast mode [ 286.827970][T13852] gre1: left allmulticast mode [ 286.834464][T13852] tipc: Resetting bearer [ 286.846682][T13852] syzkaller0: left promiscuous mode [ 286.846718][T13852] syzkaller0: left allmulticast mode [ 286.858710][T13852] bridge6: left promiscuous mode [ 286.892172][T13852] ip6gre1: left promiscuous mode [ 286.892215][T13852] ip6gre1: left allmulticast mode [ 286.929431][T13687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 286.941577][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.943350][T13687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 286.963897][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.009170][T13856] netlink: 'syz.7.2026': attribute type 4 has an invalid length. [ 287.266885][T13687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.323238][T13687] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.370663][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.370778][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.392681][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.392793][T10563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.420035][T13875] gre0: entered promiscuous mode [ 287.425539][T13875] gre0: entered allmulticast mode [ 287.431432][T13875] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 287.758792][T13892] netlink: 'syz.3.2035': attribute type 2 has an invalid length. [ 287.819216][T13890] netlink: 'syz.7.2036': attribute type 9 has an invalid length. [ 287.841444][T13890] erspan0: entered promiscuous mode [ 287.841644][T13890] macvlan2: entered promiscuous mode [ 287.842114][T13890] macvlan2: entered allmulticast mode [ 287.842132][T13890] erspan0: entered allmulticast mode [ 287.963952][ T5615] Bluetooth: hci8: command tx timeout [ 288.511901][T13938] netlink: 'syz.7.2047': attribute type 22 has an invalid length. [ 288.538497][T13926] netlink: 'syz.7.2047': attribute type 22 has an invalid length. [ 288.819968][T13687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.924565][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.013138][T13961] netlink: 'syz.7.2052': attribute type 2 has an invalid length. [ 289.542932][T13687] veth0_vlan: entered promiscuous mode [ 289.550545][T13687] veth1_vlan: entered promiscuous mode [ 289.564199][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 289.564502][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 289.627926][T13687] veth0_macvtap: entered promiscuous mode [ 289.641054][T13687] veth1_macvtap: entered promiscuous mode [ 289.662770][T13687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.671586][T13995] netlink: 'syz.1.2060': attribute type 5 has an invalid length. [ 289.693107][T13687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.729011][T10566] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.729205][T10566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.729353][T10566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.744133][T10566] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.915510][T14003] sctp: [Deprecated]: syz.1.2064 (pid 14003) Use of int in max_burst socket option deprecated. [ 289.915510][T14003] Use struct sctp_assoc_value instead [ 289.947949][T10559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.947999][T10559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.047333][ T5615] Bluetooth: hci8: command tx timeout [ 290.056002][T10559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.056041][T10559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.210936][T14012] __nla_validate_parse: 11 callbacks suppressed [ 290.211207][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 290.311584][T14021] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1974'. [ 290.828694][T14053] syzkaller0: entered promiscuous mode [ 290.828733][T14053] syzkaller0: entered allmulticast mode [ 290.931422][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 290.975017][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 290.988515][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 291.090544][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2081'. [ 291.105344][T14058] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.147785][T14067] ovs-system: entered promiscuous mode [ 291.707551][T14105] netlink: 'syz.3.2088': attribute type 2 has an invalid length. [ 291.707592][T14105] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2088'. [ 291.932314][T14111] syzkaller0: entered promiscuous mode [ 291.932353][T14111] syzkaller0: entered allmulticast mode [ 291.981798][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 291.986823][T14107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2089'. [ 292.419375][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 292.719382][T14132] syz_tun: entered allmulticast mode [ 292.733261][T14131] syz_tun: left allmulticast mode [ 293.775545][T14177] netlink: 'syz.1.2103': attribute type 7 has an invalid length. [ 294.266168][T14198] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 294.362016][T14198] 8021q: adding VLAN 0 to HW filter on device bond13 [ 294.367772][T14192] syzkaller1: entered promiscuous mode [ 294.367799][T14192] syzkaller1: entered allmulticast mode [ 294.533319][T14214] x_tables: duplicate underflow at hook 1 [ 294.547158][T14198] bond13 (unregistering): Released all slaves [ 294.596447][T14216] ip6gretap0: entered promiscuous mode [ 294.765205][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 294.801189][T14223] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 294.804771][T14224] FAULT_INJECTION: forcing a failure. [ 294.804771][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 294.804799][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.3.2114 Not tainted syzkaller #0 PREEMPT(full) [ 294.804820][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.804833][T14224] Call Trace: [ 294.804841][T14224] [ 294.804848][T14224] dump_stack_lvl+0xe8/0x150 [ 294.804885][T14224] should_fail_ex+0x410/0x560 [ 294.804917][T14224] should_failslab+0xa8/0x100 [ 294.804942][T14224] __kmalloc_noprof+0xfe/0x720 [ 294.804967][T14224] ? rcu_is_watching+0x16/0xb0 [ 294.804989][T14224] ? tomoyo_realpath_from_path+0xef/0x640 [ 294.805008][T14224] ? tomoyo_realpath_from_path+0xef/0x640 [ 294.805034][T14224] tomoyo_realpath_from_path+0xef/0x640 [ 294.805064][T14224] ? tomoyo_path_number_perm+0x219/0x5f0 [ 294.805089][T14224] tomoyo_path_number_perm+0x246/0x5f0 [ 294.805117][T14224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.805142][T14224] ? __lock_acquire+0x6df/0x2e50 [ 294.805175][T14224] ? hook_file_ioctl+0x1f2/0x600 [ 294.805222][T14224] ? __fget_files+0x2a/0x420 [ 294.805247][T14224] ? __fget_files+0x2a/0x420 [ 294.805269][T14224] ? __fget_files+0x3a2/0x420 [ 294.805290][T14224] ? __fget_files+0x2a/0x420 [ 294.805318][T14224] security_file_ioctl+0xc3/0x2a0 [ 294.805344][T14224] __se_sys_ioctl+0x47/0x170 [ 294.805365][T14224] do_syscall_64+0x166/0x520 [ 294.805389][T14224] ? trace_irq_disable+0x3b/0x140 [ 294.805406][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.805426][T14224] ? clear_bhb_loop+0x70/0xc0 [ 294.805449][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.805468][T14224] RIP: 0033:0x7ff04c99e159 [ 294.805484][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.805499][T14224] RSP: 002b:00007ff04d7f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.805520][T14224] RAX: ffffffffffffffda RBX: 00007ff04cc25fa0 RCX: 00007ff04c99e159 [ 294.805534][T14224] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 294.805546][T14224] RBP: 00007ff04d7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 294.805558][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.805570][T14224] R13: 00007ff04cc26038 R14: 00007ff04cc25fa0 R15: 00007fff4926faa8 [ 294.805601][T14224] [ 294.805621][T14224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.123280][T14229] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 295.303547][T14243] __nla_validate_parse: 3 callbacks suppressed [ 295.309967][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 296.003085][T14266] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 296.041055][T14272] FAULT_INJECTION: forcing a failure. [ 296.041055][T14272] name failslab, interval 1, probability 0, space 0, times 0 [ 296.041115][T14272] CPU: 1 UID: 0 PID: 14272 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(full) [ 296.041134][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.041142][T14272] Call Trace: [ 296.041148][T14272] [ 296.041155][T14272] dump_stack_lvl+0xe8/0x150 [ 296.041182][T14272] should_fail_ex+0x410/0x560 [ 296.041212][T14272] should_failslab+0xa8/0x100 [ 296.041235][T14272] __kmalloc_noprof+0xfe/0x720 [ 296.041263][T14272] ? tomoyo_encode+0x2ad/0x570 [ 296.041280][T14272] ? tomoyo_encode+0x2ad/0x570 [ 296.041303][T14272] tomoyo_encode+0x2ad/0x570 [ 296.041327][T14272] tomoyo_realpath_from_path+0x5fa/0x640 [ 296.041356][T14272] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.041381][T14272] tomoyo_path_number_perm+0x246/0x5f0 [ 296.041408][T14272] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.041432][T14272] ? __lock_acquire+0x6df/0x2e50 [ 296.041465][T14272] ? hook_file_ioctl+0x1f2/0x600 [ 296.041510][T14272] ? __fget_files+0x2a/0x420 [ 296.041536][T14272] ? __fget_files+0x2a/0x420 [ 296.041565][T14272] ? __fget_files+0x3a2/0x420 [ 296.041589][T14272] ? __fget_files+0x2a/0x420 [ 296.041615][T14272] security_file_ioctl+0xc3/0x2a0 [ 296.041641][T14272] __se_sys_ioctl+0x47/0x170 [ 296.041662][T14272] do_syscall_64+0x166/0x520 [ 296.041685][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.041703][T14272] ? clear_bhb_loop+0x70/0xc0 [ 296.041725][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.041742][T14272] RIP: 0033:0x7f8f0c99e159 [ 296.041759][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.041775][T14272] RSP: 002b:00007f8f0d85c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.041794][T14272] RAX: ffffffffffffffda RBX: 00007f8f0cc25fa0 RCX: 00007f8f0c99e159 [ 296.041807][T14272] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 296.041818][T14272] RBP: 00007f8f0d85c090 R08: 0000000000000000 R09: 0000000000000000 [ 296.041830][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.041841][T14272] R13: 00007f8f0cc26038 R14: 00007f8f0cc25fa0 R15: 00007ffc98880ba8 [ 296.041871][T14272] [ 296.058944][T14272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.072489][T14266] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.323112][ T12] IPVS: starting estimator thread 0... [ 296.355053][T14278] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 296.403925][T14280] IPVS: using max 38 ests per chain, 91200 per kthread [ 296.462359][T14286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2129'. [ 297.005060][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 297.014163][T14309] netlink: 'syz.3.2138': attribute type 10 has an invalid length. [ 297.029259][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 297.126407][T14309] geneve6: entered promiscuous mode [ 297.131826][T14309] geneve6: entered allmulticast mode [ 297.139858][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2136'. [ 297.214630][T14324] Bluetooth: hci0: unsupported parameter 5134 [ 297.221073][T14324] Bluetooth: hci0: unsupported parameter 8192 [ 297.227656][T14324] Bluetooth: hci0: unsupported parameter 5134 [ 297.234168][T14324] Bluetooth: hci0: unsupported parameter 8192 [ 297.276393][T14320] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2139'. [ 297.332336][T14290] syzkaller0: left promiscuous mode [ 297.332378][T14290] syzkaller0: left allmulticast mode [ 297.446074][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 297.624129][T14337] syz.2.2143: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 297.624555][T14337] CPU: 1 UID: 0 PID: 14337 Comm: syz.2.2143 Not tainted syzkaller #0 PREEMPT(full) [ 297.624577][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.624589][T14337] Call Trace: [ 297.624596][T14337] [ 297.624604][T14337] dump_stack_lvl+0xe8/0x150 [ 297.624636][T14337] warn_alloc+0x24d/0x270 [ 297.624666][T14337] ? kasan_save_track+0x4f/0x80 [ 297.624682][T14337] ? kasan_save_track+0x3e/0x80 [ 297.624701][T14337] ? __pfx_warn_alloc+0x10/0x10 [ 297.624727][T14337] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 297.624754][T14337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.624791][T14337] __vmalloc_node_range_noprof+0x127/0x1540 [ 297.624840][T14337] ? rcu_is_watching+0x16/0xb0 [ 297.624866][T14337] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.624893][T14337] ? __kmalloc_cache_noprof+0x321/0x600 [ 297.624920][T14337] ? __kmalloc_cache_noprof+0x14d/0x600 [ 297.624948][T14337] ? xskq_create+0x56/0x220 [ 297.624974][T14337] xskq_create+0x148/0x220 [ 297.624997][T14337] ? xsk_init_queue+0x8a/0xe0 [ 297.625021][T14337] xsk_init_queue+0x8a/0xe0 [ 297.625047][T14337] xsk_setsockopt+0x52a/0x960 [ 297.625071][T14337] ? __pfx_xsk_setsockopt+0x10/0x10 [ 297.625094][T14337] ? __pfx_aa_sk_perm+0x10/0x10 [ 297.625132][T14337] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 297.625154][T14337] ? __pfx_xsk_setsockopt+0x10/0x10 [ 297.625176][T14337] do_sock_setsockopt+0x17c/0x1b0 [ 297.625207][T14337] __x64_sys_setsockopt+0x13d/0x1b0 [ 297.625234][T14337] do_syscall_64+0x166/0x520 [ 297.625253][T14337] ? trace_irq_disable+0x3b/0x140 [ 297.625270][T14337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.625289][T14337] ? clear_bhb_loop+0x70/0xc0 [ 297.625312][T14337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.625331][T14337] RIP: 0033:0x7f8f0c99e159 [ 297.625349][T14337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.625377][T14337] RSP: 002b:00007f8f0d85c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.625398][T14337] RAX: ffffffffffffffda RBX: 00007f8f0cc25fa0 RCX: 00007f8f0c99e159 [ 297.625412][T14337] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 297.625424][T14337] RBP: 00007f8f0ca35024 R08: 0000000000000004 R09: 0000000000000000 [ 297.625436][T14337] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.625449][T14337] R13: 00007f8f0cc26038 R14: 00007f8f0cc25fa0 R15: 00007ffc98880ba8 [ 297.625481][T14337] [ 297.633551][T14337] Mem-Info: [ 297.633565][T14337] active_anon:7482 inactive_anon:0 isolated_anon:0 [ 297.633565][T14337] active_file:0 inactive_file:43587 isolated_file:0 [ 297.633565][T14337] unevictable:0 dirty:222 writeback:0 [ 297.633565][T14337] slab_reclaimable:12409 slab_unreclaimable:125184 [ 297.633565][T14337] mapped:51349 shmem:716 pagetables:1491 [ 297.633565][T14337] sec_pagetables:0 bounce:0 [ 297.633565][T14337] kernel_misc_reclaimable:0 [ 297.633565][T14337] free:1245181 free_pcp:12065 free_cma:0 [ 297.633615][T14337] Node 0 active_anon:29928kB inactive_anon:0kB active_file:0kB inactive_file:174148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205396kB dirty:888kB writeback:0kB shmem:2864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16524kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.633669][T14337] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.633716][T14337] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.633774][T14337] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 297.633807][T14337] Node 0 DMA32 free:1020728kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29928kB inactive_anon:0kB active_file:0kB inactive_file:174148kB unevictable:0kB writepending:888kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:47512kB local_pcp:31496kB free_cma:0kB [ 297.633861][T14337] lowmem_reserve[]: 0 0 0 0 0 [ 297.633891][T14337] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.633941][T14337] lowmem_reserve[]: 0 0 0 0 0 [ 297.633972][T14337] Node 1 Normal free:3944636kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:748kB free_cma:0kB [ 297.634025][T14337] lowmem_reserve[]: 0 0 0 0 0 [ 297.634056][T14337] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.634161][T14337] Node 0 DMA32: 642*4kB (UM) 748*8kB (UME) 495*16kB (UME) 249*32kB (UME) 96*64kB (UME) 32*128kB (UME) 22*256kB (UM) 27*512kB (UM) 20*1024kB (UM) 4*2048kB (UME) 229*4096kB (UM) = 1020792kB [ 297.634305][T14337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 297.634400][T14337] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 3*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944636kB [ 297.634549][T14337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.634564][T14337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.634579][T14337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.634594][T14337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.634611][T14337] 44299 total pagecache pages [ 297.634622][T14337] 0 pages in swap cache [ 297.634629][T14337] Free swap = 124996kB [ 297.634636][T14337] Total swap = 124996kB [ 297.634644][T14337] 2097051 pages RAM [ 297.634650][T14337] 0 pages HighMem/MovableOnly [ 297.634657][T14337] 428730 pages reserved [ 297.634664][T14337] 0 pages cma reserved [ 297.763780][T14341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2144'. [ 297.833252][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2144'. [ 297.992940][T14341] ip6gretap0: entered promiscuous mode [ 298.012957][T14341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.190886][T14341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.223208][T14341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.290071][T14341] veth1_vlan: left promiscuous mode [ 298.301758][T14341] veth0_vlan: left promiscuous mode [ 298.314290][T14341] veth0_vlan: entered promiscuous mode [ 298.322799][T14341] tipc: Resetting bearer [ 298.347370][T14341] veth1_vlan: entered promiscuous mode [ 298.416677][T14341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.423199][T14341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.433156][T14341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.479531][T14341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.517367][T14341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.520358][T14341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.527468][T14341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.542391][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.555948][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 298.575529][ T49] bond0: (slave bridge2): link status up again after 0 ms [ 298.593945][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 298.616256][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 298.620515][T14341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.631272][T14341] bridge4: port 1(erspan0) entered blocking state [ 298.631381][T14341] bridge4: port 1(erspan0) entered forwarding state [ 298.635708][T10562] bond0: (slave bridge2): link status up again after 0 ms [ 298.655146][T10561] bond0: (slave bridge2): link status up again after 0 ms [ 298.655216][T10561] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 298.681507][T14341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.689497][T10561] bond0: (slave bridge2): link status up again after 0 ms [ 298.699329][T14341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.734044][ T49] bond0: (slave bridge2): link status up again after 0 ms [ 298.808984][T14341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.813056][T14341] 8021q: adding VLAN 0 to HW filter on device bond11 [ 298.819883][T14341] 8021q: adding VLAN 0 to HW filter on device bond12 [ 298.828176][ T5727] lo speed is unknown, defaulting to 1000 [ 298.828197][ T5727] syz2: Port: 1 Link ACTIVE [ 298.872149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.872263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.878565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.878661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.915419][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 298.924566][T14377] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 299.084947][ T1036] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.084998][ T1036] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 299.095834][ T1036] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.095863][ T1036] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 299.095895][ T1036] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.095918][ T1036] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 299.095949][ T1036] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.095971][ T1036] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 299.425103][T14406] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 299.433110][T14406] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 299.442219][T14406] NCSI netlink: No device for ifindex 0 [ 299.442407][T14406] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 299.442425][T14406] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 299.442441][T14406] NCSI netlink: No device for ifindex 0 [ 299.442569][T14406] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 299.442585][T14406] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 299.442599][T14406] NCSI netlink: No device for ifindex 0 [ 299.442734][T14406] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 299.442750][T14406] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 299.442764][T14406] NCSI netlink: No device for ifindex 0 [ 299.442890][T14406] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 299.442907][T14406] NCSI netlink: No device for ifindex 0 [ 299.443037][T14406] NCSI netlink: No device for ifindex 0 [ 299.443200][T14406] NCSI netlink: No device for ifindex 0 [ 299.443343][T14406] NCSI netlink: No device for ifindex 0 [ 299.551439][T14406] NCSI netlink: No device for ifindex 0 [ 299.557539][T14406] NCSI netlink: No device for ifindex 0 [ 299.563332][T14406] NCSI netlink: No device for ifindex 0 [ 299.569787][T14406] NCSI netlink: No device for ifindex 0 [ 299.577465][T14393] syzkaller1: entered promiscuous mode [ 299.577503][T14393] syzkaller1: entered allmulticast mode [ 299.583230][T14406] NCSI netlink: No device for ifindex 0 [ 299.583361][T14406] NCSI netlink: No device for ifindex 0 [ 299.589388][T14406] NCSI netlink: No device for ifindex 0 [ 299.589618][T14406] NCSI netlink: No device for ifindex 0 [ 299.589738][T14406] NCSI netlink: No device for ifindex 0 [ 299.589857][T14406] NCSI netlink: No device for ifindex 0 [ 299.589974][T14406] NCSI netlink: No device for ifindex 0 [ 299.590093][T14406] NCSI netlink: No device for ifindex 0 [ 299.590218][T14406] NCSI netlink: No device for ifindex 0 [ 299.590336][T14406] NCSI netlink: No device for ifindex 0 [ 299.590481][T14406] NCSI netlink: No device for ifindex 0 [ 299.590955][T14406] NCSI netlink: No device for ifindex 0 [ 299.591075][T14406] NCSI netlink: No device for ifindex 0 [ 299.591220][T14406] NCSI netlink: No device for ifindex 0 [ 299.591531][T14406] NCSI netlink: No device for ifindex 0 [ 299.591816][T14406] NCSI netlink: No device for ifindex 0 [ 299.591988][T14406] NCSI netlink: No device for ifindex 0 [ 299.592107][T14406] NCSI netlink: No device for ifindex 0 [ 299.592233][T14406] NCSI netlink: No device for ifindex 0 [ 299.592350][T14406] NCSI netlink: No device for ifindex 0 [ 299.592467][T14406] NCSI netlink: No device for ifindex 0 [ 299.592583][T14406] NCSI netlink: No device for ifindex 0 [ 299.595967][T14406] NCSI netlink: No device for ifindex 0 [ 299.596756][T14406] NCSI netlink: No device for ifindex 0 [ 299.596876][T14406] NCSI netlink: No device for ifindex 0 [ 299.597088][T14406] NCSI netlink: No device for ifindex 0 [ 299.597219][T14406] NCSI netlink: No device for ifindex 0 [ 299.597339][T14406] NCSI netlink: No device for ifindex 0 [ 299.597485][T14406] NCSI netlink: No device for ifindex 0 [ 299.598163][T14406] NCSI netlink: No device for ifindex 0 [ 299.598292][T14406] NCSI netlink: No device for ifindex 0 [ 299.598411][T14406] NCSI netlink: No device for ifindex 0 [ 299.598529][T14406] NCSI netlink: No device for ifindex 0 [ 299.599281][T14406] NCSI netlink: No device for ifindex 0 [ 299.599447][T14406] NCSI netlink: No device for ifindex 0 [ 299.599566][T14406] NCSI netlink: No device for ifindex 0 [ 299.599683][T14406] NCSI netlink: No device for ifindex 0 [ 299.601109][T14406] NCSI netlink: No device for ifindex 0 [ 299.601253][T14406] NCSI netlink: No device for ifindex 0 [ 299.601818][T14406] NCSI netlink: No device for ifindex 0 [ 299.601946][T14406] NCSI netlink: No device for ifindex 0 [ 299.602066][T14406] NCSI netlink: No device for ifindex 0 [ 299.619065][T14406] NCSI netlink: No device for ifindex 0 [ 299.619237][T14406] NCSI netlink: No device for ifindex 0 [ 299.621695][T14406] NCSI netlink: No device for ifindex 0 [ 299.621832][T14406] NCSI netlink: No device for ifindex 0 [ 299.621955][T14406] NCSI netlink: No device for ifindex 0 [ 299.622075][T14406] NCSI netlink: No device for ifindex 0 [ 299.622206][T14406] NCSI netlink: No device for ifindex 0 [ 299.624174][T14406] NCSI netlink: No device for ifindex 0 [ 299.625822][T14406] NCSI netlink: No device for ifindex 0 [ 299.625946][T14406] NCSI netlink: No device for ifindex 0 [ 299.626064][T14406] NCSI netlink: No device for ifindex 0 [ 299.838593][ T12] net_ratelimit: 49 callbacks suppressed [ 299.838613][ T12] bond0: (slave bridge2): link status up again after 0 ms [ 299.855145][T10563] bond0: (slave bridge2): link status up again after 0 ms [ 299.873735][ T12] bond0: (slave bridge2): link status up again after 0 ms [ 299.895132][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 299.913854][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 299.937488][ T1036] bond0: (slave bridge2): link status up again after 0 ms [ 299.958889][ T12] bond0: (slave bridge2): link status up again after 0 ms [ 299.976667][ T12] bond0: (slave bridge2): link status up again after 0 ms [ 299.994476][T10562] bond0: (slave bridge2): link status up again after 0 ms [ 300.013965][ T12] bond0: (slave bridge2): link status up again after 0 ms [ 300.680919][T14454] __nla_validate_parse: 69 callbacks suppressed [ 300.687799][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2166'. [ 301.108563][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 301.174072][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 301.200462][T14466] IPv6: sit1: Disabled Multicast RS [ 301.221449][T14476] x_tables: unsorted underflow at hook 2 [ 301.410747][T14482] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2177'. [ 301.420273][T10567] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.420316][T10567] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.420354][T10567] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.429595][T10563] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.446701][T14487] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2173'. [ 301.566609][T14488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2175'. [ 301.580021][T14499] netlink: 21 bytes leftover after parsing attributes in process `syz.8.2177'. [ 301.603834][T14501] netlink: 21 bytes leftover after parsing attributes in process `syz.8.2177'. [ 301.765925][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 301.935444][T14513] pimreg: entered allmulticast mode [ 302.022513][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2180'. [ 302.539321][T14557] batadv_slave_1: entered promiscuous mode [ 302.687942][T14568] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 302.865724][T14575] syzkaller0: entered promiscuous mode [ 302.871434][T14575] syzkaller0: entered allmulticast mode [ 303.051064][T14581] team0: Port device dummy0 added [ 303.098531][T14548] batadv_slave_1: left promiscuous mode [ 303.159398][T14589] FAULT_INJECTION: forcing a failure. [ 303.159398][T14589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.187066][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.2.2202 Not tainted syzkaller #0 PREEMPT(full) [ 303.187094][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.187105][T14589] Call Trace: [ 303.187113][T14589] [ 303.187121][T14589] dump_stack_lvl+0xe8/0x150 [ 303.187153][T14589] should_fail_ex+0x410/0x560 [ 303.187184][T14589] _copy_from_user+0x2d/0xb0 [ 303.187203][T14589] kstrtouint_from_user+0xd6/0x180 [ 303.187231][T14589] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 303.187265][T14589] ? lock_acquire+0x115/0x350 [ 303.187290][T14589] proc_fail_nth_write+0x8e/0x210 [ 303.187318][T14589] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 303.187354][T14589] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 303.187380][T14589] vfs_write+0x296/0xba0 [ 303.187415][T14589] ? __pfx_vfs_write+0x10/0x10 [ 303.187443][T14589] ? __fget_files+0x2a/0x420 [ 303.187474][T14589] ? __fget_files+0x3a2/0x420 [ 303.187496][T14589] ? __fget_files+0x2a/0x420 [ 303.187526][T14589] ksys_write+0x150/0x270 [ 303.187551][T14589] ? __pfx_ksys_write+0x10/0x10 [ 303.187587][T14589] do_syscall_64+0x166/0x520 [ 303.187619][T14589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.187639][T14589] ? clear_bhb_loop+0x70/0xc0 [ 303.187663][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.187681][T14589] RIP: 0033:0x7f8f0c95e98e [ 303.187699][T14589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.187716][T14589] RSP: 002b:00007f8f0d85bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.187736][T14589] RAX: ffffffffffffffda RBX: 00007f8f0d85c6c0 RCX: 00007f8f0c95e98e [ 303.187749][T14589] RDX: 0000000000000001 RSI: 00007f8f0d85c0a0 RDI: 0000000000000005 [ 303.187761][T14589] RBP: 00007f8f0d85c090 R08: 0000000000000000 R09: 0000000000000000 [ 303.187773][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.187784][T14589] R13: 00007f8f0cc26038 R14: 00007f8f0cc25fa0 R15: 00007ffc98880ba8 [ 303.187817][T14589] [ 303.599935][T14603] syzkaller0: Caught tx_queue_len zero misconfig [ 303.688468][T14603] bond9: option mode: unable to set because the bond device has slaves [ 304.276783][T14633] validate_nla: 125 callbacks suppressed [ 304.276819][T14633] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 304.285198][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.884954][T10564] net_ratelimit: 30 callbacks suppressed [ 304.885021][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 304.995353][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 305.103636][T10562] bond0: (slave bridge2): failed to get link speed/duplex [ 305.223576][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 305.334145][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 305.444752][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 305.554222][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 305.563656][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 305.564095][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.601410][T14686] tipc: Resetting bearer [ 305.616594][T14686] vlan0: entered promiscuous mode [ 305.663543][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 305.671784][T14685] Bluetooth: MGMT ver 1.23 [ 305.671854][T14685] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 305.693029][T14685] tap0: tun_chr_ioctl cmd 2148553947 [ 305.777865][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 305.885013][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 305.980432][T14706] __nla_validate_parse: 11 callbacks suppressed [ 305.980486][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2230'. [ 306.206270][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.830374][T14753] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 306.911096][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911209][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911312][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911397][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911475][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911556][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911632][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911698][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911785][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911860][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.911933][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912005][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912078][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912152][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912222][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912302][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.912376][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.936612][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.936710][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.936781][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.936852][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.936935][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937010][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937078][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937148][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937219][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937305][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937379][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937455][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937538][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937613][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937687][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937768][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937841][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.937922][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.938000][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.938075][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.939219][T14757] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 306.939336][T14757] syzkaller1: linktype set to 825 [ 306.979160][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979268][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979346][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979418][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979491][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979563][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979641][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979712][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979785][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979856][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.979930][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.980001][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.980075][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.980147][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.980228][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.980301][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.983708][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.991620][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.991717][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.991793][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.991865][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.991953][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.992026][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.992101][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.992173][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.992252][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 306.992397][T14755] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 307.355370][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2244'. [ 307.619011][T14775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input10 [ 307.634962][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 307.659628][T14746] netlink: 'syz.7.2242': attribute type 1 has an invalid length. [ 307.865553][T14752] macvlan0: entered promiscuous mode [ 307.865596][T14752] macvlan0: entered allmulticast mode [ 307.870528][T14752] bond1: entered promiscuous mode [ 307.942173][T14752] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 307.968803][T14752] bond1: left promiscuous mode [ 307.976259][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 308.918239][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 309.082469][T14837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2260'. [ 309.259852][T14852] team0: entered promiscuous mode [ 309.259889][T14852] team_slave_0: entered promiscuous mode [ 309.260102][T14852] team_slave_1: entered promiscuous mode [ 309.260263][T14852] team0: entered allmulticast mode [ 309.260279][T14852] team_slave_0: entered allmulticast mode [ 309.260294][T14852] team_slave_1: entered allmulticast mode [ 309.260807][T14852] team0: Cannot enslave team device to itself [ 309.290809][T14854] team0: Cannot enslave team device to itself [ 309.579034][ T5276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.596895][T14868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2267'. [ 309.878703][T14875] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 309.926248][T14875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 309.994830][T10563] net_ratelimit: 31 callbacks suppressed [ 309.994882][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 310.034301][T14883] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2270'. [ 310.068709][T14883] gretap0: entered promiscuous mode [ 310.094901][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 310.103632][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 310.192879][T14897] pimreg: entered allmulticast mode [ 310.235709][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 310.344050][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 310.513491][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 310.626266][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 310.733694][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 310.845337][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 310.954878][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 311.003394][T14946] IPVS: Unknown mcast interface: rose0 [ 311.046591][T14946] __nla_validate_parse: 3 callbacks suppressed [ 311.047475][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 311.064661][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 311.832607][T14981] x_tables: duplicate underflow at hook 2 [ 312.147764][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2297'. [ 312.318555][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 312.425582][T15026] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 312.467627][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'. [ 312.477728][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 312.959157][T15061] SET target dimension over the limit! [ 313.121325][T15071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'. [ 313.148106][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2320'. [ 313.359705][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2325'. [ 313.638796][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 313.725965][T15108] netlink: 67 bytes leftover after parsing attributes in process `syz.7.2331'. [ 314.138836][T15126] netlink: 'syz.2.2336': attribute type 11 has an invalid length. [ 314.335126][T15140] xt_hashlimit: size too large, truncated to 1048576 [ 314.438692][T15135] bridge_slave_0 (unregistering): left allmulticast mode [ 314.438740][T15135] bridge_slave_0 (unregistering): left promiscuous mode [ 314.438828][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.557907][ T5713] hid-generic 0005:0B57:0003.0002: item fetching failed at offset 0/1 [ 314.568583][ T5713] hid-generic 0005:0B57:0003.0002: probe with driver hid-generic failed with error -22 [ 315.106159][T10567] net_ratelimit: 31 callbacks suppressed [ 315.106211][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 315.216505][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 315.324565][T10562] bond0: (slave bridge2): failed to get link speed/duplex [ 315.334648][T15190] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.335149][T15190] block nbd2: shutting down sockets [ 315.434587][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 315.544965][T10557] bond0: (slave bridge2): failed to get link speed/duplex [ 315.653785][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 315.764825][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 315.875305][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 315.984660][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 316.089025][T15234] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 316.100897][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 316.339412][T15243] xfrm0: entered promiscuous mode [ 316.339652][T15243] xfrm0: entered allmulticast mode [ 316.339689][T15243] team0: Device xfrm0 is of different type [ 316.434899][T15243] tipc: Enabled bearer , priority 0 [ 316.782376][T15257] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.783005][T15257] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.814467][T15257] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.814641][T15257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.814974][T15257] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.815087][T15257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.873127][T15263] __nla_validate_parse: 6 callbacks suppressed [ 316.876107][T15263] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2369'. [ 316.892479][T15257] team0: Port device bridge0 added [ 317.092818][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2371'. [ 317.111222][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.111432][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.232372][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.352042][T15291] netlink: 'syz.1.2375': attribute type 26 has an invalid length. [ 317.375957][T15268] erspan0: left allmulticast mode [ 317.381503][T15268] macvlan2: left promiscuous mode [ 317.415723][T10557] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.415811][T10557] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.416184][T10557] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.416233][T10557] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.449080][T15293] netdevsim netdevsim1 €Â: renamed from netdevsim0 [ 317.617090][T15297] syzkaller1: entered promiscuous mode [ 317.622864][T15297] syzkaller1: entered allmulticast mode [ 317.724184][T15295] batadv0: entered promiscuous mode [ 317.727367][T15295] macvtap0: entered promiscuous mode [ 317.727592][T15295] macvtap0: entered allmulticast mode [ 317.727606][T15295] batadv0: entered allmulticast mode [ 317.728912][T15295] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 317.736981][T15295] batadv0: left allmulticast mode [ 317.737177][T15295] batadv0: left promiscuous mode [ 317.913079][T15312] tap0: tun_chr_ioctl cmd 1074025677 [ 317.919203][T15312] tap0: linktype set to 804 [ 318.102623][T15321] bridge0: port 1(erspan0) entered blocking state [ 318.102738][T15321] bridge0: port 1(erspan0) entered disabled state [ 318.102928][T15321] erspan0: entered allmulticast mode [ 318.140939][T15321] erspan0: entered promiscuous mode [ 318.141498][T15321] bridge0: port 1(erspan0) entered blocking state [ 318.141604][T15321] bridge0: port 1(erspan0) entered forwarding state [ 318.504972][T15324] lo speed is unknown, defaulting to 1000 [ 318.506005][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2392'. [ 318.682481][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 318.706787][T15356] gre0: left promiscuous mode [ 318.706826][T15356] gre0: left allmulticast mode [ 318.707643][T15356] gretap0: left promiscuous mode [ 318.790167][T15356] veth0_to_team: left allmulticast mode [ 318.892446][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 319.322170][T15371] tipc: Enabling of bearer rejected, failed to enable media [ 320.164461][T10563] net_ratelimit: 24 callbacks suppressed [ 320.164505][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 320.201792][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 320.228708][T15434] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2407'. [ 320.275541][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 320.384209][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 320.495428][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 320.604738][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 320.659695][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'. [ 320.676029][T15454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2414'. [ 320.713844][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 320.828573][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 320.935439][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 321.050169][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 321.132430][T15471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.331204][T15473] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2420'. [ 321.918771][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 322.179891][T15498] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.193043][T15498] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.401319][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2433'. [ 322.440760][T15498] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.451994][T15498] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.556585][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2434'. [ 322.709326][T15498] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.709383][T15498] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.789667][T15533] tipc: Enabling of bearer rejected, already enabled [ 322.982502][T15498] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.997271][T15498] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.233570][T15557] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2440'. [ 323.272996][T15550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2441'. [ 323.637371][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2443'. [ 323.985751][ T49] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.985831][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.057389][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 324.060735][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 324.103645][ T1036] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.103699][ T1036] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.324409][T10563] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.324456][T10563] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.414963][T10563] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.415054][T10563] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.773303][T15625] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 324.895823][T15625] bond11: entered promiscuous mode [ 324.896231][T15625] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.039044][T15642] netlink: 'syz.7.2456': attribute type 1 has an invalid length. [ 325.111629][T15642] bond1: entered promiscuous mode [ 325.112652][T15642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.120615][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 325.125008][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 325.255426][T10557] net_ratelimit: 25 callbacks suppressed [ 325.255486][T10557] bond0: (slave bridge2): failed to get link speed/duplex [ 325.366757][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 325.380276][T15656] lo: entered allmulticast mode [ 325.474017][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 325.586004][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 325.694871][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 325.765584][T15675] macvlan0: entered promiscuous mode [ 325.765770][T15675] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 325.765786][T15675] netlink: 'syz.3.2462': attribute type 2 has an invalid length. [ 325.801044][T15678] openvswitch: netlink: Flow key attr not present in new flow. [ 325.815390][T10557] bond0: (slave bridge2): failed to get link speed/duplex [ 325.909344][T15680] xfrm0: Caught tx_queue_len zero misconfig [ 325.925427][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 326.044528][T10557] bond0: (slave bridge2): failed to get link speed/duplex [ 326.063038][T15684] ip6tnl0: Caught tx_queue_len zero misconfig [ 326.106984][T15684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.154378][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 326.212236][T15654] lo: left allmulticast mode [ 326.440162][T15695] netlink: 'syz.8.2471': attribute type 29 has an invalid length. [ 326.760630][T15690] syz_tun: entered allmulticast mode [ 326.848586][T15690] dvmrp8: entered allmulticast mode [ 327.146229][T15688] syz_tun: left allmulticast mode [ 328.317958][ T5627] block nbd2: Receive control failed (result -32) [ 328.321969][ T5631] block nbd2: Receive control failed (result -32) [ 329.090842][T15791] __nla_validate_parse: 9 callbacks suppressed [ 329.090886][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 329.142153][T15791] bond15: option lacp_active: invalid value (5) [ 329.150491][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 329.170752][T15791] bond15 (unregistering): Released all slaves [ 329.326662][T15799] erspan1: entered allmulticast mode [ 329.390994][T15812] bridge0: port 1(erspan0) entered disabled state [ 329.398179][T15812] bridge0: entered allmulticast mode [ 329.414695][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 329.441185][T15812] erspan0: left allmulticast mode [ 329.451513][T15812] erspan0: left promiscuous mode [ 329.455243][T15812] bridge0: port 1(erspan0) entered disabled state [ 329.474970][T15812] bond9: (slave bridge0): Releasing backup interface [ 329.481759][T15812] bridge0 (unregistering): left promiscuous mode [ 330.101653][T15832] syz_tun: entered allmulticast mode [ 330.128083][T15831] syz_tun: left allmulticast mode [ 330.174776][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 330.209894][T15837] openvswitch: ovs-system: Dropping previously announced user features [ 330.294304][T10564] net_ratelimit: 30 callbacks suppressed [ 330.294355][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 330.337151][T15839] nbd3: detected capacity change from 0 to 63 [ 330.351858][ T2527] block nbd3: Send control failed (result -32) [ 330.352752][ T5615] block nbd3: Receive control failed (result -32) [ 330.353344][ T2527] block nbd3: Request send failed, requeueing [ 330.379173][ T2527] block nbd3: Dead connection, failed to find a fallback [ 330.379197][ T2527] block nbd3: shutting down sockets [ 330.379209][ T2527] blk_print_req_error: 136 callbacks suppressed [ 330.379221][ T2527] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.379246][ T2527] buffer_io_error: 138 callbacks suppressed [ 330.379256][ T2527] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.414685][ T49] bond0: (slave bridge2): failed to get link speed/duplex [ 330.437803][ T2527] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.437852][ T2527] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.448986][ T7403] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 330.449016][ T7403] Buffer I/O error on dev nbd3, logical block 2, async page read [ 330.449032][ T7403] Buffer I/O error on dev nbd3, logical block 3, async page read [ 330.451418][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.451445][ T7403] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.451459][ T7403] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.451472][ T7403] Buffer I/O error on dev nbd3, logical block 2, async page read [ 330.451484][ T7403] Buffer I/O error on dev nbd3, logical block 3, async page read [ 330.453307][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.453332][ T7403] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.453346][ T7403] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.453599][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.453774][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.454402][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.455315][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.455466][ T7403] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 330.456589][ T5619] ldm_validate_partition_table(): Disk read failed. [ 330.461158][ T5619] Dev nbd3: unable to read RDB block 0 [ 330.471458][ T5619] nbd3: unable to read partition table [ 330.529486][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 330.530951][ T5619] ldm_validate_partition_table(): Disk read failed. [ 330.531654][ T5619] Dev nbd3: unable to read RDB block 0 [ 330.536294][ T5619] nbd3: unable to read partition table [ 330.611763][T15841] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 330.611784][T15841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2509'. [ 330.635224][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 330.663147][T15841] xt_hashlimit: size too large, truncated to 1048576 [ 330.744060][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 330.855859][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 330.964087][ T49] bond0: (slave bridge2): failed to get link speed/duplex [ 331.074486][T10563] bond0: (slave bridge2): failed to get link speed/duplex [ 331.183845][ T49] bond0: (slave bridge2): failed to get link speed/duplex [ 331.199624][T15878] tipc: Failed to remove unknown binding: 66,1,1/3492020670:4281225848/4281225850 [ 331.301274][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 331.366059][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2520'. [ 331.530027][T15898] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2523'. [ 331.535884][T15898] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 331.535902][T15898] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2523'. [ 331.535929][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 331.551470][T15898] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2523'. [ 331.554210][T15903] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 331.554227][T15903] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2523'. [ 332.462283][T15938] xt_hashlimit: size too large, truncated to 1048576 [ 332.953306][T15954] netlink: 'syz.8.2534': attribute type 1 has an invalid length. [ 332.953369][T15954] netlink: 'syz.8.2534': attribute type 1 has an invalid length. [ 333.005984][T15954] netlink: 'syz.8.2534': attribute type 3 has an invalid length. [ 333.360140][T15972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.360180][T15972] IPv6: NLM_F_CREATE should be set when creating new route [ 333.360230][T15972] IPv6: NLM_F_CREATE should be set when creating new route [ 333.360250][T15972] IPv6: NLM_F_CREATE should be set when creating new route [ 333.363666][T15972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.501373][T15980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.501413][T15980] IPv6: NLM_F_CREATE should be set when creating new route [ 333.501470][T15980] IPv6: NLM_F_CREATE should be set when creating new route [ 333.527988][T15976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.574703][T15976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.600028][T15976] bond0 (unregistering): Released all slaves [ 334.251242][T16016] tunl0: Caught tx_queue_len zero misconfig [ 334.363660][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.399466][T16022] __nla_validate_parse: 6 callbacks suppressed [ 334.399527][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2553'. [ 334.399560][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2553'. [ 334.996422][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 335.118646][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 335.131885][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 335.142693][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 335.343738][ T1036] net_ratelimit: 36 callbacks suppressed [ 335.350023][ T1036] bond0: (slave bridge2): failed to get link speed/duplex [ 335.453708][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 335.563914][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 335.583257][T16096] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2571'. [ 335.591504][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 335.643710][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 335.673696][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 335.783531][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 335.895777][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 335.944392][T16118] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2577'. [ 336.005354][T10567] bond0: (slave bridge2): failed to get link speed/duplex [ 336.166178][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 336.277583][T10564] bond0: (slave bridge2): failed to get link speed/duplex [ 336.385082][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 336.411784][T16128] netlink: 'syz.7.2579': attribute type 3 has an invalid length. [ 336.908825][T16154] xt_NFQUEUE: number of total queues is 0 [ 337.022652][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2591'. [ 337.988764][T16218] syzkaller1: entered promiscuous mode [ 337.996013][T16218] syzkaller1: entered allmulticast mode [ 338.429429][T16241] netlink: 'syz.7.2610': attribute type 11 has an invalid length. [ 338.857965][T16264] netlink: 'syz.7.2617': attribute type 10 has an invalid length. [ 338.858019][T16264] syz_tun: entered promiscuous mode [ 338.885342][T16264] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 339.291391][T16296] 8021q: VLANs not supported on ipvlan1 [ 339.320857][T16295] netlink: 'syz.3.2624': attribute type 4 has an invalid length. [ 339.585464][T16309] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 339.749777][T16309] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.770888][T16310] __nla_validate_parse: 8 callbacks suppressed [ 339.770953][T16310] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2629'. [ 339.991077][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 339.991114][T16327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2632'. [ 340.067267][T16321] netlink: 'syz.8.2631': attribute type 1 has an invalid length. [ 340.120857][T16327] bridge4: port 1(erspan0) entered disabled state [ 340.127801][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 340.300696][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.301149][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.470036][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'. [ 340.479289][T16343] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2637'. [ 340.488659][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'. [ 340.488722][T16356] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2637'. [ 340.674853][T16327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.960137][ T10] lo speed is unknown, defaulting to 1000 [ 340.960179][ T10] syz2: Port: 1 Link DOWN [ 340.966079][T10567] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.966110][T10567] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.966133][T10567] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 340.966165][T10567] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.976899][T10567] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.976926][T10567] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 340.976963][T10567] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.976993][T10567] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.977015][T10567] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 340.977043][T10567] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.977065][T10567] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.977087][T10567] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 341.308181][T16365] net_ratelimit: 28 callbacks suppressed [ 341.308234][T16365] netlink: Conntrack attr has 8 unknown bytes [ 341.308257][T16365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.355932][T16390] dvmrp1: entered allmulticast mode [ 342.361656][T16396] dvmrp1: left allmulticast mode [ 342.361756][T16396] dvmrp8: left allmulticast mode [ 342.361836][T16396] pimreg: left allmulticast mode [ 342.391269][T16416] FAULT_INJECTION: forcing a failure. [ 342.391269][T16416] name failslab, interval 1, probability 0, space 0, times 0 [ 342.405210][T16416] CPU: 1 UID: 0 PID: 16416 Comm: syz.1.2648 Not tainted syzkaller #0 PREEMPT(full) [ 342.405236][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.405247][T16416] Call Trace: [ 342.405254][T16416] [ 342.405261][T16416] dump_stack_lvl+0xe8/0x150 [ 342.405293][T16416] should_fail_ex+0x410/0x560 [ 342.405323][T16416] should_failslab+0xa8/0x100 [ 342.405346][T16416] __kmalloc_noprof+0xfe/0x720 [ 342.405380][T16416] ? ethnl_default_start+0x118/0x610 [ 342.405402][T16416] ? ethnl_default_start+0x118/0x610 [ 342.405431][T16416] ethnl_default_start+0x118/0x610 [ 342.405460][T16416] genl_start+0x4c1/0x6d0 [ 342.405491][T16416] __netlink_dump_start+0x442/0x7b0 [ 342.405518][T16416] genl_family_rcv_msg_dumpit+0x213/0x310 [ 342.405546][T16416] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 342.405570][T16416] ? genl_get_cmd+0x6cc/0x960 [ 342.405600][T16416] ? __pfx_genl_start+0x10/0x10 [ 342.405622][T16416] ? __pfx_genl_dumpit+0x10/0x10 [ 342.405644][T16416] ? __pfx_genl_done+0x10/0x10 [ 342.405670][T16416] ? __lock_acquire+0x6df/0x2e50 [ 342.405690][T16416] ? __lock_acquire+0x6df/0x2e50 [ 342.405714][T16416] genl_rcv_msg+0x5e1/0x7a0 [ 342.405746][T16416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.405770][T16416] ? __pfx_ethnl_default_start+0x10/0x10 [ 342.405791][T16416] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 342.405812][T16416] ? __pfx_ethnl_default_done+0x10/0x10 [ 342.405850][T16416] netlink_rcv_skb+0x226/0x4a0 [ 342.405871][T16416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.405897][T16416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.405934][T16416] ? down_read+0x2be/0x330 [ 342.405965][T16416] genl_rcv+0x28/0x40 [ 342.405988][T16416] netlink_unicast+0x7bd/0x940 [ 342.406019][T16416] netlink_sendmsg+0x813/0xb40 [ 342.406050][T16416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.406080][T16416] ? apparmor_socket_sendmsg+0x98/0x360 [ 342.406108][T16416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.406128][T16416] sock_sendmsg_nosec+0x13a/0x180 [ 342.406154][T16416] ____sys_sendmsg+0x54e/0x850 [ 342.406179][T16416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.406206][T16416] ? import_iovec+0x73/0xa0 [ 342.406238][T16416] ___sys_sendmsg+0x2a5/0x360 [ 342.406255][T16416] ? __lock_acquire+0x6df/0x2e50 [ 342.406278][T16416] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.406334][T16416] ? __fget_files+0x2a/0x420 [ 342.406363][T16416] ? __fget_files+0x3a2/0x420 [ 342.406394][T16416] __x64_sys_sendmsg+0x1b1/0x290 [ 342.406414][T16416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.406454][T16416] do_syscall_64+0x166/0x520 [ 342.406477][T16416] ? trace_irq_disable+0x3b/0x140 [ 342.406494][T16416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.406512][T16416] ? clear_bhb_loop+0x70/0xc0 [ 342.406536][T16416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.406552][T16416] RIP: 0033:0x7fc84959e159 [ 342.406570][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.406587][T16416] RSP: 002b:00007fc84a47e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.406607][T16416] RAX: ffffffffffffffda RBX: 00007fc849825fa0 RCX: 00007fc84959e159 [ 342.406621][T16416] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 342.406633][T16416] RBP: 00007fc84a47e090 R08: 0000000000000000 R09: 0000000000000000 [ 342.406644][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.406656][T16416] R13: 00007fc849826038 R14: 00007fc849825fa0 R15: 00007ffd42252fb8 [ 342.406688][T16416] [ 343.083052][T16428] lo speed is unknown, defaulting to 1000 [ 343.137571][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 343.283751][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 343.533334][T16443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 343.547599][T16443] bond11: (slave bond12): Enslaving as an active interface with an up link [ 343.569057][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 343.578672][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 343.579480][ T5631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 343.582035][ T5631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 343.582640][ T5631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 343.661816][T16429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2654'. [ 344.010508][T16469] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 344.089196][T16469] 8021q: adding VLAN 0 to HW filter on device bond15 [ 344.155049][ T5611] syz_tun (unregistering): left allmulticast mode [ 344.201205][T16464] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 344.339789][T16468] macvlan4: entered promiscuous mode [ 344.346355][T16468] macvlan4: entered allmulticast mode [ 344.354200][T16468] bond15: entered promiscuous mode [ 344.361390][T16468] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 344.372596][T16468] bond15: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 344.390696][T16468] bond15: left promiscuous mode [ 345.041763][T16451] lo speed is unknown, defaulting to 1000 [ 345.446190][T16508] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 345.515511][T16522] openvswitch: netlink: IP tunnel dst address not specified [ 345.579934][T16522] __nla_validate_parse: 1 callbacks suppressed [ 345.582018][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2672'. [ 345.645059][ T5631] Bluetooth: hci9: command tx timeout [ 345.665306][T16508] macvlan2: entered promiscuous mode [ 345.665357][T16508] macvlan2: entered allmulticast mode [ 345.667204][T16508] bond13: entered promiscuous mode [ 345.671723][T16508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 345.690669][T16508] bond13: left promiscuous mode [ 345.825620][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2675'. [ 345.896050][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.903888][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.911240][T16451] bridge_slave_0: entered allmulticast mode [ 345.919403][T16451] bridge_slave_0: entered promiscuous mode [ 345.931432][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.939689][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.947410][T16451] bridge_slave_1: entered allmulticast mode [ 345.957464][T16451] bridge_slave_1: entered promiscuous mode [ 346.061627][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 346.097604][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.113995][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.238337][T16451] team0: Port device team_slave_0 added [ 346.269328][T16451] team0: Port device team_slave_1 added [ 346.427113][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.434679][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.434724][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.445574][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.445590][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.445613][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.619577][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2680'. [ 346.622554][T16563] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.729323][T16451] hsr_slave_0: entered promiscuous mode [ 346.732856][T16451] hsr_slave_1: entered promiscuous mode [ 346.736489][T16451] debugfs: 'hsr0' already exists in 'hsr' [ 346.736509][T16451] Cannot create hsr debugfs directory [ 346.741213][T16569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2682'. [ 346.741242][T16569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2682'. [ 346.741257][T16569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2682'. [ 346.775770][T16571] syzkaller0: entered promiscuous mode [ 346.775790][T16571] syzkaller0: entered allmulticast mode [ 346.797636][T16570] tipc: Started in network mode [ 346.798366][T16570] tipc: Node identity b6271a02f33b, cluster identity 4711 [ 346.798742][T16570] tipc: Enabled bearer , priority 0 [ 346.852473][T16566] tipc: Resetting bearer [ 346.891675][T16566] tipc: Disabling bearer [ 347.388415][T16599] erspan0: left allmulticast mode [ 347.388457][T16599] erspan0: left promiscuous mode [ 347.388669][T16599] bridge4: port 1(erspan0) entered disabled state [ 347.446792][T16599] bridge_slave_0: left allmulticast mode [ 347.446837][T16599] bridge_slave_0: left promiscuous mode [ 347.447032][T16599] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.482290][T16599] bridge_slave_1: left allmulticast mode [ 347.482338][T16599] bridge_slave_1: left promiscuous mode [ 347.482543][T16599] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.524367][T16599] bond15: (slave veth0_to_bond): Releasing active interface [ 347.545007][T16599] team_slave_0: left promiscuous mode [ 347.545224][T16599] team_slave_0: left allmulticast mode [ 347.552599][T16599] team0: Port device team_slave_0 removed [ 347.553146][T16599] team_slave_1: left promiscuous mode [ 347.553296][T16599] team_slave_1: left allmulticast mode [ 347.559125][T16599] team0: Port device team_slave_1 removed [ 347.559495][T16599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.568621][T16599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.724474][ T5631] Bluetooth: hci9: command tx timeout [ 347.758014][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2694'. [ 347.766331][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2694'. [ 347.979550][T16630] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 347.985902][T16619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.085099][T16630] 8021q: adding VLAN 0 to HW filter on device bond16 [ 348.200113][T16643] netlink: 'syz.7.2698': attribute type 1 has an invalid length. [ 348.320973][T16643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.351424][T16638] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 348.384926][T16660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 348.413183][T16646] netlink: 'syz.8.2699': attribute type 10 has an invalid length. [ 348.539577][T16639] macvlan3: entered promiscuous mode [ 348.539623][T16639] macvlan3: entered allmulticast mode [ 348.542589][T16639] bond2: entered promiscuous mode [ 348.544735][T16639] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 348.547821][T16639] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 348.573710][T16639] bond2: left promiscuous mode [ 348.667284][T16674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.750353][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.781630][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.786379][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.792194][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.796148][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.805272][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.808637][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.818378][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.837490][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.867960][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.878300][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.915768][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.929823][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.939124][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.948400][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.958343][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.975663][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.987840][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.995722][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.001930][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.021638][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.029446][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.036319][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.090608][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.103566][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.138166][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.150590][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.162067][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.175320][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.189112][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.200852][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.212586][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.224504][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.236286][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.297785][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.299125][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.301004][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.302295][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.344141][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.362216][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.421947][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.428967][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.441222][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.452031][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.461944][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.470548][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.481948][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.508447][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.527407][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.552985][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.562529][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.569409][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.574430][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.581572][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.589043][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.594595][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.600937][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.608096][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.612526][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.618568][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.624088][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.630065][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.634418][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.639439][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.648112][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.803829][ T5631] Bluetooth: hci9: command tx timeout [ 349.929107][T16686] netlink: 'syz.8.2705': attribute type 4 has an invalid length. [ 349.957822][T16451] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.985107][T16451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.107810][T16451] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.127730][T16451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.158561][T16451] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.210165][T16451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.218821][T16451] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.275007][T16451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.622150][T16451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.633809][T16730] netlink: 'syz.2.2714': attribute type 39 has an invalid length. [ 350.705705][T16451] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.735285][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.735412][T10562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.742861][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.742954][T10562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.851713][T16451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.928991][T16741] __nla_validate_parse: 2 callbacks suppressed [ 350.935411][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 350.935435][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2718'. [ 350.940088][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 350.940109][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2718'. [ 351.031316][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 351.129282][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2717'. [ 351.129353][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2717'. [ 351.600329][T16770] tipc: Resetting bearer [ 351.671961][ T5713] lo speed is unknown, defaulting to 1000 [ 351.845318][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.888155][ T5631] Bluetooth: hci9: command tx timeout [ 352.034942][T16785] syzkaller0: entered allmulticast mode [ 352.043012][T16451] veth0_vlan: entered promiscuous mode [ 352.074423][T16785] tipc: Enabled bearer , priority 0 [ 352.102978][T16784] tipc: Disabling bearer [ 352.137920][T16451] veth1_vlan: entered promiscuous mode [ 352.341905][T16451] veth0_macvtap: entered promiscuous mode [ 352.392311][T16451] veth1_macvtap: entered promiscuous mode [ 352.409222][T16803] IPVS: set_ctl: invalid protocol: 41 172.30.0.8:20003 [ 352.417919][T16803] netlink: 'syz.7.2732': attribute type 10 has an invalid length. [ 352.427717][T16803] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2732'. [ 352.455458][T16803] dummy0: entered promiscuous mode [ 352.468001][T16803] team0: Port device dummy0 removed [ 352.475332][T16803] bridge0: port 3(dummy0) entered blocking state [ 352.482957][T16803] bridge0: port 3(dummy0) entered disabled state [ 352.483159][T16803] dummy0: entered allmulticast mode [ 352.640902][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.680441][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.753912][T10567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.753979][T10567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.754027][T10567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.784141][T10563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.807361][T16813] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2734'. [ 352.921730][T16813] syzkaller0: entered promiscuous mode [ 352.921781][T16813] syzkaller0: entered allmulticast mode [ 352.956044][T16813] 0: reclassify loop, rule prio 0, protocol 700 [ 353.046472][T16813] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2734'. [ 353.351162][T10564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.351202][T10564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.463657][T16834] netlink: 'syz.2.2739': attribute type 5 has an invalid length. [ 353.516642][T10557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.528717][T10557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.796403][T16837] smbdirect: ib_dev[syz2] removed [ 353.931362][T16848] bridge_slave_0: left allmulticast mode [ 353.931416][T16848] bridge_slave_0: left promiscuous mode [ 353.937796][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.996019][T16848] bridge_slave_1: left allmulticast mode [ 353.996063][T16848] bridge_slave_1: left promiscuous mode [ 353.996260][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.050025][T16848] bond0: (slave bond_slave_0): Releasing backup interface [ 354.079122][T16848] bond0: (slave bond_slave_1): Releasing backup interface [ 354.128333][T16848] team0: Port device team_slave_0 removed [ 354.138418][T16848] team0: Port device team_slave_1 removed [ 354.147932][T16848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.156052][T16848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.165962][T16848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.174350][T16848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.185470][T16848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.218285][T16856] netlink: 'syz.3.2744': attribute type 29 has an invalid length. [ 354.260343][T16857] veth0_to_hsr: entered promiscuous mode [ 354.281645][T16857] veth0_to_hsr: left promiscuous mode [ 354.376051][T16873] netlink: 'syz.8.2747': attribute type 29 has an invalid length. [ 354.634943][T16886] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 355.414764][T16938] xt_hashlimit: size too large, truncated to 1048576 [ 355.419980][T16941] netlink: 'syz.3.2761': attribute type 29 has an invalid length. [ 355.437959][T16940] nbd: must specify a size in bytes for the device [ 355.835826][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.034475][T16958] bridge_slave_0 (unregistering): left allmulticast mode [ 356.034524][T16958] bridge_slave_0 (unregistering): left promiscuous mode [ 356.034602][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.148664][T16974] __nla_validate_parse: 16 callbacks suppressed [ 356.148714][T16974] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2768'. [ 356.233955][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.233955][T16980] Use struct sctp_sack_info instead [ 356.234025][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234025][T16980] Use struct sctp_sack_info instead [ 356.234082][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234082][T16980] Use struct sctp_sack_info instead [ 356.234124][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234124][T16980] Use struct sctp_sack_info instead [ 356.234164][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234164][T16980] Use struct sctp_sack_info instead [ 356.234204][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234204][T16980] Use struct sctp_sack_info instead [ 356.234245][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234245][T16980] Use struct sctp_sack_info instead [ 356.234286][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234286][T16980] Use struct sctp_sack_info instead [ 356.234327][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234327][T16980] Use struct sctp_sack_info instead [ 356.234368][T16980] sctp: [Deprecated]: syz.2.2771 (pid 16980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.234368][T16980] Use struct sctp_sack_info instead [ 356.595195][T16997] netlink: 'syz.8.2775': attribute type 29 has an invalid length. [ 356.609640][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 356.692436][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2775'. [ 356.736997][T16997] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2775'. [ 356.788013][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'. [ 356.973339][T17009] syzkaller1: entered promiscuous mode [ 356.973461][T17009] syzkaller1: entered allmulticast mode [ 357.287180][T17027] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2781'. [ 357.338673][T17040] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2781'. [ 357.358585][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 357.792968][T17061] netlink: 'syz.1.2789': attribute type 29 has an invalid length. [ 357.839602][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2789'. [ 357.860709][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2789'. [ 358.493277][T17090] netlink: 'syz.7.2797': attribute type 1 has an invalid length. [ 358.501827][T17090] netlink: 'syz.7.2797': attribute type 2 has an invalid length. [ 358.791709][T17098] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 358.901772][T17103] netlink: 'syz.7.2802': attribute type 1 has an invalid length. [ 358.901818][T17103] netlink: 'syz.7.2802': attribute type 1 has an invalid length. [ 359.021386][T17111] netlink: 'syz.2.2804': attribute type 29 has an invalid length. [ 359.508500][T17124] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 359.508595][T17124] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 359.527993][T17124] ip6gre2: entered promiscuous mode [ 359.528038][T17124] ip6gre2: entered allmulticast mode [ 359.702832][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.717598][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.733837][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.747326][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.756056][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.000897][T10563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.014640][T10563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.023755][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.129563][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 360.349708][T17154] netlink: zone id is out of range [ 360.351775][T17154] netlink: zone id is out of range [ 360.351787][T17154] netlink: zone id is out of range [ 360.351794][T17154] netlink: zone id is out of range [ 360.351801][T17154] netlink: zone id is out of range [ 360.351808][T17154] netlink: zone id is out of range [ 360.351816][T17154] netlink: zone id is out of range [ 360.351823][T17154] netlink: zone id is out of range [ 360.376986][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.466865][T17157] netlink: 'syz.7.2818': attribute type 29 has an invalid length. [ 360.684007][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 361.515433][T17212] ip6t_srh: unknown srh invflags 4000 [ 361.550027][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.550213][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.550346][T17128] bridge_slave_0: entered allmulticast mode [ 361.552131][T17128] bridge_slave_0: entered promiscuous mode [ 361.555332][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.555483][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.555603][T17128] bridge_slave_1: entered allmulticast mode [ 361.557438][T17128] bridge_slave_1: entered promiscuous mode [ 361.589426][T17214] Bluetooth: MGMT ver 1.23 [ 361.610489][T17128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.618761][T17128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.721273][T17128] team0: Port device team_slave_0 added [ 361.750450][T17128] team0: Port device team_slave_1 added [ 361.804553][ T5615] Bluetooth: hci0: command tx timeout [ 361.941959][T17217] netlink: 'syz.2.2832': attribute type 29 has an invalid length. [ 361.947992][T17128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.948009][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.948032][T17128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.004410][T17217] __nla_validate_parse: 17 callbacks suppressed [ 362.004460][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'. [ 362.025099][T17128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.025144][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.025532][T17128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.039070][T17217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2832'. [ 362.222299][T17128] hsr_slave_0: entered promiscuous mode [ 362.227736][T17128] hsr_slave_1: entered promiscuous mode [ 362.231172][T17128] debugfs: 'hsr0' already exists in 'hsr' [ 362.231194][T17128] Cannot create hsr debugfs directory [ 362.281501][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2833'. [ 362.849089][T17250] xt_hashlimit: size too large, truncated to 1048576 [ 363.659412][T17270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 363.779444][T17274] netlink: 'syz.8.2844': attribute type 29 has an invalid length. [ 363.836902][T17274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2844'. [ 363.872886][T17274] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2844'. [ 363.886612][ T5615] Bluetooth: hci0: command tx timeout [ 364.131250][T17283] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 364.213871][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.390457][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 364.607257][T17128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.631291][T17128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.640239][T17128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.655434][T17128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.663752][T17128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.677258][T17128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.688469][T17128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.705286][T17128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.935111][T17128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.960831][T17128] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.971559][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.971675][T10567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.982415][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.982525][T10563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.251840][T17317] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2852'. [ 365.350143][T17320] netlink: 'syz.7.2853': attribute type 1 has an invalid length. [ 365.528319][T17320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.636096][T17326] bond3: (slave gretap1): making interface the new active one [ 365.647110][T17326] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 365.712281][T17332] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 365.773943][T17332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2855'. [ 365.788502][T17332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2855'. [ 365.965566][ T5615] Bluetooth: hci0: command tx timeout [ 365.982331][T17347] sctp: [Deprecated]: syz.7.2856 (pid 17347) Use of int in maxseg socket option. [ 365.982331][T17347] Use struct sctp_assoc_value instead [ 365.998546][T17347] netlink: 'syz.7.2856': attribute type 10 has an invalid length. [ 366.012020][T17347] team0 (unregistering): Port device team_slave_0 removed [ 366.023321][T17347] team0 (unregistering): Port device team_slave_1 removed [ 366.035822][T17347] team0 (unregistering): Port device bridge0 removed [ 366.319274][T17128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.396456][T17128] veth0_vlan: entered promiscuous mode [ 366.408471][T17128] veth1_vlan: entered promiscuous mode [ 366.449671][T17128] veth0_macvtap: entered promiscuous mode [ 366.456254][T17128] veth1_macvtap: entered promiscuous mode [ 366.475264][T17128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.484964][T17128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.530660][T10564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.531032][T10564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.531510][T10564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.531637][T10564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.682511][T10563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.683130][T10563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.743081][T10564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.743128][T10564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.051304][T17381] netlink: 'syz.7.2864': attribute type 21 has an invalid length. [ 367.069386][T17370] __nla_validate_parse: 4 callbacks suppressed [ 367.069430][T17370] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2865'. [ 367.071354][T17381] netlink: 'syz.7.2864': attribute type 1 has an invalid length. [ 367.071380][T17381] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2864'. [ 367.126394][T17376] pim6reg99999999: entered allmulticast mode [ 367.255065][T17386] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2868'. [ 367.256970][T17386] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2868'. [ 367.409847][T17391] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 367.419263][T17391] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2871'. [ 367.505831][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.520055][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.532937][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.545106][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.552931][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.741580][T17401] veth1_to_team: entered allmulticast mode [ 368.044714][ T5631] Bluetooth: hci0: command tx timeout [ 368.283557][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.802475][T17425] ip6tnl1: entered allmulticast mode [ 368.808288][ T1036] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.809286][ T1036] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.813139][T17424] netlink: 'syz.7.2878': attribute type 4 has an invalid length. [ 368.833757][ T5616] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.850094][T17424] netlink: 'syz.7.2878': attribute type 4 has an invalid length. [ 368.988243][T17430] syzkaller0: entered promiscuous mode [ 368.988295][T17430] syzkaller0: entered allmulticast mode [ 369.000026][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2876'. [ 369.105911][ T5616] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.224662][T17443] netlink: 'syz.1.2883': attribute type 29 has an invalid length. [ 369.310530][T17443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2883'. [ 369.336623][T17443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2883'. [ 369.647519][ T5631] Bluetooth: hci1: command tx timeout [ 369.652084][T17393] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.652181][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.652339][T17393] bridge_slave_0: entered allmulticast mode [ 369.653147][ T5726] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.664812][T17393] bridge_slave_0: entered promiscuous mode [ 369.672971][T17393] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.677704][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.677874][T17393] bridge_slave_1: entered allmulticast mode [ 369.687506][T17393] bridge_slave_1: entered promiscuous mode [ 369.915027][T17393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.942245][T17393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.059871][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2888'. [ 370.164536][T17481] netlink: 'syz.7.2888': attribute type 1 has an invalid length. [ 370.197668][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2890'. [ 370.263328][T17454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.304072][T17471] netlink: 'syz.3.2890': attribute type 29 has an invalid length. [ 370.337780][T17393] team0: Port device team_slave_0 added [ 370.340856][T17393] team0: Port device team_slave_1 added [ 370.568444][T17393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.568482][T17393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.568521][T17393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.575437][T17393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.575454][T17393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.575474][T17393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.779890][T17495] net_ratelimit: 8 callbacks suppressed [ 370.805295][T17495] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 370.860254][T17497] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 370.871666][T17454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.471701][T17454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.537066][T17393] hsr_slave_0: entered promiscuous mode [ 371.540371][T17393] hsr_slave_1: entered promiscuous mode [ 371.543201][T17393] debugfs: 'hsr0' already exists in 'hsr' [ 371.543222][T17393] Cannot create hsr debugfs directory [ 371.724272][ T5631] Bluetooth: hci1: command tx timeout [ 371.727865][T17454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.176437][T17393] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.210980][T17393] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.441172][T17393] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.443217][T17393] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.603883][ T1036] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.604047][ T1036] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.604725][ T1036] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.697305][T17393] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.697357][T17393] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.733685][T10562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.763625][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.844856][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.880763][T17393] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.880823][T17393] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.000763][T17569] netlink: 'syz.7.2910': attribute type 10 has an invalid length. [ 373.065776][T17540] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 373.243132][T17576] xt_connbytes: Forcing CT accounting to be enabled [ 373.268628][T17578] __nla_validate_parse: 3 callbacks suppressed [ 373.268684][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2914'. [ 373.426169][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2916'. [ 373.464096][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2912'. [ 373.490987][T17584] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2915'. [ 373.523532][T17393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.545543][T17393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.560615][T17393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.588863][T17393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.591984][T17393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.615150][T17393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.616373][T17393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.659492][T17393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.776576][T17611] netlink: 'syz.3.2921': attribute type 29 has an invalid length. [ 373.804056][ T5631] Bluetooth: hci1: command tx timeout [ 373.876417][T17611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 373.895086][T17611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2921'. [ 373.956730][T17619] IPVS: length: 35 != 24 [ 373.973212][T17619] netlink: 824 bytes leftover after parsing attributes in process `syz.1.2923'. [ 374.078497][T17393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.155467][T17393] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.175087][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.175195][T10566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.226306][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.226420][T10562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.492004][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2927'. [ 374.621774][T17644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.622760][T17644] bridge0: port 1(bond1) entered blocking state [ 374.622908][T17644] bridge0: port 1(bond1) entered disabled state [ 374.623033][T17644] bond1: entered allmulticast mode [ 374.629473][T17644] bond1: entered promiscuous mode [ 374.630688][T17644] bridge0: port 1(bond1) entered blocking state [ 374.630800][T17644] bridge0: port 1(bond1) entered forwarding state [ 374.726190][T10567] bridge0: port 1(bond1) entered disabled state [ 375.114860][T17662] netlink: 'syz.7.2933': attribute type 29 has an invalid length. [ 375.209762][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2933'. [ 375.224435][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2933'. [ 375.652040][T17393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.803016][T17688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.837565][T17393] veth0_vlan: entered promiscuous mode [ 375.863907][T17393] veth1_vlan: entered promiscuous mode [ 375.883579][ T5631] Bluetooth: hci1: command tx timeout [ 375.935654][T17393] veth0_macvtap: entered promiscuous mode [ 375.950323][T17393] veth1_macvtap: entered promiscuous mode [ 375.976186][T17393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.995352][T17393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.120281][T10566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.120765][T10566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.121055][T10566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.121300][T10566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.400403][T10557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.400445][T10557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.554769][T17714] netlink: 'syz.1.2947': attribute type 29 has an invalid length. [ 376.614728][ T32] INFO: task syz.4.1394:11398 blocked for more than 143 seconds. [ 376.614769][ T32] Not tainted syzkaller #0 [ 376.614793][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.614821][ T32] task:syz.4.1394 state:D stack:25352 pid:11398 tgid:11395 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 376.614892][ T32] Call Trace: [ 376.614902][ T32] [ 376.614917][ T32] __schedule+0x17d4/0x5820 [ 376.614965][ T32] ? lock_acquire+0x115/0x350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.615004][ T32] ? __pfx___schedule+0x10/0x10 [ 376.615040][ T32] ? schedule+0x90/0x2b0 [ 376.615068][ T32] schedule+0x164/0x2b0 [ 376.615096][ T32] schedule_preempt_disabled+0x13/0x30 [ 376.615125][ T32] __mutex_lock+0x7c1/0x1550 [ 376.615159][ T32] ? __mutex_lock+0x5d4/0x1550 [ 376.615189][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.615216][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 376.615251][ T32] ? net_generic+0x1e/0x240 [ 376.615272][ T32] ? net_generic+0x1e/0x240 [ 376.615300][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.615323][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 376.615356][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 376.615376][ T32] ? do_syscall_64+0x166/0x520 [ 376.615403][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.615429][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 376.615469][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 376.615507][ ** replaying previous printk message ** [ 376.615507][ T32] ? rcu_is_watching+0x16/0xb0 [ 376.615530][ T32] ? trace_kmalloc+0x2a/0xf0 [ 376.615558][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 376.615588][ T32] ? __nla_parse+0x40/0x60 [ 376.615610][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 376.615640][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 376.615676][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 376.615726][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.615768][ T32] ? bpf_lsm_capable+0x9/0x20 [ 376.615796][ T32] ? security_capable+0x7e/0x2c0 [ 376.615830][ T32] genl_rcv_msg+0x614/0x7a0 [ 376.615864][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.615892][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 376.615931][ T32] netlink_rcv_skb+0x226/0x4a0 [ 376.615956][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.615986][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.616033][ T32] ? down_read+0x2be/0x330 [ 376.696612][ T32] genl_rcv+0x28/0x40 [ 376.696649][ T32] netlink_unicast+0x7bd/0x940 [ 376.696680][ T32] netlink_sendmsg+0x813/0xb40 [ 376.696711][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.696741][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 376.696770][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.696790][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 376.696817][ T32] ____sys_sendmsg+0x54e/0x850 [ 376.696841][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.696869][ T32] ? import_iovec+0x73/0xa0 [ 376.696900][ T32] ___sys_sendmsg+0x2a5/0x360 [ 376.696949][ T32] ? __lock_acquire+0x6df/0x2e50 [ 376.696974][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.697004][ T32] ? futex_wait+0x2a2/0x390 [ 376.697061][ T32] ? __fget_files+0x2a/0x420 [ 376.697084][ T32] ? __fget_files+0x3a2/0x420 [ 376.697117][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 376.697140][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.697180][ T32] do_syscall_64+0x166/0x520 [ 376.697203][ T32] ? trace_irq_disable+0x3b/0x140 [ 376.697221][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697240][ T32] ? clear_bhb_loop+0x70/0xc0 [ 376.697264][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697283][ T32] RIP: 0033:0x7fdf8419e159 [ 376.697301][ T32] RSP: 002b:00007fdf84fc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.697322][ T32] RAX: ffffffffffffffda RBX: 00007fdf84426090 RCX: 00007fdf8419e159 [ 376.697335][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006 [ 376.697348][ T32] RBP: 00007fdf84235024 R08: 0000000000000000 R09: 0000000000000000 [ 376.697360][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.697372][ T32] R13: 00007fdf84426128 R14: 00007fdf84426090 R15: 00007ffdd82c0b38 [ 376.697404][ T32] [ 376.697412][ T32] INFO: task syz.4.1394:11402 blocked for more than 143 seconds. [ 376.697425][ T32] Not tainted syzkaller #0 [ 376.697434][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.697441][ T32] task:syz.4.1394 state:D stack:27104 pid:11402 tgid:11395 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 376.697489][ T32] Call Trace: [ 376.697496][ T32] [ 376.697507][ T32] __schedule+0x17d4/0x5820 [ 376.697557][ T32] ? __pfx___schedule+0x10/0x10 [ 376.697589][ T32] ? schedule+0x90/0x2b0 [ 376.697614][ T32] schedule+0x164/0x2b0 [ 376.697639][ T32] schedule_preempt_disabled+0x13/0x30 [ 376.697661][ T32] __mutex_lock+0x7c1/0x1550 [ 376.697690][ T32] ? __mutex_lock+0x5d4/0x1550 [ 376.697718][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.697742][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 376.697774][ T32] ? net_generic+0x1e/0x240 [ 376.697792][ T32] ? net_generic+0x1e/0x240 [ 376.697816][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.697837][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 376.697869][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 376.697887][ T32] ? do_syscall_64+0x166/0x520 [ 376.697909][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697931][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 376.697966][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 376.698008][ T32] ? rcu_is_watching+0x16/0xb0 [ 376.698031][ T32] ? trace_kmalloc+0x2a/0xf0 [ 376.727863][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 376.727905][ T32] ? __nla_parse+0x40/0x60 [ 376.727929][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 376.727955][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 376.727987][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 376.728020][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.728057][ T32] ? bpf_lsm_capable+0x9/0x20 [ 376.728081][ T32] ? security_capable+0x7e/0x2c0 [ 376.728114][ T32] genl_rcv_msg+0x614/0x7a0 [ 376.728146][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.728169][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 376.728205][ T32] netlink_rcv_skb+0x226/0x4a0 [ 376.728226][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.728252][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.728288][ T32] ? down_read+0x2be/0x330 [ 376.728317][ T32] genl_rcv+0x28/0x40 [ 376.728340][ T32] netlink_unicast+0x7bd/0x940 [ 376.728369][ T32] netlink_sendmsg+0x813/0xb40 [ 376.728399][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.728427][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 376.728454][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.728473][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 376.728507][ T32] ____sys_sendmsg+0x54e/0x850 [ 376.728532][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.728559][ T32] ? import_iovec+0x73/0xa0 [ 376.728589][ T32] ___sys_sendmsg+0x2a5/0x360 [ 376.728606][ T32] ? __lock_acquire+0x6df/0x2e50 [ 376.728629][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.728652][ T32] ? futex_wait+0x2a2/0x390 [ 376.728705][ T32] ? __fget_files+0x2a/0x420 [ 376.728728][ T32] ? __fget_files+0x3a2/0x420 [ 376.728760][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 376.728781][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.728820][ T32] do_syscall_64+0x166/0x520 [ 376.728843][ T32] ? trace_irq_disable+0x3b/0x140 [ 376.728861][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.728879][ T32] ? clear_bhb_loop+0x70/0xc0 [ 376.728901][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.728920][ T32] RIP: 0033:0x7fdf8419e159 [ 376.728937][ T32] RSP: 002b:00007fdf84fa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.728957][ T32] RAX: ffffffffffffffda RBX: 00007fdf84426180 RCX: 00007fdf8419e159 [ 376.728971][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006 [ 376.728982][ T32] RBP: 00007fdf84235024 R08: 0000000000000000 R09: 0000000000000000 [ 376.728994][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.729005][ T32] R13: 00007fdf84426218 R14: 00007fdf84426180 R15: 00007ffdd82c0b38 [ 376.729036][ T32] [ 376.729166][ T32] [ 376.729166][ T32] Showing all locks held in the system: [ 376.729175][ T32] locks held by kworker/0:1/10: 3, on CPU#0: [ 376.729190][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.729242][ T32] #1: ffffc900000f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.729290][ T32] #2: ffff888029118250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 376.729338][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 376.734986][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 376.735045][ T32] #1: ffffffff9ad2aff8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 376.735095][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 376.735108][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.735159][ T32] locks held by kworker/u8:6/1036: 2, on CPU#1: [ 376.735172][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735219][ T32] #1: ffffc900049afc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735284][ T32] locks held by getty/5370: 2, on CPU#0: [ 376.735295][ T32] #0: ffff8880299060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.735340][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 376.735391][ T32] locks held by syz-executor/5600: 2, last CPU#0: [ 376.735403][ T32] #0: ffff88807a2603b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 376.735450][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.735509][ T32] locks held by kworker/1:4/5726: 3, on CPU#1: [ 376.735522][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735568][ T32] #1: ffffc90004067c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735614][ T32] #2: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 376.735672][ T32] locks held by kworker/u8:16/10564: 3, on CPU#1: [ 376.735685][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735731][ T32] #1: ffffc90004a3fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735777][ T32] #2: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 376.735824][ T32] locks held by kworker/u8:18/10566: 3, on CPU#1: [ 376.735836][ T32] #0: ffff88802a5c7140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735883][ T32] #1: ffffc90004c2fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.735930][ T32] #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 376.735976][ T32] locks held by kworker/u8:19/10567: 5, last CPU#1: [ 376.735989][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.736035][ T32] #1: ffffc90004e27c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.736082][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 376.736124][ T32] #3: ffffffff8ee38100 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 376.736167][ T32] #4: ffffffff8ebff620 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 376.736220][ T32] locks held by syz.0.1247/10862: 2, on CPU#1: [ 376.736232][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.736278][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 376.736323][ T32] locks held by syz.4.1394/11398: 2, on CPU#0: [ 376.736335][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.736394][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.736439][ T32] locks held by syz.4.1394/11402: 2, on CPU#0: [ 376.736451][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.745955][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 376.746011][ T32] locks held by syz.6.1754/12830: 3, on CPU#1: [ 376.746024][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.746071][ T32] #1: ffff8880261226e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 376.746114][ T32] #2: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 376.746157][ T32] locks held by syz.5.1861/13218: 2, on CPU#1: [ 376.746170][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.746215][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 376.746261][ T32] locks held by syz-executor/13687: 2, last CPU#1: [ 376.746274][ T32] #0: ffff88802a6ee2e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 376.746323][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.746378][ T32] locks held by syz-executor/17393: 1, on CPU#1: [ 376.746390][ T32] #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 376.746442][ T32] locks held by syz.7.2945/17708: 1, on CPU#1: [ 376.746454][ T32] #0: ffff88802cf6e9b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 376.746504][ T32] locks held by syz.7.2945/17711: 2, on CPU#1: [ 376.746516][ T32] #0: ffffffff902414c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 376.746564][ T32] #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 376.746608][ T32] locks held by syz.7.2945/17713: 2, last CPU#0: [ 376.746621][ T32] #0: ffff88802cf6e9b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 376.746664][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.746707][ T32] locks held by syz.1.2947/17714: 3, on CPU#1: [ 376.746720][ T32] #0: ffffffff907a3e70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 376.746766][ T32] #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 376.746814][ T32] #2: ffff88807776d610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 376.746859][ T32] locks held by syz.1.2947/17721: 2, on CPU#1: [ 376.746872][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.746917][ T32] #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 376.746967][ T32] locks held by syz.1.2947/17727: 2, on CPU#1: [ 376.746979][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 376.747036][ T32] #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 376.747087][ T32] locks held by syz.3.2949/17720: 1, on CPU#1: [ 376.747099][ T32] #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 376.747147][ T32] locks held by syz.3.2949/17729: 1, on CPU#1: [ 376.747159][ T32] #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 376.747206][ T32] locks held by modprobe/17728: 1, last CPU#1: [ 376.747219][ T32] #0: ffff88807fb629f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 376.747263][ T32] [ 376.747268][ T32] ============================================= [ 376.747268][ T32] [ 376.747291][ T32] NMI backtrace for cpu 1 [ 376.747302][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.747322][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.747332][ T32] Call Trace: [ 376.747339][ T32] [ 376.747346][ T32] dump_stack_lvl+0xe8/0x150 [ 376.747373][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 376.747395][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.747424][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 376.747446][ T32] sys_info+0x135/0x170 [ 376.747462][ T32] watchdog+0xfd7/0x1030 [ 376.747492][ T32] ? watchdog+0x1c7/0x1030 [ 376.747515][ T32] kthread+0x38b/0x480 [ 376.747533][ T32] ? __pfx_watchdog+0x10/0x10 [ 376.747548][ T32] ? __pfx_kthread+0x10/0x10 [ 376.747566][ T32] ret_from_fork+0x514/0xb70 [ 376.747596][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 376.747622][ T32] ? __switch_to+0xc89/0x1420 [ 376.747647][ T32] ? __pfx_kthread+0x10/0x10 [ 376.747666][ T32] ret_from_fork_asm+0x1a/0x30 [ 376.747706][ T32] [ 376.747727][ T32] Sending NMI from CPU 1 to CPUs 0: [ 376.747753][ C0] NMI backtrace for cpu 0 [ 376.747766][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 376.747787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.747799][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 376.747829][ C0] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 376.747847][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 376.747863][ C0] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 376.747877][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 376.747889][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 376.747902][ C0] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 376.747917][ C0] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 376.747930][ C0] FS: 0000000000000000(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 376.747946][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.747960][ C0] CR2: 00007fc576b57e20 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 376.747982][ C0] Call Trace: [ 376.747988][ C0] [ 376.747997][ C0] wait_for_lsr+0x184/0x2f0 [ 376.748026][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 376.748052][ C0] serial8250_console_write+0xaa1/0x1200 [ 376.748078][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 376.748108][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 376.748134][ C0] ? __schedule+0x17ea/0x5820 [ 376.748165][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 376.748195][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 376.748219][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 376.748247][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 376.748272][ C0] nbcon_kthread_func+0x679/0x880 [ 376.748295][ C0] ? nbcon_kthread_func+0x163/0x880 [ 376.748313][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 376.748336][ C0] ? __kthread_parkme+0x71/0x1f0 [ 376.748364][ C0] ? __kthread_parkme+0x199/0x1f0 [ 376.748394][ C0] kthread+0x38b/0x480 [ 376.748411][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 376.748429][ C0] ? __pfx_kthread+0x10/0x10 [ 376.748448][ C0] ret_from_fork+0x514/0xb70 [ 376.748478][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 376.748508][ C0] ? __switch_to+0xc89/0x1420 [ 376.748535][ C0] ? __pfx_kthread+0x10/0x10 [ 376.748553][ C0] ret_from_fork_asm+0x1a/0x30 [ 376.748592][ C0] [ 376.764035][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 378.505205][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 378.514303][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.524607][ T32] Call Trace: [ 378.527879][ T32] [ 378.530822][ T32] vpanic+0x56d/0xa60 [ 378.534810][ T32] ? __pfx___schedule+0x10/0x10 [ 378.539685][ T32] ? __pfx_vpanic+0x10/0x10 [ 378.544234][ T32] panic+0xc5/0xd0 [ 378.547979][ T32] ? __pfx_panic+0x10/0x10 [ 378.552413][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 378.557891][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 378.563363][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 378.569533][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 378.575693][ T32] watchdog+0x1030/0x1030 [ 378.580034][ T32] ? watchdog+0x1c7/0x1030 [ 378.584448][ T32] kthread+0x38b/0x480 [ 378.588548][ T32] ? __pfx_watchdog+0x10/0x10 [ 378.593219][ T32] ? __pfx_kthread+0x10/0x10 [ 378.597801][ T32] ret_from_fork+0x514/0xb70 [ 378.602393][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 378.607497][ T32] ? __switch_to+0xc89/0x1420 [ 378.612168][ T32] ? __pfx_kthread+0x10/0x10 [ 378.616745][ T32] ret_from_fork_asm+0x1a/0x30 [ 378.621516][ T32] [ 378.624679][ T32] Kernel Offset: disabled [ 378.628995][ T32] Rebooting in 86400 seconds..