last executing test programs: 5.972989599s ago: executing program 2 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, r2, 0x4, 0x0, 0x4}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}]}, &(0x7f0000000300)='GPL\x00', 0x773, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x8, 0x80000001}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r3, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x2, 0x1, 0x80d, 0xc}, {0x5, 0x1, 0xb, 0xa}, {0x1, 0x1, 0x6, 0x5}, {0x4, 0x4, 0x3, 0x4}, {0x4, 0x3, 0xe, 0x1}, {0x1, 0x2, 0x11, 0x5}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x3, 0xd, 0x3}, {0x3, 0x4, 0xa, 0xa}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x6, &(0x7f00000000c0)=""/6, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x6, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x4, 0x9}, {0x3, 0x4, 0xc, 0x7}, {0x0, 0x5, 0x4, 0x4}, {0x0, 0x1, 0x10, 0x8}, {0x4, 0x5, 0x9, 0x1}, {0x0, 0x5, 0x8}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e6576650000200002800800110001"], 0x64}}, 0x20000000) 5.810623672s ago: executing program 2 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c000000faff000007000000c5"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)="137c3130c1a0002cc7090a2525c96483f0b00f92beecf57500000044c57fc7ff1326d367214c1c32811c1d3328be64e8cf8102e30000ca00"/67, &(0x7f0000000000)="5bc9eb7301d09d99dd04700131b5f8167d840612b70196", 0x3d, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400382, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa88a8110081002f0008004500ff4d4000e000ba69062f90787f000001ac141441a001880b000c907801080000007c"], 0x36) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 5.394519355s ago: executing program 2 (id=880): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004d40)=@newchain={0x2038, 0x64, 0x0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x0, 0x2}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x1fe0, 0x2, [@TCA_BASIC_POLICE={0x824, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x34cc159d, 0x8, 0x1, 0x7b44, 0xfffffffc, 0x3, 0x4, 0x2, 0xfffffff9, 0x7, 0x52, 0x9, 0xa7, 0x1, 0x7, 0x10000, 0x9, 0x5c8ff0fd, 0x1, 0x81, 0x3, 0x10000, 0xd933, 0x6, 0x7, 0x3ff, 0x8000, 0x2, 0x5, 0x1, 0x55b81699, 0x7, 0x4, 0x0, 0x0, 0x3880, 0x3b, 0x3, 0x7, 0x2c9, 0x1, 0x2, 0xa0, 0x9, 0x100, 0x1, 0x4a2, 0xffffffff, 0x3, 0x7, 0x3, 0x9, 0x5, 0x3, 0x0, 0x5, 0x5, 0xffffb609, 0x0, 0x8001, 0x6, 0x5e61, 0x6, 0x5, 0xcf, 0x6, 0xe, 0x9, 0x5e1, 0x200, 0xa, 0x53b8, 0x7, 0x3, 0x1, 0x9, 0xc8bd, 0x8, 0x36, 0x5, 0xfffff2b6, 0x9, 0x7, 0x4, 0x10001, 0x9, 0xc8b7, 0x40, 0x91, 0xc, 0x4, 0x3, 0x21, 0x8, 0x8, 0x200, 0x400, 0x101, 0x5, 0x80, 0x8, 0x6, 0x0, 0x7b0d, 0x6, 0x7, 0x0, 0x2a, 0x5, 0x1ff, 0xfff, 0x3, 0xd0, 0xf, 0x101, 0x10001, 0x5, 0x40, 0x1, 0x1, 0x349, 0x4475, 0x81, 0xf, 0x0, 0x4, 0x800, 0xffff, 0xfffffe00, 0x7fffffff, 0xe, 0x6, 0x8, 0x7, 0x5, 0xffffffff, 0x200, 0x3, 0xf3, 0x5265, 0x8, 0x3, 0x8, 0x188f, 0x2, 0x8, 0x1, 0x0, 0xf, 0x9, 0x10, 0x5, 0x1, 0x5, 0x4, 0xae2, 0x9, 0x800, 0x40, 0xfffffffb, 0x7fffffff, 0x8, 0x937a, 0x2, 0xfffffffc, 0x94, 0x9, 0x2, 0x1, 0x3c46, 0xfffffffe, 0x0, 0xc, 0x9, 0x5bac, 0x1, 0x2, 0x3, 0x3, 0x0, 0x9, 0x7, 0xd, 0x90, 0x3, 0x1, 0x2, 0x3ff, 0xffffffc0, 0x7, 0x7, 0xfd, 0x2, 0x0, 0xffffffff, 0x145, 0x7, 0x0, 0x37817ee2, 0x7, 0x6, 0x3, 0x6, 0x52ea, 0xfffffff3, 0x6, 0x7, 0x80, 0x30e, 0x3, 0x400, 0x7, 0x2, 0x7ff, 0x0, 0x0, 0x5, 0x9, 0x6, 0x0, 0x90, 0x1, 0x4, 0x4, 0xfffff695, 0x9, 0x378, 0xfffffff7, 0xfffffffa, 0x0, 0x9, 0x0, 0x1000, 0xfffffffe, 0x6, 0x7, 0x4, 0x7fffffff, 0x6, 0x3, 0x80000001, 0x7fffffff, 0xa, 0x80, 0x8, 0x81, 0x1, 0x4, 0x3, 0x8, 0x401, 0x4, 0x5, 0x7, 0xb, 0xde0e]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x7, 0x10001, 0x0, 0x44, 0x1, 0xc, 0x7, 0x4, 0x0, 0x6, 0x1, 0x0, 0x7fffffff, 0xe, 0xffffffff, 0x2, 0x4, 0xf836, 0x80000001, 0xb2a9, 0xfffffffa, 0x6, 0x9, 0x7, 0x1, 0xefdd, 0x4000000, 0x8, 0x4, 0x6, 0xfffffffb, 0x2, 0x0, 0x6, 0x8, 0x2, 0x7f, 0xd, 0x7, 0xe1, 0x1000, 0x5, 0x7f, 0x8, 0x4, 0x8, 0x6, 0x401, 0x70, 0x7, 0x747, 0x80, 0x7f, 0x0, 0x0, 0x3, 0x10, 0x1, 0x3, 0x1000, 0xfff, 0xd, 0x1, 0x0, 0x4, 0x10000, 0x9f, 0xc45e, 0x5, 0x831, 0x0, 0x5, 0x2, 0xb, 0xffff7fff, 0x5, 0x4, 0x80000001, 0x80, 0x8, 0x5, 0xfffff577, 0x241b, 0xfffffffc, 0xb090, 0x6, 0x4, 0x5, 0x10000, 0x80000000, 0x0, 0x6, 0x4, 0xe4, 0x6, 0x3ff, 0x4ad3, 0xf, 0x2, 0x7, 0x3, 0x3, 0x4, 0x559, 0x3ff, 0x1, 0x2, 0x4, 0x3, 0xd, 0x2, 0x7, 0x7, 0x8, 0xb, 0x0, 0x2, 0xffffffff, 0x2, 0xd, 0xfffffffc, 0xc9, 0x8000, 0x0, 0x0, 0x9, 0x5, 0x7, 0x1, 0x800, 0x4ed, 0x401, 0x400000, 0x6, 0x3, 0x0, 0x7, 0x2, 0xc3ec, 0x7, 0xb98, 0x7, 0x3, 0xff, 0x3, 0x4, 0x8, 0x100, 0xf242, 0x2, 0x3, 0xfffffff8, 0x5, 0x38, 0x7, 0xb, 0x3ff, 0x346, 0x9, 0x4, 0xfffffff7, 0x4, 0xa133, 0x1, 0xc, 0x3, 0x77e6, 0x9, 0x400, 0x7f, 0x90, 0x9, 0x10000, 0xe253, 0x2, 0x6, 0x8, 0x5, 0x0, 0x3, 0xe, 0xbe, 0x4, 0x80000000, 0x6bca, 0x5, 0x800, 0x8, 0x7, 0xfffff000, 0x4, 0xffffffff, 0x10001, 0xa2e, 0x410, 0xa, 0xb, 0xc, 0x4000000, 0x0, 0x200, 0x1, 0xffff, 0x80000001, 0x3, 0x322, 0xf54, 0x4000, 0x8, 0xfffffff1, 0x4d8, 0x7, 0x252d, 0x1, 0x4, 0x3, 0x6, 0x0, 0x7, 0x400, 0xff, 0x3, 0xf23, 0xa, 0x4, 0x1, 0x9, 0x400, 0x4, 0xfffffffa, 0x6, 0x5, 0xbe60, 0x8, 0x8, 0x5, 0xfffffffc, 0x4, 0x1, 0x400, 0x1, 0x101, 0xfa, 0xff, 0xb, 0x62, 0x703b, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5e3, 0x7, 0x7]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x10}}, @TCA_BASIC_ACT={0x17b0, 0x3, [@m_connmark={0x114, 0x17, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x20000000, 0x5, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x10000, 0x7, 0x1, 0x10000000}, 0xf027}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xff, 0xffffffffffffffff, 0xb04a, 0x772}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x82d8, 0x1, 0x0, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0xf7, 0x7, 0x0, 0x9}, 0x230}}]}, {0x55, 0x6, "0d25de9bbfaed34f9a0cf661656a82e54e7fe3a5399ae82a53bcdbdbc17f623f8e483e101269e16364ee5a31593b665226c271f1c5db0745e1989cb93df9ccc3533222cbe286c8014c498a7bfe6bd336d9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0x7, 0x1a, 0x62b, 0x2}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffd, 0x7, 0x4, 0x10, 0x5}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x65, 0x6, "3bc65522e43f0fb323baa23578fbf68c68d38720603683dea60eff13387af70a87a5e950bd5014972c0e36d3955487bb58ebd45d0afd0cd8c494459100223e744c9382be9738f844fd9ec6f20f7be90d03f541a2bd72b6b09b8495a3853ad56c7d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x174, 0x1c, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x49, 0x6, {0x3, 'nat\x00', 0x1, 0x800, "d134b596ecbe341c8ac2d402359ee8756b7fdd51c34691a0ba86dd38fc4ce3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0xdf395b2ffece492d}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xd5, 0x6, "917b03422fb13fc65ebe8193b8810250b9a06b3792e7cd3f3133cf6b07888da61ce9a36cc2776a4efe235ec5c0c677f06c4fb407cc84e842246c553043f6f463dc73ee166bfcdc1e41815ea70cb621f52b515fbf34207ff04a379e02d8419789473bb064880eec9eb5ef750d0dc3a7fde900256a89544f22328d440d3d49fe1ab25628f3213600c4a430e18b4843342ab4db1019dfc2ce98cc5ddc1d2be9534ab9c8b23070b500b58fde5f23345e23fd4c12ca4bb9bb438125c71b634959634015cd74de7bb9163105df65f0d3af821935"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1090, 0xe, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x78}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xece}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1ff, 0xffffffffffffffff, 0x7f, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xa}}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x3a0, 0x7, 0x0, 0x0, {{0x7}, {0x340, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x99, 0x6, {0x5c36, 'filter\x00', 0x2, 0x4, "eb4ce5fa65b2d2ed5f44d7eaf78c26374cb99638509745fddeb3a75fd0a8bb86d5c58cbbe96bee9fb08a6376a2c990b3e6c880bd929dadf4f53a1e5dc02921b9f4cc69ec24b4ad8dc63a7f7ed1a8bec99012eee8275bf7445c0a1b24f91b8dd305c5ebbee387282b08f0c818ff57b0"}}, @TCA_IPT_TARG={0x2d, 0x6, {0x0, 'filter\x00', 0x1e, 0xa9, "834afa"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x39, 0x6, {0x3, 'raw\x00', 0x6, 0x9d9a, "3deacddaceeb772267a3ee33f4f736"}}, @TCA_IPT_TARG={0x9d, 0x6, {0x9, 'mangle\x00', 0xc2, 0x7f, "caa7b5bdc0fbb32d0e6a68ffa93369775562c841e13419e37bf35ca0a12ad99acf4f556ea1d9b9e79b66e37ec10da202b41fce9629ef911e3eba582a84eb83638ae66696b6361f23f205087fe6d57fbfacfc6a50adc27d3918a0a200e5802f16732f8a2d4cd70e66ece2ad3ed22541af9d1bea"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x101, 0x6, {0x6, 'nat\x00', 0x1, 0x8, "9de23f0ad5234c9c390dd30d4fe9dd57ae1cb4a3eb539b536e4f80cc0d9a4b9f59b221762c6d52f8526e361d429168efe05b138c585f2de9beb2dd53bb768cc1abdaceed7091ed3b4fa48190c962bec948d868f2a87a97a8adff7282618f33404bebb9b27da92de617bc60d2cd6a08c562daf9c0e9d39003fb953bc8488c0afe490b55b15049dc7c00ef1cec1558fdb2eea59c3faf698ff2c296fcecaf3f0d065260538e6363ee790dddded9d5e0c6839d9c5cd226d838617e1d89c8c962d8bbb4b9bf3307846dd921e8bd157cee5e7a6969c19c71b6fc"}}, @TCA_IPT_TARG={0x59, 0x6, {0x9, 'nat\x00', 0x1, 0x2, "e885583ce4f3756ad040e652de6a44ccbd690ae6e7778ffdb3e7c65bf91128f4f63efcee9968ba25be7e349f3964d3"}}]}, {0x3b, 0x6, "c60a62c64a50cc76d2eef41ad328fe44db0097712c9eb80bb1923cf9a74fc2526aff20d50bb74cd855759fbb785fd6f87de9b71565128a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2038}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) 5.287124081s ago: executing program 2 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000040)) unshare(0x20000400) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000000ff000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x11c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20048800) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x7, 0x4) 4.30499313s ago: executing program 2 (id=895): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000200000000000000000080008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) writev(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) recvmmsg$unix(r3, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000002, 0x8010, 0xffffffffffffffff, 0xc25a7000) (rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002440)=[{&(0x7f0000001040)="05faa1d13aeb87e8c95d3ae29c4589f75608cf4f96f66c23ae2a2e5200909984738c875ae7c648fa34b6c134239aa3a71086aeeab8d0e33bb78ee36adb1ff9ecb91db75ee6048b581b0fa9273005916e6c3bd9f4cb3d44291d503540a24fd7f44566f6969512e8f28be370e9", 0x6c}], 0x1000000000000255, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x10, 0x2, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) 3.156225023s ago: executing program 3 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000000101042100000000000000020000002400018014000e0000000100e000000108000200e00000010c00b9d9279cf38cf03500002400028014008180080001000000000008000200ac1414aa0c000280050001000000000008000740000000002000068008000100e000000214000380060002004e220000060001004e230000"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x5d, &(0x7f0000000080)=""/93, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x9, 0xff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x3, 0x7, 0x7}, {0x0, 0x1, 0x9, 0x8}, {0x4, 0x3, 0x7, 0x1}, {0x4, 0x3, 0xe, 0x7}, {0x3, 0x4, 0xa, 0x6}, {0x3, 0x2, 0x2, 0x3}, {0x1, 0x2, 0x9, 0x7}, {0x0, 0x2, 0xe, 0x3}, {0x5, 0x3, 0x8, 0xa}, {0x4, 0x3, 0x2, 0x8}], 0x10, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket(0x40000000015, 0x805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r6], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001580)={'wg1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000015c0)={0xffffffffffffffff, 0x1, 0x8, 0x1, @vifc_lcl_ifindex=r8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r3}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r9}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x0, 0x84, 0x15, &(0x7f0000000380)="f831bfaaa24fc9a652158364f4301a87bd1c684c56d14f9b0694fc2e0255a37a2f4d80bb3f2e28b23e73738f17fd22e81d05ccfd54d18c62e04bf94288a0e885f88d60c2c7528b95f40756f8fec35394fef3441ca245f6df5fc599721ba7ccd94996ed3870cdd9fe79e03112179244856f4bd6ab6e5d99e645d9c67fd94a776e8fb7297f", &(0x7f0000000440)=""/21, 0xe6, 0x0, 0x1000, 0x14, &(0x7f0000000480)="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", &(0x7f0000001480)="7e7c3b33854714fb8700e433c55786b96668a0db", 0x2, 0x0, 0x63}, 0x50) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x5, @loopback, 0x4e21, 0x0, 'sh\x00', 0x1, 0x9, 0x3f}, 0x2c) 3.064204454s ago: executing program 3 (id=905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x711, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0x7, 0xe}, {0xb, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) writev(r7, &(0x7f0000000640)=[{&(0x7f00000002c0)="5810", 0x2}], 0x1) close(r7) recvfrom$unix(r7, &(0x7f0000000780)=""/4096, 0x1000, 0x10002, &(0x7f0000001780)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x3, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd330bd96899987d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x4008000) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000001100010000000000ffdbdf25100010000b00000056ccabd869c20300"], 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.819521079s ago: executing program 0 (id=907): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8846, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1c, 0x4004084, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2.659400177s ago: executing program 0 (id=909): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @remote, 0xa}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x200, 0x2, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="486fa6efcfa3d329c1260eb96602c6a2084e57f369efa53232ade45a7244cba22ba8a3938271a1edd8fec1d9506b86ab48d678c95baa0a3c155b6b56e1af46666ece4ba6923d72390bedbe83a063d79554b72a3d6006e73c0613e24f4ccbdee575b770965da605995d5a5c9ba25e59344a2638c50a9add35958f1d41b882c99f8307f7efb9cd893c81cd4729e18bee54271bc74da39ee7c8790632ed", 0x9c, 0x81, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @private2, 0x3}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000500)={{[0x80000000, 0x7, 0x0, 0x7]}, 0x0, 0x1, 0x7, 0x0, &(0x7f0000000400)=[{{@align=0x40, {0x5ec6, 0x4, 0x80000001, 0x8}}, 0x1, 0x0, ']&.+)@@.\\,(\x00'}, {{@_ha_fsid={[0x9, 0x4]}, {0xc, 0x7ff, 0x1, 0x2}}, 0x2, 0x0, '\x00'}, {{@align=0x16000000000000, {0xeb6, 0x2, 0xfffffffc, 0x1}}, 0xa0aa, 0x0, ':/#^\x00'}, {{@align=0x800, {0x0, 0x5, 0x1000, 0x45b}}, 0x0, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x1f85, 0x1000]}, {0x8, 0xff, 0x7, 0x7fffffff}}, 0x3, 0x0, 'nl80211\x00'}, {{@align=0x14000, {0x2, 0xf, 0xfffffffb, 0x8}}, 0xe, 0x0, '}(@]\x1bn+\x00'}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc4}, 0x4044840) getpeername$unix(r3, &(0x7f0000000800), &(0x7f0000000880)=0x6e) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000002200)={{r4, &(0x7f0000000900)='veth0_to_batadv\x00', 0x400, &(0x7f0000000940)={@_ha_fsid={[0x8, 0x10]}, {0x3, 0xfffe, 0xaf36, 0x8000000000000001}}, 0x7ff, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x9}, 0x9, &(0x7f00000020c0)=[{0x3, 0x2, &(0x7f0000000a00)=',\x00', &(0x7f0000000a40)="bf81de557480a988a7f331934f7f3b0a27bd66bb4d342623106dc38f35d651afdb2c15d51523c6bf24992dc4c4139b680dd4b0293ff740722c349b67fcccf73205a7d042a13ecc3ea0b1d13802abf2ee1ad303b8d0bd5b2858df669ef1bb99eab89a6198395a8aa3e95086be2820bf53470ca4b86f73366e366d0993362ce821efa2b939c29037c692ea0a10d0a38005bc1eb3fece3a73dcf0aba0b9e097afdf6c3e28bfb2", 0xa5, 0x2}, {0x0, 0x5, &(0x7f0000000b00)=']&.+)@@.\\,(\x00', &(0x7f0000000b40)="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", 0x1000, 0x2}, {0x1, 0x7, &(0x7f0000001b40)='\x00', &(0x7f0000001b80)="4d364e9d6b9de739fba62696c9f526e9964a5115aa972192db9a0eea8ef4f2ae7e585ece633b089daba196ecb0ebe0054edf85e367b24b9191ef86fdf4ec3864f1ce7e6bc1bed9217eeb7440142d25217c427b52ef68f93776ce2bb02a1fd77bb2352836c4f28030df8d464c4402decb3715e52f883aa59312062d0805b55f970e691b43d26865aa122c83fa91d6be279c57bf974e29db0cff679ca91b72ec0f9757", 0xa2}, {0x3, 0x6, &(0x7f0000001c40)='veth1_to_bridge\x00', &(0x7f0000001c80)="1298abc44552127a986f01825a74a5db127cb2404ab3ea67c1de35f338e0071204e7e84f757b8ef59027ffcc743da596d6e687ab3bdb501b1b340c7e3e6b63792507cf4fdabac394fd31f5a8910ce2f8743e03cd5cda00c5609e8cef72383239d8b1c03330b2411109ecbfb92846214717f919ecd8333b79f631ca111adc746dd6f3ccb9c1dde389e652b992762c0a105ae48545be25b1db68e3a13ed4fd4db6e971d5ff2f43c21541bc15a5b01c", 0xae, 0x30}, {0x3, 0x1, &(0x7f0000001d40)='#`$-[^\x00', &(0x7f0000001d80)="58f49d485044d4d4528d103c3a7529f265275683957331056ff0cf2ae2b506732014500519b19973d60c64f41196094a55f002548ca8dc2a454f886666bce11b866fd207606466aa956d6b055d5c9fc9e744f5c242992443b0be0c240d17fcdb4663cc6352fa53bbc4ba268ce8abe1d079ec7e58e71cd05b89c19782e5e5c90a8d992a9d8f34c6d67a6bc35a5eaba6bb25d3691ea24faef87cb05f338bc4592ef59da4d96a9ed3400c28b95d33b6d909871916b475b0ac22b5a44dd33a4d764a840587", 0xc3, 0x2}, {0x2, 0xffffffff, &(0x7f0000001e80)='\xa4[{\\&!;}\x14:\x00', &(0x7f0000001ec0)="c226eab155e6437c322f101a42ff6000b08809e12d9d20289506d3478db14a7b4aa27e3e3b5c12f1db278e5e1a7616a41093b53c132c", 0x36, 0x20}, {0x1, 0x9, &(0x7f0000001f00)='&-\x00', &(0x7f0000001f40)="193d24e47d73460720303b706611311686784a6c3721d88905255e4a32a04ec587ef76d3aaeddf0f90a8a40cce5434bca8e75d50bde2f59fbea39b07371c67f68bbbc6ecdb0f74827912", 0x4a, 0x22}, {0x0, 0x1, &(0x7f0000001fc0)='/\\\x00', &(0x7f0000002000)="46737fb02336c6ba0d25277a4755fb91af51ede1ca1a8c9c29aa84239b1a65c65970c52a83ab9618a51975448095f4af2507a8326e2e9d0dea4c42112a", 0x3d}, {0x3, 0xf9d, &(0x7f0000002040)='nl80211\x00', &(0x7f0000002080)="87deb9f7482fadb36fa47a990915531d9c4a8b725c6ca88ee83765b74a4192", 0x1f, 0x936bdef99f0b6d1c}]}) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r9) syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r5) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f00000022c0)=0x7c2d, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000002540)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002500)={&(0x7f0000002340)={0x19c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4040800}, 0x408c4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r10, &(0x7f00000037c0)={&(0x7f0000002580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002600)=""/64, 0x40}, {&(0x7f0000002640)=""/52, 0x34}, {&(0x7f0000002680)=""/40, 0x28}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x4, &(0x7f0000003700)=""/145, 0x91}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000003800)={{{@in=@dev, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000003900)=0xe8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000003940)={0x3, 0x6, 0x0, 0x10001, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003a00)={{r9, 0xffffffffffffffff}, &(0x7f0000003980), &(0x7f00000039c0)=r9}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003c80)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003f40)={0x19, 0x19, &(0x7f0000003a40)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000003b40)='GPL\x00', 0xfffffff7, 0xc5, &(0x7f0000003b80)=""/197, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, r12, 0x8, &(0x7f0000003cc0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x0, &(0x7f0000003f00), 0x0, 0x10, 0x80}, 0x94) 2.455020565s ago: executing program 0 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd35, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0xc000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) close(r2) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8181"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r6, r7, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x1, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.348553996s ago: executing program 3 (id=913): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x5}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x24008001) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) 2.198694148s ago: executing program 3 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f0000000380)=@ax25={{0x3, @null}, [@null, @bcast, @null, @netrom, @bcast, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)=""/49, 0x31}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/174, 0xae}, {&(0x7f0000001b40)=""/39, 0x27}, {&(0x7f0000001b80)=""/154, 0x9a}], 0x6}, 0x9c12}, {{&(0x7f0000001cc0)=@llc, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d40)=""/210, 0xd2}, {&(0x7f0000001e40)=""/147, 0x93}, {&(0x7f0000001f00)=""/205, 0xcd}], 0x3, &(0x7f0000002040)=""/134, 0x86}, 0x7}, {{&(0x7f0000002100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/123, 0x7b}, {&(0x7f0000002300)=""/191, 0xbf}, {&(0x7f00000023c0)=""/65, 0x41}], 0x4, &(0x7f0000004000)=""/4096, 0x1000}, 0x6}], 0x4, 0x10001, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.952131153s ago: executing program 1 (id=916): socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000) 1.63984705s ago: executing program 1 (id=917): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x40}], 0x15, 0x10040, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000409000000000000fb509640b418aa33e9523c68cded31a4f166938b322b475f2137e25f346d359dce8eb082bed01becab40a1cc96ff6ce438812e319a1d89", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r11 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r10, r10, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r0, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) 1.616160671s ago: executing program 3 (id=918): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140b, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a00000004000000140001"], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) splice(r3, 0x0, r6, 0x0, 0x100000000010d00, 0xf) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="5c00000012006bab9e3fe3d86e6c1d000014a10da6000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700b2b7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380), 0x10) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) 1.229931464s ago: executing program 0 (id=919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1a81, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 1.084635781s ago: executing program 1 (id=921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff16901dc11fffe8800000e63142c213d0a527cf1dd2c2fc74c012c06bc9e8100000000000000000084000001fc01000000000000cf54cb21000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x0, 0x5, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x20, 0x3ff, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40b2b1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0x56, '\x00', r1, 0x0, r0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xead}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040001}, 0xc004) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xff, '\x00', r7, r2, 0x4, 0x5, 0x5}, 0x50) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000004010911020000030000000000000000"], 0x18) 974.779796ms ago: executing program 4 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x50}}, 0x20000040) 823.75763ms ago: executing program 4 (id=924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000a0000000800000007000000c1000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000200000000000000d256489aa8783b34d25d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000080033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) close(0x3) (async) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x200000000000018b, &(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES32=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@ifindex=r4, 0xa, 0x1, 0x3, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880), &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r3, r4, 0x25, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r6}}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r3, r4, 0x25, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r6}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x40}, 0x10}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b92010024001280090001", @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b92010024001280090001", @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x3b8, 0xe8, 0x0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe0, 0x9a}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0xffffffff, 0x10, 0x1, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xd8dd, 0x6, 0xfff8, 0x1, 0xa260, 0x8, 'team_slave_0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf8, 0x4, {0xffffffffffffffff}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 704.150035ms ago: executing program 1 (id=925): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x4, 0xef, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x13, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94) 703.787015ms ago: executing program 0 (id=926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8032, 0xffffffffffffffff, 0x8884d000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x70, 0x29, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x0, 0xffe0}, {0xf, 0x8}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cbs={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 606.229311ms ago: executing program 3 (id=927): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) socket(0x1e, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="e3e5277bfb8097a9d1ca7ee79d11da3a87a651337b9ba71fde1d2312423c031f74d7d9be901f298168530cb1a4ac94526e1f016e0ef86d13fb1cb7263222a71966a8b6a324c7aceec57324cd806022625d0e0fac169d58d3ea90517b73b47586af6f1c53d7eb1b9b5e02ccda6666d34393d4e836f9255832cdcc14beee3beff8a7250e3a462ffb756ba2c3576c108a71f89f7a464560153f68407fc4b75f3c8291c20900aa8d71a51df9125492193cd9f576f3d0", 0xb4}], 0x1}, 0x0) 581.134602ms ago: executing program 4 (id=928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xdc94}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'mcryptd(michael_mic)\x00'}, 0x0, 0x280}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffee1, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffd71, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'caif0\x00', {}, 0xff}) 528.031833ms ago: executing program 1 (id=929): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000003000000040000e200000000100000b0aa9b6f1657ed691ea1df1555083273a66bb01608b1df992d3fd2f80595681f371f50472b1db281ae87a3e5b0f10e", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 479.791092ms ago: executing program 0 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r6) write$cgroup_devices(r4, 0x0, 0x6) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="05840000008000002c0012800b00010062726964676500001c0002800800320001000000080001001400004008000500"], 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 375.430632ms ago: executing program 4 (id=931): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000070000c5100000fcffffff18400000f9ffffff000000000000000085100000fdffffff"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 254.989614ms ago: executing program 2 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000000e403000000000009687a4915063d41df2ecd868d67bb4ad8f1841cf7e7acfc710422e3622a4d780f606400cb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c0010800400058004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000003010102000000000000000100060000000c0019800800010008010000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x17, 0x0, './file0\x00'}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000010651fbe347b2c2b00000c0001800800"], 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x48, r8, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20840}, 0x40) 234.097267ms ago: executing program 4 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x0, 0x188, 0x338, 0xa0, 0x188, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40, 0x800, @broadcast, 0x4e22}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'bond_slave_0\x00', 'bridge_slave_0\x00', {0x7f}, {0xff}, 0x1283973a686535a0, 0x1, 0x41}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@ip={@rand_addr=0x64010102, @remote, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'rose0\x00', {0xff}, {}, 0x84, 0x2, 0xb}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x5], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xf, 0xa270}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x0, 0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @remote, 0xffffff00, 0xff000000, 'pimreg0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x5e, 0x3, 0x21}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r5, r3}, 0xc) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000080)='Xw', 0x2, 0x20000000, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1003, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 190.012274ms ago: executing program 1 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008510000004000000c608000000000000180000000000000000000000000000009500000000000000950000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) unshare(0x20000400) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5eb, 0x2, 0x88a8}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'syz_tun\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c5}, 0x48880) 0s ago: executing program 4 (id=935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x1, {{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@mcast1, @in=@multicast1, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 76.628766][ T5610] cgroup: Unknown subsys name 'net' [ 76.755408][ T5610] cgroup: Unknown subsys name 'cpuset' [ 76.765199][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.330642][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.024592][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.039222][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.051431][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.059633][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.067249][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.073178][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.076007][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.087715][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.096105][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.105357][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.105523][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.120235][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.127678][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.129715][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.135370][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.149026][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.149722][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.160121][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.168736][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.177457][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.186784][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.195045][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.202723][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.211983][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.219734][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.911489][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.919444][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.927145][ T5622] bridge_slave_0: entered allmulticast mode [ 83.935670][ T5622] bridge_slave_0: entered promiscuous mode [ 83.978977][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.986379][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.993783][ T5622] bridge_slave_1: entered allmulticast mode [ 84.001337][ T5622] bridge_slave_1: entered promiscuous mode [ 84.101230][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.126174][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.133669][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.140971][ T5631] bridge_slave_0: entered allmulticast mode [ 84.148340][ T5631] bridge_slave_0: entered promiscuous mode [ 84.168995][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.178336][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.185615][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.192792][ T5626] bridge_slave_0: entered allmulticast mode [ 84.199957][ T5626] bridge_slave_0: entered promiscuous mode [ 84.223754][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.230877][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.238399][ T5631] bridge_slave_1: entered allmulticast mode [ 84.245618][ T5631] bridge_slave_1: entered promiscuous mode [ 84.269090][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.276384][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.283541][ T5626] bridge_slave_1: entered allmulticast mode [ 84.290819][ T5626] bridge_slave_1: entered promiscuous mode [ 84.302581][ T5627] Bluetooth: hci3: command tx timeout [ 84.308502][ T50] Bluetooth: hci2: command tx timeout [ 84.312307][ T5639] Bluetooth: hci1: command tx timeout [ 84.314266][ T5633] Bluetooth: hci4: command tx timeout [ 84.320461][ T4939] Bluetooth: hci0: command tx timeout [ 84.378843][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.386392][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.393824][ T5623] bridge_slave_0: entered allmulticast mode [ 84.401025][ T5623] bridge_slave_0: entered promiscuous mode [ 84.426630][ T5622] team0: Port device team_slave_0 added [ 84.434652][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.444252][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.451473][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.458744][ T5623] bridge_slave_1: entered allmulticast mode [ 84.466088][ T5623] bridge_slave_1: entered promiscuous mode [ 84.475301][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.496804][ T5622] team0: Port device team_slave_1 added [ 84.504652][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.538947][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.608154][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.615660][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.623217][ T5624] bridge_slave_0: entered allmulticast mode [ 84.630539][ T5624] bridge_slave_0: entered promiscuous mode [ 84.649860][ T5626] team0: Port device team_slave_0 added [ 84.657918][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.669161][ T5631] team0: Port device team_slave_0 added [ 84.675435][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.682660][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.689838][ T5624] bridge_slave_1: entered allmulticast mode [ 84.697472][ T5624] bridge_slave_1: entered promiscuous mode [ 84.705874][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.712870][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.738795][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.752355][ T5626] team0: Port device team_slave_1 added [ 84.759892][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.771176][ T5631] team0: Port device team_slave_1 added [ 84.801109][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.808162][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.834987][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.917181][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.924287][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.950594][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.964406][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.976532][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.986395][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.993581][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.019593][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.032899][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.039898][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.065943][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.079586][ T5623] team0: Port device team_slave_0 added [ 85.086146][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.094460][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.120833][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.160741][ T5623] team0: Port device team_slave_1 added [ 85.198086][ T5624] team0: Port device team_slave_0 added [ 85.230544][ T5622] hsr_slave_0: entered promiscuous mode [ 85.237400][ T5622] hsr_slave_1: entered promiscuous mode [ 85.247329][ T5624] team0: Port device team_slave_1 added [ 85.277558][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.285528][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.311578][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.360857][ T5631] hsr_slave_0: entered promiscuous mode [ 85.367608][ T5631] hsr_slave_1: entered promiscuous mode [ 85.374040][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 85.379843][ T5631] Cannot create hsr debugfs directory [ 85.386465][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.393514][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.419451][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.445432][ T5626] hsr_slave_0: entered promiscuous mode [ 85.451799][ T5626] hsr_slave_1: entered promiscuous mode [ 85.458039][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 85.463793][ T5626] Cannot create hsr debugfs directory [ 85.520190][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.527620][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.554613][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.567353][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.574349][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.600278][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.750666][ T5623] hsr_slave_0: entered promiscuous mode [ 85.757354][ T5623] hsr_slave_1: entered promiscuous mode [ 85.763647][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 85.769394][ T5623] Cannot create hsr debugfs directory [ 85.815285][ T5624] hsr_slave_0: entered promiscuous mode [ 85.821643][ T5624] hsr_slave_1: entered promiscuous mode [ 85.833036][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 85.838813][ T5624] Cannot create hsr debugfs directory [ 86.237018][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.252970][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.261392][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.273599][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.281731][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.292775][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.309486][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.320485][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.372750][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.382706][ T4939] Bluetooth: hci0: command tx timeout [ 86.388172][ T5639] Bluetooth: hci1: command tx timeout [ 86.393747][ T5627] Bluetooth: hci3: command tx timeout [ 86.394279][ T50] Bluetooth: hci2: command tx timeout [ 86.404686][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.409007][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.411834][ T5633] Bluetooth: hci4: command tx timeout [ 86.427258][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.436264][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.447322][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.455146][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.465283][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.567328][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.577593][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.587078][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.596295][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.604383][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.615025][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.627867][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.637462][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.775591][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.808608][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.830424][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.853800][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.875297][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.891106][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.900753][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.911251][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.939072][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.987645][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.029170][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.041499][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.063871][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.075049][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.103325][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.117586][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.143943][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.155355][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.175974][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.190763][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.213409][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.220806][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.244964][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.252170][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.261813][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.268996][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.293595][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.300723][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.366130][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.424871][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.461335][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.468453][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.502359][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.523884][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.531076][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.619895][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.671663][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.678878][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.706425][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.735704][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.742909][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.788923][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.845400][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.852609][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.879338][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.886539][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.463668][ T5633] Bluetooth: hci2: command tx timeout [ 88.463703][ T4939] Bluetooth: hci1: command tx timeout [ 88.469135][ T5633] Bluetooth: hci3: command tx timeout [ 88.483043][ T50] Bluetooth: hci0: command tx timeout [ 88.488530][ T5627] Bluetooth: hci4: command tx timeout [ 88.574478][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.696208][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.765966][ T5622] veth0_vlan: entered promiscuous mode [ 88.816558][ T5622] veth1_vlan: entered promiscuous mode [ 88.913355][ T5622] veth0_macvtap: entered promiscuous mode [ 88.957908][ T5622] veth1_macvtap: entered promiscuous mode [ 89.003927][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.078215][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.107563][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.156223][ T1028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.188419][ T1028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.220964][ T1028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243908][ T1133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.278872][ T5626] veth0_vlan: entered promiscuous mode [ 89.295177][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.320251][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.365778][ T5626] veth1_vlan: entered promiscuous mode [ 89.409480][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.418648][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.495965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.507203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.523321][ T5631] veth0_vlan: entered promiscuous mode [ 89.546760][ T5624] veth0_vlan: entered promiscuous mode [ 89.553620][ T5626] veth0_macvtap: entered promiscuous mode [ 89.586582][ T5631] veth1_vlan: entered promiscuous mode [ 89.599213][ T5626] veth1_macvtap: entered promiscuous mode [ 89.610094][ T5623] veth0_vlan: entered promiscuous mode [ 89.621411][ T5624] veth1_vlan: entered promiscuous mode [ 89.628729][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.672954][ T5623] veth1_vlan: entered promiscuous mode [ 89.690311][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.739311][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.782476][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.792678][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820711][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.830062][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847338][ T5631] veth0_macvtap: entered promiscuous mode [ 89.858268][ T5823] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 89.869229][ T5624] veth0_macvtap: entered promiscuous mode [ 89.895720][ T5631] veth1_macvtap: entered promiscuous mode [ 89.923785][ T5624] veth1_macvtap: entered promiscuous mode [ 89.986054][ T5623] veth0_macvtap: entered promiscuous mode [ 90.015816][ T5825] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6'. [ 90.046779][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.055442][ T5623] veth1_macvtap: entered promiscuous mode [ 90.089974][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.112714][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.124792][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.134734][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.143486][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.161818][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 90.175313][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184478][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.205316][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.214420][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.241530][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.250833][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.278150][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.287307][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.311770][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.320989][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331706][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.367974][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.439514][ T1133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.444474][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.457003][ T1133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457055][ T1133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457092][ T1133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.542834][ T5627] Bluetooth: hci3: command tx timeout [ 90.543174][ T5633] Bluetooth: hci1: command tx timeout [ 90.548318][ T5627] Bluetooth: hci0: command tx timeout [ 90.553710][ T4939] Bluetooth: hci2: command tx timeout [ 90.553738][ T4939] Bluetooth: hci4: command tx timeout [ 90.705898][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.726058][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.815079][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.838718][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.875574][ T5835] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 90.876939][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.908167][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.213403][ T5838] pimreg1: renamed from bridge0 (while UP) [ 91.232631][ T5838] pimreg1: entered allmulticast mode [ 91.241848][ T5838] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 91.369606][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.389831][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437818][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.464019][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.556614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.573797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.865664][ T187] cfg80211: failed to load regulatory.db [ 92.165866][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 92.257913][ T5857] Zero length message leads to an empty skb [ 92.320026][ T5855] syzkaller0: entered promiscuous mode [ 92.334076][ T5855] syzkaller0: entered allmulticast mode [ 92.361269][ T5853] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 92.397624][ T5853] syzkaller1: linktype set to 780 [ 92.405528][ T5855] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.12'. [ 92.460334][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 92.560596][ T5853] syzkaller0: entered promiscuous mode [ 92.566572][ T5853] syzkaller0: entered allmulticast mode [ 92.575439][ T5863] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 92.904497][ T5888] netlink: 'syz.4.18': attribute type 10 has an invalid length. [ 93.917834][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.926988][ T5888] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 93.947128][ T5866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.122834][ T5897] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 94.273390][ T5904] sctp: [Deprecated]: syz.1.23 (pid 5904) Use of int in maxseg socket option. [ 94.273390][ T5904] Use struct sctp_assoc_value instead [ 94.400262][ T5911] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 94.653464][ T5920] macsec1: entered promiscuous mode [ 94.675518][ T5920] dummy0: entered promiscuous mode [ 94.697607][ T5920] macsec1: entered allmulticast mode [ 94.718841][ T5920] dummy0: entered allmulticast mode [ 94.764665][ T5920] dummy0: left allmulticast mode [ 94.788455][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 94.826399][ T5733] dummy0: left promiscuous mode [ 94.983916][ T5941] syz_tun: entered allmulticast mode [ 95.045816][ T5733] IPVS: starting estimator thread 0... [ 95.071176][ T5940] syz_tun: left allmulticast mode [ 95.183951][ T5946] IPVS: using max 34 ests per chain, 81600 per kthread [ 95.309753][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 95.426893][ T5960] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 95.439814][ T5960] bond1 (unregistering): Released all slaves [ 95.526877][ T5968] syzkaller1: entered promiscuous mode [ 95.534497][ T5968] syzkaller1: entered allmulticast mode [ 96.224361][ T5993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.568867][ T6016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.53'. [ 96.596634][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 96.663523][ T6017] netlink: 244 bytes leftover after parsing attributes in process `syz.0.52'. [ 96.895199][ T6034] netlink: 'syz.3.57': attribute type 7 has an invalid length. [ 96.939882][ T6034] netlink: 'syz.3.57': attribute type 8 has an invalid length. [ 97.122747][ T6045] tipc: Started in network mode [ 97.129492][ T6045] tipc: Node identity 9294727ab9b3, cluster identity 4711 [ 97.138435][ T6045] tipc: Enabled bearer , priority 0 [ 97.150897][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.59'. [ 97.164397][ T6045] syzkaller0: entered promiscuous mode [ 97.170498][ T6045] syzkaller0: entered allmulticast mode [ 97.184791][ T6045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 97.206840][ T6042] syzkaller0: entered promiscuous mode [ 97.220037][ T6042] syzkaller0: entered allmulticast mode [ 97.250368][ T6045] tipc: Resetting bearer [ 97.292136][ T6052] tipc: Resetting bearer [ 97.326403][ T6052] tipc: Disabling bearer [ 97.711085][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.724221][ T6075] netlink: 112 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.924830][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 97.964404][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 98.232752][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 98.637253][ T6121] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 98.919136][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.89'. [ 98.997643][ T6146] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 99.044306][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 99.102612][ T6149] netdevsim netdevsim3: Direct firmware load for á failed with error -2 [ 99.112364][ T6149] netdevsim netdevsim3: Falling back to sysfs fallback for: á [ 99.141703][ T6154] Bluetooth: MGMT ver 1.23 [ 99.723056][ T6185] block nbd0: Unsupported socket: should be TCP or UNIX. [ 99.817656][ T6186] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 99.853377][ T6186] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 100.852940][ T6242] Illegal XDP return value 4294967282 on prog (id 25) dev N/A, expect packet loss! [ 100.977096][ T6248] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 101.016162][ T6248] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 101.282872][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.793900][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.854171][ T6272] __nla_validate_parse: 5 callbacks suppressed [ 101.854191][ T6272] netlink: 180 bytes leftover after parsing attributes in process `syz.4.115'. [ 101.880435][ T6276] erspan0: entered promiscuous mode [ 101.909635][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 102.041472][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 102.089698][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 102.091012][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 102.147088][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 102.298126][ T6302] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.119'. [ 102.672974][ T6325] veth1_macvtap: left promiscuous mode [ 102.722005][ T6325] macsec0: entered promiscuous mode [ 102.747345][ T6327] veth1_macvtap: entered promiscuous mode [ 102.762471][ T6327] macsec0: left promiscuous mode [ 102.902422][ T6335] netlink: 148 bytes leftover after parsing attributes in process `syz.1.126'. [ 102.950279][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 103.149836][ T6347] 8021q: VLANs not supported on lo [ 103.308991][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.512355][ T6365] tipc: Started in network mode [ 103.544450][ T6365] tipc: Node identity aed3850f78e, cluster identity 4711 [ 103.590702][ T6365] tipc: Enabled bearer , priority 0 [ 103.738097][ T200] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 103.871008][ T6372] syzkaller0: entered promiscuous mode [ 103.891549][ T6372] syzkaller0: entered allmulticast mode [ 103.914969][ T6372] tipc: Resetting bearer [ 104.000861][ T6362] tipc: Resetting bearer [ 105.474440][ T6362] tipc: Disabling bearer [ 105.611488][ T5733] tipc: Node number set to 3593700623 [ 105.996038][ T6450] netlink: 'syz.4.147': attribute type 13 has an invalid length. [ 106.020596][ T6445] vlan2: entered promiscuous mode [ 106.460890][ T6464] 0ªX¹¦À: renamed from batadv0 (while UP) [ 106.470325][ T6464] 0ªX¹¦À: entered allmulticast mode [ 106.476253][ T6464] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.556442][ T6418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.802033][ T6471] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 108.833133][ T6471] __nla_validate_parse: 2 callbacks suppressed [ 108.833149][ T6471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.153'. [ 108.951578][ T6483] FAULT_INJECTION: forcing a failure. [ 108.951578][ T6483] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.026594][ T6483] CPU: 1 UID: 0 PID: 6483 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT(full) [ 109.026618][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.026637][ T6483] Call Trace: [ 109.026644][ T6483] [ 109.026652][ T6483] dump_stack_lvl+0xe8/0x150 [ 109.026696][ T6483] should_fail_ex+0x40c/0x560 [ 109.026723][ T6483] _copy_from_user+0x2d/0xb0 [ 109.026743][ T6483] ___sys_sendmsg+0x1c6/0x360 [ 109.026780][ T6483] ? __lock_acquire+0x683/0x2cf0 [ 109.026812][ T6483] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.026868][ T6483] ? __fget_files+0x2a/0x420 [ 109.026895][ T6483] ? __fget_files+0x3a2/0x420 [ 109.026932][ T6483] __x64_sys_sendmsg+0x1b1/0x290 [ 109.026958][ T6483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.026998][ T6483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.027031][ T6483] do_syscall_64+0x174/0x580 [ 109.027058][ T6483] ? trace_irq_disable+0x3b/0x140 [ 109.027083][ T6483] ? clear_bhb_loop+0x40/0x90 [ 109.027105][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.027124][ T6483] RIP: 0033:0x7f4b66f9de99 [ 109.027145][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.027161][ T6483] RSP: 002b:00007f4b67e42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.027179][ T6483] RAX: ffffffffffffffda RBX: 00007f4b67225fa0 RCX: 00007f4b66f9de99 [ 109.027191][ T6483] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 109.027202][ T6483] RBP: 00007f4b67e42090 R08: 0000000000000000 R09: 0000000000000000 [ 109.027213][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.027223][ T6483] R13: 00007f4b67226038 R14: 00007f4b67225fa0 R15: 00007ffde32ce0c8 [ 109.027251][ T6483] [ 109.243997][ T6487] netlink: 'syz.0.159': attribute type 27 has an invalid length. [ 109.272617][ T6487] sock: sock_set_timeout: `syz.0.159' (pid 6487) tries to set negative timeout [ 109.660046][ T6499] syzkaller1: entered allmulticast mode [ 109.688287][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.899775][ T6509] x_tables: unsorted entry at hook 1 [ 110.077179][ T6520] netlink: 240 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.180397][ T6523] FAULT_INJECTION: forcing a failure. [ 110.180397][ T6523] name failslab, interval 1, probability 0, space 0, times 1 [ 110.219856][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) [ 110.219884][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.219897][ T6523] Call Trace: [ 110.219905][ T6523] [ 110.219913][ T6523] dump_stack_lvl+0xe8/0x150 [ 110.219951][ T6523] should_fail_ex+0x40c/0x560 [ 110.219988][ T6523] should_failslab+0xa8/0x100 [ 110.220023][ T6523] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 110.220050][ T6523] ? local_lock_release+0x9c/0x160 [ 110.220082][ T6523] ? __alloc_skb+0x1d7/0x7a0 [ 110.220101][ T6523] ? __alloc_skb+0x1d7/0x7a0 [ 110.220128][ T6523] __alloc_skb+0x1d7/0x7a0 [ 110.220155][ T6523] netlink_sendmsg+0x5d4/0xb40 [ 110.220192][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.220222][ T6523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.220252][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.220277][ T6523] sock_sendmsg_nosec+0x13a/0x180 [ 110.220310][ T6523] ____sys_sendmsg+0x54e/0x850 [ 110.220341][ T6523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.220376][ T6523] ? import_iovec+0x73/0xa0 [ 110.220413][ T6523] ___sys_sendmsg+0x2a5/0x360 [ 110.220437][ T6523] ? __lock_acquire+0x683/0x2cf0 [ 110.220472][ T6523] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.220536][ T6523] ? __fget_files+0x2a/0x420 [ 110.220564][ T6523] ? __fget_files+0x3a2/0x420 [ 110.220605][ T6523] __x64_sys_sendmsg+0x1b1/0x290 [ 110.220633][ T6523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.220678][ T6523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.220716][ T6523] do_syscall_64+0x174/0x580 [ 110.220751][ T6523] ? trace_irq_disable+0x3b/0x140 [ 110.220777][ T6523] ? clear_bhb_loop+0x40/0x90 [ 110.220801][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.220820][ T6523] RIP: 0033:0x7f895259de99 [ 110.220837][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.220854][ T6523] RSP: 002b:00007f89533f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.220874][ T6523] RAX: ffffffffffffffda RBX: 00007f8952825fa0 RCX: 00007f895259de99 [ 110.220888][ T6523] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 110.220899][ T6523] RBP: 00007f89533f2090 R08: 0000000000000000 R09: 0000000000000000 [ 110.220911][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.220922][ T6523] R13: 00007f8952826038 R14: 00007f8952825fa0 R15: 00007ffdfacb9f48 [ 110.220951][ T6523] [ 110.496284][ T6526] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.171'. [ 110.942425][ T6543] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 111.417469][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 111.454674][ T6568] IPv6: Can't replace route, no match found [ 111.479196][ T6566] bond1: entered allmulticast mode [ 111.484129][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 111.512277][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 111.608563][ T36] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 111.628930][ T6584] netlink: 100 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.645268][ T6572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.656766][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 111.698636][ T6585] syzkaller1: entered promiscuous mode [ 111.704448][ T6585] syzkaller1: entered allmulticast mode [ 111.831131][ T6594] netlink: 200 bytes leftover after parsing attributes in process `syz.1.192'. [ 111.846554][ T6595] netlink: 'syz.4.193': attribute type 4 has an invalid length. [ 111.942773][ T6602] openvswitch: netlink: Message has 12 unknown bytes. [ 111.962416][ T6602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.988061][ T6602] openvswitch: netlink: Message has 12 unknown bytes. [ 111.998612][ T6606] FAULT_INJECTION: forcing a failure. [ 111.998612][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.012585][ T6602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.031440][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 112.031464][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.031475][ T6606] Call Trace: [ 112.031483][ T6606] [ 112.031490][ T6606] dump_stack_lvl+0xe8/0x150 [ 112.031534][ T6606] should_fail_ex+0x40c/0x560 [ 112.031561][ T6606] _copy_from_iter+0x1d3/0x1660 [ 112.031586][ T6606] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 112.031622][ T6606] ? rcu_is_watching+0x15/0xb0 [ 112.031660][ T6606] ? trace_kmem_cache_alloc+0x29/0xe0 [ 112.031689][ T6606] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 112.031716][ T6606] ? __pfx__copy_from_iter+0x10/0x10 [ 112.031746][ T6606] ? __alloc_skb+0x276/0x7a0 [ 112.031765][ T6606] ? __alloc_skb+0x276/0x7a0 [ 112.031792][ T6606] ? netlink_sendmsg+0x650/0xb40 [ 112.031818][ T6606] ? skb_put+0x112/0x210 [ 112.031843][ T6606] netlink_sendmsg+0x6c0/0xb40 [ 112.031879][ T6606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.031914][ T6606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.031944][ T6606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.031970][ T6606] sock_sendmsg_nosec+0x13a/0x180 [ 112.032004][ T6606] ____sys_sendmsg+0x54e/0x850 [ 112.032035][ T6606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.032070][ T6606] ? import_iovec+0x73/0xa0 [ 112.032107][ T6606] ___sys_sendmsg+0x2a5/0x360 [ 112.032131][ T6606] ? __lock_acquire+0x683/0x2cf0 [ 112.032165][ T6606] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.032229][ T6606] ? __fget_files+0x2a/0x420 [ 112.032258][ T6606] ? __fget_files+0x3a2/0x420 [ 112.032308][ T6606] __x64_sys_sendmsg+0x1b1/0x290 [ 112.032337][ T6606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.032381][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.032406][ T6606] do_syscall_64+0x174/0x580 [ 112.032431][ T6606] ? trace_irq_disable+0x3b/0x140 [ 112.032458][ T6606] ? clear_bhb_loop+0x40/0x90 [ 112.032485][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.032506][ T6606] RIP: 0033:0x7f4b66f9de99 [ 112.032526][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.032543][ T6606] RSP: 002b:00007f4b67e42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.032565][ T6606] RAX: ffffffffffffffda RBX: 00007f4b67225fa0 RCX: 00007f4b66f9de99 [ 112.032581][ T6606] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 112.032594][ T6606] RBP: 00007f4b67e42090 R08: 0000000000000000 R09: 0000000000000000 [ 112.032607][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.032619][ T6606] R13: 00007f4b67226038 R14: 00007f4b67225fa0 R15: 00007ffde32ce0c8 [ 112.032653][ T6606] [ 112.504055][ T6618] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 112.724036][ T6623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.026200][ T6639] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 113.064933][ T6639] bond2 (unregistering): Released all slaves [ 113.378944][ T6658] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 113.425731][ T6658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.448903][ T6658] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 113.484931][ T6666] FAULT_INJECTION: forcing a failure. [ 113.484931][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 113.498215][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.1.211 Not tainted syzkaller #0 PREEMPT(full) [ 113.498237][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.498248][ T6666] Call Trace: [ 113.498255][ T6666] [ 113.498263][ T6666] dump_stack_lvl+0xe8/0x150 [ 113.498295][ T6666] should_fail_ex+0x40c/0x560 [ 113.498327][ T6666] should_failslab+0xa8/0x100 [ 113.498358][ T6666] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 113.498384][ T6666] ? skb_clone+0x212/0x3a0 [ 113.498405][ T6666] ? skb_clone+0x212/0x3a0 [ 113.498435][ T6666] skb_clone+0x212/0x3a0 [ 113.498461][ T6666] __netlink_deliver_tap+0x413/0x860 [ 113.498495][ T6666] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.498520][ T6666] netlink_deliver_tap+0x19c/0x1b0 [ 113.498543][ T6666] netlink_unicast+0x77f/0x940 [ 113.498567][ T6666] netlink_sendmsg+0x813/0xb40 [ 113.498599][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.498637][ T6666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 113.498664][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.498684][ T6666] sock_sendmsg_nosec+0x13a/0x180 [ 113.498712][ T6666] ____sys_sendmsg+0x54e/0x850 [ 113.498734][ T6666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.498759][ T6666] ? import_iovec+0x73/0xa0 [ 113.498786][ T6666] ___sys_sendmsg+0x2a5/0x360 [ 113.498805][ T6666] ? __lock_acquire+0x683/0x2cf0 [ 113.498831][ T6666] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.498879][ T6666] ? __fget_files+0x2a/0x420 [ 113.498902][ T6666] ? __fget_files+0x3a2/0x420 [ 113.498933][ T6666] __x64_sys_sendmsg+0x1b1/0x290 [ 113.498955][ T6666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.498990][ T6666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.499008][ T6666] do_syscall_64+0x174/0x580 [ 113.499028][ T6666] ? trace_irq_disable+0x3b/0x140 [ 113.499050][ T6666] ? clear_bhb_loop+0x40/0x90 [ 113.499079][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.499099][ T6666] RIP: 0033:0x7f895259de99 [ 113.499116][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.499131][ T6666] RSP: 002b:00007f89533f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.499151][ T6666] RAX: ffffffffffffffda RBX: 00007f8952825fa0 RCX: 00007f895259de99 [ 113.499164][ T6666] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 113.499176][ T6666] RBP: 00007f89533f2090 R08: 0000000000000000 R09: 0000000000000000 [ 113.499187][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.499197][ T6666] R13: 00007f8952826038 R14: 00007f8952825fa0 R15: 00007ffdfacb9f48 [ 113.499227][ T6666] [ 113.848425][ T6658] bond1: (slave geneve2): making interface the new active one [ 113.885277][ T6675] netlink: 'syz.0.208': attribute type 2 has an invalid length. [ 113.925377][ T6658] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 113.995715][ T6623] syz.2.200 (6623) used greatest stack depth: 18312 bytes left [ 114.030986][ T6675] : entered promiscuous mode [ 114.200490][ T6679] bridge_slave_1: Caught tx_queue_len zero misconfig [ 114.261268][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.319714][ T6669] bridge_slave_1 (unregistering): left allmulticast mode [ 114.348180][ T6669] bridge_slave_1 (unregistering): left promiscuous mode [ 114.365602][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.488476][ T6692] netlink: 'syz.1.219': attribute type 13 has an invalid length. [ 114.562016][ T6692] __nla_validate_parse: 2 callbacks suppressed [ 114.562032][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 114.753310][ T6707] FAULT_INJECTION: forcing a failure. [ 114.753310][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 114.778057][ T6700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.221'. [ 114.807771][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT(full) [ 114.807794][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.807805][ T6707] Call Trace: [ 114.807812][ T6707] [ 114.807819][ T6707] dump_stack_lvl+0xe8/0x150 [ 114.807851][ T6707] should_fail_ex+0x40c/0x560 [ 114.807880][ T6707] should_failslab+0xa8/0x100 [ 114.807910][ T6707] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 114.807952][ T6707] ? skb_clone+0x212/0x3a0 [ 114.807974][ T6707] ? skb_clone+0x212/0x3a0 [ 114.808004][ T6707] skb_clone+0x212/0x3a0 [ 114.808031][ T6707] __netlink_deliver_tap+0x413/0x860 [ 114.808066][ T6707] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.808092][ T6707] netlink_deliver_tap+0x19c/0x1b0 [ 114.808117][ T6707] netlink_sendskb+0x68/0x140 [ 114.808140][ T6707] netlink_rcv_skb+0x2a4/0x4a0 [ 114.808164][ T6707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.808186][ T6707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.808222][ T6707] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.808245][ T6707] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.808273][ T6707] netlink_unicast+0x7bb/0x940 [ 114.808304][ T6707] netlink_sendmsg+0x813/0xb40 [ 114.808339][ T6707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.808367][ T6707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 114.808403][ T6707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.808425][ T6707] sock_sendmsg_nosec+0x13a/0x180 [ 114.808453][ T6707] ____sys_sendmsg+0x54e/0x850 [ 114.808483][ T6707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.808512][ T6707] ? import_iovec+0x73/0xa0 [ 114.808544][ T6707] ___sys_sendmsg+0x2a5/0x360 [ 114.808564][ T6707] ? __lock_acquire+0x683/0x2cf0 [ 114.808595][ T6707] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.808649][ T6707] ? __fget_files+0x2a/0x420 [ 114.808674][ T6707] ? __fget_files+0x3a2/0x420 [ 114.808708][ T6707] __x64_sys_sendmsg+0x1b1/0x290 [ 114.808732][ T6707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.808787][ T6707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.808819][ T6707] do_syscall_64+0x174/0x580 [ 114.808841][ T6707] ? trace_irq_disable+0x3b/0x140 [ 114.808865][ T6707] ? clear_bhb_loop+0x40/0x90 [ 114.808888][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.808906][ T6707] RIP: 0033:0x7f4e2d99de99 [ 114.808938][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.808954][ T6707] RSP: 002b:00007f4e2e7ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.808975][ T6707] RAX: ffffffffffffffda RBX: 00007f4e2dc25fa0 RCX: 00007f4e2d99de99 [ 114.808988][ T6707] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 114.809000][ T6707] RBP: 00007f4e2e7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 114.809010][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.809020][ T6707] R13: 00007f4e2dc26038 R14: 00007f4e2dc25fa0 R15: 00007ffc22bf1758 [ 114.809060][ T6707] [ 115.248766][ T6715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.224'. [ 115.488400][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 115.561851][ T6727] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 116.085743][ T30] audit: type=1800 audit(1785185376.862:2): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.234" name="blkio.bfq.time_recursive" dev="tmpfs" ino=290 res=0 errno=0 [ 116.128089][ T6752] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 116.293000][ T6752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.300882][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 116.448641][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 116.504261][ T6769] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 116.547692][ T6758] warning: `syz.3.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.617122][ T6752] bond2: (slave dummy0): making interface the new active one [ 116.634147][ T6752] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 116.899503][ T6777] tipc: Started in network mode [ 116.922430][ T6777] tipc: Node identity , cluster identity 4711 [ 116.930409][ T6777] tipc: Failed to obtain node identity [ 116.945910][ T6777] tipc: Enabling of bearer rejected, failed to enable media [ 117.068365][ T6786] IPVS: Scheduler module ip_vs_sip not found [ 117.194732][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.225262][ T6799] tipc: Can't bind to reserved service type 0 [ 117.350268][ T6805] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 117.363237][ T6805] bond2 (unregistering): Released all slaves [ 117.661661][ T6830] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 117.675328][ T6825] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 117.677573][ T6830] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 117.858942][ T6835] gtp0: entered promiscuous mode [ 117.977580][ T6834] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 117.995006][ T6834] bond1 (unregistering): Released all slaves [ 118.050387][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 118.181987][ T6857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.344560][ T6866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 118.363480][ T6866] tipc: Invalid UDP bearer configuration [ 118.363539][ T6866] tipc: Enabling of bearer rejected, failed to enable media [ 118.384651][ T6873] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 118.406557][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 118.540317][ T6882] netlink: 'syz.2.270': attribute type 5 has an invalid length. [ 118.621627][ T6882] geneve2: entered promiscuous mode [ 118.698532][ T6888] netlink: 'syz.1.271': attribute type 30 has an invalid length. [ 119.064775][ T6900] batman_adv: batadv0: Adding interface: macvtap1 [ 119.091500][ T6900] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.154337][ T6900] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 119.945843][ T6943] batman_adv: batadv0: Adding interface: vlan2 [ 119.957773][ T6943] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.989858][ T6943] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 120.183327][ T6963] __nla_validate_parse: 2 callbacks suppressed [ 120.183346][ T6963] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.288'. [ 120.217449][ T6968] atomic_op ffff88807cf20198 conn xmit_atomic 0000000000000000 [ 120.346669][ T6972] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 120.430759][ T6978] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 120.607378][ T6989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.297'. [ 120.645155][ T6978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.652393][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.727858][ T6985] bond4: (slave geneve2): making interface the new active one [ 120.804524][ T6985] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 121.214018][ T7016] 8021q: VLANs not supported on ip6tnl0 [ 121.484337][ T5740] bridge0: entered promiscuous mode [ 121.869161][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 121.951309][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 122.219824][ T7076] batman_adv: batadv0: Adding interface: dummy0 [ 122.232489][ T7076] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.258897][ T7076] batman_adv: batadv0: Interface activated: dummy0 [ 122.693312][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 122.806555][ T7092] netlink: 116 bytes leftover after parsing attributes in process `syz.1.323'. [ 124.847920][ T7061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.052504][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 125.457372][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 125.684582][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 125.988699][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 126.435281][ T7158] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 126.481317][ T7156] openvswitch: netlink: Message has 4 unknown bytes. [ 126.490585][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.573439][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 126.588891][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 126.613406][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 126.639477][ T4939] block nbd0: Receive control failed (result -22) [ 126.656145][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 126.659290][ T7167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.674105][ T7169] xt_TCPMSS: Only works on TCP SYN packets [ 126.706905][ T7164] nbd0: detected capacity change from 0 to 32 [ 126.759227][ T1653] block nbd0: Dead connection, failed to find a fallback [ 126.767399][ T1653] block nbd0: shutting down sockets [ 126.773960][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.784668][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.795806][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.805409][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.813407][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.825150][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.833277][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.843267][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.851159][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.860809][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.870183][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.879887][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.887844][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.897431][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.905390][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.914994][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.922852][ T5651] ldm_validate_partition_table(): Disk read failed. [ 126.939829][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.949390][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.957320][ T1653] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.967107][ T1653] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.975582][ T5651] Dev nbd0: unable to read RDB block 0 [ 126.983275][ T5651] nbd0: unable to read partition table [ 126.998330][ T5651] ldm_validate_partition_table(): Disk read failed. [ 127.005434][ T5651] Dev nbd0: unable to read RDB block 0 [ 127.011373][ T5651] nbd0: unable to read partition table [ 127.066474][ T7179] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.347'. [ 127.230108][ T7193] netlink: 56 bytes leftover after parsing attributes in process `syz.4.350'. [ 127.291426][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 128.035463][ T7227] xt_connbytes: Forcing CT accounting to be enabled [ 128.308809][ T7242] syzkaller0: entered promiscuous mode [ 128.325465][ T7242] syzkaller0: entered allmulticast mode [ 129.099518][ T7281] xt_hashlimit: size too large, truncated to 1048576 [ 129.610260][ T7302] netlink: 'syz.0.382': attribute type 13 has an invalid length. [ 129.851807][ T5740] bridge0: entered promiscuous mode [ 129.993029][ T7319] gretap0: entered promiscuous mode [ 130.014386][ T7319] vlan3: entered promiscuous mode [ 130.782847][ T7346] __nla_validate_parse: 14 callbacks suppressed [ 130.782865][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 130.801158][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 131.063479][ T7355] syzkaller0: entered promiscuous mode [ 131.069091][ T7355] syzkaller0: entered allmulticast mode [ 131.159392][ T7357] netlink: 124 bytes leftover after parsing attributes in process `syz.0.399'. [ 131.171139][ T7357] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 131.179603][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 131.300596][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 131.326865][ T7366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 131.406774][ T4939] block nbd1: Receive control failed (result -22) [ 131.447639][ T7364] nbd1: detected capacity change from 0 to 32 [ 131.450488][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 131.471761][ T1653] block nbd1: Dead connection, failed to find a fallback [ 131.481374][ T7369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.483318][ T1653] block nbd1: shutting down sockets [ 131.495591][ T5651] ldm_validate_partition_table(): Disk read failed. [ 131.503927][ T5651] Dev nbd1: unable to read RDB block 0 [ 131.510124][ T5651] nbd1: unable to read partition table [ 131.518747][ T5651] ldm_validate_partition_table(): Disk read failed. [ 131.525781][ T5651] Dev nbd1: unable to read RDB block 0 [ 131.531687][ T5651] nbd1: unable to read partition table [ 131.607093][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 132.098799][ T7402] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.492863][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 132.555749][ T7419] ip6gre1: entered promiscuous mode [ 132.569301][ T7419] ip6gre1: entered allmulticast mode [ 132.611472][ T7419] netlink: 'syz.1.415': attribute type 6 has an invalid length. [ 132.728492][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.790587][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800040][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.840441][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.484104][ T7459] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 133.617914][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.660196][ T7459] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.711527][ T7462] bond1: (slave veth3): Enslaving as an active interface with a down link [ 133.735075][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.779504][ T7465] bond1: (slave batadv1): making interface the new active one [ 133.800219][ T7465] batadv1: entered promiscuous mode [ 133.818977][ T7465] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 133.875261][ T7459] bond1 (unregistering): (slave veth3): Releasing active interface [ 133.914551][ T7459] bond1 (unregistering): (slave batadv1): Releasing active interface [ 133.931618][ T7459] bond1 (unregistering): Released all slaves [ 134.055907][ T7474] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 134.168638][ T7474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.351807][ T7487] FAULT_INJECTION: forcing a failure. [ 134.351807][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.377043][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.2.433 Not tainted syzkaller #0 PREEMPT(full) [ 134.377072][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.377084][ T7487] Call Trace: [ 134.377093][ T7487] [ 134.377101][ T7487] dump_stack_lvl+0xe8/0x150 [ 134.377139][ T7487] should_fail_ex+0x40c/0x560 [ 134.377171][ T7487] _copy_from_user+0x2d/0xb0 [ 134.377193][ T7487] ___sys_recvmsg+0x173/0x5a0 [ 134.377226][ T7487] ? __pfx____sys_recvmsg+0x10/0x10 [ 134.377257][ T7487] ? __fget_files+0x2a/0x420 [ 134.377305][ T7487] ? __fget_files+0x3a2/0x420 [ 134.377345][ T7487] do_recvmmsg+0x31a/0x7f0 [ 134.377380][ T7487] ? __pfx_do_recvmmsg+0x10/0x10 [ 134.377419][ T7487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.377449][ T7487] ? __fget_files+0x3a2/0x420 [ 134.377490][ T7487] __x64_sys_recvmmsg+0x198/0x250 [ 134.377520][ T7487] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 134.377556][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.377580][ T7487] do_syscall_64+0x174/0x580 [ 134.377608][ T7487] ? trace_irq_disable+0x3b/0x140 [ 134.377637][ T7487] ? clear_bhb_loop+0x40/0x90 [ 134.377664][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.377685][ T7487] RIP: 0033:0x7f4b66f9de99 [ 134.377711][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.377728][ T7487] RSP: 002b:00007f4b67e21028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 134.377755][ T7487] RAX: ffffffffffffffda RBX: 00007f4b67226090 RCX: 00007f4b66f9de99 [ 134.377770][ T7487] RDX: 0000000000000001 RSI: 0000200000003840 RDI: 0000000000000006 [ 134.377783][ T7487] RBP: 00007f4b67e21090 R08: 0000000000000000 R09: 0000000000000000 [ 134.377796][ T7487] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 134.377814][ T7487] R13: 00007f4b67226128 R14: 00007f4b67226090 R15: 00007ffde32ce0c8 [ 134.377848][ T7487] [ 134.644528][ T7493] bridge0: port 3(syz_tun) entered blocking state [ 134.652305][ T7493] bridge0: port 3(syz_tun) entered disabled state [ 134.659613][ T7493] syz_tun: entered allmulticast mode [ 134.667532][ T7493] syz_tun: entered promiscuous mode [ 134.673538][ T7493] bridge0: port 3(syz_tun) entered blocking state [ 134.680215][ T7493] bridge0: port 3(syz_tun) entered forwarding state [ 135.184942][ T7520] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.829073][ T7542] FAULT_INJECTION: forcing a failure. [ 135.829073][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 135.855976][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.1.450 Not tainted syzkaller #0 PREEMPT(full) [ 135.856000][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.856010][ T7542] Call Trace: [ 135.856017][ T7542] [ 135.856025][ T7542] dump_stack_lvl+0xe8/0x150 [ 135.856057][ T7542] should_fail_ex+0x40c/0x560 [ 135.856085][ T7542] should_failslab+0xa8/0x100 [ 135.856115][ T7542] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 135.856138][ T7542] ? local_lock_release+0x9c/0x160 [ 135.856159][ T7542] ? __alloc_skb+0x1d7/0x7a0 [ 135.856174][ T7542] ? __alloc_skb+0x1d7/0x7a0 [ 135.856198][ T7542] __alloc_skb+0x1d7/0x7a0 [ 135.856220][ T7542] netlink_dump+0x1e7/0xee0 [ 135.856253][ T7542] ? __pfx_netlink_dump+0x10/0x10 [ 135.856285][ T7542] ? netlink_recvmsg+0x5bf/0xa50 [ 135.856306][ T7542] ? kmem_cache_free+0x182/0x650 [ 135.856337][ T7542] netlink_recvmsg+0x683/0xa50 [ 135.856368][ T7542] ? __pfx_netlink_recvmsg+0x10/0x10 [ 135.856394][ T7542] ? __lock_acquire+0x683/0x2cf0 [ 135.856420][ T7542] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.856442][ T7542] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 135.856461][ T7542] ? security_socket_recvmsg+0x7e/0x2c0 [ 135.856486][ T7542] ? __pfx_netlink_recvmsg+0x10/0x10 [ 135.856509][ T7542] sock_recvmsg+0x196/0x1e0 [ 135.856538][ T7542] ____sys_recvmsg+0x1e6/0x4a0 [ 135.856569][ T7542] ? __pfx_____sys_recvmsg+0x10/0x10 [ 135.856605][ T7542] ? import_iovec+0x73/0xa0 [ 135.856654][ T7542] ___sys_recvmsg+0x213/0x5a0 [ 135.856683][ T7542] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.856712][ T7542] ? __fget_files+0x2a/0x420 [ 135.856754][ T7542] ? __fget_files+0x3a2/0x420 [ 135.856791][ T7542] do_recvmmsg+0x31a/0x7f0 [ 135.856824][ T7542] ? __pfx_do_recvmmsg+0x10/0x10 [ 135.856860][ T7542] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.856887][ T7542] ? __fget_files+0x3a2/0x420 [ 135.856950][ T7542] __x64_sys_recvmmsg+0x198/0x250 [ 135.856981][ T7542] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 135.857017][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.857040][ T7542] do_syscall_64+0x174/0x580 [ 135.857064][ T7542] ? trace_irq_disable+0x3b/0x140 [ 135.857091][ T7542] ? clear_bhb_loop+0x40/0x90 [ 135.857118][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.857139][ T7542] RIP: 0033:0x7f895259de99 [ 135.857158][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.857175][ T7542] RSP: 002b:00007f89533f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 135.857197][ T7542] RAX: ffffffffffffffda RBX: 00007f8952825fa0 RCX: 00007f895259de99 [ 135.857212][ T7542] RDX: 0000000000000001 RSI: 0000200000003840 RDI: 0000000000000006 [ 135.857225][ T7542] RBP: 00007f89533f2090 R08: 0000000000000000 R09: 0000000000000000 [ 135.857255][ T7542] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 135.857267][ T7542] R13: 00007f8952826038 R14: 00007f8952825fa0 R15: 00007ffdfacb9f48 [ 135.857303][ T7542] [ 136.419311][ T7557] __nla_validate_parse: 11 callbacks suppressed [ 136.419326][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 136.460086][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 136.793931][ T7583] ipip0: entered promiscuous mode [ 136.799292][ T7583] ipip0: entered allmulticast mode [ 137.332631][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 137.378308][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 137.436051][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 137.461100][ T7614] FAULT_INJECTION: forcing a failure. [ 137.461100][ T7614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.505311][ T7614] CPU: 1 UID: 0 PID: 7614 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 137.505336][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.505346][ T7614] Call Trace: [ 137.505353][ T7614] [ 137.505361][ T7614] dump_stack_lvl+0xe8/0x150 [ 137.505396][ T7614] should_fail_ex+0x40c/0x560 [ 137.505426][ T7614] _copy_from_user+0x2d/0xb0 [ 137.505447][ T7614] kstrtouint_from_user+0xd6/0x180 [ 137.505476][ T7614] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 137.505519][ T7614] proc_fail_nth_write+0x8e/0x210 [ 137.505551][ T7614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.505586][ T7614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.505615][ T7614] vfs_write+0x296/0xba0 [ 137.505644][ T7614] ? __pfx_vfs_write+0x10/0x10 [ 137.505665][ T7614] ? __fget_files+0x2a/0x420 [ 137.505696][ T7614] ? __fget_files+0x3a2/0x420 [ 137.505722][ T7614] ? __fget_files+0x2a/0x420 [ 137.505766][ T7614] ksys_write+0x150/0x270 [ 137.505788][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 137.505816][ T7614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.505838][ T7614] do_syscall_64+0x174/0x580 [ 137.505862][ T7614] ? trace_irq_disable+0x3b/0x140 [ 137.505888][ T7614] ? clear_bhb_loop+0x40/0x90 [ 137.505912][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.505931][ T7614] RIP: 0033:0x7fb0be55e6ce [ 137.505950][ T7614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.505965][ T7614] RSP: 002b:00007fb0bc7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.505985][ T7614] RAX: ffffffffffffffda RBX: 00007fb0bc7d56c0 RCX: 00007fb0be55e6ce [ 137.505999][ T7614] RDX: 0000000000000001 RSI: 00007fb0bc7d50a0 RDI: 0000000000000007 [ 137.506010][ T7614] RBP: 00007fb0bc7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 137.506022][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.506032][ T7614] R13: 00007fb0be826128 R14: 00007fb0be826090 R15: 00007ffd99f72588 [ 137.506064][ T7614] [ 137.809349][ T7619] tipc: Started in network mode [ 137.814518][ T7619] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 137.832734][ T7619] tipc: Enabling of bearer rejected, failed to enable media [ 138.124914][ T7631] syzkaller0: entered promiscuous mode [ 138.144259][ T7631] syzkaller0: entered allmulticast mode [ 138.552477][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 138.697025][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 138.852686][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'. [ 138.876028][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'. [ 138.920435][ T4939] block nbd2: Receive control failed (result -1) [ 138.928315][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 138.999091][ T7668] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 139.197089][ T7678] vlan0: entered promiscuous mode [ 139.240181][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.249323][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.260461][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.286115][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.314835][ T7679] tipc: Started in network mode [ 139.328772][ T7679] tipc: Node identity 4246, cluster identity 4711 [ 139.347186][ T7679] tipc: Node number set to 16966 [ 139.393617][ T7684] veth3: entered allmulticast mode [ 139.530030][ T7691] ip6tnl2: entered allmulticast mode [ 139.538056][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.555371][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.564095][ T5726] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.814643][ T5726] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 140.034690][ T7716] ipt_REJECT: TCP_RESET invalid for non-tcp [ 140.477331][ T7739] xt_hashlimit: size too large, truncated to 1048576 [ 140.542224][ T5726] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 140.622466][ T5771] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 140.656522][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.753128][ T7740] bridge_slave_0 (unregistering): left allmulticast mode [ 140.774768][ T7740] bridge_slave_0 (unregistering): left promiscuous mode [ 140.816889][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.017371][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.059820][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.096921][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.135826][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.235941][ T7774] syzkaller1: entered promiscuous mode [ 141.246317][ T7774] syzkaller1: entered allmulticast mode [ 141.402390][ T7786] x_tables: ip_tables: ah match: only valid for protocol 51 [ 141.419196][ T7786] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 141.427967][ T5771] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.457529][ T7787] __nla_validate_parse: 12 callbacks suppressed [ 141.457545][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 141.799099][ T7806] netlink: 'syz.3.524': attribute type 13 has an invalid length. [ 141.823996][ T7806] netlink: 152 bytes leftover after parsing attributes in process `syz.3.524'. [ 141.853575][ T7806] syz_tun: refused to change device tx_queue_len [ 141.880395][ T7806] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 142.283545][ T7831] syzkaller0: entered promiscuous mode [ 142.299765][ T7831] syzkaller0: entered allmulticast mode [ 142.376801][ T7830] tipc: Started in network mode [ 142.419829][ T7830] tipc: Node identity 36a23ca754ce, cluster identity 4711 [ 142.445267][ T7830] tipc: Enabled bearer , priority 0 [ 142.516994][ T7829] tipc: Resetting bearer [ 142.598081][ T7829] tipc: Disabling bearer [ 142.660447][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 143.248013][ T7878] sctp: [Deprecated]: syz.0.538 (pid 7878) Use of int in max_burst socket option. [ 143.248013][ T7878] Use struct sctp_assoc_value instead [ 143.262642][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 144.106809][ T7913] netlink: 'syz.4.547': attribute type 13 has an invalid length. [ 144.526377][ T7935] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.556'. [ 144.892296][ T7962] netlink: 76 bytes leftover after parsing attributes in process `syz.3.555'. [ 145.146963][ T7985] bridge0: port 2(dummy0) entered blocking state [ 145.169316][ T7985] bridge0: port 2(dummy0) entered disabled state [ 145.177217][ T7985] dummy0: entered allmulticast mode [ 145.200335][ T7985] dummy0: entered promiscuous mode [ 145.222693][ T7985] bridge0: port 2(dummy0) entered blocking state [ 145.229168][ T7985] bridge0: port 2(dummy0) entered forwarding state [ 145.366621][ T7987] dummy0: left allmulticast mode [ 145.375275][ T7993] sctp: [Deprecated]: syz.3.568 (pid 7993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.375275][ T7993] Use struct sctp_sack_info instead [ 145.394326][ T7987] dummy0: left promiscuous mode [ 145.416009][ T7987] bridge0: port 2(dummy0) entered disabled state [ 145.551815][ T8004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.571'. [ 145.614972][ T8008] raw_sendmsg: syz.1.570 forgot to set AF_INET. Fix it! [ 145.643403][ T8005] netlink: 17 bytes leftover after parsing attributes in process `syz.3.571'. [ 145.764539][ T8010] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.573'. [ 146.112497][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.577'. [ 146.185394][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'. [ 146.372823][ T8036] syzkaller0: entered promiscuous mode [ 146.378471][ T8036] syzkaller0: entered allmulticast mode [ 146.737587][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 146.898526][ T8064] __nla_validate_parse: 1 callbacks suppressed [ 146.898543][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 146.947896][ T8064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 146.993070][ T8064] tipc: Enabling of bearer rejected, failed to enable media [ 148.513791][ T8131] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 148.621070][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.609'. [ 148.713089][ T8131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.768019][ T8135] bond5: (slave gretap1): making interface the new active one [ 148.795908][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 148.817148][ T8135] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 148.880303][ T187] IPVS: starting estimator thread 0... [ 148.884697][ T8134] IPVS: ip_vs_edit_dest(): server weight less than zero [ 148.905997][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 148.993213][ T8148] IPVS: using max 37 ests per chain, 88800 per kthread [ 149.127891][ T8160] netlink: 1 bytes leftover after parsing attributes in process `syz.2.615'. [ 149.148629][ T8157] syzkaller0: entered promiscuous mode [ 149.163117][ T8157] syzkaller0: entered allmulticast mode [ 149.292168][ T8166] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 149.554236][ T8177] veth0: entered promiscuous mode [ 149.595272][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 149.648170][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 149.744042][ T8178] veth0: left promiscuous mode [ 149.787561][ T8190] bridge0: entered allmulticast mode [ 149.922731][ T8199] ip6gre2: entered promiscuous mode [ 149.938682][ T8199] ip6gre2: entered allmulticast mode [ 150.702129][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 151.177123][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 151.370186][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 151.696642][ T8268] xt_hashlimit: size too large, truncated to 1048576 [ 151.961088][ T8278] vlan2: entered allmulticast mode [ 151.977039][ T8278] bond0: entered allmulticast mode [ 152.001479][ T8278] bond_slave_0: entered allmulticast mode [ 152.015600][ T8278] bond_slave_1: entered allmulticast mode [ 152.599516][ T8295] sctp: [Deprecated]: syz.4.656 (pid 8295) Use of int in max_burst socket option. [ 152.599516][ T8295] Use struct sctp_assoc_value instead [ 153.358501][ T8306] __nla_validate_parse: 1 callbacks suppressed [ 153.358518][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 153.413675][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 153.511824][ T8308] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 155.791695][ T8299] Set syz0 is full, maxelem 65536 reached [ 155.843808][ T8320] netlink: 'syz.0.662': attribute type 11 has an invalid length. [ 156.465943][ T8358] bond0: (slave ip6tnl0): refused to change device type [ 156.637823][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 156.663880][ T8366] xt_TCPMSS: Only works on TCP SYN packets [ 156.948912][ T8376] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.672'. [ 157.305196][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 157.430648][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 157.436421][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 157.444705][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 157.458086][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 157.473274][ T8405] geneve4: entered promiscuous mode [ 157.478669][ T8405] geneve4: entered allmulticast mode [ 157.569825][ T8410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.106992][ T8417] netlink: 14 bytes leftover after parsing attributes in process `syz.2.681'. [ 158.140443][ T8434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.162814][ T8430] block nbd3: server does not support multiple connections per device. [ 158.195077][ T8430] block nbd3: shutting down sockets [ 158.219485][ T8432] syzkaller1: entered promiscuous mode [ 158.239041][ T8432] syzkaller1: entered allmulticast mode [ 158.358896][ T8435] netlink: 'syz.0.686': attribute type 11 has an invalid length. [ 158.400112][ T8435] Bluetooth: MGMT ver 1.23 [ 158.459876][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 158.507647][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 159.005639][ T8469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.696'. [ 159.019083][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 159.277751][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 159.657188][ T8506] xt_hashlimit: max too large, truncated to 1048576 [ 159.677706][ T8506] xt_hashlimit: overflow, try lower: 2/0 [ 159.716097][ T8514] team0: Device vlan3 is already an upper device of the team interface [ 159.748637][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 159.851077][ T8515] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 159.923133][ T8516] team0: Device vlan3 is already an upper device of the team interface [ 160.199100][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 160.237728][ T8538] xt_hashlimit: size too large, truncated to 1048576 [ 160.263173][ T8538] xt_hashlimit: invalid interval [ 160.310472][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 160.325548][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 160.446884][ T8544] netlink: 'syz.2.714': attribute type 19 has an invalid length. [ 160.466590][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 160.559471][ T8544] netlink: 'syz.2.714': attribute type 19 has an invalid length. [ 160.566490][ T8550] netlink: 'syz.2.714': attribute type 13 has an invalid length. [ 160.654560][ T8549] batadv0: entered promiscuous mode [ 160.669785][ T8549] macvtap1: entered promiscuous mode [ 160.682823][ T8549] macvtap1: entered allmulticast mode [ 160.698440][ T8549] batadv0: entered allmulticast mode [ 160.720342][ T8549] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 160.736743][ T8549] batadv0: left allmulticast mode [ 160.746006][ T8549] batadv0: left promiscuous mode [ 160.936226][ T8555] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 160.952843][ T8555] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 160.968318][ T8555] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 160.989612][ T8561] syzkaller1: entered promiscuous mode [ 161.002201][ T8561] syzkaller1: entered allmulticast mode [ 161.384481][ T8591] vlan0: entered promiscuous mode [ 161.515550][ T8569] syzkaller1: entered promiscuous mode [ 161.524879][ T8569] syzkaller1: entered allmulticast mode [ 161.820646][ T8608] sctp: [Deprecated]: syz.4.729 (pid 8608) Use of int in max_burst socket option. [ 161.820646][ T8608] Use struct sctp_assoc_value instead [ 162.344511][ T8619] syzkaller0: entered promiscuous mode [ 162.350191][ T8619] syzkaller0: entered allmulticast mode [ 164.201629][ T8575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.846608][ T8654] syzkaller0: entered promiscuous mode [ 164.864345][ T8654] syzkaller0: entered allmulticast mode [ 164.930454][ T8656] __nla_validate_parse: 4 callbacks suppressed [ 164.930472][ T8656] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.746'. [ 164.965886][ T8659] sctp: [Deprecated]: syz.0.747 (pid 8659) Use of int in max_burst socket option. [ 164.965886][ T8659] Use struct sctp_assoc_value instead [ 165.055188][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 165.063419][ T8663] sctp: [Deprecated]: syz.2.748 (pid 8663) Use of int in max_burst socket option. [ 165.063419][ T8663] Use struct sctp_assoc_value instead [ 165.257983][ T8635] syzkaller1: entered promiscuous mode [ 165.273789][ T8635] syzkaller1: entered allmulticast mode [ 165.388309][ T8672] veth0: entered promiscuous mode [ 165.394688][ T8672] bond0: entered promiscuous mode [ 165.399868][ T8672] bond_slave_0: entered promiscuous mode [ 165.407579][ T8672] bond_slave_1: entered promiscuous mode [ 165.422099][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 165.494035][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 165.520722][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 165.534270][ T8671] bond0: left promiscuous mode [ 165.539780][ T8671] bond_slave_0: left promiscuous mode [ 165.546326][ T8671] bond_slave_1: left promiscuous mode [ 165.556486][ T8671] veth0: left promiscuous mode [ 165.646450][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 165.930249][ T8690] sctp: [Deprecated]: syz.2.759 (pid 8690) Use of int in max_burst socket option. [ 165.930249][ T8690] Use struct sctp_assoc_value instead [ 166.045916][ T24] IPVS: starting estimator thread 0... [ 166.054313][ T8698] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 166.129434][ T8698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.151972][ T8699] IPVS: using max 29 ests per chain, 69600 per kthread [ 166.196930][ T8703] bond3: (slave veth5): Enslaving as an active interface with a down link [ 166.210730][ T8704] syzkaller0: entered promiscuous mode [ 166.216848][ T8704] syzkaller0: entered allmulticast mode [ 166.234468][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 166.264430][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.287394][ T8698] bond3: (slave batadv0): making interface the new active one [ 166.301823][ T8698] batadv0: entered promiscuous mode [ 166.309361][ T8698] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 166.689276][ T8707] syzkaller1: entered promiscuous mode [ 166.700537][ T8707] syzkaller1: entered allmulticast mode [ 166.719241][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 166.793959][ T8728] netlink: 'syz.4.769': attribute type 23 has an invalid length. [ 166.999368][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 167.006684][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 167.220456][ T8748] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 167.231269][ T8748] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 167.245780][ T8748] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 167.644508][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 167.654412][ T8763] netlink: 'syz.0.780': attribute type 7 has an invalid length. [ 167.663996][ T8763] netlink: 'syz.0.780': attribute type 8 has an invalid length. [ 167.673373][ T8763] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 167.881138][ T8770] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 168.094685][ T8779] Set syz0 is full, maxelem 65536 reached [ 168.281087][ T8786] syzkaller0: entered promiscuous mode [ 168.292872][ T8786] syzkaller0: entered allmulticast mode [ 168.319993][ T8786] FAULT_INJECTION: forcing a failure. [ 168.319993][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.352048][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT(full) [ 168.352074][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.352087][ T8786] Call Trace: [ 168.352099][ T8786] [ 168.352107][ T8786] dump_stack_lvl+0xe8/0x150 [ 168.352143][ T8786] should_fail_ex+0x40c/0x560 [ 168.352175][ T8786] _copy_from_user+0x2d/0xb0 [ 168.352196][ T8786] ___sys_sendmsg+0x1c6/0x360 [ 168.352221][ T8786] ? __lock_acquire+0x683/0x2cf0 [ 168.352255][ T8786] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.352315][ T8786] ? __fget_files+0x2a/0x420 [ 168.352344][ T8786] ? __fget_files+0x3a2/0x420 [ 168.352383][ T8786] __x64_sys_sendmsg+0x1b1/0x290 [ 168.352411][ T8786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.352454][ T8786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.352477][ T8786] do_syscall_64+0x174/0x580 [ 168.352502][ T8786] ? trace_irq_disable+0x3b/0x140 [ 168.352541][ T8786] ? clear_bhb_loop+0x40/0x90 [ 168.352566][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.352586][ T8786] RIP: 0033:0x7f4e2d99de99 [ 168.352606][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.352623][ T8786] RSP: 002b:00007f4e2e7ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.352644][ T8786] RAX: ffffffffffffffda RBX: 00007f4e2dc25fa0 RCX: 00007f4e2d99de99 [ 168.352658][ T8786] RDX: 0000000000004011 RSI: 0000200000000340 RDI: 000000000000000a [ 168.352671][ T8786] RBP: 00007f4e2e7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 168.352684][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.352696][ T8786] R13: 00007f4e2dc26038 R14: 00007f4e2dc25fa0 R15: 00007ffc22bf1758 [ 168.352728][ T8786] [ 168.684179][ T8793] syzkaller0: entered promiscuous mode [ 168.689901][ T8793] syzkaller0: entered allmulticast mode [ 168.698693][ T8793] 0: reclassify loop, rule prio 0, protocol 800 [ 168.825143][ T8781] syzkaller1: entered promiscuous mode [ 168.831972][ T8781] syzkaller1: entered allmulticast mode [ 168.844196][ T8805] GUP no longer grows the stack in syz.3.791 (8805): 200000003000-20000000a000 (200000001000) [ 168.855186][ T8805] CPU: 1 UID: 0 PID: 8805 Comm: syz.3.791 Not tainted syzkaller #0 PREEMPT(full) [ 168.855209][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.855221][ T8805] Call Trace: [ 168.855229][ T8805] [ 168.855237][ T8805] dump_stack_lvl+0xe8/0x150 [ 168.855271][ T8805] __get_user_pages+0x238c/0x2720 [ 168.855297][ T8805] ? __gup_longterm_locked+0xc3b/0x15c0 [ 168.855346][ T8805] __gup_longterm_locked+0xd52/0x15c0 [ 168.855372][ T8805] ? lock_acquire+0x106/0x350 [ 168.855417][ T8805] gup_fast_fallback+0x1d8c/0x20e0 [ 168.855438][ T8805] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.855491][ T8805] ? __pfx_gup_fast_fallback+0x10/0x10 [ 168.855517][ T8805] ? is_valid_gup_args+0x11f/0x200 [ 168.855540][ T8805] ? get_user_pages_fast+0x4d/0xb0 [ 168.855563][ T8805] __iov_iter_get_pages_alloc+0x378/0xa40 [ 168.855600][ T8805] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 168.855625][ T8805] iov_iter_get_pages2+0x5e/0xa0 [ 168.855660][ T8805] __se_sys_vmsplice+0x7b5/0x1660 [ 168.855708][ T8805] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 168.855742][ T8805] ? __pfx_futex_wake+0x10/0x10 [ 168.855824][ T8805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.855847][ T8805] do_syscall_64+0x174/0x580 [ 168.855871][ T8805] ? trace_irq_disable+0x3b/0x140 [ 168.855898][ T8805] ? clear_bhb_loop+0x40/0x90 [ 168.855922][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.855941][ T8805] RIP: 0033:0x7fb0be59de99 [ 168.855959][ T8805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.855977][ T8805] RSP: 002b:00007fb0bc7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 168.855997][ T8805] RAX: ffffffffffffffda RBX: 00007fb0be825fa0 RCX: 00007fb0be59de99 [ 168.856011][ T8805] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 168.856022][ T8805] RBP: 00007fb0be633eaf R08: 0000000000000000 R09: 0000000000000000 [ 168.856041][ T8805] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 168.856051][ T8805] R13: 00007fb0be826038 R14: 00007fb0be825fa0 R15: 00007ffd99f72588 [ 168.856083][ T8805] [ 168.859725][ T8805] netlink: 'syz.3.791': attribute type 13 has an invalid length. [ 169.089860][ T8805] netlink: 'syz.3.791': attribute type 17 has an invalid length. [ 169.158651][ T7970] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9 [ 169.409757][ T8805] vlan2: left promiscuous mode [ 169.429720][ T8805] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 169.492639][ T7970] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.512036][ T7970] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.528469][ T7970] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.562764][ T7970] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.628178][ T8811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.018384][ T8832] __nla_validate_parse: 6 callbacks suppressed [ 170.018403][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 170.102110][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 170.227719][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.236287][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.464945][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.485754][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.956547][ T8873] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.009991][ T8873] bridge0: port 3(syz_tun) entered disabled state [ 171.017981][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.115699][ T7970] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.152352][ T7970] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.164953][ T7970] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.174358][ T7970] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.253112][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 171.277085][ T8863] syzkaller0: entered promiscuous mode [ 171.293460][ T8863] syzkaller0: entered allmulticast mode [ 171.313538][ T7970] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.329837][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 171.341978][ T7970] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.351653][ T7970] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.361579][ T7970] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.243125][ T8870] syzkaller1: entered promiscuous mode [ 173.248685][ T8870] syzkaller1: entered allmulticast mode [ 173.556906][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.812'. [ 173.667565][ T8895] erspan0: left promiscuous mode [ 174.066422][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.577158][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.792962][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035299c00: rx timeout, send abort [ 175.122188][ T8895] ip6tnl2: left allmulticast mode [ 175.185817][ T7971] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.196360][ T7971] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.232921][ T7971] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.254237][ T7971] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.303495][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035299c00: abort rx timeout. Force session deactivation [ 175.658930][ T8962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.772216][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 176.093097][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'. [ 176.245206][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 176.305213][ T4939] Bluetooth: hci4: command 0x0405 tx timeout [ 176.449006][ T8968] syzkaller1: entered promiscuous mode [ 176.454963][ T8968] syzkaller1: entered allmulticast mode [ 176.881327][ T8992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.073138][ T8999] sctp: [Deprecated]: syz.3.835 (pid 8999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.073138][ T8999] Use struct sctp_sack_info instead [ 177.693974][ T9002] syzkaller0: entered promiscuous mode [ 177.730073][ T9002] syzkaller0: entered allmulticast mode [ 178.098471][ T9028] sctp: [Deprecated]: syz.3.842 (pid 9028) Use of int in max_burst socket option. [ 178.098471][ T9028] Use struct sctp_assoc_value instead [ 179.268674][ T8949] Set syz0 is full, maxelem 65536 reached [ 179.702407][ T9040] netlink: 14 bytes leftover after parsing attributes in process `syz.3.846'. [ 179.792100][ T9042] netlink: 100 bytes leftover after parsing attributes in process `syz.3.846'. [ 180.486596][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.679499][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 181.690618][ T9040] batman_adv: batadv0: Interface deactivated: dummy0 [ 181.711496][ T9040] batman_adv: batadv0: Removing interface: dummy0 [ 181.837901][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.868633][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.895962][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.922046][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.962136][ T57] batadv0: left promiscuous mode [ 182.204751][ T9070] sctp: [Deprecated]: syz.2.853 (pid 9070) Use of int in max_burst socket option. [ 182.204751][ T9070] Use struct sctp_assoc_value instead [ 182.469305][ T9075] validate_nla: 1 callbacks suppressed [ 182.469325][ T9075] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 182.759458][ T9075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.992734][ T9093] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 183.035585][ T9081] syzkaller1: entered promiscuous mode [ 183.062389][ T9081] syzkaller1: entered allmulticast mode [ 183.371792][ T9103] xt_hashlimit: size too large, truncated to 1048576 [ 183.715118][ T9121] netlink: 'syz.0.868': attribute type 5 has an invalid length. [ 184.006951][ T9136] lo: Caught tx_queue_len zero misconfig [ 184.074679][ T9105] syzkaller1: entered promiscuous mode [ 184.088737][ T9105] syzkaller1: entered allmulticast mode [ 184.110593][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 184.821096][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 184.859759][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 185.082456][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 185.105709][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 185.122035][ T9181] netlink: 'syz.1.887': attribute type 15 has an invalid length. [ 185.154505][ T9181] netlink: 'syz.1.887': attribute type 15 has an invalid length. [ 185.163219][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 185.175161][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 185.195034][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 185.222179][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 185.695942][ T9208] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.136443][ T9193] syzkaller1: entered promiscuous mode [ 186.155437][ T9193] syzkaller1: entered allmulticast mode [ 186.978952][ T9253] __nla_validate_parse: 6 callbacks suppressed [ 186.978970][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 187.449115][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 187.660343][ T9270] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.911'. [ 187.820943][ T9278] netlink: 76 bytes leftover after parsing attributes in process `syz.1.914'. [ 187.861183][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.914'. [ 187.877607][ T9283] sctp: [Deprecated]: syz.3.915 (pid 9283) Use of int in max_burst socket option. [ 187.877607][ T9283] Use struct sctp_assoc_value instead [ 188.070020][ T9286] 8021q: VLANs not supported on lo [ 188.487171][ T9293] Bluetooth: MGMT ver 1.23 [ 188.492847][ T9295] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.918'. [ 189.063931][ T9312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.923'. [ 189.280543][ T9315] x_tables: duplicate underflow at hook 1 [ 189.471561][ T9323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.928'. [ 189.812353][ T9341] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 189.837748][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.948017][ T9346] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 189.972556][ T9346] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 190.070469][ T9341] [ 190.072850][ T9341] ============================================ [ 190.079043][ T9341] WARNING: possible recursive locking detected [ 190.085212][ T9341] syzkaller #0 Not tainted [ 190.089761][ T9341] -------------------------------------------- [ 190.095938][ T9341] syz.2.932/9341 is trying to acquire lock: [ 190.101846][ T9341] ffff888077238e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: __netdev_update_features+0xd27/0x1ef0 [ 190.112938][ T9341] [ 190.112938][ T9341] but task is already holding lock: [ 190.120315][ T9341] ffff888077238e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: dev_ethtool+0x47e/0x29c0 [ 190.130183][ T9341] and the lock comparison function returns 0: [ 190.136256][ T9341] [ 190.136256][ T9341] other info that might help us debug this: [ 190.144328][ T9341] Possible unsafe locking scenario: [ 190.144328][ T9341] [ 190.151787][ T9341] CPU0 [ 190.155068][ T9341] ---- [ 190.158352][ T9341] lock(&dev_instance_lock_key#23); [ 190.163649][ T9341] lock(&dev_instance_lock_key#23); [ 190.168963][ T9341] [ 190.168963][ T9341] *** DEADLOCK *** [ 190.168963][ T9341] [ 190.177106][ T9341] May be due to missing lock nesting notation [ 190.177106][ T9341] [ 190.185431][ T9341] 2 locks held by syz.2.932/9341: [ 190.190464][ T9341] #0: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29c0 [ 190.199459][ T9341] #1: ffff888077238e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: dev_ethtool+0x47e/0x29c0 [ 190.209751][ T9341] [ 190.209751][ T9341] stack backtrace: [ 190.215658][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT(full) [ 190.215687][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.215701][ T9341] Call Trace: [ 190.215710][ T9341] [ 190.215717][ T9341] dump_stack_lvl+0xe8/0x150 [ 190.215746][ T9341] print_deadlock_bug+0x279/0x290 [ 190.215766][ T9341] __lock_acquire+0x24df/0x2cf0 [ 190.215794][ T9341] ? __kernel_text_address+0xd/0x30 [ 190.215813][ T9341] ? stack_depot_save_flags+0x28b/0x800 [ 190.215835][ T9341] ? lock_acquire+0x106/0x350 [ 190.215864][ T9341] ? __netdev_update_features+0xd27/0x1ef0 [ 190.215886][ T9341] lock_acquire+0x106/0x350 [ 190.215910][ T9341] ? __netdev_update_features+0xd27/0x1ef0 [ 190.215939][ T9341] __mutex_lock+0x19d/0x1550 [ 190.215960][ T9341] ? __netdev_update_features+0xd27/0x1ef0 [ 190.215982][ T9341] ? lockdep_unlock+0x5d/0xd0 [ 190.216003][ T9341] ? __lock_acquire+0x13e8/0x2cf0 [ 190.216029][ T9341] ? __netdev_update_features+0xd27/0x1ef0 [ 190.216051][ T9341] ? __pfx___mutex_lock+0x10/0x10 [ 190.216076][ T9341] ? cfg80211_netdev_notifier_call+0xe36/0x13b0 [ 190.216104][ T9341] __netdev_update_features+0xd27/0x1ef0 [ 190.216132][ T9341] ? __pfx___netdev_update_features+0x10/0x10 [ 190.216154][ T9341] ? __lock_acquire+0x683/0x2cf0 [ 190.216180][ T9341] ? netlink_broadcast_filtered+0xe27/0xea0 [ 190.216200][ T9341] ? __lock_acquire+0x683/0x2cf0 [ 190.216229][ T9341] ? ipvlan_device_event+0x143/0xe60 [ 190.216252][ T9341] netdev_update_features+0x6f/0x100 [ 190.216286][ T9341] ? __pfx_netdev_update_features+0x10/0x10 [ 190.216315][ T9341] ? netif_inherit_tso_max+0x1ec/0x340 [ 190.216336][ T9341] macvlan_device_event+0x559/0x880 [ 190.216362][ T9341] ? __pfx_ipvlan_device_event+0x10/0x10 [ 190.216381][ T9341] ? __pfx_macvlan_device_event+0x10/0x10 [ 190.216408][ T9341] ? ipmr_device_event+0x1f6/0x220 [ 190.216428][ T9341] notifier_call_chain+0x1a5/0x3d0 [ 190.216457][ T9341] netdev_features_change+0x8d/0xd0 [ 190.216482][ T9341] ? __pfx_netdev_features_change+0x10/0x10 [ 190.216514][ T9341] dev_ethtool+0x1f09/0x29c0 [ 190.216537][ T9341] ? __lock_acquire+0x683/0x2cf0 [ 190.216568][ T9341] ? __pfx_dev_ethtool+0x10/0x10 [ 190.216593][ T9341] ? kasan_quarantine_put+0xbb/0x1f0 [ 190.216617][ T9341] ? dev_load+0x21/0x1f0 [ 190.216637][ T9341] ? dev_load+0x21/0x1f0 [ 190.216653][ T9341] ? dev_load+0x21/0x1f0 [ 190.216669][ T9341] dev_ioctl+0x392/0x1150 [ 190.216698][ T9341] sock_do_ioctl+0x23e/0x320 [ 190.216734][ T9341] ? __pfx_sock_do_ioctl+0x10/0x10 [ 190.216755][ T9341] ? hook_file_ioctl+0x1f0/0x5f0 [ 190.216778][ T9341] sock_ioctl+0x57a/0x7e0 [ 190.216800][ T9341] ? __pfx_sock_ioctl+0x10/0x10 [ 190.216820][ T9341] ? __fget_files+0x2a/0x420 [ 190.216841][ T9341] ? __fget_files+0x3a2/0x420 [ 190.216861][ T9341] ? __fget_files+0x2a/0x420 [ 190.216883][ T9341] ? bpf_lsm_file_ioctl+0x9/0x20 [ 190.216902][ T9341] ? __pfx_sock_ioctl+0x10/0x10 [ 190.216922][ T9341] __se_sys_ioctl+0xfc/0x170 [ 190.216937][ T9341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.216954][ T9341] do_syscall_64+0x174/0x580 [ 190.216972][ T9341] ? trace_irq_disable+0x3b/0x140 [ 190.216992][ T9341] ? clear_bhb_loop+0x40/0x90 [ 190.217010][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.217025][ T9341] RIP: 0033:0x7f4b66f9de99 [ 190.217039][ T9341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.217052][ T9341] RSP: 002b:00007f4b67e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.217068][ T9341] RAX: ffffffffffffffda RBX: 00007f4b67225fa0 RCX: 00007f4b66f9de99 [ 190.217080][ T9341] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 190.217090][ T9341] RBP: 00007f4b67033eaf R08: 0000000000000000 R09: 0000000000000000 [ 190.217100][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.217109][ T9341] R13: 00007f4b67226038 R14: 00007f4b67225fa0 R15: 00007ffde32ce0c8 [ 190.217128][ T9341] [ 194.222971][ T1320] ieee802154 phy0 wpan0: encryption failed: -22