last executing test programs: 3m3.136122728s ago: executing program 1 (id=9946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 3m3.029849333s ago: executing program 1 (id=9948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 3m2.868924571s ago: executing program 1 (id=9950): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8930, &(0x7f0000000140)={'netdevsim0\x00'}) unshare(0x6020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @mcast2, 0x2c3}, 0x1c) recvmmsg(r1, &(0x7f0000001140), 0x74e, 0x0, 0x0) 3m2.810771501s ago: executing program 1 (id=9952): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000e1ffffffffffffff000000000000000000"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90", 0x2}], 0x1, 0x1) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @default, @bpq0, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) close(r3) socket(0x2000000000000021, 0x2, 0x10000000000002) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4002010}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 3m2.624284779s ago: executing program 1 (id=9954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15, 0x30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmmsg$inet(r5, &(0x7f0000000100), 0x0, 0x4000000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) pselect6(0xfd2c, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0xbb, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000340), 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000000780)=""/51, 0x33}], 0x2}, 0x3}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 3m2.502297922s ago: executing program 1 (id=9955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff110000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m47.444845925s ago: executing program 32 (id=9955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff110000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff110000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m27.074652636s ago: executing program 4 (id=10323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000090000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0xb, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 2m26.844766106s ago: executing program 4 (id=10328): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 87) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r1, 0x0, 0x0, 0x0) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)) 2m26.279794536s ago: executing program 4 (id=10333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m26.163512712s ago: executing program 4 (id=10334): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08ee00270bee724ecd8391ab161f02a79f25a6ac65a600926000000000d80990b946f7", 0x25) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000430295b9fab743400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x28, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x15, 0xa9, 0x0, 0x1, [@generic="57d753865b", @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r2}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r1}, 0xc) 2m25.959216612s ago: executing program 4 (id=10335): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000ec0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELRULE={0x190, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "650438"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x6a048d9f507f17d9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "cb92500b8ab6469d9f4ce6de68ec165508c23ae1ab18c2942553250c33d4c1c9778c16a2cd12a4f5726d18920cdde9e54d7d0a545a506a2d415f812b573165b9bce24b37e30d339b8407fb27022f882f9d222df4022930b0460ef19b8ff42f66b78d6ec9f0f516e7f0467d2e2795ef11f0e5ee17052f52337230befcfe9e82c3248be1906700cc23d622c3a36d8ccb582f09f80d7068a21ecd47eca13531daa4db883c14368064b438f816a12ac853d4b62aa98b69ecd1c76d7172811809661d3d9e0d9fa79686387af72716544748d3d5085d2bfd170a4ab94cc9214eea671fad74b8e78156b8cd0f653e3f1528dde392"}]}, @NFT_MSG_DELTABLE={0xc0, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "5c0fd3fdeec71aa1cab9b412dc777efb22454ecd6b0e5e9d9c6991f99b03c9f99d12c6c3408f363f41d406ab32acfa3469e09a46213eba9d30404036a62402ab4744b4d7a5501086bbbe45e20f1d68fc0fa95ab7074587e6e4d3085307075ba99e6a33aabdb31a9c8823978e9cd2dc41036c3d4a31657be56621cd0c0eed388ba592c2c0ad1cbf5082a59345b5fa0935116fc3e5311e8c03f59b"}]}, @NFT_MSG_DELCHAIN={0x208, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xd5, 0xc, "1bd300fd8fa78752883864fc43200b367af67cf15f88cd2a3f583a9a9efaaf19797df16af5688b032191feec582e2586e8022a4cee062317773c084b20d84494b428b38e19eff292655f3cd3a419969ae6faf58b6d5dcf901a76cd0a0412ee46f7f569e2096defedc3342e86b2a41d654dfc62ed32bbd286f01714070b62929043ffa99422363e2417ff7ceca8511af360fffca2a9f0332d9b2879782c455e878d0f4727b0dbc7cd595e91c8ee86551365b21df2e8f0a0a879f95c79133a306b67e2c0c15f812c407d9505a72fdeba2be8"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7251af8e}]}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "fb6922f941be8ef99f815e82c689994e167afe3e0c877a71a887ea7765d02e21eed8ea8e8e5f002bc48a6660258788cbb0351eec"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xdd06}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x34}]}]}, @NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x305, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x128, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffc0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x596}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x51}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x614}, 0x1, 0x0, 0x0, 0x40000}, 0x24000041) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[], 0x18}, 0x280400d5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x400002, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x20008804) close(0x4) 2m23.899840325s ago: executing program 4 (id=10359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4008800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r5, 0x0, &(0x7f0000000000)) 1m59.235701058s ago: executing program 33 (id=10359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4008800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r5, 0x0, &(0x7f0000000000)) 2.824814075s ago: executing program 2 (id=11542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast]}, 0x48) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="145513", 0x3}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x91}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2, 0x80805, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/144, 0x90}, {&(0x7f0000003a40)=""/4101, 0x1005}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f00000002c0)=""/91, 0x5b}], 0x4}, 0x12142) writev(r5, &(0x7f0000000880)=[{&(0x7f0000000640)="74ce2fdf87e4712c3689b07b068f04bb566800bcf3ba8404322b97e518f1f12e711cf188e6275da3f7f2d10069816e661dfbea02feaf04e48ce33f3b72d87d69cf071e59382e8fa947d87aed0266abb2142d21ef2535177f4ad057106f94f1d4006bfe3edc3389d243b4318fb621c29f62de32a9e22dc3ddb33872341bdd", 0x7e}, {&(0x7f00000006c0)="a707f77aaec6b793370a1d33543e377efa4d5910065f2a1b0909239f570e64b0c4e6bbb850aaf064d09f1f98e2c2563908b26b0410ef05b94115af2c609974869f292eefdb1ba87bc31473903dc979ff8752ce17d6207fe4028820637d1ffaebc7ad1ad31850b6b500d5142559af96692a64b67115c13449ba9f428b7e4bb411ed8c91f1dd24cb620a9a05d4ebb80c053d68d3ed4a1b4d76fc9868a101c119", 0x9f}, {&(0x7f0000000780)="621ab74075f97b77858edef8e4da4b94b6cdc0d0490260d3c628698c3d48f3ced18a0706307a7bac2f3e4da1", 0x2c}, {&(0x7f00000007c0)="51d31011870db60cb86d6b875505943b62b34c41de7938a1dffe0eb970de4f94b42a5ff402079994c6592f38c2c7bb2e6712f469317c02f8ce37d55d731bed67149085179e215526da83064532b733a7c725a0d0deb18e163eb86d1235779a0d292c7b2e114a083cf04a5be8901899b3721459f161ba80758fdf8ea1fa76c52901ddd686e148ef9b9a060877", 0x8c}], 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x44004010) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x6, 0x8b78) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0xaa24b000) 2.556038756s ago: executing program 2 (id=11544): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x104, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x15}}, 0x60044) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000044c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000104000002620182662b8800000000000000000024528fba296539e394d34fca863b962bf9a5e95503cfb64ce93e6c6fb66eab2ee40d931fe3f8cd450d6f6bfd84c3f01383ce0b5197f25c55", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800a000100767863616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc0, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x78}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc6}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x1b, 0x1}, {0xb}, {0x2c}, {0x1b}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xe}]}]}, 0xc0}}, 0x44054) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) 2.549832388s ago: executing program 5 (id=11546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000d000f000000050000000700000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@deltclass={0x48, 0x29, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff8, 0x15}, {0xfff1, 0xfff1}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1d}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x28, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.891335538s ago: executing program 2 (id=11552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x101, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x2, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0xffff3430], [0xfffffff7, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8]}}) 1.85262837s ago: executing program 5 (id=11553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2c084e5acc9aae96852cd54afd2d60786"}]}}}}}}, 0x0) 1.794282145s ago: executing program 2 (id=11555): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r2, 0x3, 0xffffffffffffffd6, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000e000000240012800b000100677265746170000014800280080004000800000006fb"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r4, 0x0, r4, &(0x7f0000000500), 0xff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063018c000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.597229185s ago: executing program 5 (id=11556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x210, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x700}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x44000}, 0x48041) (async) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x33}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x0, 0x5, 0x5, 0x5, 0xc4, 0xfffffffc, 0xd}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0xb, 0x3ff}, &(0x7f0000000340)=0x90) (async) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) (async) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) 1.594359147s ago: executing program 3 (id=11557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r11, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r9, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r11, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r13) sendmsg$ETHTOOL_MSG_RINGS_SET(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r14, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) r15 = socket(0x15, 0x80005, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e24, 0xf, @loopback, 0xffffff7f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r15, 0x84, 0x2, &(0x7f0000000200)={0x101, 0xfff, 0x4ff6, 0x8}, 0x8) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.198741935s ago: executing program 6 (id=11558): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x6c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80002001}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80002001}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000200)=0xc84) (async) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000200)=0xc84) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f00000000c0)={0xdd, 0x4, 0x80000}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="050000000000cb5dce9a9700005fe4f28e48b0bd6efce4369729a5e8e27ea30b364dacf1bbd48d2b96927db87913cf3f6235b17a87aaea559b53ee797a6f0dbda20072a045a58bf35500ecbea022edd3e529ebbff50880484b347d0c47c6d7988051042d853d22d07cf3db1bfb26420b679aade55f50c7a3fdbf0e15418c06fb7f4f3ec8af9770192c95bb20e1b73fea1fee26671ed87ec9f068302fc17b67d926112e0dd390214b85029f55476342ad01532a8295fc87fbff915f9a5f5a421fc94637", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="050000000000cb5dce9a9700005fe4f28e48b0bd6efce4369729a5e8e27ea30b364dacf1bbd48d2b96927db87913cf3f6235b17a87aaea559b53ee797a6f0dbda20072a045a58bf35500ecbea022edd3e529ebbff50880484b347d0c47c6d7988051042d853d22d07cf3db1bfb26420b679aade55f50c7a3fdbf0e15418c06fb7f4f3ec8af9770192c95bb20e1b73fea1fee26671ed87ec9f068302fc17b67d926112e0dd390214b85029f55476342ad01532a8295fc87fbff915f9a5f5a421fc94637", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r6, 0xc, 0x1, 0x80000001, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 982.247754ms ago: executing program 6 (id=11559): recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000ac0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000000b80)=""/132, 0x84}, {&(0x7f0000000c40)=""/48, 0x30}], 0x9, &(0x7f0000000d40)=""/163, 0xa3}, 0x5}], 0x1, 0x40000021, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 924.506614ms ago: executing program 0 (id=11560): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @bcast, 0x0, [@netrom, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x40, 0x100000) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000010c0)="2fda3f7b9dab7d003b9c96e697acfc34c796bcef4b34cc4afbd7c81953e5bd6126bf9665a3a18093e060e8c66ee5f0f2c6c12f79d1bddeecbb9da9a0d38a2ee1e77fc82cbd47a788d9f0afdd91ccad21e8efc4", 0x53) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001140)={0x77359400}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000001180)={0x1}) write(r1, &(0x7f00000011c0)="56311206b70a6e375d72ba0a3d11424e402fb6818b7333e4585a4045b4a558647ebd922bc484bd3092fc4a738d87e43da0640b0e12b2f86493cb03a9d9962a100735d00913424237aa6fc4eec83cf17aa00fd39c09d47a084ffd744bd56260028376fa44238522fa7a03c1d0f4fb11437ab5eb1950f045082324c7daa2d30a0f2eb9cbf10fa1c29fbc8005a9b49170d7599f1865388e9aa8dcbf0c3bfd7022a271c688a2d4b06de205", 0xa9) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000001280)={0x4, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e20, @empty}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x19, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x21}, @ringbuf_query, @ringbuf_query]}, &(0x7f00000015c0)='syzkaller\x00', 0x9, 0x9a, &(0x7f0000001600)=""/154, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001700)=[0x1], &(0x7f0000001740)=[{0x1, 0x3, 0x9, 0x8}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{r2}, &(0x7f0000001480), &(0x7f0000001840)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x88008080}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@newtclass={0x2c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x6, 0xb}, {0xfff3, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x95) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f00000019c0)=0x6, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)='%-5lx \x00'}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000001ac0)=0xffffffff95eed443) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000001b00)) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r7, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x128128}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x10, 0x3e8, 0x804, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"8f7958784c8d493eefb4f7f0b4170532", 0x0, 0x0, {0x800, 0x8001}, {0x8, 0xd}, 0xffffffffffffffff, [0x4, 0xfffffffffffffffa, 0x20000000000000, 0xead6, 0x4, 0x7, 0x6, 0x4, 0x7fffffff, 0x3ff, 0xa15, 0x1, 0x9, 0xffffffffffff0000, 0xd0, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001d40)={"3cd35f0b5f332415e0bb9274f8b1d34e", r8, 0x0, {0x100, 0xe75b}, {0x100000000, 0x2}, 0x6, [0x2, 0x9, 0x5, 0x400, 0x2, 0x1000, 0x5, 0x2, 0x5833, 0x1, 0xe91, 0x7fffffffffffffff, 0x6, 0xb, 0x1c1bec26]}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000001e40)={0x0, 0xe, 0x2, 0x0, 0x0, [{{r7}, 0x7b}, {{}, 0x1}]}) ioctl$sock_ifreq(r5, 0x8915, &(0x7f0000001ec0)={'geneve1\x00', @ifru_mtu=0x3}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000002000)={r1, &(0x7f0000001f00)='geneve1\x00', 0x1, &(0x7f0000001f40)={@_ha_fsid={[0x4, 0x2937]}, {0x42ca, 0x8, 0xe, 0x3}}, 0x2b1, &(0x7f0000001f80), &(0x7f0000001fc0)=0x9}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), r1) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 858.453659ms ago: executing program 3 (id=11561): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 856.605979ms ago: executing program 2 (id=11562): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32, @ANYBLOB="08000300ee5815cd336607eccb309d98f616b1a0", @ANYRES32=0x0, @ANYBLOB="f2ff05200200000000e42f1e000008000b00c20d00000c00069afeae15d0b2dbc3ea15ed5619f55caf26"], 0x60}, 0x1, 0x0, 0x0, 0x4002001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x70bd2a, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r8, r8, 0xc, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r8, r8, 0xc, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0xa2ad, 0xffff, 0x7, 0x5, "73ec8f7f4f994242a51098ceaf1e64bc8bbe1d85db5442305fc1d2f24c2148137bef5226bd87d017bb706c11d81e2d42de8dc71a75039525f881f38d159d9637d4ad699d40686e10853ab4df2690870c77642d665b27274ba7666b41ce809b0bd692748f3449c8bbf1a8359e7cb5d1aa6f9fca89e86def465e67fbd5633ac48b"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRES64=r7, @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) 852.210903ms ago: executing program 6 (id=11563): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x4000010, r1, 0x91eb6000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc840}, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", ""]}, 0x20}}, 0x4008080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9a3d, 0x4c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x24008020) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x312, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f0000000640)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000011) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000007c0)={r4, 0xfffffffffffffffe, 0x1, 0x80000000}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x18c, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2890}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @remote, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @local, 0xffffffff}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x63bfc5fb}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000005) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8840) r8 = openat$cgroup_ro(r6, &(0x7f0000000bc0)='devices.list\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000c00)=""/198, &(0x7f0000000d00)=0xc6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@fallback=r6, 0x2b, 0x1, 0x81, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000ec0)={0x8000000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@fallback=r4, r8, 0xb, 0x20, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, r3, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x16, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x49}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x20}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6008000}, 0x20000010) recvfrom$inet(r6, &(0x7f0000001080)=""/13, 0xd, 0x12002, &(0x7f00000010c0)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001100)='batadv0\x00', 0x10) 719.552025ms ago: executing program 0 (id=11564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000007b40)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r1, 0x0, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8001, 0x581d, 0x6, 0x810, r3, 0x8, '\x00', 0x0, r3, 0x0, 0x5, 0x1, 0x6}, 0x50) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800280000000000000900000018310000050000f5ffffffffffffff009500000000000000850000005c0000008500eeb29915000018680c7c6f35dd2cabe2400008000000000000008c3200001849000006000000000000000000000085100000f8ffffff184600000600000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r3, r8, r9, r4, r10, r11], &(0x7f0000000540)=[{0x2, 0x1, 0x7, 0x1}, {0x5, 0x4, 0x2}, {0x4, 0x2, 0x6, 0x4}, {0x4, 0x4, 0xc, 0x3}, {0x2, 0x2, 0x9, 0x8}, {0x4, 0x3, 0x8, 0xc}, {0x4, 0x2, 0x10}, {0x4, 0x1, 0x1, 0x2}, {0x1, 0x4, 0xd, 0x5}], 0x10, 0x80000001}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 719.332339ms ago: executing program 3 (id=11565): syz_emit_ethernet(0xfc6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001ffffffffffff86dd6a0000000f901100fe8000000000000000000000000000aafe8000000000000000000000000000aa0b12040902"], 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x5, [0x5, 0x6dd, 0x8, 0x7edb, 0x9]}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x3a, @broadcast, 0x4e20, 0x0, 'sed\x00', 0x24, 0x1d, 0x28}, {@broadcast, 0x4e23, 0x2, 0x1800000, 0x3, 0x9}}, 0x44) 650.832387ms ago: executing program 6 (id=11566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000040)=[{0x1, 0x1, {0x1, 0x1, 0x4}, {0x2, 0x0, 0x1}, 0x2, 0x1}, {0x0, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0xf1}, 0x2, 0x1}, {0x1, 0x3, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x3}, 0xff}, {0x2, 0x0, {0x2}, {0x2, 0xff}, 0x0, 0x1}, {0x1, 0x2, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x4}, 0x0, 0xfd}, {0x1, 0x1, {0x2, 0x1, 0x3}, {0x0, 0xf0}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0xfe, 0x2}], 0xe0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x2}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000040)=[{0x1, 0x1, {0x1, 0x1, 0x4}, {0x2, 0x0, 0x1}, 0x2, 0x1}, {0x0, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0xf1}, 0x2, 0x1}, {0x1, 0x3, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x3}, 0xff}, {0x2, 0x0, {0x2}, {0x2, 0xff}, 0x0, 0x1}, {0x1, 0x2, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x4}, 0x0, 0xfd}, {0x1, 0x1, {0x2, 0x1, 0x3}, {0x0, 0xf0}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0xfe, 0x2}], 0xe0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x2}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async) 630.311234ms ago: executing program 5 (id=11567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'xcbc(aes)\x00'}, 0x80, 0x0, "97a2c2df58bf2babea45840d4da5d432"}}]}, 0x14c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000380)={{0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x5, 0x0, 0xd9bc, 0x4, 0x200, 0x400, 0xfffffe00, 0x4, 0xe8, 0x7f, 0x7fffffff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001380)={{r3, 0x4, 0xe5, 0x6, 0x455c, 0x5, 0xb, 0x6, 0x8000, 0x211, 0x0, 0x0, 0x2851, 0xc6d3, 0x8}, 0x8, [0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 555.712881ms ago: executing program 3 (id=11568): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r2}, 0x20) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfc, {0x80, 0x20, 0x0, 0xb5, 0xfe, 0x5, 0xff, 0x7, 0x2100}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000061000000000000000000004a0011584b0839898e7ea8cf7e3858cc8c95ef4e52135fb3cc8f7651364fb995398bde2984fdf541f440a6eede3d7fc5e6a8ad6fd94354d96e7846cc829d2e8f2577a7ad42b09dcc0485", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000ec97", @ANYRES16=r9, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xa2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld}, @call={0x85, 0x0, 0x0, 0x6e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x5697, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000009c0)=[{0x5, 0x1, 0xc, 0x4}, {0x3, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x0, 0xa}, {0x0, 0x1, 0xd, 0xa}, {0x5, 0x5, 0x0, 0x1}, {0x3, 0x3, 0xf, 0x7}, {0x2, 0x3, 0x0, 0xb}], 0x10, 0x3}, 0x94) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r14, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x1c, r12, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000001580)=ANY=[@ANYBLOB="98080000", @ANYRES16=r12, @ANYBLOB="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"], 0x898}, 0x1, 0x0, 0x0, 0x40040}, 0x4040810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x4a8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xa}}}, 0x4a8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 547.152869ms ago: executing program 0 (id=11569): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 429.043455ms ago: executing program 5 (id=11570): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x1) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f2}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) accept4$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 371.901755ms ago: executing program 0 (id=11571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000090037040000000000f1ff0000fbff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0011000000"], 0x3c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff0720670600003f000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$alg(r1, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x200) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfff, @local, 0x1000}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}, {&(0x7f0000000180)="acc3448a619d18424ab3e735f4d7b454b2aa618b6005c9eae90b5240c3189c", 0x1f}], 0x3, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r6, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0}}], 0x2, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000240)=0x3, 0x8) recvmmsg$unix(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ff03000000000000000000008500000011000000850002000000000095018f709938149a0d645a779b6c650a2e7ece554982c335ecf13957475e0c7274dbbc8b527f5355b906d1d3065584d10758cd3eaedcc0b1033bca0d1fe9dd92463f840d0d5589e3fa4d0d9eb21a529b49e299c318d0eb244e420a0e57a97bcf34"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 370.920417ms ago: executing program 3 (id=11572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4040810) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x15, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r5 = socket(0x1000000010, 0x80002, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000080)=0x6, 0x8) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x3, 0x3d2, [0x0, 0x200000000780, 0x2000000009ec, 0x200000000a1c], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x0, 0x897, 'syzkaller1\x00', 'macsec0\x00', 'ip6_vti0\x00', 'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @link_local, [0x6b7cb977f20a5faa, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xf, 0x7a, {0x2}}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00', {0x6}}}}}, {0x5, 0x8, 0x1b, 'macvtap0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'pim6reg0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0xd6, 0x106, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}], @common=@STANDARD={'\x00', 0x8, {0x5}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x6, 0x4, 0x19, 'wg1\x00', 'veth0_to_bond\x00', 'macvtap0\x00', 'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0x0, 0xff, 0xff, 0xff, 0x0, 0x80], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xd6, [], [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x44a) 369.702043ms ago: executing program 6 (id=11573): recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/163, 0xa3}, 0x5}], 0x1, 0x40000021, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 255.24584ms ago: executing program 0 (id=11574): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000c63550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0xb, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 205.038193ms ago: executing program 2 (id=11575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) socketpair(0x8, 0x5, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x1, 0x8, 0xd, 0x4d02, 0xffffffffffffffff, 0xffffee46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r3, &(0x7f0000000100)="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", &(0x7f0000001100)=""/19}, 0x20) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001180)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000002180)={r4, 0x6}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r2, &(0x7f0000003180)={0x2, 0x4e22, @multicast2}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x906008}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x1c, r5, 0x100, 0x8, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000003300)={0x0, 0x3}, &(0x7f0000003340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000003380)={r6, 0x8000, 0x9}, &(0x7f00000033c0)=0x8) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000003400)) sendto$inet(r1, &(0x7f0000003440)="071f3510176b29fb88f987fc589bc97dbb681b4fc2e75142065469fc6be06530b2d5308a223be11c17ff0a98d28d3415e251a3fa98a335877655eaa796d8a0f48942c14e2e6728780f664ccef06db3c618cb5d112ce264fa3c71f8d8a15c5d3ed76327bdb99fe804057881db9d1ca68440f58a642e43ffbcc2d1503e59aa701888bdabcb1c799f442d7cbcce287348f623681d750b8960431b62457f10e3dde89c53a074e70081c0c060bb7e77bddc3b4be229cd399da5bc4aa5ba61f8cf983235dfbc79bdb54440e7295bc7321dc997", 0xd0, 0x40000, &(0x7f0000003540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$pptp(r1, &(0x7f0000003580)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003600)={0xc0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa0ad}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x409}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003780), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x24, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x20000840) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003880)={'vxcan0\x00'}) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f00000038c0)="843b27cbc5fa9fcfa7cb1ad9a0bb7abc61676a4f930f85d2519a277b2c2d3fe70c97663643a6f2f2745a1ccc351c18568f828505881ca5a6d4c2e5912010634cd719673518a7305887ea79911ae06d3055f42949962b95721ac7b2198ef24c4871ffc41171a190bf60b4b8d36d12cc157cc865b2b4884670120ec79cc9469067e3a4a298f8de2ca6b160ac", 0x8b) sendmsg$inet_sctp(r2, &(0x7f0000003a40)={&(0x7f0000003980)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003a00)=[{&(0x7f00000039c0)="61706b1d3bb8", 0x6}], 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000003a80)) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b00), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003b40)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x24, r10, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 201.3207ms ago: executing program 6 (id=11576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r5, 0x0, 0x81) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000004100), 0x0, 0x4000000) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="710502020106eff7fbcb"], 0xd5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000000700)={0x0, "1d42c378d6af46220d6fc575d7df5cce"}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0xfee5, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="07002dbd700000000000050000001c0003800800040024b380000800020020000000080005007180bbda180001801400020073797a5f58756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x0) 91.951147ms ago: executing program 0 (id=11577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0021954e8374745129caea99bc671e3d", 0x12}], 0x3) 65.343425ms ago: executing program 3 (id=11578): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7105810402030105a2f85cd55fe0b9983973d5b7d312cf8ddca7633f"], 0x109) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x405, 0xfffffffe, 0x40000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 0s ago: executing program 5 (id=11579): r0 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00a976"]) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x5, @private2, 0x10001}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000001c0)="13a24a3fd926eeae59605040f98a145a9a19a074ff8bb412674275d4f873f08fb4ad95af6d4981bc3c29f5919bf5a698ff25a2843f904c28ccf61a6049b1120aab0274e0ae2a42feb61438f1dcfe2391a830c221f5396b69a05b0ea92ffa5b9ffa26fb8b1657db789f589a5218c97a1f907b4c64bcc6e34340d169392ff64c33669fa1030951088c6f5700575b52ccba55fb31da225a5847c4a240eda74b76ce1621f0e1a9c17824b64bc5e06717c62e63f46c64b49cd327a3cbae8534fc6f3e401bd1421f5c6017a4b4ba", 0xcb}, {&(0x7f0000000380)="39e8fe39494c5a0297f7d40db04b1b62ba8de698341bedd7fd1c806ece497750594309c73cf1681c47f19f0ce0fae6fe772c5a13ca41d87049142178357d76f2df1bb41b5f347437189b68e1ca2ce3e77e54cc8fa1a109bc32b62fafc954a8ceddb0002bd792a790372f4f1ce638a7cd71a7eb39f7258afc37734feb8777fded022ed7138d2564f572c549b4108e6f014c58b2489d341290fe85bcf5fd12495285262e5154f81a79d935c8405c821de51d5d", 0xb2}, {&(0x7f0000000440)="b34f0b3e38afcaaf38d4195a392fe0b0f8c47232c1b02be146a755224fa1f81a3a1b111c355445190ebea6434a17884dd3ac0c3afeb2e590eaac1199e7961051070cf283002d3d7fa62a29", 0x4b}, {&(0x7f00000004c0)="561dfd77b55c3dc34c461c74fb1d841dc7d3264ab9f0e466dbcd5af27a4150f3c134ebacabf69ad3b6af213acfa6da12eaf9e110c9049951690f599bc7942bc2d576e6adbca2b17f77a62b00981f8105eddd9c67ae765e7d27a819077787598a1327b291a86b0753c1aa35152aadc80d78227809450005d7ab5d2423548d429a3355d6591399b49313e5e8ee29b816", 0x8f}, {&(0x7f0000000580)="674c53a3cc2599f40a18835ce77253bc9dc0c6a265c831c9f5853ae13ad3c401c1429c35155ebed2f877c47d1c8329428a449b330a2fc92bf8e9e624053ca4c05e230770e8d5e81dbe45cae7ca806319107387", 0x53}, {&(0x7f0000000600)="63ee490919463d711214642a8784d9564d38a9b326312a62e3740dcdf035c3d19676af9d765cb9993059264e8042cc95c3a4a16f40b5727f4fa2f680a200b486a6c975a669495772e3a2deac25d0ade69996173901fe09cf7e4fad7de3f1a765ffee44550a05d446931796430dd34766397593de39811ebb4e3a379fffa64b6c2d73c37cc1056df2bf2e148a8fc5ec7521", 0x91}, {&(0x7f00000006c0)="6f6db69049698b9550369f12b8a644239a80e75565742d46a328ba2cc9915bdacd446d313056c89f65ee0cadf0c6d8f297d8287613f5c55af27cd214918671c463ebe265aa57a95279cb853145f67ac5e96b68557b4fcd867c0f83f5b64028e5ec15fc19cac9255395ccba9ce6778cc092239a121d982ba0710c36b18e75389b8f40758fc50b", 0x86}, {&(0x7f0000000780)="bd4c1a", 0x3}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000008400000006000000ff0f0000000000008400000006000000800900"/48], 0x30, 0xc040}, 0x4041) socket(0x10, 0x80002, 0x0) (async) syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00a976"]) (async) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x5, @private2, 0x10001}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000001c0)="13a24a3fd926eeae59605040f98a145a9a19a074ff8bb412674275d4f873f08fb4ad95af6d4981bc3c29f5919bf5a698ff25a2843f904c28ccf61a6049b1120aab0274e0ae2a42feb61438f1dcfe2391a830c221f5396b69a05b0ea92ffa5b9ffa26fb8b1657db789f589a5218c97a1f907b4c64bcc6e34340d169392ff64c33669fa1030951088c6f5700575b52ccba55fb31da225a5847c4a240eda74b76ce1621f0e1a9c17824b64bc5e06717c62e63f46c64b49cd327a3cbae8534fc6f3e401bd1421f5c6017a4b4ba", 0xcb}, {&(0x7f0000000380)="39e8fe39494c5a0297f7d40db04b1b62ba8de698341bedd7fd1c806ece497750594309c73cf1681c47f19f0ce0fae6fe772c5a13ca41d87049142178357d76f2df1bb41b5f347437189b68e1ca2ce3e77e54cc8fa1a109bc32b62fafc954a8ceddb0002bd792a790372f4f1ce638a7cd71a7eb39f7258afc37734feb8777fded022ed7138d2564f572c549b4108e6f014c58b2489d341290fe85bcf5fd12495285262e5154f81a79d935c8405c821de51d5d", 0xb2}, {&(0x7f0000000440)="b34f0b3e38afcaaf38d4195a392fe0b0f8c47232c1b02be146a755224fa1f81a3a1b111c355445190ebea6434a17884dd3ac0c3afeb2e590eaac1199e7961051070cf283002d3d7fa62a29", 0x4b}, {&(0x7f00000004c0)="561dfd77b55c3dc34c461c74fb1d841dc7d3264ab9f0e466dbcd5af27a4150f3c134ebacabf69ad3b6af213acfa6da12eaf9e110c9049951690f599bc7942bc2d576e6adbca2b17f77a62b00981f8105eddd9c67ae765e7d27a819077787598a1327b291a86b0753c1aa35152aadc80d78227809450005d7ab5d2423548d429a3355d6591399b49313e5e8ee29b816", 0x8f}, {&(0x7f0000000580)="674c53a3cc2599f40a18835ce77253bc9dc0c6a265c831c9f5853ae13ad3c401c1429c35155ebed2f877c47d1c8329428a449b330a2fc92bf8e9e624053ca4c05e230770e8d5e81dbe45cae7ca806319107387", 0x53}, {&(0x7f0000000600)="63ee490919463d711214642a8784d9564d38a9b326312a62e3740dcdf035c3d19676af9d765cb9993059264e8042cc95c3a4a16f40b5727f4fa2f680a200b486a6c975a669495772e3a2deac25d0ade69996173901fe09cf7e4fad7de3f1a765ffee44550a05d446931796430dd34766397593de39811ebb4e3a379fffa64b6c2d73c37cc1056df2bf2e148a8fc5ec7521", 0x91}, {&(0x7f00000006c0)="6f6db69049698b9550369f12b8a644239a80e75565742d46a328ba2cc9915bdacd446d313056c89f65ee0cadf0c6d8f297d8287613f5c55af27cd214918671c463ebe265aa57a95279cb853145f67ac5e96b68557b4fcd867c0f83f5b64028e5ec15fc19cac9255395ccba9ce6778cc092239a121d982ba0710c36b18e75389b8f40758fc50b", 0x86}, {&(0x7f0000000780)="bd4c1a", 0x3}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000008400000006000000ff0f0000000000008400000006000000800900"/48], 0x30, 0xc040}, 0x4041) (async) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device macvlan4 [ 1238.685959][T28341] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1238.711479][T15056] gre0 speed is unknown, defaulting to 1000 [ 1238.729714][T15051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10372'. [ 1238.837395][T10181] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1238.955993][T15060] netlink: 'syz.3.10375': attribute type 2 has an invalid length. [ 1238.976160][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10376'. [ 1238.999242][T15060] !: entered promiscuous mode [ 1239.006442][T28341] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1239.018650][T15064] netlink: 'syz.3.10375': attribute type 2 has an invalid length. [ 1239.310450][T15076] dvmrp0: entered allmulticast mode [ 1239.332920][T15078] batadv_slave_0: entered promiscuous mode [ 1239.514490][T15071] syzkaller0: entered promiscuous mode [ 1239.529983][T15071] syzkaller0: entered allmulticast mode [ 1239.577449][T15084] erspan1: entered allmulticast mode [ 1239.650046][T15097] netlink: 'syz.3.10384': attribute type 4 has an invalid length. [ 1239.691259][T15097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1239.863932][T15101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10385'. [ 1239.954815][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 1239.963154][ C1] lec:lec_tx_timeout: lec0 [ 1239.967959][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1244.239745][T15077] batadv_slave_0: left promiscuous mode [ 1244.259109][ T507] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1244.268145][ T507] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1244.279017][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10388'. [ 1244.419654][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10390'. [ 1244.446691][ T5889] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1244.641351][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10394'. [ 1244.651966][T15138] netlink: 'syz.3.10396': attribute type 4 has an invalid length. [ 1244.664673][T15138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.697436][T15135] gretap0: entered promiscuous mode [ 1244.740677][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10393'. [ 1244.995043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1245.003101][ C1] lec:lec_tx_timeout: lec0 [ 1245.072924][T15150] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10398'. [ 1245.177398][T15160] gre0 speed is unknown, defaulting to 1000 [ 1245.501880][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10406'. [ 1245.511833][T15178] netlink: 'syz.2.10406': attribute type 3 has an invalid length. [ 1246.114963][T15117] Bluetooth: hci3: command 0x0406 tx timeout [ 1246.127318][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 1246.248139][T15190] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.426261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.665051][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1254.825174][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1258.024981][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1261.696356][T15224] syzkaller1: entered promiscuous mode [ 1261.712982][T15224] syzkaller1: entered allmulticast mode [ 1261.759333][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1261.803750][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1261.816006][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1261.829749][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1261.844580][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1262.089189][T15230] gre0 speed is unknown, defaulting to 1000 [ 1262.201875][T15255] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1262.220783][T15255] bond4 (unregistering): Released all slaves [ 1262.272478][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1262.295972][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1262.550491][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10433'. [ 1262.570346][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10432'. [ 1262.582679][T15268] xt_CT: No such helper "syz0" [ 1262.869601][T15230] chnl_net:caif_netlink_parms(): no params data found [ 1263.014127][T15291] netlink: 'syz.0.10438': attribute type 4 has an invalid length. [ 1263.026305][T15291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1263.156300][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.187282][T15230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.189517][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10440'. [ 1263.211996][T15230] bridge_slave_0: entered allmulticast mode [ 1263.238800][T15230] bridge_slave_0: entered promiscuous mode [ 1263.252168][T15305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1263.264546][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.273411][T15230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.281296][T15230] bridge_slave_1: entered allmulticast mode [ 1263.290716][T15230] bridge_slave_1: entered promiscuous mode [ 1263.302371][T15301] netlink: 'syz.5.10440': attribute type 5 has an invalid length. [ 1263.311849][T15305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1263.382348][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10443'. [ 1263.500627][T15230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.516808][T15230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.562150][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10445'. [ 1263.578626][T15230] team0: Port device team_slave_0 added [ 1263.599070][T15230] team0: Port device team_slave_1 added [ 1263.692459][T15230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.703390][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.765757][T15230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.790332][T15230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.801711][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.858123][T15230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.874865][ T5842] Bluetooth: hci6: command tx timeout [ 1263.995951][T15230] hsr_slave_0: entered promiscuous mode [ 1264.003078][T15230] hsr_slave_1: entered promiscuous mode [ 1264.012522][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10451'. [ 1264.012949][T15230] debugfs: 'hsr0' already exists in 'hsr' [ 1264.037437][T15230] Cannot create hsr debugfs directory [ 1264.142246][T15341] veth1_to_batadv: entered promiscuous mode [ 1264.148539][T15341] veth1_to_batadv: entered allmulticast mode [ 1264.166533][T15347] netlink: 'syz.3.10453': attribute type 15 has an invalid length. [ 1264.462959][T15357] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1264.487083][T15357] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1265.223538][T15230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1265.268786][T15230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.296070][T15230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1265.313582][T15230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.336005][T15230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1265.367144][T15230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.389067][T15230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.434965][T15230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.574386][T15230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.638717][T15417] bridge7: entered promiscuous mode [ 1265.652638][T15417] bridge7: entered allmulticast mode [ 1265.691306][T15417] team0: Port device bridge7 added [ 1265.728986][T15230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.797804][T15424] batman_adv: batadv0: Adding interface: macvtap1 [ 1265.816078][T15424] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.865281][T15424] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1265.884454][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.891874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.915985][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.923310][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.946640][ T5842] Bluetooth: hci6: command tx timeout [ 1266.504950][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1266.553643][T15230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.620294][T15469] netlink: 'syz.5.10487': attribute type 1 has an invalid length. [ 1266.743458][T15469] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1266.811139][T15469] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1266.888274][T15487] netlink: 'syz.5.10487': attribute type 1 has an invalid length. [ 1266.973297][T15467] gre0 speed is unknown, defaulting to 1000 [ 1267.015656][T15479] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1267.055484][T15483] macvlan2: entered promiscuous mode [ 1267.068781][T15483] macvlan2: entered allmulticast mode [ 1267.093223][T15483] bond1: entered promiscuous mode [ 1267.109721][T15483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1267.159938][T15483] bond1: left promiscuous mode [ 1267.347686][T15499] __nla_validate_parse: 14 callbacks suppressed [ 1267.347706][T15499] netlink: 348 bytes leftover after parsing attributes in process `syz.2.10492'. [ 1267.609976][T15513] netlink: 'syz.2.10493': attribute type 10 has an invalid length. [ 1267.679717][T15230] veth0_vlan: entered promiscuous mode [ 1267.730534][T15230] veth1_vlan: entered promiscuous mode [ 1267.790126][T15524] netlink: 'syz.5.10498': attribute type 1 has an invalid length. [ 1267.819106][T15230] veth0_macvtap: entered promiscuous mode [ 1267.834274][T15230] veth1_macvtap: entered promiscuous mode [ 1267.862892][T15465] gre0 speed is unknown, defaulting to 1000 [ 1267.999052][T15230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.025376][ T8436] Bluetooth: hci6: command tx timeout [ 1268.149379][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10501'. [ 1268.170706][T15230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.252648][ T6581] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.264354][ T6581] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.274501][ T6581] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.290366][ T6581] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.490745][T15548] Bluetooth: MGMT ver 1.23 [ 1268.797340][T15561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.856787][T10181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.880133][T10181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.991944][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10508'. [ 1269.192568][T10181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.213768][T10181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.677677][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10516'. [ 1269.742654][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10518'. [ 1269.768919][T15605] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1269.797550][T15605] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1270.031771][T15616] netlink: 'syz.5.10522': attribute type 4 has an invalid length. [ 1270.053675][T15616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1270.092066][T15613] gre0 speed is unknown, defaulting to 1000 [ 1270.107818][ T5842] Bluetooth: hci6: command tx timeout [ 1270.668210][T15645] netlink: 'syz.2.10529': attribute type 1 has an invalid length. [ 1270.792226][T15645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1270.878013][T15645] netlink: 'syz.2.10529': attribute type 8 has an invalid length. [ 1270.969470][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10533'. [ 1271.004344][T15645] bond3: (slave geneve3): making interface the new active one [ 1271.033691][T15645] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1271.056272][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1271.074630][T15666] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1271.150646][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1271.168605][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1271.219324][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1271.613021][T15688] veth0_macvtap: entered allmulticast mode [ 1271.635122][T15688] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1271.692988][T15689] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1271.941949][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10544'. [ 1272.008579][T15703] x_tables: duplicate underflow at hook 1 [ 1272.051783][T15700] bond4: option lacp_rate: invalid value (128) [ 1272.060741][T15700] bond4 (unregistering): Released all slaves [ 1272.105773][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 1272.109864][ T8436] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1272.308649][T15714] netlink: 'syz.0.10549': attribute type 1 has an invalid length. [ 1272.342489][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10548'. [ 1272.736387][T15734] netlink: 'syz.0.10555': attribute type 1 has an invalid length. [ 1272.772126][T15737] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10554'. [ 1273.165836][T15742] syzkaller0: entered promiscuous mode [ 1273.188306][T15742] syzkaller0: entered allmulticast mode [ 1273.336919][T15759] FAULT_INJECTION: forcing a failure. [ 1273.336919][T15759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.350430][T15759] CPU: 1 UID: 0 PID: 15759 Comm: syz.0.10561 Not tainted syzkaller #0 PREEMPT(full) [ 1273.350454][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1273.350465][T15759] Call Trace: [ 1273.350473][T15759] [ 1273.350482][T15759] dump_stack_lvl+0xe8/0x150 [ 1273.350514][T15759] should_fail_ex+0x412/0x560 [ 1273.350544][T15759] _copy_from_user+0x2d/0xb0 [ 1273.350565][T15759] ___sys_sendmsg+0x1c6/0x360 [ 1273.350591][T15759] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.350616][T15759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.350671][T15759] ? __fget_files+0x2a/0x420 [ 1273.350692][T15759] ? __fget_files+0x3a0/0x420 [ 1273.350724][T15759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1273.350750][T15759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.350782][T15759] ? __pfx_ksys_write+0x10/0x10 [ 1273.350814][T15759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.350833][T15759] do_syscall_64+0x15f/0xf80 [ 1273.350853][T15759] ? trace_irq_disable+0x3b/0x140 [ 1273.350873][T15759] ? clear_bhb_loop+0x40/0x90 [ 1273.350894][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.350911][T15759] RIP: 0033:0x7f890199c819 [ 1273.350928][T15759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.350943][T15759] RSP: 002b:00007f8902788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.350965][T15759] RAX: ffffffffffffffda RBX: 00007f8901c15fa0 RCX: 00007f890199c819 [ 1273.350978][T15759] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1273.350990][T15759] RBP: 00007f8902788090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.351001][T15759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.351013][T15759] R13: 00007f8901c16038 R14: 00007f8901c15fa0 R15: 00007ffd4871b438 [ 1273.351042][T15759] [ 1273.556722][T15761] netlink: 'syz.2.10562': attribute type 4 has an invalid length. [ 1273.997709][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10568'. [ 1275.314994][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1278.613346][T15789] gre0 speed is unknown, defaulting to 1000 [ 1278.733938][T15806] netlink: 'syz.3.10572': attribute type 1 has an invalid length. [ 1278.780749][T15811] FAULT_INJECTION: forcing a failure. [ 1278.780749][T15811] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.796082][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.2.10575 Not tainted syzkaller #0 PREEMPT(full) [ 1278.796108][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1278.796123][T15811] Call Trace: [ 1278.796131][T15811] [ 1278.796139][T15811] dump_stack_lvl+0xe8/0x150 [ 1278.796171][T15811] should_fail_ex+0x412/0x560 [ 1278.796201][T15811] should_failslab+0xa8/0x100 [ 1278.796224][T15811] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1278.796250][T15811] ? __alloc_skb+0x186/0x7d0 [ 1278.796273][T15811] ? __alloc_skb+0x1d0/0x7d0 [ 1278.796294][T15811] ? __local_bh_enable_ip+0xd0/0x130 [ 1278.796324][T15811] __alloc_skb+0x1d0/0x7d0 [ 1278.796347][T15811] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1278.796379][T15811] netlink_sendmsg+0x5d4/0xb40 [ 1278.796414][T15811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.796442][T15811] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1278.796468][T15811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1278.796497][T15811] ____sys_sendmsg+0x972/0x9f0 [ 1278.796523][T15811] ? __might_fault+0xaf/0x130 [ 1278.796552][T15811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1278.796588][T15811] ? import_iovec+0x73/0xa0 [ 1278.796610][T15811] ___sys_sendmsg+0x2a5/0x360 [ 1278.796642][T15811] ? __lock_acquire+0x6b5/0x2cf0 [ 1278.796670][T15811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1278.796732][T15811] ? __fget_files+0x2a/0x420 [ 1278.796753][T15811] ? __fget_files+0x3a0/0x420 [ 1278.796785][T15811] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1278.796821][T15811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1278.796856][T15811] ? __pfx_ksys_write+0x10/0x10 [ 1278.796889][T15811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.796910][T15811] do_syscall_64+0x15f/0xf80 [ 1278.796934][T15811] ? clear_bhb_loop+0x40/0x90 [ 1278.796957][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.796975][T15811] RIP: 0033:0x7f2ce819c819 [ 1278.796993][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.797008][T15811] RSP: 002b:00007f2ce904f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.797035][T15811] RAX: ffffffffffffffda RBX: 00007f2ce8415fa0 RCX: 00007f2ce819c819 [ 1278.797049][T15811] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1278.797061][T15811] RBP: 00007f2ce904f090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.797073][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.797084][T15811] R13: 00007f2ce8416038 R14: 00007f2ce8415fa0 R15: 00007ffef09c7878 [ 1278.797115][T15811] [ 1279.062426][T15808] ip6tnl2: entered allmulticast mode [ 1279.071108][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10572'. [ 1279.111899][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10572'. [ 1279.198231][T15820] netlink: 'syz.3.10572': attribute type 1 has an invalid length. [ 1279.273793][T15806] bond4: (slave bridge4): making interface the new active one [ 1279.334293][T15806] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1279.367445][T15814] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 1279.387840][T15815] macvlan0: entered promiscuous mode [ 1279.397931][T15815] macvlan0: entered allmulticast mode [ 1279.405442][T15815] bond4: entered promiscuous mode [ 1279.405794][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10579'. [ 1279.410739][T15815] bridge4: entered promiscuous mode [ 1279.440552][T15815] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1279.467033][T15815] bond4: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1279.487955][T15815] bond4: left promiscuous mode [ 1279.492993][T15815] bridge4: left promiscuous mode [ 1279.569925][T15806] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 1279.664552][T15842] netlink: 'syz.2.10582': attribute type 7 has an invalid length. [ 1279.711363][T15842] netlink: 'syz.2.10582': attribute type 8 has an invalid length. [ 1279.722960][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10585'. [ 1279.749856][T15842] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10582'. [ 1279.788317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1279.992909][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10588'. [ 1280.482685][T15873] netlink: 5224 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1280.954249][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10601'. [ 1280.991957][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10601'. [ 1281.059806][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1281.110524][T15905] netlink: 'syz.3.10603': attribute type 13 has an invalid length. [ 1281.120309][T15908] netlink: 'syz.0.10604': attribute type 10 has an invalid length. [ 1281.247345][T15909] gre0 speed is unknown, defaulting to 1000 [ 1281.845092][T15924] netlink: 'syz.2.10607': attribute type 2 has an invalid length. [ 1281.913800][T15926] lo speed is unknown, defaulting to 1000 [ 1281.931168][T15926] lo speed is unknown, defaulting to 1000 [ 1281.987482][T15926] lo speed is unknown, defaulting to 1000 [ 1282.040997][T15928] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1282.110282][T15926] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1282.178792][T15898] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1282.191239][T15898] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1282.226511][T15898] veth0_to_bridge: entered allmulticast mode [ 1282.257482][T15898] veth0_to_bridge: entered promiscuous mode [ 1282.274277][T15898] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.308326][T15898] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1282.315691][T15898] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1282.360909][T15928] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1282.386833][T15947] netlink: 'syz.3.10611': attribute type 9 has an invalid length. [ 1282.431753][T15926] lo speed is unknown, defaulting to 1000 [ 1282.537761][T15928] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1282.587844][T15926] lo speed is unknown, defaulting to 1000 [ 1282.602543][T15926] lo speed is unknown, defaulting to 1000 [ 1282.612995][T15952] tipc: Started in network mode [ 1282.623078][T15952] tipc: Node identity a635e9989fec, cluster identity 4711 [ 1282.640267][T15952] tipc: Enabled bearer , priority 0 [ 1282.647420][T15926] lo speed is unknown, defaulting to 1000 [ 1282.657233][T15928] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1282.707207][T15926] lo speed is unknown, defaulting to 1000 [ 1282.714410][T15952] tipc: Disabling bearer [ 1282.731120][T15926] lo speed is unknown, defaulting to 1000 [ 1282.750510][T15926] lo speed is unknown, defaulting to 1000 [ 1282.776351][T15926] lo speed is unknown, defaulting to 1000 [ 1282.798474][T17411] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1282.821921][T15926] lo speed is unknown, defaulting to 1000 [ 1282.850284][T17411] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1282.864423][T15926] lo speed is unknown, defaulting to 1000 [ 1282.880712][T15926] lo speed is unknown, defaulting to 1000 [ 1283.001141][T10181] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1283.036482][T10181] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1283.899369][T16007] syzkaller0: entered promiscuous mode [ 1283.905402][T16007] syzkaller0: entered allmulticast mode [ 1284.002292][T16016] FAULT_INJECTION: forcing a failure. [ 1284.002292][T16016] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.018249][T16016] CPU: 0 UID: 0 PID: 16016 Comm: syz.6.10631 Not tainted syzkaller #0 PREEMPT(full) [ 1284.018276][T16016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1284.018288][T16016] Call Trace: [ 1284.018296][T16016] [ 1284.018305][T16016] dump_stack_lvl+0xe8/0x150 [ 1284.018336][T16016] should_fail_ex+0x412/0x560 [ 1284.018368][T16016] should_failslab+0xa8/0x100 [ 1284.018390][T16016] __kmalloc_noprof+0xe8/0x760 [ 1284.018416][T16016] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1284.018445][T16016] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1284.018475][T16016] genl_family_rcv_msg_doit+0xd9/0x330 [ 1284.018497][T16016] ? __asan_memcpy+0x40/0x70 [ 1284.018525][T16016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1284.018554][T16016] ? apparmor_capable+0x126/0x170 [ 1284.018576][T16016] ? bpf_lsm_capable+0x9/0x20 [ 1284.018596][T16016] ? security_capable+0x7e/0x2c0 [ 1284.018626][T16016] genl_rcv_msg+0x61c/0x7a0 [ 1284.018654][T16016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1284.018673][T16016] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1284.018695][T16016] ? __pfx_ref_tracker_free+0x10/0x10 [ 1284.018732][T16016] netlink_rcv_skb+0x232/0x4b0 [ 1284.018759][T16016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1284.018781][T16016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1284.018823][T16016] ? down_read+0x270/0x2e0 [ 1284.018846][T16016] ? genl_rcv+0xd/0x40 [ 1284.018867][T16016] genl_rcv+0x28/0x40 [ 1284.018885][T16016] netlink_unicast+0x75c/0x8e0 [ 1284.018918][T16016] netlink_sendmsg+0x813/0xb40 [ 1284.018952][T16016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1284.018981][T16016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1284.019007][T16016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1284.019034][T16016] ____sys_sendmsg+0x972/0x9f0 [ 1284.019059][T16016] ? __might_fault+0xaf/0x130 [ 1284.019089][T16016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1284.019125][T16016] ? import_iovec+0x73/0xa0 [ 1284.019149][T16016] ___sys_sendmsg+0x2a5/0x360 [ 1284.019181][T16016] ? __lock_acquire+0x6b5/0x2cf0 [ 1284.019209][T16016] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.019275][T16016] ? __fget_files+0x2a/0x420 [ 1284.019297][T16016] ? __fget_files+0x3a0/0x420 [ 1284.019331][T16016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1284.019361][T16016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1284.019398][T16016] ? __pfx_ksys_write+0x10/0x10 [ 1284.019433][T16016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.019454][T16016] do_syscall_64+0x15f/0xf80 [ 1284.019475][T16016] ? trace_irq_disable+0x3b/0x140 [ 1284.019498][T16016] ? clear_bhb_loop+0x40/0x90 [ 1284.019521][T16016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.019540][T16016] RIP: 0033:0x7f5d7699c819 [ 1284.019559][T16016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.019575][T16016] RSP: 002b:00007f5d778db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1284.019596][T16016] RAX: ffffffffffffffda RBX: 00007f5d76c15fa0 RCX: 00007f5d7699c819 [ 1284.019610][T16016] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1284.019622][T16016] RBP: 00007f5d778db090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.019634][T16016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.019646][T16016] R13: 00007f5d76c16038 R14: 00007f5d76c15fa0 R15: 00007ffe0c58b5f8 [ 1284.019678][T16016] [ 1284.457332][T16021] netlink: 'syz.0.10632': attribute type 1 has an invalid length. [ 1284.982491][T16038] gre0 speed is unknown, defaulting to 1000 [ 1284.990260][T16043] __nla_validate_parse: 12 callbacks suppressed [ 1284.990282][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10639'. [ 1285.030435][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10639'. [ 1285.062564][T16043] netlink: 5512 bytes leftover after parsing attributes in process `syz.0.10639'. [ 1285.088213][T16043] syzkaller0: entered promiscuous mode [ 1285.103232][T16043] syzkaller0: entered allmulticast mode [ 1285.238030][T16057] netlink: 'syz.5.10643': attribute type 4 has an invalid length. [ 1285.327043][ T3717] lo speed is unknown, defaulting to 1000 [ 1285.353388][ T3717] syz2: Port: 1 Link DOWN [ 1285.443200][T16063] netlink: 'syz.0.10644': attribute type 9 has an invalid length. [ 1285.465775][T16065] FAULT_INJECTION: forcing a failure. [ 1285.465775][T16065] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.480533][T16065] CPU: 0 UID: 0 PID: 16065 Comm: syz.5.10645 Not tainted syzkaller #0 PREEMPT(full) [ 1285.480557][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1285.480568][T16065] Call Trace: [ 1285.480576][T16065] [ 1285.480584][T16065] dump_stack_lvl+0xe8/0x150 [ 1285.480616][T16065] should_fail_ex+0x412/0x560 [ 1285.480646][T16065] should_failslab+0xa8/0x100 [ 1285.480667][T16065] __kmalloc_noprof+0xe8/0x760 [ 1285.480694][T16065] ? ethnl_default_set_doit+0x16a/0xad0 [ 1285.480719][T16065] ethnl_default_set_doit+0x16a/0xad0 [ 1285.480740][T16065] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1285.480760][T16065] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1285.480789][T16065] genl_family_rcv_msg_doit+0x22a/0x330 [ 1285.480810][T16065] ? __asan_memcpy+0x40/0x70 [ 1285.480836][T16065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1285.480870][T16065] ? bpf_lsm_capable+0x9/0x20 [ 1285.480887][T16065] ? security_capable+0x7e/0x2c0 [ 1285.480933][T16065] genl_rcv_msg+0x61c/0x7a0 [ 1285.480958][T16065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1285.480975][T16065] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1285.480994][T16065] ? __pfx_ref_tracker_free+0x10/0x10 [ 1285.481029][T16065] netlink_rcv_skb+0x232/0x4b0 [ 1285.481204][T16065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1285.481226][T16065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1285.481264][T16065] ? down_read+0x270/0x2e0 [ 1285.481284][T16065] ? genl_rcv+0xd/0x40 [ 1285.481304][T16065] genl_rcv+0x28/0x40 [ 1285.481321][T16065] netlink_unicast+0x75c/0x8e0 [ 1285.481355][T16065] netlink_sendmsg+0x813/0xb40 [ 1285.481390][T16065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.481418][T16065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1285.481443][T16065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1285.481472][T16065] ____sys_sendmsg+0x972/0x9f0 [ 1285.481499][T16065] ? __might_fault+0xaf/0x130 [ 1285.481526][T16065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1285.481559][T16065] ? import_iovec+0x73/0xa0 [ 1285.481583][T16065] ___sys_sendmsg+0x2a5/0x360 [ 1285.481607][T16065] ? __lock_acquire+0x6b5/0x2cf0 [ 1285.481635][T16065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.481698][T16065] ? __fget_files+0x2a/0x420 [ 1285.481719][T16065] ? __fget_files+0x3a0/0x420 [ 1285.481751][T16065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1285.481781][T16065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1285.481817][T16065] ? __pfx_ksys_write+0x10/0x10 [ 1285.481850][T16065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.481874][T16065] do_syscall_64+0x15f/0xf80 [ 1285.481895][T16065] ? trace_irq_disable+0x3b/0x140 [ 1285.481915][T16065] ? clear_bhb_loop+0x40/0x90 [ 1285.481938][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.481955][T16065] RIP: 0033:0x7f5faed9c819 [ 1285.481972][T16065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.481987][T16065] RSP: 002b:00007f5fafd0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.482006][T16065] RAX: ffffffffffffffda RBX: 00007f5faf015fa0 RCX: 00007f5faed9c819 [ 1285.482018][T16065] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1285.482029][T16065] RBP: 00007f5fafd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.482041][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.482060][T16065] R13: 00007f5faf016038 R14: 00007f5faf015fa0 R15: 00007ffd1b88f0b8 [ 1285.482092][T16065] [ 1285.973834][T16038] lo speed is unknown, defaulting to 1000 [ 1285.980769][T16059] gre0 speed is unknown, defaulting to 1000 [ 1286.137614][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1286.444578][T16086] netlink: 'syz.0.10652': attribute type 1 has an invalid length. [ 1286.453070][T16059] lo speed is unknown, defaulting to 1000 [ 1286.582177][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10652'. [ 1286.629608][T16101] netlink: 'syz.5.10655': attribute type 4 has an invalid length. [ 1286.636908][T16086] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1286.655348][T16086] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1286.791929][T16099] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 1286.819141][T16102] macvlan6: entered promiscuous mode [ 1286.827533][T16102] macvlan6: entered allmulticast mode [ 1286.833978][T16102] bond3: entered promiscuous mode [ 1286.842002][T16102] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1286.862281][T16106] netlink: 'syz.5.10656': attribute type 11 has an invalid length. [ 1286.872797][T16102] bond3: left promiscuous mode [ 1286.893206][T16104] bond3: (slave gretap2): making interface the new active one [ 1286.901751][T16104] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1286.921012][T16097] gre0 speed is unknown, defaulting to 1000 [ 1287.050584][T16110] FAULT_INJECTION: forcing a failure. [ 1287.050584][T16110] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.088483][T16110] CPU: 1 UID: 0 PID: 16110 Comm: syz.0.10658 Not tainted syzkaller #0 PREEMPT(full) [ 1287.088510][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1287.088522][T16110] Call Trace: [ 1287.088530][T16110] [ 1287.088538][T16110] dump_stack_lvl+0xe8/0x150 [ 1287.088570][T16110] should_fail_ex+0x412/0x560 [ 1287.088602][T16110] should_failslab+0xa8/0x100 [ 1287.088624][T16110] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1287.088652][T16110] ? ethnl_default_set_doit+0x59d/0xad0 [ 1287.088671][T16110] ? __kmalloc_noprof+0x37d/0x760 [ 1287.088701][T16110] kmemdup_noprof+0x2b/0x70 [ 1287.088725][T16110] ethnl_default_set_doit+0x59d/0xad0 [ 1287.088757][T16110] genl_family_rcv_msg_doit+0x22a/0x330 [ 1287.088779][T16110] ? __asan_memcpy+0x40/0x70 [ 1287.088807][T16110] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1287.088842][T16110] ? bpf_lsm_capable+0x9/0x20 [ 1287.088862][T16110] ? security_capable+0x7e/0x2c0 [ 1287.088893][T16110] genl_rcv_msg+0x61c/0x7a0 [ 1287.088921][T16110] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1287.088940][T16110] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1287.088975][T16110] netlink_rcv_skb+0x232/0x4b0 [ 1287.089002][T16110] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1287.089024][T16110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1287.089067][T16110] ? down_read+0x270/0x2e0 [ 1287.089090][T16110] ? genl_rcv+0xd/0x40 [ 1287.089112][T16110] genl_rcv+0x28/0x40 [ 1287.089130][T16110] netlink_unicast+0x75c/0x8e0 [ 1287.089165][T16110] netlink_sendmsg+0x813/0xb40 [ 1287.089209][T16110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1287.089238][T16110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1287.089264][T16110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1287.089294][T16110] ____sys_sendmsg+0x972/0x9f0 [ 1287.089322][T16110] ? __might_fault+0xaf/0x130 [ 1287.089353][T16110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1287.089390][T16110] ? import_iovec+0x73/0xa0 [ 1287.089414][T16110] ___sys_sendmsg+0x2a5/0x360 [ 1287.089439][T16110] ? __lock_acquire+0x6b5/0x2cf0 [ 1287.089467][T16110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.089533][T16110] ? __fget_files+0x2a/0x420 [ 1287.089555][T16110] ? __fget_files+0x3a0/0x420 [ 1287.089589][T16110] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1287.089620][T16110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1287.089657][T16110] ? __pfx_ksys_write+0x10/0x10 [ 1287.089693][T16110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.089714][T16110] do_syscall_64+0x15f/0xf80 [ 1287.089735][T16110] ? trace_irq_disable+0x3b/0x140 [ 1287.089754][T16110] ? clear_bhb_loop+0x40/0x90 [ 1287.089775][T16110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.089792][T16110] RIP: 0033:0x7f890199c819 [ 1287.089810][T16110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.089824][T16110] RSP: 002b:00007f8902788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.089844][T16110] RAX: ffffffffffffffda RBX: 00007f8901c15fa0 RCX: 00007f890199c819 [ 1287.089856][T16110] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1287.089868][T16110] RBP: 00007f8902788090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.089879][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.089889][T16110] R13: 00007f8901c16038 R14: 00007f8901c15fa0 R15: 00007ffd4871b438 [ 1287.089921][T16110] [ 1287.546884][T16097] lo speed is unknown, defaulting to 1000 [ 1287.923776][T16120] netlink: 'syz.0.10662': attribute type 62 has an invalid length. [ 1288.040244][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10662'. [ 1288.060023][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10663'. [ 1288.479170][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10665'. [ 1288.494644][T16130] openvswitch: netlink: Flow actions attr not present in new flow. [ 1288.608705][T16136] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10667'. [ 1288.670831][T16136] IPVS: length: 35 != 24 [ 1288.786113][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10670'. [ 1288.819050][T16149] netlink: 'syz.5.10670': attribute type 9 has an invalid length. [ 1288.922794][T16156] gre0 speed is unknown, defaulting to 1000 [ 1289.312712][T16170] netlink: 'syz.3.10676': attribute type 4 has an invalid length. [ 1289.473467][T16173] tipc: Enabled bearer , priority 0 [ 1289.517366][T16173] syzkaller0: entered promiscuous mode [ 1289.557832][T16173] syzkaller0: entered allmulticast mode [ 1289.600638][T16175] tipc: Resetting bearer [ 1289.646384][T16172] tipc: Resetting bearer [ 1289.761172][T16172] tipc: Disabling bearer [ 1289.788301][T16181] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1289.970616][T16156] lo speed is unknown, defaulting to 1000 [ 1290.231405][T16198] : entered promiscuous mode [ 1290.520740][T16215] netlink: 'syz.6.10688': attribute type 4 has an invalid length. [ 1290.540996][T16222] netlink: 'syz.0.10689': attribute type 10 has an invalid length. [ 1290.573256][T16222] team0: Device ipvlan1 failed to register rx_handler [ 1290.756374][T16228] netlink: 'syz.6.10688': attribute type 4 has an invalid length. [ 1290.794136][T16229] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1290.860215][T16234] netlink: 'syz.0.10694': attribute type 1 has an invalid length. [ 1290.895435][T16234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1290.928228][T16234] bond4: (slave veth11): Enslaving as an active interface with a down link [ 1290.983473][T16234] bond4: (slave veth13): Enslaving as an active interface with a down link [ 1294.531401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.544079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.556614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.569039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.581652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.594270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.606876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.619348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.632033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1294.644324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1296.097286][T16234] bond4: entered allmulticast mode [ 1296.550102][T16250] __nla_validate_parse: 6 callbacks suppressed [ 1296.550122][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10699'. [ 1297.055122][T16270] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10706'. [ 1297.111079][T16273] netlink: 'syz.6.10707': attribute type 1 has an invalid length. [ 1297.283793][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10707'. [ 1297.299675][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.430507][T16286] netlink: 'syz.0.10709': attribute type 10 has an invalid length. [ 1297.481778][T16282] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1297.496221][T16282] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1297.599220][T16298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.613077][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1297.629555][T16298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1297.747627][T16285] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1297.792762][T16295] bond1: (slave gretap1): making interface the new active one [ 1297.802530][T16295] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1297.819449][T16286] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1298.228115][T14827] lec:lec_start_xmit: lec0:No lecd attached [ 1298.262392][T16305] veth1_macvtap: left promiscuous mode [ 1298.279472][T16305] macsec0: entered allmulticast mode [ 1298.323639][T16305] veth1_macvtap: entered promiscuous mode [ 1298.338331][T16305] veth1_macvtap: entered allmulticast mode [ 1298.344451][T16305] macsec0: left allmulticast mode [ 1298.360761][T16305] veth1_macvtap: left allmulticast mode [ 1298.739575][T16317] syzkaller0: entered promiscuous mode [ 1298.764383][T16317] syzkaller0: entered allmulticast mode [ 1298.929888][T16324] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10716'. [ 1299.536006][ C1] net_ratelimit: 10327 callbacks suppressed [ 1299.536026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.555010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1299.567520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.580105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.593077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.605977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1299.618441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.631084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.644074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.657140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:6f:d6:df:97:d9, vlan:0) [ 1299.712616][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10719'. [ 1299.872863][T16354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.901350][T16354] netlink: 'syz.5.10723': attribute type 1 has an invalid length. [ 1300.004181][T16354] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1300.047490][T16346] gre0 speed is unknown, defaulting to 1000 [ 1300.087334][T16354] netlink: 658 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1300.140787][T16354] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1300.284068][T16361] netlink: 'syz.0.10724': attribute type 1 has an invalid length. [ 1300.631551][T16368] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1300.700056][T16368] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1300.987048][T16369] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 1301.099399][T16372] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1301.164302][T16372] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1301.427953][T16346] lo speed is unknown, defaulting to 1000 [ 1301.939789][T16403] __nla_validate_parse: 3 callbacks suppressed [ 1301.939807][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1302.039183][T16405] netlink: 'syz.6.10732': attribute type 13 has an invalid length. [ 1302.081377][T16405] netlink: 'syz.6.10732': attribute type 17 has an invalid length. [ 1302.717505][T16401] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1302.725068][T16401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.732703][T16401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.071108][T16401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.107292][T16401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.600934][T16405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.611083][T16405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.625533][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10735'. [ 1303.684389][ T507] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.720337][ T507] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.761725][ T507] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.811248][ T507] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.846299][T16433] netlink: 'syz.6.10739': attribute type 1 has an invalid length. [ 1303.923761][T16432] batman_adv: batadv0: Adding interface: ipvlan2 [ 1303.954812][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1303.963015][ C1] lec:lec_tx_timeout: lec0 [ 1303.968172][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1303.982342][T16432] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.984582][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1304.022298][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10739'. [ 1304.035386][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.047566][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1304.071935][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.084197][T16432] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1304.101983][T16444] netlink: 'syz.3.10741': attribute type 13 has an invalid length. [ 1304.123582][T16444] netlink: 'syz.3.10741': attribute type 17 has an invalid length. [ 1304.168655][T16436] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1304.180814][T16436] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1304.237133][T16441] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 1304.287301][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1304.306475][T16453] netlink: 'syz.5.10744': attribute type 1 has an invalid length. [ 1304.313290][T16444] 0ªî{X¹¦: left allmulticast mode [ 1304.319927][T16453] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10744'. [ 1304.385609][T16455] pim6reg: entered allmulticast mode [ 1304.409727][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10745'. [ 1304.420576][T16445] pim6reg: left allmulticast mode [ 1304.553982][T16467] net_ratelimit: 5356 callbacks suppressed [ 1304.553998][T16467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1304.578111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1304.717061][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10746'. [ 1304.783220][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10750'. [ 1305.001858][T16490] netlink: 'syz.0.10755': attribute type 1 has an invalid length. [ 1305.004623][T16491] netlink: 'syz.3.10754': attribute type 1 has an invalid length. [ 1305.103610][T16490] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1305.136005][T16490] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1305.208715][T16499] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 1305.306152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1305.320920][T16514] openvswitch: netlink: Flow key attr not present in new flow. [ 1305.381290][T16515] geneve2: entered promiscuous mode [ 1305.390266][T10180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.408515][T10180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.409060][T16518] netlink: 'syz.0.10762': attribute type 4 has an invalid length. [ 1305.434283][T10180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.460107][T10180] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.531225][T16521] netlink: 'syz.3.10763': attribute type 1 has an invalid length. [ 1305.542256][T16518] netlink: 'syz.0.10762': attribute type 4 has an invalid length. [ 1305.624703][T16521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1305.689024][T16519] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1305.810340][T16522] bond5: (slave gretap2): making interface the new active one [ 1305.826516][T16522] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1305.855857][T16524] bond5 (unregistering): (slave gretap2): Releasing active interface [ 1305.885327][T16524] bond5 (unregistering): Released all slaves [ 1306.129950][T16535] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1306.306026][T16538] gre0 speed is unknown, defaulting to 1000 [ 1306.333636][T16541] netlink: 'syz.3.10769': attribute type 9 has an invalid length. [ 1306.894704][T16564] bond0: entered promiscuous mode [ 1306.911356][T16564] bond_slave_0: entered promiscuous mode [ 1306.926792][T16564] bond_slave_1: entered promiscuous mode [ 1306.945800][T16564] debugfs: 'hsr1' already exists in 'hsr' [ 1306.952013][T16564] Cannot create hsr debugfs directory [ 1306.959599][T16564] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1306.968552][T16564] bond0: left promiscuous mode [ 1306.968767][T16567] __nla_validate_parse: 11 callbacks suppressed [ 1306.968782][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10775'. [ 1306.973395][T16564] bond_slave_0: left promiscuous mode [ 1306.973609][T16564] bond_slave_1: left promiscuous mode [ 1307.013545][T16538] lo speed is unknown, defaulting to 1000 [ 1307.314978][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1307.433416][T16575] IPVS: persistence engine module ip_vs_pe_… not found [ 1307.497149][T16578] veth15: entered promiscuous mode [ 1307.795548][T16593] Unsupported ieee802154 address type: 0 [ 1307.829806][T16592] syzkaller0: entered promiscuous mode [ 1307.841247][T16592] syzkaller0: entered allmulticast mode [ 1308.111872][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1308.170044][T16604] bond3: Removing last ns target with arp_interval on [ 1308.262553][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10787'. [ 1308.333627][T16610] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1308.383629][T16618] bond2: (slave bridge3): making interface the new active one [ 1308.418312][T16618] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1308.433733][T16607] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1308.563727][T16619] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1308.632789][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10788'. [ 1308.720163][T16631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1308.857764][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10794'. [ 1308.974836][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1308.983063][ C1] lec:lec_tx_timeout: lec0 [ 1309.046211][T16650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1309.084383][T16650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1309.161325][T16660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10798'. [ 1309.233931][T16666] validate_nla: 1 callbacks suppressed [ 1309.233951][T16666] netlink: 'syz.0.10797': attribute type 4 has an invalid length. [ 1309.287001][T16671] netlink: 'syz.0.10797': attribute type 4 has an invalid length. [ 1309.309635][T16666] tc_dump_action: action bad kind [ 1309.418169][T16673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10801'. [ 1309.447967][T16673] netem: change failed [ 1309.517918][T16683] netlink: 'syz.5.10801': attribute type 4 has an invalid length. [ 1309.599296][T16686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1309.669889][T16692] netlink: 'syz.5.10807': attribute type 1 has an invalid length. [ 1309.704672][T16695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.728528][T16692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1309.826177][T16696] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1309.849116][T16700] Cannot find add_set index 1 as target [ 1309.883942][T16692] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1309.905397][T16700] xt_bpf: check failed: parse error [ 1309.914602][T16692] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 1309.929750][T16701] syzkaller1: entered promiscuous mode [ 1309.947344][T16701] syzkaller1: entered allmulticast mode [ 1310.069570][T16710] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1310.111735][T16707] batadv_slave_1: entered promiscuous mode [ 1310.164581][T16707] batadv_slave_1: left promiscuous mode [ 1310.913343][T16767] tipc: Enabled bearer , priority 0 [ 1310.922105][T16767] syzkaller0: entered promiscuous mode [ 1310.928323][T16767] syzkaller0: entered allmulticast mode [ 1311.020882][T16767] tipc: Resetting bearer [ 1311.030670][T16764] tipc: Resetting bearer [ 1311.088271][T16764] tipc: Disabling bearer [ 1311.125899][T16774] bond4: entered allmulticast mode [ 1311.150910][T16775] macvlan0: entered promiscuous mode [ 1311.161071][T16775] macvlan0: entered allmulticast mode [ 1311.170866][T16775] bond4: (slave macvlan0): Opening slave failed [ 1311.271461][T16783] netlink: 'syz.2.10836': attribute type 1 has an invalid length. [ 1311.322064][T16785] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1311.352996][T16781] bond7: entered promiscuous mode [ 1311.360069][T16781] bond7: entered allmulticast mode [ 1311.366158][T16781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1311.390814][T16789] netlink: 'syz.5.10837': attribute type 4 has an invalid length. [ 1312.230881][T16843] netlink: 'syz.6.10853': attribute type 1 has an invalid length. [ 1312.413649][T16857] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1312.444531][T16857] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1312.524585][T16862] syzkaller1: entered promiscuous mode [ 1312.538372][T16862] syzkaller1: entered allmulticast mode [ 1312.690479][T16874] pimreg: tun_chr_ioctl cmd 1074025677 [ 1312.700470][T16874] pimreg: linktype set to 823 [ 1312.856513][T16889] tipc: Enabled bearer , priority 0 [ 1312.884246][T16893] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20000 [ 1312.941596][T16897] __nla_validate_parse: 18 callbacks suppressed [ 1312.941617][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10867'. [ 1312.966897][T16889] tipc: Disabling bearer [ 1312.997872][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1313.007623][T16896] 8021q: VLANs not supported on sit0 [ 1313.034258][T16900] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10870'. [ 1313.048299][T16900] siw: device registration error -23 [ 1313.066240][T16897] Bluetooth: MGMT ver 1.23 [ 1313.281717][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1313.452942][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1313.550432][T16936] bond5: entered promiscuous mode [ 1313.569201][T16936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1313.599650][T16936] bridge0: port 3(bond5) entered blocking state [ 1313.633720][T16936] bridge0: port 3(bond5) entered disabled state [ 1313.665481][T16936] bond5: entered allmulticast mode [ 1313.702250][T16936] bridge0: port 3(bond5) entered blocking state [ 1313.708831][T16936] bridge0: port 3(bond5) entered listening state [ 1313.818140][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10883'. [ 1314.017360][T16930] netlink: 'syz.3.10879': attribute type 2 has an invalid length. [ 1314.124956][T16959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10888'. [ 1314.366824][T16973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.429921][ T507] bridge0: port 3(bond5) entered disabled state [ 1314.495056][T16986] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1314.529996][T16986] bridge8: entered allmulticast mode [ 1314.652962][T28341] IPVS: starting estimator thread 0... [ 1314.701240][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1314.732968][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1314.745002][T16994] IPVS: using max 33 ests per chain, 79200 per kthread [ 1314.766946][T16997] netlink: 'syz.2.10899': attribute type 10 has an invalid length. [ 1314.780861][T16997] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10899'. [ 1315.238872][T17008] bond6 (unregistering): Released all slaves [ 1315.450363][T17022] syzkaller0: mtu less than device minimum [ 1315.478964][T17022] syzkaller0: entered promiscuous mode [ 1315.491944][T17022] syzkaller0: entered allmulticast mode [ 1316.560750][T17082] netlink: 'syz.2.10923': attribute type 1 has an invalid length. [ 1317.420981][T17139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.459628][T17141] bridge_slave_0: left allmulticast mode [ 1317.468695][T17141] bridge_slave_0: left promiscuous mode [ 1317.478081][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.531429][T17141] bridge_slave_1: left allmulticast mode [ 1317.567785][T17141] bridge_slave_1: left promiscuous mode [ 1317.600953][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.672556][T17141] bond0: (slave bond_slave_0): Releasing backup interface [ 1317.726716][T17141] bond0: (slave bond_slave_1): Releasing backup interface [ 1317.762283][T17141] team0: Port device team_slave_0 removed [ 1317.790235][T17141] team0: Port device team_slave_1 removed [ 1317.803458][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.812338][T17141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.823066][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.833437][T17141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.847726][T17141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1317.878124][T17155] : entered promiscuous mode [ 1318.334816][T17182] x_tables: duplicate underflow at hook 1 [ 1318.372008][T17182] x_tables: duplicate underflow at hook 1 [ 1318.418384][T17182] x_tables: duplicate underflow at hook 1 [ 1318.463627][T17182] x_tables: duplicate underflow at hook 1 [ 1318.478883][T17189] __nla_validate_parse: 38 callbacks suppressed [ 1318.478904][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10956'. [ 1318.495200][T17182] x_tables: duplicate underflow at hook 1 [ 1318.501603][T17182] x_tables: duplicate underflow at hook 1 [ 1318.508066][T17182] x_tables: duplicate underflow at hook 1 [ 1318.514118][T17182] x_tables: duplicate underflow at hook 1 [ 1318.523340][T17182] x_tables: duplicate underflow at hook 1 [ 1318.530475][T17182] x_tables: duplicate underflow at hook 1 [ 1318.748865][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10960'. [ 1318.843023][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10964'. [ 1318.862588][T17206] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10964'. [ 1318.883854][T17207] netlink: 148 bytes leftover after parsing attributes in process `syz.6.10961'. [ 1318.933629][T17206] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10964'. [ 1318.950376][T17206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1319.190899][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10970'. [ 1319.370759][T17239] netlink: 'syz.5.10973': attribute type 1 has an invalid length. [ 1319.482187][T17239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1319.675327][T17258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10977'. [ 1319.704439][T17258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10977'. [ 1319.887940][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1320.430111][T17290] veth1_macvtap: left promiscuous mode [ 1320.474563][T17287] geneve3: entered promiscuous mode [ 1320.482508][T17292] team0: left allmulticast mode [ 1320.494894][T17292] team_slave_0: left allmulticast mode [ 1320.506694][T17292] team_slave_1: left allmulticast mode [ 1320.514211][T17292] team0: left promiscuous mode [ 1320.519558][T17292] team_slave_0: left promiscuous mode [ 1320.526336][T17292] team_slave_1: left promiscuous mode [ 1320.532639][T17292] bridge0: port 1(team0) entered disabled state [ 1320.549593][T17292] team0: Port device team_slave_0 removed [ 1320.559354][T17292] team0: Port device team_slave_1 removed [ 1320.566106][T17292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.575718][T17292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1320.595148][ T507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.613895][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.642883][ T507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.652290][ T507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.673705][ T507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.722431][T17411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.740201][T17411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.748285][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1321.129147][T17326] syzkaller0: entered promiscuous mode [ 1321.152298][T17326] syzkaller0: entered allmulticast mode [ 1321.223959][T17331] gre0 speed is unknown, defaulting to 1000 [ 1321.581107][T17331] lo speed is unknown, defaulting to 1000 [ 1321.588635][T17340] siw: device registration error -23 [ 1321.694652][T17355] netlink: 'syz.3.11005': attribute type 1 has an invalid length. [ 1321.702849][T17355] netlink: 'syz.3.11005': attribute type 3 has an invalid length. [ 1322.233189][T17374] veth9: entered allmulticast mode [ 1322.640551][T17397] ip6erspan0: entered allmulticast mode [ 1322.956601][T17417] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1323.001505][T17417] syzkaller0: entered promiscuous mode [ 1323.020877][T17417] syzkaller0: entered allmulticast mode [ 1323.779826][T17418] lec:lec_atm_close: lec0: Shut down! [ 1323.808820][T17450] žÿ: renamed from team_slave_1 [ 1324.087449][T17455] __nla_validate_parse: 18 callbacks suppressed [ 1324.087487][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11034'. [ 1324.118584][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11034'. [ 1324.209749][T17465] gre0 speed is unknown, defaulting to 1000 [ 1324.377454][T17489] netlink: 'syz.2.11039': attribute type 10 has an invalid length. [ 1324.499615][T17465] lo speed is unknown, defaulting to 1000 [ 1324.945976][T17503] tipc: Failed to remove unknown binding: 66,1,1/2886997007:165361058/165361060 [ 1325.029151][T17503] tipc: Failed to remove unknown binding: 66,1,1/2886997007:165361058/165361060 [ 1325.039181][T17503] tipc: Failed to remove unknown binding: 66,1,1/2886997007:165361058/165361060 [ 1325.071670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.392805][T17507] infiniband !yz!: set down [ 1325.397700][T17507] infiniband !yz!: added team_slave_0 [ 1325.444953][T17507] RDS/IB: !yz!: added [ 1325.449220][T17507] smc: adding ib device !yz! with port count 1 [ 1325.457000][T17507] smc: ib device !yz! port 1 has no pnetid [ 1326.815174][T17512] netlink: 'syz.3.11044': attribute type 1 has an invalid length. [ 1326.838985][T17512] bond5: entered promiscuous mode [ 1326.844405][T17512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1326.865688][T17513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1326.873662][T17513] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1326.884709][T17513] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1326.899422][T17513] bond5: (slave ip6gre1): making interface the new active one [ 1326.907698][T17513] ip6gre1: entered promiscuous mode [ 1326.914102][T17513] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 1327.128718][T17468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1327.413614][T17528] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11049'. [ 1327.554192][T17526] bond4: (slave bond_slave_1): Device is not bonding slave [ 1327.586381][T17526] bond4: option active_slave: invalid value (bond_slave_1) [ 1327.665741][T17526] bond4 (unregistering): Released all slaves [ 1327.877890][T17529] gre0 speed is unknown, defaulting to 1000 [ 1328.120682][T17558] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11056'. [ 1328.252203][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1328.252477][T17529] lo speed is unknown, defaulting to 1000 [ 1328.263288][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1328.279266][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1328.290031][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1328.914952][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 1328.923168][ C1] lec:lec_tx_timeout: lec0 [ 1329.368741][T17588] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1329.380791][T17588] bond6 (unregistering): Released all slaves [ 1330.292242][T17530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1330.305973][T17585] netlink: 'syz.6.11064': attribute type 1 has an invalid length. [ 1330.336080][T17585] netlink: 228 bytes leftover after parsing attributes in process `syz.6.11064'. [ 1330.671360][T17606] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1330.800656][T17604] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11071'. [ 1330.870585][T17630] netlink: 'syz.6.11075': attribute type 1 has an invalid length. [ 1330.952383][T17630] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1330.964281][T17630] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 1331.021236][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11075'. [ 1331.114196][T17640] tipc: Started in network mode [ 1331.122641][T17640] tipc: Node identity 5e209e15f8c9, cluster identity 4711 [ 1331.149487][T17640] tipc: Enabled bearer , priority 10 [ 1331.358295][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.367941][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.393301][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.413286][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.423040][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.434417][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.443330][T17660] netlink: 'syz.6.11083': attribute type 1 has an invalid length. [ 1331.753523][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11088'. [ 1331.776116][T17674] vlan0: entered promiscuous mode [ 1331.786560][T17674] team0: entered promiscuous mode [ 1331.817077][T17676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1331.863698][T17677] bond6 (unregistering): Released all slaves [ 1332.020879][T31292] IPVS: starting estimator thread 0... [ 1332.115018][T17686] IPVS: using max 33 ests per chain, 79200 per kthread [ 1332.131841][T17690] validate_nla: 10 callbacks suppressed [ 1332.131862][T17690] netlink: 'syz.5.11093': attribute type 1 has an invalid length. [ 1332.242359][T17690] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1332.257500][T17690] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1332.282755][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11093'. [ 1332.303703][T17694] netlink: 504 bytes leftover after parsing attributes in process `syz.6.11095'. [ 1332.465231][T28341] tipc: Node number set to 2800328213 [ 1332.541629][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11100'. [ 1332.566894][T17709] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11100'. [ 1332.700490][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11104'. [ 1332.936343][T17734] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1332.957216][T17734] bond8 (unregistering): Released all slaves [ 1333.156561][T17750] netlink: zone id is out of range [ 1333.193814][T17750] netlink: zone id is out of range [ 1333.228788][T17750] netlink: zone id is out of range [ 1333.262466][T17750] netlink: zone id is out of range [ 1333.288389][T17750] netlink: zone id is out of range [ 1333.316934][T17750] netlink: zone id is out of range [ 1333.340966][T17750] netlink: zone id is out of range [ 1333.360741][T17750] netlink: zone id is out of range [ 1333.361969][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11113'. [ 1333.381605][T17750] netlink: zone id is out of range [ 1333.397246][T17750] netlink: zone id is out of range [ 1333.403665][T17763] netlink: 'syz.0.11112': attribute type 1 has an invalid length. [ 1333.490200][T17763] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1333.516793][T17763] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1333.900732][T17788] veth7: entered allmulticast mode [ 1333.930757][T17788] bond8: (slave veth7): Enslaving as an active interface with an up link [ 1334.628777][T17790] gre0 speed is unknown, defaulting to 1000 [ 1334.830069][T17835] netlink: 'syz.0.11133': attribute type 1 has an invalid length. [ 1334.836302][T17830] bond4: entered allmulticast mode [ 1334.906198][T17833] macvlan3: entered promiscuous mode [ 1334.911552][T17833] macvlan3: entered allmulticast mode [ 1335.103640][T17839] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1335.144313][T17839] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1335.274843][T17790] lo speed is unknown, defaulting to 1000 [ 1335.297527][T17821] gre0 speed is unknown, defaulting to 1000 [ 1335.306346][ T5842] Bluetooth: hci6: command 0x0405 tx timeout [ 1335.773305][T17867] hsr0: entered promiscuous mode [ 1335.782405][T17869] FAULT_INJECTION: forcing a failure. [ 1335.782405][T17869] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.795399][T17869] CPU: 0 UID: 0 PID: 17869 Comm: syz.5.11144 Not tainted syzkaller #0 PREEMPT(full) [ 1335.795426][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1335.795437][T17869] Call Trace: [ 1335.795445][T17869] [ 1335.795454][T17869] dump_stack_lvl+0xe8/0x150 [ 1335.795485][T17869] should_fail_ex+0x412/0x560 [ 1335.795516][T17869] should_failslab+0xa8/0x100 [ 1335.795538][T17869] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 1335.795557][T17869] ? pfn_valid+0x125/0x4c0 [ 1335.795594][T17869] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 1335.795645][T17869] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 1335.795679][T17869] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1335.795734][T17869] ? 0xffffffffa0201898 [ 1335.795750][T17869] ? 0xffffffffa020191c [ 1335.795765][T17869] ? 0xffffffffa0201988 [ 1335.795781][T17869] ? 0xffffffffa02019d8 [ 1335.795796][T17869] ? 0xffffffffa0201a4c [ 1335.795811][T17869] ? 0xffffffffa0202f64 [ 1335.795852][T17869] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1335.795889][T17869] ? _copy_from_user+0x94/0xb0 [ 1335.795909][T17869] ? bpf_test_init+0x113/0x150 [ 1335.795932][T17869] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1335.795965][T17869] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1335.796008][T17869] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1335.796039][T17869] ? __fget_files+0x2a/0x420 [ 1335.796066][T17869] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1335.796093][T17869] bpf_prog_test_run+0x2c7/0x340 [ 1335.796120][T17869] __sys_bpf+0x643/0x950 [ 1335.796143][T17869] ? __pfx___sys_bpf+0x10/0x10 [ 1335.796179][T17869] ? ksys_write+0x242/0x270 [ 1335.796207][T17869] ? __pfx_ksys_write+0x10/0x10 [ 1335.796238][T17869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.796258][T17869] __x64_sys_bpf+0x7c/0x90 [ 1335.796277][T17869] do_syscall_64+0x15f/0xf80 [ 1335.796298][T17869] ? trace_irq_disable+0x3b/0x140 [ 1335.796316][T17869] ? clear_bhb_loop+0x40/0x90 [ 1335.796334][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.796359][T17869] RIP: 0033:0x7f5faed9c819 [ 1335.796376][T17869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.796392][T17869] RSP: 002b:00007f5fafd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1335.796413][T17869] RAX: ffffffffffffffda RBX: 00007f5faf015fa0 RCX: 00007f5faed9c819 [ 1335.796426][T17869] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1335.796439][T17869] RBP: 00007f5fafd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.796451][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.796462][T17869] R13: 00007f5faf016038 R14: 00007f5faf015fa0 R15: 00007ffd1b88f0b8 [ 1335.796494][T17869] [ 1335.892719][T17821] lo speed is unknown, defaulting to 1000 [ 1335.907109][T17865] hsr0: left promiscuous mode [ 1336.377727][T17881] netlink: 'syz.2.11149': attribute type 1 has an invalid length. [ 1336.481789][T17881] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1336.545452][T17881] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1336.723833][T17885] bond5: (slave gretap1): making interface the new active one [ 1336.756931][T17885] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1337.035837][T17890] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1337.069034][T17890] bond10 (unregistering): Released all slaves [ 1337.237863][T17894] bond6: Unable to set up delay as MII monitoring is disabled [ 1337.248910][T17894] bond6 (unregistering): Released all slaves [ 1337.263046][T17902] __nla_validate_parse: 6 callbacks suppressed [ 1337.263064][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11154'. [ 1337.361308][T17902] vlan0: entered promiscuous mode [ 1337.366894][T17902] erspan0: entered promiscuous mode [ 1337.687478][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11160'. [ 1337.959822][T17923] netlink: 'syz.5.11163': attribute type 1 has an invalid length. [ 1338.061745][T17928] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1338.077117][T17928] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1338.167660][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11164'. [ 1338.185642][ T8436] Bluetooth: hci4: command 0x0406 tx timeout [ 1338.189866][T14196] Bluetooth: hci0: command 0x0c1a tx timeout [ 1338.809914][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11170'. [ 1338.985057][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11174'. [ 1339.224019][T17968] netlink: 'syz.2.11177': attribute type 1 has an invalid length. [ 1339.447721][T17969] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1339.462540][T17969] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1339.475671][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11179'. [ 1339.489630][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11179'. [ 1339.515089][T17981] netlink: 'syz.0.11179': attribute type 26 has an invalid length. [ 1339.535668][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11179'. [ 1339.891076][T18011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11189'. [ 1340.022865][T18016] netlink: 14416 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1340.049620][T18016] tc_dump_action: action bad kind [ 1340.207641][T18028] netlink: 'syz.6.11194': attribute type 1 has an invalid length. [ 1340.329398][T18028] bond6: (slave bridge5): making interface the new active one [ 1340.338536][T18028] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1340.351896][T18033] veth0: entered allmulticast mode [ 1340.401345][T18033] netlink: 'syz.2.11195': attribute type 2 has an invalid length. [ 1340.448734][T18041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1340.456093][T18041] IPv6: NLM_F_CREATE should be set when creating new route [ 1340.463439][T18041] IPv6: NLM_F_CREATE should be set when creating new route [ 1340.548603][T18046] xt_check_table_hooks: 23 callbacks suppressed [ 1340.548626][T18046] x_tables: duplicate underflow at hook 2 [ 1340.729937][T18057] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1341.227757][ C0] net_ratelimit: 8 callbacks suppressed [ 1341.227778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1341.294059][T18079] gre0 speed is unknown, defaulting to 1000 [ 1341.873432][T18066] netlink: 'syz.2.11207': attribute type 10 has an invalid length. [ 1341.896413][T18066] netlink: 'syz.2.11207': attribute type 10 has an invalid length. [ 1341.905223][T18066] batadv0: entered promiscuous mode [ 1341.914021][T18066] batadv0: entered allmulticast mode [ 1341.928174][T18066] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1341.958282][T18079] lo speed is unknown, defaulting to 1000 [ 1341.958844][T18103] gre0 speed is unknown, defaulting to 1000 [ 1342.682034][T18138] netlink: 'syz.2.11222': attribute type 1 has an invalid length. [ 1342.696057][T18148] __nla_validate_parse: 8 callbacks suppressed [ 1342.696081][T18148] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11224'. [ 1342.818029][T18103] lo speed is unknown, defaulting to 1000 [ 1342.913432][T18157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11227'. [ 1343.438214][T18173] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11232'. [ 1343.579609][T18181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11236'. [ 1344.136448][T18201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11240'. [ 1344.190233][T18198] can: request_module (can-proto-0) failed. [ 1344.246121][T18203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11241'. [ 1344.331684][T18203] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1344.386098][T18203] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1344.462615][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11243'. [ 1344.611526][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11246'. [ 1344.858831][T18216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1344.876743][T18216] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1344.993754][T18237] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11250'. [ 1345.154064][T18251] "syz.0.11254" (18251) uses obsolete ecb(arc4) skcipher [ 1345.179790][T18250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1345.213201][T18254] netlink: 'syz.3.11255': attribute type 1 has an invalid length. [ 1345.271153][T18249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.279057][T18249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.463236][T18249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.484269][T18249] veth1_to_batadv: left promiscuous mode [ 1345.506155][T18249] veth1_to_batadv: left allmulticast mode [ 1345.520303][T18249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.559227][T18249] tipc: Resetting bearer [ 1345.565495][T18249] tipc: Resetting bearer [ 1345.640489][T18249] bond4: left allmulticast mode [ 1345.650175][T18249] veth7: left allmulticast mode [ 1345.719470][T18258] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1345.731967][T18261] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1345.742634][T10180] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1345.769688][ T43] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.794572][ T43] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.862474][ T43] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.875331][T17410] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1345.897844][ T43] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.263997][T18296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.286287][T18300] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.306836][T18300] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.414621][T18300] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.429504][T18300] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.606397][T18300] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.633510][T18300] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.695963][T18322] bond7: entered promiscuous mode [ 1346.701359][T18322] bond7: entered allmulticast mode [ 1346.707436][T18322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1346.725548][T18300] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1346.752286][T18300] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.853422][T18337] macvtap1: entered promiscuous mode [ 1346.880104][T18337] bond0: entered promiscuous mode [ 1346.893086][T18337] bond_slave_0: entered promiscuous mode [ 1346.900693][T18337] bond_slave_1: entered promiscuous mode [ 1346.907700][T18337] mac80211_hwsim hwsim116 wlan1: entered promiscuous mode [ 1346.916725][T18337] macvtap1: entered allmulticast mode [ 1346.925344][T18337] bond0: entered allmulticast mode [ 1346.942551][T18337] bond_slave_0: entered allmulticast mode [ 1346.950811][T18337] bond_slave_1: entered allmulticast mode [ 1346.965945][T18337] mac80211_hwsim hwsim116 wlan1: entered allmulticast mode [ 1346.987722][T18337] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1347.004004][T18343] bond0: left allmulticast mode [ 1347.010742][T18343] bond_slave_0: left allmulticast mode [ 1347.022194][T18343] bond_slave_1: left allmulticast mode [ 1347.047513][T18343] mac80211_hwsim hwsim116 wlan1: left allmulticast mode [ 1347.075088][T18343] bond0: left promiscuous mode [ 1347.087432][T18343] bond_slave_0: left promiscuous mode [ 1347.097110][T18343] bond_slave_1: left promiscuous mode [ 1347.116727][T18343] mac80211_hwsim hwsim116 wlan1: left promiscuous mode [ 1347.229136][T18363] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1347.271219][T18365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.382679][T18354] gre0 speed is unknown, defaulting to 1000 [ 1347.511391][T18372] netlink: 'syz.0.11293': attribute type 1 has an invalid length. [ 1347.556996][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.569761][T18376] xt_TCPMSS: Only works on TCP SYN packets [ 1347.577152][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.757442][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.759330][T18384] sctp: [Deprecated]: syz.2.11296 (pid 18384) Use of int in max_burst socket option deprecated. [ 1347.759330][T18384] Use struct sctp_assoc_value instead [ 1347.775032][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.843002][T18354] lo speed is unknown, defaulting to 1000 [ 1347.843027][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.859106][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.864536][T18386] __nla_validate_parse: 15 callbacks suppressed [ 1347.864557][T18386] netlink: 156 bytes leftover after parsing attributes in process `syz.6.11297'. [ 1347.889960][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.899358][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.041443][T18393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1348.049104][T18393] IPv6: NLM_F_CREATE should be set when creating new route [ 1348.056783][T18393] IPv6: NLM_F_CREATE should be set when creating new route [ 1348.064069][T18393] IPv6: NLM_F_CREATE should be set when creating new route [ 1348.097615][T18395] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.11300'. [ 1348.124052][T18391] netlink: 'syz.3.11299': attribute type 39 has an invalid length. [ 1348.320051][T18405] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11303'. [ 1348.415139][T18408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.042738][T18423] syzkaller0: entered promiscuous mode [ 1349.048792][T18423] syzkaller0: entered allmulticast mode [ 1352.756044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.782204][T18427] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1353.794124][T18427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1353.804657][T18427] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1353.811464][T18428] hsr1: left allmulticast mode [ 1353.834578][T18428] dummy0: left allmulticast mode [ 1353.840216][T18428] gretap0: left allmulticast mode [ 1353.846179][T18428] macvlan2: left promiscuous mode [ 1353.852512][T18428] geneve2: left promiscuous mode [ 1353.860738][T18428] erspan1: left allmulticast mode [ 1353.876131][T18428] ip6tnl2: left allmulticast mode [ 1353.886376][T18428] bond4: left allmulticast mode [ 1353.895593][T18428] veth15: left promiscuous mode [ 1353.905773][T18428] bond7: left promiscuous mode [ 1353.915170][T18428] bond7: left allmulticast mode [ 1353.936009][T18428] geneve3: left promiscuous mode [ 1353.983925][T18428] macvtap1: left promiscuous mode [ 1353.994796][T18428] macvtap1: left allmulticast mode [ 1354.003115][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.015746][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.056262][T18441] netlink: 'syz.6.11314': attribute type 10 has an invalid length. [ 1354.064629][T18440] netlink: 'syz.6.11314': attribute type 10 has an invalid length. [ 1354.089471][T18434] bond7: option mode: invalid value (254) [ 1354.097762][T18434] bond7 (unregistering): Released all slaves [ 1354.117320][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.126625][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.427924][T18460] netlink: 'syz.2.11320': attribute type 1 has an invalid length. [ 1354.518984][T18470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11320'. [ 1354.531337][T18469] netlink: 'syz.3.11323': attribute type 1 has an invalid length. [ 1354.532047][T18471] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11322'. [ 1354.612891][T18471] delete_channel: no stack [ 1354.655409][T18469] bond9: entered promiscuous mode [ 1354.661113][T18469] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1354.735530][T18477] bond9: (slave bridge8): making interface the new active one [ 1354.754977][T18477] bridge8: entered promiscuous mode [ 1354.768344][T18477] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 1355.064322][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11330'. [ 1355.234240][T18511] netlink: 'syz.3.11335': attribute type 4 has an invalid length. [ 1355.251680][T18511] netlink: 'syz.3.11335': attribute type 4 has an invalid length. [ 1355.261678][T18513] netlink: 'syz.3.11335': attribute type 4 has an invalid length. [ 1355.326257][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11336'. [ 1356.169050][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11344'. [ 1356.186524][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11344'. [ 1356.253652][T18545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11343'. [ 1356.295923][T18538] gre0 speed is unknown, defaulting to 1000 [ 1356.304425][T18545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11343'. [ 1356.341734][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11347'. [ 1356.367817][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11347'. [ 1356.623720][T18565] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1356.674156][T18523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1356.886678][T18564] gre0 speed is unknown, defaulting to 1000 [ 1356.896215][T18538] lo speed is unknown, defaulting to 1000 [ 1357.034317][T17410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.060133][T17410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.116544][T18585] netlink: 'syz.3.11356': attribute type 8 has an invalid length. [ 1357.135294][T18585] sch_fq: defrate 0 ignored. [ 1357.340173][T18564] lo speed is unknown, defaulting to 1000 [ 1357.800611][T18599] ip6gretap0: entered promiscuous mode [ 1357.891539][T18605] IPv6: sit1: Disabled Multicast RS [ 1358.317680][T18606] gre0 speed is unknown, defaulting to 1000 [ 1359.081470][T18606] lo speed is unknown, defaulting to 1000 [ 1360.138893][T18655] __nla_validate_parse: 10 callbacks suppressed [ 1360.138912][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11374'. [ 1360.240188][T18655] vlan0: entered allmulticast mode [ 1360.256587][T18655] bridge5: entered allmulticast mode [ 1360.363504][T18655] bridge5: port 1(bond10) entered blocking state [ 1360.375846][T18655] bridge5: port 1(bond10) entered disabled state [ 1360.382716][T18655] bond10: entered allmulticast mode [ 1360.395417][T18655] bond10: entered promiscuous mode [ 1360.410760][T18659] bridge0: entered allmulticast mode [ 1360.557123][T18662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11376'. [ 1360.944849][T18670] IPVS: Scheduler module ip_vs_ not found [ 1360.984082][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.003721][T18670] 8021q: VLANs not supported on ip6gre0 [ 1361.010452][T18673] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1361.016821][T18673] syzkaller1: linktype set to 780 [ 1361.022426][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.031808][T18677] netlink: 80 bytes leftover after parsing attributes in process `syz.6.11382'. [ 1361.074590][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.080893][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.095011][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.107338][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.125638][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.141907][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.166612][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.189691][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.216569][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.243026][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.261029][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.342217][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.363036][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.394978][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.401155][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.411313][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.426378][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.433255][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.450030][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.466220][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.487344][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.515222][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.530273][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.552114][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.562790][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.587293][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.611923][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.629170][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.649564][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.667997][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.688593][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.715561][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1361.739875][T18678] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1361.963131][T18717] netlink: 84 bytes leftover after parsing attributes in process `syz.5.11395'. [ 1362.170385][T18727] netlink: 'syz.3.11398': attribute type 13 has an invalid length. [ 1362.391731][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11398'. [ 1362.436788][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1362.539226][T18734] syzkaller1: entered promiscuous mode [ 1362.545713][T18734] syzkaller1: entered allmulticast mode [ 1362.556699][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.606787][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.656058][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.675321][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.715164][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.738992][T28341] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1362.747659][ T12] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.778885][ T43] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.815892][T17411] bond8: (slave ip6gretap2): link status up again after 0 ms [ 1362.845771][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1363.137801][T18752] bond7: option ad_user_port_key: invalid value (65535) [ 1363.185358][T18752] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 1363.212433][T18752] bond7 (unregistering): Released all slaves [ 1363.242239][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11407'. [ 1363.332212][T18764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11407'. [ 1363.420538][T18766] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1363.444981][ T12] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1363.636824][T18773] gtp1: entered promiscuous mode [ 1363.648310][T18775] sctp: [Deprecated]: syz.5.11410 (pid 18775) Use of int in maxseg socket option. [ 1363.648310][T18775] Use struct sctp_assoc_value instead [ 1363.651154][T18773] gtp1: entered allmulticast mode [ 1363.793541][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11409'. [ 1363.817800][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11408'. [ 1363.819243][T18778] gre0 speed is unknown, defaulting to 1000 [ 1363.865025][T18771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11409'. [ 1364.720599][T18778] lo speed is unknown, defaulting to 1000 [ 1365.337510][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11428'. [ 1365.415771][T18835] syzkaller0: entered promiscuous mode [ 1365.436708][T18835] syzkaller0: entered allmulticast mode [ 1365.575108][T18843] netlink: 'syz.6.11430': attribute type 89 has an invalid length. [ 1365.598159][T18845] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11431'. [ 1365.607756][T18840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11430'. [ 1365.982855][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11435'. [ 1366.031056][T18858] netlink: 'syz.0.11435': attribute type 21 has an invalid length. [ 1366.046483][T18861] netlink: 'syz.6.11436': attribute type 1 has an invalid length. [ 1366.069322][T18858] IPv6: NLM_F_CREATE should be specified when creating new route [ 1366.098831][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11436'. [ 1366.143842][T18864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11436'. [ 1366.316826][T18870] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1366.319825][T18861] bond8: entered promiscuous mode [ 1366.367241][T18861] bond8: entered allmulticast mode [ 1366.386018][T18872] netlink: 'syz.0.11438': attribute type 21 has an invalid length. [ 1366.392098][T18861] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1366.422450][T18866] netlink: 'syz.5.11437': attribute type 13 has an invalid length. [ 1366.456345][T18855] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1366.656247][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11439'. [ 1366.906947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.915137][ C1] lec:lec_tx_timeout: lec0 [ 1366.920509][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1367.502227][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11450'. [ 1367.574976][T17411] net_ratelimit: 29 callbacks suppressed [ 1367.574997][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1367.808799][T18916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11456'. [ 1367.809537][ T507] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1368.066617][T18916] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1368.182653][T18923] bond11: (slave macvlan6): Enslaving as an active interface with an up link [ 1368.269004][ T507] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1368.425246][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1368.548793][T18942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1368.579896][T18942] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1368.608493][T18942] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.692865][T18942] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1368.726893][T18957] FAULT_INJECTION: forcing a failure. [ 1368.726893][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.741151][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1368.770428][T18957] CPU: 0 UID: 0 PID: 18957 Comm: syz.6.11467 Not tainted syzkaller #0 PREEMPT(full) [ 1368.770454][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1368.770466][T18957] Call Trace: [ 1368.770475][T18957] [ 1368.770483][T18957] dump_stack_lvl+0xe8/0x150 [ 1368.770520][T18957] should_fail_ex+0x412/0x560 [ 1368.770551][T18957] should_failslab+0xa8/0x100 [ 1368.770574][T18957] __kmalloc_cache_noprof+0x88/0x660 [ 1368.770600][T18957] ? sctp_add_bind_addr+0x8c/0x370 [ 1368.770628][T18957] sctp_add_bind_addr+0x8c/0x370 [ 1368.770653][T18957] sctp_bind_addr_copy+0xb3/0x3c0 [ 1368.770673][T18957] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1368.770701][T18957] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1368.770727][T18957] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1368.770752][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1368.770775][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1368.770797][T18957] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1368.770819][T18957] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1368.770836][T18957] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1368.770867][T18957] sctp_sendmsg+0x1528/0x2c10 [ 1368.770904][T18957] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1368.770927][T18957] ? aa_sk_perm+0x6d5/0x900 [ 1368.770949][T18957] ? __might_fault+0xaf/0x130 [ 1368.770977][T18957] ? __pfx_aa_sk_perm+0x10/0x10 [ 1368.771003][T18957] ? sock_rps_record_flow+0x19/0x350 [ 1368.771023][T18957] ? inet_sendmsg+0x2f4/0x370 [ 1368.771040][T18957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1368.771068][T18957] ____sys_sendmsg+0x80a/0x9f0 [ 1368.771102][T18957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.771138][T18957] ? import_iovec+0x73/0xa0 [ 1368.771159][T18957] ___sys_sendmsg+0x2a5/0x360 [ 1368.771182][T18957] ? __lock_acquire+0x6b5/0x2cf0 [ 1368.771210][T18957] ? __pfx____sys_sendmsg+0x10/0x10 [ 1368.771239][T18957] ? kstrtouint+0x6e/0xe0 [ 1368.771289][T18957] ? __fget_files+0x2a/0x420 [ 1368.771307][T18957] ? __fget_files+0x3a0/0x420 [ 1368.771338][T18957] __sys_sendmmsg+0x27c/0x4e0 [ 1368.771370][T18957] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1368.771393][T18957] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1368.771442][T18957] ? ksys_write+0x242/0x270 [ 1368.771466][T18957] ? __pfx_ksys_write+0x10/0x10 [ 1368.771497][T18957] __x64_sys_sendmmsg+0xa0/0xc0 [ 1368.771523][T18957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.771542][T18957] do_syscall_64+0x15f/0xf80 [ 1368.771563][T18957] ? trace_irq_disable+0x3b/0x140 [ 1368.771583][T18957] ? clear_bhb_loop+0x40/0x90 [ 1368.771605][T18957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.771622][T18957] RIP: 0033:0x7f5d7699c819 [ 1368.771641][T18957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.771655][T18957] RSP: 002b:00007f5d778db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1368.771677][T18957] RAX: ffffffffffffffda RBX: 00007f5d76c15fa0 RCX: 00007f5d7699c819 [ 1368.771690][T18957] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1368.771708][T18957] RBP: 00007f5d778db090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.771719][T18957] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 1368.771730][T18957] R13: 00007f5d76c16038 R14: 00007f5d76c15fa0 R15: 00007ffe0c58b5f8 [ 1368.771762][T18957] [ 1369.116227][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1369.192788][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11471'. [ 1369.207003][T18966] openvswitch: netlink: Flow actions attr not present in new flow. [ 1369.243091][T18970] veth1_to_bond: entered allmulticast mode [ 1369.293030][T18976] xt_hashlimit: size too large, truncated to 1048576 [ 1369.345046][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1369.445800][T18970] veth1_to_bond: left allmulticast mode [ 1369.584946][ T43] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1369.736221][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1369.757493][T18993] gre0 speed is unknown, defaulting to 1000 [ 1369.802050][T19006] netlink: 'syz.3.11481': attribute type 1 has an invalid length. [ 1369.889416][T19014] bond11: entered promiscuous mode [ 1369.894953][T19014] bond11: entered allmulticast mode [ 1369.900961][T19014] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1370.041214][T19014] veth9: entered promiscuous mode [ 1370.058980][T19014] veth9: entered allmulticast mode [ 1370.078614][T19014] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 1370.208844][T18993] lo speed is unknown, defaulting to 1000 [ 1370.255343][T19025] FAULT_INJECTION: forcing a failure. [ 1370.255343][T19025] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.268925][T19025] CPU: 1 UID: 0 PID: 19025 Comm: syz.5.11484 Not tainted syzkaller #0 PREEMPT(full) [ 1370.268950][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1370.268961][T19025] Call Trace: [ 1370.268969][T19025] [ 1370.268977][T19025] dump_stack_lvl+0xe8/0x150 [ 1370.269008][T19025] should_fail_ex+0x412/0x560 [ 1370.269039][T19025] should_failslab+0xa8/0x100 [ 1370.269060][T19025] __kmalloc_cache_noprof+0x88/0x660 [ 1370.269086][T19025] ? sctp_transport_new+0x7e/0x620 [ 1370.269116][T19025] sctp_transport_new+0x7e/0x620 [ 1370.269144][T19025] sctp_assoc_add_peer+0x259/0x13b0 [ 1370.269170][T19025] ? sctp_bind_addr_copy+0x380/0x3c0 [ 1370.269198][T19025] sctp_connect_new_asoc+0x329/0x6b0 [ 1370.269226][T19025] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1370.269251][T19025] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1370.269276][T19025] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1370.269298][T19025] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1370.269323][T19025] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1370.269342][T19025] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1370.269366][T19025] sctp_sendmsg+0x1528/0x2c10 [ 1370.269407][T19025] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1370.269434][T19025] ? aa_sk_perm+0x6d5/0x900 [ 1370.269456][T19025] ? __might_fault+0xaf/0x130 [ 1370.269487][T19025] ? __pfx_aa_sk_perm+0x10/0x10 [ 1370.269513][T19025] ? sock_rps_record_flow+0x19/0x350 [ 1370.269535][T19025] ? inet_sendmsg+0x2f4/0x370 [ 1370.269552][T19025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1370.269581][T19025] ____sys_sendmsg+0x80a/0x9f0 [ 1370.269618][T19025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1370.269665][T19025] ? import_iovec+0x73/0xa0 [ 1370.269689][T19025] ___sys_sendmsg+0x2a5/0x360 [ 1370.269713][T19025] ? __lock_acquire+0x6b5/0x2cf0 [ 1370.269745][T19025] ? __pfx____sys_sendmsg+0x10/0x10 [ 1370.269784][T19025] ? kstrtouint+0x6e/0xe0 [ 1370.269837][T19025] ? __fget_files+0x2a/0x420 [ 1370.269859][T19025] ? __fget_files+0x3a0/0x420 [ 1370.269892][T19025] __sys_sendmmsg+0x27c/0x4e0 [ 1370.269925][T19025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1370.269948][T19025] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1370.270000][T19025] ? ksys_write+0x242/0x270 [ 1370.270022][T19025] ? __pfx_ksys_write+0x10/0x10 [ 1370.270054][T19025] __x64_sys_sendmmsg+0xa0/0xc0 [ 1370.270080][T19025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.270100][T19025] do_syscall_64+0x15f/0xf80 [ 1370.270121][T19025] ? trace_irq_disable+0x3b/0x140 [ 1370.270141][T19025] ? clear_bhb_loop+0x40/0x90 [ 1370.270164][T19025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.270183][T19025] RIP: 0033:0x7f5faed9c819 [ 1370.270201][T19025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.270217][T19025] RSP: 002b:00007f5fafd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1370.270237][T19025] RAX: ffffffffffffffda RBX: 00007f5faf015fa0 RCX: 00007f5faed9c819 [ 1370.270251][T19025] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1370.270263][T19025] RBP: 00007f5fafd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.270274][T19025] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 1370.270286][T19025] R13: 00007f5faf016038 R14: 00007f5faf015fa0 R15: 00007ffd1b88f0b8 [ 1370.270324][T19025] [ 1371.162974][T19054] __nla_validate_parse: 4 callbacks suppressed [ 1371.162996][T19054] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11486'. [ 1371.251420][T19048] gre0 speed is unknown, defaulting to 1000 [ 1371.749964][T19048] lo speed is unknown, defaulting to 1000 [ 1371.945001][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1371.953391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1371.961739][ C1] lec:lec_tx_timeout: lec0 [ 1372.605722][T18994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.622089][T19006] netlink: 644 bytes leftover after parsing attributes in process `syz.3.11481'. [ 1372.639541][T17410] net_ratelimit: 20 callbacks suppressed [ 1372.639559][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1372.805454][ T509] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1372.925142][T17412] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1373.045743][ T509] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1373.122628][T19097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.155287][T17413] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1373.295196][T17413] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1373.361167][T19118] FAULT_INJECTION: forcing a failure. [ 1373.361167][T19118] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.387403][T19118] CPU: 0 UID: 0 PID: 19118 Comm: syz.3.11508 Not tainted syzkaller #0 PREEMPT(full) [ 1373.387429][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1373.387441][T19118] Call Trace: [ 1373.387450][T19118] [ 1373.387458][T19118] dump_stack_lvl+0xe8/0x150 [ 1373.387489][T19118] should_fail_ex+0x412/0x560 [ 1373.387520][T19118] should_failslab+0xa8/0x100 [ 1373.387539][T19118] ? dst_alloc+0x105/0x170 [ 1373.387559][T19118] kmem_cache_alloc_noprof+0x87/0x650 [ 1373.387584][T19118] ? __pfx_find_exception+0x10/0x10 [ 1373.387612][T19118] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1373.387638][T19118] dst_alloc+0x105/0x170 [ 1373.387663][T19118] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1373.387694][T19118] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1373.387715][T19118] ip_route_output_key_hash+0x18d/0x2a0 [ 1373.387738][T19118] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1373.387762][T19118] ? sctp_transport_pmtu+0xa6/0x5d0 [ 1373.387784][T19118] ? __sys_sendmmsg+0x27c/0x4e0 [ 1373.387808][T19118] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1373.387833][T19118] ? do_syscall_64+0x15f/0xf80 [ 1373.387853][T19118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.387883][T19118] ip_route_output_flow+0x2a/0x150 [ 1373.387913][T19118] sctp_v4_get_dst+0x3f8/0x12b0 [ 1373.387947][T19118] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 1373.387977][T19118] ? call_rcu+0x644/0x890 [ 1373.388001][T19118] ? lockdep_hardirqs_on+0x7a/0x110 [ 1373.388038][T19118] sctp_transport_pmtu+0x132/0x5d0 [ 1373.388061][T19118] sctp_transport_route+0x186/0x2f0 [ 1373.388086][T19118] sctp_assoc_add_peer+0x650/0x13b0 [ 1373.388124][T19118] sctp_connect_new_asoc+0x329/0x6b0 [ 1373.388150][T19118] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1373.388176][T19118] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1373.388200][T19118] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1373.388222][T19118] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1373.388246][T19118] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1373.388264][T19118] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1373.388287][T19118] sctp_sendmsg+0x1528/0x2c10 [ 1373.388325][T19118] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1373.388351][T19118] ? aa_sk_perm+0x6d5/0x900 [ 1373.388371][T19118] ? __might_fault+0xaf/0x130 [ 1373.388418][T19118] ? __pfx_aa_sk_perm+0x10/0x10 [ 1373.388443][T19118] ? sock_rps_record_flow+0x19/0x350 [ 1373.388463][T19118] ? inet_sendmsg+0x2f4/0x370 [ 1373.388477][T19118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1373.388505][T19118] ____sys_sendmsg+0x80a/0x9f0 [ 1373.388540][T19118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1373.388577][T19118] ? import_iovec+0x73/0xa0 [ 1373.388599][T19118] ___sys_sendmsg+0x2a5/0x360 [ 1373.388622][T19118] ? __lock_acquire+0x6b5/0x2cf0 [ 1373.388648][T19118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1373.388679][T19118] ? kstrtouint+0x6e/0xe0 [ 1373.388726][T19118] ? __fget_files+0x2a/0x420 [ 1373.388756][T19118] ? __fget_files+0x3a0/0x420 [ 1373.388788][T19118] __sys_sendmmsg+0x27c/0x4e0 [ 1373.388819][T19118] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1373.388841][T19118] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1373.388887][T19118] ? ksys_write+0x242/0x270 [ 1373.388915][T19118] ? __pfx_ksys_write+0x10/0x10 [ 1373.388947][T19118] __x64_sys_sendmmsg+0xa0/0xc0 [ 1373.388974][T19118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.388994][T19118] do_syscall_64+0x15f/0xf80 [ 1373.389014][T19118] ? trace_irq_disable+0x3b/0x140 [ 1373.389033][T19118] ? clear_bhb_loop+0x40/0x90 [ 1373.389056][T19118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.389075][T19118] RIP: 0033:0x7f6776b9c819 [ 1373.389093][T19118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.389106][T19118] RSP: 002b:00007f677799b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1373.389125][T19118] RAX: ffffffffffffffda RBX: 00007f6776e15fa0 RCX: 00007f6776b9c819 [ 1373.389138][T19118] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1373.389148][T19118] RBP: 00007f677799b090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.389159][T19118] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 1373.389171][T19118] R13: 00007f6776e16038 R14: 00007f6776e15fa0 R15: 00007ffeeba9d578 [ 1373.389203][T19118] [ 1373.842423][T17413] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1373.902108][T19124] No such timeout policy "syz1" [ 1373.990603][ T509] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1374.145022][T17413] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1374.172401][T19128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11513'. [ 1374.242088][T19136] netlink: 296 bytes leftover after parsing attributes in process `syz.6.11515'. [ 1374.380417][T17412] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1374.406896][T19138] gre0 speed is unknown, defaulting to 1000 [ 1374.795577][T19138] lo speed is unknown, defaulting to 1000 [ 1374.950384][T19173] gre0 speed is unknown, defaulting to 1000 [ 1375.118322][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11527'. [ 1375.172085][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11527'. [ 1375.418297][T19173] lo speed is unknown, defaulting to 1000 [ 1375.490151][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11529'. [ 1375.490210][T19181] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11528'. [ 1375.597173][T19182] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11528'. [ 1375.607245][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11528'. [ 1376.522863][T19213] FAULT_INJECTION: forcing a failure. [ 1376.522863][T19213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.537084][T19213] CPU: 1 UID: 0 PID: 19213 Comm: syz.3.11536 Not tainted syzkaller #0 PREEMPT(full) [ 1376.537110][T19213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1376.537122][T19213] Call Trace: [ 1376.537130][T19213] [ 1376.537139][T19213] dump_stack_lvl+0xe8/0x150 [ 1376.537172][T19213] should_fail_ex+0x412/0x560 [ 1376.537204][T19213] _copy_to_user+0x31/0xb0 [ 1376.537227][T19213] simple_read_from_buffer+0xe1/0x170 [ 1376.537255][T19213] proc_fail_nth_read+0x1bb/0x230 [ 1376.537283][T19213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1376.537319][T19213] ? rw_verify_area+0x2a6/0x4d0 [ 1376.537344][T19213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1376.537370][T19213] vfs_read+0x20c/0xa70 [ 1376.537401][T19213] ? __pfx___mutex_lock+0x10/0x10 [ 1376.537424][T19213] ? __pfx_vfs_read+0x10/0x10 [ 1376.537451][T19213] ? __fget_files+0x2a/0x420 [ 1376.537478][T19213] ? __fget_files+0x3a0/0x420 [ 1376.537499][T19213] ? __fget_files+0x2a/0x420 [ 1376.537531][T19213] ksys_read+0x150/0x270 [ 1376.537558][T19213] ? __pfx_ksys_read+0x10/0x10 [ 1376.537592][T19213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.537613][T19213] do_syscall_64+0x15f/0xf80 [ 1376.537634][T19213] ? trace_irq_disable+0x3b/0x140 [ 1376.537654][T19213] ? clear_bhb_loop+0x40/0x90 [ 1376.537681][T19213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.537700][T19213] RIP: 0033:0x7f6776b5d04e [ 1376.537718][T19213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1376.537735][T19213] RSP: 002b:00007f677799afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1376.537756][T19213] RAX: ffffffffffffffda RBX: 00007f677799b6c0 RCX: 00007f6776b5d04e [ 1376.537770][T19213] RDX: 000000000000000f RSI: 00007f677799b0a0 RDI: 0000000000000004 [ 1376.537782][T19213] RBP: 00007f677799b090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.537794][T19213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.537805][T19213] R13: 00007f6776e16038 R14: 00007f6776e15fa0 R15: 00007ffeeba9d578 [ 1376.537838][T19213] [ 1377.714948][T17410] net_ratelimit: 23 callbacks suppressed [ 1377.714968][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1377.728540][T19174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.738579][T19201] __nla_validate_parse: 1 callbacks suppressed [ 1377.738600][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11533'. [ 1377.968896][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11540'. [ 1377.977956][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11540'. [ 1377.985752][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1378.006741][T19227] x_tables: duplicate underflow at hook 2 [ 1378.048772][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.105893][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1378.208782][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11543'. [ 1378.226555][T19241] bridge0: port 1(erspan0) entered blocking state [ 1378.243137][T19241] bridge0: port 1(erspan0) entered disabled state [ 1378.251825][T19241] erspan0: entered allmulticast mode [ 1378.269523][T19241] erspan0: entered promiscuous mode [ 1378.286074][T19251] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11543'. [ 1378.287905][T19244] netlink: 5204 bytes leftover after parsing attributes in process `syz.6.11545'. [ 1378.295910][T17412] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1378.325378][T19250] erspan0: left allmulticast mode [ 1378.331723][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11544'. [ 1378.354080][T19250] erspan0: left promiscuous mode [ 1378.364025][T19250] bridge0: port 1(erspan0) entered disabled state [ 1378.393222][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11543'. [ 1378.641244][T19247] bond11: invalid ARP target 0.0.0.0 specified for addition [ 1378.648809][T19247] bond11: option arp_ip_target: invalid value (0) [ 1378.658603][T19247] bond11 (unregistering): Released all slaves [ 1378.705512][T17412] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1378.758573][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11550'. [ 1378.778724][T19267] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11550'. [ 1378.865114][T17412] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1379.075268][T10181] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1379.204917][T17411] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1379.264580][T19299] netlink: 'syz.3.11557': attribute type 3 has an invalid length. [ 1379.293685][T19299] netlink: 'syz.3.11557': attribute type 3 has an invalid length. [ 1379.324922][T17410] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 1379.340898][T19299] netlink: 'syz.3.11557': attribute type 14 has an invalid length. [ 1379.364910][T19299] netlink: 'syz.3.11557': attribute type 13 has an invalid length. [ 1380.022264][T19324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 1380.250368][T19345] netlink: 'syz.3.11568': attribute type 11 has an invalid length. [ 1380.251320][T19332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 1380.365600][T19356] netlink: 'syz.5.11570': attribute type 1 has an invalid length. [ 1380.476334][ T29] audit: type=1107 audit(1776367857.163:31): pid=19355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1380.513443][T19356] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1380.567223][T19356] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1380.651861][T17412] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1380.824125][T19394] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1380.849290][T19394] bond9 (unregistering): Released all slaves [ 1380.925411][ T30] INFO: task syz.4.10359:14996 blocked for more than 143 seconds. [ 1380.935488][ T30] Not tainted syzkaller #0 [ 1380.940714][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.950183][T17411] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.960732][ T30] task:syz.4.10359 state:D stack:25872 pid:14996 tgid:14992 ppid:11679 task_flags:0x400140 flags:0x00080002 [ 1380.973165][T17411] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.985532][ T30] Call Trace: [ 1380.989018][T17411] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.998816][ T30] [ 1381.001804][ T30] __schedule+0x17b4/0x5680 [ 1381.010137][T17411] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.019594][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.029738][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1381.043180][ T30] ? __pfx___schedule+0x10/0x10 [ 1381.052627][ T30] ? schedule+0x90/0x360 [ 1381.057426][ T30] schedule+0x164/0x360 [ 1381.061715][ T30] schedule_preempt_disabled+0x13/0x30 [ 1381.071165][ T30] __mutex_lock+0x7f5/0x1550 [ 1381.076358][ T30] ? __mutex_lock+0x606/0x1550 [ 1381.081373][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1381.088667][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1381.093776][ T30] ? stack_trace_save+0xa9/0x100 [ 1381.101065][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1381.107208][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1381.113338][ T30] ? kasan_save_track+0x4f/0x80 [ 1381.121048][ T30] ? kasan_save_track+0x3e/0x80 [ 1381.126776][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 1381.131701][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 1381.137018][ T30] ? netlink_dump+0x1d8/0xe10 [ 1381.141883][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 1381.153032][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1381.160824][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 1381.166774][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 1381.172029][ T30] ? genl_rcv+0x28/0x40 [ 1381.176845][ T30] ? netlink_unicast+0x75c/0x8e0 [ 1381.182450][ T30] ? netlink_sendmsg+0x813/0xb40 [ 1381.188251][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 1381.193323][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 1381.199613][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.205306][ T30] ? do_syscall_64+0x15f/0xf80 [ 1381.210147][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.219783][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1381.231230][ T30] ? rcu_is_watching+0x15/0xb0 [ 1381.236462][ T30] ? trace_kmalloc+0x2a/0xf0 [ 1381.241265][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1381.251400][ T30] genl_dumpit+0x10b/0x1b0 [ 1381.257803][ T30] netlink_dump+0x702/0xe10 [ 1381.262458][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1381.271782][ T30] ? genl_start+0x499/0x6c0 [ 1381.277183][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 1381.282557][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1381.290160][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1381.297043][ T30] ? genl_get_cmd+0x522/0x960 [ 1381.301908][ T30] ? __pfx_genl_start+0x10/0x10 [ 1381.307725][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 1381.312801][ T30] ? __pfx_genl_done+0x10/0x10 [ 1381.318177][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 1381.322761][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1381.328537][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1381.336354][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1381.342514][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1381.349199][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1381.354627][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1381.360632][ T30] ? down_read+0x270/0x2e0 [ 1381.365885][ T30] ? genl_rcv+0xd/0x40 [ 1381.370103][ T30] genl_rcv+0x28/0x40 [ 1381.376981][ T30] netlink_unicast+0x75c/0x8e0 [ 1381.382172][ T30] netlink_sendmsg+0x813/0xb40 [ 1381.387820][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1381.393211][T19371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1381.405164][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1381.414292][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1381.426545][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1381.437872][ T30] ? __might_fault+0xaf/0x130 [ 1381.448920][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1381.462079][ T30] ? import_iovec+0x73/0xa0 [ 1381.471920][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1381.480514][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.490248][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1381.496025][ T30] ? futex_wait+0x2a2/0x390 [ 1381.500672][ T30] ? __fget_files+0x2a/0x420 [ 1381.505471][ T30] ? __fget_files+0x3a0/0x420 [ 1381.510493][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.515857][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1381.521372][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.527841][ T30] do_syscall_64+0x15f/0xf80 [ 1381.532586][ T30] ? trace_irq_disable+0x3b/0x140 [ 1381.537799][ T30] ? clear_bhb_loop+0x40/0x90 [ 1381.542524][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.549035][ T30] RIP: 0033:0x7f934cf9c819 [ 1381.553502][ T30] RSP: 002b:00007f934deac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1381.562672][ T30] RAX: ffffffffffffffda RBX: 00007f934d215fa0 RCX: 00007f934cf9c819 [ 1381.571340][ T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1381.579765][ T30] RBP: 00007f934d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1381.588035][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.596281][ T30] R13: 00007f934d216038 R14: 00007f934d215fa0 R15: 00007ffe88dd29b8 [ 1381.604395][ T30] [ 1381.608399][ T30] [ 1381.608399][ T30] Showing all locks held in the system: [ 1381.625115][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 1381.636485][ T30] 1 lock held by khungtaskd/30: [ 1381.642720][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1381.654709][ T30] 2 locks held by getty/5581: [ 1381.659727][ T30] #0: ffff8880375400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1381.672986][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1381.684257][ T30] 3 locks held by kworker/u8:30/17410: [ 1381.701108][ T30] #0: ffff888031d9e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1381.713642][ T30] #1: ffffc900043c7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1381.727194][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1381.736968][ T30] 3 locks held by kworker/u8:31/17411: [ 1381.742786][ T30] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1381.755474][ T30] #1: ffffc90003c57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1381.766842][ T30] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1381.776244][ T30] 2 locks held by kworker/1:9/28341: [ 1381.781578][ T30] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1381.793256][ T30] #1: ffffc9001017fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1381.809064][ T30] 5 locks held by kworker/u8:10/10181: [ 1381.814566][ T30] 2 locks held by syz.1.9955/13542: [ 1381.820392][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1381.829007][ T30] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1381.844183][ T30] 3 locks held by syz.4.10359/14996: [ 1381.850253][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1381.858767][ T30] #1: ffff888058ac86e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1381.869762][ T30] #2: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1381.882056][ T30] 3 locks held by syz.0.11577/19377: [ 1381.888008][ T30] #0: ffff888058d79440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1381.898587][ T30] #1: ffffffff8fe3be28 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1381.910622][ T30] #2: ffff88807d5570d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1381.921097][ T30] 2 locks held by syz.0.11577/19378: [ 1381.926771][ T30] #0: ffff88807d5570d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1381.938094][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1381.949619][ T30] 2 locks held by syz.5.11579/19396: [ 1381.955198][ T30] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1381.964593][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1381.976455][ T30] 1 lock held by dhcpcd/19402: [ 1381.981269][ T30] #0: ffff88803f62f440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1381.991677][ T30] [ 1381.994425][ T30] ============================================= [ 1381.994425][ T30] [ 1382.023372][ T30] NMI backtrace for cpu 0 [ 1382.023394][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1382.023416][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1382.023427][ T30] Call Trace: [ 1382.023435][ T30] [ 1382.023444][ T30] dump_stack_lvl+0xe8/0x150 [ 1382.023474][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1382.023500][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1382.023526][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1382.023563][ T30] sys_info+0x135/0x170 [ 1382.023590][ T30] watchdog+0xfaa/0x1000 [ 1382.023615][ T30] ? watchdog+0x209/0x1000 [ 1382.023642][ T30] kthread+0x388/0x470 [ 1382.023661][ T30] ? __pfx_watchdog+0x10/0x10 [ 1382.023678][ T30] ? __pfx_kthread+0x10/0x10 [ 1382.023696][ T30] ret_from_fork+0x514/0xb70 [ 1382.023723][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1382.023746][ T30] ? __switch_to+0xc79/0x1410 [ 1382.023769][ T30] ? __pfx_kthread+0x10/0x10 [ 1382.023788][ T30] ret_from_fork_asm+0x1a/0x30 [ 1382.023829][ T30] [ 1382.023836][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1382.139131][ C1] NMI backtrace for cpu 1 [ 1382.139150][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1382.139168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1382.139179][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1382.139204][ C1] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1382.139219][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1382.139234][ C1] RAX: 000000000033c63f RBX: ffffffff819a67ea RCX: 0000000080000001 [ 1382.139246][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 1382.139257][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1382.139269][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1382.139280][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 1382.139291][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 1382.139304][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1382.139316][ C1] CR2: 000055d0ea8e8168 CR3: 0000000076712000 CR4: 00000000003526f0 [ 1382.139331][ C1] Call Trace: [ 1382.139339][ C1] [ 1382.139345][ C1] default_idle+0x9/0x20 [ 1382.139365][ C1] default_idle_call+0x72/0xb0 [ 1382.139387][ C1] do_idle+0x36a/0x5f0 [ 1382.139412][ C1] ? __pfx_do_idle+0x10/0x10 [ 1382.139434][ C1] ? do_idle+0x5c5/0x5f0 [ 1382.139456][ C1] cpu_startup_entry+0x43/0x60 [ 1382.139476][ C1] start_secondary+0x101/0x110 [ 1382.139499][ C1] common_startup_64+0x13e/0x147 [ 1382.139525][ C1] [ 1382.310778][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1382.317797][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1382.326987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1382.337163][ T30] Call Trace: [ 1382.340527][ T30] [ 1382.343457][ T30] vpanic+0x56c/0xa60 [ 1382.347437][ T30] ? __pfx___schedule+0x10/0x10 [ 1382.352286][ T30] ? __pfx_vpanic+0x10/0x10 [ 1382.356787][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1382.361989][ T30] panic+0xc5/0xd0 [ 1382.365712][ T30] ? __pfx_panic+0x10/0x10 [ 1382.370239][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1382.376156][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1382.382414][ T30] watchdog+0xff4/0x1000 [ 1382.386839][ T30] ? watchdog+0x209/0x1000 [ 1382.391363][ T30] kthread+0x388/0x470 [ 1382.395523][ T30] ? __pfx_watchdog+0x10/0x10 [ 1382.400281][ T30] ? __pfx_kthread+0x10/0x10 [ 1382.404872][ T30] ret_from_fork+0x514/0xb70 [ 1382.409483][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1382.414734][ T30] ? __switch_to+0xc79/0x1410 [ 1382.419433][ T30] ? __pfx_kthread+0x10/0x10 [ 1382.424065][ T30] ret_from_fork_asm+0x1a/0x30 [ 1382.428850][ T30] [ 1382.432650][ T30] Kernel Offset: disabled [ 1382.437218][ T30] Rebooting in 86400 seconds..