last executing test programs: 2m40.572927967s ago: executing program 0 (id=11875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc4}}, 0x0) 2m40.322462524s ago: executing program 0 (id=11879): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000500020000000800040001", 0x55) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m40.123005637s ago: executing program 0 (id=11881): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000001500)=ANY=[@ANYBLOB="34140000", @ANYRES16=r6, @ANYBLOB="adab27bd7000fddbdf250b"], 0x1434}, 0x1, 0x0, 0x0, 0x80}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r7 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001000)) sendto$packet(r7, 0x0, 0x0, 0x800, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def556b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b5c2d3e0ee840276dc4f06166000d7", 0xb0}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x2000) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000025c0)=""/4102, 0x1006}], 0x1}, 0x40002303) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5e) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2m38.554673044s ago: executing program 0 (id=11888): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000000)={'geneve0\x00'}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000008c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x40, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r7, 0x0, 0xdf, 0x6c, &(0x7f0000000580)="4b45f3826cb55cd5c9e30981fbeb61bf55df02fbe03737b9a68759761765da9d8f8753952f5064d9105031cdfd1410c7f0734f2ac170b58e377bad7afc4aac37ae84e5ef487253a048d2690b18100b47c7796f91a397bb874f0ae5a9d6c7c1b5f1666c0b76e5e11c8c563b62495790327f6af8dacae16532402a4b3c83b4977fac5029068beb06b2814e6a0992a7d7e0de65b18c536482c87012500b9bd99b8d6f24904f9befac1abec8db9fc9261de4115d06c98a1eae37ab55764fe18021f4f27f26f16687b62b7f76caf42bbf3961b950733305207d3d2f6444a7d0bb8e", &(0x7f0000000680)=""/108, 0x100, 0x0, 0x54, 0xb, &(0x7f0000000780)="894fd73d3eb0336e4416e12dfdd441b2244996b41e431ae490f1d0a82053884bfaea97ff552c751732f3b3cd7f99b113afafe3f6c74406f646019a3d7884928048cf98c8ac46c2f62763607b4dfa960863ae7eba", &(0x7f0000000800)="b8477c67adf480f2af1441", 0x1, 0x0, 0x7}, 0x50) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x4}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) 2m37.787042486s ago: executing program 0 (id=11898): accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x7}], 0x1c) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x38}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[], 0x0) 2m37.509266752s ago: executing program 0 (id=11901): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x3f, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffffff99}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x0, 0x98a, 0x8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="59f03a64dd0a74db2a83b0bd2f9f0c4ebea2ca2c82a6fa19ae754080551c901c54e235015412f461c67914da7b6067033540243a4e", 0x35}, {&(0x7f0000000180)="bff78d8a4c7313d6bbb8d4b9ccb25011992017f19241ec774eaccb76c1846eab1314ebf6fd772cd6545358", 0x2b}, {&(0x7f0000000580)="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", 0x52d}], 0x3}}], 0x2, 0x2400c8c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m32.257566695s ago: executing program 4 (id=11946): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0x9, 0x1, 0xa7, 0x5, [0x11, 0x69, 0x4, 0xb9b, 0xdb4, 0x9, 0xe4f8, 0x800], [0xfff]}}) (fail_nth: 4) 2m31.8930028s ago: executing program 4 (id=11951): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r1, 0x5c2a7000) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x115bb575}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x367d5440}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2f4, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x144, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x7c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_USERDATA={0xf9, 0x7, 0x1, 0x0, "113a1888164b0fa109f51b042464f8881240b2d2ed12238716f70a2487b5a1820602a74824933f922fb02c7d45362cbc1881df3eb70de35f20006c0288619250f193acda8bb51cda1fc08d6d1abfd4688eb1e4fe6cfb910c501b2f48b4f264936cf678a37395631525024c8c8653b51dfd76cb03e930831381c5cb50b3f0df9984db86dc3572b9a171f2894968159d28ead5f916f9e5d9fa6b98e71c93066022596bf13c9de94c9d3ee4b8ab09319ac1ff890f79361a231f249cb4f93226fe00e2e2fb00ff111e70adca4d40d3b75e0900bb7b2e4b2e1ed744cc7c99f0725d785dc4836b005fe0e40516479c0719c2f21d11299adc"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m31.8056112s ago: executing program 4 (id=11952): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x42887) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newsa={0x184, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'streebog512\x00'}, 0x0, 0x40}}, @algo_crypt={0x48, 0x2, {{'xts(serpent)\x00'}}}]}, 0x184}}, 0x24000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffe}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 2m31.693672768s ago: executing program 4 (id=11954): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r8, 0x6a98047402e98331, 0xfffffffd, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x406c810) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000009200)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006000)={&(0x7f0000005f80)={0x80, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000005}, 0x48000) r9 = openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) recvmmsg(r5, &(0x7f0000008ec0)=[{{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/133, 0x85}], 0x5}, 0xeb6}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/51, 0x33}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/239, 0xef}], 0x4, &(0x7f0000000900)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000001900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/51, 0x33}], 0x3, &(0x7f0000003a00)=""/168, 0xa8}, 0x400}, {{&(0x7f0000003ac0)=@caif, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b40)=""/123, 0x7b}, {&(0x7f0000003bc0)=""/57, 0x39}, {&(0x7f0000003c00)=""/225, 0xe1}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/156, 0x9c}, {&(0x7f0000003e00)=""/89, 0x59}], 0x6, &(0x7f0000003f00)=""/106, 0x6a}, 0x101}, {{&(0x7f0000003f80), 0x80, &(0x7f0000004240)=[{&(0x7f0000004000)=""/217, 0xd9}, {&(0x7f0000004100)=""/112, 0x70}, {&(0x7f0000004180)=""/178, 0xb2}], 0x3, &(0x7f0000004280)=""/109, 0x6d}, 0xfffff3d7}, {{&(0x7f0000004300)=@phonet, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004380)=""/118, 0x76}, {&(0x7f0000004400)=""/130, 0x82}, {&(0x7f00000044c0)=""/23, 0x17}, {&(0x7f0000004500)=""/1, 0x1}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/222, 0xde}, {&(0x7f0000004700)=""/47, 0x2f}, {&(0x7f0000004740)=""/117, 0x75}, {&(0x7f00000047c0)=""/224, 0xe0}], 0x9, &(0x7f0000004980)=""/190, 0xbe}, 0x5}, {{&(0x7f0000004a40)=@ieee802154, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004ac0)=""/204, 0xcc}, {&(0x7f0000004bc0)=""/62, 0x3e}, {&(0x7f0000004c00)=""/38, 0x26}, {&(0x7f0000004c40)=""/169, 0xa9}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/85, 0x55}], 0x6}, 0xa293d000}, {{&(0x7f0000005e00)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000005e80)=""/185, 0xb9}, {&(0x7f0000005f40)=""/28, 0x1c}, {&(0x7f0000009140)=""/175, 0xaf}, {&(0x7f0000006040)=""/168, 0xa8}, {&(0x7f0000006100)=""/134, 0x86}, {&(0x7f00000061c0)=""/251, 0xfb}, {&(0x7f00000062c0)=""/243, 0xf3}, {&(0x7f00000063c0)=""/236, 0xec}, {&(0x7f00000064c0)=""/4096, 0x1000}], 0x9}, 0x7}, {{&(0x7f0000007580)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007600)=""/75, 0x4b}, {&(0x7f0000007680)=""/170, 0xaa}, {&(0x7f0000007740)=""/172, 0xac}, {&(0x7f0000007800)=""/19, 0x13}, {&(0x7f0000007840)=""/173, 0xad}, {&(0x7f0000007900)=""/195, 0xc3}, {&(0x7f0000007a00)=""/92, 0x5c}], 0x7, &(0x7f0000007b00)=""/122, 0x7a}, 0x1}, {{&(0x7f0000007b80)=@hci, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007c00)=""/149, 0x95}, {&(0x7f0000007cc0)=""/107, 0x6b}, {&(0x7f0000007d40)=""/134, 0x86}, {&(0x7f0000007e00)=""/115, 0x73}], 0x4, &(0x7f0000007ec0)=""/4096, 0x1000}, 0x9}], 0xa, 0x0, 0x0) 2m30.422234248s ago: executing program 4 (id=11962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206010300000000000000000600fffe0c000680080008000000000e0900020073797a31000000000500040000000000050005000a000000050001000700000016000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) 2m30.346463048s ago: executing program 4 (id=11963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x60, &(0x7f0000000540)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x19}]}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf251200000018000180140002407465616d5f736c6176655f300000000008000700020000000800090000000000080008f700000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r8, r7, 0x0, 0x10000) mkdirat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x1ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x5, 0x14, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5caab518d1693", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ba112a6", @ANYRES16=r13, @ANYBLOB="010028bd7000fddbdf2525000000050029000100000005002b00000000000a0001007770616e30000000"], 0x30}}, 0x8040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x200048d0) 2m22.177746644s ago: executing program 32 (id=11901): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x3f, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffffff99}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x0, 0x98a, 0x8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="59f03a64dd0a74db2a83b0bd2f9f0c4ebea2ca2c82a6fa19ae754080551c901c54e235015412f461c67914da7b6067033540243a4e", 0x35}, {&(0x7f0000000180)="bff78d8a4c7313d6bbb8d4b9ccb25011992017f19241ec774eaccb76c1846eab1314ebf6fd772cd6545358", 0x2b}, {&(0x7f0000000580)="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", 0x52d}], 0x3}}], 0x2, 0x2400c8c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m15.847509606s ago: executing program 3 (id=12099): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0x9, 0x1, 0xa7, 0x5, [0x1, 0x69, 0x4, 0xb9b, 0xdb4, 0x9, 0xe4f8, 0x800], [0xfff]}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r1, 0x5c2a7000) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 2m15.639303714s ago: executing program 3 (id=12101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newsa={0x180, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0xf0ffffff, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x8a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) 2m15.518281704s ago: executing program 3 (id=12102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff01a705"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 64) r5 = socket(0x1e, 0x1, 0x806) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', r6, 0x40, 0x40, 0xa3ee, 0x1, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x10}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@empty, 0x3}, {@multicast2, 0xc}, {@multicast1, 0x3}]}]}}}}}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) (rerun: 64) close(r3) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000006c0)=0x9, 0x4) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000700)={0x0, 0x15, "fea20408b5f8fd6db05a782e44ed41f9b608db5551"}, &(0x7f0000000740)=0x1d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000780)={r9, 0x7, 0x101}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010040000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000100000308000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c08000340200000960800044000000022050002008900000008000640000000020900010073797a30"], 0xdc}}, 0x0) (async) preadv(r10, &(0x7f0000001a00)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/53, 0x35}, {&(0x7f00000018c0)=""/146, 0x92}, {&(0x7f0000001980)=""/121, 0x79}], 0x6, 0x5, 0x8) 2m15.24145824s ago: executing program 3 (id=12104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x104}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0xeed3a7e740246a91, 0x1, 'syz1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x9, 0x6, 0x2, 0x843, 0x5, 0x7fffffff, 0xfff, 0x5b1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x5, 0x6c, 0x2}]}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0) 2m15.153297294s ago: executing program 33 (id=11963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x60, &(0x7f0000000540)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x19}]}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf251200000018000180140002407465616d5f736c6176655f300000000008000700020000000800090000000000080008f700000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r8, r7, 0x0, 0x10000) mkdirat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x1ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x5, 0x14, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5caab518d1693", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3ba112a6", @ANYRES16=r13, @ANYBLOB="010028bd7000fddbdf2525000000050029000100000005002b00000000000a0001007770616e30000000"], 0x30}}, 0x8040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x200048d0) 2m14.247954588s ago: executing program 3 (id=12112): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f00000004c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000980)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000c660c2dfde8e7a170f2d95495b298760855c52cb54eac1ed7096a1d724a60f4ee7b858e7acef40130291cb7ff2e946444a32ee22a8c6a3b0e0a153e373bda4d13a10bb5c59cad891a8e5b86202156e6df0f7a3cc35e505b52172308750602b6237975"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0x1, &(0x7f0000000580)="c1dc7c74471983a7004a79dcb21859ea07ca6a7e88c64ffdd21822201fd35328cd6f86b6851d204e623d17708e51d6127a9a56e191e7fa355a64cd99bd50be6cc3f9b4b0c23c46b048139a92bfb2967d5bdb92dbe259290a5db697addcb35d550a4f64b21b767d4744e12f9f00195d9bcc3c0c77314567562106058aaabababd43efeaeb4f80d5e7bd6ef1180f7a31690a5f88b4f5f3053a6985733d21d3a3af9bf4318881b66007afe304fcf7ddc612b8ce40124a674a7a554be5d0359fe5298842273aa0c7433fcb24e7", &(0x7f0000000680)=""/22}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa08}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m14.045315458s ago: executing program 3 (id=12114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) 2m4.870080807s ago: executing program 1 (id=12169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x2000, 0x0, 0x20008000}, 0x0) 2m4.706394269s ago: executing program 1 (id=12171): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x24, r1, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18) 2m4.382192347s ago: executing program 1 (id=12172): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x50}}, 0x200000000000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x200, 0xffff, 0x20, 0x2}, {0x0, 0x0, 0x6, 0x8, 0xe8a9, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@private0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(r0, &(0x7f0000001d00)={&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/147, 0x93}, {&(0x7f0000000a40)=""/24, 0x18}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6, &(0x7f0000001c00)=""/234, 0xea}, 0x62) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x24, r4, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x9, 0x8, 0x59, @remote, @remote, 0x40, 0x80, 0x1, 0x5}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x804) sendmsg(r2, &(0x7f0000003680)={&(0x7f0000001d40)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001dc0)="fbca99cdc4dd23410f01b734017d19a72fa2fe6fefe7d7264541fda3b84f9342b97d0a2635d99f64570b67d77bbf1ba0fbbaccd3c8b00826add6813e4284b4c298fbdb0b66e741431675ae1850f5a8bf56621a363da64bc09eea2956a135776c6328df40b575170942bcf31cfd35bb1f252b8a72da2affb6cdfa32ed4ad20abd1070fb945bfb2e6d5b7d37663e2191141e9d8f298c92ca731fd87737f4f3278e4e4bddbee8d90fe5a415caf43576396a8cc961a17b028c40ac3c42a6d7c9f3740451c7ae0943375ebdedf212efde4594b99b6efd81b3642c4fbe21473faf1ec3256dc530ebfdc266f3cd049e", 0xec}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="cddecf50a721e275dbeee0663946508192e88f9c791725f6f2dd249edd5f1e5d3d43bf7c1610e22a78eead24f22157dc33c64d6bad03901e3419b098e9f42eccb12b4d6112972a08bd6fc0d0c9cb7aa96dd755bc0c6935ad0f5bca116b0bfeddea977f6c4d1f3e5aeacc7083a0b32e6087ab0f200fbbb9a7ffbac3967b5b56073634", 0x82}, {&(0x7f0000002f80)="f3", 0x1}, {&(0x7f0000002fc0)="32422d79c1104c2848341313211cf1c8f8b757337f785b9d9e85232cd22c46ff81e147b81e0eb071fefc6243dffad9337113899cfb74ced095534c13f74a8478e47f7ebe380124d35498daef696ac675c061bf5c07f5ccd7eb8536d38817de5f476f18e6f29867e76fa1c6779236973af3d97f2bafb4162fd8647d7f28f5e1bf0d8f49371561cf51a4636aaf84cf3058ca20565d1fd901b8cff1671ace86141cd245e9f5b859f32205e6667f769d4380829709c91e61fe475467b411f4fd1e612818", 0xc2}, {&(0x7f00000030c0)="b671cb59188ee34ac9219fec64fc7f707a6fa13802c3fe62e81932e1b4141340cf3b13e473a5e59d77362c2a07b5c07a1c86f838c80abbebd8be8c9c659b57dd2123dc916ba14d7012f5ca9573c7996d9d6225f22bc0b15f49e6ed3480b9dfbb7d51a26105524a762ca56390ae88c68a", 0x70}, {&(0x7f0000003140)}, {&(0x7f0000003180)="48f260dab2f8f6f9392215a2803e3ffa4c6cfa89a63dce55a97eb49895237d202c0d549af5cc66a144fbc4f851ec8ba6a4517516036fd8ddab000cb513277432650cf98314e1e49dc9a15d6e7926b827325d142ba81be8", 0x57}, {&(0x7f0000003200)="859c1f143a110d8e2ef49ac33838c4c618566281b007c1e95b4427da1c5e7ab4b5263dab8ae1527e6359d4c9abace759823b4ec563a471bf9d301890a47cab6ff2834f9aaac0afc6bfa50f7f539e43d0f20c5730d47cdb2359dbf656809274319d0d7ed36189b6c7c8ef25d94ff9d61757504d46a3760e4c090cd83c354e9086aad24e2af37d387779d0648b653d9314170b3a7bae3829e60d5942b846ecc4dd9867e822cd527189d11772d3134e3bf4ea9cf1158d1f13019a6095758e71558f294bd7f29a40ed3ff4", 0xc9}, {&(0x7f0000003300)="6a4816bacadce1c937914248fe1d93ad249921bc566196d60fb879d0977498e5b691fbb9b07eb3108ab71260e52cf4276b81983d702e04cd72cb1e7ce28d0f2899a72e2aee58f0b7ee2a7b7754a3b4fb83943fba92ef41e8b78490d8c7ba8b96f30251131b9c96df71017488159d4cad49d75c9c6fb113b343e3cc66a05d3ea7dadc920c3e4428b20459457ff6186f2fd5b0bd1dd2aadc4998ef4b613875ae3c40754ace25c013653ae000540b4871bce3181738159ea5b5fab56a0b6a6a35f1a740be46f7752b67b8d7c8029919bcc888e5ae0d83b8433d3fac9b11ff403bf6cd592c9418ab4c5b", 0xe8}], 0xa, &(0x7f00000034c0)=[{0xe8, 0x116, 0xb, "ba1f490aecc026fcfa11e64e76b205dd4394e8b10035bf5230b004b5b41df0ce0c89e8f18b2eec51146603559e0ef9c39b295a2fa576fa04466d7d1b10ffb6ebc368d2aa723a9725ea21a4a3aee0f16d43c8bf38190688cbde7d4326e3c2837c6ed81b37d01149701b9dc79003b2e3dbcd8f5cd505efcb2a64749e035ec82fc40a12d70d6d0b2a7f304a1278ba0be9d7cbdb7540e1924978279d03a617a95d5862c411e7737390dba8689976d673352c8d515ad8a7a55f50ca9bbb2a00f5626c9e468c5e63ade0121d69cb719a74646408596b74"}, {0x20, 0x10c, 0x800, "d627689d87a8a9981067cbb6a01adbe9"}, {0xa0, 0x84, 0x80, "caa2977fade57e7bb7d8e5d791735feb21a8c82978302d9513f998633249a16cf949012fd1c0cd602bd0994ab76e4318cdbf576c7d45b2cffee470a597012be0ed06f61b90ee9be400bde9ce1795a97205acf1cb79e27bd444d3cf0cb45b7633cdfab7e30884b5ff2dd5c270362694fdf1c0a44db3ff1a6335eda5f695b5bf84e66549baeb85082c6d7988"}], 0x1a8}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r9, &(0x7f0000000480), &(0x7f0000000680)=""/113}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000003b00010326a37000fadbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc858) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r11 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m3.119488467s ago: executing program 1 (id=12176): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x1a, 0x0, 0x0, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xf0ffffff, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r5, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r1}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r6, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$inet(r7, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000440)="dd68eb78d28744d3444e30ab1ea8a6c70b3c76df67ca5b3d73dae40516962cca75f50320caba618c7ced202ba1a62de534eb8db75540430417e9ad6873c2c59d2b7a62a5a7dd554829108772f5cf688c4dbc24554c054be87c83907fce548c2f8f53b934dc74cbacc681c2b59fd43f8c9f0009e56d0afe45ad30eef5b0b2ea08c6ebde134709e257b13bbd52b4a728a855c9a4714aeb04", 0x97}, {&(0x7f0000000500)="6c69d8860d09e09449c53c52bbca86a7df73145a49303ac9b5bf6e4ae8e2ec2d567ac2b71b3ddb7e7c50c9c03244219508d5ee00a36b8cf5f89ee0e2f6edaeb574a9e4f378dc27b6d45d0dea4e6bdee430127f83f2e16895e8a0806b258b87afcb7d93554cfdf0ab7d4df20f7bbc6e54cbac206510033009e0975afff523e48fd7faccbdcb609ed71312c52a8c053c1eb80e806ef34e6f4f49c97e8f16254f98ff7af99ca5958fa83461f192c60a9bf9d5cb263cc3fce36e0b", 0xb9}, {&(0x7f0000000780)="d98788725f5514940557e276f9abac9600bd62023381dc4e9f08f5ea411bf68977632ba08b2b52a82c9718bbf0c43cbad9c3b2a1d679f3a24d6e1a85948bedb107fb3c35f2eeb9f07c075331747e269aeb64d07d12f8baa75990bd4471ae7e8cbec69bac72fa66ae8c8d6d26e6a938de17a8f6793f6ebf4e6e66c974fc5b8fbe4e59e338edcb2b0adee1cf92f3351badf1863bb293", 0x95}], 0x3}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x400000000000146, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2m1.848107494s ago: executing program 1 (id=12183): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1280, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11e8, 0x206, 0x240, 0x11e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x41, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x6, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.700095518s ago: executing program 1 (id=12184): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0xfffffffffffffe86, 0x9, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000100000010000000c0002000400000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005001e"], 0x3c}}, 0x4000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r4, 0x1}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000001) 1m58.990235011s ago: executing program 34 (id=12114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) 1m46.566141731s ago: executing program 35 (id=12184): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0xfffffffffffffe86, 0x9, 0x1}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000100000010000000c0002000400000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005001e"], 0x3c}}, 0x4000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r4, 0x1}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000001) 6.324294217s ago: executing program 8 (id=12975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 4.969229203s ago: executing program 8 (id=12991): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x4008001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x7fffffff}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000740)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4004) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) connect$bt_sco(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, @none}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'wg0\x00', {0x2, 0x4e22, @loopback}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) 4.658585146s ago: executing program 2 (id=12993): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.380880247s ago: executing program 2 (id=12995): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="710501040200007108d250e15d9a839fff907c71ad154abfe04f7c0d4def"], 0x160) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.351926179s ago: executing program 6 (id=12996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, 0x0, 0x4024800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000f59400000008000300", @ANYRES32=r1, @ANYBLOB="48005a80"], 0x64}}, 0x0) 1.806788235s ago: executing program 2 (id=13001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 1.805326618s ago: executing program 6 (id=13002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f500", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.780923946s ago: executing program 5 (id=13003): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 1.779610678s ago: executing program 8 (id=13004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 1.599298958s ago: executing program 6 (id=13005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.541022384s ago: executing program 5 (id=13006): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 1.455290179s ago: executing program 7 (id=13007): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x30}, 0x0) 1.253853266s ago: executing program 7 (id=13008): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f00000004c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000980)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000c660c2dfde8e7a170f2d95495b298760855c52cb54eac1ed7096a1d724a60f4ee7b858e7acef40130291cb7ff2e946444a32ee22a8c6a3b0e0a153e373bda4d13a10bb5c59cad891a8e5b86202156e6df0f7a3cc35e505b52172308750602b6237975"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0x1, &(0x7f0000000580)="c1dc7c74471983a7004a79dcb21859ea07ca6a7e88c64ffdd21822201fd35328cd6f86b6851d204e623d17708e51d6127a9a56e191e7fa355a64cd99bd50be6cc3f9b4b0c23c46b048139a92bfb2967d5bdb92dbe259290a5db697addcb35d550a4f64b21b767d4744e12f9f00195d9bcc3c0c77314567562106058aaabababd43efeaeb4f80d5e7bd6ef1180f7a31690a5f88b4f5f3053a6985733d21d3a3af9bf4318881b66007afe304fcf7ddc612b8ce40124a674a7a554be5d0359fe5298842273aa0c7433fcb24e74172155d4487fe12b537cc463c2151c97205b204ead9df4feac29111fb", &(0x7f0000000680)=""/22}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa08}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.12989868s ago: executing program 6 (id=13009): pipe(&(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 1.128715107s ago: executing program 5 (id=13010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6eb, &(0x7f0000001300)={@local, @link_local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x6ad, 0x0, 0x0, @private2, @mcast2, {[], "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"}}}}}, 0x0) 966.236054ms ago: executing program 7 (id=13011): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="710501040200007108d250e15d9a839fff907c71ad154abfe04f7c0d4def"], 0x160) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 934.412013ms ago: executing program 5 (id=13012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) 879.954528ms ago: executing program 6 (id=13013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 728.760391ms ago: executing program 8 (id=13014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x118, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x107, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 671.677853ms ago: executing program 5 (id=13015): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f500", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 567.851851ms ago: executing program 7 (id=13016): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 524.565739ms ago: executing program 6 (id=13017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640040f0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 510.446924ms ago: executing program 2 (id=13018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9c}}, 0x0) 376.541524ms ago: executing program 8 (id=13019): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 275.708389ms ago: executing program 5 (id=13020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x8000000}, 0x2800804c) 267.473178ms ago: executing program 7 (id=13021): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f00000004c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000980)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000c660c2dfde8e7a170f2d95495b298760855c52cb54eac1ed7096a1d724a60f4ee7b858e7acef40130291cb7ff2e946444a32ee22a8c6a3b0e0a153e373bda4d13a10bb5c59cad891a8e5b86202156e6df0f7a3cc35e505b52172308750602b6237975"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0x1, &(0x7f0000000580)="c1dc7c74471983a7004a79dcb21859ea07ca6a7e88c64ffdd21822201fd35328cd6f86b6851d204e623d17708e51d6127a9a56e191e7fa355a64cd99bd50be6cc3f9b4b0c23c46b048139a92bfb2967d5bdb92dbe259290a5db697addcb35d550a4f64b21b767d4744e12f9f00195d9bcc3c0c77314567562106058aaabababd43efeaeb4f80d5e7bd6ef1180f7a31690a5f88b4f5f3053a6985733d21d3a3af9bf4318881b66007afe304fcf7ddc612b8ce40124a674a7a554be5d0359fe5298842273aa0c7433fcb24e74172155d4487fe12b537cc463c2151c97205b204ead9df4feac29111fb", &(0x7f0000000680)=""/22}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa08}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 199.84756ms ago: executing program 2 (id=13022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6eb, &(0x7f0000001300)={@local, @link_local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x6ad, 0x0, 0x0, @private2, @mcast2, {[], "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"}}}}}, 0x0) 170.597356ms ago: executing program 7 (id=13023): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 11.354592ms ago: executing program 8 (id=13024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe80000000000000fffffff9000000bbfe8000000000000000000000000000aa4e200e220048"], 0x0) 0s ago: executing program 2 (id=13025): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 6 syzkaller0: left promiscuous mode [ 1421.607770][T13519] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1421.639729][T13520] tipc: Resetting bearer [ 1421.685643][T13520] net_ratelimit: 501 callbacks suppressed [ 1421.685670][T13520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1421.749726][T13523] xt_hashlimit: overflow, try lower: 0/0 [ 1421.902774][T13530] xt_hashlimit: size too large, truncated to 1048576 [ 1422.017203][T13513] lo speed is unknown, defaulting to 1000 [ 1422.036735][T13513] wg2 speed is unknown, defaulting to 1000 [ 1422.574337][T13548] netlink: 'syz.2.11967': attribute type 1 has an invalid length. [ 1422.682078][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11967'. [ 1423.154551][T13548] bond26: entered promiscuous mode [ 1423.154942][T13548] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1423.208869][T13553] bond26 (unregistering): Released all slaves [ 1423.535338][T13578] netlink: 'syz.2.11973': attribute type 1 has an invalid length. [ 1423.593454][T13578] bond26: entered promiscuous mode [ 1423.593926][T13578] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1423.611565][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11973'. [ 1423.642704][T13578] bond26 (unregistering): Released all slaves [ 1423.873608][ T31] audit: type=1800 audit(1789871876.738:13): pid=13594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11978" name="memory.events" dev="tmpfs" ino=12182 res=0 errno=0 [ 1424.249626][T13597] bond21: option arp_validate: invalid value (8192) [ 1424.256019][T13597] bond21 (unregistering): Released all slaves [ 1424.447566][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11984'. [ 1424.803862][T13632] bond0: (slave ip6tnl0): refused to change device type [ 1425.173770][T13653] bond0: (slave ip6tnl0): refused to change device type [ 1425.324955][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12003'. [ 1425.350134][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12004'. [ 1425.350159][T13661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12004'. [ 1425.398268][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 1425.466079][T13664] bond0: (slave ip6tnl0): refused to change device type [ 1425.870796][T13679] FAULT_INJECTION: forcing a failure. [ 1425.870796][T13679] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.870823][T13679] CPU: 1 UID: 0 PID: 13679 Comm: syz.1.12011 Not tainted syzkaller #0 PREEMPT(full) [ 1425.870842][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.870853][T13679] Call Trace: [ 1425.870859][T13679] [ 1425.870867][T13679] dump_stack_lvl+0xe8/0x150 [ 1425.870896][T13679] should_fail_ex+0x410/0x560 [ 1425.870919][T13679] should_failslab+0xa8/0x100 [ 1425.870939][T13679] ? skb_clone+0x212/0x3a0 [ 1425.870962][T13679] kmem_cache_alloc_noprof+0xa1/0x600 [ 1425.870990][T13679] ? skb_clone+0x212/0x3a0 [ 1425.871028][T13679] skb_clone+0x212/0x3a0 [ 1425.871053][T13679] __netlink_deliver_tap+0x413/0x860 [ 1425.871098][T13679] ? netlink_deliver_tap+0x2e/0x1b0 [ 1425.871122][T13679] netlink_deliver_tap+0x19c/0x1b0 [ 1425.871146][T13679] netlink_unicast+0x781/0x940 [ 1425.871177][T13679] netlink_sendmsg+0x813/0xb40 [ 1425.871206][T13679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.871236][T13679] ? apparmor_socket_sendmsg+0x98/0x360 [ 1425.871255][T13679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.871277][T13679] sock_sendmsg_nosec+0x13a/0x180 [ 1425.871294][T13679] ____sys_sendmsg+0x54e/0x850 [ 1425.871318][T13679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.871345][T13679] ? import_iovec+0x73/0xa0 [ 1425.871367][T13679] ___sys_sendmsg+0x2a5/0x360 [ 1425.871386][T13679] ? __lock_acquire+0x747/0x2de0 [ 1425.871405][T13679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.871450][T13679] ? __fget_files+0x2a/0x420 [ 1425.871471][T13679] ? __fget_files+0x3a2/0x420 [ 1425.871498][T13679] __x64_sys_sendmsg+0x1b1/0x290 [ 1425.871521][T13679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1425.871557][T13679] do_syscall_64+0x166/0x520 [ 1425.871575][T13679] ? trace_irq_disable+0x3b/0x140 [ 1425.871591][T13679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.871606][T13679] ? clear_bhb_loop+0x70/0xc0 [ 1425.871625][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.871640][T13679] RIP: 0033:0x7f873c39e159 [ 1425.871654][T13679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.871672][T13679] RSP: 002b:00007f873d2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.871688][T13679] RAX: ffffffffffffffda RBX: 00007f873c625fa0 RCX: 00007f873c39e159 [ 1425.871700][T13679] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1425.871709][T13679] RBP: 00007f873d2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.871718][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.871727][T13679] R13: 00007f873c626038 R14: 00007f873c625fa0 R15: 00007ffd92f5bfc8 [ 1425.871751][T13679] [ 1426.240906][T13668] syzkaller1: entered promiscuous mode [ 1426.240925][T13668] syzkaller1: entered allmulticast mode [ 1426.371973][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12013'. [ 1426.839077][T13702] bond0: (slave ip6tnl0): refused to change device type [ 1426.890864][T13516] udevd[13516]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1427.359788][T13725] bond0: (slave ip6tnl0): refused to change device type [ 1428.274811][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12029'. [ 1428.274839][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12029'. [ 1428.353529][T13738] bond0: (slave ip6tnl0): refused to change device type [ 1428.484188][T13745] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 1428.605814][T13755] FAULT_INJECTION: forcing a failure. [ 1428.605814][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.605859][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.3.12038 Not tainted syzkaller #0 PREEMPT(full) [ 1428.605883][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1428.605897][T13755] Call Trace: [ 1428.605905][T13755] [ 1428.605915][T13755] dump_stack_lvl+0xe8/0x150 [ 1428.605950][T13755] should_fail_ex+0x410/0x560 [ 1428.605980][T13755] should_failslab+0xa8/0x100 [ 1428.606007][T13755] ? skb_clone+0x212/0x3a0 [ 1428.606037][T13755] kmem_cache_alloc_noprof+0xa1/0x600 [ 1428.606075][T13755] ? skb_clone+0x212/0x3a0 [ 1428.606110][T13755] skb_clone+0x212/0x3a0 [ 1428.606136][T13755] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1428.606167][T13755] nfnetlink_rcv+0x4de/0x28c0 [ 1428.606198][T13755] ? __dev_queue_xmit+0x29b/0x3820 [ 1428.606232][T13755] ? __local_bh_enable_ip+0xd6/0x140 [ 1428.606260][T13755] ? lockdep_hardirqs_on+0x7b/0x110 [ 1428.606285][T13755] ? __dev_queue_xmit+0x29b/0x3820 [ 1428.606313][T13755] ? __local_bh_enable_ip+0xd6/0x140 [ 1428.606338][T13755] ? __dev_queue_xmit+0x29b/0x3820 [ 1428.606367][T13755] ? __dev_queue_xmit+0x1edc/0x3820 [ 1428.606395][T13755] ? do_syscall_64+0x166/0x520 [ 1428.606418][T13755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.606451][T13755] ? __dev_queue_xmit+0x29b/0x3820 [ 1428.606482][T13755] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1428.606528][T13755] ? ref_tracker_free+0x689/0x830 [ 1428.606556][T13755] ? __pfx_ref_tracker_free+0x10/0x10 [ 1428.606591][T13755] ? __skb_clone+0x449/0x6c0 [ 1428.606625][T13755] ? skb_clone+0x246/0x3a0 [ 1428.606657][T13755] ? __netlink_deliver_tap+0x811/0x860 [ 1428.606688][T13755] ? netlink_deliver_tap+0x2e/0x1b0 [ 1428.606725][T13755] ? netlink_deliver_tap+0x2e/0x1b0 [ 1428.606754][T13755] ? netlink_deliver_tap+0x2e/0x1b0 [ 1428.606790][T13755] netlink_unicast+0x7bd/0x940 [ 1428.606829][T13755] netlink_sendmsg+0x813/0xb40 [ 1428.606876][T13755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.606912][T13755] ? apparmor_socket_sendmsg+0x98/0x360 [ 1428.606932][T13755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.606956][T13755] sock_sendmsg_nosec+0x13a/0x180 [ 1428.606974][T13755] ____sys_sendmsg+0x54e/0x850 [ 1428.606999][T13755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.607028][T13755] ? import_iovec+0x73/0xa0 [ 1428.607051][T13755] ___sys_sendmsg+0x2a5/0x360 [ 1428.607071][T13755] ? __lock_acquire+0x747/0x2de0 [ 1428.607091][T13755] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.607139][T13755] ? __fget_files+0x2a/0x420 [ 1428.607161][T13755] ? __fget_files+0x3a2/0x420 [ 1428.607191][T13755] __x64_sys_sendmsg+0x1b1/0x290 [ 1428.607215][T13755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1428.607252][T13755] do_syscall_64+0x166/0x520 [ 1428.607273][T13755] ? trace_irq_disable+0x3b/0x140 [ 1428.607291][T13755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.607307][T13755] ? clear_bhb_loop+0x70/0xc0 [ 1428.607327][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.607345][T13755] RIP: 0033:0x7f9c2319e159 [ 1428.607360][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.607374][T13755] RSP: 002b:00007f9c240bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.607392][T13755] RAX: ffffffffffffffda RBX: 00007f9c23425fa0 RCX: 00007f9c2319e159 [ 1428.607404][T13755] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1428.607415][T13755] RBP: 00007f9c240bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.607442][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.607453][T13755] R13: 00007f9c23426038 R14: 00007f9c23425fa0 R15: 00007ffe1c3c3a58 [ 1428.607480][T13755] [ 1429.270409][T13769] bond0: (slave ip6tnl0): refused to change device type [ 1429.611181][T13777] FAULT_INJECTION: forcing a failure. [ 1429.611181][T13777] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.611216][T13777] CPU: 1 UID: 0 PID: 13777 Comm: syz.1.12046 Not tainted syzkaller #0 PREEMPT(full) [ 1429.611249][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1429.611263][T13777] Call Trace: [ 1429.611273][T13777] [ 1429.611283][T13777] dump_stack_lvl+0xe8/0x150 [ 1429.611321][T13777] should_fail_ex+0x410/0x560 [ 1429.611353][T13777] should_failslab+0xa8/0x100 [ 1429.611383][T13777] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1429.611420][T13777] ? __d_lookup+0x66/0x790 [ 1429.611441][T13777] ? __d_alloc+0x37/0x6f0 [ 1429.611471][T13777] ? __d_alloc+0x37/0x6f0 [ 1429.611512][T13777] __d_alloc+0x37/0x6f0 [ 1429.611552][T13777] d_alloc+0x4b/0x190 [ 1429.611583][T13777] ? lookup_one_qstr_excl+0xc4/0x360 [ 1429.611620][T13777] lookup_one_qstr_excl+0xd8/0x360 [ 1429.611654][T13777] ? lookup_noperm_common+0x245/0x430 [ 1429.611690][T13777] start_dirop+0x5c/0x90 [ 1429.611722][T13777] simple_start_creating+0xcc/0x110 [ 1429.611760][T13777] ? __pfx_simple_start_creating+0x10/0x10 [ 1429.611797][T13777] ? do_raw_spin_unlock+0xf5/0x200 [ 1429.611829][T13777] ? mntput+0x65/0xc0 [ 1429.611861][T13777] debugfs_start_creating+0xca/0x1b0 [ 1429.611900][T13777] __debugfs_create_file+0x6f/0x400 [ 1429.611940][T13777] debugfs_create_file_full+0x3f/0x60 [ 1429.611979][T13777] ref_tracker_dir_debugfs+0x197/0x360 [ 1429.612009][T13777] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1429.612069][T13777] ? __kvmalloc_node_noprof+0x345/0x820 [ 1429.612100][T13777] ? __raw_spin_lock_init+0x45/0x100 [ 1429.612138][T13777] alloc_netdev_mqs+0x275/0x12a0 [ 1429.612175][T13777] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 1429.612208][T13777] ip6gre_tunnel_locate+0x1d4/0x970 [ 1429.612245][T13777] ? __pfx_gre_flags_to_tnl_flags+0x10/0x10 [ 1429.612277][T13777] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 1429.612302][T13777] ? ip6gre_tnl_parm_from_user+0x41/0x400 [ 1429.612333][T13777] ? ip6gre_tunnel_siocdevprivate+0x8d9/0xd90 [ 1429.612368][T13777] ip6gre_tunnel_siocdevprivate+0x904/0xd90 [ 1429.612405][T13777] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 1429.612463][T13777] ? __pfx___mutex_lock+0x10/0x10 [ 1429.612492][T13777] ? full_name_hash+0x92/0xe0 [ 1429.612532][T13777] dev_ifsioc+0xb56/0x1360 [ 1429.612568][T13777] dev_ioctl+0x84c/0x1150 [ 1429.612600][T13777] sock_ioctl+0x753/0x7e0 [ 1429.612638][T13777] ? __pfx_sock_ioctl+0x10/0x10 [ 1429.612675][T13777] ? __fget_files+0x3a2/0x420 [ 1429.612705][T13777] ? __fget_files+0x2a/0x420 [ 1429.612751][T13777] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1429.612781][T13777] ? __pfx_sock_ioctl+0x10/0x10 [ 1429.612812][T13777] __se_sys_ioctl+0xfc/0x170 [ 1429.612837][T13777] do_syscall_64+0x166/0x520 [ 1429.612862][T13777] ? trace_irq_disable+0x3b/0x140 [ 1429.612883][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.612905][T13777] ? clear_bhb_loop+0x70/0xc0 [ 1429.612931][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.612953][T13777] RIP: 0033:0x7f873c39e159 [ 1429.612973][T13777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.612991][T13777] RSP: 002b:00007f873d2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.613014][T13777] RAX: ffffffffffffffda RBX: 00007f873c625fa0 RCX: 00007f873c39e159 [ 1429.613030][T13777] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1429.613043][T13777] RBP: 00007f873d2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.613058][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.613070][T13777] R13: 00007f873c626038 R14: 00007f873c625fa0 R15: 00007ffd92f5bfc8 [ 1429.613107][T13777] [ 1430.211926][T13782] syzkaller0: mtu less than device minimum [ 1430.390753][ T7832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1430.395855][ T7832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1430.413479][ T7832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1430.416862][ T7832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1430.431408][ T7832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1430.534625][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12055'. [ 1430.534651][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12055'. [ 1430.887494][T13822] FAULT_INJECTION: forcing a failure. [ 1430.887494][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.887530][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.1.12060 Not tainted syzkaller #0 PREEMPT(full) [ 1430.887555][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1430.887569][T13822] Call Trace: [ 1430.887579][T13822] [ 1430.887589][T13822] dump_stack_lvl+0xe8/0x150 [ 1430.887631][T13822] should_fail_ex+0x410/0x560 [ 1430.887662][T13822] _copy_from_user+0x2d/0xb0 [ 1430.887693][T13822] do_sock_getsockopt+0x1fa/0x640 [ 1430.887731][T13822] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1430.887777][T13822] ? __fget_files+0x2a/0x420 [ 1430.887808][T13822] ? __fget_files+0x3a2/0x420 [ 1430.887837][T13822] ? __fget_files+0x2a/0x420 [ 1430.887876][T13822] __x64_sys_getsockopt+0x1a4/0x240 [ 1430.887917][T13822] do_syscall_64+0x166/0x520 [ 1430.887944][T13822] ? trace_irq_disable+0x3b/0x140 [ 1430.887968][T13822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.887991][T13822] ? clear_bhb_loop+0x70/0xc0 [ 1430.888019][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.888042][T13822] RIP: 0033:0x7f873c39e159 [ 1430.888062][T13822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.888093][T13822] RSP: 002b:00007f873d2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1430.888118][T13822] RAX: ffffffffffffffda RBX: 00007f873c625fa0 RCX: 00007f873c39e159 [ 1430.888136][T13822] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 1430.888150][T13822] RBP: 00007f873d2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.888165][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.888179][T13822] R13: 00007f873c626038 R14: 00007f873c625fa0 R15: 00007ffd92f5bfc8 [ 1430.888217][T13822] [ 1431.174428][T13815] bond21: option arp_validate: invalid value (8192) [ 1431.183165][T13815] bond21 (unregistering): Released all slaves [ 1431.201343][T13828] sctp: [Deprecated]: syz.2.12061 (pid 13828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.201343][T13828] Use struct sctp_sack_info instead [ 1431.274648][T13794] lo speed is unknown, defaulting to 1000 [ 1431.622896][T13841] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 1431.644725][T13794] lo speed is unknown, defaulting to 1000 [ 1431.657482][T13794] wg2 speed is unknown, defaulting to 1000 [ 1432.145734][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12067'. [ 1432.484190][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.484364][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.484490][T13794] bridge_slave_0: entered allmulticast mode [ 1432.486902][ T5620] Bluetooth: hci5: command tx timeout [ 1432.488910][T13794] bridge_slave_0: entered promiscuous mode [ 1432.497834][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.498057][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.498460][T13794] bridge_slave_1: entered allmulticast mode [ 1432.503202][T13794] bridge_slave_1: entered promiscuous mode [ 1432.625227][T13871] xt_NETMAP: bad MAP_IPS. [ 1432.640598][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.646366][ C0] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 1432.660318][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.762205][T13794] team0: Port device team_slave_0 added [ 1432.765325][T13794] team0: Port device team_slave_1 added [ 1432.860641][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.860661][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.860691][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.874985][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.875037][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.875122][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.062148][T13794] hsr_slave_0: entered promiscuous mode [ 1433.063113][T13794] hsr_slave_1: entered promiscuous mode [ 1433.363980][T13794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1433.404145][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1433.415533][T13794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1433.441490][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1433.455390][T13794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1433.474151][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1433.523703][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1433.531363][T13794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1433.571135][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1433.659283][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12080'. [ 1433.659301][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12080'. [ 1433.949794][T13910] bond24: entered promiscuous mode [ 1433.950320][T13910] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1434.020109][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.084267][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.115389][T25494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.115496][T25494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.151690][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.151790][ T7791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.357898][ T7296] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1434.358709][T13925] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1434.534036][T13933] xt_policy: output policy not valid in PREROUTING and INPUT [ 1434.567947][ T5620] Bluetooth: hci5: command tx timeout [ 1434.942251][T13948] FAULT_INJECTION: forcing a failure. [ 1434.942251][T13948] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.942285][T13948] CPU: 0 UID: 0 PID: 13948 Comm: syz.3.12091 Not tainted syzkaller #0 PREEMPT(full) [ 1434.942309][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1434.942323][T13948] Call Trace: [ 1434.942332][T13948] [ 1434.942341][T13948] dump_stack_lvl+0xe8/0x150 [ 1434.942377][T13948] should_fail_ex+0x410/0x560 [ 1434.942407][T13948] should_failslab+0xa8/0x100 [ 1434.942436][T13948] __kmalloc_noprof+0xfe/0x720 [ 1434.942456][T13948] ? __kasan_kmalloc+0x93/0xb0 [ 1434.942480][T13948] ? nla_strdup+0x9d/0x140 [ 1434.942505][T13948] ? nla_strdup+0x9d/0x140 [ 1434.942532][T13948] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1434.942566][T13948] nla_strdup+0x9d/0x140 [ 1434.942595][T13948] nf_tables_newchain+0x1aba/0x28b0 [ 1434.942641][T13948] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1434.942700][T13948] ? lock_acquire+0x115/0x350 [ 1434.942723][T13948] ? nfnl_pernet+0x23/0x240 [ 1434.942762][T13948] ? __nla_parse+0x40/0x60 [ 1434.942793][T13948] nfnetlink_rcv+0x1288/0x28c0 [ 1434.942879][T13948] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1434.942928][T13948] ? ref_tracker_free+0x689/0x830 [ 1434.943001][T13948] ? skb_clone+0x246/0x3a0 [ 1434.943039][T13948] ? __netlink_deliver_tap+0x811/0x860 [ 1434.943084][T13948] ? netlink_deliver_tap+0x2e/0x1b0 [ 1434.943118][T13948] ? netlink_deliver_tap+0x2e/0x1b0 [ 1434.943159][T13948] netlink_unicast+0x7bd/0x940 [ 1434.943207][T13948] netlink_sendmsg+0x813/0xb40 [ 1434.943253][T13948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.943305][T13948] ? apparmor_socket_sendmsg+0x98/0x360 [ 1434.943335][T13948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.943370][T13948] sock_sendmsg_nosec+0x13a/0x180 [ 1434.943398][T13948] ____sys_sendmsg+0x54e/0x850 [ 1434.943436][T13948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1434.943478][T13948] ? import_iovec+0x73/0xa0 [ 1434.943512][T13948] ___sys_sendmsg+0x2a5/0x360 [ 1434.943542][T13948] ? __lock_acquire+0x747/0x2de0 [ 1434.943580][T13948] ? __pfx____sys_sendmsg+0x10/0x10 [ 1434.943653][T13948] ? __fget_files+0x2a/0x420 [ 1434.943685][T13948] ? __fget_files+0x3a2/0x420 [ 1434.943730][T13948] __x64_sys_sendmsg+0x1b1/0x290 [ 1434.943765][T13948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1434.943823][T13948] do_syscall_64+0x166/0x520 [ 1434.943852][T13948] ? trace_irq_disable+0x3b/0x140 [ 1434.943876][T13948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.943900][T13948] ? clear_bhb_loop+0x70/0xc0 [ 1434.943931][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.943954][T13948] RIP: 0033:0x7f9c2319e159 [ 1434.943976][T13948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.943996][T13948] RSP: 002b:00007f9c240bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.944021][T13948] RAX: ffffffffffffffda RBX: 00007f9c23425fa0 RCX: 00007f9c2319e159 [ 1434.944040][T13948] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1434.944055][T13948] RBP: 00007f9c240bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.944070][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.944084][T13948] R13: 00007f9c23426038 R14: 00007f9c23425fa0 R15: 00007ffe1c3c3a58 [ 1434.944122][T13948] [ 1435.344517][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.471351][T13956] FAULT_INJECTION: forcing a failure. [ 1435.471351][T13956] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.471388][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.2.12094 Not tainted syzkaller #0 PREEMPT(full) [ 1435.471413][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1435.471428][T13956] Call Trace: [ 1435.471438][T13956] [ 1435.471449][T13956] dump_stack_lvl+0xe8/0x150 [ 1435.471488][T13956] should_fail_ex+0x410/0x560 [ 1435.471520][T13956] should_failslab+0xa8/0x100 [ 1435.471561][T13956] __kmalloc_cache_noprof+0xa3/0x600 [ 1435.471587][T13956] ? rtnl_newlink+0x147/0x1c30 [ 1435.471616][T13956] ? rtnl_newlink+0x147/0x1c30 [ 1435.471649][T13956] rtnl_newlink+0x147/0x1c30 [ 1435.471681][T13956] ? kasan_save_track+0x4f/0x80 [ 1435.471704][T13956] ? kasan_save_track+0x3e/0x80 [ 1435.471726][T13956] ? kasan_save_free_info+0x40/0x50 [ 1435.471757][T13956] ? __kasan_slab_free+0x5c/0x80 [ 1435.471782][T13956] ? kmem_cache_free+0x182/0x650 [ 1435.471803][T13956] ? nlmon_xmit+0xb0/0x100 [ 1435.471826][T13956] ? dev_hard_start_xmit+0x2cd/0x830 [ 1435.471854][T13956] ? __dev_queue_xmit+0x14c0/0x3820 [ 1435.471881][T13956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1435.471902][T13956] ? sock_sendmsg_nosec+0x13a/0x180 [ 1435.471919][T13956] ? ____sys_sendmsg+0x54e/0x850 [ 1435.471943][T13956] ? ___sys_sendmsg+0x2a5/0x360 [ 1435.471971][T13956] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1435.472000][T13956] ? do_syscall_64+0x166/0x520 [ 1435.472027][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.472092][T13956] ? kasan_quarantine_put+0xbb/0x1f0 [ 1435.472115][T13956] ? lockdep_hardirqs_on+0x7b/0x110 [ 1435.472147][T13956] ? nlmon_xmit+0xb0/0x100 [ 1435.472169][T13956] ? kmem_cache_free+0x182/0x650 [ 1435.472206][T13956] ? __lock_acquire+0x747/0x2de0 [ 1435.472242][T13956] ? __local_bh_enable_ip+0xd6/0x140 [ 1435.472273][T13956] ? lockdep_hardirqs_on+0x7b/0x110 [ 1435.472308][T13956] ? __dev_queue_xmit+0x29b/0x3820 [ 1435.472346][T13956] ? __local_bh_enable_ip+0xd6/0x140 [ 1435.472371][T13956] ? __dev_queue_xmit+0x29b/0x3820 [ 1435.472408][T13956] ? lock_acquire+0x115/0x350 [ 1435.472429][T13956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1435.472465][T13956] ? __pfx_rtnl_newlink+0x10/0x10 [ 1435.472489][T13956] rtnetlink_rcv_msg+0x802/0xc00 [ 1435.472519][T13956] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1435.472551][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1435.472573][T13956] ? ref_tracker_free+0x689/0x830 [ 1435.472600][T13956] ? __pfx_ref_tracker_free+0x10/0x10 [ 1435.472633][T13956] netlink_rcv_skb+0x226/0x4a0 [ 1435.472665][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1435.472692][T13956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1435.472757][T13956] netlink_unicast+0x7bd/0x940 [ 1435.472795][T13956] netlink_sendmsg+0x813/0xb40 [ 1435.472834][T13956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.472875][T13956] ? apparmor_socket_sendmsg+0x98/0x360 [ 1435.472900][T13956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.472929][T13956] sock_sendmsg_nosec+0x13a/0x180 [ 1435.472951][T13956] ____sys_sendmsg+0x54e/0x850 [ 1435.472983][T13956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1435.473018][T13956] ? import_iovec+0x73/0xa0 [ 1435.473046][T13956] ___sys_sendmsg+0x2a5/0x360 [ 1435.473071][T13956] ? __lock_acquire+0x747/0x2de0 [ 1435.473096][T13956] ? __pfx____sys_sendmsg+0x10/0x10 [ 1435.473156][T13956] ? __fget_files+0x2a/0x420 [ 1435.473183][T13956] ? __fget_files+0x3a2/0x420 [ 1435.473221][T13956] __x64_sys_sendmsg+0x1b1/0x290 [ 1435.473250][T13956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1435.473298][T13956] do_syscall_64+0x166/0x520 [ 1435.473322][T13956] ? trace_irq_disable+0x3b/0x140 [ 1435.473342][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.473362][T13956] ? clear_bhb_loop+0x70/0xc0 [ 1435.473387][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.473407][T13956] RIP: 0033:0x7fc82f79e159 [ 1435.473426][T13956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.473442][T13956] RSP: 002b:00007fc83057f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1435.473464][T13956] RAX: ffffffffffffffda RBX: 00007fc82fa25fa0 RCX: 00007fc82f79e159 [ 1435.473479][T13956] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 1435.473492][T13956] RBP: 00007fc83057f090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.473505][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.473518][T13956] R13: 00007fc82fa26038 R14: 00007fc82fa25fa0 R15: 00007ffd176ccbe8 [ 1435.473568][T13956] [ 1435.946898][T13957] bridge10: entered promiscuous mode [ 1435.994465][T13952] 8021q: VLANs not supported on nlmon0 [ 1436.038211][T13962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.169683][T13964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12095'. [ 1436.298338][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12098'. [ 1436.334019][T13794] veth0_vlan: entered promiscuous mode [ 1436.374190][T13794] veth1_vlan: entered promiscuous mode [ 1436.468555][T13794] veth0_macvtap: entered promiscuous mode [ 1436.474488][T13794] veth1_macvtap: entered promiscuous mode [ 1436.528206][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.554200][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.616797][ T1004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.617160][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.617469][ T1004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.617537][ T1004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.660378][ T5620] Bluetooth: hci5: command tx timeout [ 1437.452154][ T7832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1437.468031][ T7832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1437.480915][ T7832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1437.490553][ T7832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1437.492344][ T7832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1437.701244][ T7788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.701269][ T7788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.043519][T14017] bond25: entered promiscuous mode [ 1438.044270][T14017] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1438.223287][T25494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.223312][T25494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.229625][T14028] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.12113'. [ 1438.623483][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12047'. [ 1438.625747][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12047'. [ 1438.649453][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12047'. [ 1438.651642][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12047'. [ 1438.727816][ T5620] Bluetooth: hci5: command tx timeout [ 1438.845850][T14004] lo speed is unknown, defaulting to 1000 [ 1439.044603][T14054] FAULT_INJECTION: forcing a failure. [ 1439.044603][T14054] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.044635][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz.2.12121 Not tainted syzkaller #0 PREEMPT(full) [ 1439.044659][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1439.044672][T14054] Call Trace: [ 1439.044680][T14054] [ 1439.044690][T14054] dump_stack_lvl+0xe8/0x150 [ 1439.044726][T14054] should_fail_ex+0x410/0x560 [ 1439.044756][T14054] should_failslab+0xa8/0x100 [ 1439.044785][T14054] __kvmalloc_node_noprof+0x176/0x820 [ 1439.044813][T14054] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1439.044844][T14054] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1439.044883][T14054] alloc_netdev_mqs+0xa9/0x12a0 [ 1439.044913][T14054] ? __pfx_snprintf+0x10/0x10 [ 1439.044933][T14054] ? __pfx_vlan_setup+0x10/0x10 [ 1439.045049][T14054] rtnl_create_link+0x321/0xd70 [ 1439.045076][T14054] rtnl_newlink_create+0x258/0x7b0 [ 1439.045118][T14054] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1439.045151][T14054] ? __pfx___mutex_lock+0x10/0x10 [ 1439.045188][T14054] ? ns_capable+0x89/0xe0 [ 1439.045221][T14054] rtnl_newlink+0x167a/0x1c30 [ 1439.045264][T14054] ? __pfx_rtnl_newlink+0x10/0x10 [ 1439.045288][T14054] ? sock_sendmsg_nosec+0x13a/0x180 [ 1439.045307][T14054] ? ____sys_sendmsg+0x54e/0x850 [ 1439.045332][T14054] ? ___sys_sendmsg+0x2a5/0x360 [ 1439.045358][T14054] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1439.045383][T14054] ? do_syscall_64+0x166/0x520 [ 1439.045411][T14054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.045471][T14054] ? kasan_quarantine_put+0xbb/0x1f0 [ 1439.045492][T14054] ? lockdep_hardirqs_on+0x7b/0x110 [ 1439.045521][T14054] ? nlmon_xmit+0xb0/0x100 [ 1439.045543][T14054] ? kmem_cache_free+0x182/0x650 [ 1439.045578][T14054] ? __lock_acquire+0x747/0x2de0 [ 1439.045611][T14054] ? __local_bh_enable_ip+0xd6/0x140 [ 1439.045639][T14054] ? lockdep_hardirqs_on+0x7b/0x110 [ 1439.045662][T14054] ? __dev_queue_xmit+0x29b/0x3820 [ 1439.045690][T14054] ? __local_bh_enable_ip+0xd6/0x140 [ 1439.045716][T14054] ? __dev_queue_xmit+0x29b/0x3820 [ 1439.045774][T14054] ? __pfx_rtnl_newlink+0x10/0x10 [ 1439.045798][T14054] rtnetlink_rcv_msg+0x802/0xc00 [ 1439.045828][T14054] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1439.045853][T14054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1439.045876][T14054] ? ref_tracker_free+0x689/0x830 [ 1439.045905][T14054] ? __pfx_ref_tracker_free+0x10/0x10 [ 1439.045941][T14054] netlink_rcv_skb+0x226/0x4a0 [ 1439.045975][T14054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1439.046020][T14054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1439.046069][T14054] ? netlink_deliver_tap+0x2e/0x1b0 [ 1439.046102][T14054] ? netlink_deliver_tap+0x2e/0x1b0 [ 1439.046147][T14054] netlink_unicast+0x7bd/0x940 [ 1439.046190][T14054] netlink_sendmsg+0x813/0xb40 [ 1439.046236][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1439.046281][T14054] ? apparmor_socket_sendmsg+0x98/0x360 [ 1439.046309][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1439.046342][T14054] sock_sendmsg_nosec+0x13a/0x180 [ 1439.046368][T14054] ____sys_sendmsg+0x54e/0x850 [ 1439.046405][T14054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.046447][T14054] ? import_iovec+0x73/0xa0 [ 1439.046479][T14054] ___sys_sendmsg+0x2a5/0x360 [ 1439.046509][T14054] ? __lock_acquire+0x747/0x2de0 [ 1439.046537][T14054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.046609][T14054] ? __fget_files+0x2a/0x420 [ 1439.046640][T14054] ? __fget_files+0x3a2/0x420 [ 1439.046683][T14054] __x64_sys_sendmsg+0x1b1/0x290 [ 1439.046717][T14054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1439.046772][T14054] do_syscall_64+0x166/0x520 [ 1439.046799][T14054] ? trace_irq_disable+0x3b/0x140 [ 1439.046822][T14054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.046845][T14054] ? clear_bhb_loop+0x70/0xc0 [ 1439.046874][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.046897][T14054] RIP: 0033:0x7fc82f79e159 [ 1439.046918][T14054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.046937][T14054] RSP: 002b:00007fc83057f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.046961][T14054] RAX: ffffffffffffffda RBX: 00007fc82fa25fa0 RCX: 00007fc82f79e159 [ 1439.046978][T14054] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 1439.046993][T14054] RBP: 00007fc83057f090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.047007][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.047020][T14054] R13: 00007fc82fa26038 R14: 00007fc82fa25fa0 R15: 00007ffd176ccbe8 [ 1439.047056][T14054] [ 1439.618234][ T5620] Bluetooth: hci6: command tx timeout [ 1439.821708][T14058] netlink: 'syz.5.12123': attribute type 1 has an invalid length. [ 1439.821730][T14058] netlink: 'syz.5.12123': attribute type 2 has an invalid length. [ 1439.821745][T14058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12123'. [ 1440.140356][T14004] lo speed is unknown, defaulting to 1000 [ 1440.157964][T14004] wg2 speed is unknown, defaulting to 1000 [ 1440.206839][T14068] netlink: 'syz.2.12125': attribute type 3 has an invalid length. [ 1440.272342][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12127'. [ 1440.272369][T14078] openvswitch: netlink: Flow actions attr not present in new flow. [ 1440.344280][T14082] netlink: 'syz.1.12128': attribute type 1 has an invalid length. [ 1440.448785][T14082] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1440.549549][T14084] bond23: (slave veth0_to_bond): Releasing backup interface [ 1440.571723][T14084] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1440.782418][T14102] netlink: 'syz.2.12130': attribute type 1 has an invalid length. [ 1440.902006][T14102] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1440.928818][T14104] bond25: (slave veth0_to_bond): Releasing backup interface [ 1440.953690][T14104] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1441.318854][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.323618][T14004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.323752][T14004] bridge_slave_0: entered allmulticast mode [ 1441.349972][T14004] bridge_slave_0: entered promiscuous mode [ 1441.372252][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.372360][T14004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.372499][T14004] bridge_slave_1: entered allmulticast mode [ 1441.396484][T14004] bridge_slave_1: entered promiscuous mode [ 1441.620850][T14004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.624297][T14004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.688247][ T5620] Bluetooth: hci6: command tx timeout [ 1441.746876][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12138'. [ 1441.771721][T14004] team0: Port device team_slave_0 added [ 1441.787737][T14004] team0: Port device team_slave_1 added [ 1441.845679][T14131] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1441.863580][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.864384][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.885255][T14130] netlink: 'syz.1.12139': attribute type 1 has an invalid length. [ 1441.925400][T14130] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1441.992356][T14004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.992374][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.992406][T14004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.005692][T14004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.005750][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.005821][T14004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.152917][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12140'. [ 1442.152941][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12140'. [ 1442.341055][T14004] hsr_slave_0: entered promiscuous mode [ 1442.342095][T14004] hsr_slave_1: entered promiscuous mode [ 1442.342831][T14004] debugfs: 'hsr0' already exists in 'hsr' [ 1442.342859][T14004] Cannot create hsr debugfs directory [ 1442.383429][T14140] FAULT_INJECTION: forcing a failure. [ 1442.383429][T14140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.383462][T14140] CPU: 0 UID: 0 PID: 14140 Comm: syz.1.12142 Not tainted syzkaller #0 PREEMPT(full) [ 1442.383486][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.383500][T14140] Call Trace: [ 1442.383510][T14140] [ 1442.383520][T14140] dump_stack_lvl+0xe8/0x150 [ 1442.383568][T14140] should_fail_ex+0x410/0x560 [ 1442.383597][T14140] _copy_from_iter+0x1d3/0x1660 [ 1442.383619][T14140] ? __alloc_skb+0x27a/0x7a0 [ 1442.383646][T14140] ? __alloc_skb+0x27a/0x7a0 [ 1442.383672][T14140] ? __alloc_skb+0x27a/0x7a0 [ 1442.383696][T14140] ? __pfx__copy_from_iter+0x10/0x10 [ 1442.383716][T14140] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1442.383748][T14140] ? __alloc_skb+0x27a/0x7a0 [ 1442.383770][T14140] ? __alloc_skb+0x27a/0x7a0 [ 1442.383799][T14140] ? netlink_sendmsg+0x650/0xb40 [ 1442.383831][T14140] ? skb_put+0x112/0x210 [ 1442.383857][T14140] netlink_sendmsg+0x6c0/0xb40 [ 1442.383896][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.383935][T14140] ? apparmor_socket_sendmsg+0x98/0x360 [ 1442.383962][T14140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.383992][T14140] sock_sendmsg_nosec+0x13a/0x180 [ 1442.384016][T14140] ____sys_sendmsg+0x54e/0x850 [ 1442.384070][T14140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1442.384111][T14140] ? import_iovec+0x73/0xa0 [ 1442.384142][T14140] ___sys_sendmsg+0x2a5/0x360 [ 1442.384171][T14140] ? __lock_acquire+0x747/0x2de0 [ 1442.384199][T14140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1442.384266][T14140] ? __fget_files+0x2a/0x420 [ 1442.384296][T14140] ? __fget_files+0x3a2/0x420 [ 1442.384344][T14140] __x64_sys_sendmsg+0x1b1/0x290 [ 1442.384378][T14140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1442.384432][T14140] do_syscall_64+0x166/0x520 [ 1442.384460][T14140] ? trace_irq_disable+0x3b/0x140 [ 1442.384483][T14140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.384506][T14140] ? clear_bhb_loop+0x70/0xc0 [ 1442.384534][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.384557][T14140] RIP: 0033:0x7f873c39e159 [ 1442.384578][T14140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.384596][T14140] RSP: 002b:00007f873d2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.384620][T14140] RAX: ffffffffffffffda RBX: 00007f873c625fa0 RCX: 00007f873c39e159 [ 1442.384636][T14140] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1442.384650][T14140] RBP: 00007f873d2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.384663][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.384677][T14140] R13: 00007f873c626038 R14: 00007f873c625fa0 R15: 00007ffd92f5bfc8 [ 1442.384713][T14140] [ 1443.746955][T14150] tipc: Resetting bearer [ 1443.767208][ T5620] Bluetooth: hci6: command tx timeout [ 1443.785955][T14150] veth1_vlan: left promiscuous mode [ 1443.800944][T14150] veth1_vlan: entered promiscuous mode [ 1443.818326][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1443.820052][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.821282][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1443.822396][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.866309][T14150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1443.872523][T14150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1443.875802][T14150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1443.905516][T14150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1443.915984][T14150] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1443.928855][T14150] tipc: Resetting bearer [ 1443.947295][T14150] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1443.949841][T14150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1443.953481][T14150] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1443.954754][T14150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1443.963988][T14150] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1443.994058][T14150] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1444.004178][T14150] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1444.013235][T14150] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1444.014455][T14150] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1444.163571][T14162] __nla_validate_parse: 1 callbacks suppressed [ 1444.163593][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12151'. [ 1444.163611][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12151'. [ 1444.222791][T14159] erspan0: entered promiscuous mode [ 1444.254350][T14165] netlink: 'syz.1.12152': attribute type 1 has an invalid length. [ 1444.272659][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1444.272687][T14160] erspan0: left promiscuous mode [ 1444.352592][T14165] bond28: entered promiscuous mode [ 1444.353694][T14165] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1444.378167][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12152'. [ 1444.440306][T14165] bond28 (unregistering): Released all slaves [ 1444.618660][T25497] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1444.618799][T25494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.618840][T25494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.618876][T25494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.797508][T25494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.797586][T25494] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1444.797624][T25494] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1444.797661][T25494] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1444.892813][T14172] syzkaller1: entered promiscuous mode [ 1444.892841][T14172] syzkaller1: entered allmulticast mode [ 1445.543490][T14004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1445.573812][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1445.578461][T14004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1445.621614][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1445.625948][T14004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1445.664070][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1445.664459][T14193] FAULT_INJECTION: forcing a failure. [ 1445.664459][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.664487][T14193] CPU: 0 UID: 0 PID: 14193 Comm: syz.1.12160 Not tainted syzkaller #0 PREEMPT(full) [ 1445.664508][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1445.664521][T14193] Call Trace: [ 1445.664531][T14193] [ 1445.664539][T14193] dump_stack_lvl+0xe8/0x150 [ 1445.664574][T14193] should_fail_ex+0x410/0x560 [ 1445.664604][T14193] should_failslab+0xa8/0x100 [ 1445.664633][T14193] __kvmalloc_node_noprof+0x176/0x820 [ 1445.664661][T14193] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1445.664692][T14193] ? alloc_netdev_mqs+0xa9/0x12a0 [ 1445.664730][T14193] alloc_netdev_mqs+0xa9/0x12a0 [ 1445.664759][T14193] ? __pfx_snprintf+0x10/0x10 [ 1445.664778][T14193] ? __pfx_geneve_setup+0x10/0x10 [ 1445.664807][T14193] rtnl_create_link+0x321/0xd70 [ 1445.664834][T14193] rtnl_newlink_create+0x258/0x7b0 [ 1445.664876][T14193] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1445.664912][T14193] ? __pfx___mutex_lock+0x10/0x10 [ 1445.664946][T14193] ? ns_capable+0x89/0xe0 [ 1445.664973][T14193] rtnl_newlink+0x167a/0x1c30 [ 1445.665008][T14193] ? __pfx_rtnl_newlink+0x10/0x10 [ 1445.665046][T14193] ? sock_sendmsg_nosec+0x13a/0x180 [ 1445.665063][T14193] ? ____sys_sendmsg+0x54e/0x850 [ 1445.665086][T14193] ? ___sys_sendmsg+0x2a5/0x360 [ 1445.665108][T14193] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1445.665132][T14193] ? do_syscall_64+0x166/0x520 [ 1445.665153][T14193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.665206][T14193] ? kasan_quarantine_put+0xbb/0x1f0 [ 1445.665225][T14193] ? lockdep_hardirqs_on+0x7b/0x110 [ 1445.665251][T14193] ? nlmon_xmit+0xb0/0x100 [ 1445.665270][T14193] ? kmem_cache_free+0x182/0x650 [ 1445.665301][T14193] ? __lock_acquire+0x747/0x2de0 [ 1445.665329][T14193] ? __local_bh_enable_ip+0xd6/0x140 [ 1445.665354][T14193] ? lockdep_hardirqs_on+0x7b/0x110 [ 1445.665377][T14193] ? __dev_queue_xmit+0x29b/0x3820 [ 1445.665404][T14193] ? __local_bh_enable_ip+0xd6/0x140 [ 1445.665426][T14193] ? __dev_queue_xmit+0x29b/0x3820 [ 1445.665477][T14193] ? __pfx_rtnl_newlink+0x10/0x10 [ 1445.665499][T14193] rtnetlink_rcv_msg+0x802/0xc00 [ 1445.665525][T14193] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1445.665547][T14193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1445.665568][T14193] ? ref_tracker_free+0x689/0x830 [ 1445.665594][T14193] ? __pfx_ref_tracker_free+0x10/0x10 [ 1445.665627][T14193] netlink_rcv_skb+0x226/0x4a0 [ 1445.665657][T14193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1445.665682][T14193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1445.665722][T14193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1445.665750][T14193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1445.665783][T14193] netlink_unicast+0x7bd/0x940 [ 1445.665820][T14193] netlink_sendmsg+0x813/0xb40 [ 1445.665860][T14193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.665905][T14193] ? apparmor_socket_sendmsg+0x98/0x360 [ 1445.665933][T14193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.665966][T14193] sock_sendmsg_nosec+0x13a/0x180 [ 1445.665991][T14193] ____sys_sendmsg+0x54e/0x850 [ 1445.666028][T14193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1445.666069][T14193] ? import_iovec+0x73/0xa0 [ 1445.666101][T14193] ___sys_sendmsg+0x2a5/0x360 [ 1445.666131][T14193] ? __lock_acquire+0x747/0x2de0 [ 1445.666160][T14193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.666228][T14193] ? __fget_files+0x2a/0x420 [ 1445.666257][T14193] ? __fget_files+0x3a2/0x420 [ 1445.666299][T14193] __x64_sys_sendmsg+0x1b1/0x290 [ 1445.666333][T14193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1445.666388][T14193] do_syscall_64+0x166/0x520 [ 1445.666415][T14193] ? trace_irq_disable+0x3b/0x140 [ 1445.666438][T14193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.666462][T14193] ? clear_bhb_loop+0x70/0xc0 [ 1445.666491][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.666513][T14193] RIP: 0033:0x7f873c39e159 [ 1445.666534][T14193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.666553][T14193] RSP: 002b:00007f873d2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.666577][T14193] RAX: ffffffffffffffda RBX: 00007f873c625fa0 RCX: 00007f873c39e159 [ 1445.666595][T14193] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1445.666609][T14193] RBP: 00007f873d2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.666623][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.666637][T14193] R13: 00007f873c626038 R14: 00007f873c625fa0 R15: 00007ffd92f5bfc8 [ 1445.666674][T14193] [ 1445.779631][T14004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1445.847631][ T5620] Bluetooth: hci6: command tx timeout [ 1446.131184][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.413327][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.465174][T14004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.492790][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.492866][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.536664][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.536749][ T7779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.013243][T14213] Unsupported ieee802154 address type: 0 [ 1447.040457][T14217] syzkaller1: entered promiscuous mode [ 1447.040482][T14217] syzkaller1: entered allmulticast mode [ 1447.590557][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.182723][T14004] veth0_vlan: entered promiscuous mode [ 1448.199590][T14004] veth1_vlan: entered promiscuous mode [ 1448.300761][T14004] veth0_macvtap: entered promiscuous mode [ 1448.319514][T14004] veth1_macvtap: entered promiscuous mode [ 1448.422074][T14004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.478281][T14004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.677844][ T6235] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.720634][ T1027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.846665][ T7779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.858488][T25497] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.188215][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.188238][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.266797][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12176'. [ 1449.275217][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12175'. [ 1449.483168][T25494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.483192][T25494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.723673][ T51] IPVS: starting estimator thread 0... [ 1449.807072][T14273] IPVS: using max 28 ests per chain, 67200 per kthread [ 1449.881466][T14275] syzkaller1: entered promiscuous mode [ 1449.881492][T14275] syzkaller1: entered allmulticast mode [ 1450.463993][T14296] netlink: 'syz.6.12182': attribute type 3 has an invalid length. [ 1450.536802][T14299] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1450.618128][T14299] tipc: Enabling of bearer rejected, already enabled [ 1450.967006][T14302] FAULT_INJECTION: forcing a failure. [ 1450.967006][T14302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.967041][T14302] CPU: 1 UID: 0 PID: 14302 Comm: syz.5.12186 Not tainted syzkaller #0 PREEMPT(full) [ 1450.967064][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1450.967078][T14302] Call Trace: [ 1450.967087][T14302] [ 1450.967096][T14302] dump_stack_lvl+0xe8/0x150 [ 1450.967132][T14302] should_fail_ex+0x410/0x560 [ 1450.967180][T14302] _copy_from_user+0x2d/0xb0 [ 1450.967211][T14302] do_tcp_getsockopt+0x22c/0x2b50 [ 1450.967340][T14302] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1450.967406][T14302] ? call_rcu+0x64d/0x8b0 [ 1450.967447][T14302] ? lockdep_hardirqs_on+0x7b/0x110 [ 1450.967483][T14302] ? __pfx_sock_free_inode+0x10/0x10 [ 1450.967508][T14302] ? evict+0x987/0xb50 [ 1450.967540][T14302] ? __pfx_evict+0x10/0x10 [ 1450.967562][T14302] ? do_raw_spin_unlock+0xf5/0x200 [ 1450.967596][T14302] ? _raw_spin_unlock+0x28/0x50 [ 1450.967617][T14302] ? iput+0xb84/0xf00 [ 1450.967652][T14302] ? __mptcp_nmpc_sk+0x5f8/0x770 [ 1450.967697][T14302] tcp_getsockopt+0x83/0x130 [ 1450.967735][T14302] mptcp_getsockopt+0x109c/0x1ed0 [ 1450.967773][T14302] ? lock_acquire+0x115/0x350 [ 1450.967799][T14302] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1450.967843][T14302] ? process_measurement+0x7b2/0x1c10 [ 1450.967879][T14302] ? up_write+0x19d/0x4a0 [ 1450.967912][T14302] ? __lock_acquire+0x747/0x2de0 [ 1450.967938][T14302] ? __lock_acquire+0x747/0x2de0 [ 1450.967985][T14302] ? mas_next_slot+0xc91/0xd70 [ 1450.968021][T14302] ? mt_find+0x186/0x630 [ 1450.968052][T14302] ? cmp_ex_search+0x1e/0x80 [ 1450.968135][T14302] ? bsearch+0x91/0xc0 [ 1450.968160][T14302] ? __pfx_cmp_ex_search+0x10/0x10 [ 1450.968186][T14302] ? rep_movs_alternative+0xf/0xa0 [ 1450.968221][T14302] ? search_extable+0x8f/0xd0 [ 1450.968248][T14302] ? __pfx_search_extable+0x10/0x10 [ 1450.968276][T14302] ? rep_movs_alternative+0xf/0xa0 [ 1450.968314][T14302] ? rep_movs_alternative+0xf/0xa0 [ 1450.968350][T14302] ? fixup_exception+0x11f8/0x2140 [ 1450.968385][T14302] ? __pfx_fixup_exception+0x10/0x10 [ 1450.968414][T14302] ? lock_mm_and_find_vma+0x117/0x340 [ 1450.968451][T14302] ? do_user_addr_fault+0xef2/0x1340 [ 1450.968479][T14302] ? irqentry_exit+0x218/0x910 [ 1450.968504][T14302] ? lockdep_hardirqs_on+0x7b/0x110 [ 1450.968528][T14302] ? irqentry_exit+0x218/0x910 [ 1450.968552][T14302] ? trace_irq_disable+0x3b/0x140 [ 1450.968595][T14302] ? sock_common_getsockopt+0x2d/0xb0 [ 1450.968619][T14302] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1450.968642][T14302] do_sock_getsockopt+0x4aa/0x640 [ 1450.968683][T14302] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1450.968727][T14302] ? __fget_files+0x2a/0x420 [ 1450.968755][T14302] ? __fget_files+0x3a2/0x420 [ 1450.968783][T14302] ? __fget_files+0x2a/0x420 [ 1450.968819][T14302] __x64_sys_getsockopt+0x1a4/0x240 [ 1450.968857][T14302] do_syscall_64+0x166/0x520 [ 1450.968881][T14302] ? trace_irq_disable+0x3b/0x140 [ 1450.968902][T14302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.968924][T14302] ? clear_bhb_loop+0x70/0xc0 [ 1450.968951][T14302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.968972][T14302] RIP: 0033:0x7f813bb9e159 [ 1450.968992][T14302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.969011][T14302] RSP: 002b:00007f813ca92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1450.969034][T14302] RAX: ffffffffffffffda RBX: 00007f813be25fa0 RCX: 00007f813bb9e159 [ 1450.969051][T14302] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 1450.969064][T14302] RBP: 00007f813ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.969078][T14302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.969091][T14302] R13: 00007f813be26038 R14: 00007f813be25fa0 R15: 00007fffe7e62968 [ 1450.969126][T14302] [ 1451.389945][ T5620] block nbd2: Receive control failed (result -32) [ 1451.724739][T14317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1451.961995][T14322] FAULT_INJECTION: forcing a failure. [ 1451.961995][T14322] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.962028][T14322] CPU: 1 UID: 0 PID: 14322 Comm: syz.6.12193 Not tainted syzkaller #0 PREEMPT(full) [ 1451.962052][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1451.962065][T14322] Call Trace: [ 1451.962074][T14322] [ 1451.962084][T14322] dump_stack_lvl+0xe8/0x150 [ 1451.962120][T14322] should_fail_ex+0x410/0x560 [ 1451.962150][T14322] should_failslab+0xa8/0x100 [ 1451.962178][T14322] ? security_inode_alloc+0x39/0x310 [ 1451.962206][T14322] kmem_cache_alloc_noprof+0xa1/0x600 [ 1451.962242][T14322] ? security_inode_alloc+0x39/0x310 [ 1451.962276][T14322] security_inode_alloc+0x39/0x310 [ 1451.962306][T14322] inode_init_always_gfp+0x97e/0xd30 [ 1451.962341][T14322] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1451.962373][T14322] alloc_inode+0x82/0x1b0 [ 1451.962400][T14322] new_inode+0x1f/0x170 [ 1451.962430][T14322] __debugfs_create_file+0xb8/0x400 [ 1451.962465][T14322] debugfs_create_file_full+0x3f/0x60 [ 1451.962499][T14322] ref_tracker_dir_debugfs+0x197/0x360 [ 1451.962525][T14322] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1451.962575][T14322] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1451.962599][T14322] ? __kvmalloc_node_noprof+0x345/0x820 [ 1451.962651][T14322] ? __raw_spin_lock_init+0x45/0x100 [ 1451.962682][T14322] alloc_netdev_mqs+0x275/0x12a0 [ 1451.962713][T14322] ? __pfx_snprintf+0x10/0x10 [ 1451.962730][T14322] ? __pfx_vlan_setup+0x10/0x10 [ 1451.962757][T14322] rtnl_create_link+0x321/0xd70 [ 1451.962783][T14322] rtnl_newlink_create+0x258/0x7b0 [ 1451.962822][T14322] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1451.962853][T14322] ? __pfx___mutex_lock+0x10/0x10 [ 1451.962889][T14322] ? ns_capable+0x89/0xe0 [ 1451.962920][T14322] rtnl_newlink+0x167a/0x1c30 [ 1451.962960][T14322] ? __pfx_rtnl_newlink+0x10/0x10 [ 1451.962982][T14322] ? sock_sendmsg_nosec+0x13a/0x180 [ 1451.963000][T14322] ? ____sys_sendmsg+0x54e/0x850 [ 1451.963024][T14322] ? ___sys_sendmsg+0x2a5/0x360 [ 1451.963048][T14322] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1451.963073][T14322] ? do_syscall_64+0x166/0x520 [ 1451.963095][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.963153][T14322] ? kasan_quarantine_put+0xbb/0x1f0 [ 1451.963173][T14322] ? lockdep_hardirqs_on+0x7b/0x110 [ 1451.963201][T14322] ? nlmon_xmit+0xb0/0x100 [ 1451.963221][T14322] ? kmem_cache_free+0x182/0x650 [ 1451.963254][T14322] ? __lock_acquire+0x747/0x2de0 [ 1451.963285][T14322] ? __local_bh_enable_ip+0xd6/0x140 [ 1451.963312][T14322] ? lockdep_hardirqs_on+0x7b/0x110 [ 1451.963334][T14322] ? __dev_queue_xmit+0x29b/0x3820 [ 1451.963361][T14322] ? __local_bh_enable_ip+0xd6/0x140 [ 1451.963386][T14322] ? __dev_queue_xmit+0x29b/0x3820 [ 1451.963441][T14322] ? __pfx_rtnl_newlink+0x10/0x10 [ 1451.963463][T14322] rtnetlink_rcv_msg+0x802/0xc00 [ 1451.963491][T14322] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1451.963515][T14322] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1451.963537][T14322] ? ref_tracker_free+0x689/0x830 [ 1451.963564][T14322] ? __pfx_ref_tracker_free+0x10/0x10 [ 1451.963599][T14322] netlink_rcv_skb+0x226/0x4a0 [ 1451.963635][T14322] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1451.963661][T14322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1451.963705][T14322] ? netlink_deliver_tap+0x2e/0x1b0 [ 1451.963734][T14322] ? netlink_deliver_tap+0x2e/0x1b0 [ 1451.963770][T14322] netlink_unicast+0x7bd/0x940 [ 1451.963808][T14322] netlink_sendmsg+0x813/0xb40 [ 1451.963847][T14322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.963884][T14322] ? apparmor_socket_sendmsg+0x98/0x360 [ 1451.963910][T14322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.963938][T14322] sock_sendmsg_nosec+0x13a/0x180 [ 1451.963960][T14322] ____sys_sendmsg+0x54e/0x850 [ 1451.963993][T14322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1451.964030][T14322] ? import_iovec+0x73/0xa0 [ 1451.964059][T14322] ___sys_sendmsg+0x2a5/0x360 [ 1451.964085][T14322] ? __lock_acquire+0x747/0x2de0 [ 1451.964111][T14322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.964174][T14322] ? __fget_files+0x2a/0x420 [ 1451.964219][T14322] ? __fget_files+0x3a2/0x420 [ 1451.964260][T14322] __x64_sys_sendmsg+0x1b1/0x290 [ 1451.964298][T14322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1451.964389][T14322] do_syscall_64+0x166/0x520 [ 1451.964416][T14322] ? trace_irq_disable+0x3b/0x140 [ 1451.964441][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.964465][T14322] ? clear_bhb_loop+0x70/0xc0 [ 1451.964500][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.964524][T14322] RIP: 0033:0x7f643519e159 [ 1451.964545][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.964566][T14322] RSP: 002b:00007f64360f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.964591][T14322] RAX: ffffffffffffffda RBX: 00007f6435425fa0 RCX: 00007f643519e159 [ 1451.964628][T14322] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 1451.964644][T14322] RBP: 00007f64360f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.964659][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.964673][T14322] R13: 00007f6435426038 R14: 00007f6435425fa0 R15: 00007ffea196d288 [ 1451.964711][T14322] [ 1451.969600][T14322] debugfs: out of free dentries, can not create file 'netdev@ffff888035bb4700' [ 1452.356020][T14322] vlan2: entered promiscuous mode [ 1452.377941][T14322] bridge0: entered promiscuous mode [ 1452.563647][T14319] macsec1: entered promiscuous mode [ 1452.934038][T14331] wireguard0: entered promiscuous mode [ 1452.934065][T14331] wireguard0: entered allmulticast mode [ 1453.054963][T14338] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12196'. [ 1453.163178][T14342] FAULT_INJECTION: forcing a failure. [ 1453.163178][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.163214][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.5.12199 Not tainted syzkaller #0 PREEMPT(full) [ 1453.163239][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.163257][T14342] Call Trace: [ 1453.163267][T14342] [ 1453.163277][T14342] dump_stack_lvl+0xe8/0x150 [ 1453.163315][T14342] should_fail_ex+0x410/0x560 [ 1453.163345][T14342] ? __alloc_skb+0x1db/0x7a0 [ 1453.163372][T14342] should_failslab+0xa8/0x100 [ 1453.163402][T14342] ? __alloc_skb+0x1db/0x7a0 [ 1453.163436][T14342] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1453.163472][T14342] ? __alloc_skb+0x18d/0x7a0 [ 1453.163498][T14342] ? __alloc_skb+0x1db/0x7a0 [ 1453.163532][T14342] __alloc_skb+0x1db/0x7a0 [ 1453.163563][T14342] netlink_ack+0x136/0xb30 [ 1453.163594][T14342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1453.163622][T14342] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1453.163738][T14342] netlink_rcv_skb+0x2a4/0x4a0 [ 1453.163773][T14342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1453.163803][T14342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1453.163854][T14342] ? down_read+0x2be/0x330 [ 1453.163890][T14342] genl_rcv+0x28/0x40 [ 1453.163914][T14342] netlink_unicast+0x7bd/0x940 [ 1453.163958][T14342] netlink_sendmsg+0x813/0xb40 [ 1453.164002][T14342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.164047][T14342] ? apparmor_socket_sendmsg+0x98/0x360 [ 1453.164075][T14342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.164108][T14342] sock_sendmsg_nosec+0x13a/0x180 [ 1453.164141][T14342] ____sys_sendmsg+0x54e/0x850 [ 1453.164197][T14342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1453.164239][T14342] ? import_iovec+0x73/0xa0 [ 1453.164272][T14342] ___sys_sendmsg+0x2a5/0x360 [ 1453.164301][T14342] ? __lock_acquire+0x747/0x2de0 [ 1453.164335][T14342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1453.164405][T14342] ? __fget_files+0x2a/0x420 [ 1453.164445][T14342] ? __fget_files+0x3a2/0x420 [ 1453.164490][T14342] __x64_sys_sendmsg+0x1b1/0x290 [ 1453.164525][T14342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1453.164581][T14342] do_syscall_64+0x166/0x520 [ 1453.164608][T14342] ? trace_irq_disable+0x3b/0x140 [ 1453.164630][T14342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.164653][T14342] ? clear_bhb_loop+0x70/0xc0 [ 1453.164682][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.164706][T14342] RIP: 0033:0x7f813bb9e159 [ 1453.164728][T14342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.164747][T14342] RSP: 002b:00007f813ca92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.164773][T14342] RAX: ffffffffffffffda RBX: 00007f813be25fa0 RCX: 00007f813bb9e159 [ 1453.164791][T14342] RDX: 0000000000000890 RSI: 0000200000000580 RDI: 0000000000000004 [ 1453.164805][T14342] RBP: 00007f813ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.164819][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.164833][T14342] R13: 00007f813be26038 R14: 00007f813be25fa0 R15: 00007fffe7e62968 [ 1453.164871][T14342] [ 1453.602509][T14347] Cannot find set identified by id 0 to match [ 1453.877280][ T7832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1453.884666][ T7832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1453.904666][ T7832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1453.913752][ T7832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1453.914558][ T7832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1453.949423][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12206'. [ 1454.892534][T14355] lo speed is unknown, defaulting to 1000 [ 1455.423506][T14355] lo speed is unknown, defaulting to 1000 [ 1455.445187][T14355] wg2 speed is unknown, defaulting to 1000 [ 1455.583691][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12215'. [ 1455.661253][ T6236] IPVS: starting estimator thread 0... [ 1455.719988][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12215'. [ 1455.756669][T14395] IPVS: using max 31 ests per chain, 74400 per kthread [ 1455.949815][T14402] syzkaller1: entered promiscuous mode [ 1455.949842][T14402] syzkaller1: entered allmulticast mode [ 1456.022855][ T5620] Bluetooth: hci7: command tx timeout [ 1456.078742][T14405] syzkaller1: entered promiscuous mode [ 1456.078760][T14405] syzkaller1: entered allmulticast mode [ 1456.224112][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12221'. [ 1456.395649][T14355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.396779][T14355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.396910][T14355] bridge_slave_0: entered allmulticast mode [ 1456.399419][T14355] bridge_slave_0: entered promiscuous mode [ 1456.412870][T14355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.413172][T14355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.413556][T14355] bridge_slave_1: entered allmulticast mode [ 1456.422356][T14355] bridge_slave_1: entered promiscuous mode [ 1456.525113][T14355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.541287][T14355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.674433][T14417] bond1: option arp_validate: invalid value (8192) [ 1456.680998][T14417] bond1 (unregistering): Released all slaves [ 1456.713410][T14355] team0: Port device team_slave_0 added [ 1456.730151][T14355] team0: Port device team_slave_1 added [ 1456.801515][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1456.801544][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1456.801623][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1456.879024][T14355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.879044][T14355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.879071][T14355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.881267][T14355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.881281][T14355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.881310][T14355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.919431][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1457.081351][T14355] hsr_slave_0: entered promiscuous mode [ 1457.085800][T14355] hsr_slave_1: entered promiscuous mode [ 1457.094326][T14355] debugfs: 'hsr0' already exists in 'hsr' [ 1457.094386][T14355] Cannot create hsr debugfs directory [ 1457.144525][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12228'. [ 1457.192093][T14442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12228'. [ 1457.438929][T14450] Bluetooth: ISO socket layer initialized [ 1457.943877][T14466] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1458.029041][T14355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1458.049317][T14355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1458.054971][T14355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1458.086634][ T5620] Bluetooth: hci7: command tx timeout [ 1458.138056][T14355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1458.143202][T14355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1458.186603][T14355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1458.192386][T14355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1458.232934][T14355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.319052][T14471] lo speed is unknown, defaulting to 1000 [ 1458.353563][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12235'. [ 1458.543195][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12233'. [ 1458.660170][T14355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.707864][T14355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.735121][T25497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.735221][T25497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.765694][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.765806][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.025247][T14492] netlink: 'syz.5.12238': attribute type 2 has an invalid length. [ 1459.043726][T14494] netlink: 'syz.5.12238': attribute type 2 has an invalid length. [ 1459.274367][T14471] lo speed is unknown, defaulting to 1000 [ 1459.284016][T14471] wg2 speed is unknown, defaulting to 1000 [ 1459.382554][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.382632][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.383425][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.400374][T14472] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1459.400476][T14472] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1459.400588][T14472] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1459.462704][T14506] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 1459.507346][T14472] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1459.623167][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.635212][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.645047][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.658327][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.660124][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.661891][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.664086][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.678837][T14472] wg2 speed is unknown, defaulting to 1000 [ 1459.700876][T14472] wg2 speed is unknown, defaulting to 1000 [ 1460.045228][T14515] Cannot find set identified by id 0 to match [ 1460.167092][ T5620] Bluetooth: hci7: command tx timeout [ 1460.451447][T14355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.141420][T14355] veth0_vlan: entered promiscuous mode [ 1461.280147][T14545] netlink: 'syz.2.12251': attribute type 1 has an invalid length. [ 1461.470183][T14545] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1461.495182][T14355] veth1_vlan: entered promiscuous mode [ 1461.577924][T14560] FAULT_INJECTION: forcing a failure. [ 1461.577924][T14560] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.577970][T14560] CPU: 0 UID: 0 PID: 14560 Comm: syz.6.12254 Not tainted syzkaller #0 PREEMPT(full) [ 1461.577992][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1461.578004][T14560] Call Trace: [ 1461.578012][T14560] [ 1461.578021][T14560] dump_stack_lvl+0xe8/0x150 [ 1461.578054][T14560] should_fail_ex+0x410/0x560 [ 1461.578081][T14560] should_failslab+0xa8/0x100 [ 1461.578107][T14560] __kvmalloc_node_noprof+0x176/0x820 [ 1461.578129][T14560] ? __kmalloc_cache_noprof+0x321/0x600 [ 1461.578149][T14560] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1461.578177][T14560] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1461.578212][T14560] alloc_netdev_mqs+0xd44/0x12a0 [ 1461.578248][T14560] ip6gre_tunnel_locate+0x1d4/0x970 [ 1461.578274][T14560] ? __pfx_gre_flags_to_tnl_flags+0x10/0x10 [ 1461.578300][T14560] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 1461.578320][T14560] ? ip6gre_tnl_parm_from_user+0x41/0x400 [ 1461.578345][T14560] ? ip6gre_tunnel_siocdevprivate+0x8d9/0xd90 [ 1461.578374][T14560] ip6gre_tunnel_siocdevprivate+0x904/0xd90 [ 1461.578404][T14560] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 1461.578455][T14560] ? __pfx___mutex_lock+0x10/0x10 [ 1461.578478][T14560] ? full_name_hash+0x92/0xe0 [ 1461.578511][T14560] dev_ifsioc+0xb56/0x1360 [ 1461.578541][T14560] dev_ioctl+0x84c/0x1150 [ 1461.578568][T14560] sock_ioctl+0x753/0x7e0 [ 1461.578599][T14560] ? __pfx_sock_ioctl+0x10/0x10 [ 1461.578630][T14560] ? __fget_files+0x3a2/0x420 [ 1461.578655][T14560] ? __fget_files+0x2a/0x420 [ 1461.578684][T14560] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1461.578712][T14560] ? __pfx_sock_ioctl+0x10/0x10 [ 1461.578741][T14560] __se_sys_ioctl+0xfc/0x170 [ 1461.578768][T14560] do_syscall_64+0x166/0x520 [ 1461.578794][T14560] ? trace_irq_disable+0x3b/0x140 [ 1461.578817][T14560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.578840][T14560] ? clear_bhb_loop+0x70/0xc0 [ 1461.578869][T14560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.578890][T14560] RIP: 0033:0x7f643519e159 [ 1461.578911][T14560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.578938][T14560] RSP: 002b:00007f64360f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.578964][T14560] RAX: ffffffffffffffda RBX: 00007f6435425fa0 RCX: 00007f643519e159 [ 1461.578981][T14560] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1461.578997][T14560] RBP: 00007f64360f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.579010][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1461.579025][T14560] R13: 00007f6435426038 R14: 00007f6435425fa0 R15: 00007ffea196d288 [ 1461.579063][T14560] [ 1461.940894][T14355] veth0_macvtap: entered promiscuous mode [ 1461.977651][T14355] veth1_macvtap: entered promiscuous mode [ 1462.069799][T14355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.112020][T14563] syzkaller0: entered promiscuous mode [ 1462.112046][T14563] syzkaller0: entered allmulticast mode [ 1462.115532][T14355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.163593][T14563] __nla_validate_parse: 2 callbacks suppressed [ 1462.163616][T14563] netlink: 2724 bytes leftover after parsing attributes in process `syz.6.12256'. [ 1462.163785][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12256'. [ 1462.163808][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12256'. [ 1462.168105][T14563] TC_ACT_REPEAT abuse ? [ 1462.244336][T14567] Cannot find set identified by id 0 to match [ 1462.247209][ T5620] Bluetooth: hci7: command tx timeout [ 1462.337041][ T6233] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.465020][ T6236] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.465469][ T6236] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.465503][ T6236] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.744882][T25497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.744907][T25497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.912203][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.912225][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.187612][T14586] syzkaller0: entered promiscuous mode [ 1463.187632][T14586] syzkaller0: entered allmulticast mode [ 1463.384903][ T7788] IPVS: starting estimator thread 0... [ 1463.486724][T14600] IPVS: using max 28 ests per chain, 67200 per kthread [ 1463.767586][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12267'. [ 1465.821755][ T7832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1465.849798][ T7832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1465.855911][ T7832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1465.872318][ T7832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1465.872949][ T7832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1467.922156][T14656] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12281'. [ 1467.926478][ T5620] Bluetooth: hci8: command tx timeout [ 1468.430320][T14614] lo speed is unknown, defaulting to 1000 [ 1469.518884][T14676] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.12286'. [ 1469.519055][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12286'. [ 1469.519077][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12286'. [ 1469.586013][T14614] lo speed is unknown, defaulting to 1000 [ 1469.614812][T14614] wg2 speed is unknown, defaulting to 1000 [ 1469.629381][T14614] wg2 speed is unknown, defaulting to 1000 [ 1470.077241][T14698] netlink: 'syz.5.12288': attribute type 34 has an invalid length. [ 1470.077267][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12288'. [ 1470.079541][T14703] syzkaller1: entered promiscuous mode [ 1470.079559][T14703] syzkaller1: entered allmulticast mode [ 1470.080610][T14702] ip_tables: iptables: counters copy to user failed while replacing table [ 1470.151555][T14698] bond1: option lacp_strict: invalid value (2) [ 1470.154093][T14698] bond1 (unregistering): Released all slaves [ 1470.233647][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12292'. [ 1470.234032][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12292'. [ 1470.315541][T14705] nbd0: detected capacity change from 32 to 0 [ 1470.371503][T14708] netlink: 'syz.2.12293': attribute type 2 has an invalid length. [ 1470.371527][T14708] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12293'. [ 1470.675151][T14614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.677101][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.677242][T14614] bridge_slave_0: entered allmulticast mode [ 1470.678934][T14614] bridge_slave_0: entered promiscuous mode [ 1470.731992][T14614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.732365][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.732543][T14614] bridge_slave_1: entered allmulticast mode [ 1470.759054][T14614] bridge_slave_1: entered promiscuous mode [ 1470.880978][T14614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.896434][T14614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.941319][T14614] team0: Port device team_slave_0 added [ 1470.944854][T14614] team0: Port device team_slave_1 added [ 1470.990008][T14614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.990030][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.990060][T14614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.992056][T14614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.992071][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.992098][T14614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.027602][T14731] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1471.382659][T14614] hsr_slave_0: entered promiscuous mode [ 1471.383436][T14614] hsr_slave_1: entered promiscuous mode [ 1471.383952][T14614] debugfs: 'hsr0' already exists in 'hsr' [ 1471.383973][T14614] Cannot create hsr debugfs directory [ 1471.511779][T14734] syzkaller1: entered promiscuous mode [ 1471.511803][T14734] syzkaller1: entered allmulticast mode [ 1471.547844][T14742] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1471.590888][T14721] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12295'. [ 1471.784063][T14750] FAULT_INJECTION: forcing a failure. [ 1471.784063][T14750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1471.784100][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.5.12304 Not tainted syzkaller #0 PREEMPT(full) [ 1471.784124][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1471.784139][T14750] Call Trace: [ 1471.784148][T14750] [ 1471.784158][T14750] dump_stack_lvl+0xe8/0x150 [ 1471.784196][T14750] should_fail_ex+0x410/0x560 [ 1471.784235][T14750] prepare_alloc_pages+0x223/0x600 [ 1471.784267][T14750] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1471.784298][T14750] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1471.784322][T14750] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1471.784351][T14750] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1471.784381][T14750] ? __pfx_policy_nodemask+0x10/0x10 [ 1471.784415][T14750] __alloc_pages_noprof+0x10/0x100 [ 1471.784441][T14750] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1471.784485][T14750] ? alloc_pages_noprof+0x140/0x2b0 [ 1471.784517][T14750] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1471.784545][T14750] alloc_vmap_area+0xd1a/0x1420 [ 1471.784591][T14750] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1471.784618][T14750] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1471.784642][T14750] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1471.784664][T14750] ? __get_vm_area_node+0x155/0x2f0 [ 1471.784698][T14750] __get_vm_area_node+0x200/0x2f0 [ 1471.784740][T14750] ? xdp_umem_create+0x6dc/0x8b0 [ 1471.784762][T14750] vmap+0x158/0x300 [ 1471.784791][T14750] ? xdp_umem_create+0x6dc/0x8b0 [ 1471.784818][T14750] xdp_umem_create+0x6dc/0x8b0 [ 1471.784850][T14750] xsk_setsockopt+0x82f/0x960 [ 1471.784875][T14750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1471.784903][T14750] ? aa_sock_opt_perm+0x142/0x1e0 [ 1471.784934][T14750] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1471.784962][T14750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1471.784985][T14750] do_sock_setsockopt+0x17c/0x1b0 [ 1471.785019][T14750] __x64_sys_setsockopt+0x13d/0x1b0 [ 1471.785052][T14750] do_syscall_64+0x166/0x520 [ 1471.785077][T14750] ? trace_irq_disable+0x3b/0x140 [ 1471.785099][T14750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.785121][T14750] ? clear_bhb_loop+0x70/0xc0 [ 1471.785148][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.785169][T14750] RIP: 0033:0x7f813bb9e159 [ 1471.785189][T14750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.785213][T14750] RSP: 002b:00007f813ca50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1471.785237][T14750] RAX: ffffffffffffffda RBX: 00007f813be26180 RCX: 00007f813bb9e159 [ 1471.785253][T14750] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1471.785266][T14750] RBP: 00007f813ca50090 R08: 0000000000000020 R09: 0000000000000000 [ 1471.785280][T14750] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1471.785294][T14750] R13: 00007f813be26218 R14: 00007f813be26180 R15: 00007fffe7e62968 [ 1471.785329][T14750] [ 1472.534966][T14765] TC_ACT_REPEAT abuse ? [ 1472.557614][T14759] syzkaller0: entered promiscuous mode [ 1472.557633][T14759] syzkaller0: entered allmulticast mode [ 1472.562242][T14756] syzkaller0: entered promiscuous mode [ 1472.562265][T14756] syzkaller0: entered allmulticast mode [ 1472.596205][T14760] netlink: 2724 bytes leftover after parsing attributes in process `syz.7.12306'. [ 1475.941007][T14781] bridge_slave_0: entered promiscuous mode [ 1476.070094][T14614] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1476.073185][T14784] netlink: 'syz.6.12315': attribute type 1 has an invalid length. [ 1476.098107][T14614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1476.100711][T14614] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1476.124589][T14614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1476.134182][T14614] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1476.149552][T14614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1476.150573][T14614] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1476.154455][T14614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1476.284837][T14788] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1476.482027][T14614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.582517][T14614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.625947][T25497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.626136][T25497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.683082][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.683157][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.232440][T14614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.502738][T14614] veth0_vlan: entered promiscuous mode [ 1477.523441][T14614] veth1_vlan: entered promiscuous mode [ 1477.569999][T14614] veth0_macvtap: entered promiscuous mode [ 1477.573770][T14614] veth1_macvtap: entered promiscuous mode [ 1477.595288][T14614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.619446][T14614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.737678][T25497] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.737799][T25497] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.737842][T25497] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.737878][T25497] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.885390][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.885413][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.983854][ T7788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.983879][ T7788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.490396][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1491.551531][T14833] bond0: (slave ip6tnl0): refused to change device type [ 1491.731898][ T5620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1491.748446][ T5620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1491.764668][ T5620] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1491.793918][ T5620] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1491.803090][ T5620] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1492.276832][T14860] __nla_validate_parse: 2 callbacks suppressed [ 1492.276856][T14860] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12329'. [ 1492.505834][ T5617] tipc: Resetting bearer [ 1492.708014][ T5617] tipc: Disabling bearer [ 1493.265725][T14883] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12334'. [ 1493.361708][T14870] netlink: 104 bytes leftover after parsing attributes in process `syz.7.12332'. [ 1493.380264][T25497] IPVS: starting estimator thread 0... [ 1493.466865][T14887] IPVS: using max 26 ests per chain, 62400 per kthread [ 1493.692449][T14852] lo speed is unknown, defaulting to 1000 [ 1493.927241][ T7832] Bluetooth: hci9: command tx timeout [ 1494.654623][T14852] lo speed is unknown, defaulting to 1000 [ 1494.678795][T14852] wg2 speed is unknown, defaulting to 1000 [ 1494.685983][T14852] wg2 speed is unknown, defaulting to 1000 [ 1495.319276][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12351'. [ 1495.469052][T14938] FAULT_INJECTION: forcing a failure. [ 1495.469052][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.469092][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.5.12352 Not tainted syzkaller #0 PREEMPT(full) [ 1495.469118][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1495.469133][T14938] Call Trace: [ 1495.469143][T14938] [ 1495.469154][T14938] dump_stack_lvl+0xe8/0x150 [ 1495.469198][T14938] should_fail_ex+0x410/0x560 [ 1495.469231][T14938] should_failslab+0xa8/0x100 [ 1495.469265][T14938] __kmalloc_cache_noprof+0xa3/0x600 [ 1495.469290][T14938] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1495.469313][T14938] ? alloc_netdev_mqs+0xca0/0x12a0 [ 1495.469347][T14938] ? alloc_netdev_mqs+0xca0/0x12a0 [ 1495.469391][T14938] alloc_netdev_mqs+0xca0/0x12a0 [ 1495.469436][T14938] rtnl_create_link+0x321/0xd70 [ 1495.469467][T14938] rtnl_newlink_create+0x258/0x7b0 [ 1495.469506][T14938] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1495.469544][T14938] ? __pfx___mutex_lock+0x10/0x10 [ 1495.469597][T14938] ? ns_capable+0x89/0xe0 [ 1495.469634][T14938] rtnl_newlink+0x167a/0x1c30 [ 1495.469682][T14938] ? __pfx_rtnl_newlink+0x10/0x10 [ 1495.469709][T14938] ? sock_sendmsg_nosec+0x13a/0x180 [ 1495.469730][T14938] ? ____sys_sendmsg+0x54e/0x850 [ 1495.469760][T14938] ? ___sys_sendmsg+0x2a5/0x360 [ 1495.469788][T14938] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1495.469817][T14938] ? do_syscall_64+0x166/0x520 [ 1495.469843][T14938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.469911][T14938] ? kasan_quarantine_put+0xbb/0x1f0 [ 1495.469936][T14938] ? lockdep_hardirqs_on+0x7b/0x110 [ 1495.469969][T14938] ? nlmon_xmit+0xb0/0x100 [ 1495.469994][T14938] ? kmem_cache_free+0x182/0x650 [ 1495.470033][T14938] ? __lock_acquire+0x747/0x2de0 [ 1495.470070][T14938] ? __local_bh_enable_ip+0xd6/0x140 [ 1495.470102][T14938] ? lockdep_hardirqs_on+0x7b/0x110 [ 1495.470130][T14938] ? __dev_queue_xmit+0x29b/0x3820 [ 1495.470162][T14938] ? __local_bh_enable_ip+0xd6/0x140 [ 1495.470191][T14938] ? __dev_queue_xmit+0x29b/0x3820 [ 1495.470257][T14938] ? __pfx_rtnl_newlink+0x10/0x10 [ 1495.470285][T14938] rtnetlink_rcv_msg+0x802/0xc00 [ 1495.470318][T14938] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1495.470347][T14938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1495.470373][T14938] ? ref_tracker_free+0x689/0x830 [ 1495.470407][T14938] ? __pfx_ref_tracker_free+0x10/0x10 [ 1495.470448][T14938] netlink_rcv_skb+0x226/0x4a0 [ 1495.470486][T14938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1495.470518][T14938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1495.470569][T14938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.470610][T14938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.470652][T14938] netlink_unicast+0x7bd/0x940 [ 1495.470697][T14938] netlink_sendmsg+0x813/0xb40 [ 1495.470744][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.470791][T14938] ? apparmor_socket_sendmsg+0x98/0x360 [ 1495.470820][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.470854][T14938] sock_sendmsg_nosec+0x13a/0x180 [ 1495.470882][T14938] ____sys_sendmsg+0x54e/0x850 [ 1495.470920][T14938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.470963][T14938] ? import_iovec+0x73/0xa0 [ 1495.471004][T14938] ___sys_sendmsg+0x2a5/0x360 [ 1495.471034][T14938] ? __lock_acquire+0x747/0x2de0 [ 1495.471064][T14938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.471139][T14938] ? __fget_files+0x2a/0x420 [ 1495.471171][T14938] ? __fget_files+0x3a2/0x420 [ 1495.471216][T14938] __x64_sys_sendmsg+0x1b1/0x290 [ 1495.471252][T14938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.471310][T14938] do_syscall_64+0x166/0x520 [ 1495.471337][T14938] ? trace_irq_disable+0x3b/0x140 [ 1495.471361][T14938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.471384][T14938] ? clear_bhb_loop+0x70/0xc0 [ 1495.471411][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.471434][T14938] RIP: 0033:0x7f813bb9e159 [ 1495.471456][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.471474][T14938] RSP: 002b:00007f813ca92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.471498][T14938] RAX: ffffffffffffffda RBX: 00007f813be25fa0 RCX: 00007f813bb9e159 [ 1495.471515][T14938] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 1495.471529][T14938] RBP: 00007f813ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.471542][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.471556][T14938] R13: 00007f813be26038 R14: 00007f813be25fa0 R15: 00007fffe7e62968 [ 1495.471602][T14938] [ 1496.009992][ T7832] Bluetooth: hci9: command tx timeout [ 1496.390262][T14960] FAULT_INJECTION: forcing a failure. [ 1496.390262][T14960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1496.390302][T14960] CPU: 0 UID: 0 PID: 14960 Comm: syz.7.12358 Not tainted syzkaller #0 PREEMPT(full) [ 1496.390328][T14960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.390344][T14960] Call Trace: [ 1496.390354][T14960] [ 1496.390365][T14960] dump_stack_lvl+0xe8/0x150 [ 1496.390405][T14960] should_fail_ex+0x410/0x560 [ 1496.390447][T14960] prepare_alloc_pages+0x223/0x600 [ 1496.390486][T14960] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1496.390518][T14960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1496.390544][T14960] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1496.390575][T14960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1496.390606][T14960] ? __pfx_policy_nodemask+0x10/0x10 [ 1496.390643][T14960] __alloc_pages_noprof+0x10/0x100 [ 1496.390670][T14960] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1496.390705][T14960] ? alloc_pages_noprof+0x140/0x2b0 [ 1496.390741][T14960] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1496.390773][T14960] alloc_vmap_area+0xd1a/0x1420 [ 1496.390825][T14960] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1496.390855][T14960] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1496.390882][T14960] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1496.390905][T14960] ? __get_vm_area_node+0x155/0x2f0 [ 1496.390944][T14960] __get_vm_area_node+0x200/0x2f0 [ 1496.390986][T14960] ? xdp_umem_create+0x6dc/0x8b0 [ 1496.391010][T14960] vmap+0x158/0x300 [ 1496.391043][T14960] ? xdp_umem_create+0x6dc/0x8b0 [ 1496.391073][T14960] xdp_umem_create+0x6dc/0x8b0 [ 1496.391110][T14960] xsk_setsockopt+0x82f/0x960 [ 1496.391137][T14960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1496.391169][T14960] ? aa_sock_opt_perm+0x142/0x1e0 [ 1496.391205][T14960] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1496.391235][T14960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1496.391261][T14960] do_sock_setsockopt+0x17c/0x1b0 [ 1496.391299][T14960] __x64_sys_setsockopt+0x13d/0x1b0 [ 1496.391336][T14960] do_syscall_64+0x166/0x520 [ 1496.391364][T14960] ? trace_irq_disable+0x3b/0x140 [ 1496.391388][T14960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.391413][T14960] ? clear_bhb_loop+0x70/0xc0 [ 1496.391449][T14960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.391473][T14960] RIP: 0033:0x7f7e2db9e159 [ 1496.391495][T14960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.391516][T14960] RSP: 002b:00007f7e2ea2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1496.391542][T14960] RAX: ffffffffffffffda RBX: 00007f7e2de26090 RCX: 00007f7e2db9e159 [ 1496.391560][T14960] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1496.391575][T14960] RBP: 00007f7e2ea2f090 R08: 0000000000000020 R09: 0000000000000000 [ 1496.391589][T14960] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1496.391604][T14960] R13: 00007f7e2de26128 R14: 00007f7e2de26090 R15: 00007ffd9fa54198 [ 1496.391640][T14960] [ 1496.812507][T14966] vlan2: entered promiscuous mode [ 1497.354048][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.354163][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.354351][T14852] bridge_slave_0: entered allmulticast mode [ 1497.372225][T14852] bridge_slave_0: entered promiscuous mode [ 1497.388481][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.394335][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.394940][T14852] bridge_slave_1: entered allmulticast mode [ 1497.421090][T14852] bridge_slave_1: entered promiscuous mode [ 1497.507821][T14852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.511864][T14852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.744960][T14852] team0: Port device team_slave_0 added [ 1497.772228][T14852] team0: Port device team_slave_1 added [ 1497.941509][T14852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.941530][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.941560][T14852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.947653][T14852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.947673][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.947772][T14852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.087180][ T7832] Bluetooth: hci9: command tx timeout [ 1498.294229][T14852] hsr_slave_0: entered promiscuous mode [ 1498.300182][T14852] hsr_slave_1: entered promiscuous mode [ 1498.302010][T14852] debugfs: 'hsr0' already exists in 'hsr' [ 1498.302081][T14852] Cannot create hsr debugfs directory [ 1499.305152][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12377'. [ 1499.350058][T14852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.658920][T15023] wireguard0: entered promiscuous mode [ 1499.658959][T15023] wireguard0: entered allmulticast mode [ 1499.753323][T15032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.753357][T15032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.755164][T15032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.755189][T15032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.168241][ T7832] Bluetooth: hci9: command tx timeout [ 1500.237005][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12383'. [ 1500.374924][T14852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.855187][T14852] team0: Port device netdevsim1 removed [ 1500.885825][T14852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.943786][T15054] netlink: 'syz.8.12386': attribute type 1 has an invalid length. [ 1501.142281][T15056] syzkaller0: entered promiscuous mode [ 1501.142314][T15056] syzkaller0: entered allmulticast mode [ 1501.185088][T15056] No such timeout policy "syz0" [ 1501.578302][T14852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.604746][T15065] geneve2: entered promiscuous mode [ 1502.323756][T15078] vlan2: entered promiscuous mode [ 1502.323788][T15078] bridge0: entered promiscuous mode [ 1502.554430][T15088] geneve0: entered promiscuous mode [ 1502.568322][T15088] geneve0: left promiscuous mode [ 1502.729183][T15089] geneve0: entered promiscuous mode [ 1502.748800][T15089] geneve0: left promiscuous mode [ 1502.799457][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12399'. [ 1503.002477][T15093] geneve2: entered allmulticast mode [ 1503.358130][T14852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1503.580073][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1503.583630][T14852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1503.624914][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1503.626017][T14852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1503.677189][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1503.678247][T14852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1503.759809][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.035780][T15120] netlink: 'syz.5.12408': attribute type 1 has an invalid length. [ 1504.091288][T15121] netlink: 'syz.8.12409': attribute type 1 has an invalid length. [ 1504.215733][T15120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1504.383781][T15121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1504.444188][T15136] netlink: 'syz.6.12411': attribute type 1 has an invalid length. [ 1504.444237][T15136] netlink: 'syz.6.12411': attribute type 1 has an invalid length. [ 1504.578992][T15137] macsec0: entered promiscuous mode [ 1504.580825][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12412'. [ 1504.639838][T15137] veth1_macvtap: left promiscuous mode [ 1504.681231][T15137] macsec0 (unregistering): left promiscuous mode [ 1504.755478][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.001281][T15146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12413'. [ 1505.003987][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.088160][T25496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.088279][T25496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.135554][T25496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.135715][T25496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.752879][T14852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.802824][T15160] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1506.644557][T15177] vlan2: entered promiscuous mode [ 1507.437578][T15196] dvmrp8: entered allmulticast mode [ 1507.445261][T15183] netlink: 'syz.8.12427': attribute type 5 has an invalid length. [ 1508.087078][T14852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.125624][T15212] syzkaller0: entered promiscuous mode [ 1508.125659][T15212] syzkaller0: entered allmulticast mode [ 1508.640341][T14852] veth0_vlan: entered promiscuous mode [ 1508.691844][T14852] veth1_vlan: entered promiscuous mode [ 1508.901665][T14852] veth0_macvtap: entered promiscuous mode [ 1508.950645][T14852] veth1_macvtap: entered promiscuous mode [ 1509.059663][T15243] netlink: 'syz.8.12445': attribute type 63 has an invalid length. [ 1509.141623][T14852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.210265][T14852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.339241][T15245] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1509.466021][ T6235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.468859][T25496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.468932][T25496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.468969][T25496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.220863][T25496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.220889][T25496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.290346][T15267] netlink: 'syz.6.12456': attribute type 1 has an invalid length. [ 1510.447138][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12457'. [ 1510.544627][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.544653][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.805738][T15276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1510.941319][T15282] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1510.943556][T15283] ip_tables: iptables: counters copy to user failed while replacing table [ 1511.271521][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12463'. [ 1514.888169][T15405] lo: entered promiscuous mode [ 1514.906015][T15405] tunl0: entered promiscuous mode [ 1515.071697][T15405] gre0: entered promiscuous mode [ 1515.242828][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12515'. [ 1515.284626][T15405] gretap0: entered promiscuous mode [ 1515.621322][T15405] erspan0: entered promiscuous mode [ 1515.641952][T15405] ip_vti0: entered promiscuous mode [ 1515.655997][T15405] ip6_vti0: entered promiscuous mode [ 1515.680107][T15405] sit0: entered promiscuous mode [ 1515.782533][T15405] ip6tnl0: entered promiscuous mode [ 1515.938703][T15405] ip6gre0: entered promiscuous mode [ 1516.071266][T15405] syz_tun: entered promiscuous mode [ 1516.191943][T15405] ip6gretap0: entered promiscuous mode [ 1516.241142][T15405] bridge0: entered promiscuous mode [ 1516.241438][T15405] vcan0: entered promiscuous mode [ 1516.366931][T15405] bond0: entered promiscuous mode [ 1516.366976][T15405] bond_slave_0: entered promiscuous mode [ 1516.367220][T15405] bond_slave_1: entered promiscuous mode [ 1516.405766][T15405] team0: entered promiscuous mode [ 1516.405794][T15405] team_slave_0: entered promiscuous mode [ 1516.406022][T15405] team_slave_1: entered promiscuous mode [ 1516.481605][T15405] dummy0: entered promiscuous mode [ 1516.585165][T15405] nlmon0: entered promiscuous mode [ 1516.635568][T15405] batadv0: entered promiscuous mode [ 1516.720478][T15405] vxcan0: entered promiscuous mode [ 1516.802695][T15405] vxcan1: entered promiscuous mode [ 1516.849113][T15405] veth0: entered promiscuous mode [ 1516.890859][T15405] veth1: entered promiscuous mode [ 1516.960723][T15405] wg0: entered promiscuous mode [ 1517.021081][T15405] wg1: entered promiscuous mode [ 1517.058201][T15405] wg2: entered promiscuous mode [ 1517.081381][T15405] veth0_to_bridge: entered promiscuous mode [ 1517.151064][T15405] veth1_to_bridge: entered promiscuous mode [ 1517.212987][T15405] veth0_to_bond: entered promiscuous mode [ 1517.240664][T15405] veth1_to_bond: entered promiscuous mode [ 1517.291556][T15405] veth0_to_team: entered promiscuous mode [ 1517.313352][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12525'. [ 1517.313380][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12525'. [ 1517.365311][T15405] veth1_to_team: entered promiscuous mode [ 1517.430172][T15405] veth0_to_batadv: entered promiscuous mode [ 1517.460053][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.460121][T15405] batadv_slave_0: entered promiscuous mode [ 1517.513174][T15405] veth1_to_batadv: entered promiscuous mode [ 1517.549831][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.549899][T15405] batadv_slave_1: entered promiscuous mode [ 1517.592810][T15405] xfrm0: entered promiscuous mode [ 1517.635604][T15405] veth0_to_hsr: entered promiscuous mode [ 1517.703344][T15405] veth1_to_hsr: entered promiscuous mode [ 1517.759882][T15405] hsr0: entered promiscuous mode [ 1517.795839][T15405] veth1_virt_wifi: entered promiscuous mode [ 1517.837239][T15405] veth0_virt_wifi: entered promiscuous mode [ 1517.845209][T15405] virt_wifi0: entered promiscuous mode [ 1517.949138][T15405] vlan0: entered promiscuous mode [ 1518.014839][T15405] vlan1: entered promiscuous mode [ 1518.066829][T15405] macvlan0: entered promiscuous mode [ 1518.097601][T15405] macvlan1: entered promiscuous mode [ 1518.134140][T15405] ipvlan0: entered promiscuous mode [ 1518.134287][T15405] ipvlan1: entered promiscuous mode [ 1518.193091][T15405] macvtap0: entered promiscuous mode [ 1518.221860][T15405] macsec0: entered promiscuous mode [ 1518.252602][T15405] geneve0: entered promiscuous mode [ 1518.286280][T15405] geneve1: entered promiscuous mode [ 1518.318793][T15405] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1518.355877][T15405] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1518.381003][T15405] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1518.404892][T15405] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1518.454831][T15405] mac80211_hwsim hwsim234 wlan1: entered promiscuous mode [ 1518.465851][T15405] vxlan0: entered promiscuous mode [ 1518.511065][T15405] wireguard0: left allmulticast mode [ 1518.529964][T15405] gre1: entered promiscuous mode [ 1518.738624][T15405] bond1: entered promiscuous mode [ 1518.759283][T15405] 7: entered promiscuous mode [ 1518.759466][T15405] syzkaller0: entered promiscuous mode [ 1518.759716][T15405] syz_tun.1: entered promiscuous mode [ 1518.778453][T25497] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1518.778571][T25497] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.787979][T25497] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1518.788013][T25497] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.798340][T25497] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1518.798378][T25497] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.798453][T25497] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1518.798475][T25497] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.152825][T15491] netlink: 'syz.6.12543': attribute type 1 has an invalid length. [ 1520.442616][T15506] batadv_slave_0: entered promiscuous mode [ 1520.473517][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12548'. [ 1520.473695][T15506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.543931][T15506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.661802][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12551'. [ 1520.934132][T15522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1521.219485][T15531] 0: reclassify loop, rule prio 0, protocol 800 [ 1522.199097][ T6235] IPVS: starting estimator thread 0... [ 1522.306754][T15553] IPVS: using max 38 ests per chain, 91200 per kthread [ 1523.181808][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035c15800: rx timeout, send abort [ 1523.182092][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035c15800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1523.354741][T15501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1523.544271][T15563] debugfs: 'hsr1' already exists in 'hsr' [ 1523.544307][T15563] Cannot create hsr debugfs directory [ 1523.580184][T15563] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1523.580221][T15563] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1523.619855][T15563] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1527.025704][T15644] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 1527.038802][T15643] IPVS: stopping backup sync thread 15644 ... [ 1527.220660][T15648] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12603'. [ 1527.237048][ T6228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.237584][ T6228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.321648][T15584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1528.022182][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12610'. [ 1528.174145][T15663] syzkaller0: entered promiscuous mode [ 1528.174176][T15663] syzkaller0: entered allmulticast mode [ 1528.527404][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12618'. [ 1529.845854][T15732] syzkaller0: entered promiscuous mode [ 1529.845914][T15732] syzkaller0: entered allmulticast mode [ 1530.334755][T15743] syzkaller0: entered promiscuous mode [ 1530.334784][T15743] syzkaller0: entered allmulticast mode [ 1530.394999][T15749] xt_hashlimit: size too large, truncated to 1048576 [ 1531.155969][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12654'. [ 1531.351547][T15780] lo speed is unknown, defaulting to 1000 [ 1532.627336][T15780] lo speed is unknown, defaulting to 1000 [ 1532.645505][T15780] wg2 speed is unknown, defaulting to 1000 [ 1532.663412][T15780] wg2 speed is unknown, defaulting to 1000 [ 1533.809948][T15870] ip_tables: iptables: counters copy to user failed while replacing table [ 1533.950784][T15871] TC_ACT_REPEAT abuse ? [ 1534.353006][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12699'. [ 1534.866951][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12708'. [ 1535.013408][T15912] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 1535.479087][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12714'. [ 1535.696656][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1536.082355][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa2a000: rx timeout, send abort [ 1536.082704][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fa2a000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1536.234354][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12725'. [ 1536.411499][T15959] netlink: 'syz.6.12728': attribute type 2 has an invalid length. [ 1536.756966][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12735'. [ 1536.757708][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12735'. [ 1536.758037][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12735'. [ 1536.758233][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12735'. [ 1536.758435][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12735'. [ 1537.407989][T15966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1537.523510][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12747'. [ 1539.243914][T16067] af_packet: packet size is too long (4097 > 71) [ 1539.537562][T16078] __nla_validate_parse: 1 callbacks suppressed [ 1539.537590][T16078] netlink: 284 bytes leftover after parsing attributes in process `syz.2.12781'. [ 1539.749459][T16085] syzkaller1: entered promiscuous mode [ 1539.749489][T16085] syzkaller1: entered allmulticast mode [ 1539.921873][T16093] nbd: must specify at least one socket [ 1541.278686][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12797'. [ 1546.998713][T16130] ip6erspan0: entered allmulticast mode [ 1547.365319][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12807'. [ 1547.430896][T16146] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12808'. [ 1548.085163][T16174] syzkaller0: left promiscuous mode [ 1548.133793][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12824'. [ 1548.135778][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12821'. [ 1548.135811][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12821'. [ 1548.135831][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12821'. [ 1548.984927][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12836'. [ 1548.984966][T16212] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12836'. [ 1549.042038][T16212] ip6gretap1: entered allmulticast mode [ 1549.372666][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12842'. [ 1549.403720][T16229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.439937][T16229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.443800][T16229] bond0 (unregistering): Released all slaves [ 1550.400127][T16242] netlink: 'syz.8.12848': attribute type 1 has an invalid length. [ 1550.441252][T16242] bond2: entered promiscuous mode [ 1550.441698][T16242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1550.475576][T16242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1550.475888][T16242] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1550.475903][T16242] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1550.504947][T16242] bond2: (slave gre1): making interface the new active one [ 1550.504975][T16242] gre1: entered promiscuous mode [ 1550.512901][T16242] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1550.534419][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12848'. [ 1550.562381][T16244] bond2 (unregistering): (slave gre1): Releasing backup interface [ 1550.562421][T16244] gre1: left promiscuous mode [ 1550.587331][T16244] bond2 (unregistering): Released all slaves [ 1551.273813][T16182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1551.724261][T16265] team0: entered allmulticast mode [ 1551.724290][T16265] team_slave_0: entered allmulticast mode [ 1551.724311][T16265] team_slave_1: entered allmulticast mode [ 1552.393670][T16265] team0 (unregistering): left allmulticast mode [ 1552.393701][T16265] team_slave_0: left allmulticast mode [ 1552.393722][T16265] team_slave_1: left allmulticast mode [ 1552.451194][T16265] team0 (unregistering): Port device team_slave_0 removed [ 1552.547510][T16265] team0 (unregistering): Port device team_slave_1 removed [ 1552.964478][T16281] netlink: 'syz.7.12862': attribute type 1 has an invalid length. [ 1553.269459][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.804429][T16311] netlink: 'syz.6.12871': attribute type 1 has an invalid length. [ 1553.930333][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12871'. [ 1553.954730][T16311] bond1: entered promiscuous mode [ 1553.962930][T16311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.640447][T16316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.645698][T16316] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1554.645728][T16316] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1554.713074][T16316] bond1: (slave gre1): making interface the new active one [ 1554.713110][T16316] gre1: entered promiscuous mode [ 1554.730892][T16316] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1554.811065][T16318] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1554.811099][T16318] gre1: left promiscuous mode [ 1554.852472][T16318] bond1 (unregistering): Released all slaves [ 1557.958156][T16390] geneve2: entered promiscuous mode [ 1558.209139][T16351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1559.108431][T16419] netlink: 272 bytes leftover after parsing attributes in process `syz.2.12907'. [ 1559.207895][T16425] geneve3: entered promiscuous mode [ 1559.463645][T16434] syzkaller0: entered promiscuous mode [ 1559.463675][T16434] syzkaller0: entered allmulticast mode [ 1560.060196][T16455] netlink: 'syz.7.12919': attribute type 1 has an invalid length. [ 1560.139576][T16455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1560.249231][T16461] bond2: (slave dummy0): making interface the new active one [ 1560.255319][T16461] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1560.273555][T16455] : renamed from dummy0 (while UP) [ 1561.651031][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091e43400: rx timeout, send abort [ 1562.151094][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091e43400: abort rx timeout. Force session deactivation [ 1562.155731][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091e43c00: rx timeout, send abort [ 1562.647873][T16520] syzkaller0: entered promiscuous mode [ 1562.647903][T16520] syzkaller0: entered allmulticast mode [ 1562.655807][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091e43c00: abort rx timeout. Force session deactivation [ 1562.988114][T16524] ip6erspan0: entered allmulticast mode [ 1563.075147][T16528] syzkaller0: entered promiscuous mode [ 1563.075167][T16528] syzkaller0: entered allmulticast mode [ 1563.385469][T16488] Bluetooth: hci6: command 0x0406 tx timeout [ 1563.385518][T16488] Bluetooth: hci5: command 0x0406 tx timeout [ 1564.275147][T16559] netlink: 256 bytes leftover after parsing attributes in process `syz.7.12959'. [ 1564.288892][T16559] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12959'. [ 1564.808955][T16567] syzkaller0: entered promiscuous mode [ 1564.808986][T16567] syzkaller0: entered allmulticast mode [ 1565.567416][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1565.567448][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1566.266522][T16605] syzkaller0: entered promiscuous mode [ 1566.266561][T16605] syzkaller0: entered allmulticast mode [ 1567.595706][T16650] bond0: entered promiscuous mode [ 1567.595733][T16650] bond_slave_0: entered promiscuous mode [ 1567.595971][T16650] bond_slave_1: entered promiscuous mode [ 1567.614437][T16650] batadv0: entered promiscuous mode [ 1567.615769][T16650] debugfs: 'hsr1' already exists in 'hsr' [ 1567.615796][T16650] Cannot create hsr debugfs directory [ 1567.639061][T16650] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1570.148900][T16635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1571.288320][T16703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13012'. [ 1571.310887][T16703] syzkaller0: left promiscuous mode [ 1571.310919][T16703] syzkaller0: left allmulticast mode [ 1571.408302][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13013'. [ 1571.698283][T16713] netlink: 'syz.8.13014': attribute type 2 has an invalid length. [ 1571.698312][T16713] netlink: 228 bytes leftover after parsing attributes in process `syz.8.13014'. [ 1571.825945][T16716] syzkaller0: entered promiscuous mode [ 1571.825965][T16716] syzkaller0: entered allmulticast mode [ 1572.169191][ T32] INFO: task syz.4.11963:13528 blocked for more than 143 seconds. [ 1572.169224][ T32] Not tainted syzkaller #0 [ 1572.169236][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1572.169248][ T32] task:syz.4.11963 state:D stack:25848 pid:13528 tgid:13527 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 1572.169317][ T32] Call Trace: [ 1572.169327][ T32] [ 1572.169343][ T32] __schedule+0x17db/0x58f0 [ 1572.169443][ T32] ? __pfx___schedule+0x10/0x10 [ 1572.169483][ T32] ? schedule+0x90/0x2b0 [ 1572.169513][ T32] schedule+0x164/0x2b0 [ 1572.169543][ T32] schedule_preempt_disabled+0x13/0x30 [ 1572.169569][ T32] __mutex_lock+0x7c1/0x1550 [ 1572.169606][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1572.169639][ T32] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1572.169788][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1572.169830][ T32] ? rcu_is_watching+0x16/0xb0 [ 1572.169863][ T32] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1572.169899][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1572.169928][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1572.169961][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1572.169991][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1572.170028][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1572.170065][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1572.170109][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1572.170130][ T32] ? security_capable+0x7e/0x2c0 [ 1572.170164][ ** replaying previous printk message ** [ 1572.170164][ T32] genl_rcv_msg+0x614/0x7a0 [ 1572.170199][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1572.170226][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1572.170273][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1572.170310][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1572.170339][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1572.170391][ T32] ? down_read+0x2be/0x330 [ 1572.170426][ T32] genl_rcv+0x28/0x40 [ 1572.170451][ T32] netlink_unicast+0x7bd/0x940 [ 1572.170493][ T32] netlink_sendmsg+0x813/0xb40 [ 1572.170564][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1572.170608][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1572.170639][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1572.170674][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1572.170703][ T32] ____sys_sendmsg+0x54e/0x850 [ 1572.170742][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1572.170785][ T32] ? import_iovec+0x73/0xa0 [ 1572.170822][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1572.170852][ T32] ? __lock_acquire+0x747/0x2de0 [ 1572.170882][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1572.170927][ T32] ? futex_wait+0x2a2/0x390 [ 1572.170998][ T32] ? __fget_files+0x2a/0x420 [ 1572.171031][ T32] ? __fget_files+0x3a2/0x420 [ 1572.171075][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1572.171111][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1572.171168][ T32] do_syscall_64+0x166/0x520 [ 1572.171197][ T32] ? trace_irq_disable+0x3b/0x140 [ 1572.171220][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.171245][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1572.171275][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.171299][ T32] RIP: 0033:0x7fa7c7b9e159 [ 1572.171322][ T32] RSP: 002b:00007fa7c8b17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.171348][ T32] RAX: ffffffffffffffda RBX: 00007fa7c7e25fa0 RCX: 00007fa7c7b9e159 [ 1572.171365][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000d [ 1572.171381][ T32] RBP: 00007fa7c7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1572.171396][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.171411][ T32] R13: 00007fa7c7e26038 R14: 00007fa7c7e25fa0 R15: 00007fff2bdf8488 [ 1572.171450][ T32] [ 1572.171525][ T32] [ 1572.171525][ T32] Showing all locks held in the system: [ 1572.171539][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1572.171557][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1572.171639][ T32] locks held by udevd/4984: 4, last CPU#1: [ 1572.171656][ T32] #0: ffff88802279c630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1572.171719][ T32] #1: ffff88804c4e5440 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x209/0x4d0 [ 1572.171782][ T32] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x26d/0x960 [ 1572.174678][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 1572.174755][ T32] locks held by getty/5373: 2, on CPU#1: [ 1572.174772][ T32] #0: ffff888025da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1572.175009][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1572.175091][ T32] locks held by kworker/u8:18/25494: 4, last CPU#0: [ 1572.175109][ T32] #0: ffff8880735d5940 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.175182][ T32] #1: ffffc900033f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.175247][ T32] #2: ffff88803e045440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1572.175374][ T32] #3: ffff888024f52ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1572.175446][ T32] locks held by kworker/u8:24/25497: 2, on CPU#0: [ 1572.175463][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.175528][ T32] #1: ffffc90005bafc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.175605][ T32] locks held by kworker/u8:10/6235: 3, last CPU#1: [ 1572.175622][ T32] #0: ffff888057589940 ((wq_completion)krds_cp_wq#16/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.175688][ T32] #1: ffffc90004627c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.212807][ T32] #2: ffff8880677e1280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1572.212971][ T32] locks held by kworker/u8:16/6238: 3, last CPU#0: [ 1572.212990][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.213048][ T32] #1: ffffc90004527c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1572.297997][ T32] #2: ffff8880677e1580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1572.298260][ T32] locks held by syz.0.11901/13337: 2, on CPU#1: [ 1572.298322][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1572.298486][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1572.298676][ T32] locks held by syz.4.11963/13528: 2, on CPU#0: [ 1572.298727][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1572.298869][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1572.299098][ T32] locks held by syz-executor/13794: 1, last CPU#1: [ 1572.299142][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1572.299302][ T32] locks held by syz.3.12114/14030: 2, on CPU#0: [ 1572.299356][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1572.299503][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1572.299721][ T32] locks held by syz.1.12184/14295: 2, on CPU#1: [ 1572.299763][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1572.299925][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1572.300104][ T32] locks held by syz-executor/14614: 4, last CPU#0: [ 1572.300147][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1572.300302][ T32] #1: ffff88803390dcf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1572.300484][ T32] #2: ffff88807f539d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1572.300652][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1572.300714][ T32] locks held by syz-executor/14852: 4, last CPU#1: [ 1572.300730][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1572.300786][ T32] #1: ffff888033e07678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1572.300841][ T32] #2: ffff88802b3bb6b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1572.300907][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1572.300972][ T32] locks held by udevd/16187: 3, last CPU#1: [ 1572.300989][ T32] #0: ffff888033ee7e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1572.301045][ T32] #1: ffff88803d189c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1572.301110][ T32] #2: ffff8880270e35a8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1572.301176][ T32] locks held by syz.6.13017/16716: 1, last CPU#1: [ 1572.301193][ T32] #0: ffff88805025a9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1572.301257][ T32] locks held by modprobe/16732: 1, last CPU#1: [ 1572.301275][ T32] #0: ffff88807f53d038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1572.301334][ T32] [ 1572.301341][ T32] ============================================= [ 1572.301341][ T32] [ 1572.301378][ T32] NMI backtrace for cpu 1 [ 1572.301395][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1572.301423][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.301437][ T32] Call Trace: [ 1572.301445][ T32] [ 1572.301456][ T32] dump_stack_lvl+0xe8/0x150 [ 1572.301492][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1572.301528][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1572.301562][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1572.301593][ T32] sys_info+0x135/0x170 [ 1572.301618][ T32] watchdog+0xfd7/0x1030 [ 1572.301643][ T32] ? watchdog+0x1c7/0x1030 [ 1572.301667][ T32] kthread+0x38b/0x480 [ 1572.301685][ T32] ? __pfx_watchdog+0x10/0x10 [ 1572.301701][ T32] ? __pfx_kthread+0x10/0x10 [ 1572.301720][ T32] ret_from_fork+0x514/0xb70 [ 1572.301740][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1572.301757][ T32] ? __switch_to+0xc89/0x1420 [ 1572.301784][ T32] ? __pfx_kthread+0x10/0x10 [ 1572.301803][ T32] ret_from_fork_asm+0x1a/0x30 [ 1572.301843][ T32] [ 1572.301869][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1572.301906][ C0] NMI backtrace for cpu 0 [ 1572.301920][ C0] CPU: 0 UID: 0 PID: 1004 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1572.301942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.301955][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1572.301981][ C0] RIP: 0010:__text_poke+0x11/0xa60 [ 1572.302024][ C0] Code: ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 83 e4 e0 48 81 ec e0 00 00 00 48 89 cb 48 89 54 24 38 49 89 f4 [ 1572.302041][ C0] RSP: 0018:ffffc90004f97848 EFLAGS: 00000293 [ 1572.302058][ C0] RAX: ffffffff93982cda RBX: 1ffff920009f2f1c RCX: 0000000000000004 [ 1572.302072][ C0] RDX: ffffffff93982cdb RSI: ffffffff822c42f1 RDI: ffffffff816c36b0 [ 1572.302087][ C0] RBP: ffffc90004f97870 R08: 000000000000441f R09: 0000000000000006 [ 1572.302101][ C0] R10: dffffc0000000000 R11: fffff520009f2f22 R12: 0000000000000005 [ 1572.302114][ C0] R13: ffffffff93982cda R14: 0000000000000009 R15: 00000000012c42f0 [ 1572.302128][ C0] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 1572.302144][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1572.302158][ C0] CR2: 00007efd88777238 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1572.302176][ C0] Call Trace: [ 1572.302183][ C0] [ 1572.302193][ C0] smp_text_poke_batch_finish+0x8f2/0x1110 [ 1572.302221][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1572.302252][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1572.302282][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1572.302313][ C0] ? __jump_label_update+0x347/0x370 [ 1572.302337][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1572.302363][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1572.302394][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1572.302416][ C0] static_key_enable+0x1a/0x20 [ 1572.302439][ C0] toggle_allocation_gate+0xab/0x290 [ 1572.302463][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1572.302494][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1572.302521][ C0] process_scheduled_works+0xc3d/0x1630 [ 1572.302565][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1572.302595][ C0] ? assign_work+0x3cf/0x5d0 [ 1572.302622][ C0] worker_thread+0xa47/0xfb0 [ 1572.302665][ C0] kthread+0x38b/0x480 [ 1572.302683][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1572.302708][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.302727][ C0] ret_from_fork+0x514/0xb70 [ 1572.302747][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1572.302764][ C0] ? __switch_to+0xc89/0x1420 [ 1572.302791][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.302811][ C0] ret_from_fork_asm+0x1a/0x30 [ 1572.302849][ C0] [ 1572.335772][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1573.463892][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1573.473027][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1573.483106][ T32] Call Trace: [ 1573.486417][ T32] [ 1573.489391][ T32] vpanic+0x56d/0xa60 [ 1573.493411][ T32] ? __pfx___schedule+0x10/0x10 [ 1573.498286][ T32] ? __pfx_vpanic+0x10/0x10 [ 1573.502832][ T32] panic+0xc5/0xd0 [ 1573.506589][ T32] ? __pfx_panic+0x10/0x10 [ 1573.511029][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1573.516513][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1573.521909][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1573.528106][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1573.534306][ T32] watchdog+0x1030/0x1030 [ 1573.538667][ T32] ? watchdog+0x1c7/0x1030 [ 1573.543119][ T32] kthread+0x38b/0x480 [ 1573.547214][ T32] ? __pfx_watchdog+0x10/0x10 [ 1573.551913][ T32] ? __pfx_kthread+0x10/0x10 [ 1573.556531][ T32] ret_from_fork+0x514/0xb70 [ 1573.561149][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1573.566279][ T32] ? __switch_to+0xc89/0x1420 [ 1573.570988][ T32] ? __pfx_kthread+0x10/0x10 [ 1573.575600][ T32] ret_from_fork_asm+0x1a/0x30 [ 1573.580432][ T32] [ 1573.584094][ T32] Kernel Offset: disabled [ 1573.588442][ T32] Rebooting in 86400 seconds..