last executing test programs: 4m9.011999366s ago: executing program 3 (id=435): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x106) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0xfff4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x2) 4m8.087618702s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000030601020000000000000000070000060900020073797a32000000000900020073797a000000000005000100070000000900020073797a30000000000900020073797a30000000"], 0x4c}}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4m7.996106993s ago: executing program 3 (id=461): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0xa4) 4m7.807679003s ago: executing program 3 (id=465): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x0) 4m7.667186848s ago: executing program 3 (id=469): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m7.547980901s ago: executing program 3 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70bd27, 0x25dfdbf8, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x6c893f2b6ca0ca4}, 0x20000000) 3m52.468101677s ago: executing program 32 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70bd27, 0x25dfdbf8, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x6c893f2b6ca0ca4}, 0x20000000) 2m42.376052495s ago: executing program 2 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000700000000031400000045f0801600000000002f907800000000ffffffffa21222eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9761b72a424bc14d"], 0xfdef) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="27030200000214000e00002f88a8", 0xe}, {&(0x7f0000000040)="bceb6a33", 0x4}, {0x0}], 0x3}, 0x5) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x7c, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18001e00000000000000000000000000c600010001000000851000000100791395000000000000009500000000eaffffa99424b6586554f34b865e21a41ba7ed56feb5591de187fa1b657e6935"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 2m42.287169774s ago: executing program 2 (id=1594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 54) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 2m42.244573445s ago: executing program 2 (id=1595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6(0xa, 0x0, 0x0) 2m42.115341125s ago: executing program 2 (id=1596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000004}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 2m42.105241295s ago: executing program 2 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb5fdf1b8f2a08cdd, 0x10, r0, 0xcad6e000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffe}, 0x94) 2m41.957782136s ago: executing program 2 (id=1598): r0 = socket(0x40000000015, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000004740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x60, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8045) recvmmsg(r5, &(0x7f0000001d00)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/34, 0x22}], 0x2, &(0x7f0000000480)=""/48, 0x30}}, {{&(0x7f00000004c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000800)=""/159, 0x9f}, {&(0x7f00000009c0)=""/193, 0xc1}], 0x5}, 0xf}, {{&(0x7f0000000b40)=@ax25={{0x3, @default}, [@default, @null, @null, @default, @netrom, @netrom, @default, @netrom]}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/177, 0xb1}, {&(0x7f0000000c80)=""/255, 0xff}, {&(0x7f0000000e80)=""/198, 0xc6}, {&(0x7f0000000f80)=""/8, 0x8}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/104, 0x68}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/98, 0x62}], 0x8, &(0x7f00000012c0)=""/38, 0x26}, 0x6}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/18, 0x12}, {&(0x7f00000013c0)=""/249, 0xf9}], 0x3, &(0x7f0000001500)=""/103, 0x67}, 0x300000}, {{&(0x7f0000001580)=@sco={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/48, 0x30}, {&(0x7f0000001640)=""/39, 0x27}, {&(0x7f0000001680)=""/29, 0x1d}, {&(0x7f00000016c0)=""/41, 0x29}], 0x4, &(0x7f0000001740)=""/201, 0xc9}, 0x3}, {{&(0x7f0000001840)=@in6, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/247, 0xf7}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/167, 0xa7}], 0x4, &(0x7f0000001c00)=""/252, 0xfc}}], 0x6, 0x2042, &(0x7f00000001c0)={0x0, 0x3938700}) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000400)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r12, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @local, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000004780)=ANY=[@ANYBLOB="14000000000000002980000008000000d66100080000df00d5b181a00ce147f4c1c505e288e0f39d4b97bd3347bed0"], 0x18}}], 0x1, 0x4000880) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r11, 0x400454d1, 0x0) 2m26.895251651s ago: executing program 33 (id=1598): r0 = socket(0x40000000015, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000004740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x60, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8045) recvmmsg(r5, &(0x7f0000001d00)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/34, 0x22}], 0x2, &(0x7f0000000480)=""/48, 0x30}}, {{&(0x7f00000004c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000800)=""/159, 0x9f}, {&(0x7f00000009c0)=""/193, 0xc1}], 0x5}, 0xf}, {{&(0x7f0000000b40)=@ax25={{0x3, @default}, [@default, @null, @null, @default, @netrom, @netrom, @default, @netrom]}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/177, 0xb1}, {&(0x7f0000000c80)=""/255, 0xff}, {&(0x7f0000000e80)=""/198, 0xc6}, {&(0x7f0000000f80)=""/8, 0x8}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/104, 0x68}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/98, 0x62}], 0x8, &(0x7f00000012c0)=""/38, 0x26}, 0x6}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/18, 0x12}, {&(0x7f00000013c0)=""/249, 0xf9}], 0x3, &(0x7f0000001500)=""/103, 0x67}, 0x300000}, {{&(0x7f0000001580)=@sco={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/48, 0x30}, {&(0x7f0000001640)=""/39, 0x27}, {&(0x7f0000001680)=""/29, 0x1d}, {&(0x7f00000016c0)=""/41, 0x29}], 0x4, &(0x7f0000001740)=""/201, 0xc9}, 0x3}, {{&(0x7f0000001840)=@in6, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/247, 0xf7}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/167, 0xa7}], 0x4, &(0x7f0000001c00)=""/252, 0xfc}}], 0x6, 0x2042, &(0x7f00000001c0)={0x0, 0x3938700}) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000400)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r12, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @local, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000004780)=ANY=[@ANYBLOB="14000000000000002980000008000000d66100080000df00d5b181a00ce147f4c1c505e288e0f39d4b97bd3347bed0"], 0x18}}], 0x1, 0x4000880) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r11, 0x400454d1, 0x0) 25.063326271s ago: executing program 5 (id=2760): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000240)="786115b2a3ff12945251f9879e716644bf8e1e7e30aa9fdb8d058d13668ee45d728a1af660f98b658ec7048e71330e9c0ce5037310e73b9294d2ab9c09f6faab04cbe4c352d6e3095a6dbfc6e80121e8f96ed81e98824384f07950e3914fd0d0ab30aa121a78e541a7a73dbe6fdde338c72db9c10cedbfbfb04ee76fa4663b378be29edcdde4d0e705fa084e5712b406ca3679ca3d2b791c5d806c26ac89343ab26c5f260b2970f6d70e097e30cf3c2e24290c055de90d5197151cd47f665000a3d2cca8ee191de1bd5d5ac163c1", &(0x7f0000000340)=@udp=r1, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010104}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@local, 0x800}, {@multicast2}, {@dev, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x10040004}, 0xd209f6d81482bb57) recvmmsg(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f00000000c0)=0xa) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e21, 0xe, @mcast1}, {0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x0, {[0x5, 0x4, 0x8001, 0xee03, 0x10001, 0xffffffff, 0x4, 0x858]}}, 0x5c) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0xbb2995efc2145f04, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x94db}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 24.762858084s ago: executing program 5 (id=2765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56f6c5820fae9d8af59e0846bae26fef915d564c90c200c0ef45c389cc73d45468f8a73d0cc23174b1b66560bbd11aa7a925c055ebe436d5f723a6243ccfad503af502e05478cc104c84e32f026fabd90a92c2a38ced528cc7176789f3dd64e2d5b9fb0bb1975644153a725efd50fbf12fc1c42846bc1e16dfe40ae3934de6d84178f7c8e62bac07938c113637286af1ee6b30c862bf96864a03ae6f3ae674b99e", 0xa2) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x5, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r11, 0x0, 0x0) (async) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000180), 0x8) 24.550292817s ago: executing program 5 (id=2769): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0xd0, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x82fc, 0x7fffffff}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x8, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x31}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40004) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8659b5e169"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "575b518f4e72fd564f95bb9e94"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "274b7a5da6b1bdae5d96f46bac"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24048000}, 0x40000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x644fcf25, 0x42}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x2000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r6, 0x21, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x66}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000b00)={@loopback, @remote, 0x1, 0x1, [@local]}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, r6, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x200088c4}, 0x24048850) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x164, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ea7731}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x52}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x107}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x58, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) sendmmsg$alg(r0, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="4c18e1ac28c57168b01ee61906e2b4dadf60c6529dd86ba11d3bbabf0930a324424541b80addbe765850c1e6c68ead9ff57f634864db15a63bb019a84457a676d9eacb19901a7bcaa17d484b161ed1f4f71445fed953592cf4ad75a8aeb3f5aab58e33b3161749ef87e6be48d07fa3c99909309628371ff43beacd843794486f38d3b07a82e4d8ee6f73a33eb814c0a1023f75402a4d52fe459cafdd072a36bc5a3d033cc046d029adee5d478f5aa575d778ab071820218c75564b5b28b8458a0a0b0f9875877e6d7372a4c38f843614ef5f8d3ab739eec6b88598f079295539f40c649b04db55095babdaa6f8b22c6a", 0xf0}], 0x1, &(0x7f0000001300)=[@assoc={0x18, 0x117, 0x4, 0x101}, @iv={0xa0, 0x117, 0x2, 0x8a, "4c91b1aab45526bef8d1bce6123333fc13e72d58ebaac286b181f41a0cec3dddcc52e18a3387f895c7af38506a593c33719abfc8f73a4288c79e8971f8b32bb681ae361fa62495bbe71c356cc088df62823c2060636312eba011d044488601657f13db6af38c886bc3b8d0a5de48161aa9f43679397323ce3896587be81716fd4744fa49a7d799f673f9"}, @assoc={0x18, 0x117, 0x4, 0xdc8}], 0xd0, 0x40}, {0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001400)="cbfa15ea4e7efd94cc7b2180e42c0fca4515fb518e687c644313e22eb8ab78e232709ee9d0dbd5ee3cf0196ddf2d5281bc1d31786e3af2f09c19fb9830f11ee76693117d79bde29e85e02cb3c096cc0131b4fc9b8ee19498538da074425dee914f696cf2b8141166e1c5fddc0dba39f8dafd038a574182e6a9f31a1a9059ad6fee6e64b5ef05", 0x86}], 0x1, &(0x7f0000001500)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xe0, 0x117, 0x2, 0xc8, "b43eff8e058a3f8a7e5378b6c2542214fe07f1798ef6bb7b5be9bce93f2c6321ddd8152a0abb65490fefa395d33c72893942108bd75c08c1ee2b618ce4195af23c30452961d664d60b5f9d5247bdce377bbaf27e018caeefa83dcedda5abe63979adef3c750c1a346e352f6337587df9355530e545400d28b6aed2e118e7de45934292a5cf7badd9d98472f3c8f1fc44f7b017592a2c1d3f91372b02ef42b26ae50584652838621a171f06f3b17ae7a70da26a1ffed4869f64c1261ea8d11f7bfc58dfaf2e7eb205"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x128, 0x80}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001640)="4c4cd9dfc31167908dbd6ef9e61f698310845403b54814614d927e1f7b998804cb52337df29acade64014fee2c64d3a9c5909663fc3a7301d518da04695a939b3658f97069efbe5eba308a5c4b37b069bc6cb24736d0dd0dd633fed422dc774c5b43239fa8bb69ca74e304963d595023cddb683e5937fbe526c329daf0110fb541649cd0c4e17d962eb6fd7a469f151fe85c68855f53e105df9e42ab23914187f5f61492e57479dd5c99681b86571051703cb037612cc248391fcbfd69874b52b8229b8d9cbd27757d6ad3e692c1849928a94d2949333dfb11bd9f7ad921f77da136ffb9fad0c571be63ce2f62850eec", 0xf0}, {&(0x7f0000001740)="3c09f6501d0fc9d3013012abc1d07891da8a6c9bd44d62abb7428c1c16d37ebc77c894ed3c7ecaae8767c54cbb05cda1857b24830652e9ac7ab7ab8aa6eb32e545fb6c58ac7deae27ca1edfba0aaf64493fe8a1b089929a57a78abb8822c86c265632103d0c59bf6883958f1e9619669b5d18d1260f4802719eeb23525bc4ab1875598c1dddfabd77aa32e9948c9b7ad4d7866ffaf2325522e64309b8e09b91b5f25e7f57c9e202f8b70011a7108a445a8b1c275bfdef5c84d6689", 0xbb}, {&(0x7f0000001800)="988ce8ce57fdb31f6d243f778f18ff7cd2c99451bb1efe787e482cd3ce5e57b25575e24b6bf5a33070e8d57240b02dd6f686f2d4306db6a901fa1587f35665b3d199371177c9fbc7ee49147070aec49af811d423e73ce35fa16fa37dddec8545436b5acc87b0928465bcd6e360cbae4eff80abba7bfe", 0x76}, {&(0x7f0000001880)="30d7", 0x2}, {&(0x7f00000018c0)="64db0bc1530063cc91a9bc08aa4f3e4bef6812518e161be854055c9910fb54f32e1b892f23c655723aa06e3d79ec169c04ce06668677cbb2908e3495dca7a2dc026db5991ffee5ef5ff2729fa2b377b70177f0c7a4221f7725de2f9903df77d75ed95f1aa988ec68d4c7fd29bb89f8cbd2e6022a844ee346b0ac287c7bc3206ad7debbec7b788fd04bf3ddcaeb2addd63794993835a43822719724036299c8b2e6dae51123cb4ca045c2a259393de3839fbc4f263ac3c802245a2eea2e74885f98893f7ce646b6364d55ebac1da6c87b4b5cc7637eab8b5526942f09d06b81c2", 0xe0}, {&(0x7f00000019c0)="2f7200e52f75022a9fd82ac830a4a7e1d00818f4fd2efd584b4e9768faf3579c28cadff7761090e27d09f8b747829adbc4bb24c5d58af578ec6a305d2a711e244e5a846738f71ed95dca", 0x4a}, {&(0x7f0000001a40)="c3a6ad64ba90622ac09c4b268005092d6f838a7d2f", 0x15}, {&(0x7f0000001a80)="305b3dbbfca2f45e", 0x8}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)="82ec41489eed564d3e1da2335d35c3107accf410c0ab3af0da1781551ef21833a3f401fd6d78a167417af858a9688da652b40c4ba2b0b6d4b509cb6d4870bd098aefc4", 0x43}], 0xa, &(0x7f0000001c40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xd8}, @iv={0x88, 0x117, 0x2, 0x6e, "9ea79032117b9d88338a8acbfbc46a14d0be6ad9718c58d7ae4b21b944a04589ba5b308ffa683dcee72da8bb7614431d3912a7821af1e3e8b032d6a83e7493b96f815f84803ff2cbde812e1fe4a8f44b5772a78920e2f91dc31b730d972d9ee62dbe8e4895d1eade8ffdfa4cae1f"}, @assoc={0x18, 0x117, 0x4, 0xe}, @iv={0x1018, 0x117, 0x2, 0x1000, "12d633edc09c783e8c5cdbde21c46a2ff87141c04a98998d7cdba70f2b5b071207304140f5ae2558210ae1d0b77b6e043538aa19374b328b147bc583583aec90633b79101396fe51493c95982d85b484eb4cdef8cfd151a9d0a68ee408330b8541b96ea6dd95703be664b7034649febf2fe05958e34340e07f5858b0b7778007676fa3f8e9e1376bbcaa3055617a8249e942ad448bf331b5717d1e6891ebdbb731bb77f2a0c3c193cf5ab635ac588f825cfd2f686af1c9c2047d7b9a66d824294a60bd79076af20d0964f07db9ae8b1c1e546af81ad598971c084a116a5b2404eeaacdcf64a64a4d8595562a28dc31205787e47632f15b8914a247eee01e1166c4d5b4319a030bbda89ecd789a7ac2b7b2be62881455cb820ef8dd9dfe230e9aa2f95771354dc23866a7a4d7b3d33cd81a1f253e6ff20771a6b972dbc40f1797ce152f2129c72eb0950d330c05f315b14c87014e9a080eeabc7a99bf0a4ba903df6fb317f0edabaf74f34ca4a8afe06f3fd11b98677ae197bbeb6de472cad37cee4a4462883e80fcdd224cb7918787bc1dabf1903a328025c20ae84df895d7b80cfabd7a399bb4dcf0625836e9e609ced0655e6cf39d303a35369b312d0401f8100350e374b6947a78d8328565d42194e753ebac3ed384e8c6a7c4f4103bf4aca9ebba80f93744373ead3b5b8c07e4578e7875c893cfba1b0bef6ec7b781b4e06b79412916777b15e4453141571eedf9946d912a46dd2045d04f20e76a7e6372e98866a1fca70e3a036d7c5edcf0eeed1bd1193b1929981aab0d30c4baadf0fff38e2dbc6c0ed83530350108adaeeea694c961dd413b5225b5925c5007592727887f75c1eb13479a479759bb84747ba2742030feaf8a7a278a1b027700afc1e8a0811210478dd203a19cbc2560e1ce09b498637badbbca9477a2a5a5f17e18ebf797bb05263883c96157a316d3ad1ac204ebf38c4c8a4584827f46606af56b4a873e0c3c0164d8169fed3ae27b2bc431d86a5b3327b49614d2d189eafde6dc88048b4bd48e753e4193f6fc256e9285ddef573045742aecb6b55d15cc4667bf1613066a158b55638a75c2241a20460410dd9ae1ab1bdf3a809360df981a7b48375952e6989438ea29a9c1cdda95f69a81c754808177953f2b434e7fe6ba00f4dd98e8a07ee164771eaf013759a0ebcd4887d80460aec897edd77724e226be15b27c49fbfbe04df9fac4830bf6cac910dae5ea078917b6955592243457de930e1d9ccc91654b72c3e1ce2ef3b64b3c87dc08c5c081034ffe79bc1478803577789d1ee3ba8d43db6c5fa1abafab99062f6572f8e5560d34233f43fb16ad617db0f932b802e379f73ab978cf23ef0f4a65ab1ba3d773b6e2fb94010dd2acac4fa7b27b1dcce472a7b074371f881a7284a2fa33f61b86070f9a004b7b44f4bb464b92d8acd169e12807dd180d94ffb34f358f7c71725eb3bc9098c011f4521f223f15132d7e5661af5ab259c6e5456c3b102f8a44fe256b1921b1d16db5dd1589a3446c81d47ab8bbcd7ed87ea90bee9e5883550db1344d9c80820d1ec9eedb54cc39c2c8021bd82ade7c3209b97c0114b7aa200d7341d90192c94ae46a76752d3bfa624c8c043126f199c30e831047cd802aeeb507ab8fe48c6eeefff2ad643b3c7b6a35822c90db842eafbe1c252f231e0d6780c1fbc8950122f1fdfbb704c02eb7e5e8bad06954cf6ad69cb79b22dd20251a62b6b26ef41ec4d57b47239ed133052d2eb41f0089e59d30bd32328e7b585c4bdf9879a03c3c2816ddc47a988b709a91effb41bf8ad8fc57ee9118a2d5084f7dcb381df426ad8a5c5f6dfef41f9abdce88ae73c38cd22f86faf46f7ee453177f6f61a50bf8c42c83e2b1e22c49c415bad6198d9aa95bb4a7cd9324709a67929c9cc749a5a47182dbed4af073adb46b89c0233d8ab026f6453238e935df65a9d4a4731dfb12aa71dc11a1d4f7494b10fc07a60879c32b3c8b18bf006c0fae034ee3cd039a705134e742f53d113caa18128f34e80f06023b70265893993284c3546f9631f528c95ca6d3a043e345d69a56627ca248c190c5a5fdf4c580149b14a2ec71d187ffaa628f0af4962e31fbbcf1abc8022431d5edf2c931926026ad3bcbedb0b86eff02a2b1a93e68aa06187740066cdc550d9cddd3c6885e81c8f0e29276450976e2c91cf86e9cf39552cf3b0880afb2142ee02559804e7d4959cab661a6fc6456bf20d43d58a7a0be2696cf344c53d44dbc6cfb4c0cfc2367cf43f80bd65d209c35aaa62fecc24e6abc2d403f6e06a871ac828a8f6fecfe40a93d30ddfb1fd7f91a49e6083984580c74f578d753fad5cd55c50438c1570e100879d655fb2c11229a75fcaa41f6d48a0f541b84235e85bf67ee29b3914ee3dc6ac00026c4c481849089105a3a1533e8656b478c568a6e5bd3a4fc655f4fa2579beff6a7caa455a3da8bdaaa0f7369f3bc0ffe612ef1a3f878996e71131b3b63ae5be972f85658e7b0a0c3ece57796ce9da218714e1a4094f32eb161cece6d8bc8147ff801013472562f8edbcf7d8c1faf7fd5ca4d47af5e464da0b9af09bed1b677e99dbf321da633f3b5a0a1a4ed4f7c5ff7e416c5fded3c5c5192708a351b1782e2aecdc6f41189e483d8118695aed769d4e706181cab75320195c1046424730caa0b788bfbcf1e37dfeafd6ee11ddb670cb98c6fe263cc4acfe1fca9023c5f8c75e739f905cd918249e6e9a48357d41d34ad6e88c7bb7d4e1dca3d65666ff2a2f0b84b6c032a30eaca17fe82c29191d549c14a024e32aa86cf4292244a134d0f40eb007386800645800e073447eba3abecfd4dd31d19cf1716f36910e079a2bf5de12f328c1449ad81b066512c780ec76e79a6e1665fe9ec10e9447910c85361f687077f0f685d4fd4850211b2b361626ae274a349f5021cd48bcf95fea1bac422c23c1fceae08a8ddabad4538efcc72689466c1564e7b20e57fd2340513fcb72be594ce33fcf0de0efad0d8343c348fc2e81aaa1b01ad67b84a606f085d9fbafc4a2d0f8eff74922a7031b59ab7f3ae142bba2aa029af44915f397bb73be891c8b2b5f1c5a184a08827899d6828d32ec0c13b0e46c13a8dce55e30c0c529acc280a0b8f25fc65247e098d8cd0239c32e15ebff3deb0adbb793a04fcc36bcfc2b345e021fc697b918f09c7eb30bf08c6e793e6d541db460a7d416515444f647a01e72a5ff5b88eccc158e93e9af0cdbe448140b5f1f402736012fe4a2d96380eee323d2866f7e9fa464bfe786176349aed4d1275dbe20c59b534d4a4694da3570a3586ca472481ddc7e4ff3988bbb0b82651b4df1747477619f0c6e9a9e64ab6e561ebbea807ee3f0ccbf66902a2b6142879ffd462262ba240ddc93e63fd51b387c4ea4e1c72313b4287c7ed8eb8dd74854992dc6dd44d154bd97aef86502edc4cd35dd8d1d41c65e5320426ca339ae075de78b3df01fed533f8b2bfb87fabb6dd8e87301fcfa6bd65dfdc79bbe4bb6eb42e22273a9b2f67b9400ef2b0432f473e5aeabac2fde78ca577a8e5199ed3db7b40b5c285c8b44b738bb2ca27904b7dae218ceba3d35d8ff167e6e86d196c98286f70f11b7307ab97ffbd50ae8d92be768fee43e022decd8b5e95c0dbbe6c82cf38358b5a117eb83dd96f498baf867485edc198f6e1288c67bc691c8f0cf98f555808a4e4173b98d030f4dfb22b7a0e9a558340f361f4c8277f41f362b7aeb82f8b42521d92f4ff29514407315503ac9c2ff90e3dbf76002742ee7bf1c460bc96fc6833441f8f05c7121cc68f487cff36c169618a767d2ac0f91fb2df52c39770b295b4274df402e4b766093ac6eac6c50aacacb0cfe00dd004d0e7fcec0e6d9ff738a332cd365f08c64ee4d65a9eb8b9e13eb126af2d59d8ebf5a9a9a3f24372f9848be4724179ebdef25f20022f9c8e31317a6409693c72fc281af3fbbf0c3fea2fd3addd602ce5d574f23a07e694a333fe96ee819786b5248c8e734ac0741d3583ccf48ddd58078f5b582caa8120c8b05a31f5d6a30dc104c5a00893766d086cc302743ceca6cecdd1ad6bf486fa777fb8fe5c72e3fdf0b96f8fd080e9bf8fda0a7435f6d555db26ca6f899ac69ceb6cb3a949068d3b4b28c9a67d65f0f1f9aea5d4f149192b35fce657c8941c6bf11cc6b058c5fc56e9c64ca5814001a251eba181a8d2ed961b87e3c8992909a8f95c703dbc158c01ceda2069abf0db133fc4de0fd2db7120ea994233e44da0963189465516630979e6cfb4dd9db3cf23024cbdab8674c4793352db7cfad8803f17d0d1555f01d726abef04bc93bbe2a57b07e5107c62df9c3425bce19a9eb19c9ac71a4ea2549bc60bc14e2fd6f6769ac3c65a39311de851c6c3173cd1a292fece07f046c9dc1982cfb07575f70086fc607d72dff9a921169874cfed305411248e955867d5d2ccdd0db5b53fc7d88dae6ae871d371631e7afdae0a1d1c633f5f4e7d1eea9613c361b470e7a52ef61d96d521f80ebac7beca15ba71545503da76dfba479cb619d681e79e187564c22471c3f9c1aac7945dcd86dda6ffd0fc4e9bf8d42b95e29d9b14165d7a458047e238343caf8ed0b115b65212e152bfaf9d784339d31cce48db9962d81434f84509379299bd8b74a568d08c0396432519b306e56bad4822039e85725204bacfbd70f1f1ac85f8a35404bcde12f83f837e82a7af28b395e05d6fafa0040cb8cea90b5194d36a4c1cd9b3a48d5aa6248a75af307b017881e85f77c03dbc6dc0e0c4e505f85393d4b80a550560c10f9677269c152e92f8d7e963e59413c18fc2e8ef60500ebd68054435feb1b281a8f046ad6c31e2697e5f5409e9d49f893c7d68dcd75c95d14a1277746ccbf00fc91350af17e5462f52eee55dd580cfda5b7ae8cb71e2e2a2bdbbd9a3bfa54eb94c846aeabc9cf17bf81d1dab914e87f66c7680babbde750249618bb8f3763ae0cc04e046e4cea5e8e5f8945dec60de1cb85fb8afa09727e90dc465e87410964930ddc914b0fa545949155071fb5197d8a9178327bc04f187ec551a0f9aba0c551b9ee4d866694d62ea410e3056d297ff7ba4305f91c26c8e378670527e5a48e338f1066f3f3ddada2980af25539a73413744d85999b17c39adfff5add8aa13183967996003fcd5c9a9f3d6903001f4657ea35259cc171c13a2753ac8ff1ab9d0a32a60998cfb17290c0a5ae0fb0a7301b17fe7bd4730f73ca2b07c3d5bb098b6c60e1ffadaa664861713ef91f63b7b6684c014d7ac7863b90f4b9707746ef59ec78bcef9f000783a09928da581cd5b04f8135cf7992684624f69813c258efc911389d9bf1a095b93ede0744f19a7e72186fafafdddbaef9ef79fc05327021b50700e6392257f516e85c4de3c695bafaebe949fee8674f4150411aaae3f822f3dd77913d2c2b5d91d1ccff3b524b017869a9be6c7119ba5fcf0baf324e6a9e578513b53cdd7d5fb3fab06cf4cebe1325d1731360fa6d1d798659e2618f6df9e0a855d5e8c5f7f1c2981cf0294324afd17d308250a51f4a95ac24c47da4c0f13eda50221d4007c3fcfa983d2a977a01fc68871d36cea20cf827529e40d8488651a253bf496edc3326fbe8a0ff4fd986c0577a7d20500d2f9f75bd01e449657fd8bfcfbe7b0edda0a5b90f8ae7d9b882f8560af7b2e49febde0404ec88c56344e03f53fc0c9287b8f03c1a3736b11c518390e7c65b11cafdba6a66454e01b0ab6b035d6a912e323e9418cdcfd95d3f7dd77ca59dad4750822"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "fb33297f5c8a77f0ec3222bc3bfdc6789cb45734cf"}], 0x1130, 0xc8d5}, {0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002d80)="64febe090310ee435d822a633ae145e60afb2b21aeb60f21698db8472108841a905106097f9bdf9d4e3ea019b6b7e18c749f57939cd17c9eade30e8f92d561b2966d0b765619d55103c08457b78ee012a9c5faf803254e37a8f8ca9d5efd948e4769fcdf6eb337e79e10b1a66c1108d502d59ca3ea31604f458bbc7b2e4e55b3c709eeacd0cac1ae975558d3afc149072a6127caeb9a2fc496c935ff82dcfc07f920b831b33ee1ce1ba97bde472e7740588036f3b995f64a1c96703b7149ae558a46ddf98d24e37203c995a4039952cad4ed422ba1b803e86b3dbc0e0f8f2119820ed93f56b45fe2cafa588c258e174ed90ccb", 0xf3}, {&(0x7f0000002e80)="f8a18d148016de8578bf8485557a2bb6d83fe2a11536ac3b9c1073b66d43cde24d589f0c30e9f7dacfcb5bfe102f3258654ea499ca8fc135db47d06a6e22d97351034d66c43bb49c7ff3271a9c484d8ff66247925c60cae5a3398891acb67c2566c132361d9c88ee9e87e4815d6096293d441746034ffabc8af40d64937daf714869329c2884ae921b5acaab305fef320cac5e5979627d5022553006d9972fa274394fb61be044822d3428f9e39df3cfa8b44dfbe45a3a7773e9cb2b9076bcc333de6788aff3851a337713527891c4d7da8ca219226c3758f99b3094a16df23ca17ffa334ef6547ec89cc992ce827a69445a1c", 0xf3}, {&(0x7f0000002f80)="4dcf58499511129be3c91f70a7e33367088b4033feb4b2720a57d413ac44c4b6ed88975be26ec7e257284bac36bf18e08f8710121895c597a134803011b4086312763659434beb4351ef9362151d367fe7f5058b7f878deccb61597e62de4a4fb6976615aaaaa591cd65707b270c30346ab5d90837469ab0c76b68c3435c99587dced5a8820fa20b17a64ba7d1cf8d25587fd71b45146e13198f0e97a8d3b5de3c901e8ff9223ecd316bd0b9906ce90b37df", 0xb2}, {&(0x7f0000003040)="3c7d2fb105f378fad30ed36f2594d7fa23f1e6c2420750ad17994258cf05bb53c70bff2af4abd1ef182e1b048def354cb0f563c224261f175f9551bb8c0cc1a51f417138b3eb38d55206fdb79e86f2fef15db91ca92ddb2351b9c38e4ad7526a4d43c5dac4983b1923c17a957fcc98b434a86b0700a2f0aa1c8036ff9bde21a1c06855063a9b4f75cc641b7ae152e4005bc1664fa51deb6dcec317f3338fb9681d8a41f7b0d15e5d6ea95c0dfe43de974a2d90dfc303e792e2f429d52f56eb9b0024d0", 0xc3}, {&(0x7f0000003140)="521d3d43dd7007c64dbfa489689215c407d0744691334c9a30a7933ed5647cf5ef409c5f4e5a33c7a785b43648866a925cfd6d0e6a7bbb8345a9956a8b5d27ce184beccdb3f1db188b4a6ff3f95417c626af186f97c10ead785858838810ff871e97b06794fee2c41320e744bb71735ede6e189cddae20e7bae07d10e496ced1857990c113a1dde23dc87eb77114aded3beff0334b7fe5d3afebe18e5088c45e7ad707ac", 0xa4}], 0x5, &(0x7f0000003280)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb0, 0x117, 0x2, 0x95, "83c4c2b99a427e1b77cedd3bcf94ff3aa4ae8010e74b7d25cb7ab86e0b1721784190d5b2e84d3241934abc37e8b4d6b02c5798e2b16c8a395a62e27bf99352db12351ed2648019dfe2843c2b9c1345d5bcd9d858076aa6dd7b93d690c4f8df0a0d771b46445fbf462f12a002a9e0e8f43a48bcc501e1d12def4f2738f0cda2f6257c213769cae350d1e41fba65bddb09834971ec65"}, @op={0x18, 0x117, 0x3, 0x1}], 0x128, 0x20000000}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000033c0)="d6fd0a278efa5e4a7f0a06b123f7d86dccafe1", 0x13}, {&(0x7f0000003400)="4150678861f2629cf9f2a496a57945ae68760825e70efdc3a37114bcced2ddc8519390150b91704a05c340bd886989f9eff435df9317f2e41ad584ff4390df9088916a01a4a3a01e4443", 0x4a}, {&(0x7f0000003480)="2ef7b5660e7de08fe88ac17a5721347c0cd487f9e5fd70238b5d710e5abf9ee8720e409332a4523b9c030b6b32b4e5e6763bb6c4378aa480ccac8d987e8f8e2cf9c2b8e9b694e3c7a7765198b4b7651a3aa3eb8cd0bafeb2a37ff1cb8c97230efa05d5ce4195563c79b7d32845873d57915ca280c5adc87ad72f7192f457cd6c2d141f6fde9520bf346859913f3018a2f55b4cb2d029c5ac7dc9daa439ffc65fc3c6d0c818234be7f54d7330f3db7d83be5ed681c9dddc0873c08e7294f111597747aaa8681f7fd34ebf168dd40a2fe0146c3f03803d2fd5ff7e9485", 0xdc}, {&(0x7f0000003580)="14265665d9501aafacbcf90449e78854dd6fae456a6252134dacb4cf933abd3fe0c1a0c4265762ef7b3464b3bf2225d8835be568ca13fbb8cf801cd5415f2bd01f5e9b2510be4377472b3851ac108f611ce2370fc9a1d6a41504b24ba0342993cf133ca8f9a6c4cfaf4d56641b92b59e4570271c4a90712a678b6a30ebda33d2dce817dfbb20d0f4a3612390d9", 0x8d}, {&(0x7f0000003640)="ee88b373e1e5620e98cd4e69bb7677c9d1a14d938b349c5df4d2701122ff7f9027cf10901803307032f5523bbe11580ffa273187e9c515fe81865522e20fe0dc41f29a5795c0f72e585f1093b790b221ac955f608062b1d2165030858f54651e01a89f809b760b15a5506ff78058b85a01c53427a4c05b46b21e706bfa1b684e150f8af19334f7739dd192b8181fe5927b6b6a0d8fea6d59c471a48d3d5fea9e1cff0ce1148edfc3e1ddd15ea664b8ca51c90a4ddfd339e2c7cd44c0", 0xbc}, {&(0x7f0000003700)="f9a2fc27ecb8a0d44f09b8753d15edce17cba6dc2703fe8169bc08", 0x1b}, {&(0x7f0000003740)="25346d23afa4c43964a768724f6b9ba7b64d92cc3c268d2ac8710113f14de487", 0x20}], 0x7, &(0x7f0000003800)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x4000000}], 0x5, 0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000003a80)={r5, &(0x7f0000003980)='syztnl0\x00', 0x10000, &(0x7f00000039c0)={@_ha_fsid={[0xfffffffa, 0x3341]}, {0x6, 0x7, 0x3, 0xad8}}, 0x6, &(0x7f0000003a00), &(0x7f0000003a40)=0x10}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r9, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, r10, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c40), r0) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000003d00)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x14, r12, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) 24.295228179s ago: executing program 5 (id=2772): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100008018180000", @ANYRES32=r1, @ANYBLOB="000000000000000018170000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000005e0000808bb9e28f611d2c2ed417ffe45b6e065d25e49fcbc381609a3304ac7d677340fcd3f3c5a1c5dd8ec4b12fd065f6212bdf9ffbba1a00a8621c7083d10896b2b7c443b499110ddec7d4f6f4e2b765a4246d357b797b9687543b84288a76eb85602f84ff1b5f5c5ac18fc4b32b7544bdbf21f3b7adbb6b9933a367f6dfeadafa6e796bbb2dbc3a3e75510497445417389aace8ebd13daa6c9071353008a2ac91615d31c9e3344affce0be8c11c55"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) 23.536030711s ago: executing program 5 (id=2780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xda4d}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)="0246215e297d59f15fa720466648814e5c3779c5ddde1048d9882554da85823e6c23f0e4c15eb88eb4c0ccaa46a6cea289f86ef28eda2e8c0bbbd17196de2b8c4521337cc4841cecad27e18d5b15428ea496f5ded2aa24"}, 0x20) 23.450337272s ago: executing program 5 (id=2782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r5, 0x3, 0x2070bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x4, 0x0, 0x600, 0xfca, 0x20c300a2}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1d007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 9.767784784s ago: executing program 0 (id=2886): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x7ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, 0x20, 0x8, 0x7fff, 0xffffff58}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@initdev, 0x0}, &(0x7f0000000200)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', r0, 0x80, 0x80, 0x9, 0xfff, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x65, 0x0, 0x59, 0x2, 0x0, @broadcast, @empty, {[@end, @ssrr={0x89, 0x17, 0x8, [@broadcast, @loopback, @broadcast, @multicast1, @private=0xa010100]}, @ssrr={0x89, 0x7, 0x3a, [@multicast1]}, @lsrr={0x83, 0xf, 0x93, [@multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xa56}, {@broadcast, 0x7}, {@remote, 0x3}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000080}, 0x48090) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) 9.679140546s ago: executing program 0 (id=2890): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000580), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000840)=[{&(0x7f0000000980)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e47826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed1730989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf15707490df76e7819e84cb2e4bdc01b33885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f089d8bfe0b362f32ca55b4d9ea767674f92970b290b13ac021267f38617f68c948dcaeac", 0x40c}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad92019178840896ddc1498194a7197b45d74a8532b82037b02c9e60077b61", 0x2b}, {&(0x7f0000000400)="0000000000aa303e97380e90231bdbdaf6a4bd860026b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d5cc3307cfeb6138b547eab4bdd2d0739bba8be82e14779c6bbc3da3df890f3f48f27b53b5f7d66c6ec953a75246656b6b23d5961ecea30137101a9f16bc6d70e0da07a2ee31c1a3051382780c17b38d31e4636470829c1d75d283a5b2e4d939cbc081486f30c48c4ed1f5798816952801c9c022c454f41c2e8aeddf3f6fc615f679b", 0xffffff0c}], 0x3, 0x0, 0x0, 0x48004}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 9.57159779s ago: executing program 0 (id=2892): r0 = socket$inet(0xa, 0xa, 0x3) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000280)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="310500000000000000000a000000", @ANYRES16=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x44) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7, 0x1}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200288008af89c6d309500a7be4680006000d00000025000700021a1ea2e5504c1946b4984361a7513d6e740d0f4a3bdd27a0052c18dac0e71068fb64c93e", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="060005004e230000060005004e24000014000400fc0000000000000000000000000000000500050007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r6, &(0x7f0000000d00)={&(0x7f00000004c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000a40)=""/186, 0xba}, {&(0x7f0000000b00)=""/196, 0xc4}], 0x3, &(0x7f0000000c40)=""/178, 0xb2}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$key(r2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.07145783s ago: executing program 0 (id=2896): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd2b, 0x8070bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) 8.995368694s ago: executing program 0 (id=2897): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="8299", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="8299", 0x2}], 0x1}}], 0x1, 0x4400c800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8017000100", @ANYRES32, @ANYBLOB="080003f8ff000090697c5e186c2562240b18b5e7b4f646acc9173f33adf3f1b852e46550d5a2180a3d23bb01a6fe8b8ed633ef3f24b85e73f8ed2821b1376d1f0ae0103a22374dee2725cb8b46d03cd3d22e23fd000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8.94609233s ago: executing program 0 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = socket(0x2, 0x1, 0xd) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="00000800feff000000bb0000000000000000000000000000a557d798f5501b232942022d32464cb3a489bfc4ef2ba4e855f791107073800f151a915707095f2a902799df3b105c708dea13f45ae700dd855727b395cad7179e2c198f5257d9c46777102f4d4fe26fc88fc871c8a33e49125a1fe09ecb93950c1231dddca83d741faaf25fffcef2f258d3e33aa281c1c6e157a00b34baae9bdc0fd0789dfbb0e6e6762c5bdb9fabc7bfb98eebfe6c5e68ed4573f94f8c2d1f3505c0d0061aeca80000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x20000000) 8.377850006s ago: executing program 34 (id=2782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r5, 0x3, 0x2070bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x4, 0x0, 0x600, 0xfca, 0x20c300a2}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1d007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.503316015s ago: executing program 4 (id=2922): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="023354e2e7c047938568e05219ea3fb843abf2fab9ba407a4a736e0f79cabc146031a074d0e8dd5347357606f6b14b03bd7ba2e1244b8d753b55358fe4e8660ddea71c2a7747923c75df2fde85691a"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000400)='%pS \x00'}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'gretap0\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x1, 0x14, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xff, 0x3, 0x8, 0xf31, 0x9}, @call={0x85, 0x0, 0x0, 0x20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000031c0)=""/4096, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000041c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004200)=[r0, r0], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004400)=@bpf_ext={0x1c, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff1e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x14}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0xaf, &(0x7f0000000680)=""/175, 0x41100, 0x6, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x5, 0x80000001, 0x3}, 0x10, 0x1b58a, r3, 0x9, &(0x7f0000004300)=[r0, r0, r0, r0, r0], &(0x7f0000004340)=[{0x0, 0x3, 0x6, 0x4}, {0x2, 0x3, 0x0, 0x6}, {0x1, 0x5, 0x4, 0xc}, {0x0, 0x4, 0x7, 0xa}, {0x2, 0x4, 0xe, 0xa}, {0x5, 0x4, 0x10, 0x2}, {0x0, 0x4, 0x3, 0x6}, {0x0, 0x1, 0xf, 0xb}, {0x1, 0x3, 0x9, 0x6}], 0x10, 0xa0}, 0x94) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r5, &(0x7f0000000040)="78d6e3", 0x3, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$unix(r9, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='}', 0x1}], 0x1, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.407692153s ago: executing program 4 (id=2924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="957e12b19bc4aa395c96fd8362ec61862e24", 0x12}, {&(0x7f0000000680)="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", 0xffd}], 0x2, 0x3, 0x8800807c) close(r1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) sendfile(r1, r0, 0x0, 0xf03a0005) 3.252080295s ago: executing program 4 (id=2927): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000200)=0x8, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000280)={0xa, 0x4c22, 0x7f, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) (async) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{0x0}, {&(0x7f0000000640)=""/51, 0x33}], 0x2}, 0xf}], 0x1, 0x10100, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0xfe, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x400}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb08004553001c0068000008019078ac148f05000000000000907800000005"], 0x0) (async) sendmsg$tipc(r1, &(0x7f0000001dc0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000dc0)="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", 0x1000, 0x660c1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) (async) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.114692065s ago: executing program 4 (id=2930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160005000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2.25538691s ago: executing program 1 (id=2931): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x15, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000004000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000bf980000000000005608000000000000850000000500"/96], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) 2.248037536s ago: executing program 4 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304130000004000000000000000", @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="25cf77853f7ad5252e3902f0398d86feacc555baa1cfd1b187", @ANYRES64=r1], 0x44}}, 0x24004000) 1.919313804s ago: executing program 6 (id=2934): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000800000091115e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400000004000003000000000000008037c24241c17e2481a2215785661963c9e922efbbcd39023cca1e93e03ca64dc5af84074b28bd2a27cf6dee50496638dfad81883ac8973c828846825bdd242add661431", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1.792964187s ago: executing program 4 (id=2935): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8001) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) connect$x25(r3, &(0x7f0000000a80), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001580), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x24}}, 0x0) 1.727880281s ago: executing program 1 (id=2936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400330c0000000000000099cd5ca666f47e11698a6fb3c47c", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = gettid() sendmsg$unix(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)='\t', 0x1}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x20008000}, 0x4000080) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000200)={0x0, 0xec, "1eb137a41b998c4bfddaa6b9e4d1369eec1e090e8baf13b6fba37c992bf1f3644d948f4ed22475796e4d6fe323c0c991f36f04f08bb929bc04250eddb0937325d16fe779279e1b19edc70a24392b4f6e8255205a84bee9163aaedf92325d8e105f1e32bdd284e9f42b85ac8a6ad6fa75c89a9c40cc353071c6c50893f9c036d8940b34af41463561c9cb4eca4ec17386d8131fc7549dae1d3903ddf4cd8a00d41c6ae7f355d10e4bd4f7346fc5a53feaa439249f07188f97c8533eb9a714fb6a8e595413150c55908e169cd5f717df95a59a12117ae9e8d0fd2ea169876e37370c8abbc0adfcca9a06180376"}) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYRES8, @ANYRES32=r8, @ANYBLOB="0000000000feffffb602000014000000b7030000000000008500000083000000bf092000000000005d09010000000000950000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48854) 1.323025011s ago: executing program 1 (id=2937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b8, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.106723802s ago: executing program 1 (id=2938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000240)=""/218, 0xda}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r0], 0x29c}, 0x1, 0x0, 0x0, 0x20}, 0x4048010) 914.583891ms ago: executing program 6 (id=2939): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x0, 0x72, "4402f981e03e869c5abb297f34614cf9191e07b55d9f8a4c5502fd262bc9eed6186af3becdf534acfd98ff9907bd0bb6d63e2883f6c43aac2093946b2ebaf3761c297fbb79fab912c5c5afd23094bead46f97676c1e83138f358f9bccc2f5dd5bfa97329b275ced972ba23c959ccb41fbbae"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x1008, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x8, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000680)="bf04000084f7b03c21d9bcddc4eef9ebb642afcc633dca5f", 0x0, 0x8000}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000800)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffff801}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '>'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r8}, 0x20) sendmmsg$inet6(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r13, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r14, 0x322, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x20000001) 913.677066ms ago: executing program 1 (id=2940): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b2660c0}}, @generic={0x6, 0x3, 0x2, 0x1, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1b}], &(0x7f0000000400)='GPL\x00', 0x100, 0x1d, &(0x7f0000000440)=""/29, 0x41100, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0x5e1c64bf}, 0x10, 0x2bce6, 0xffffffffffffffff, 0x9, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x2, 0x8001, 0x0, 0xc}, {0x0, 0x4, 0x4, 0x2}, {0x2, 0x5, 0xe, 0x2}, {0x4, 0x3, 0x0, 0xf}, {0x0, 0x4, 0x8, 0xb}, {0x5, 0x1, 0x2, 0xc}, {0x5, 0x2, 0xa, 0x3}, {0x3, 0x2, 0x3, 0x4}, {0x4, 0x4, 0x4, 0x7}], 0x10, 0x7a7ebdb}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex, 0xb, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1c, 0x14, &(0x7f00000008c0)=@ringbuf={{}, {}, {}, [@ldst={0x0, 0x2, 0x3, 0x6, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x3, 0x2, 0x4, 0xa, 0xb, 0x8, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0xf, 0xd4, &(0x7f00000009c0)=""/212, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xc, 0xd7, 0xfffffe00}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0x1], &(0x7f0000000b80)=[{0x0, 0x1, 0x8, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map=r1, 0xffffffffffffffff, 0x38, 0x2, r3, @void, @value=r5, @void, @void, r4}, 0x20) unshare(0x2c020400) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x46, &(0x7f00000002c0), 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x70}}, 0x0) 598.549329ms ago: executing program 1 (id=2941): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0x20, &(0x7f0000001940)={&(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000001880)=""/133, 0x85}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000019c0), 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@o_path={&(0x7f0000001a80)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1, 0x13, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x8}, @ldst={0x0, 0x3, 0x0, 0x9, 0xb, 0x1, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000480)='GPL\x00', 0x3a6, 0xc7, &(0x7f00000004c0)=""/199, 0x100, 0x20, '\x00', 0x0, @fallback=0x12, r3, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0x3ff, 0x3}, 0x10, r4, r5, 0x9, &(0x7f0000001b00)=[r6, r7, r9], &(0x7f0000001b40)=[{0x2, 0x3, 0x5, 0x4}, {0x5, 0x4, 0x0, 0x5}, {0x2, 0x3, 0x0, 0x6}, {0x1, 0x4, 0xe}, {0x5, 0x5, 0xa, 0x1}, {0x1, 0x1, 0xb}, {0x5, 0x2, 0x9}, {0x1, 0x5, 0x6, 0x9}, {0x5, 0x5, 0x9, 0x8}]}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x8, 0x4, {{0x2b, 0x4, 0x2, 0x37, 0xac, 0x65, 0x0, 0xf, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp={0x44, 0x24, 0xbf, 0x0, 0x7, [0x4, 0x9c0, 0x1, 0x2, 0x4, 0x1, 0x6, 0xa]}, @ssrr={0x89, 0x17, 0xa1, [@private=0xa010102, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x5a, 0xffffffffffffffff, [{0x1, 0x7, "e22d2921de"}, {0x0, 0x7, "7ebd84c46f"}, {0x6, 0xc, "66ea579e8aa5bc18d2df"}, {0x2, 0xa, "61f419ce949ca969"}, {0x1, 0xb, "cd2f64620521ce883f"}, {0x2, 0x11, "99e9e1a52a894350ceb07ef0ce96b0"}, {0x0, 0x11, "f308743fe54184e835249ecd800338"}, {0x5, 0x3, "87"}]}]}}}}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r10, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 516.624429ms ago: executing program 6 (id=2942): r0 = socket(0xa, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fe", 0x1b}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f00000003c0)="01b8a9ec6e8500f0af575a9bcaa37c0552182b9ffd4cc51306c88fbcab4ccda5a992d233c4b3d9b2909faa0c457c78e124b8eac387028b07189bfa333bb8479392bf3458634b7fe6fdf002000000000000005541989a9974e48d745c422a2fb2685ac064db49230b00000000000000986ed0c9631db5bc0e877f0a438c5d938bd3408ae2f0d6116f3280bc3e418f5003e1dddc36e5a0a498c4fa0ef633d96354a0d3b70600000000000000ad03da4882a310", 0xb2}, {0x0}, {&(0x7f0000001c40)="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", 0x4d5}], 0x6}, 0x20008b88) 426.461164ms ago: executing program 6 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) 148.212538ms ago: executing program 6 (id=2944): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bridge\x00', 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='dummy0\x00', 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newneigh={0x1c, 0x1c, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x10, 0x80, 0x2}}, 0x1c}}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bridge\x00', 0x10) (async) socket$kcm(0x2, 0x2, 0x73) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) socket$kcm(0x2, 0x2, 0x73) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='dummy0\x00', 0x10) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newneigh={0x1c, 0x1c, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x10, 0x80, 0x2}}, 0x1c}}, 0x20000084) (async) 0s ago: executing program 6 (id=2945): ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x70, r2, 0x813, 0x70bd23, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "ba0a6e9cc64a0aa63ae2e0c4663a7200"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7876d6d9483689a0256bcd794a17ff7b0d56b0a9ad2b3654154350f3"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c0, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x653, @dev={0xfe, 0x80, '\x00', 0x27}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x34, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1c89a959, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5db}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9abd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd7}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "41997b1c8af4426e398cbe935a795b6600c22c814f3dd082e8713d2f46"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff20}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x90}, 0x800) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000240), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): .790965][T11669] do_syscall_64+0x15f/0xf80 [ 214.790985][T11669] ? trace_irq_disable+0x3b/0x140 [ 214.791010][T11669] ? clear_bhb_loop+0x40/0x90 [ 214.791032][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.791050][T11669] RIP: 0033:0x7fef38f9cdd9 [ 214.791066][T11669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.791081][T11669] RSP: 002b:00007fef39e7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.791100][T11669] RAX: ffffffffffffffda RBX: 00007fef39215fa0 RCX: 00007fef38f9cdd9 [ 214.791113][T11669] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 214.791124][T11669] RBP: 00007fef39e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.791135][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.791145][T11669] R13: 00007fef39216038 R14: 00007fef39215fa0 R15: 00007ffdbd05ae48 [ 214.791175][T11669] [ 215.130747][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 215.221185][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 216.092326][T11697] FAULT_INJECTION: forcing a failure. [ 216.092326][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.105687][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.1.1679 Not tainted syzkaller #0 PREEMPT(full) [ 216.105710][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.105721][T11697] Call Trace: [ 216.105728][T11697] [ 216.105737][T11697] dump_stack_lvl+0xe8/0x150 [ 216.105761][T11697] should_fail_ex+0x412/0x560 [ 216.105788][T11697] _copy_from_user+0x2d/0xb0 [ 216.105813][T11697] __copy_msghdr+0x3c5/0x5b0 [ 216.105839][T11697] ___sys_sendmsg+0x213/0x360 [ 216.105860][T11697] ? __lock_acquire+0x6b5/0x2cf0 [ 216.105884][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.105939][T11697] ? __fget_files+0x2a/0x420 [ 216.105959][T11697] ? __fget_files+0x3a0/0x420 [ 216.105989][T11697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.106014][T11697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.106046][T11697] ? __pfx_ksys_write+0x10/0x10 [ 216.106078][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.106106][T11697] do_syscall_64+0x15f/0xf80 [ 216.106127][T11697] ? trace_irq_disable+0x3b/0x140 [ 216.106151][T11697] ? clear_bhb_loop+0x40/0x90 [ 216.106173][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.106190][T11697] RIP: 0033:0x7fd41eb9cdd9 [ 216.106207][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.106227][T11697] RSP: 002b:00007fd41fa8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.106246][T11697] RAX: ffffffffffffffda RBX: 00007fd41ee15fa0 RCX: 00007fd41eb9cdd9 [ 216.106259][T11697] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 216.106270][T11697] RBP: 00007fd41fa8d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.106281][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.106291][T11697] R13: 00007fd41ee16038 R14: 00007fd41ee15fa0 R15: 00007ffc38fbc0f8 [ 216.106320][T11697] [ 216.469940][T11706] hsr0: entered promiscuous mode [ 216.475856][T11706] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 216.483636][T11706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1684'. [ 216.591886][T11705] hsr0: left promiscuous mode [ 216.637137][T11714] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 216.663164][T11714] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 216.894495][T11731] batadv_slave_1: entered promiscuous mode [ 216.937876][T11730] batadv_slave_1: left promiscuous mode [ 217.128538][T11746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'. [ 217.304015][T11757] netlink: 'syz.4.1696': attribute type 5 has an invalid length. [ 217.684067][T11770] bond4: option min_links: invalid value (18446744073709551612) [ 217.692337][T11770] bond4: option min_links: allowed values 0 - 2147483647 [ 217.702113][T11770] bond4 (unregistering): Released all slaves [ 217.746625][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.754386][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.765507][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.830650][T11773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.843398][T11773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.861826][T11773] veth1_macvtap: left promiscuous mode [ 217.870505][T11773] veth0_macvtap: left promiscuous mode [ 217.880088][T11773] veth0_macvtap: entered promiscuous mode [ 217.900786][T11773] veth1_macvtap: entered promiscuous mode [ 217.920791][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.932110][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.941836][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.950838][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.959372][T11773] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 218.030323][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.039251][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.049797][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.065731][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.318787][T11789] netlink: 'syz.4.1707': attribute type 68 has an invalid length. [ 218.329454][T11793] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 218.340443][T11793] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1706'. [ 218.346229][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.381500][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.412904][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.442691][T11798] bridge_slave_1: left allmulticast mode [ 218.467329][T11798] bridge_slave_1: left promiscuous mode [ 218.482049][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.494933][T11798] bridge_slave_0: left allmulticast mode [ 218.501080][T11798] bridge_slave_0: left promiscuous mode [ 218.510420][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.575895][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.585993][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 218.626594][T11804] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 219.316639][T11831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.629078][T11850] geneve4: entered promiscuous mode [ 219.657882][T11850] geneve4: entered allmulticast mode [ 219.717441][T11849] geneve4: entered promiscuous mode [ 219.726793][T11849] geneve4: entered allmulticast mode [ 220.388332][T11864] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 220.400540][T11864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.137134][T11880] __nla_validate_parse: 7 callbacks suppressed [ 221.137153][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 221.182612][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 221.207661][T11880] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 221.238755][T11896] raw_sendmsg: syz.4.1737 forgot to set AF_INET. Fix it! [ 221.392219][T11902] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 221.469016][T11901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.522337][T11902] bond6: entered promiscuous mode [ 221.557387][T11902] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.652986][T11910] syzkaller0: entered promiscuous mode [ 221.671387][T11910] syzkaller0: entered allmulticast mode [ 221.682515][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 221.692007][T11917] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1744'. [ 221.692251][T11910] TC_ACT_REPEAT abuse ? [ 221.701665][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 222.233425][T11935] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1749'. [ 222.259714][T11935] syzkaller0: entered promiscuous mode [ 222.275214][T11935] syzkaller0: entered allmulticast mode [ 222.294245][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.302322][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.308745][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.315127][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.321462][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.327833][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.334176][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.340582][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.346967][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.353331][T11935] tc action pedit 'at' offset 1029 out of bounds [ 222.359740][T11935] 0: reclassify loop, rule prio 0, protocol 800 [ 222.381657][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 222.861678][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.872260][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.884185][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.894987][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.905739][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.242002][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'. [ 223.291017][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 223.484980][T11986] netlink: 'syz.0.1764': attribute type 39 has an invalid length. [ 223.493178][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 223.700573][T11963] lo speed is unknown, defaulting to 1000 [ 223.880128][T11997] No such timeout policy "syz1" [ 223.920711][T12000] IPv4: Oversized IP packet from 127.202.26.0 [ 224.301744][T12020] geneve0: entered promiscuous mode [ 224.341334][T12023] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 224.753280][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.780290][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.794193][T11963] bridge_slave_0: entered allmulticast mode [ 224.805192][T11963] bridge_slave_0: entered promiscuous mode [ 224.813833][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.821789][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.832636][T11963] bridge_slave_1: entered allmulticast mode [ 224.840410][T11963] bridge_slave_1: entered promiscuous mode [ 224.935989][ T5642] Bluetooth: hci6: command tx timeout [ 224.952661][T12052] syzkaller0: entered promiscuous mode [ 224.976326][T12052] syzkaller0: entered allmulticast mode [ 225.094561][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.137230][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.293041][T12068] : entered promiscuous mode [ 225.316796][T11963] team0: Port device team_slave_0 added [ 225.341581][T11963] team0: Port device team_slave_1 added [ 225.398007][T12078] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 225.445062][T12076] netlink: 'syz.0.1784': attribute type 11 has an invalid length. [ 225.508352][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.543233][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.605315][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.632404][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.649723][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.733940][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.804408][T11963] hsr_slave_0: entered promiscuous mode [ 225.811683][T11963] hsr_slave_1: entered promiscuous mode [ 225.819552][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 225.825851][T11963] Cannot create hsr debugfs directory [ 226.513401][T12118] 5nè‹Ò: entered promiscuous mode [ 226.850080][T12130] tipc: Enabled bearer , priority 10 [ 226.867710][T11963] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.884678][T12130] __nla_validate_parse: 14 callbacks suppressed [ 226.884696][T12130] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1799'. [ 226.912007][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.923222][T11963] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.936931][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.956014][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 226.975931][T11963] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.993885][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.012361][T12136] bridge_slave_1: left allmulticast mode [ 227.020875][ T5642] Bluetooth: hci6: command tx timeout [ 227.026007][T12136] bridge_slave_1: left promiscuous mode [ 227.044076][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.072741][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.095316][T12136] bridge_slave_0: left allmulticast mode [ 227.103376][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.115387][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.115570][T12136] bridge_slave_0: left promiscuous mode [ 227.124683][T12138] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.143852][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.243648][T11963] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.276725][T11963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.294523][T12144] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 227.307188][T12144] netlink: 'syz.5.1803': attribute type 2 has an invalid length. [ 227.353563][T12144] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1803'. [ 227.473157][T12153] netlink: 'syz.0.1804': attribute type 64 has an invalid length. [ 227.562612][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.613129][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.652869][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.660141][ T6930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.692935][T12159] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 227.716792][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 227.729545][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.736768][ T6930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.780467][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1808'. [ 227.805566][T12165] netlink: 'syz.5.1808': attribute type 7 has an invalid length. [ 227.840128][T12165] netlink: 'syz.5.1808': attribute type 8 has an invalid length. [ 227.862823][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 227.955578][ T5743] tipc: Node number set to 1887417953 [ 228.355870][T12191] syzkaller0: entered promiscuous mode [ 228.366381][T12191] syzkaller0: entered allmulticast mode [ 228.581641][T12199] lo speed is unknown, defaulting to 1000 [ 228.731992][T12202] lo speed is unknown, defaulting to 1000 [ 228.902847][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.095803][ T5642] Bluetooth: hci6: command tx timeout [ 229.720322][T12242] smbdirect: ib_dev[syz2] removed [ 229.802941][T12245] bond0: (slave dummy0): Releasing backup interface [ 229.887238][T12245] bond0: (slave bond_slave_0): Releasing backup interface [ 229.933498][T12245] bond0: (slave bond_slave_1): Releasing backup interface [ 229.964809][T12253] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 229.979696][T12245] team0: Port device team_slave_0 removed [ 230.006893][T12245] team0: Port device team_slave_1 removed [ 230.017719][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.026403][T12245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.067841][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.075510][T12245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.089627][T12245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.132694][T12240] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 230.152092][T12240] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 230.217872][T12240] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 230.283430][T11963] veth0_vlan: entered promiscuous mode [ 230.292967][T12240] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.325922][T11963] veth1_vlan: entered promiscuous mode [ 230.439151][T11963] veth0_macvtap: entered promiscuous mode [ 230.478171][T11963] veth1_macvtap: entered promiscuous mode [ 230.555535][T12269] bond0: entered promiscuous mode [ 230.579789][T12269] bond0: left promiscuous mode [ 230.634074][T12268] bond0: entered promiscuous mode [ 230.667055][T12268] bond0: left promiscuous mode [ 230.689419][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.711049][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.753571][ T6930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.772084][ T6930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.866657][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.900558][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.174911][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.176258][ T5642] Bluetooth: hci6: command tx timeout [ 231.191111][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.270598][T12300] vlan6: entered promiscuous mode [ 231.285740][T12300] bridge0: entered promiscuous mode [ 231.681133][T12294] block nbd2: server does not support multiple connections per device. [ 231.692569][T12294] block nbd2: shutting down sockets [ 231.799127][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.816779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.035718][T12321] __nla_validate_parse: 11 callbacks suppressed [ 232.035738][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 232.260326][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 232.312516][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 232.338936][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1754'. [ 232.553702][T12320] tipc: Resetting bearer [ 232.871336][T12328] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 232.920729][T12339] gre0: entered promiscuous mode [ 232.930763][T12339] gre0: entered allmulticast mode [ 232.956938][ T1159] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.994744][ T1159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.039918][ T1159] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.072388][ T1159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.147178][ T1159] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.173637][ T1159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.222711][ T1159] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.253052][ T1159] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.302846][T12363] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1852'. [ 233.309069][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 233.366521][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 233.366675][T12363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.442144][T12365] macvtap2: entered promiscuous mode [ 233.456490][T12365] macvtap2: entered allmulticast mode [ 233.462003][T12365] ip6gretap0: entered allmulticast mode [ 233.472756][T12367] ip6gretap0: left allmulticast mode [ 233.481005][T12367] macvtap2: left promiscuous mode [ 233.486253][T12367] macvtap2: left allmulticast mode [ 233.499506][T12363] netlink: 'syz.6.1852': attribute type 1 has an invalid length. [ 233.730106][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1857'. [ 233.745603][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'. [ 233.894234][T12381] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1859'. [ 233.940309][T12383] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 233.953755][T12383] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 234.434789][T12415] sctp: [Deprecated]: syz.0.1868 (pid 12415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.434789][T12415] Use struct sctp_sack_info instead [ 234.878888][T12433] geneve1: entered promiscuous mode [ 234.967751][T12435] syzkaller0: entered promiscuous mode [ 234.982191][T12435] syzkaller0: entered allmulticast mode [ 235.137926][T12451] netlink: 'syz.6.1879': attribute type 1 has an invalid length. [ 235.720021][T12492] netlink: 'syz.5.1889': attribute type 12 has an invalid length. [ 236.356311][ T5734] IPVS: starting estimator thread 0... [ 236.567505][T12532] IPVS: using max 33 ests per chain, 79200 per kthread [ 237.070255][T12559] __nla_validate_parse: 8 callbacks suppressed [ 237.070273][T12559] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.1901'. [ 237.112824][T12559] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 237.430830][T12571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1902'. [ 237.781049][T12588] netlink: 'syz.5.1906': attribute type 4 has an invalid length. [ 237.939013][T12590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1907'. [ 238.263982][T12614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1912'. [ 238.296081][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 238.312819][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1913'. [ 238.338544][T12614] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1912'. [ 238.379139][T12614] netlink: 'syz.4.1912': attribute type 3 has an invalid length. [ 238.410084][T12614] netlink: 'syz.4.1912': attribute type 2 has an invalid length. [ 238.447014][T12614] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1912'. [ 238.481647][T12614] netlink: 'syz.4.1912': attribute type 2 has an invalid length. [ 238.613353][T12637] x_tables: duplicate underflow at hook 1 [ 238.781576][T12646] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1920'. [ 238.907447][T12651] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1923'. [ 239.241490][T12669] netlink: 'syz.0.1928': attribute type 13 has an invalid length. [ 239.267198][T12669] netlink: 'syz.0.1928': attribute type 17 has an invalid length. [ 239.498435][T12681] IPVS: Scheduler module ip_vs_sip not found [ 239.731124][T12669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.744276][T12669] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.779383][T12669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.842875][T12669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.853676][T12669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.870944][T12669] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.882843][T12669] veth1_macvtap: left promiscuous mode [ 239.889738][T12669] veth0_macvtap: left promiscuous mode [ 239.895907][T12669] veth0_macvtap: left allmulticast mode [ 239.902548][T12669] veth0_macvtap: entered promiscuous mode [ 239.918382][T12669] veth1_macvtap: entered promiscuous mode [ 239.931987][T12669] veth3: left allmulticast mode [ 239.938186][T12669] bond1: left promiscuous mode [ 239.943285][T12669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.951900][T12669] team1: left promiscuous mode [ 239.957033][T12669] team1: left allmulticast mode [ 239.962266][T12669] 8021q: adding VLAN 0 to HW filter on device team1 [ 239.970003][T12669] team2: left promiscuous mode [ 239.976181][T12669] team2: left allmulticast mode [ 239.981347][T12669] 8021q: adding VLAN 0 to HW filter on device team2 [ 239.990898][T12669] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 240.098509][ T6930] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.112758][ T6930] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.172505][T12705] siw: device registration error -23 [ 240.182139][ T6930] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.208749][ T6930] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.963069][T12748] sctp: [Deprecated]: syz.0.1948 (pid 12748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.963069][T12748] Use struct sctp_sack_info instead [ 242.043433][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.057913][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.122551][T12829] __nla_validate_parse: 8 callbacks suppressed [ 242.122569][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 242.177021][T12833] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 242.191824][T12836] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 242.223253][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 242.239181][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 242.254789][T12829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.274274][T12833] bond4 (unregistering): Released all slaves [ 242.298367][T12834] bond3: (slave batadv2): Opening slave failed [ 242.322600][ T30] audit: type=1804 audit(1777857947.220:3): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1969" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2289 res=1 errno=0 [ 242.352050][ T30] audit: type=1800 audit(1777857947.250:4): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1969" name="cgroup.controllers" dev="tmpfs" ino=2289 res=0 errno=0 [ 242.527432][ T30] audit: type=1804 audit(1777857947.420:5): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1970" name="/newroot/28/memory.events" dev="tmpfs" ino=165 res=1 errno=0 [ 242.554226][T12841] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1970'. [ 242.592806][ T30] audit: type=1800 audit(1777857947.460:6): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1970" name="memory.events" dev="tmpfs" ino=165 res=0 errno=0 [ 243.062570][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 243.310460][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880793f5c00: rx timeout, send abort [ 243.536577][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 243.545613][T12907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1986'. [ 243.974804][T12927] syzkaller0: entered promiscuous mode [ 243.980586][T12927] syzkaller0: entered allmulticast mode [ 243.992406][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1992'. [ 244.010450][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1992'. [ 244.021477][T12930] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 244.043490][T12931] syzkaller0: entered promiscuous mode [ 244.050896][T12931] syzkaller0: entered allmulticast mode [ 244.057900][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 245.292221][T12981] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 245.637982][T12987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.661010][T12987] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.683379][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.114412][T12987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.130980][T12987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.171003][T12987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.192199][T12987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.214252][T12987] veth1_vlan: left promiscuous mode [ 246.222210][T12987] veth0_vlan: left promiscuous mode [ 246.228628][T12987] veth0_vlan: entered promiscuous mode [ 246.246422][T12987] veth1_vlan: entered promiscuous mode [ 246.270261][T12987] veth1_macvtap: left promiscuous mode [ 246.277154][T13018] netlink: 'syz.5.2016': attribute type 13 has an invalid length. [ 246.277709][T12987] veth0_macvtap: left promiscuous mode [ 246.292338][T12987] veth0_macvtap: entered promiscuous mode [ 246.299913][T12987] veth1_macvtap: entered promiscuous mode [ 246.311635][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.320365][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.329264][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.337193][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.352588][T12987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.366041][T12987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.376416][T12987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.384619][T12987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.398642][T12987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.409647][T12987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.418435][T12987] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 246.450594][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.457860][ T6930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.470495][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.477736][ T6930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.525110][T10470] syz1: Port: 1 Link ACTIVE [ 246.618826][ T6923] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.639066][ T6923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.660246][ T6923] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.671086][ T6923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.773999][ T6923] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.786477][ T6923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.810116][ T6923] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.825803][ T6923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.909903][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.948019][T10470] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.957757][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.108083][T10466] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.321203][T13055] __nla_validate_parse: 12 callbacks suppressed [ 247.321222][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2027'. [ 247.342147][T13052] tipc: Started in network mode [ 247.380573][T13052] tipc: Node identity 1e3dbd45e689, cluster identity 4711 [ 247.406014][T13052] tipc: Enabled bearer , priority 0 [ 247.502251][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 247.527162][T13059] mac80211_hwsim hwsim27 ªªªªª;: renamed from wlan0 (while UP) [ 247.647712][T13052] syzkaller0: entered promiscuous mode [ 247.653414][T13052] syzkaller0: entered allmulticast mode [ 247.660409][T13052] tipc: Resetting bearer [ 247.835812][ T6923] tipc: Resetting bearer [ 247.980438][T10491] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.992095][T13082] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 248.002234][T13082] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 248.014353][T13082] netdevsim netdevsim6 netdevsim0: refused to change device tx_queue_len [ 248.027288][T13080] netdevsim netdevsim6 netdevsim0: refused to change device tx_queue_len [ 248.046885][T13051] tipc: Resetting bearer [ 248.922858][T13107] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2035'. [ 249.081609][T10470] hid-generic 0005:0B57:0003.0002: item fetching failed at offset 0/1 [ 249.091191][T10470] hid-generic 0005:0B57:0003.0002: probe with driver hid-generic failed with error -22 [ 250.129256][T13117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 250.586611][T13051] tipc: Disabling bearer [ 250.598989][T10466] tipc: Node number set to 4172594501 [ 250.931544][T13132] netlink: 'syz.5.2042': attribute type 21 has an invalid length. [ 250.974996][T13132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2042'. [ 251.177469][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.369556][T13135] syzkaller0: entered promiscuous mode [ 251.376569][T13135] syzkaller0: entered allmulticast mode [ 251.411218][T13153] syzkaller0: entered promiscuous mode [ 251.425530][T13153] syzkaller0: entered allmulticast mode [ 251.503717][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2044'. [ 253.854962][T13181] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2047'. [ 253.981370][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 253.991068][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 254.119000][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 254.183275][T13195] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2052'. [ 254.272408][T13198] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2052'. [ 254.273781][T13195] hmac(sh: entered promiscuous mode [ 255.008591][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 255.187568][T13238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.632317][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'. [ 255.636512][T13265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.666359][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673170][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.954555][T13274] netlink: 'syz.6.2070': attribute type 21 has an invalid length. [ 256.053903][T13282] netlink: 'syz.6.2070': attribute type 1 has an invalid length. [ 256.345000][T13281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2074'. [ 256.727570][T13311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2080'. [ 258.441048][T13399] bond8 (unregistering): Released all slaves [ 259.064849][T13429] __nla_validate_parse: 6 callbacks suppressed [ 259.064869][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2115'. [ 259.169572][T13426] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 259.212938][T13426] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 259.351001][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 259.384662][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'. [ 259.495603][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 259.553376][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 259.594704][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'. [ 259.974013][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2123'. [ 259.993776][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2123'. [ 260.024694][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2124'. [ 260.162024][T13463] vlan2: entered allmulticast mode [ 260.169474][T13463] bridge0: entered allmulticast mode [ 260.226088][T13463] bridge0: port 1(bond4) entered blocking state [ 260.232789][T13463] bridge0: port 1(bond4) entered disabled state [ 260.239776][T13463] bond4: entered allmulticast mode [ 260.248094][T13463] bond4: entered promiscuous mode [ 260.389125][T13488] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 260.429783][T13488] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 260.478762][T13483] bond4: invalid ARP target 0.0.0.0 specified for addition [ 260.487193][T13483] bond4: option arp_ip_target: invalid value (0) [ 260.495570][T13483] bond4 (unregistering): Released all slaves [ 260.854747][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2135'. [ 261.072694][T13523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2138'. [ 261.518884][T13547] FAULT_INJECTION: forcing a failure. [ 261.518884][T13547] name failslab, interval 1, probability 0, space 0, times 0 [ 261.545975][T13547] CPU: 1 UID: 0 PID: 13547 Comm: syz.1.2145 Not tainted syzkaller #0 PREEMPT(full) [ 261.545999][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.546008][T13547] Call Trace: [ 261.546014][T13547] [ 261.546020][T13547] dump_stack_lvl+0xe8/0x150 [ 261.546042][T13547] should_fail_ex+0x412/0x560 [ 261.546066][T13547] should_failslab+0xa8/0x100 [ 261.546089][T13547] __kmalloc_noprof+0xe8/0x760 [ 261.546109][T13547] ? nf_tables_newrule+0x152c/0x28b0 [ 261.546131][T13547] ? nla_strcmp+0x106/0x140 [ 261.546153][T13547] nf_tables_newrule+0x152c/0x28b0 [ 261.546188][T13547] ? __pfx_nf_tables_newrule+0x10/0x10 [ 261.546207][T13547] ? nfnl_pernet+0x23/0x240 [ 261.546223][T13547] ? nfnl_pernet+0x23/0x240 [ 261.546246][T13547] ? __nla_parse+0x40/0x60 [ 261.546268][T13547] nfnetlink_rcv+0x123e/0x27b0 [ 261.546310][T13547] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.546338][T13547] ? ref_tracker_free+0x693/0x840 [ 261.546379][T13547] ? __netlink_deliver_tap+0x807/0x850 [ 261.546405][T13547] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.546427][T13547] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.546448][T13547] netlink_unicast+0x75c/0x8e0 [ 261.546473][T13547] netlink_sendmsg+0x813/0xb40 [ 261.546497][T13547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.546518][T13547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 261.546538][T13547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.546559][T13547] ____sys_sendmsg+0x972/0x9f0 [ 261.546578][T13547] ? __might_fault+0xaf/0x130 [ 261.546601][T13547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.546629][T13547] ? import_iovec+0x73/0xa0 [ 261.546652][T13547] ___sys_sendmsg+0x2a5/0x360 [ 261.546669][T13547] ? __lock_acquire+0x6b5/0x2cf0 [ 261.546688][T13547] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.546733][T13547] ? __fget_files+0x2a/0x420 [ 261.546749][T13547] ? __fget_files+0x3a0/0x420 [ 261.546773][T13547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 261.546793][T13547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.546818][T13547] ? __pfx_ksys_write+0x10/0x10 [ 261.546845][T13547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.546861][T13547] do_syscall_64+0x15f/0xf80 [ 261.546877][T13547] ? trace_irq_disable+0x3b/0x140 [ 261.546897][T13547] ? clear_bhb_loop+0x40/0x90 [ 261.546915][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.546929][T13547] RIP: 0033:0x7fd41eb9cdd9 [ 261.546943][T13547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.546955][T13547] RSP: 002b:00007fd41fa8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.546971][T13547] RAX: ffffffffffffffda RBX: 00007fd41ee15fa0 RCX: 00007fd41eb9cdd9 [ 261.546982][T13547] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 261.546991][T13547] RBP: 00007fd41fa8d090 R08: 0000000000000000 R09: 0000000000000000 [ 261.547000][T13547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.547008][T13547] R13: 00007fd41ee16038 R14: 00007fd41ee15fa0 R15: 00007ffc38fbc0f8 [ 261.547031][T13547] [ 262.270228][T13565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.455382][T10491] bridge0: entered promiscuous mode [ 262.621767][T13580] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 262.668239][T13588] tipc: Started in network mode [ 262.686421][T13588] tipc: Node identity fae0edad9dc, cluster identity 4711 [ 262.727311][T13588] tipc: Enabled bearer , priority 0 [ 262.988107][T13588] syzkaller0: entered promiscuous mode [ 262.995538][T13588] syzkaller0: entered allmulticast mode [ 263.001909][T13588] tipc: Resetting bearer [ 263.081496][T13578] tipc: Resetting bearer [ 264.621634][T13641] __nla_validate_parse: 7 callbacks suppressed [ 264.621654][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 264.637790][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 264.647946][T13641] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2163'. [ 266.049645][T13578] tipc: Disabling bearer [ 266.179588][T10491] tipc: Node number set to 1730211245 [ 266.308793][T13655] ip6t_srh: unknown srh match flags 4000 [ 266.336454][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2166'. [ 266.395396][T13658] netlink: 'syz.1.2167': attribute type 7 has an invalid length. [ 266.572854][T13664] bond0: (slave bond_slave_0): Releasing backup interface [ 266.588650][T13664] bond0: (slave bond_slave_1): Releasing backup interface [ 266.616296][T13664] team0: Port device team_slave_0 removed [ 266.627987][T13664] team0: Port device team_slave_1 removed [ 266.636473][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.644178][T13664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.654013][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.662792][T13664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.673070][T13664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 266.708638][T13670] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2171'. [ 266.738614][T13658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.750451][T13658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.814540][T13664] team0: Mode changed to "activebackup" [ 266.909810][T13658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.922899][T13658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.006751][T13658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.028687][T13658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.214435][T13658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.227651][T13658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.501544][T13701] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 267.612664][T13710] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 267.669596][ T1159] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.692214][ T1159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.692401][T13716] FAULT_INJECTION: forcing a failure. [ 267.692401][T13716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.730483][T13716] CPU: 0 UID: 0 PID: 13716 Comm: syz.5.2179 Not tainted syzkaller #0 PREEMPT(full) [ 267.730509][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.730520][T13716] Call Trace: [ 267.730527][T13716] [ 267.730535][T13716] dump_stack_lvl+0xe8/0x150 [ 267.730561][T13716] should_fail_ex+0x412/0x560 [ 267.730589][T13716] _copy_to_user+0x31/0xb0 [ 267.730617][T13716] simple_read_from_buffer+0xe1/0x170 [ 267.730643][T13716] proc_fail_nth_read+0x1bb/0x230 [ 267.730670][T13716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.730696][T13716] ? rw_verify_area+0x2a6/0x4d0 [ 267.730719][T13716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.730743][T13716] vfs_read+0x20c/0xa70 [ 267.730772][T13716] ? __pfx___mutex_lock+0x10/0x10 [ 267.730795][T13716] ? __pfx_vfs_read+0x10/0x10 [ 267.730827][T13716] ? __fget_files+0x2a/0x420 [ 267.730851][T13716] ? __fget_files+0x3a0/0x420 [ 267.730870][T13716] ? __fget_files+0x2a/0x420 [ 267.730899][T13716] ksys_read+0x150/0x270 [ 267.730925][T13716] ? __pfx_ksys_read+0x10/0x10 [ 267.730955][T13716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.730975][T13716] do_syscall_64+0x15f/0xf80 [ 267.730995][T13716] ? trace_irq_disable+0x3b/0x140 [ 267.731018][T13716] ? clear_bhb_loop+0x40/0x90 [ 267.731037][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.731054][T13716] RIP: 0033:0x7fef38f5d60e [ 267.731071][T13716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.731086][T13716] RSP: 002b:00007fef39e7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.731104][T13716] RAX: ffffffffffffffda RBX: 00007fef39e7e6c0 RCX: 00007fef38f5d60e [ 267.731116][T13716] RDX: 000000000000000f RSI: 00007fef39e7e0a0 RDI: 0000000000000004 [ 267.731127][T13716] RBP: 00007fef39e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 267.731138][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.731148][T13716] R13: 00007fef39216038 R14: 00007fef39215fa0 R15: 00007ffdbd05ae48 [ 267.731179][T13716] [ 268.154350][T13727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2183'. [ 268.323976][T13736] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2183'. [ 268.334778][T13728] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2182'. [ 269.359162][T10466] IPVS: starting estimator thread 0... [ 269.465282][T13745] IPVS: using max 29 ests per chain, 69600 per kthread [ 270.259875][T13701] macvlan0: entered promiscuous mode [ 270.265511][T13701] macvlan0: entered allmulticast mode [ 270.271476][T13701] bond4: entered promiscuous mode [ 270.276718][T13701] bridge0: entered promiscuous mode [ 270.283106][T13701] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 270.296500][T13701] bond4: left promiscuous mode [ 270.301408][T13701] bridge0: left promiscuous mode [ 270.383319][T13658] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.396092][T13658] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.600773][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2189'. [ 270.738547][T13767] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 270.766043][T13767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2193'. [ 270.917572][T13778] ÿ: renamed from bond_slave_0 (while UP) [ 271.348155][T13803] openvswitch: netlink: IP tunnel dst address not specified [ 272.310044][T13841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.551263][T13859] pim6reg: entered allmulticast mode [ 274.587015][T13862] pim6reg: left allmulticast mode [ 275.052476][T13892] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2217'. [ 275.134675][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'. [ 275.179782][T13897] syzkaller0: entered promiscuous mode [ 275.198851][T13897] syzkaller0: entered allmulticast mode [ 275.292938][T13902] xt_policy: neither incoming nor outgoing policy selected [ 275.328815][T13902] netlink: 'syz.5.2219': attribute type 33 has an invalid length. [ 275.353157][T13902] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2219'. [ 275.411002][T13902] `: renamed from team0 [ 275.659046][T13917] netlink: 'syz.6.2220': attribute type 1 has an invalid length. [ 275.764221][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2220'. [ 275.773548][T13917] bond1: entered promiscuous mode [ 275.773956][T13917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.875346][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2220'. [ 275.914513][T13917] bond1: (slave bridge2): making interface the new active one [ 275.939282][T13917] bridge2: entered promiscuous mode [ 275.968421][T13917] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 276.136078][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.203831][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 276.254189][T13938] sock: sock_timestamping_bind_phc: sock not bind to device [ 276.289012][T13936] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2223'. [ 276.329276][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 276.389368][T13936] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 276.404307][T13936] bond10 (unregistering): Released all slaves [ 296.683532][T14044] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2228'. [ 297.328112][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 297.715068][T14077] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2237'. [ 297.736417][T14077] netlink: 'syz.5.2237': attribute type 2 has an invalid length. [ 297.747281][T14077] netlink: 'syz.5.2237': attribute type 1 has an invalid length. [ 297.830199][T14058] tipc: Resetting bearer [ 298.039831][T14079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2238'. [ 298.123382][T14088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2238'. [ 298.190202][ T3360] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.204575][ T3360] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.225469][ T3360] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.247520][ T3360] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.693924][T14116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.750870][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 298.931023][T14139] xt_policy: too many policy elements [ 298.962361][T14142] netlink: 'syz.1.2255': attribute type 15 has an invalid length. [ 299.420498][T14148] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2256'. [ 299.485002][T14155] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.882420][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 299.914768][T14175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2263'. [ 299.941688][T14174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2262'. [ 301.070135][T14221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 301.104205][T14221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 301.721395][T14253] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 301.996152][T14267] __nla_validate_parse: 4 callbacks suppressed [ 301.996172][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2283'. [ 302.252149][T14280] IPv6: Can't replace route, no match found [ 302.267738][T14279] IPv6: Can't replace route, no match found [ 302.274856][T14279] IPv6: Can't replace route, no match found [ 302.282970][T14280] IPv6: Can't replace route, no match found [ 302.402654][T14288] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2289'. [ 302.499275][ T30] audit: type=1800 audit(1777858007.400:7): pid=14292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2291" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2364 res=0 errno=0 [ 302.631475][T14299] FAULT_INJECTION: forcing a failure. [ 302.631475][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.675851][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.0.2293 Not tainted syzkaller #0 PREEMPT(full) [ 302.675877][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.675888][T14299] Call Trace: [ 302.675895][T14299] [ 302.675903][T14299] dump_stack_lvl+0xe8/0x150 [ 302.675930][T14299] should_fail_ex+0x412/0x560 [ 302.675957][T14299] _copy_from_iter+0x1d3/0x1670 [ 302.675983][T14299] ? rcu_is_watching+0x15/0xb0 [ 302.676010][T14299] ? __pfx__copy_from_iter+0x10/0x10 [ 302.676039][T14299] ? netlink_sendmsg+0x650/0xb40 [ 302.676060][T14299] ? skb_put+0x11b/0x210 [ 302.676084][T14299] netlink_sendmsg+0x6c0/0xb40 [ 302.676114][T14299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.676139][T14299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.676162][T14299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.676188][T14299] ____sys_sendmsg+0x972/0x9f0 [ 302.676210][T14299] ? __might_fault+0xaf/0x130 [ 302.676237][T14299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.676268][T14299] ? import_iovec+0x73/0xa0 [ 302.676294][T14299] ___sys_sendmsg+0x2a5/0x360 [ 302.676316][T14299] ? __lock_acquire+0x6b5/0x2cf0 [ 302.676339][T14299] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.676394][T14299] ? __fget_files+0x2a/0x420 [ 302.676414][T14299] ? __fget_files+0x3a0/0x420 [ 302.676444][T14299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.676469][T14299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.676504][T14299] ? __pfx_ksys_write+0x10/0x10 [ 302.676534][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.676553][T14299] do_syscall_64+0x15f/0xf80 [ 302.676573][T14299] ? trace_irq_disable+0x3b/0x140 [ 302.676598][T14299] ? clear_bhb_loop+0x40/0x90 [ 302.676619][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.676636][T14299] RIP: 0033:0x7f731879cdd9 [ 302.676653][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.676668][T14299] RSP: 002b:00007f7319615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.676688][T14299] RAX: ffffffffffffffda RBX: 00007f7318a15fa0 RCX: 00007f731879cdd9 [ 302.676700][T14299] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 302.676711][T14299] RBP: 00007f7319615090 R08: 0000000000000000 R09: 0000000000000000 [ 302.676721][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.676730][T14299] R13: 00007f7318a16038 R14: 00007f7318a15fa0 R15: 00007ffedfa2be88 [ 302.676757][T14299] [ 302.942195][T14303] FAULT_INJECTION: forcing a failure. [ 302.942195][T14303] name failslab, interval 1, probability 0, space 0, times 0 [ 302.973080][T14303] CPU: 0 UID: 0 PID: 14303 Comm: syz.1.2295 Not tainted syzkaller #0 PREEMPT(full) [ 302.973105][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.973115][T14303] Call Trace: [ 302.973122][T14303] [ 302.973129][T14303] dump_stack_lvl+0xe8/0x150 [ 302.973153][T14303] should_fail_ex+0x412/0x560 [ 302.973180][T14303] should_failslab+0xa8/0x100 [ 302.973204][T14303] ? skb_clone+0x212/0x3a0 [ 302.973226][T14303] kmem_cache_alloc_noprof+0x87/0x650 [ 302.973251][T14303] ? __netlink_lookup+0xc6/0x8b0 [ 302.973277][T14303] skb_clone+0x212/0x3a0 [ 302.973305][T14303] __netlink_deliver_tap+0x404/0x850 [ 302.973339][T14303] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.973362][T14303] netlink_deliver_tap+0x19c/0x1b0 [ 302.973385][T14303] netlink_unicast+0x730/0x8e0 [ 302.973415][T14303] netlink_sendmsg+0x813/0xb40 [ 302.973447][T14303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.973472][T14303] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.973496][T14303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.973542][T14303] ____sys_sendmsg+0x972/0x9f0 [ 302.973566][T14303] ? __might_fault+0xaf/0x130 [ 302.973595][T14303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.973626][T14303] ? import_iovec+0x73/0xa0 [ 302.973653][T14303] ___sys_sendmsg+0x2a5/0x360 [ 302.973674][T14303] ? __lock_acquire+0x6b5/0x2cf0 [ 302.973698][T14303] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.973755][T14303] ? __fget_files+0x2a/0x420 [ 302.973774][T14303] ? __fget_files+0x3a0/0x420 [ 302.973807][T14303] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.973831][T14303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.973859][T14303] ? __pfx_ksys_write+0x10/0x10 [ 302.973892][T14303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.973912][T14303] do_syscall_64+0x15f/0xf80 [ 302.973932][T14303] ? trace_irq_disable+0x3b/0x140 [ 302.973956][T14303] ? clear_bhb_loop+0x40/0x90 [ 302.973978][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.973996][T14303] RIP: 0033:0x7fd41eb9cdd9 [ 302.974013][T14303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.974029][T14303] RSP: 002b:00007fd41fa8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.974048][T14303] RAX: ffffffffffffffda RBX: 00007fd41ee15fa0 RCX: 00007fd41eb9cdd9 [ 302.974061][T14303] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 302.974073][T14303] RBP: 00007fd41fa8d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.974084][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.974095][T14303] R13: 00007fd41ee16038 R14: 00007fd41ee15fa0 R15: 00007ffc38fbc0f8 [ 302.974125][T14303] [ 303.328025][T14321] netlink: 'syz.4.2303': attribute type 58 has an invalid length. [ 303.562676][T14334] wg1: entered promiscuous mode [ 303.570574][T14334] wg1: entered allmulticast mode [ 303.709851][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2309'. [ 303.747407][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'. [ 303.802225][T14337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.917656][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2312'. [ 303.940567][T14364] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 303.954033][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2312'. [ 303.971031][T14364] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2311'. [ 304.063170][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2312'. [ 304.102329][T14337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.280987][T14337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.295888][T10466] page_pool_release_retry() stalled pool shutdown: id 144, 1 inflight 60 sec [ 304.473352][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2319'. [ 304.487220][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 304.498780][T14337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.676600][T14387] bond8: invalid ARP target 0.0.0.0 specified for addition [ 304.686675][T14387] bond8: option arp_ip_target: invalid value (0) [ 304.698170][T14387] bond8 (unregistering): Released all slaves [ 304.792449][ T57] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.853855][ T57] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.962214][ T6930] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.031456][ T6930] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.066620][T14399] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 305.231007][T14409] netlink: 'syz.6.2327': attribute type 1 has an invalid length. [ 305.309461][T14409] netlink: 'syz.6.2327': attribute type 3 has an invalid length. [ 305.332167][T14409] netlink: 'syz.6.2327': attribute type 3 has an invalid length. [ 306.882942][T14485] netlink: 'syz.6.2345': attribute type 1 has an invalid length. [ 307.450413][T14508] __nla_validate_parse: 15 callbacks suppressed [ 307.450431][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 307.790344][T14537] netlink: 'syz.5.2364': attribute type 1 has an invalid length. [ 307.864196][T14530] syzkaller1: entered promiscuous mode [ 307.869923][T14530] syzkaller1: entered allmulticast mode [ 307.956797][T14527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.976436][T14527] bond7: (slave bond8): making interface the new active one [ 307.984579][T14527] bond7: (slave bond8): Enslaving as an active interface with an up link [ 308.288712][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 308.599402][T14579] syzkaller1: entered promiscuous mode [ 308.608284][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 308.618034][T14579] syzkaller1: entered allmulticast mode [ 308.641768][T14582] erspan0: entered promiscuous mode [ 308.649193][T14582] macsec1: entered promiscuous mode [ 308.661456][T14582] erspan0: left promiscuous mode [ 308.866797][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 308.908232][T14582] syzkaller1: entered promiscuous mode [ 308.951973][T14589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2378'. [ 308.958068][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2379'. [ 309.001577][T14596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2379'. [ 309.282824][T14620] netlink: 'syz.0.2385': attribute type 15 has an invalid length. [ 309.291137][T14620] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2385'. [ 309.304693][T14620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.415495][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.654622][T14638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'. [ 309.677984][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'. [ 309.707107][T14641] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 309.723894][T14646] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 309.804801][T14642] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 309.823844][T14642] syzkaller1: Refused to change device type [ 310.534396][T14690] netlink: 'syz.4.2404': attribute type 13 has an invalid length. [ 310.937165][T10489] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.081933][T14718] netlink: 'syz.5.2409': attribute type 1 has an invalid length. [ 311.173620][T14718] bond10: entered promiscuous mode [ 311.179133][T14718] bond10: entered allmulticast mode [ 311.185033][T14718] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.344620][T14722] erspan1: entered allmulticast mode [ 311.355379][T14722] bond10: (slave erspan1): making interface the new active one [ 311.363533][T14722] erspan1: entered promiscuous mode [ 311.371781][T14722] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 311.383516][T14726] netlink: 'syz.4.2411': attribute type 13 has an invalid length. [ 311.398102][T14726] netlink: 'syz.4.2411': attribute type 17 has an invalid length. [ 311.565414][T10489] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.955842][T14731] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 311.963981][T14731] netlink: 'syz.1.2412': attribute type 4 has an invalid length. [ 311.974185][T14731] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 311.996268][T14731] netlink: 'syz.1.2412': attribute type 4 has an invalid length. [ 312.137946][T14726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.289947][T14726] geneve1: left promiscuous mode [ 312.355943][T10489] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.437901][T14726] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 312.934783][T14766] __nla_validate_parse: 9 callbacks suppressed [ 312.934800][T14766] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2422'. [ 313.239762][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2425'. [ 313.256378][T10489] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.281299][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.306717][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.450576][T14784] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 313.509265][T14786] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2426'. [ 313.567306][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2431'. [ 314.056604][ T5743] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.093580][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 314.105078][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 314.631253][T14843] validate_nla: 2 callbacks suppressed [ 314.631271][T14843] netlink: 'syz.6.2445': attribute type 1 has an invalid length. [ 314.687839][T14843] bond2: entered promiscuous mode [ 314.693269][T14843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.757916][T14843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.766595][T14843] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 314.779131][T14843] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 314.799182][T14843] bond2: (slave wireguard0): making interface the new active one [ 314.807250][T14843] wireguard0: entered promiscuous mode [ 314.814407][T14843] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 314.837722][T14850] hmac(sh: entered promiscuous mode [ 315.305000][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'. [ 315.313991][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2456'. [ 315.361574][T14883] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 315.478605][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 315.531568][T14905] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 315.548831][T14883] 8021q: adding VLAN 0 to HW filter on device bond10 [ 315.590775][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 316.284951][T14936] syz.0.2471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.324585][T14936] CPU: 1 UID: 0 PID: 14936 Comm: syz.0.2471 Not tainted syzkaller #0 PREEMPT(full) [ 316.324615][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.324628][T14936] Call Trace: [ 316.324636][T14936] [ 316.324645][T14936] dump_stack_lvl+0xe8/0x150 [ 316.324688][T14936] warn_alloc+0x249/0x340 [ 316.324719][T14936] ? stack_trace_save+0xa9/0x100 [ 316.324753][T14936] ? __pfx_warn_alloc+0x10/0x10 [ 316.324789][T14936] ? kasan_save_track+0x4f/0x80 [ 316.324814][T14936] ? kasan_save_track+0x3e/0x80 [ 316.324837][T14936] ? __kasan_kmalloc+0x93/0xb0 [ 316.324862][T14936] ? __kmalloc_cache_noprof+0x31c/0x660 [ 316.324890][T14936] ? xskq_create+0x56/0x170 [ 316.324910][T14936] ? xsk_setsockopt+0x54c/0x990 [ 316.324940][T14936] ? do_sock_setsockopt+0x17c/0x1b0 [ 316.324964][T14936] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 316.324988][T14936] ? do_syscall_64+0x15f/0xf80 [ 316.325017][T14936] __vmalloc_node_range_noprof+0x132/0x1750 [ 316.325082][T14936] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.325111][T14936] ? __kasan_kmalloc+0x93/0xb0 [ 316.325142][T14936] vmalloc_user_noprof+0xad/0xe0 [ 316.325167][T14936] ? xskq_create+0xbf/0x170 [ 316.325186][T14936] xskq_create+0xbf/0x170 [ 316.325209][T14936] xsk_init_queue+0x8a/0xe0 [ 316.325229][T14936] xsk_setsockopt+0x54c/0x990 [ 316.325264][T14936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.325295][T14936] ? __pfx_aa_sk_perm+0x10/0x10 [ 316.325322][T14936] ? aa_sock_opt_perm+0xff/0x1a0 [ 316.325351][T14936] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 316.325377][T14936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.325408][T14936] do_sock_setsockopt+0x17c/0x1b0 [ 316.325439][T14936] __x64_sys_setsockopt+0x13d/0x1b0 [ 316.325466][T14936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.325489][T14936] do_syscall_64+0x15f/0xf80 [ 316.325511][T14936] ? trace_irq_disable+0x3b/0x140 [ 316.325542][T14936] ? clear_bhb_loop+0x40/0x90 [ 316.325566][T14936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.325586][T14936] RIP: 0033:0x7f731879cdd9 [ 316.325605][T14936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.325622][T14936] RSP: 002b:00007f7319615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.325644][T14936] RAX: ffffffffffffffda RBX: 00007f7318a15fa0 RCX: 00007f731879cdd9 [ 316.325667][T14936] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 316.325679][T14936] RBP: 00007f7318832d69 R08: 0000000000000004 R09: 0000000000000000 [ 316.325691][T14936] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.325704][T14936] R13: 00007f7318a16038 R14: 00007f7318a15fa0 R15: 00007ffedfa2be88 [ 316.325737][T14936] [ 316.601550][T14936] Mem-Info: [ 316.608940][T14936] active_anon:7830 inactive_anon:0 isolated_anon:0 [ 316.608940][T14936] active_file:3472 inactive_file:40072 isolated_file:0 [ 316.608940][T14936] unevictable:768 dirty:228 writeback:0 [ 316.608940][T14936] slab_reclaimable:11978 slab_unreclaimable:132883 [ 316.608940][T14936] mapped:40977 shmem:1430 pagetables:3544 [ 316.608940][T14936] sec_pagetables:0 bounce:0 [ 316.608940][T14936] kernel_misc_reclaimable:0 [ 316.608940][T14936] free:1254028 free_pcp:15775 free_cma:0 [ 316.659765][T14936] Node 0 active_anon:32120kB inactive_anon:0kB active_file:13888kB inactive_file:160076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163908kB dirty:912kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15392kB pagetables:14008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.724454][T14936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.777493][T14936] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.876451][T14936] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 316.908643][T14936] Node 0 DMA32 free:1054496kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35120kB inactive_anon:0kB active_file:13888kB inactive_file:160076kB unevictable:1536kB writepending:920kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:58292kB local_pcp:41460kB free_cma:0kB [ 317.016455][T14936] lowmem_reserve[]: 0 0 0 0 0 [ 317.029651][T14936] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 317.105930][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.107002][T14936] lowmem_reserve[]: 0 0 0 0 0 [ 317.191350][T14936] Node 1 Normal free:3947872kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.300113][T14936] lowmem_reserve[]: 0 0 0 0 0 [ 317.328319][T14936] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.369009][T14936] Node 0 DMA32: 5406*4kB (UME) 3189*8kB (UE) 1478*16kB (UME) 120*32kB (UME) 366*64kB (UME) 829*128kB (UM) 600*256kB (UM) 328*512kB (UME) 177*1024kB (UME) 38*2048kB (UE) 65*4096kB (UM) = 1051008kB [ 317.399164][T14936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.415309][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.462099][T14936] Node 1 Normal: 2*4kB (UM) 11*8kB (UM) 6*16kB (UM) 9*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947872kB [ 317.489228][T14936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.554568][T14936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.569123][T14936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.607889][T14936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.645876][T14936] 44970 total pagecache pages [ 317.662621][T14936] 0 pages in swap cache [ 317.681056][T14936] Free swap = 124996kB [ 317.696841][T14936] Total swap = 124996kB [ 317.707460][T14936] 2097051 pages RAM [ 317.718224][T14936] 0 pages HighMem/MovableOnly [ 317.732837][T14936] 427099 pages reserved [ 317.744397][T14936] 0 pages cma reserved [ 317.923234][T14985] FAULT_INJECTION: forcing a failure. [ 317.923234][T14985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.009246][T14985] CPU: 0 UID: 0 PID: 14985 Comm: syz.0.2479 Not tainted syzkaller #0 PREEMPT(full) [ 318.009272][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.009282][T14985] Call Trace: [ 318.009289][T14985] [ 318.009297][T14985] dump_stack_lvl+0xe8/0x150 [ 318.009322][T14985] should_fail_ex+0x412/0x560 [ 318.009348][T14985] _copy_from_iter+0x1d3/0x1670 [ 318.009375][T14985] ? rcu_is_watching+0x15/0xb0 [ 318.009403][T14985] ? __pfx__copy_from_iter+0x10/0x10 [ 318.009433][T14985] ? netlink_sendmsg+0x650/0xb40 [ 318.009453][T14985] ? skb_put+0x11b/0x210 [ 318.009475][T14985] netlink_sendmsg+0x6c0/0xb40 [ 318.009503][T14985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.009527][T14985] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.009551][T14985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.009577][T14985] ____sys_sendmsg+0x972/0x9f0 [ 318.009598][T14985] ? __might_fault+0xaf/0x130 [ 318.009625][T14985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.009652][T14985] ? import_iovec+0x73/0xa0 [ 318.009676][T14985] ___sys_sendmsg+0x2a5/0x360 [ 318.009696][T14985] ? __lock_acquire+0x6b5/0x2cf0 [ 318.009718][T14985] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.009770][T14985] ? __fget_files+0x2a/0x420 [ 318.009789][T14985] ? __fget_files+0x3a0/0x420 [ 318.009816][T14985] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.009841][T14985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.009876][T14985] ? __pfx_ksys_write+0x10/0x10 [ 318.009908][T14985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.009928][T14985] do_syscall_64+0x15f/0xf80 [ 318.009949][T14985] ? trace_irq_disable+0x3b/0x140 [ 318.009972][T14985] ? clear_bhb_loop+0x40/0x90 [ 318.009994][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.010011][T14985] RIP: 0033:0x7f731879cdd9 [ 318.010029][T14985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.010043][T14985] RSP: 002b:00007f73195f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.010063][T14985] RAX: ffffffffffffffda RBX: 00007f7318a16090 RCX: 00007f731879cdd9 [ 318.010076][T14985] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 318.010087][T14985] RBP: 00007f73195f4090 R08: 0000000000000000 R09: 0000000000000000 [ 318.010098][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.010107][T14985] R13: 00007f7318a16128 R14: 00007f7318a16090 R15: 00007ffedfa2be88 [ 318.010136][T14985] [ 318.734474][T14994] __nla_validate_parse: 3 callbacks suppressed [ 318.734491][T14994] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2484'. [ 319.055646][T15010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2489'. [ 319.065944][T15013] netlink: 'syz.6.2490': attribute type 1 has an invalid length. [ 319.089421][T15010] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2489'. [ 319.116965][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2489'. [ 319.166060][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2489'. [ 319.270270][T15010] ip6tnl1: entered allmulticast mode [ 319.321734][T15037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.329058][T15037] IPv6: NLM_F_CREATE should be set when creating new route [ 319.336392][T15037] IPv6: NLM_F_CREATE should be set when creating new route [ 319.380769][T15013] veth5: entered allmulticast mode [ 319.415015][T15042] FAULT_INJECTION: forcing a failure. [ 319.415015][T15042] name failslab, interval 1, probability 0, space 0, times 0 [ 319.429187][T15013] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 319.438552][T15042] CPU: 1 UID: 0 PID: 15042 Comm: syz.0.2496 Not tainted syzkaller #0 PREEMPT(full) [ 319.438578][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.438588][T15042] Call Trace: [ 319.438595][T15042] [ 319.438602][T15042] dump_stack_lvl+0xe8/0x150 [ 319.438627][T15042] should_fail_ex+0x412/0x560 [ 319.438654][T15042] should_failslab+0xa8/0x100 [ 319.438680][T15042] ? skb_clone+0x212/0x3a0 [ 319.438702][T15042] kmem_cache_alloc_noprof+0x87/0x650 [ 319.438723][T15042] ? apparmor_capable+0x126/0x170 [ 319.438754][T15042] skb_clone+0x212/0x3a0 [ 319.438774][T15042] ? nfnetlink_rcv+0x4b0/0x27b0 [ 319.438796][T15042] nfnetlink_rcv+0x4de/0x27b0 [ 319.438818][T15042] ? kernel_text_address+0xa5/0xe0 [ 319.438844][T15042] ? __kernel_text_address+0xd/0x30 [ 319.438869][T15042] ? arch_stack_walk+0xfb/0x150 [ 319.438902][T15042] ? stack_trace_save+0xa9/0x100 [ 319.438930][T15042] ? __lock_acquire+0x6b5/0x2cf0 [ 319.438948][T15042] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 319.438984][T15042] ? __lock_acquire+0x6b5/0x2cf0 [ 319.439014][T15042] ? __netlink_lookup+0xc6/0x8b0 [ 319.439046][T15042] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.439067][T15042] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.439094][T15042] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.439114][T15042] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.439140][T15042] netlink_unicast+0x75c/0x8e0 [ 319.439170][T15042] netlink_sendmsg+0x813/0xb40 [ 319.439200][T15042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.439225][T15042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.439248][T15042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.439274][T15042] ____sys_sendmsg+0x972/0x9f0 [ 319.439296][T15042] ? __might_fault+0xaf/0x130 [ 319.439324][T15042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.439355][T15042] ? import_iovec+0x73/0xa0 [ 319.439384][T15042] ___sys_sendmsg+0x2a5/0x360 [ 319.439405][T15042] ? __lock_acquire+0x6b5/0x2cf0 [ 319.439440][T15042] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.439496][T15042] ? __fget_files+0x2a/0x420 [ 319.439515][T15042] ? __fget_files+0x3a0/0x420 [ 319.439545][T15042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.439571][T15042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.439603][T15042] ? __pfx_ksys_write+0x10/0x10 [ 319.439635][T15042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.439655][T15042] do_syscall_64+0x15f/0xf80 [ 319.439676][T15042] ? trace_irq_disable+0x3b/0x140 [ 319.439701][T15042] ? clear_bhb_loop+0x40/0x90 [ 319.439723][T15042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.439740][T15042] RIP: 0033:0x7f731879cdd9 [ 319.439757][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.439773][T15042] RSP: 002b:00007f7319615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.439792][T15042] RAX: ffffffffffffffda RBX: 00007f7318a15fa0 RCX: 00007f731879cdd9 [ 319.439805][T15042] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 319.439816][T15042] RBP: 00007f7319615090 R08: 0000000000000000 R09: 0000000000000000 [ 319.439827][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.439837][T15042] R13: 00007f7318a16038 R14: 00007f7318a15fa0 R15: 00007ffedfa2be88 [ 319.439865][T15042] [ 319.440748][ T6918] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.767759][T15049] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2497'. [ 319.768314][T10470] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.784534][ T6918] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.788474][T15049] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2497'. [ 320.077463][T10470] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.388743][T15078] veth7: entered allmulticast mode [ 320.399632][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 320.413267][ T30] audit: type=1804 audit(1777858025.310:8): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2506" name="/newroot/509/memory.events" dev="tmpfs" ino=2602 res=1 errno=0 [ 320.443317][ T30] audit: type=1800 audit(1777858025.340:9): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2506" name="memory.events" dev="tmpfs" ino=2602 res=0 errno=0 [ 320.467932][ T30] audit: type=1804 audit(1777858025.340:10): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2506" name="/newroot/509/memory.events" dev="tmpfs" ino=2602 res=1 errno=0 [ 320.514552][ T30] audit: type=1804 audit(1777858025.340:11): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2506" name="/newroot/509/memory.events" dev="tmpfs" ino=2602 res=1 errno=0 [ 320.517608][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2503'. [ 320.602618][T15078] ipvlan2: entered allmulticast mode [ 320.608282][T15078] syz_tun: entered allmulticast mode [ 320.695625][T10470] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.813596][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 321.220236][T15125] netlink: 'syz.5.2515': attribute type 22 has an invalid length. [ 321.247838][T15125] bond0: option ad_select: unable to set because the bond device is up [ 321.782235][T15156] rdma_op ffff88807fb779f0 conn xmit_rdma 0000000000000000 [ 321.807600][T15154] netlink: 'syz.5.2524': attribute type 1 has an invalid length. [ 321.845266][T15168] IPVS: length: 128 != 8 [ 321.906963][T15154] bond11: entered promiscuous mode [ 321.925681][T15154] 8021q: adding VLAN 0 to HW filter on device bond11 [ 321.980398][T15170] macvtap1: entered allmulticast mode [ 321.991526][T15176] netlink: 'syz.0.2528': attribute type 3 has an invalid length. [ 322.000295][T15176] netlink: 'syz.0.2528': attribute type 2 has an invalid length. [ 322.008206][T15176] netlink: 'syz.0.2528': attribute type 2 has an invalid length. [ 322.061834][T15154] bond11: (slave bridge4): making interface the new active one [ 322.091441][T15154] bridge4: entered promiscuous mode [ 322.116510][T15154] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 322.150707][T15182] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.185076][T15186] netlink: 'syz.0.2530': attribute type 1 has an invalid length. [ 322.921319][T15239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.055365][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.133675][T15184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.414373][T15265] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 325.420176][T15269] netlink: 'syz.5.2552': attribute type 1 has an invalid length. [ 325.471989][T15269] bond12: entered promiscuous mode [ 325.477582][T15269] bond12: entered allmulticast mode [ 325.483307][T15269] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.515638][T15265] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.694615][T15276] bond5: entered promiscuous mode [ 325.702291][T15276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.866450][T15291] __nla_validate_parse: 12 callbacks suppressed [ 325.866467][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2557'. [ 325.883827][T15294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2557'. [ 325.970921][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'. [ 326.192001][T15311] netlink: 'syz.5.2565': attribute type 1 has an invalid length. [ 326.276381][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2565'. [ 326.355963][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 326.373362][T15311] bond13: entered promiscuous mode [ 326.390308][T15311] 8021q: adding VLAN 0 to HW filter on device bond13 [ 326.409641][T15319] bond13: entered allmulticast mode [ 326.427789][T15332] netlink: 'syz.1.2569': attribute type 21 has an invalid length. [ 326.463609][T15311] bond13: (slave bridge5): making interface the new active one [ 326.471714][T15311] bridge5: entered promiscuous mode [ 326.481041][T15311] bridge5: entered allmulticast mode [ 326.496184][T15311] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 326.506288][T15332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2569'. [ 326.519620][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2569'. [ 326.599713][T15327] syzkaller0: entered promiscuous mode [ 326.609077][T15327] syzkaller0: entered allmulticast mode [ 326.667392][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2571'. [ 326.961812][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'. [ 326.971317][T15349] netlink: 'syz.4.2574': attribute type 30 has an invalid length. [ 326.982301][T15349] netlink: 'syz.4.2574': attribute type 29 has an invalid length. [ 326.990561][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 327.274829][T15353] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 329.257673][T15353] bond6: entered promiscuous mode [ 329.263541][T15353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.489499][T15367] ip6tnl2: entered promiscuous mode [ 329.502495][T15367] ip6tnl2: entered allmulticast mode [ 329.800822][T15376] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.841235][T15376] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.157635][T15376] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.211671][T15376] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.341539][T15408] nbd: device at index 64 is going down [ 330.562255][T15376] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.576327][T15376] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.594115][T15123] udevd[15123]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.611668][T15122] udevd[15122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.696230][T15376] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.723069][T15376] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.016934][T15446] vlan1: entered promiscuous mode [ 331.022152][T15446] bridge0: entered promiscuous mode [ 331.066504][T15451] netlink: 'syz.0.2605': attribute type 4 has an invalid length. [ 331.078294][T15453] __nla_validate_parse: 15 callbacks suppressed [ 331.078311][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'. [ 331.118767][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.129504][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2609'. [ 331.140562][T15453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.189004][ T6918] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.203233][ T6918] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.233539][ T1159] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.242452][ T1159] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.260389][ T1159] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.267811][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'. [ 331.269201][ T1159] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.351277][ T6918] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.363134][ T6918] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.513180][T15467] tipc: Enabled bearer , priority 0 [ 331.527996][T15467] syzkaller0: entered promiscuous mode [ 331.536548][T15467] syzkaller0: entered allmulticast mode [ 331.547751][T15470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2613'. [ 331.578925][T15467] tipc: Resetting bearer [ 331.592813][T15466] tipc: Resetting bearer [ 331.619159][T15466] tipc: Disabling bearer [ 332.224398][T15499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2624'. [ 332.253538][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'. [ 332.268313][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2625'. [ 332.279396][T15499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2624'. [ 332.322621][T15503] macsec1: entered promiscuous mode [ 332.356791][T15503] bridge0: entered promiscuous mode [ 332.357334][T15505] netlink: 'syz.5.2625': attribute type 4 has an invalid length. [ 332.455777][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.757464][ T30] audit: type=1804 audit(1777858037.660:12): pid=15516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2630" name="/newroot/377/memory.events" dev="tmpfs" ino=1935 res=1 errno=0 [ 332.784129][T15521] bridge0: port 3(vlan1) entered blocking state [ 332.794710][T15521] bridge0: port 3(vlan1) entered disabled state [ 332.805672][T15521] vlan1: entered allmulticast mode [ 332.816307][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 332.816921][T15521] dummy0: entered allmulticast mode [ 332.835630][ T30] audit: type=1800 audit(1777858037.660:13): pid=15516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2630" name="memory.events" dev="tmpfs" ino=1935 res=0 errno=0 [ 332.864253][T15521] vlan1: entered promiscuous mode [ 332.893840][T15521] dummy0: entered promiscuous mode [ 332.962055][T15524] netlink: 'syz.5.2630': attribute type 1 has an invalid length. [ 332.992237][T15524] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2630'. [ 334.098134][T15589] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 334.106938][T15589] netlink: 'syz.1.2649': attribute type 2 has an invalid length. [ 334.216044][ T5743] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.301719][T15592] netlink: 'syz.5.2650': attribute type 8 has an invalid length. [ 334.365660][T10488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.536001][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 334.574204][T15605] netlink: 'syz.1.2653': attribute type 83 has an invalid length. [ 334.584074][ T6931] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.809715][T15624] netlink: 'syz.6.2658': attribute type 2 has an invalid length. [ 334.827131][T15623] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.069934][T15639] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 335.295542][T15637] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 335.340519][T15648] syzkaller0: entered promiscuous mode [ 335.361189][T15648] syzkaller0: entered allmulticast mode [ 335.524225][T15662] žÿ: renamed from team_slave_1 (while UP) [ 335.687480][ T1159] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.707298][ T1159] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.831829][T15671] netlink: 'syz.1.2672': attribute type 8 has an invalid length. [ 335.985871][T10491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.511914][T15708] __nla_validate_parse: 10 callbacks suppressed [ 336.511933][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2684'. [ 336.738142][T15724] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2687'. [ 337.106679][T15744] netlink: 'syz.1.2694': attribute type 9 has an invalid length. [ 337.130738][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 337.242310][T15744] gretap0: entered promiscuous mode [ 337.250716][T15744] macvlan0: entered promiscuous mode [ 337.256925][T15744] macvlan0: entered allmulticast mode [ 337.262692][T15744] gretap0: entered allmulticast mode [ 337.303149][T15749] veth0_macvtap: entered allmulticast mode [ 337.330283][T15749] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 337.539595][T15757] macsec1: entered promiscuous mode [ 337.545595][T15757] batadv0: entered promiscuous mode [ 337.552369][T15757] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 337.561210][T15757] batadv0: left promiscuous mode [ 337.571500][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2698'. [ 337.602886][T15758] pim6reg1: entered promiscuous mode [ 337.608618][T15758] pim6reg1: entered allmulticast mode [ 337.624022][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2698'. [ 337.707046][T15764] tipc: Enabled bearer , priority 0 [ 337.741790][T15764] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 337.770066][T15764] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 337.782562][T15774] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 337.833270][T15776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2702'. [ 337.858572][T15774] bond8: entered promiscuous mode [ 337.864631][T15780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2701'. [ 337.869617][T15774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.882065][T15780] bond8: left promiscuous mode [ 338.307801][T15791] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2705'. [ 338.609194][T15808] lo speed is unknown, defaulting to 1000 [ 338.626479][T15808] lo speed is unknown, defaulting to 1000 [ 338.638867][T15808] lo speed is unknown, defaulting to 1000 [ 338.649956][T15808] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.694827][T15808] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.740596][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2710'. [ 338.745212][T15808] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.834248][T15808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 338.881228][T15808] lo speed is unknown, defaulting to 1000 [ 338.893384][T15808] lo speed is unknown, defaulting to 1000 [ 338.896757][T15820] syzkaller0: entered promiscuous mode [ 338.913216][T15820] syzkaller0: entered allmulticast mode [ 338.925236][T15808] lo speed is unknown, defaulting to 1000 [ 338.934518][T15808] lo speed is unknown, defaulting to 1000 [ 338.978889][T15808] lo speed is unknown, defaulting to 1000 [ 338.989046][T15808] lo speed is unknown, defaulting to 1000 [ 339.004000][T15808] lo speed is unknown, defaulting to 1000 [ 339.827645][T15837] macsec0: entered promiscuous mode [ 339.834085][T15837] macsec0: left promiscuous mode [ 339.852003][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2718'. [ 339.943278][T15842] 8021q: adding VLAN 0 to HW filter on device ` [ 339.954014][T15842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.009655][T15842] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 340.055319][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.099394][T15851] netlink: 'syz.5.2724': attribute type 1 has an invalid length. [ 340.108318][T15851] netlink: 'syz.5.2724': attribute type 2 has an invalid length. [ 341.053206][ T1159] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.069349][ T1159] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.085815][ T1159] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.102014][ T1159] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.120081][ T1159] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.135665][ T1159] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.145342][ T1159] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.153743][ T1159] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.181358][T15864] netlink: 'syz.5.2726': attribute type 1 has an invalid length. [ 342.055388][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.306182][T15830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.318280][T15846] __nla_validate_parse: 2 callbacks suppressed [ 342.318298][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 342.473353][T15869] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 342.494524][T15873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.511572][T15870] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 342.734243][T15890] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.2736'. [ 342.867660][T15889] syzkaller1: entered promiscuous mode [ 342.873516][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 342.892599][T15889] syzkaller1: entered allmulticast mode [ 342.994763][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2739'. [ 343.019526][T15905] x_tables: duplicate underflow at hook 2 [ 343.030970][T15900] tipc: Enabled bearer , priority 0 [ 343.044752][T15900] syzkaller0: entered promiscuous mode [ 343.061376][T15900] syzkaller0: entered allmulticast mode [ 343.140399][T15900] tipc: Resetting bearer [ 343.162739][T15908] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2741'. [ 343.194625][T15900] tipc: Disabling bearer [ 343.227266][T15908] netlink: 'syz.5.2741': attribute type 3 has an invalid length. [ 343.314862][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 343.327357][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 343.412686][T15929] x_tables: duplicate underflow at hook 3 [ 343.473875][T15935] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2747'. [ 343.806717][ T5642] Bluetooth: hci6: link tx timeout [ 343.815720][ T5642] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.825847][T15951] vlan1: entered promiscuous mode [ 343.839621][T15951] gretap0: entered promiscuous mode [ 343.962962][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2756'. [ 343.990622][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2756'. [ 344.040466][T15956] team0 (unregistering): Port device team_slave_0 removed [ 344.088267][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.104677][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.116483][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.128389][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.137642][T15956] team0 (unregistering): Port device team_slave_1 removed [ 344.145487][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.750418][T16005] netlink: Unknown conntrack attr (type=2304, max=9) [ 344.999544][T16014] dvmrp8: entered allmulticast mode [ 345.070218][T16014] tunl0: entered promiscuous mode [ 345.174166][T16014] syzkaller0: entered promiscuous mode [ 345.200468][T16014] syzkaller0: entered allmulticast mode [ 345.218369][T15962] lo speed is unknown, defaulting to 1000 [ 345.454968][T16038] bond7: option broadcast_neighbor: invalid value (30) [ 345.465476][T16038] bond7 (unregistering): Released all slaves [ 345.897314][ T5642] Bluetooth: hci6: command 0x0405 tx timeout [ 345.973659][T16059] sctp: [Deprecated]: syz.6.2779 (pid 16059) Use of int in maxseg socket option. [ 345.973659][T16059] Use struct sctp_assoc_value instead [ 346.024112][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.034586][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.042239][T15962] bridge_slave_0: entered allmulticast mode [ 346.050354][T15962] bridge_slave_0: entered promiscuous mode [ 346.059719][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.067123][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.074552][T15962] bridge_slave_1: entered allmulticast mode [ 346.083985][T15962] bridge_slave_1: entered promiscuous mode [ 346.155490][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.207566][T16073] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 346.220883][ T50] Bluetooth: hci7: command tx timeout [ 346.253025][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.347257][T15962] team0: Port device team_slave_0 added [ 346.356824][T15962] team0: Port device team_slave_1 added [ 346.401635][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.415652][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.452946][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.476829][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.483826][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.510469][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.642391][T15962] hsr_slave_0: entered promiscuous mode [ 346.654849][T15962] hsr_slave_1: entered promiscuous mode [ 346.663206][T15962] debugfs: 'hsr0' already exists in 'hsr' [ 346.669374][T15962] Cannot create hsr debugfs directory [ 346.677544][T16092] lo speed is unknown, defaulting to 1000 [ 347.283341][T15962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.295873][T15962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.398742][T15962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.409376][T15962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.510481][T15962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.523074][T15962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.686617][T15962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.697596][T15962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.939432][T16143] netlink: 'syz.6.2792': attribute type 23 has an invalid length. [ 348.295185][ T50] Bluetooth: hci7: command tx timeout [ 349.095328][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.735446][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 350.079396][T16124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.097495][T15962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.159335][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.176337][T15962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.226611][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.256183][T15962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.280324][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.294327][T16150] __nla_validate_parse: 7 callbacks suppressed [ 350.294345][T16150] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2796'. [ 350.294621][T15962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.321601][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.353880][T16154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2797'. [ 350.375404][ T50] Bluetooth: hci7: command tx timeout [ 350.385402][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 350.397467][T16154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2797'. [ 350.408657][T16154] sock: sock_timestamping_bind_phc: sock not bind to device [ 350.547784][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.589911][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.609615][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.616831][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.641415][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.648640][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.741922][T16180] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2803'. [ 350.753044][T16180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.921638][T16189] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2806'. [ 350.948447][T16189] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2806'. [ 351.384843][T16210] hmac(sha224): entered promiscuous mode [ 351.542997][T15962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.113020][T15962] veth0_vlan: entered promiscuous mode [ 352.152883][T15962] veth1_vlan: entered promiscuous mode [ 352.294478][T15962] veth0_macvtap: entered promiscuous mode [ 352.343570][T15962] veth1_macvtap: entered promiscuous mode [ 352.400194][T15962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.428622][T15962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.456347][ T50] Bluetooth: hci7: command tx timeout [ 352.469579][ T6931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.492405][ T6931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.503870][ T6931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.515485][ T6931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.787112][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.795682][T16277] pimreg0: tun_chr_ioctl cmd 1074025681 [ 352.819739][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.942356][ T6931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.968133][ T6931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.004432][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2821'. [ 353.070743][T16293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2822'. [ 353.590732][T16322] netlink: 'syz.6.2826': attribute type 13 has an invalid length. [ 353.609207][T16322] netlink: 'syz.6.2826': attribute type 17 has an invalid length. [ 353.621739][T16324] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2828'. [ 353.907372][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.915622][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.230550][T16341] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.234303][T16318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.238767][T16341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.253176][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 354.260644][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 354.268031][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 354.284028][T16341] netlink: 'syz.4.2832': attribute type 28 has an invalid length. [ 354.518462][T16322] tunl0: left promiscuous mode [ 354.524984][T16322] gre0: left promiscuous mode [ 354.530347][T16322] gre0: left allmulticast mode [ 354.572968][T16322] bridge0: left promiscuous mode [ 354.581685][T16322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.595681][T16322] bridge0: port 3(vlan1) entered blocking state [ 354.603182][T16322] bridge0: port 3(vlan1) entered forwarding state [ 354.614317][T16322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.636320][T16322] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.643510][T16322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.653828][T16322] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.660967][T16322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.679001][T16322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.708503][T16322] veth1_macvtap: left promiscuous mode [ 354.715404][T16322] veth0_macvtap: left promiscuous mode [ 354.722473][T16322] veth0_macvtap: entered promiscuous mode [ 354.739028][T16322] veth1_macvtap: entered promiscuous mode [ 354.757403][T16322] bond1: left promiscuous mode [ 354.762198][T16322] bridge2: left promiscuous mode [ 354.768217][T16322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.784375][T16322] 8021q: adding VLAN 0 to HW filter on device eth0 [ 354.800376][T16322] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.813400][T16322] 8021q: adding VLAN 0 to HW filter on device eth2 [ 354.826862][T16322] 8021q: adding VLAN 0 to HW filter on device eth3 [ 354.840361][T16322] bond2: left promiscuous mode [ 354.845191][T16322] wireguard0: left promiscuous mode [ 354.851098][T16322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.866217][T16322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.874635][T16322] veth5: left allmulticast mode [ 354.881965][T16322] bridge0: entered promiscuous mode [ 354.887940][T16322] macsec1: left promiscuous mode [ 354.976726][ T48] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 355.048799][ T13] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.063036][ T13] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.084630][ T13] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.109698][ T13] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.181447][ T57] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 355.261429][ T57] bond3: active interface up! [ 355.341145][T16369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.352443][T16370] block nbd4: not configured, cannot reconfigure [ 355.490456][T16375] can: request_module (can-proto-0) failed. [ 355.719574][T16393] netlink: 'syz.6.2844': attribute type 11 has an invalid length. [ 355.732491][T16393] __nla_validate_parse: 2 callbacks suppressed [ 355.732510][T16393] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2844'. [ 355.943349][T16410] batman_adv: batadv0: Adding interface: veth11 [ 355.950076][T16410] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.979435][T16410] batman_adv: batadv0: Interface activated: veth11 [ 356.054984][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 356.245730][T16415] netlink: 'syz.0.2849': attribute type 1 has an invalid length. [ 356.276322][T16415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2849'. [ 356.424683][T16424] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 356.609135][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 356.765028][T16439] bond1: Unable to set up delay as MII monitoring is disabled [ 356.790026][T16439] bond1 (unregistering): Released all slaves [ 357.021385][T16445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2859'. [ 357.199541][T16456] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2861'. [ 357.342528][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 357.524777][T16460] pim6reg: entered allmulticast mode [ 357.550873][T16460] pim6reg: left allmulticast mode [ 357.634306][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 357.667456][T16462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2864'. [ 357.786968][T16468] openvswitch: netlink: IP tunnel TTL not specified. [ 358.271041][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2869'. [ 358.442349][T16462] batadv0: left allmulticast mode [ 358.595015][T16462] gretap0: left allmulticast mode [ 358.604236][T16462] batman_adv: batadv0: Interface deactivated: veth11 [ 358.627548][T16486] ip6gre2: entered promiscuous mode [ 358.632812][T16486] ip6gre2: entered allmulticast mode [ 358.677182][T16493] netlink: 'syz.0.2869': attribute type 6 has an invalid length. [ 358.779859][T16500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.039122][T16512] : entered promiscuous mode [ 359.051154][T16518] netlink: 'syz.0.2876': attribute type 8 has an invalid length. [ 359.090898][T16518] veth1_to_team: entered promiscuous mode [ 359.127898][T16518] veth1_to_team: left promiscuous mode [ 359.223146][T16522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.990547][T16578] netlink: 'syz.4.2894': attribute type 4 has an invalid length. [ 360.150329][T16583] xt_hashlimit: size too large, truncated to 1048576 [ 360.939047][T16603] pim6reg: entered allmulticast mode [ 361.232474][T16615] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 361.271262][T16615] __nla_validate_parse: 10 callbacks suppressed [ 361.271281][T16615] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2906'. [ 361.300194][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.313847][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.326650][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.338635][T16615] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2906'. [ 361.358133][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.372774][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.448278][T16610] lo speed is unknown, defaulting to 1000 [ 361.552635][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 361.567128][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 361.584485][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 361.600138][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 361.610814][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 361.681569][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2909'. [ 361.705298][T16634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2909'. [ 362.008763][T16648] block nbd0: NBD_DISCONNECT [ 362.013501][T16648] block nbd0: Send disconnect failed -32 [ 362.021218][T16648] block nbd0: Send disconnect failed -32 [ 362.028524][T16648] block nbd0: shutting down sockets [ 362.408716][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 362.431249][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 362.511736][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 362.526916][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.550671][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.583590][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.607872][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.640678][T16628] lo speed is unknown, defaulting to 1000 [ 362.663244][T16618] lo speed is unknown, defaulting to 1000 [ 363.082625][T16665] syzkaller0: entered promiscuous mode [ 363.088751][T16665] syzkaller0: entered allmulticast mode [ 363.194193][T16695] netlink: 'syz.1.2919': attribute type 1 has an invalid length. [ 363.203459][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 363.212714][T16695] netlink: 'syz.1.2919': attribute type 1 has an invalid length. [ 363.420646][ T5642] Bluetooth: hci0: command tx timeout [ 363.660039][ T5642] Bluetooth: hci8: command tx timeout [ 365.499417][ T5642] Bluetooth: hci0: command tx timeout [ 365.741790][ T5642] Bluetooth: hci8: command tx timeout [ 365.802302][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2921'. [ 366.326290][T16736] netlink: 'syz.4.2930': attribute type 11 has an invalid length. [ 366.334738][T16736] netlink: 'syz.4.2930': attribute type 5 has an invalid length. [ 366.343129][T16736] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2930'. [ 366.360374][ T6918] tipc: Disabling bearer [ 366.699887][ T6918] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 366.708160][ T6918] bridge5 (unregistering): left promiscuous mode [ 366.716737][ T6918] bridge5 (unregistering): left allmulticast mode [ 366.791234][ T6918] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 366.953194][ T6918] bond0 (unregistering): Released all slaves [ 366.963935][ T6918] bond1 (unregistering): Released all slaves [ 366.978238][ T6918] bond2 (unregistering): Released all slaves [ 366.992704][ T6918] bond3 (unregistering): Released all slaves [ 367.009386][ T6918] bond4 (unregistering): Released all slaves [ 367.031589][ T6918] bond5 (unregistering): Released all slaves [ 367.057578][ T6918] bond6 (unregistering): Released all slaves [ 367.264985][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 367.287056][ T6918] hmac(sh: left promiscuous mode [ 367.298879][T16745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2932'. [ 367.558668][ T6918] hmac(sha224): left promiscuous mode [ 367.577771][ T5642] Bluetooth: hci0: command tx timeout [ 367.743173][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 367.754557][ T6918] tipc: Disabling bearer [ 367.765610][ T6918] tipc: Left network mode [ 367.822260][ T5642] Bluetooth: hci8: command tx timeout [ 367.833668][T16771] openvswitch: : Dropping previously announced user features [ 368.001937][T16773] lo speed is unknown, defaulting to 1000 [ 368.441800][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.514405][T16628] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.537210][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.554560][T16628] bridge_slave_0: entered allmulticast mode [ 368.566836][T16628] bridge_slave_0: entered promiscuous mode [ 368.572489][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 368.576343][T16628] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.590283][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.598249][T16628] bridge_slave_1: entered allmulticast mode [ 368.606487][T16628] bridge_slave_1: entered promiscuous mode [ 368.881203][T16628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.021496][T16628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.177953][T16628] team0: Port device team_slave_0 added [ 369.220151][ T6918] hsr_slave_0: left promiscuous mode [ 369.232554][ T6918] hsr_slave_1: left promiscuous mode [ 369.585782][ T31] INFO: task syz.2.1598:11419 blocked for more than 143 seconds. [ 369.595237][ T31] Not tainted syzkaller #0 [ 369.600299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.609608][ T31] task:syz.2.1598 state:D stack:25016 pid:11419 tgid:11418 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 369.621984][ T31] Call Trace: [ 369.625693][ T31] [ 369.628734][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.633370][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 369.639525][ T31] ? __pfx___schedule+0x10/0x10 [ 369.645540][ T31] ? schedule+0x90/0x360 [ 369.651092][ T31] schedule+0x164/0x360 [ 369.655589][ T5642] Bluetooth: hci0: command tx timeout [ 369.675377][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.695713][ T31] __mutex_lock+0x7f7/0x1550 [ 369.706080][ T31] ? __mutex_lock+0x608/0x1550 [ 369.723253][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 369.748120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.760195][T16843] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2945'. [ 369.771035][ T31] ? __nlmsg_put+0xef/0x1b0 [ 369.777891][ T31] ? genlmsg_put+0x137/0x2e0 [ 369.795218][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 369.800874][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 369.815666][ T31] ? __nla_parse+0x40/0x60 [ 369.822600][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 369.829682][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 369.836523][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 369.842142][ T31] ? __asan_memcpy+0x40/0x70 [ 369.847239][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.853395][ T31] genl_rcv_msg+0x61c/0x7a0 [ 369.858479][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.863597][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 369.870273][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 369.876158][ T31] netlink_rcv_skb+0x232/0x4b0 [ 369.880994][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.886543][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.891919][ T31] ? down_read+0x270/0x2e0 [ 369.895677][ T5642] Bluetooth: hci8: command tx timeout [ 369.897712][ T31] ? genl_rcv+0xd/0x40 [ 369.906298][ T31] genl_rcv+0x28/0x40 [ 369.910370][ T31] netlink_unicast+0x75c/0x8e0 [ 369.915663][ T31] netlink_sendmsg+0x813/0xb40 [ 369.920538][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.926374][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 369.931401][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.937279][ T31] ____sys_sendmsg+0x972/0x9f0 [ 369.942117][ T31] ? __might_fault+0xaf/0x130 [ 369.947373][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.952771][ T31] ? import_iovec+0x73/0xa0 [ 369.958312][ T31] ___sys_sendmsg+0x2a5/0x360 [ 369.963348][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 369.969324][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.974607][ T31] ? futex_wait+0x2a2/0x390 [ 369.981675][ T31] ? __fget_files+0x2a/0x420 [ 369.987760][ T31] ? __fget_files+0x3a0/0x420 [ 369.992513][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 369.998027][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.003563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.010130][ T31] do_syscall_64+0x15f/0xf80 [ 370.015715][ T31] ? trace_irq_disable+0x3b/0x140 [ 370.021208][ T31] ? clear_bhb_loop+0x40/0x90 [ 370.026352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.032526][ T31] RIP: 0033:0x7fb67139cdd9 [ 370.037167][ T31] RSP: 002b:00007fb672209028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.045695][ T31] RAX: ffffffffffffffda RBX: 00007fb671615fa0 RCX: 00007fb67139cdd9 [ 370.053705][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 370.062000][ T31] RBP: 00007fb671432d69 R08: 0000000000000000 R09: 0000000000000000 [ 370.070101][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.078153][ T31] R13: 00007fb671616038 R14: 00007fb671615fa0 R15: 00007ffe2299d598 [ 370.086847][ T31] [ 370.101996][ T31] [ 370.101996][ T31] Showing all locks held in the system: [ 370.110086][ T31] 1 lock held by khungtaskd/31: [ 370.114978][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 370.131500][ T31] 3 locks held by kworker/u8:4/57: [ 370.136724][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 370.148462][ T31] #1: ffffc900015f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 370.159493][ T31] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 370.168520][ T31] 3 locks held by kworker/u8:6/167: [ 370.173703][ T31] #0: ffff88803231f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 370.185321][ T31] #1: ffffc9000200fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 370.199298][ T31] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 370.208907][ T31] 6 locks held by kworker/u8:8/1159: [ 370.214216][ T31] 1 lock held by klogd/4981: [ 370.220231][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 370.230262][ T31] 1 lock held by dhcpcd/5287: [ 370.234939][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 370.244149][ T31] 2 locks held by getty/5386: [ 370.248855][ T31] #0: ffff8880374e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 370.258661][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 370.268815][ T31] 5 locks held by kworker/u8:10/6918: [ 370.274169][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 370.285074][ T31] #1: ffffc900064cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 370.296110][ T31] #2: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 370.305512][ T31] #3: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 370.315584][ T31] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 370.326661][ T31] 2 locks held by kworker/u8:16/6931: [ 370.332072][ T31] 2 locks held by syz.3.473/7598: [ 370.337154][ T31] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.345497][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 370.355774][ T31] 3 locks held by kworker/1:15/10491: [ 370.361149][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 370.372168][ T31] #1: ffffc9001f18fc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 370.383744][ T31] #2: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 370.393855][ T31] 2 locks held by syz.2.1598/11419: [ 370.399101][ T31] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.407316][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 370.417386][ T31] 2 locks held by syz.5.2782/16069: [ 370.422665][ T31] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.430951][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 370.441330][ T31] 2 locks held by syz-executor/16618: [ 370.446748][ T31] #0: ffffffff8f53f548 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 370.456429][ T31] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 370.465793][ T31] 1 lock held by syz-executor/16628: [ 370.471105][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 370.480229][ T31] 2 locks held by syz.4.2935/16773: [ 370.485457][ T31] #0: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 370.494881][ T31] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 370.504246][ T31] 1 lock held by syz.1.2941/16807: [ 370.509536][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 370.518725][ T31] 1 lock held by syz.1.2941/16809: [ 370.523841][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 370.533063][ T31] 1 lock held by syz.6.2945/16841: [ 370.538421][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x156/0x1020 [ 370.547458][ T31] 3 locks held by syz.6.2945/16842: [ 370.552668][ T31] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.560897][ T31] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 370.569911][ T31] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_node_set_key+0x8e/0x9d0 [ 370.579529][ T31] 1 lock held by syz.6.2945/16843: [ 370.584640][ T31] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 370.593821][ T31] [ 370.601081][ T31] ============================================= [ 370.601081][ T31] [ 370.614209][ T31] NMI backtrace for cpu 1 [ 370.614229][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 370.614268][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.614289][ T31] Call Trace: [ 370.614302][ T31] [ 370.614318][ T31] dump_stack_lvl+0xe8/0x150 [ 370.614363][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 370.614420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.614466][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 370.614528][ T31] sys_info+0x135/0x170 [ 370.614568][ T31] watchdog+0xfd3/0x1030 [ 370.614614][ T31] ? watchdog+0x1c9/0x1030 [ 370.614644][ T31] kthread+0x388/0x470 [ 370.614668][ T31] ? __pfx_watchdog+0x10/0x10 [ 370.614688][ T31] ? __pfx_kthread+0x10/0x10 [ 370.614711][ T31] ret_from_fork+0x514/0xb70 [ 370.614733][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.614751][ T31] ? __switch_to+0xc79/0x1410 [ 370.614778][ T31] ? __pfx_kthread+0x10/0x10 [ 370.614800][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.614836][ T31] [ 370.614845][ T31] Sending NMI from CPU 1 to CPUs 0: [ 370.727567][ C0] NMI backtrace for cpu 0 [ 370.727583][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 370.727600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.727610][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 370.727633][ C0] Code: 3b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 51 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 370.727647][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 370.727668][ C0] RAX: 000000000012e6f5 RBX: ffffffff819a815a RCX: 0000000080000001 [ 370.727678][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa56f5 RDI: ffffffff8c28abe0 [ 370.727687][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 370.727696][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 370.727707][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 370.727717][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 370.727729][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.727740][ C0] CR2: 0000564bce7fdee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 370.727753][ C0] Call Trace: [ 370.727760][ C0] [ 370.727766][ C0] default_idle+0x9/0x20 [ 370.727786][ C0] default_idle_call+0x72/0xb0 [ 370.727806][ C0] do_idle+0x36a/0x5f0 [ 370.727827][ C0] ? __pfx_do_idle+0x10/0x10 [ 370.727849][ C0] cpu_startup_entry+0x43/0x60 [ 370.727866][ C0] rest_init+0x2de/0x300 [ 370.727887][ C0] start_kernel+0x38a/0x3e0 [ 370.727909][ C0] x86_64_start_reservations+0x24/0x30 [ 370.727931][ C0] x86_64_start_kernel+0x143/0x1c0 [ 370.727945][ C0] common_startup_64+0x13e/0x147 [ 370.727975][ C0] [ 370.906913][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 370.913823][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 370.923041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.933107][ T31] Call Trace: [ 370.936377][ T31] [ 370.939304][ T31] vpanic+0x56c/0xa60 [ 370.943268][ T31] ? __pfx___schedule+0x10/0x10 [ 370.948104][ T31] ? __pfx_vpanic+0x10/0x10 [ 370.952591][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 370.958732][ T31] panic+0xc5/0xd0 [ 370.962433][ T31] ? __pfx_panic+0x10/0x10 [ 370.966849][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 370.972237][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 370.978392][ T31] watchdog+0x102c/0x1030 [ 370.982723][ T31] ? watchdog+0x1c9/0x1030 [ 370.987149][ T31] kthread+0x388/0x470 [ 370.991212][ T31] ? __pfx_watchdog+0x10/0x10 [ 370.995879][ T31] ? __pfx_kthread+0x10/0x10 [ 371.000460][ T31] ret_from_fork+0x514/0xb70 [ 371.005041][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.010142][ T31] ? __switch_to+0xc79/0x1410 [ 371.014828][ T31] ? __pfx_kthread+0x10/0x10 [ 371.019414][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.024185][ T31] [ 371.027813][ T31] Kernel Offset: disabled [ 371.032139][ T31] Rebooting in 86400 seconds..