last executing test programs: 2m48.633550236s ago: executing program 4 (id=877): mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2m48.377167281s ago: executing program 4 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r4, &(0x7f0000000000)=@dbg={0x25, 0x1, 0x6}, 0x18) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, 0x80646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={0x0, 0x56, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc0805}, 0x20008090) 2m48.152933862s ago: executing program 3 (id=882): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100011700000000000000000500000a"], 0x28}, 0x1, 0x0, 0x0, 0x34008085}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x7}, {0x6, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r4, r5, 0x0, 0x800) 2m47.823012381s ago: executing program 3 (id=884): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES32=r2], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m47.674034794s ago: executing program 4 (id=886): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'bridge_slave_1\x00', {'wlan1\x00'}, 0x6}) 2m47.651876123s ago: executing program 3 (id=888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff}, 0xe) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r0]) 2m47.413100313s ago: executing program 3 (id=891): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x3, 0x542, [0x2000000000c0, 0x0, 0x0, 0x2000000000f0, 0x2000000003ac], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x26, 0x80f3, 'veth1_to_team\x00', 'ip6gre0\x00', 'veth1_macvtap\x00', 'wg0\x00', @local, [0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [], 0xae, 0xfe, 0x12e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xffa7}, {0x95}]}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x10, {0x4}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x5, 0xc, 0xf8, 'syzkaller0\x00', 'netdevsim0\x00', 'veth1_to_bond\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xb6, 0x126, 0x15e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0xb2c, 0x8000, 0x63809d18, 0x6, 0x7fffffff}}}], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x7fffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@random="fa67b8588074", 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x1b, 'wg2\x00', 'ipvlan0\x00', 'tunl0\x00', 'bond0\x00', @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="23869fb5fb96", [0x0, 0xff, 0x0, 0x7f], 0xfe, 0x17e, 0x1f6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'netbios-ns\x00'}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0xffff8000, 0x7fff, 0x9, 0x1}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}, @common=@ERROR={'ERROR\x00', 0x20, {"a5da24c6003114bc3855781606083dc5f5fa2891a718ef49c258b4a58260"}}], @common=@nflog={'nflog\x00', 0x50, {{0x1b2, 0x8, 0x3, 0x0, 0x0, "7013b6967d013ea71df1d991037ad6934d0be0554e540ff09b43de9c557e116c85cc6fa705cb429305b395d909137f245fa61bebe53aee8281f2aa2880673e10"}}}}]}]}, 0x5ba) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c00)=@nat={'nat\x00', 0x19, 0x3, 0x4c2, [0x200000000700, 0x0, 0x0, 0x20000000084e, 0x20000000087e], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0x1, 0x1, [{0x0, 0x4, 0xf8, 'pim6reg\x00', 'ip6gre0\x00', 'veth1_to_hsr\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@nflog={'nflog\x00', 0x50, {{0x100, 0x8, 0x8, 0x0, 0x0, "2d12d6a0eb504a642c85a9ef025e489053287694dc63ec0f2a30877714772e7126d6ee42e36d569b31a80144c1c442b9bd25aed498a1cdea36e9a3f4673d0209"}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0x20, 0x1983, 'team_slave_0\x00', 'veth0_to_batadv\x00', 'team_slave_1\x00', 'bridge_slave_1\x00', @empty, [], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1ce, 0x1fe, 0x236, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0xe87, 0x4, 0x3}}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {0x11, 0x43, 0x8884, 'batadv0\x00', 'team_slave_1\x00', 'rose0\x00', 'nr0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}]}, 0x53a) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000c80)=0x1, 0x4) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000cc0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@getaddr={0x14, 0x16, 0x800, 0x8, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e00)={'nat\x00', 0xa9, "2789c4b9762a532f2e3d8a840217d98f1ba367bf09e7f4fe4044a71ad5c5d7d2d9eedcd997b1a729936995bc935eaf9d8948f90db47ffc23a47bbfa840131f1a9f58aba04f41ac6c2e78950da33071dce36b8f4771003572561434f39366f2916834e39c2c347900f2ecad4a37867fced2ff543b8308f343202ffe5a4e864cff91d5100bdbd77d012e2e415544e6530a07cd31a2cad6291212f11e3e083b37347f91e974de8d1747c8"}, &(0x7f0000000f00)=0xcd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0], 0x0, 0x83, &(0x7f0000001140)=[{}], 0x8, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00', 0x0, 0x8}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001480)={0x0, 0x80000001, 0x10}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x17, 0x1, 0x1, 0x2, 0x10444, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pi6 \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x5e9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x4, 0x7, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000f80)='GPL\x00', 0x4795, 0x42, &(0x7f0000000fc0)=""/66, 0x6b23cb3a2d42ee70, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x0, &(0x7f00000017c0)=[0x1, 0x1, r3, r4, r5, r6, r7, r8, r9, r10], 0x0, 0x10, 0x8}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000018c0)={r3, 0x7f, 0x6a8, 0x7fffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={r13, 0x58, &(0x7f0000001900)}, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000019c0)={0x0, 0xdac2, 0x7ff, 0x0, 0x5}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000001a00)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001a40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "08c15e4345793d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002a40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000003a40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000004a40)={{0x0, 0x4, 0x25, 0x1, 0x0, 0xffffffffffffff81, 0x5, 0x81, 0xa, 0x5b8, 0x6, 0x2, 0x6, 0x9, 0xde7f}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000004b00)={0x0, 0x0, "7ccd0c816bf6a3b301287df7e0e3b4310559ead49f900c03082f30b98c6fff57d853805ae8a2e5651fffc5ccf26ab74cff5bdb59ecc84e9e9668b35245810750ce9e92ba5f2773c85a09d1f1b814153bfb06eb62327932d11ae5b9efadde00b9fa59ca615ba9a40e566689856790c435028df350fa6fd0fc1fef8d4e37b9a44bccb059e22ac3d4243cf5b6135a60427cee7ddafc7581afbb503bf91ed68b1c9ca2e35696d1d37a6c30897538c892e249d7794370c4f4e06dcfc21d8c4c3ee524a75a46a151603f0b5e2d3731a07a45728c418c592bac746c5b8f0f3de372863e29373f8c42f95d23cd0938b4be5530d7940a10d0e1f14e74de1e2c4180f2ae55", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, &(0x7f0000005b00)={{0x0, 0x0, 0x1, 0x101, 0xecb4, 0x2, 0x8416, 0xfffffffa, 0x5, 0x3, 0xdbf2, 0x38c, 0x20d, 0x7, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000006b00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x64, "4decdea3365dd4"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010eac0)={0x5, [{r14}, {r15, r16}, {r17, r18}, {r19, r20}], 0x3f, "df24078bd27ca7"}) 2m47.412470665s ago: executing program 4 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x5e}, 0xfffffffffffffffd, 0x0, 0xa1, 0x42, 0x29, 0x100000001, 0x0, 0x9}}], 0x58}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0xd4}}, 0x4000010) 2m47.262338748s ago: executing program 3 (id=893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x6, [@struct={0x0, 0x8, 0x0, 0x4, 0x1, 0xf70e, [{0x0, 0x0, 0x1}, {0x6, 0x3, 0x7fff}, {0xc, 0x4}, {0xf, 0x2, 0x7fffffff}, {0x7, 0x2, 0x6}, {0x5, 0x5, 0x3}, {0xf, 0x2, 0x2}, {0xd, 0x2, 0xfffffffb}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x800000}}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @fwd={0x9}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x4, 0x4}, {0x0, 0x2}, {0xa, 0x200}, {0xa, 0x101}, {0x1, 0x4}, {0xf, 0x4}]}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x32452099}, {0xf}]}]}, {0x0, [0x30, 0x0, 0x0, 0x41]}}, &(0x7f00000007c0)=""/158, 0x112, 0x9e, 0x0, 0x7f}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00'}, 0x18) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, 0x0, &(0x7f0000000540)=""/231}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x16, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x2, 0x1, 0x0, 0x9, 0x8, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x10b3, 0xad, &(0x7f0000000200)=""/173, 0x41000, 0x14, '\x00', r1, @lirc_mode2=0x10, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xb, 0x8, 0x2}, 0x10, r3, r0, 0x8, &(0x7f0000000d00)=[r4, r5, r6, r7], &(0x7f0000000d40)=[{0x2, 0x2, 0xd, 0xb}, {0x2, 0x5, 0xd, 0x3}, {0x3, 0x1, 0x5, 0x3}, {0x4, 0x3, 0x9, 0xa}, {0x4, 0x2, 0x5, 0x3}, {0x0, 0x2, 0xe}, {0x4, 0x1, 0x2, 0x4}, {0x1, 0x5, 0xe, 0xa}], 0x10, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x64, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3e83d844cd00eaa00000000e4ffffff00000000e431d206c0113bbd761a00c5bd946704"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m47.261152192s ago: executing program 4 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xa, 0x2, 0x3}, 0x50) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000003100)=""/4096, 0x1000}], 0xa) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f4, &(0x7f0000000000)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfbff}, [@NFTA_TABLE_USERDATA={0x85, 0x6, "35d6c2ccb4996958f129e262570dd2201f76b93d3f6541367776d1da2833d003c65309d6fc06695c611531ca3e6a4a169e1ce779b0c4c18abd005b1153eb1546871cd40a215a29a0b6457d85a514bab35e63a1eecc0da77bbf4417d7b5e84f329f867ba64cf48ecda12d0f411242a5c6f776207149200e37613ad7e76ff8d0bcd8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x17, 0x6, "9648419134671abbb123e58511d8d2677c3c37"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa0d197f}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x34, 0x7, 0x1, 0x0, "76b20d6c0ff1dc01c48f95c391f81f1c3fb6a23e3247919bdb4d16f8ee4ce428edff03a63c28d1828163a2f23e6e1db7"}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x405, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa6f4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x23c}}, 0x0) r7 = socket(0x23, 0x2, 0x53f0800) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@loopback, 0xf445c8cf92c4130e, 0x0, 0x20, 0x0, [{@multicast1}, {@multicast1}]}}) 2m46.793776751s ago: executing program 3 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf25210000000c00069a6e9442dd8a8d0003000000030000000c000600030000000300000014002d80050004000100000005"], 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) 2m46.792410295s ago: executing program 4 (id=897): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000a000000020000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000005615669ca1ff9ad9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xfffff691}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="00004305", 0x4, 0x4008000, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x14) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 2m46.150439689s ago: executing program 32 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf25210000000c00069a6e9442dd8a8d0003000000030000000c000600030000000300000014002d80050004000100000005"], 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) 2m46.135745373s ago: executing program 33 (id=897): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000a000000020000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000005615669ca1ff9ad9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xfffff691}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="00004305", 0x4, 0x4008000, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x14) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 2.193912788s ago: executing program 2 (id=2325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 2.193033803s ago: executing program 1 (id=2327): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0xc8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfffffffffffffe31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r5}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x4c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.653173843s ago: executing program 2 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="aa", 0x1, 0x50, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1a0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x178, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52570463}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x64, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x13, 0x6, "1d4484ce78cd72ddd2ff745bc9345a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x24c}, 0x1, 0x0, 0x0, 0x8011}, 0x8080) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) ioctl$SIOCGSTAMP(r5, 0x80108907, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x2, 0x4, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a50001280110001006272696467655f736c617665000000003800058005001900030000000500090001000000080025000100000006001f00d500000008002200", @ANYRES32=0x0, @ANYBLOB="040018000500010003000000140003006272696467655f736c61720e6f5f300000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.59492443s ago: executing program 1 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 1.49597927s ago: executing program 6 (id=2339): syz_emit_ethernet(0x41, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0xb, 0x3a, 0xff, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd, 0x120, "9baff4"}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.38046633s ago: executing program 1 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wg0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0xf, 0x80000001, 0x23, 0x3, "bc095e", 0xd, [0x9]}}) socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="010328bd70000000000034000000080003000300ed"], 0x1c}}, 0x0) 1.356147445s ago: executing program 0 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 1.333743792s ago: executing program 6 (id=2343): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbb3bbbbbb7f0a000340110800453e001c0066000080029078ac1414bbac1414aa156b3485e766b1df"], 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x20048000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x0, 0x1000, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) 1.213660856s ago: executing program 0 (id=2344): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x003\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030000000000000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x2a10, 0xc, 0x5, 0x0, 0x0, 0xffffffff]}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="cfb48446e16f4aa7420988ab8bf3e77327106d434cca3c39ea868e4a2914cc2ab2916421d4630180949cfa8228e66edd4615db8faf481a60cc0415a90611bb7a0466b39fe1afdcc297515b694d8620f9c0dd668bfc40b77dc46caf3adddeb2114bcb2a3bd6e4d79c197b35de26a7f96154064d7637f67001b497ac615e2c8b3708cea5ea21e2c74dc089e6c798f6a648c5a0c245416f22ba9a879306", 0x9c}], 0x1, 0x0, 0x0, 0x88c4}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="1a4f31ec88b9fee504b1f9b2715c59ea5908f1203bd9aaa871dacab0f264633d36c146d0a6f92eca205c9a984f33c8b7e321e9bf62a6a8d01e7fc9b81c58e9a8443f055cc05bb02afb1abef1268fde8eb06412517f70f5ce99d883658e6435da5e90ba36067652d5c5a53387ce558f018af2ae1a18087fe14bf42676e49c216789b35911275c4dc68d5f295202677359c1571d5911fbff77f753eecc02e159e525b11d8bfc3720126b0e618f23c7ea075ee4d35fa53a94f3d48c48eb0c2a8607c1881a36702e9efc5bfd280b6871125daae74f", 0xd3}, {&(0x7f0000000600)="0288bff9e55f80ef169ae92e20cc9d3335677662e720635df569f4873ca53543063a718b23e67a475f449c58ee36b58a338aa7b6ba0886a597e4f6fadc943580fddca884dece47c5844a5e03696e0a8ee9a4148dd1e162faa9242673fd877bdb30f9ee2c254d09b020f9aaf2567c81f4c2c8a4de45182ffd043328ff3f4f033a870ff71a0293483b6d7ec593849d1e0c3843402fecf652d9f46217d1812b65117b91709eecf438e7c34168ed9a33d127c7cf1c04e1e5a1650a889bdaf5f0d755e1660b9e79395c9e8258a3f9f3976f08fa7691e8efbd8186283b547058609485e3", 0xe1}, {&(0x7f0000000700)="8188a0900b37d19b1ebee53384be08a1b7fb7d704b5b6ac209afd36bb1c7e2c9db6e214300c1a5c5471cd96d8b089a7b73eac5338ef84ac5f0b81df99d83ee965ca8fdc9e9f1a9ac040011e57de319249c6fb2", 0x53}, {&(0x7f0000000780)="2873f408b2ea695932a1180e0ed31ccedb66fc902be2e25c0933bbe79cedafa52c255129f7f056829abad596812440eb93492d980e", 0x35}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000007c0)="78d938704636", 0x6}, {&(0x7f0000000800)="2d846824e5ae046d2ff4c4dcfaef70c30ce1dada124c0315e93cfb92c4799452b1e7b7408e28280d4c7475471a31fe5ccde0d719638c5a", 0x37}, {&(0x7f0000000840)="cec8eac6428d853ec79ad00b486373640bcfd425f37cbd08e72405948ddc9c620af3cfb46931dde00dfe99ec0916398c25bc1249c1e0fba9ddd649bcd5debc1f4eaa3055b71c75b313421e613d27d9e5e2ccd3796d9e27809d6a443d937392ed2b618a437b8dcbbfd8d8eebe0a92b7328811e6edc4b8f812978491d7e9c1a92fa4466226b6895b4c53dfb667d8d98b72e1a827cdaa312eec8f88962a4a92890e9c893f9aea134a8e7b54fc622a9c0339666988e4fab6ea40e27761ebb439ff1f73cc3da053b6b0ea040e2bdb52ad0188849be7b8", 0xd4}, {&(0x7f0000000940)="dce0589696bbdc86e85342476254ab7c4978f548691b57ebb1b1a92ebfaa4a2e82fe95c366d0680b0cc78e81a658", 0x2e}, {&(0x7f0000000980)="ef715be67a4413e3ed", 0x9}], 0xa, &(0x7f0000000b00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x60}, @iv={0xa8, 0x117, 0x2, 0x93, "8eb0a12b8bcda70e14ac985fe5ac48fdf5fe785ed49e0fa26bcec661852c8f108e61c1d764c1beb05ca6c3195f0167e6f80798a4d7de7b043c30c904389b28e1e41e3fe39c147612dcdfc8772a039790d18df3601b2029b9f7f9243b80ad813fadc2475accb2db32923f3fba707d5e794260dbb54fefeec48d3a46eea7fa7fece47362de064ad4e2de783364f3cf1641fca825"}, @assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x150}], 0x2, 0x44000) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r12, 0x29, 0x4a, 0x0, 0x0) 1.213111557s ago: executing program 1 (id=2345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) listen(r2, 0x4) (async) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) (async, rerun: 64) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 1.198413631s ago: executing program 5 (id=2346): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000440)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x83}], 0x1}, 0x4008000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000100), 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='-7f'], 0x9) syz_emit_ethernet(0x6c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffbbbbbb08004500005e00000000002f907800000000e00000012480810000020010000700077f1a10000800000086dd080088be00000000100060000100000000000000080022ebfffffffc200000000200000000000000000000000800655800000000451e283ba0ca20a3ce60dcf36c055081a5fa70f33141e30649ad45122da8f728037aebc5a080cb324d9fa62dc8fd5896fa6b53a808b749d327dda2833ec00bfcb2b2be74cea4bc157235bf36dc8d7f1d0d0a0fcf5b2f1ad9c96b522acded378a39027d38402a6b10de6ea04ee03707b33eeeceb2422c4d276c1e70818daac234"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000440)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x83}], 0x1}, 0x4008000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) (async) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000100), 0x4) (async) openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='-7f'], 0x9) (async) syz_emit_ethernet(0x6c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffbbbbbb08004500005e00000000002f907800000000e00000012480810000020010000700077f1a10000800000086dd080088be00000000100060000100000000000000080022ebfffffffc200000000200000000000000000000000800655800000000451e283ba0ca20a3ce60dcf36c055081a5fa70f33141e30649ad45122da8f728037aebc5a080cb324d9fa62dc8fd5896fa6b53a808b749d327dda2833ec00bfcb2b2be74cea4bc157235bf36dc8d7f1d0d0a0fcf5b2f1ad9c96b522acded378a39027d38402a6b10de6ea04ee03707b33eeeceb2422c4d276c1e70818daac234"], 0x0) (async) 1.160913543s ago: executing program 6 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x5}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) shutdown(r4, 0x1) sendmsg$inet(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="4c22cd3b", 0x4}], 0x1}, 0xc4) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300f0d14f5800000000000000000002000100001800000000000500000000"], 0x20}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) r10 = socket$isdn(0x22, 0x2, 0x24) close(r10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) 1.03791302s ago: executing program 5 (id=2348): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) close(r1) 1.03732493s ago: executing program 6 (id=2349): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "60796fb7d775a1561404f251dcdd67e8"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x1, 0x1}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x5e3a, &(0x7f0000000100)='netdevsim0\x00', 0xffffffffffffffff, 0x5, 0x3}) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f00000001c0)={0x2, 0x6}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x400}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r2, 0x3, 0x20, 0x2d, 0x7}, &(0x7f0000000340)=0x18) socketpair(0x8, 0xa, 0x9, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f00000003c0)=""/200, 0x8000, 0x800, 0xd, 0x3}, 0x20) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000500)={0x0, 0x0, 0x3a, 0x6, @vifc_lcl_ifindex, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000540)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000580)="c5cf6fb461a4fca437fc50133dec620853d5656b350ef9d1b8af153787d4b65a8efe6658091d96df9d8951024a3aaad362454bdb8c", 0x35}, {&(0x7f00000005c0)="585b2af9c2dc489b4c7ad8648342b27d7e3c25bcc3981c2de1", 0x19}, {&(0x7f0000000600)="c3cdb731f84c71fbf5ac1f5b58982af3fe43cba8996d017f991bec1c8bb31d", 0x1f}, {&(0x7f0000000640)="b3a7c5d2eff6b1ae29a808b1e2fae75f14830e954428f136b9787a1efc8f96b4ed959b40b2d2e7114c5db81d89936f2b49b27fe2076422b4d045c65fbc860f8ebf3abafb6fafe983f7adf3e636266367633ed528bab5af7ffac2417ae93787de8cb31bb282f616b64a90fab64f9ce2aaa53b1fad1cfcd56ce8fa045092832c22df69e0068511e03a0409eb3acb21", 0x8e}, {&(0x7f0000000700)="db7e0547361f867e0b8c6c010a15db14b37bac9ea62841deb3e5313c4e3dd5578986c10b1dac0a2f32f3c12d5380ba79d63a60f48600127322dec43b2619aa436adbf9fb8e7345745c1659fb93acaea36776d8e35e175ae9f98124696df5fc4beeee433239889313d0729d1b372d", 0x6e}], 0x5, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}}], 0x1, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x40040, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000940)={r3}) writev(r3, &(0x7f0000001e40)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="7ec805e622ec6615f110ef81f54e38d57298f6d5bc3c2e0871498b14e700ec60c9b6aae1a3207eed3826cf1cf23dda5778aaadff3440d23e406e52a837e4d78848b5bf7a3c52399855729fff713f0957d66feb40c798d729f972b2c0", 0x5c}, {&(0x7f0000001a00)="19dd790813219b3800b9f6eddfc8821f62eff93d28642cec1d3097afb58c4da3c7223f45162f94bbc0ff62185de1ed4f364f9d9aa08bbc77f49965da6d70559686f8b3bb0f0f2351394910b67e1214215e1d3a3ed2ea19a5b99d160c062f5e6be28953424b22394f8bd454e31bf4b76f1878df09f0657946c4c346eb88194111dabf44d455745aec9a1171644d863e213f07066063ada33f02cc49ed8193c55a4ff9abebc8ab9b79f6f6a590240aef5710e03fa252320169bfd0ac9e32e79b0a9568855f436da64811742fca83b2525c1d6b8b17812a7a2378ef7800", 0xdc}, {&(0x7f0000001b00)="2866de8d10797180d6e0024c48e2e8a4b8a495194e3332c03cb3896d0f54f2989e009b62afdc6071b720d65496a77d069c7f67ff4a380410f1b5483e006ded61a8b51f3f547a9dbb442a6dba636d42efb9f27708f365e200b5bf1e51bb24e44c3ddd922f16161c0a05c21ecbae5268d3796db60f5e7dce5baf20ca93ec755ac120479e798ad185192f6c8c99ff89e787c6ac1bd909e8e97d1f7380aea1fe65f83f5eec11efe795a79d3887cfed715d8d33866871", 0xb4}, {&(0x7f0000001bc0)="882d5c892cf374d9a2483a2247af18", 0xf}, {&(0x7f0000001c00)="bcc4472c5151f47d65c7fd2b2b26bc2516", 0x11}, {&(0x7f0000001c40)="47cade8fccc94463aebc020b7c07af1f8713d7f3d39e290f18c719e68394622e4ef296a6b0bdc2bf15c4b63e91a53c9ad2eb28445879cbdd1bd16d76a90a38dc82ed6d00376d9a00701f98d62dc379ef05a32a6e119992376b188f79296a61687da76a66653611e0ed5982fd29db175af2abc8b92160cc3e89bb6ff98498c0639b521a7702a737822f", 0x89}, {&(0x7f0000001d00)="0b31bd502d63eea3144d7d70deaef333fe34d08ccf1245ed57e7bf227f19075c6816b872b4f779240f41dba2effe72375f043b4e8cd68a4fe8ec60f0397da43d1ed6980c82ebb52e8efc86b17ba30d9b369d613c5dc6f3142b392481e78d61c2776d40aa0588fa0165756019993111b8aed3d14e5cb0bdd607b80a494e657648f96adcf17dfe39f608abd234c92703c7cfc3f33738c925b1", 0x98}, {&(0x7f0000001dc0)="7e8373b4b4f8f5f8b0b48d14d6aeb61d256cb904b80bda92be2e9845783e04649388b64a646d4f9a5de672457ee1770fed33728858a6da62abd6a0adc0d696f8d6a51161a0ee5835e41bd00387d2f14e930b687cfaeca1dcc0eea6d32e97ae7045b0099150fcd1e0a24b3f0bbe0c1bf56ab5", 0x72}], 0x9) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001f00)='syzkaller0\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001f40)={'batadv_slave_1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001f80)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000002080)=0xe8) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f00000020c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000002100)={0xa, 0x4e20, 0x8, @remote, 0x1}, 0x1c) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000002140)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000002180)={0x4, [0xc, 0x1], 0x3}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000021c0)={{0x11, @multicast1, 0x4e23, 0x4, 'none\x00', 0x2, 0x101, 0x75}, {@multicast2, 0x4e23, 0x3, 0x8, 0x1, 0x1}}, 0x44) 983.2236ms ago: executing program 6 (id=2350): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x480}], 0x1, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140)={[0xf]}, 0x8) r3 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)=""/166, 0xa6}, {&(0x7f0000001280)=""/10, 0xa}, {&(0x7f00000012c0)=""/109, 0x6d}, {&(0x7f0000001340)=""/90, 0x5a}, {&(0x7f00000013c0)=""/88, 0x58}], 0x5, &(0x7f00000014c0)=""/31, 0x1f}, 0x7}], 0x2, 0x2100, &(0x7f00000015c0)={r4, r5+10000000}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001600)={0x10001, 0x4, 0x0, 0xd, 0x7, 0x0, [{0x3, 0x7, 0x18480000000000}, {0xe, 0xd2dd, 0x81, '\x00', 0x1005}, {0x7, 0x7ed, 0x9, '\x00', 0x400}, {0xa, 0x4, 0x9, '\x00', 0x100}, {0x1, 0x1, 0x6}, {0x3a5, 0x3, 0x3, '\x00', 0x1101}, {0x7518e381, 0x20, 0x3, '\x00', 0x8}]}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000017c0)={0x0, 0x21, "95df08bc739bff3503bea78da1d356ee6e906705a06d22b61d2736566c84b132ad"}, &(0x7f0000001800)=0x29) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001840)={0x0, 0x4d4c, 0x65a327ca, 0x40, 0x6, 0xd16, 0x200, 0x995, {r6, @in6={{0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x3, 0x2, 0x8, 0x200, 0xf53a}}, &(0x7f0000001900)=0xb0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001940)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f0000001980)=0x14) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000019c0)={r8, 0x1, 0x6, @link_local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000001a00)=0x9, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) syz_emit_ethernet(0x2d, &(0x7f0000001a40)={@remote, @local, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x9, 0x0, 0x1}], @llc={@snap={0x1, 0x1, '9', "9dbb99", 0x1b, "83598823a5b3440ddbdb57"}}}}}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000001a80)=0x102000) r9 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_mreqsrc(r9, 0x0, 0x25, &(0x7f0000001ac0)={@rand_addr, @multicast1, @empty}, &(0x7f0000001b00)=0xc) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000001b40)='bridge_slave_1\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000001b80)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r11) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r12, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x130, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r14, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x118, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffeff}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6edd}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vcan0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xc0}, 0xc040) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) 963.704349ms ago: executing program 5 (id=2351): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r2, 0x7e) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)='j\x00', 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c00"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000100)={0x0, 0xff7f, "acd8fa", 0x8, 0x95}) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x40000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xce7}, 0x1c) 762.048989ms ago: executing program 2 (id=2352): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffff1, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x9, 0x4) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 760.712068ms ago: executing program 2 (id=2353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) accept(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bd4942035ba602c"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5a}, @void, @val={0xc, 0x99, {0xfffffffb, 0x52}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x51}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc040) 717.893863ms ago: executing program 2 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 666.137318ms ago: executing program 5 (id=2355): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x11, 0x400, 0x0, 0x0, {0x90, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8040) 545.848061ms ago: executing program 2 (id=2356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000001c0)=""/129, &(0x7f0000000000)=0x81) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff7, 0x6, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000f909010400000000000000000200000044000480400001800e000100627974656f726465720000002c00028008000340000000000800014000000000080002400000000008fa03400000000008000540000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 545.123525ms ago: executing program 5 (id=2357): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x21, 0x2, 0xa) write(r0, &(0x7f00000003c0)="ae545ab317e6ac44df09b505292e71472b9afdc3f3f226668e14ac33eef4f247523f7e21425ed08b2145575b73526c32fecf2cc93286576fad786583a8fef3dfd901a62a8aad9a4b00caaf150c597556ca86c7f6b20a5b41f3f86eeaf3394ced14542b02471fc450d7345c3ce403202c90ea03477a51a95cbfbf841ff5cc4a4e9ad8f2b084bb04997770bb8d32eb2be01f9ea6bf668eba6c", 0x98) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = socket$kcm(0x21, 0x2, 0xa) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r13, 0x800448d3, &(0x7f00000000c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) splice(r4, 0x0, r9, 0x0, 0x10d00, 0xf) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000003000"/24], 0x18}, 0xfc00) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x1f, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @ldst={0x1, 0x1, 0x4, 0x8, 0xb, 0xffffffffffffffe0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x2, 0x4cd0, 0x401}, 0x10, r14, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r4, r5, r12, r1], 0x0, 0x10, 0x80000000}, 0x94) 342.087454ms ago: executing program 0 (id=2358): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 280.939647ms ago: executing program 1 (id=2359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) close(r0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@deltfilter={0xec, 0x2d, 0x908, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xf8dc5c3d041f9b75, 0xfff2}, {0x2, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x8c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfffffffffffffdd1, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x80}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xa9}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xa2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x38}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xa}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xec, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x0, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="390979fd459c"}) 237.57756ms ago: executing program 5 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x200}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)={'pimreg\x00', 0x200}) r3 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = socket(0x28, 0x5, 0x0) r5 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000000100), 0x800) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="4f13b1fff161d158dcc82876b544c645ba22d16eb0229a89f2", 0x19}, {&(0x7f00000002c0)="b35daa3ecc0b066698ee33133f031224939d0b753e915786e99281b0f072cc050c37040282c12105f37fe43cbc66c8ad865dd271dd58075b59e894f41cbc2cba09e749797264f0860324dae9b665670aa510a946a342e13dd16acae81df2c633325a67daf8c303a771b69ef1479409cb3d2901e868579e597eb0642d6e6c43baaeee1a742de5b4cf0ecffb6f96c31f38ab2572411265f5a0086607fd6aed0ba5cbb0cbbd44a41158a0ba11be2da9e2f6fa79b66e39dc5f8cb28c5fd5507b185d94e543b2", 0xc4}], 0x2}, 0x80) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x8b) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) 177.481671ms ago: executing program 0 (id=2361): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="d20fd71891c88c6b7f4155b24753b8661e1fb8bf334a54c54d607f268d5276d50c7003236acca3d10f27d64e17be1d0c3d405aa53d1bf220cacc0478cd834818525440fbe22e957f39de01139fbb902a796d24952b72cc58a47458d4c182ea8f985a1ec343cd5307addb6e579d9d0a75f78d3f1210f45dd5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2ccc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000000)="43e608a27449c2eb652155800d472050d6c3695ab7a41605bc8a9bb99ce212adc5033fc27f6bd94a0d76d313ac664e6ba398eace89d60db044d0e07ea08d0d6e461005dc45e587541f3c3bbdddb1d9c3cdb6beca4bb7371d1c5e67ef4bd62f4d52bddc4711e4c126ac17d0", &(0x7f0000000340)=""/226, &(0x7f0000000440)="ae8f56d1cc62f715ab1734c628cbac2c414d34223b6a0c88318d904945fd720599cd89b90ca17df36ba7a6a02b95c30b403054b4aeb35d5ead8a30134b85db90b8f894d15ce24b1d9a04d5744f489862fbcb7bb0694995c6ff0539cd4820b3c7228fe147781f7c23e1646c964e2443a6ad06cf1d0b0b5882a1b90e7bdf65878a62e99bb7ff6656ec2b910899a3287c4beac0a5de50d94f60b70bdd770a2c74ad690f3d8456af534f18f8490ed89fb851af9f8957ebf73170cfe13dff7a", &(0x7f0000000500)="3795381a1e6a9066878b348d07ae16d23c1845528b4d3099d1b2d7", 0x8000, r3}, 0x38) 136.075099ms ago: executing program 0 (id=2362): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0xdada}, @val={0x1, 0x0, 0xffff, 0x8, 0x1, 0x1000}, @x25={0x0, 0x81, 0x17, "efb0715e53535f3136257c8dff85ed3db7c421b5174a17d9b2caa3a63b5cc9c7b78e5b9903ae4e33ec366842a490d87e2f5fba96fb61057c8b32de603d547a8b8d86726917719995914863be62d7320be8b0ac4a9cdebd49810cf3906b850b407275af440bc334ecd4b27274e265c7e5ecbc07d568c42e8b281377d85f89a821abca9664ca96f6e32bdb3113c936398dd1e49b8d7f5531"}}, 0xa8) (async) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40031040}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x1, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x19a2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}]}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3b0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000100}, 0x2004c814) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'wg0\x00'}) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa0e4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68080}, 0x44004) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000005c0)='0', 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x4f7}}, 0x40e8, 0xd, 0x3, 0xff, 0x12, 0x7907a4d8, 0x3}, &(0x7f00000006c0)=0x9c) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='vegas', 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r8, 0x6851789da36cde45, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000880)={r3, r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r2) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x90, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '0'}, @NLBL_MGMT_A_DOMAIN={0x2f, 0x1, '/sys/kernel/debug/bluetooth/6lowpan_enable\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}}, 0x20884) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000d40)=0x4, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000ec0)) 112.458588ms ago: executing program 1 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/290], 0x108}}, 0x0) 2.044701ms ago: executing program 0 (id=2364): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/241, 0xf1}], 0x1) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000740)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x8044, @remote}, {0x2, 0x4e2f, @broadcast}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 0s ago: executing program 6 (id=2365): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0)=0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0)=0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) kernel console output (not intermixed with test programs): etlink: 'syz.6.1030': attribute type 1 has an invalid length. [ 192.731373][ T9864] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 192.759303][ T9870] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1036'. [ 192.931874][ T9880] x_tables: duplicate underflow at hook 1 [ 192.939744][ T9878] bond3: (slave bridge4): making interface the new active one [ 192.950141][ T9878] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 193.102135][ T9885] batman_adv: batadv0: Adding interface: dummy0 [ 193.125673][ T9885] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.193706][ T9885] batman_adv: batadv0: Interface activated: dummy0 [ 193.276936][ T9890] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1038'. [ 194.068805][ T9926] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 194.079424][ T9926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.098778][ T9925] tipc: Enabled bearer , priority 0 [ 194.152505][ T9927] syzkaller0: entered promiscuous mode [ 194.169538][ T9927] syzkaller0: entered allmulticast mode [ 194.179639][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1049'. [ 194.188937][ T9930] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1049'. [ 194.198265][ T9930] netlink: 'syz.5.1049': attribute type 5 has an invalid length. [ 194.268392][ T9935] tipc: Resetting bearer [ 194.288320][ T9938] openvswitch: netlink: Message has 107 unknown bytes. [ 194.305282][ T9924] tipc: Resetting bearer [ 194.328432][ T9924] tipc: Disabling bearer [ 194.398238][ T9943] x_tables: duplicate underflow at hook 3 [ 194.452069][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.462560][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469140][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838542][ T9962] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1057'. [ 194.951156][ T9971] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 194.991180][ T9971] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 195.049171][ T9971] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20001 [ 195.326042][ T9986] macvtap1: entered promiscuous mode [ 195.331406][ T9986] macvtap1: entered allmulticast mode [ 195.548944][ T9987] netlink: 'syz.5.1061': attribute type 29 has an invalid length. [ 195.576619][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1065'. [ 195.594556][ T9997] netlink: 'syz.5.1061': attribute type 29 has an invalid length. [ 195.617609][ T9999] netlink: 'syz.5.1061': attribute type 29 has an invalid length. [ 195.675026][ T9999] netlink: 'syz.5.1061': attribute type 29 has an invalid length. [ 196.426965][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.672924][T10043] syzkaller0: entered promiscuous mode [ 196.711444][T10043] syzkaller0: entered allmulticast mode [ 196.734781][T10051] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1076'. [ 197.209036][T10074] nbd1: detected capacity change from 0 to 127 [ 197.239058][ T5841] block nbd1: Receive control failed (result -104) [ 199.028561][T10120] netlink: 'syz.6.1091': attribute type 2 has an invalid length. [ 199.073702][T10120] netlink: 'syz.6.1091': attribute type 1 has an invalid length. [ 199.126444][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1091'. [ 199.185247][T10122] syzkaller0: entered promiscuous mode [ 199.190783][T10122] syzkaller0: entered allmulticast mode [ 199.376033][T10133] can: request_module (can-proto-4) failed. [ 199.914245][T10162] batadv1: entered allmulticast mode [ 200.767469][T10195] bridge0: port 3(batadv0) entered blocking state [ 200.805966][T10195] bridge0: port 3(batadv0) entered disabled state [ 200.830771][T10195] batadv0: entered allmulticast mode [ 200.877210][T10195] batadv0: entered promiscuous mode [ 201.119131][T10216] syz.1.1117: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 201.142860][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.1.1117 Not tainted syzkaller #0 PREEMPT(full) [ 201.142897][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.142907][T10216] Call Trace: [ 201.142915][T10216] [ 201.142923][T10216] dump_stack_lvl+0x189/0x250 [ 201.142955][T10216] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 201.142985][T10216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.143011][T10216] ? __pfx__printk+0x10/0x10 [ 201.143030][T10216] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 201.143057][T10216] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 201.143091][T10216] warn_alloc+0x214/0x310 [ 201.143118][T10216] ? stack_depot_save_flags+0x40/0x860 [ 201.143151][T10216] ? __pfx_warn_alloc+0x10/0x10 [ 201.143179][T10216] ? kasan_save_track+0x3e/0x80 [ 201.143204][T10216] ? __kasan_kmalloc+0x93/0xb0 [ 201.143231][T10216] ? xsk_setsockopt+0x4dc/0x8d0 [ 201.143253][T10216] ? do_sock_setsockopt+0x17c/0x1b0 [ 201.143269][T10216] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 201.143286][T10216] ? do_syscall_64+0xfa/0xfa0 [ 201.143309][T10216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.143339][T10216] __vmalloc_node_range_noprof+0x125/0x12d0 [ 201.143401][T10216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.143434][T10216] ? __kasan_kmalloc+0x93/0xb0 [ 201.143468][T10216] vmalloc_user_noprof+0xad/0xf0 [ 201.143495][T10216] ? xskq_create+0xbf/0x170 [ 201.143521][T10216] xskq_create+0xbf/0x170 [ 201.143549][T10216] xsk_init_queue+0xb0/0x110 [ 201.143577][T10216] xsk_setsockopt+0x4dc/0x8d0 [ 201.143602][T10216] ? __pfx_xsk_setsockopt+0x10/0x10 [ 201.143630][T10216] ? __pfx_aa_sk_perm+0x10/0x10 [ 201.143659][T10216] ? aa_sock_opt_perm+0xff/0x1b0 [ 201.143690][T10216] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 201.143715][T10216] ? __pfx_xsk_setsockopt+0x10/0x10 [ 201.143739][T10216] do_sock_setsockopt+0x17c/0x1b0 [ 201.143764][T10216] __x64_sys_setsockopt+0x13f/0x1b0 [ 201.143790][T10216] do_syscall_64+0xfa/0xfa0 [ 201.143814][T10216] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.143838][T10216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.143856][T10216] ? clear_bhb_loop+0x60/0xb0 [ 201.143879][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.143905][T10216] RIP: 0033:0x7f070e38f6c9 [ 201.143921][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.143936][T10216] RSP: 002b:00007f070f18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.143956][T10216] RAX: ffffffffffffffda RBX: 00007f070e5e6180 RCX: 00007f070e38f6c9 [ 201.143969][T10216] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 201.143980][T10216] RBP: 00007f070e411f91 R08: 0000000000000004 R09: 0000000000000000 [ 201.143990][T10216] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.144001][T10216] R13: 00007f070e5e6218 R14: 00007f070e5e6180 R15: 00007ffe18ef0708 [ 201.144036][T10216] [ 201.453239][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.464014][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.488099][T10216] Mem-Info: [ 201.491869][T10216] active_anon:6641 inactive_anon:0 isolated_anon:0 [ 201.491869][T10216] active_file:3014 inactive_file:39928 isolated_file:0 [ 201.491869][T10216] unevictable:768 dirty:96 writeback:0 [ 201.491869][T10216] slab_reclaimable:11137 slab_unreclaimable:122987 [ 201.491869][T10216] mapped:29354 shmem:1417 pagetables:1371 [ 201.491869][T10216] sec_pagetables:0 bounce:0 [ 201.491869][T10216] kernel_misc_reclaimable:0 [ 201.491869][T10216] free:1303898 free_pcp:12729 free_cma:0 [ 201.571500][T10216] Node 0 active_anon:26564kB inactive_anon:0kB active_file:12056kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117416kB dirty:380kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13796kB pagetables:5356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.665660][T10216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.698289][T10216] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.730315][T10216] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 201.736505][T10216] Node 0 DMA32 free:1304096kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26364kB inactive_anon:0kB active_file:12056kB inactive_file:159508kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:32928kB local_pcp:11752kB free_cma:0kB [ 201.809165][T10216] lowmem_reserve[]: 0 0 0 0 0 [ 201.814486][T10216] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.880596][T10216] lowmem_reserve[]: 0 0 0 0 0 [ 201.899826][T10216] Node 1 Normal free:3896336kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:9792kB free_cma:0kB [ 201.907194][T10223] : entered promiscuous mode [ 201.935132][T10216] lowmem_reserve[]: 0 0 0 0 0 [ 201.942583][T10216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.957686][T10216] Node 0 DMA32: 1625*4kB (UME) 503*8kB (UME) 166*16kB (UM) 126*32kB (UM) 34*64kB (UME) 7*128kB (UM) 3*256kB (UM) 3*512kB (UE) 4*1024kB (ME) 2*2048kB (ME) 311*4096kB (UM) = 1304636kB [ 201.977984][T10216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.991344][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 202.008211][T10216] Node 1 Normal: 226*4kB (UE) 59*8kB (UME) 45*16kB (UME) 75*32kB (UME) 28*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896336kB [ 202.034587][T10216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.072532][T10216] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 202.103733][T10216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.159782][T10216] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 202.192392][T10216] 44354 total pagecache pages [ 202.216474][T10216] 0 pages in swap cache [ 202.249651][T10216] Free swap = 124996kB [ 202.255185][T10216] Total swap = 124996kB [ 202.259375][T10216] 2097051 pages RAM [ 202.315986][T10216] 0 pages HighMem/MovableOnly [ 202.343014][T10216] 424119 pages reserved [ 202.366243][T10249] netlink: 'syz.0.1125': attribute type 4 has an invalid length. [ 202.379557][T10216] 0 pages cma reserved [ 202.426046][T10250] netlink: 'syz.0.1125': attribute type 4 has an invalid length. [ 202.510811][T10256] tipc: Enabling of bearer rejected, failed to enable media [ 202.553702][T10256] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1127'. [ 202.602676][T10259] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1128'. [ 203.291956][T10290] ip6t_srh: unknown srh invflags 4000 [ 203.327763][T10288] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1133'. [ 203.550705][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 203.589158][T10302] 8021q: VLANs not supported on ip6tnl0 [ 204.434575][T10330] netlink: 'syz.2.1145': attribute type 13 has an invalid length. [ 204.475995][T10330] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 204.514884][T10330] netlink: 'syz.2.1145': attribute type 13 has an invalid length. [ 204.955085][T10363] xt_hashlimit: size too large, truncated to 1048576 [ 205.114066][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 205.180735][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 205.280796][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 205.340615][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 205.742363][T10395] netlink: 'syz.2.1156': attribute type 21 has an invalid length. [ 205.793425][T10395] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1156'. [ 205.929785][T10402] netlink: 'syz.6.1157': attribute type 4 has an invalid length. [ 205.947338][T10400] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 205.987039][T10405] netlink: 'syz.6.1157': attribute type 4 has an invalid length. [ 206.083708][T10409] netlink: 'syz.2.1160': attribute type 2 has an invalid length. [ 206.411115][T10425] openvswitch: netlink: IP tunnel dst address not specified [ 206.601595][T10433] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 207.055107][T10447] tipc: Enabled bearer , priority 0 [ 207.083334][T10450] xt_addrtype: ipv6 does not support BROADCAST matching [ 207.089851][T10449] bond1: option min_links: invalid value (18446744073709551614) [ 207.098615][T10449] bond1: option min_links: allowed values 0 - 2147483647 [ 207.110269][T10449] bond1 (unregistering): Released all slaves [ 207.127956][T10456] __nla_validate_parse: 6 callbacks suppressed [ 207.127975][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 207.152473][T10447] syzkaller0: entered allmulticast mode [ 207.252392][T10456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 207.262707][ T95] block nbd0: Possible stuck request ffff888025095080: control (read@0,1024B). Runtime 60 seconds [ 207.276639][ T95] block nbd0: Possible stuck request ffff888025095240: control (read@1024,1024B). Runtime 60 seconds [ 207.276661][T10455] tipc: Resetting bearer [ 207.294243][ T95] block nbd0: Possible stuck request ffff888025095400: control (read@2048,1024B). Runtime 60 seconds [ 207.305278][ T95] block nbd0: Possible stuck request ffff8880250955c0: control (read@3072,1024B). Runtime 60 seconds [ 207.395438][T10446] tipc: Disabling bearer [ 207.823561][T10487] netlink: 'syz.2.1182': attribute type 12 has an invalid length. [ 207.871403][T10492] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1183'. [ 207.906063][T10492] netlink: 'syz.6.1183': attribute type 1 has an invalid length. [ 208.133670][T10502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1188'. [ 208.162835][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 208.555688][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 208.612278][T10531] netlink: 'syz.6.1196': attribute type 29 has an invalid length. [ 208.645619][T10529] netlink: 'syz.6.1196': attribute type 29 has an invalid length. [ 208.670651][T10529] netlink: 548 bytes leftover after parsing attributes in process `syz.6.1196'. [ 208.708489][T10534] block nbd2: Unsupported socket: should be TCP or UNIX. [ 208.903999][T10548] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1198'. [ 208.936011][T10549] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1198'. [ 208.971316][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 209.003472][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 209.193006][T10559] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 209.220384][T10558] team0: Port device team_slave_0 removed [ 209.581257][T10582] C speed is unknown, defaulting to 1000 [ 210.098235][T10604] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 210.167454][T10604] bond9 (unregistering): Released all slaves [ 210.728941][T10633] netlink: 'syz.5.1222': attribute type 1 has an invalid length. [ 211.895797][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 211.901889][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 211.931357][T10701] FAULT_INJECTION: forcing a failure. [ 211.931357][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.955388][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.1.1239 Not tainted syzkaller #0 PREEMPT(full) [ 211.955414][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.955425][T10701] Call Trace: [ 211.955433][T10701] [ 211.955441][T10701] dump_stack_lvl+0x189/0x250 [ 211.955474][T10701] ? __pfx____ratelimit+0x10/0x10 [ 211.955498][T10701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.955521][T10701] ? __pfx__printk+0x10/0x10 [ 211.955541][T10701] ? __might_fault+0xb0/0x130 [ 211.955582][T10701] should_fail_ex+0x414/0x560 [ 211.955616][T10701] _copy_from_iter+0x1de/0x1790 [ 211.955647][T10701] ? rcu_is_watching+0x15/0xb0 [ 211.955673][T10701] ? kmalloc_reserve+0xbd/0x290 [ 211.955692][T10701] ? __pfx__copy_from_iter+0x10/0x10 [ 211.955715][T10701] ? __build_skb_around+0x262/0x3f0 [ 211.955745][T10701] ? netlink_sendmsg+0x642/0xb30 [ 211.955763][T10701] ? skb_put+0x11b/0x210 [ 211.955786][T10701] netlink_sendmsg+0x6b2/0xb30 [ 211.955815][T10701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.955837][T10701] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.955867][T10701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.955886][T10701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.955906][T10701] __sock_sendmsg+0x21c/0x270 [ 211.955936][T10701] ____sys_sendmsg+0x505/0x830 [ 211.955965][T10701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.955997][T10701] ? import_iovec+0x74/0xa0 [ 211.956025][T10701] ___sys_sendmsg+0x21f/0x2a0 [ 211.956048][T10701] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.956121][T10701] ? __fget_files+0x2a/0x420 [ 211.956139][T10701] ? __fget_files+0x3a0/0x420 [ 211.956170][T10701] __x64_sys_sendmsg+0x19b/0x260 [ 211.956192][T10701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.956225][T10701] ? __pfx_ksys_write+0x10/0x10 [ 211.956255][T10701] ? do_syscall_64+0xbe/0xfa0 [ 211.956284][T10701] do_syscall_64+0xfa/0xfa0 [ 211.956306][T10701] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.956330][T10701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.956348][T10701] ? clear_bhb_loop+0x60/0xb0 [ 211.956370][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.956385][T10701] RIP: 0033:0x7f070e38f6c9 [ 211.956402][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.956417][T10701] RSP: 002b:00007f070f1d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.956444][T10701] RAX: ffffffffffffffda RBX: 00007f070e5e5fa0 RCX: 00007f070e38f6c9 [ 211.956456][T10701] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.956466][T10701] RBP: 00007f070f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 211.956477][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.956486][T10701] R13: 00007f070e5e6038 R14: 00007f070e5e5fa0 R15: 00007ffe18ef0708 [ 211.956516][T10701] [ 212.286439][T10708] netlink: 'syz.5.1240': attribute type 12 has an invalid length. [ 212.294880][T10708] netlink: 'syz.5.1240': attribute type 29 has an invalid length. [ 212.340507][T10711] __nla_validate_parse: 7 callbacks suppressed [ 212.340530][T10711] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1242'. [ 212.355125][T10708] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1240'. [ 212.356666][T10711] ksmbd: Unknown IPC event: 3, ignore. [ 212.382860][T10708] netlink: 'syz.5.1240': attribute type 2 has an invalid length. [ 212.403567][T10708] netlink: 'syz.5.1240': attribute type 3 has an invalid length. [ 212.453209][T10714] netlink: 'syz.6.1243': attribute type 1 has an invalid length. [ 212.461313][T10708] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1240'. [ 212.470644][T10714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.531857][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1243'. [ 212.542117][T10717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1243'. [ 212.896778][T10739] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1249'. [ 212.906803][T10742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1249'. [ 213.629775][T10773] delete_channel: no stack [ 213.857931][T10800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.255861][T10812] syzkaller0: entered promiscuous mode [ 214.261400][T10812] syzkaller0: entered allmulticast mode [ 214.302827][T10812] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1266'. [ 214.663515][T10828] syz.6.1270 (10828) used obsolete PPPIOCDETACH ioctl [ 214.719878][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 215.076365][T10849] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1278'. [ 215.519511][T10660] syzkaller0: tun_net_xmit 76 [ 215.535147][T10660] syzkaller0: tun_net_xmit 48 [ 215.545034][ T918] syzkaller0: tun_net_xmit 76 [ 215.772940][T10876] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 217.201236][T10876] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 217.213000][T10879] veth5: entered promiscuous mode [ 217.443004][T10897] __nla_validate_parse: 3 callbacks suppressed [ 217.443023][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 217.652614][T10907] FAULT_INJECTION: forcing a failure. [ 217.652614][T10907] name failslab, interval 1, probability 0, space 0, times 1 [ 217.674202][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.0.1289 Not tainted syzkaller #0 PREEMPT(full) [ 217.674228][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.674239][T10907] Call Trace: [ 217.674246][T10907] [ 217.674254][T10907] dump_stack_lvl+0x189/0x250 [ 217.674284][T10907] ? __pfx____ratelimit+0x10/0x10 [ 217.674310][T10907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.674333][T10907] ? __pfx__printk+0x10/0x10 [ 217.674360][T10907] ? __pfx___might_resched+0x10/0x10 [ 217.674381][T10907] ? fs_reclaim_acquire+0x7d/0x100 [ 217.674416][T10907] should_fail_ex+0x414/0x560 [ 217.674451][T10907] should_failslab+0xa8/0x100 [ 217.674473][T10907] __kvmalloc_node_noprof+0x158/0x910 [ 217.674503][T10907] ? alloc_netdev_mqs+0xa6/0x11b0 [ 217.674536][T10907] alloc_netdev_mqs+0xa6/0x11b0 [ 217.674557][T10907] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 217.674576][T10907] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 217.674607][T10907] rtnl_create_link+0x31f/0xd10 [ 217.674639][T10907] rtnl_newlink_create+0x25c/0xb00 [ 217.674666][T10907] ? __mutex_lock+0x5bb/0x1350 [ 217.674699][T10907] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 217.674722][T10907] ? __pfx___mutex_lock+0x10/0x10 [ 217.674759][T10907] ? ns_capable+0x8a/0xf0 [ 217.674784][T10907] rtnl_newlink+0x16e4/0x1c80 [ 217.674814][T10907] ? netlink_deliver_tap+0x19c/0x1b0 [ 217.674847][T10907] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.674906][T10907] ? kasan_quarantine_put+0xdd/0x220 [ 217.674931][T10907] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.674963][T10907] ? nlmon_xmit+0xb0/0x100 [ 217.674983][T10907] ? kmem_cache_free+0x19b/0x690 [ 217.675029][T10907] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.675050][T10907] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.675078][T10907] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.675098][T10907] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 217.675123][T10907] ? __dev_queue_xmit+0x27b/0x3b50 [ 217.675147][T10907] ? __dev_queue_xmit+0x27b/0x3b50 [ 217.675166][T10907] ? __dev_queue_xmit+0x27b/0x3b50 [ 217.675189][T10907] ? __dev_queue_xmit+0x1d79/0x3b50 [ 217.675208][T10907] ? kasan_save_track+0x3e/0x80 [ 217.675231][T10907] ? __kasan_slab_alloc+0x6c/0x80 [ 217.675263][T10907] ? __lock_acquire+0xab9/0xd20 [ 217.675314][T10907] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.675341][T10907] rtnetlink_rcv_msg+0x7cf/0xb70 [ 217.675372][T10907] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 217.675397][T10907] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.675421][T10907] ? ref_tracker_free+0x63a/0x7d0 [ 217.675441][T10907] ? __asan_memcpy+0x40/0x70 [ 217.675464][T10907] ? __pfx_ref_tracker_free+0x10/0x10 [ 217.675497][T10907] netlink_rcv_skb+0x208/0x470 [ 217.675518][T10907] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.675548][T10907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.675581][T10907] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.675611][T10907] netlink_unicast+0x82f/0x9e0 [ 217.675649][T10907] ? __pfx_netlink_unicast+0x10/0x10 [ 217.675678][T10907] ? netlink_sendmsg+0x642/0xb30 [ 217.675694][T10907] ? skb_put+0x11b/0x210 [ 217.675718][T10907] netlink_sendmsg+0x805/0xb30 [ 217.675748][T10907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.675772][T10907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.675803][T10907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.675821][T10907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.675841][T10907] __sock_sendmsg+0x21c/0x270 [ 217.675872][T10907] ____sys_sendmsg+0x505/0x830 [ 217.675900][T10907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.675932][T10907] ? import_iovec+0x74/0xa0 [ 217.675961][T10907] ___sys_sendmsg+0x21f/0x2a0 [ 217.675994][T10907] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.676063][T10907] ? __fget_files+0x2a/0x420 [ 217.676080][T10907] ? __fget_files+0x3a0/0x420 [ 217.676111][T10907] __x64_sys_sendmsg+0x19b/0x260 [ 217.676137][T10907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.676169][T10907] ? __pfx_ksys_write+0x10/0x10 [ 217.676200][T10907] ? do_syscall_64+0xbe/0xfa0 [ 217.676232][T10907] do_syscall_64+0xfa/0xfa0 [ 217.676257][T10907] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.676282][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.676301][T10907] ? clear_bhb_loop+0x60/0xb0 [ 217.676325][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.676344][T10907] RIP: 0033:0x7f016a78f6c9 [ 217.676363][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.676378][T10907] RSP: 002b:00007f016b5d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.676400][T10907] RAX: ffffffffffffffda RBX: 00007f016a9e6090 RCX: 00007f016a78f6c9 [ 217.676414][T10907] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 217.676426][T10907] RBP: 00007f016b5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 217.676444][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.676456][T10907] R13: 00007f016a9e6128 R14: 00007f016a9e6090 R15: 00007ffdd0ca2098 [ 217.676493][T10907] [ 218.190808][T10917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1293'. [ 218.256967][T10912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 218.573765][T10933] tipc: Started in network mode [ 218.634551][T10933] tipc: Node identity b6230a3dd1ae, cluster identity 4711 [ 218.685614][T10933] tipc: Enabled bearer , priority 0 [ 218.855656][T10933] tipc: Disabling bearer [ 219.254378][T10975] FAULT_INJECTION: forcing a failure. [ 219.254378][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 219.297167][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.5.1306 Not tainted syzkaller #0 PREEMPT(full) [ 219.297196][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.297208][T10975] Call Trace: [ 219.297216][T10975] [ 219.297225][T10975] dump_stack_lvl+0x189/0x250 [ 219.297258][T10975] ? __pfx____ratelimit+0x10/0x10 [ 219.297286][T10975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.297312][T10975] ? __pfx__printk+0x10/0x10 [ 219.297340][T10975] ? __pfx___might_resched+0x10/0x10 [ 219.297368][T10975] should_fail_ex+0x414/0x560 [ 219.297404][T10975] should_failslab+0xa8/0x100 [ 219.297426][T10975] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 219.297454][T10975] ? __d_alloc+0x36/0x7a0 [ 219.297483][T10975] __d_alloc+0x36/0x7a0 [ 219.297513][T10975] d_alloc_parallel+0xe1/0x1610 [ 219.297536][T10975] ? __lock_acquire+0xab9/0xd20 [ 219.297570][T10975] ? __lock_acquire+0xab9/0xd20 [ 219.297597][T10975] ? __pfx_d_alloc_parallel+0x10/0x10 [ 219.297627][T10975] ? __raw_spin_lock_init+0x45/0x100 [ 219.297656][T10975] ? __init_waitqueue_head+0xa9/0x150 [ 219.297688][T10975] __lookup_slow+0x116/0x3d0 [ 219.297715][T10975] ? __pfx___lookup_slow+0x10/0x10 [ 219.297751][T10975] ? d_lookup+0x8a/0xa0 [ 219.297774][T10975] ? lookup_noperm+0x112/0x220 [ 219.297800][T10975] simple_start_creating+0xfd/0x1e0 [ 219.297820][T10975] ? __pfx_simple_start_creating+0x10/0x10 [ 219.297853][T10975] debugfs_start_creating+0x10f/0x180 [ 219.297881][T10975] __debugfs_create_file+0x79/0x4f0 [ 219.297914][T10975] debugfs_create_file_full+0x3f/0x60 [ 219.297945][T10975] ref_tracker_dir_debugfs+0x14e/0x270 [ 219.297966][T10975] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 219.298022][T10975] ? trace_kmalloc+0x1f/0xd0 [ 219.298053][T10975] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 219.298093][T10975] ? __raw_spin_lock_init+0x45/0x100 [ 219.298123][T10975] alloc_netdev_mqs+0x272/0x11b0 [ 219.298147][T10975] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 219.298176][T10975] rtnl_create_link+0x31f/0xd10 [ 219.298210][T10975] rtnl_newlink_create+0x25c/0xb00 [ 219.298238][T10975] ? __lock_acquire+0xab9/0xd20 [ 219.298264][T10975] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 219.298289][T10975] ? __pfx___mutex_lock+0x10/0x10 [ 219.298331][T10975] ? ns_capable+0x8a/0xf0 [ 219.298358][T10975] rtnl_newlink+0x16e4/0x1c80 [ 219.298389][T10975] ? netlink_deliver_tap+0x19c/0x1b0 [ 219.298424][T10975] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.298485][T10975] ? kasan_quarantine_put+0xdd/0x220 [ 219.298512][T10975] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.298546][T10975] ? nlmon_xmit+0xb0/0x100 [ 219.298568][T10975] ? kmem_cache_free+0x19b/0x690 [ 219.298607][T10975] ? __local_bh_enable_ip+0x12d/0x1c0 [ 219.298629][T10975] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.298657][T10975] ? __local_bh_enable_ip+0x12d/0x1c0 [ 219.298677][T10975] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.298704][T10975] ? __dev_queue_xmit+0x27b/0x3b50 [ 219.298726][T10975] ? __dev_queue_xmit+0x27b/0x3b50 [ 219.298747][T10975] ? __dev_queue_xmit+0x27b/0x3b50 [ 219.298771][T10975] ? __dev_queue_xmit+0x1d79/0x3b50 [ 219.298791][T10975] ? kasan_save_track+0x3e/0x80 [ 219.298814][T10975] ? __kasan_slab_alloc+0x6c/0x80 [ 219.298846][T10975] ? __lock_acquire+0xab9/0xd20 [ 219.298899][T10975] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.298925][T10975] rtnetlink_rcv_msg+0x7cf/0xb70 [ 219.298957][T10975] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 219.298984][T10975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.299007][T10975] ? ref_tracker_free+0x63a/0x7d0 [ 219.299027][T10975] ? __asan_memcpy+0x40/0x70 [ 219.299056][T10975] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.299090][T10975] netlink_rcv_skb+0x208/0x470 [ 219.299110][T10975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.299138][T10975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.299170][T10975] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.299197][T10975] netlink_unicast+0x82f/0x9e0 [ 219.299234][T10975] ? __pfx_netlink_unicast+0x10/0x10 [ 219.299263][T10975] ? netlink_sendmsg+0x642/0xb30 [ 219.299280][T10975] ? skb_put+0x11b/0x210 [ 219.299303][T10975] netlink_sendmsg+0x805/0xb30 [ 219.299335][T10975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.299358][T10975] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.299387][T10975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.299405][T10975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.299426][T10975] __sock_sendmsg+0x21c/0x270 [ 219.299455][T10975] ____sys_sendmsg+0x505/0x830 [ 219.299484][T10975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.299515][T10975] ? import_iovec+0x74/0xa0 [ 219.299543][T10975] ___sys_sendmsg+0x21f/0x2a0 [ 219.299568][T10975] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.299635][T10975] ? __fget_files+0x2a/0x420 [ 219.299653][T10975] ? __fget_files+0x3a0/0x420 [ 219.299685][T10975] __x64_sys_sendmsg+0x19b/0x260 [ 219.299710][T10975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.299744][T10975] ? __pfx_ksys_write+0x10/0x10 [ 219.299776][T10975] ? do_syscall_64+0xbe/0xfa0 [ 219.299808][T10975] do_syscall_64+0xfa/0xfa0 [ 219.299831][T10975] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.299857][T10975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.299875][T10975] ? clear_bhb_loop+0x60/0xb0 [ 219.299899][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.299917][T10975] RIP: 0033:0x7f66cf38f6c9 [ 219.299936][T10975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.299952][T10975] RSP: 002b:00007f66d01c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.299974][T10975] RAX: ffffffffffffffda RBX: 00007f66cf5e5fa0 RCX: 00007f66cf38f6c9 [ 219.299989][T10975] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 219.300001][T10975] RBP: 00007f66d01c5090 R08: 0000000000000000 R09: 0000000000000000 [ 219.300013][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.300025][T10975] R13: 00007f66cf5e6038 R14: 00007f66cf5e5fa0 R15: 00007ffcd5837768 [ 219.300070][T10975] [ 220.129555][T10989] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 220.137604][T10989] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 220.210175][T10989] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 220.309755][T10993] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 220.657308][T11023] !: renamed from dummy0 (while UP) [ 220.682335][T11025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 220.792335][T11022] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1317'. [ 220.884836][T11038] FAULT_INJECTION: forcing a failure. [ 220.884836][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 220.901014][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.6.1320 Not tainted syzkaller #0 PREEMPT(full) [ 220.901051][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.901062][T11038] Call Trace: [ 220.901070][T11038] [ 220.901078][T11038] dump_stack_lvl+0x189/0x250 [ 220.901109][T11038] ? __pfx____ratelimit+0x10/0x10 [ 220.901135][T11038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.901161][T11038] ? __pfx__printk+0x10/0x10 [ 220.901188][T11038] ? __pfx___might_resched+0x10/0x10 [ 220.901208][T11038] ? fs_reclaim_acquire+0x7d/0x100 [ 220.901241][T11038] should_fail_ex+0x414/0x560 [ 220.901275][T11038] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 220.901304][T11038] should_failslab+0xa8/0x100 [ 220.901325][T11038] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 220.901350][T11038] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 220.901376][T11038] ? alloc_inode+0x6a/0x1b0 [ 220.901402][T11038] ? __pfx_simple_start_creating+0x10/0x10 [ 220.901426][T11038] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 220.901451][T11038] alloc_inode+0x6a/0x1b0 [ 220.901480][T11038] new_inode+0x22/0x170 [ 220.901505][T11038] __debugfs_create_file+0x14d/0x4f0 [ 220.901539][T11038] debugfs_create_file_full+0x3f/0x60 [ 220.901572][T11038] ref_tracker_dir_debugfs+0x14e/0x270 [ 220.901591][T11038] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 220.901647][T11038] ? trace_kmalloc+0x1f/0xd0 [ 220.901668][T11038] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 220.901700][T11038] ? __raw_spin_lock_init+0x45/0x100 [ 220.901728][T11038] alloc_netdev_mqs+0x272/0x11b0 [ 220.901751][T11038] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 220.901779][T11038] rtnl_create_link+0x31f/0xd10 [ 220.901811][T11038] rtnl_newlink_create+0x25c/0xb00 [ 220.901836][T11038] ? __lock_acquire+0xab9/0xd20 [ 220.901861][T11038] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 220.901883][T11038] ? __pfx___mutex_lock+0x10/0x10 [ 220.901922][T11038] ? ns_capable+0x8a/0xf0 [ 220.901947][T11038] rtnl_newlink+0x16e4/0x1c80 [ 220.901974][T11038] ? netlink_deliver_tap+0x19c/0x1b0 [ 220.901997][T11038] ? __pfx_rtnl_newlink+0x10/0x10 [ 220.902036][T11038] ? kasan_quarantine_put+0xdd/0x220 [ 220.902052][T11038] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.902071][T11038] ? nlmon_xmit+0xb0/0x100 [ 220.902083][T11038] ? kmem_cache_free+0x19b/0x690 [ 220.902105][T11038] ? __local_bh_enable_ip+0x12d/0x1c0 [ 220.902118][T11038] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.902134][T11038] ? __local_bh_enable_ip+0x12d/0x1c0 [ 220.902145][T11038] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 220.902160][T11038] ? __dev_queue_xmit+0x27b/0x3b50 [ 220.902173][T11038] ? __dev_queue_xmit+0x27b/0x3b50 [ 220.902184][T11038] ? __dev_queue_xmit+0x27b/0x3b50 [ 220.902197][T11038] ? __dev_queue_xmit+0x1d79/0x3b50 [ 220.902208][T11038] ? kasan_save_track+0x3e/0x80 [ 220.902222][T11038] ? __kasan_slab_alloc+0x6c/0x80 [ 220.902240][T11038] ? __lock_acquire+0xab9/0xd20 [ 220.902269][T11038] ? __pfx_rtnl_newlink+0x10/0x10 [ 220.902284][T11038] rtnetlink_rcv_msg+0x7cf/0xb70 [ 220.902303][T11038] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 220.902318][T11038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.902332][T11038] ? ref_tracker_free+0x63a/0x7d0 [ 220.902343][T11038] ? __asan_memcpy+0x40/0x70 [ 220.902356][T11038] ? __pfx_ref_tracker_free+0x10/0x10 [ 220.902375][T11038] netlink_rcv_skb+0x208/0x470 [ 220.902387][T11038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.902404][T11038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.902423][T11038] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.902440][T11038] netlink_unicast+0x82f/0x9e0 [ 220.902462][T11038] ? __pfx_netlink_unicast+0x10/0x10 [ 220.902479][T11038] ? netlink_sendmsg+0x642/0xb30 [ 220.902488][T11038] ? skb_put+0x11b/0x210 [ 220.902502][T11038] netlink_sendmsg+0x805/0xb30 [ 220.902524][T11038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.902545][T11038] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.902574][T11038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.902591][T11038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.902610][T11038] __sock_sendmsg+0x21c/0x270 [ 220.902639][T11038] ____sys_sendmsg+0x505/0x830 [ 220.902667][T11038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.902699][T11038] ? import_iovec+0x74/0xa0 [ 220.902728][T11038] ___sys_sendmsg+0x21f/0x2a0 [ 220.902751][T11038] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.902817][T11038] ? __fget_files+0x2a/0x420 [ 220.902835][T11038] ? __fget_files+0x3a0/0x420 [ 220.902865][T11038] __x64_sys_sendmsg+0x19b/0x260 [ 220.902890][T11038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.902922][T11038] ? __pfx_ksys_write+0x10/0x10 [ 220.902953][T11038] ? do_syscall_64+0xbe/0xfa0 [ 220.902983][T11038] do_syscall_64+0xfa/0xfa0 [ 220.903006][T11038] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.903038][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.903056][T11038] ? clear_bhb_loop+0x60/0xb0 [ 220.903080][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.903097][T11038] RIP: 0033:0x7fed28f8f6c9 [ 220.903116][T11038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.903131][T11038] RSP: 002b:00007fed29e20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.903152][T11038] RAX: ffffffffffffffda RBX: 00007fed291e5fa0 RCX: 00007fed28f8f6c9 [ 220.903166][T11038] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 220.903177][T11038] RBP: 00007fed29e20090 R08: 0000000000000000 R09: 0000000000000000 [ 220.903189][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.903199][T11038] R13: 00007fed291e6038 R14: 00007fed291e5fa0 R15: 00007ffe362b85d8 [ 220.903235][T11038] [ 221.449780][T11038] debugfs: out of free dentries, can not create file 'netdev@ffff88803097a618' [ 221.611530][T11040] tipc: Started in network mode [ 221.616512][T11040] tipc: Node identity 1e3b0a62b95, cluster identity 4711 [ 221.623901][T11040] tipc: Enabled bearer , priority 0 [ 221.645364][T11040] syzkaller0: entered promiscuous mode [ 221.704133][T11040] syzkaller0: entered allmulticast mode [ 221.846026][T11060] netlink: 'syz.2.1322': attribute type 11 has an invalid length. [ 221.862169][T11040] tipc: Resetting bearer [ 221.943791][T11039] tipc: Resetting bearer [ 221.988048][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 222.057874][T11039] tipc: Disabling bearer [ 222.278893][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 222.281798][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.306398][T11076] FAULT_INJECTION: forcing a failure. [ 222.306398][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 222.322192][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.2.1331 Not tainted syzkaller #0 PREEMPT(full) [ 222.322219][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.322230][T11076] Call Trace: [ 222.322237][T11076] [ 222.322246][T11076] dump_stack_lvl+0x189/0x250 [ 222.322279][T11076] ? __pfx____ratelimit+0x10/0x10 [ 222.322305][T11076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.322331][T11076] ? __pfx__printk+0x10/0x10 [ 222.322354][T11076] ? __pfx___might_resched+0x10/0x10 [ 222.322376][T11076] ? fs_reclaim_acquire+0x7d/0x100 [ 222.322411][T11076] should_fail_ex+0x414/0x560 [ 222.322447][T11076] should_failslab+0xa8/0x100 [ 222.322468][T11076] kmem_cache_alloc_noprof+0x74/0x6e0 [ 222.322495][T11076] ? security_inode_alloc+0x39/0x330 [ 222.322531][T11076] security_inode_alloc+0x39/0x330 [ 222.322562][T11076] inode_init_always_gfp+0x9ed/0xdc0 [ 222.322600][T11076] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 222.322628][T11076] alloc_inode+0x82/0x1b0 [ 222.322657][T11076] new_inode+0x22/0x170 [ 222.322682][T11076] __debugfs_create_file+0x14d/0x4f0 [ 222.322715][T11076] debugfs_create_file_full+0x3f/0x60 [ 222.322747][T11076] ref_tracker_dir_debugfs+0x14e/0x270 [ 222.322776][T11076] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 222.322828][T11076] ? trace_kmalloc+0x1f/0xd0 [ 222.322849][T11076] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 222.322883][T11076] ? __raw_spin_lock_init+0x45/0x100 [ 222.322913][T11076] alloc_netdev_mqs+0x272/0x11b0 [ 222.322936][T11076] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 222.322962][T11076] rtnl_create_link+0x31f/0xd10 [ 222.322995][T11076] rtnl_newlink_create+0x25c/0xb00 [ 222.323020][T11076] ? __mutex_lock+0x5bb/0x1350 [ 222.323053][T11076] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 222.323078][T11076] ? __pfx___mutex_lock+0x10/0x10 [ 222.323118][T11076] ? ns_capable+0x8a/0xf0 [ 222.323144][T11076] rtnl_newlink+0x16e4/0x1c80 [ 222.323174][T11076] ? netlink_deliver_tap+0x19c/0x1b0 [ 222.323209][T11076] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.323268][T11076] ? kasan_quarantine_put+0xdd/0x220 [ 222.323293][T11076] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.323327][T11076] ? nlmon_xmit+0xb0/0x100 [ 222.323348][T11076] ? kmem_cache_free+0x19b/0x690 [ 222.323386][T11076] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.323408][T11076] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.323435][T11076] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.323455][T11076] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 222.323481][T11076] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.323504][T11076] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.323524][T11076] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.323548][T11076] ? __dev_queue_xmit+0x1d79/0x3b50 [ 222.323568][T11076] ? kasan_save_track+0x3e/0x80 [ 222.323592][T11076] ? __kasan_slab_alloc+0x6c/0x80 [ 222.323625][T11076] ? __lock_acquire+0xab9/0xd20 [ 222.323677][T11076] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.323704][T11076] rtnetlink_rcv_msg+0x7cf/0xb70 [ 222.323737][T11076] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 222.323773][T11076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.323798][T11076] ? ref_tracker_free+0x63a/0x7d0 [ 222.323824][T11076] ? __asan_memcpy+0x40/0x70 [ 222.323847][T11076] ? __pfx_ref_tracker_free+0x10/0x10 [ 222.323879][T11076] netlink_rcv_skb+0x208/0x470 [ 222.323899][T11076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.323927][T11076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.323960][T11076] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.323990][T11076] netlink_unicast+0x82f/0x9e0 [ 222.324028][T11076] ? __pfx_netlink_unicast+0x10/0x10 [ 222.324058][T11076] ? netlink_sendmsg+0x642/0xb30 [ 222.324074][T11076] ? skb_put+0x11b/0x210 [ 222.324099][T11076] netlink_sendmsg+0x805/0xb30 [ 222.324130][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.324155][T11076] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.324186][T11076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.324205][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.324226][T11076] __sock_sendmsg+0x21c/0x270 [ 222.324256][T11076] ____sys_sendmsg+0x505/0x830 [ 222.324286][T11076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.324320][T11076] ? import_iovec+0x74/0xa0 [ 222.324349][T11076] ___sys_sendmsg+0x21f/0x2a0 [ 222.324374][T11076] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.324444][T11076] ? __fget_files+0x2a/0x420 [ 222.324462][T11076] ? __fget_files+0x3a0/0x420 [ 222.324494][T11076] __x64_sys_sendmsg+0x19b/0x260 [ 222.324519][T11076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.324554][T11076] ? __pfx_ksys_write+0x10/0x10 [ 222.324587][T11076] ? do_syscall_64+0xbe/0xfa0 [ 222.324620][T11076] do_syscall_64+0xfa/0xfa0 [ 222.324645][T11076] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.324670][T11076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.324690][T11076] ? clear_bhb_loop+0x60/0xb0 [ 222.324716][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.324733][T11076] RIP: 0033:0x7f1c8e58f6c9 [ 222.324751][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.324776][T11076] RSP: 002b:00007f1c8f4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.324797][T11076] RAX: ffffffffffffffda RBX: 00007f1c8e7e5fa0 RCX: 00007f1c8e58f6c9 [ 222.324811][T11076] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 222.324823][T11076] RBP: 00007f1c8f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.324835][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.324846][T11076] R13: 00007f1c8e7e6038 R14: 00007f1c8e7e5fa0 R15: 00007ffc50304cf8 [ 222.324884][T11076] [ 222.938707][T11076] debugfs: out of free dentries, can not create file 'netdev@ffff88807b3c2618' [ 223.022213][T11092] sctp: [Deprecated]: syz.0.1336 (pid 11092) Use of int in max_burst socket option. [ 223.022213][T11092] Use struct sctp_assoc_value instead [ 223.051964][T11094] xt_hashlimit: size too large, truncated to 1048576 [ 226.884669][ T5197] udevd[5197]: worker [5884] /devices/virtual/block/nbd0 is taking a long time [ 227.724418][ T95] block nbd1: Possible stuck request ffff8880250b7000: control (read@0,1024B). Runtime 30 seconds [ 227.736847][ T95] block nbd1: Possible stuck request ffff8880250b71c0: control (read@1024,1024B). Runtime 30 seconds [ 227.748013][ T95] block nbd1: Possible stuck request ffff8880250b7380: control (read@2048,1024B). Runtime 30 seconds [ 227.759078][ T95] block nbd1: Possible stuck request ffff8880250b7540: control (read@3072,1024B). Runtime 30 seconds [ 237.327085][ T95] block nbd0: Possible stuck request ffff888025095080: control (read@0,1024B). Runtime 90 seconds [ 237.337870][ T95] block nbd0: Possible stuck request ffff888025095240: control (read@1024,1024B). Runtime 90 seconds [ 237.348901][ T95] block nbd0: Possible stuck request ffff888025095400: control (read@2048,1024B). Runtime 90 seconds [ 237.359900][ T95] block nbd0: Possible stuck request ffff8880250955c0: control (read@3072,1024B). Runtime 90 seconds [ 247.221435][T11112] xt_bpf: check failed: parse error [ 247.228996][T11111] xt_bpf: check failed: parse error [ 247.243102][T11107] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 247.414498][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.422542][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.430554][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.438541][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.446565][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.454541][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.462509][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.470510][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.478605][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.486600][T11117] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.515546][T11118] netlink: 'syz.5.1346': attribute type 1 has an invalid length. [ 247.568257][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 247.579258][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 248.203583][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 248.302153][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1355'. [ 248.341499][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 248.456077][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 248.512476][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 248.525008][T11172] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1359'. [ 248.567197][T11172] unsupported nlmsg_type 40 [ 248.923664][T11195] netlink: 'syz.5.1366': attribute type 10 has an invalid length. [ 248.950770][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 249.039484][T11194] veth1_to_bond: entered allmulticast mode [ 249.050681][T11195] syz_tun: entered promiscuous mode [ 249.080946][T11195] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 249.212879][T11197] bond0: (slave bond_slave_1): Releasing backup interface [ 249.338108][T11197] veth1_to_bond (unregistering): left allmulticast mode [ 249.429191][T11217] veth0_to_team: left promiscuous mode [ 249.552674][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1375'. [ 250.116738][T11245] syzkaller1: entered promiscuous mode [ 250.122279][T11245] syzkaller1: entered allmulticast mode [ 250.236923][T11262] smc: net device gre0 applied user defined pnetid SYZ1 [ 250.249972][T11265] smc: net device gre0 erased user defined pnetid SYZ1 [ 250.560638][T11280] ipt_REJECT: ECHOREPLY no longer supported. [ 250.780366][T11293] netdevsim netdevsim5: Direct firmware load for /. failed with error -2 [ 250.821829][T11293] netdevsim netdevsim5: Falling back to sysfs fallback for: /. [ 250.863102][T11297] netlink: 'syz.5.1395': attribute type 9 has an invalid length. [ 250.882887][T11297] netlink: 'syz.5.1395': attribute type 6 has an invalid length. [ 251.424765][T11326] veth0: entered promiscuous mode [ 251.455005][T11327] !: renamed from bond_slave_0 (while UP) [ 251.477806][T11322] veth0: left promiscuous mode [ 251.841380][T11344] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 251.921554][T11347] netlink: 'syz.2.1415': attribute type 30 has an invalid length. [ 252.007747][T11347] bond5: option arp_missed_max: invalid value (0) [ 252.015572][T11347] bond5: option arp_missed_max: allowed values 1 - 255 [ 252.028794][T11347] bond5 (unregistering): Released all slaves [ 252.061911][T11353] pim6reg1: entered promiscuous mode [ 252.080073][T11353] pim6reg1: entered allmulticast mode [ 252.117633][T11357] 8021q: VLANs not supported on ip6tnl0 [ 252.243279][T11360] veth3: entered promiscuous mode [ 252.321670][T11361] veth3: entered promiscuous mode [ 252.483598][T11375] netlink: 'syz.6.1420': attribute type 1 has an invalid length. [ 252.615872][T11383] __nla_validate_parse: 10 callbacks suppressed [ 252.615890][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'. [ 252.643743][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1422'. [ 252.931873][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 253.261074][T11408] syzkaller0: entered promiscuous mode [ 253.274996][T11408] syzkaller0: entered allmulticast mode [ 253.300573][T11413] lo: entered promiscuous mode [ 253.326441][T11413] net_ratelimit: 46 callbacks suppressed [ 253.326467][T11413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.364431][T11417] netlink: 'syz.6.1432': attribute type 32 has an invalid length. [ 253.372301][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1432'. [ 253.426765][T11417] bond1: option coupled_control: invalid value (6) [ 253.436285][T11417] bond1 (unregistering): Released all slaves [ 253.867851][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 254.013161][T11445] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 254.042224][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'. [ 254.053392][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 254.074230][T11449] netlink: 'syz.1.1441': attribute type 6 has an invalid length. [ 254.087152][T11449] netlink: 'syz.1.1441': attribute type 6 has an invalid length. [ 254.099178][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.139516][T11451] FAULT_INJECTION: forcing a failure. [ 254.139516][T11451] name failslab, interval 1, probability 0, space 0, times 0 [ 254.177872][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(full) [ 254.177901][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.177913][T11451] Call Trace: [ 254.177921][T11451] [ 254.177929][T11451] dump_stack_lvl+0x189/0x250 [ 254.177963][T11451] ? __pfx____ratelimit+0x10/0x10 [ 254.177989][T11451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.178016][T11451] ? __pfx__printk+0x10/0x10 [ 254.178045][T11451] ? __pfx___might_resched+0x10/0x10 [ 254.178074][T11451] should_fail_ex+0x414/0x560 [ 254.178110][T11451] should_failslab+0xa8/0x100 [ 254.178133][T11451] __kmalloc_cache_noprof+0x6f/0x6f0 [ 254.178160][T11451] ? __asan_memset+0x22/0x50 [ 254.178182][T11451] ? alloc_netdev_mqs+0xb97/0x11b0 [ 254.178206][T11451] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 254.178233][T11451] alloc_netdev_mqs+0xb97/0x11b0 [ 254.178266][T11451] rtnl_create_link+0x31f/0xd10 [ 254.178299][T11451] rtnl_newlink_create+0x25c/0xb00 [ 254.178325][T11451] ? __lock_acquire+0xab9/0xd20 [ 254.178350][T11451] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 254.178374][T11451] ? __pfx___mutex_lock+0x10/0x10 [ 254.178414][T11451] ? ns_capable+0x8a/0xf0 [ 254.178440][T11451] rtnl_newlink+0x16e4/0x1c80 [ 254.178469][T11451] ? netlink_deliver_tap+0x19c/0x1b0 [ 254.178505][T11451] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.178567][T11451] ? kasan_quarantine_put+0xdd/0x220 [ 254.178593][T11451] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.178628][T11451] ? nlmon_xmit+0xb0/0x100 [ 254.178658][T11451] ? kmem_cache_free+0x19b/0x690 [ 254.178698][T11451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 254.178719][T11451] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.178748][T11451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 254.178768][T11451] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 254.178795][T11451] ? __dev_queue_xmit+0x27b/0x3b50 [ 254.178819][T11451] ? __dev_queue_xmit+0x27b/0x3b50 [ 254.178839][T11451] ? __dev_queue_xmit+0x27b/0x3b50 [ 254.178863][T11451] ? __dev_queue_xmit+0x1d79/0x3b50 [ 254.178882][T11451] ? kasan_save_track+0x3e/0x80 [ 254.178907][T11451] ? __kasan_slab_alloc+0x6c/0x80 [ 254.178940][T11451] ? __lock_acquire+0xab9/0xd20 [ 254.178993][T11451] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.179021][T11451] rtnetlink_rcv_msg+0x7cf/0xb70 [ 254.179055][T11451] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 254.179082][T11451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.179107][T11451] ? ref_tracker_free+0x63a/0x7d0 [ 254.179128][T11451] ? __asan_memcpy+0x40/0x70 [ 254.179152][T11451] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.179186][T11451] netlink_rcv_skb+0x208/0x470 [ 254.179208][T11451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.179239][T11451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.179274][T11451] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.179305][T11451] netlink_unicast+0x82f/0x9e0 [ 254.179344][T11451] ? __pfx_netlink_unicast+0x10/0x10 [ 254.179375][T11451] ? netlink_sendmsg+0x642/0xb30 [ 254.179392][T11451] ? skb_put+0x11b/0x210 [ 254.179414][T11451] netlink_sendmsg+0x805/0xb30 [ 254.179445][T11451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.179488][T11451] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.179518][T11451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.179538][T11451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.179558][T11451] __sock_sendmsg+0x21c/0x270 [ 254.179590][T11451] ____sys_sendmsg+0x505/0x830 [ 254.179619][T11451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.179661][T11451] ? import_iovec+0x74/0xa0 [ 254.179691][T11451] ___sys_sendmsg+0x21f/0x2a0 [ 254.179716][T11451] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.179786][T11451] ? __fget_files+0x2a/0x420 [ 254.179805][T11451] ? __fget_files+0x3a0/0x420 [ 254.179837][T11451] __x64_sys_sendmsg+0x19b/0x260 [ 254.179863][T11451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.179897][T11451] ? __pfx_ksys_write+0x10/0x10 [ 254.179931][T11451] ? do_syscall_64+0xbe/0xfa0 [ 254.179963][T11451] do_syscall_64+0xfa/0xfa0 [ 254.179987][T11451] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.180013][T11451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.180033][T11451] ? clear_bhb_loop+0x60/0xb0 [ 254.180058][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.180076][T11451] RIP: 0033:0x7f1c8e58f6c9 [ 254.180095][T11451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.180111][T11451] RSP: 002b:00007f1c8f4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.180134][T11451] RAX: ffffffffffffffda RBX: 00007f1c8e7e5fa0 RCX: 00007f1c8e58f6c9 [ 254.180149][T11451] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 254.180161][T11451] RBP: 00007f1c8f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.180173][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.180185][T11451] R13: 00007f1c8e7e6038 R14: 00007f1c8e7e5fa0 R15: 00007ffc50304cf8 [ 254.180222][T11451] [ 254.811853][ T30] audit: type=1107 audit(1763027950.828:3): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.812271][ T30] audit: type=1107 audit(1763027950.828:4): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 255.026905][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1448'. [ 255.145322][T11475] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.312922][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 255.502294][T11505] FAULT_INJECTION: forcing a failure. [ 255.502294][T11505] name failslab, interval 1, probability 0, space 0, times 0 [ 255.515629][T11505] CPU: 1 UID: 0 PID: 11505 Comm: syz.5.1456 Not tainted syzkaller #0 PREEMPT(full) [ 255.515656][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.515668][T11505] Call Trace: [ 255.515677][T11505] [ 255.515685][T11505] dump_stack_lvl+0x189/0x250 [ 255.515718][T11505] ? __pfx____ratelimit+0x10/0x10 [ 255.515745][T11505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.515771][T11505] ? __pfx__printk+0x10/0x10 [ 255.515800][T11505] ? __pfx___might_resched+0x10/0x10 [ 255.515828][T11505] should_fail_ex+0x414/0x560 [ 255.515863][T11505] should_failslab+0xa8/0x100 [ 255.515887][T11505] __kmalloc_cache_noprof+0x6f/0x6f0 [ 255.515914][T11505] ? __asan_memset+0x22/0x50 [ 255.515936][T11505] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 255.515968][T11505] alloc_netdev_mqs+0xbf8/0x11b0 [ 255.516002][T11505] rtnl_create_link+0x31f/0xd10 [ 255.516036][T11505] rtnl_newlink_create+0x25c/0xb00 [ 255.516063][T11505] ? __lock_acquire+0xab9/0xd20 [ 255.516090][T11505] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 255.516116][T11505] ? __pfx___mutex_lock+0x10/0x10 [ 255.516157][T11505] ? ns_capable+0x8a/0xf0 [ 255.516184][T11505] rtnl_newlink+0x16e4/0x1c80 [ 255.516221][T11505] ? netlink_deliver_tap+0x19c/0x1b0 [ 255.516256][T11505] ? __pfx_rtnl_newlink+0x10/0x10 [ 255.516318][T11505] ? kasan_quarantine_put+0xdd/0x220 [ 255.516343][T11505] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.516387][T11505] ? nlmon_xmit+0xb0/0x100 [ 255.516408][T11505] ? kmem_cache_free+0x19b/0x690 [ 255.516448][T11505] ? __local_bh_enable_ip+0x12d/0x1c0 [ 255.516470][T11505] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.516498][T11505] ? __local_bh_enable_ip+0x12d/0x1c0 [ 255.516519][T11505] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.516544][T11505] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.516567][T11505] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.516587][T11505] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.516609][T11505] ? __dev_queue_xmit+0x1d79/0x3b50 [ 255.516628][T11505] ? kasan_save_track+0x3e/0x80 [ 255.516651][T11505] ? __kasan_slab_alloc+0x6c/0x80 [ 255.516683][T11505] ? __lock_acquire+0xab9/0xd20 [ 255.516731][T11505] ? __pfx_rtnl_newlink+0x10/0x10 [ 255.516758][T11505] rtnetlink_rcv_msg+0x7cf/0xb70 [ 255.516789][T11505] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 255.516815][T11505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.516839][T11505] ? ref_tracker_free+0x63a/0x7d0 [ 255.516858][T11505] ? __asan_memcpy+0x40/0x70 [ 255.516881][T11505] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.516915][T11505] netlink_rcv_skb+0x208/0x470 [ 255.516935][T11505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.516965][T11505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.517000][T11505] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.517030][T11505] netlink_unicast+0x82f/0x9e0 [ 255.517069][T11505] ? __pfx_netlink_unicast+0x10/0x10 [ 255.517099][T11505] ? netlink_sendmsg+0x642/0xb30 [ 255.517116][T11505] ? skb_put+0x11b/0x210 [ 255.517139][T11505] netlink_sendmsg+0x805/0xb30 [ 255.517169][T11505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.517193][T11505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.517224][T11505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.517244][T11505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.517266][T11505] __sock_sendmsg+0x21c/0x270 [ 255.517297][T11505] ____sys_sendmsg+0x505/0x830 [ 255.517327][T11505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.517370][T11505] ? import_iovec+0x74/0xa0 [ 255.517401][T11505] ___sys_sendmsg+0x21f/0x2a0 [ 255.517426][T11505] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.517496][T11505] ? __fget_files+0x2a/0x420 [ 255.517514][T11505] ? __fget_files+0x3a0/0x420 [ 255.517547][T11505] __x64_sys_sendmsg+0x19b/0x260 [ 255.517571][T11505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.517604][T11505] ? __pfx_ksys_write+0x10/0x10 [ 255.517637][T11505] ? do_syscall_64+0xbe/0xfa0 [ 255.517667][T11505] do_syscall_64+0xfa/0xfa0 [ 255.517690][T11505] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.517716][T11505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.517734][T11505] ? clear_bhb_loop+0x60/0xb0 [ 255.517759][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.517777][T11505] RIP: 0033:0x7f66cf38f6c9 [ 255.517796][T11505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.517812][T11505] RSP: 002b:00007f66d01c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.517835][T11505] RAX: ffffffffffffffda RBX: 00007f66cf5e5fa0 RCX: 00007f66cf38f6c9 [ 255.517850][T11505] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 255.517863][T11505] RBP: 00007f66d01c5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.517875][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.517886][T11505] R13: 00007f66cf5e6038 R14: 00007f66cf5e5fa0 R15: 00007ffcd5837768 [ 255.517924][T11505] [ 255.989352][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.999895][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.419562][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 256.553307][T11526] syzkaller0: entered promiscuous mode [ 256.567031][T11526] syzkaller0: entered allmulticast mode [ 257.816827][ T95] block nbd1: Possible stuck request ffff8880250b7000: control (read@0,1024B). Runtime 60 seconds [ 257.827714][ T95] block nbd1: Possible stuck request ffff8880250b71c0: control (read@1024,1024B). Runtime 60 seconds [ 257.838818][ T95] block nbd1: Possible stuck request ffff8880250b7380: control (read@2048,1024B). Runtime 60 seconds [ 257.851759][ T95] block nbd1: Possible stuck request ffff8880250b7540: control (read@3072,1024B). Runtime 60 seconds [ 258.583687][T11587] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 258.657485][T11590] __nla_validate_parse: 3 callbacks suppressed [ 258.657505][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 258.781556][T11602] netlink: 'syz.1.1480': attribute type 19 has an invalid length. [ 258.790007][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 258.798119][T11604] syzkaller0: entered promiscuous mode [ 258.820388][T11604] syzkaller0: entered allmulticast mode [ 258.826695][T11602] netlink: 'syz.1.1480': attribute type 19 has an invalid length. [ 258.837644][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 258.897998][T11608] netem: change failed [ 259.027872][T11615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.183668][T11626] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1487'. [ 259.239508][T11632] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1487'. [ 259.351664][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1489'. [ 259.391817][T11645] FAULT_INJECTION: forcing a failure. [ 259.391817][T11645] name failslab, interval 1, probability 0, space 0, times 0 [ 259.412563][T11645] CPU: 0 UID: 0 PID: 11645 Comm: syz.1.1493 Not tainted syzkaller #0 PREEMPT(full) [ 259.412590][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.412599][T11645] Call Trace: [ 259.412605][T11645] [ 259.412612][T11645] dump_stack_lvl+0x189/0x250 [ 259.412639][T11645] ? __pfx____ratelimit+0x10/0x10 [ 259.412660][T11645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.412681][T11645] ? __pfx__printk+0x10/0x10 [ 259.412703][T11645] ? __pfx___might_resched+0x10/0x10 [ 259.412719][T11645] ? fs_reclaim_acquire+0x7d/0x100 [ 259.412746][T11645] should_fail_ex+0x414/0x560 [ 259.412772][T11645] should_failslab+0xa8/0x100 [ 259.412789][T11645] __kvmalloc_node_noprof+0x158/0x910 [ 259.412811][T11645] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 259.412830][T11645] ? alloc_netdev_mqs+0xc89/0x11b0 [ 259.412847][T11645] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 259.412871][T11645] alloc_netdev_mqs+0xc89/0x11b0 [ 259.412895][T11645] rtnl_create_link+0x31f/0xd10 [ 259.412926][T11645] rtnl_newlink_create+0x25c/0xb00 [ 259.412946][T11645] ? __lock_acquire+0xab9/0xd20 [ 259.412966][T11645] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 259.412985][T11645] ? __pfx___mutex_lock+0x10/0x10 [ 259.413016][T11645] ? ns_capable+0x8a/0xf0 [ 259.413037][T11645] rtnl_newlink+0x16e4/0x1c80 [ 259.413060][T11645] ? netlink_deliver_tap+0x19c/0x1b0 [ 259.413086][T11645] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.413132][T11645] ? kasan_quarantine_put+0xdd/0x220 [ 259.413152][T11645] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.413178][T11645] ? nlmon_xmit+0xb0/0x100 [ 259.413194][T11645] ? kmem_cache_free+0x19b/0x690 [ 259.413224][T11645] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.413240][T11645] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.413261][T11645] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.413276][T11645] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.413295][T11645] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.413313][T11645] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.413328][T11645] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.413346][T11645] ? __dev_queue_xmit+0x1d79/0x3b50 [ 259.413361][T11645] ? kasan_save_track+0x3e/0x80 [ 259.413380][T11645] ? __kasan_slab_alloc+0x6c/0x80 [ 259.413405][T11645] ? __lock_acquire+0xab9/0xd20 [ 259.413450][T11645] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.413471][T11645] rtnetlink_rcv_msg+0x7cf/0xb70 [ 259.413497][T11645] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 259.413517][T11645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.413536][T11645] ? ref_tracker_free+0x63a/0x7d0 [ 259.413552][T11645] ? __asan_memcpy+0x40/0x70 [ 259.413570][T11645] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.413595][T11645] netlink_rcv_skb+0x208/0x470 [ 259.413610][T11645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.413634][T11645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.413660][T11645] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.413683][T11645] netlink_unicast+0x82f/0x9e0 [ 259.413714][T11645] ? __pfx_netlink_unicast+0x10/0x10 [ 259.413737][T11645] ? netlink_sendmsg+0x642/0xb30 [ 259.413749][T11645] ? skb_put+0x11b/0x210 [ 259.413768][T11645] netlink_sendmsg+0x805/0xb30 [ 259.413791][T11645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.413819][T11645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.413848][T11645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.413867][T11645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.413887][T11645] __sock_sendmsg+0x21c/0x270 [ 259.413914][T11645] ____sys_sendmsg+0x505/0x830 [ 259.413942][T11645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.413975][T11645] ? import_iovec+0x74/0xa0 [ 259.414005][T11645] ___sys_sendmsg+0x21f/0x2a0 [ 259.414029][T11645] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.414097][T11645] ? __fget_files+0x2a/0x420 [ 259.414115][T11645] ? __fget_files+0x3a0/0x420 [ 259.414147][T11645] __x64_sys_sendmsg+0x19b/0x260 [ 259.414172][T11645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.414206][T11645] ? __pfx_ksys_write+0x10/0x10 [ 259.414239][T11645] ? do_syscall_64+0xbe/0xfa0 [ 259.414271][T11645] do_syscall_64+0xfa/0xfa0 [ 259.414292][T11645] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.414312][T11645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.414327][T11645] ? clear_bhb_loop+0x60/0xb0 [ 259.414345][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.414359][T11645] RIP: 0033:0x7f070e38f6c9 [ 259.414375][T11645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.414387][T11645] RSP: 002b:00007f070f1d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.414406][T11645] RAX: ffffffffffffffda RBX: 00007f070e5e5fa0 RCX: 00007f070e38f6c9 [ 259.414416][T11645] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 259.414434][T11645] RBP: 00007f070f1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 259.414443][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.414452][T11645] R13: 00007f070e5e6038 R14: 00007f070e5e5fa0 R15: 00007ffe18ef0708 [ 259.414480][T11645] [ 259.633044][T11652] x_tables: unsorted underflow at hook 1 [ 259.892372][T11658] syzkaller1: entered promiscuous mode [ 259.892397][T11658] syzkaller1: entered allmulticast mode [ 259.923065][T11657] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1495'. [ 259.984432][T11657] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1495'. [ 260.029814][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 260.207693][T11672] block nbd0: NBD_DISCONNECT [ 260.212741][T11672] block nbd0: Send disconnect failed -32 [ 260.219552][T11672] block nbd0: shutting down sockets [ 260.243867][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.253301][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.261207][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.270311][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 260.278196][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.287309][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 260.295206][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.304299][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 260.312204][ T5884] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.339643][ T5884] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.347919][ T5884] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.358433][ T5884] Buffer I/O error on dev nbd0, logical block 1, async page read [ 260.364608][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1501'. [ 260.403599][ T5884] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.413226][ T5884] Buffer I/O error on dev nbd0, logical block 2, async page read [ 260.421286][ T5884] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.430441][ T5884] Buffer I/O error on dev nbd0, logical block 3, async page read [ 260.444888][ T5884] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.454373][ T5884] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.462927][ T5884] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.477702][ T5884] Buffer I/O error on dev nbd0, logical block 1, async page read [ 260.489723][T11679] netlink: 'syz.5.1504': attribute type 33 has an invalid length. [ 260.493515][ T5884] ldm_validate_partition_table(): Disk read failed. [ 260.532600][ T5884] Dev nbd0: unable to read RDB block 0 [ 260.542758][ T5884] nbd0: unable to read partition table [ 260.611845][ T5884] ldm_validate_partition_table(): Disk read failed. [ 260.636120][ T5884] Dev nbd0: unable to read RDB block 0 [ 260.662954][ T5884] nbd0: unable to read partition table [ 260.745546][ T5884] udevd[5884]: failed to send result of seq 13476 to main daemon: Connection refused [ 260.763580][T11693] tipc: New replicast peer: 255.255.255.255 [ 260.786605][T11693] tipc: Enabled bearer , priority 10 [ 260.852961][T11703] tipc: Enabled bearer , priority 0 [ 260.870961][T11703] syzkaller0: entered promiscuous mode [ 260.878876][T11703] syzkaller0: entered allmulticast mode [ 260.903774][T11703] tipc: Resetting bearer [ 261.120258][T11718] xt_bpf: check failed: parse error [ 261.167313][T11720] tipc: Failed to remove unknown binding: 66,1,1/0:3218170897/3218170899 [ 261.311040][T11724] syzkaller0: entered promiscuous mode [ 261.317126][T11724] syzkaller0: entered allmulticast mode [ 261.646066][T11698] tipc: Resetting bearer [ 261.687185][T11698] tipc: Disabling bearer [ 261.832355][T11746] tipc: Enabled bearer , priority 0 [ 261.868825][T11746] syzkaller0: entered promiscuous mode [ 261.875347][T11746] syzkaller0: entered allmulticast mode [ 261.892456][T11746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.919028][T11746] tipc: Resetting bearer [ 261.948951][T11745] tipc: Resetting bearer [ 261.983976][T11745] tipc: Disabling bearer [ 262.048970][T11761] syzkaller0: entered promiscuous mode [ 262.054931][T11761] syzkaller0: entered allmulticast mode [ 262.228433][T11772] IPVS: set_ctl: invalid protocol: 102 172.20.20.55:20004 [ 262.263470][ T30] audit: type=1107 audit(1763027958.238:5): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\,aUDb6ܑ_KZLc=9 [Sin`TLo1Ƌ]6s D,ĮFA?=$.VA,`8ʸA>]?Fd?' [ 262.561102][T11795] tipc: Enabled bearer , priority 0 [ 262.579731][T11795] syzkaller0: entered promiscuous mode [ 262.596939][T11795] syzkaller0: entered allmulticast mode [ 262.634941][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 262.690792][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 262.693059][T11795] tipc: Resetting bearer [ 262.736515][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 262.752737][T11794] tipc: Resetting bearer [ 262.826166][T11794] tipc: Disabling bearer [ 262.952018][T11811] xfrm1: entered allmulticast mode [ 263.073613][ T5998] tipc: Node number set to 1737296445 [ 263.079931][T11800] infiniband syz2: set active [ 263.085509][ T5998] vxcan1 speed is unknown, defaulting to 1000 [ 263.091858][T11800] infiniband syz2: added vxcan1 [ 263.196494][T11800] RDS/IB: syz2: added [ 263.200622][T11800] smc: adding ib device syz2 with port count 1 [ 263.207090][T11800] smc: ib device syz2 port 1 has no pnetid [ 263.235400][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 263.243936][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 263.395468][T11831] syzkaller0: entered promiscuous mode [ 263.401018][T11831] syzkaller0: entered allmulticast mode [ 263.447580][T11834] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 263.628923][T11844] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 263.668613][T11843] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 263.686892][T11843] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 263.920582][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 264.056000][T11868] __nla_validate_parse: 14 callbacks suppressed [ 264.056024][T11868] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1564'. [ 264.444922][T11890] sctp: [Deprecated]: syz.0.1570 (pid 11890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.444922][T11890] Use struct sctp_sack_info instead [ 264.560753][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 264.650609][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 264.671906][T11903] netlink: 'syz.5.1575': attribute type 10 has an invalid length. [ 264.708082][T11904] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1572'. [ 264.713080][T11900] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1572'. [ 264.854606][T11911] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1577'. [ 264.947593][T11915] Bluetooth: MGMT ver 1.23 [ 265.075566][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 265.147876][T11927] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1583'. [ 265.243051][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 265.506162][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1588'. [ 265.554506][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1588'. [ 265.562936][T11946] xt_limit: Overflow, try lower: 604147548/4200216962 [ 265.611358][T11942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1588'. [ 265.945375][T11969] veth1_to_bond: entered allmulticast mode [ 265.980651][T11972] xt_hashlimit: size too large, truncated to 1048576 [ 265.996989][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 266.018239][T11976] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.063452][ T5906] C speed is unknown, defaulting to 1000 [ 266.159732][T11968] veth1_to_bond: left allmulticast mode [ 266.943715][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 267.036879][T12028] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 267.259393][T12037] netlink: 'syz.5.1613': attribute type 5 has an invalid length. [ 267.557462][ T9] IPVS: starting estimator thread 0... [ 267.559862][T12049] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.645816][T12055] IPVS: using max 28 ests per chain, 67200 per kthread [ 267.735536][T12056] C speed is unknown, defaulting to 1000 [ 267.791005][T12065] syzkaller0: entered promiscuous mode [ 267.807210][T12065] syzkaller0: entered allmulticast mode [ 267.835463][T12065] netlink: 'syz.6.1622': attribute type 11 has an invalid length. [ 268.707315][T12120] syzkaller0: entered promiscuous mode [ 268.723256][T12120] syzkaller0: entered allmulticast mode [ 269.186674][T12151] __nla_validate_parse: 20 callbacks suppressed [ 269.186696][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 269.220739][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1646'. [ 269.291114][T12158] netlink: 'syz.0.1647': attribute type 9 has an invalid length. [ 269.380630][T12164] netlink: 'syz.5.1648': attribute type 2 has an invalid length. [ 269.582149][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 269.641399][T12181] netlink: 'syz.2.1653': attribute type 33 has an invalid length. [ 269.688392][T12174] netlink: 'syz.0.1651': attribute type 30 has an invalid length. [ 269.696997][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1651'. [ 269.963982][ T5828] Bluetooth: hci2: command tx timeout [ 269.987461][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 270.201378][T12209] syzkaller0: entered promiscuous mode [ 270.222811][T12209] syzkaller0: entered allmulticast mode [ 270.280703][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.317817][T12199] bridge_slave_1: left allmulticast mode [ 270.325083][T12199] bridge_slave_1: left promiscuous mode [ 270.339777][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.393763][T12199] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 270.690233][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 270.701603][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 270.790747][T12200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.798555][T12200] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 270.819457][T12242] netlink: 'syz.6.1668': attribute type 1 has an invalid length. [ 270.839019][T12200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.840619][T12242] netlink: 'syz.6.1668': attribute type 2 has an invalid length. [ 270.854182][T12200] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 270.882073][T12200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.897544][T12200] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 270.897862][T12241] syzkaller0: entered promiscuous mode [ 270.931374][T12241] syzkaller0: entered allmulticast mode [ 271.421501][T12261] batadv_slave_0: entered promiscuous mode [ 271.466239][T12261] batman_adv: batadv0: Adding interface: macsec3 [ 271.473484][T12261] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.504857][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.542194][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.597708][T12261] batman_adv: batadv0: Interface activated: macsec3 [ 271.661479][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1677'. [ 271.876754][T12200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.882733][T12200] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 271.988577][T12200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.024194][T12200] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 272.195991][T12302] netlink: 'syz.6.1683': attribute type 7 has an invalid length. [ 272.447267][T10669] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.484319][T10669] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.519613][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1683'. [ 272.662863][T10669] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.693957][T10669] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.743417][T12322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1686'. [ 272.837230][T12321] Z7nz>RA: renamed from lo (while UP) [ 273.253083][T12341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.431204][T12353] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 273.457003][T12354] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 273.582234][T12354] netlink: 'syz.0.1696': attribute type 3 has an invalid length. [ 273.679461][T12359] syzkaller0: entered promiscuous mode [ 273.688160][T12359] syzkaller0: entered allmulticast mode [ 273.776055][T12368] tipc: Enabled bearer , priority 0 [ 273.854960][T12357] tipc: Resetting bearer [ 275.420999][T12357] tipc: Disabling bearer [ 276.714252][ T9] tipc: Node number set to 2808810082 [ 287.887276][ T95] block nbd1: Possible stuck request ffff8880250b7000: control (read@0,1024B). Runtime 90 seconds [ 287.898283][ T95] block nbd1: Possible stuck request ffff8880250b71c0: control (read@1024,1024B). Runtime 90 seconds [ 287.909339][ T95] block nbd1: Possible stuck request ffff8880250b7380: control (read@2048,1024B). Runtime 90 seconds [ 287.920376][ T95] block nbd1: Possible stuck request ffff8880250b7540: control (read@3072,1024B). Runtime 90 seconds [ 298.078629][T12467] x_tables: duplicate underflow at hook 1 [ 298.131704][T12466] __nla_validate_parse: 3 callbacks suppressed [ 298.131725][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'. [ 298.598100][T12495] netlink: 'syz.0.1716': attribute type 6 has an invalid length. [ 298.700813][T12493] syzkaller1: entered promiscuous mode [ 298.729986][T12493] syzkaller1: entered allmulticast mode [ 298.813162][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1724'. [ 298.909586][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 298.922818][T12524] netlink: 'syz.6.1725': attribute type 12 has an invalid length. [ 298.933768][T12527] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1722'. [ 298.935554][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.005936][T12518] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1722'. [ 299.017257][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.028411][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.043243][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.119937][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.592393][T12571] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 299.717685][T12589] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 299.830672][T12599] tipc: Enabling of bearer rejected, media not registered [ 300.091299][T12607] netlink: 'syz.6.1742': attribute type 2 has an invalid length. [ 300.178031][T12609] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 300.219174][T12609] bond9 (unregistering): Released all slaves [ 300.343033][T12627] netlink: 'syz.6.1747': attribute type 1 has an invalid length. [ 300.533845][T12631] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.540600][T12631] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.565224][T12636] netlink: 'syz.0.1751': attribute type 25 has an invalid length. [ 300.672912][T12641] team0: Device vti0 is of different type [ 300.749647][T12647] netlink: 'syz.1.1754': attribute type 9 has an invalid length. [ 301.080451][T12664] IPVS: set_ctl: invalid protocol: 60 172.20.20.48:20003 [ 301.090264][T12664] IPVS: set_ctl: invalid protocol: 135 172.30.0.7:20003 [ 301.532265][T12695] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 301.559971][T12695] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 301.740563][T12705] C: renamed from lo (while UP) [ 302.654364][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.703443][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.991398][T12724] batman_adv: batadv0: Interface deactivated: macsec3 [ 303.106685][T10668] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.119202][T10668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.152650][T10668] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.171929][T10668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.194728][T10668] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.220031][T10668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.229872][T10668] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.241261][T10668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.473457][T12786] netlink: 'syz.2.1791': attribute type 8 has an invalid length. [ 303.691999][T12800] IPVS: length: 8 != 1152 [ 303.991082][T12819] __nla_validate_parse: 71 callbacks suppressed [ 303.991097][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1801'. [ 304.010051][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1801'. [ 304.239551][T12835] pim6reg: entered allmulticast mode [ 304.394909][T12842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1809'. [ 304.512127][T12847] netlink: 'syz.2.1810': attribute type 10 has an invalid length. [ 304.526749][T12847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1810'. [ 304.556343][T12847] team0: Port device geneve0 added [ 304.567733][T12853] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 304.597277][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1811'. [ 304.671292][T12857] netlink: 'syz.5.1813': attribute type 1 has an invalid length. [ 304.698180][T12856] netlink: 'syz.5.1813': attribute type 1 has an invalid length. [ 304.754870][T12861] netlink: 992 bytes leftover after parsing attributes in process `syz.6.1814'. [ 304.766831][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1813'. [ 304.769431][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'. [ 304.971497][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 305.318404][T12900] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1824'. [ 305.421089][T12908] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.426528][T12909] syzkaller0: entered promiscuous mode [ 305.443905][T12909] syzkaller0: entered allmulticast mode [ 305.726846][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.736406][ T5943] IPVS: starting estimator thread 0... [ 305.742302][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.751389][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.760163][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.768872][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.777579][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.786606][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.796099][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.805531][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.814177][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.822728][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.831452][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.840166][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.848905][T12928] IPVS: using max 28 ests per chain, 67200 per kthread [ 305.856412][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.865119][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.874875][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.883483][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.893226][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.901997][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.910630][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.919196][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.928084][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.936628][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.946287][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.955001][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.964212][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.972694][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.981312][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.989902][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.998440][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 306.007045][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 306.016259][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 306.024801][T12927] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 306.480592][T12959] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 306.489030][T12959] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.568213][T12964] bond0: entered allmulticast mode [ 306.573943][T12964] bond_slave_0: entered allmulticast mode [ 306.605394][T12964] bond_slave_1: entered allmulticast mode [ 306.885522][ T5828] block nbd0: Receive control failed (result -32) [ 307.685834][T13019] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 307.695163][T13019] bond5: option packets_per_slave: allowed values 0 - 65535 [ 307.708493][T13019] bond5 (unregistering): Released all slaves [ 307.866899][T13032] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 307.879749][T13032] bond6 (unregistering): Released all slaves [ 307.915326][T13036] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 307.929626][T13036] bond6 (unregistering): Released all slaves [ 308.601139][T13062] netlink: 'syz.5.1871': attribute type 6 has an invalid length. [ 308.667806][T13068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.105872][T13089] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 309.158757][T13093] __nla_validate_parse: 15 callbacks suppressed [ 309.158778][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 309.189001][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1883'. [ 309.214826][T13095] syzkaller1: entered promiscuous mode [ 309.220477][T13095] syzkaller1: entered allmulticast mode [ 309.957027][T13155] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1896'. [ 310.110509][T13155] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1896'. [ 310.121698][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 310.578167][T13196] netlink: 'syz.6.1911': attribute type 18 has an invalid length. [ 310.624312][T13198] netlink: 'syz.5.1912': attribute type 7 has an invalid length. [ 310.676281][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 310.925254][T13211] bond5: option min_links: invalid value (18446744073709551614) [ 310.933049][T13211] bond5: option min_links: allowed values 0 - 2147483647 [ 310.959355][T13211] bond5 (unregistering): Released all slaves [ 311.454441][T13241] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1926'. [ 311.509717][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 311.901671][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 312.009699][T13270] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1938'. [ 312.025135][T13262] tipc: Enabled bearer , priority 0 [ 312.037369][T13262] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 312.045231][T13262] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 312.170741][T13279] netlink: 'syz.0.1941': attribute type 10 has an invalid length. [ 312.181714][T13279] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 313.163437][T13336] bridge8: entered promiscuous mode [ 313.189623][T13336] bridge8: entered allmulticast mode [ 313.203193][T12768] tipc: Node number set to 3155871638 [ 313.259640][T13336] bridge9: entered promiscuous mode [ 313.265544][T13336] bridge9: entered allmulticast mode [ 313.310474][T13336] bridge10: entered promiscuous mode [ 313.315996][T13336] bridge10: entered allmulticast mode [ 313.334849][T13336] bridge11: entered promiscuous mode [ 313.340283][T13336] bridge11: entered allmulticast mode [ 313.359709][T13336] bridge12: entered promiscuous mode [ 313.365242][T13336] bridge12: entered allmulticast mode [ 313.385647][T13336] bridge13: entered promiscuous mode [ 313.391739][T13336] bridge13: entered allmulticast mode [ 313.421770][T13336] bridge14: entered promiscuous mode [ 313.427707][T13336] bridge14: entered allmulticast mode [ 313.448219][T13336] bridge15: entered promiscuous mode [ 313.453628][T13336] bridge15: entered allmulticast mode [ 313.472199][T13336] bridge16: entered promiscuous mode [ 313.477679][T13336] bridge16: entered allmulticast mode [ 313.499441][T13336] bridge17: entered promiscuous mode [ 313.505309][T13336] bridge17: entered allmulticast mode [ 313.527775][T13336] bridge18: entered promiscuous mode [ 313.533759][T13336] bridge18: entered allmulticast mode [ 313.555392][T13336] bridge19: entered promiscuous mode [ 313.560840][T13336] bridge19: entered allmulticast mode [ 313.583644][T13336] bridge20: entered promiscuous mode [ 313.589228][T13336] bridge20: entered allmulticast mode [ 313.608571][T13336] bridge21: entered promiscuous mode [ 313.614107][T13336] bridge21: entered allmulticast mode [ 313.635012][T13336] bridge22: entered promiscuous mode [ 313.640434][T13336] bridge22: entered allmulticast mode [ 313.660302][T13336] bridge23: entered promiscuous mode [ 313.665854][T13336] bridge23: entered allmulticast mode [ 313.687051][T13336] bridge24: entered promiscuous mode [ 313.692488][T13336] bridge24: entered allmulticast mode [ 313.714257][T13336] bridge25: entered promiscuous mode [ 313.719877][T13336] bridge25: entered allmulticast mode [ 313.740418][T13336] bridge26: entered promiscuous mode [ 313.747133][T13336] bridge26: entered allmulticast mode [ 313.766986][T13336] bridge27: entered promiscuous mode [ 313.772416][T13336] bridge27: entered allmulticast mode [ 313.795041][T13336] bridge28: entered promiscuous mode [ 313.800813][T13336] bridge28: entered allmulticast mode [ 313.821500][T13336] bridge29: entered promiscuous mode [ 313.827028][T13336] bridge29: entered allmulticast mode [ 313.894563][T13336] bridge30: entered promiscuous mode [ 313.899977][T13336] bridge30: entered allmulticast mode [ 313.918651][T13336] bridge31: entered promiscuous mode [ 313.925104][T13336] bridge31: entered allmulticast mode [ 313.939107][T13362] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 313.985487][T13358] syzkaller0: entered promiscuous mode [ 313.991900][T13358] syzkaller0: entered allmulticast mode [ 314.178271][T13358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.190562][T13373] __nla_validate_parse: 8 callbacks suppressed [ 314.190582][T13373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1973'. [ 314.252434][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1973'. [ 314.862545][T13412] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1987'. [ 314.903029][T13413] netlink: 'syz.0.1987': attribute type 12 has an invalid length. [ 315.294394][T13427] netlink: 'syz.5.1991': attribute type 4 has an invalid length. [ 315.320654][T13427] netlink: 'syz.5.1991': attribute type 4 has an invalid length. [ 315.379844][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1994'. [ 315.456283][T13445] Cannot find set identified by id 0 to match [ 315.469340][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1997'. [ 315.551310][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'. [ 315.586178][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 315.638213][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 315.663640][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 315.681342][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2001'. [ 315.697731][T13455] bridge_slave_0: left allmulticast mode [ 315.706673][T13455] bridge_slave_0: left promiscuous mode [ 315.713271][T13455] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.888418][T13470] bond5: entered allmulticast mode [ 315.904655][T13470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.154931][T13487] atomic_op ffff888023dde198 conn xmit_atomic 0000000000000000 [ 316.298459][T13497] tipc: Enabling of bearer rejected, failed to enable media [ 316.642352][T13517] ipt_ECN: cannot use operation on non-tcp rule [ 316.807928][T13524] tipc: Enabled bearer , priority 0 [ 316.820771][T13524] syzkaller0: entered promiscuous mode [ 316.827515][T13524] syzkaller0: entered allmulticast mode [ 316.860214][T13524] tipc: Resetting bearer [ 316.868404][T13523] tipc: Resetting bearer [ 316.902357][T13523] tipc: Disabling bearer [ 317.314448][T13554] bridge0: port 3(vlan2) entered blocking state [ 317.334944][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.344346][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.344467][T13554] bridge0: port 3(vlan2) entered disabled state [ 317.353756][ T30] audit: type=1800 audit(1763028013.338:6): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2027" name="memory.events" dev="tmpfs" ino=2175 res=0 errno=0 [ 317.378004][T13554] vlan2: entered allmulticast mode [ 317.383151][T13554] bridge0: entered allmulticast mode [ 317.392908][T13554] vlan2: left allmulticast mode [ 317.397945][T13554] bridge0: left allmulticast mode [ 317.682758][T13569] xt_TCPMSS: Only works on TCP SYN packets [ 317.694241][T13569] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 317.702108][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.836605][T13573] netlink: 'syz.5.2038': attribute type 15 has an invalid length. [ 317.964965][ T95] block nbd1: Possible stuck request ffff8880250b7000: control (read@0,1024B). Runtime 120 seconds [ 317.976472][ T95] block nbd1: Possible stuck request ffff8880250b71c0: control (read@1024,1024B). Runtime 120 seconds [ 317.987654][ T95] block nbd1: Possible stuck request ffff8880250b7380: control (read@2048,1024B). Runtime 120 seconds [ 318.002342][ T95] block nbd1: Possible stuck request ffff8880250b7540: control (read@3072,1024B). Runtime 120 seconds [ 318.350383][T13603] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 318.379669][T13609] netlink: 'syz.2.2048': attribute type 15 has an invalid length. [ 318.394693][T13609] netlink: 'syz.2.2048': attribute type 10 has an invalid length. [ 318.492710][T13612] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 318.558324][T13612] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.574990][T13612] gretap1: entered promiscuous mode [ 318.581963][T13612] gretap1: entered allmulticast mode [ 318.714402][T13619] C speed is unknown, defaulting to 1000 [ 319.216286][T13647] __nla_validate_parse: 19 callbacks suppressed [ 319.216308][T13647] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2059'. [ 319.292769][T13619] vxcan1 speed is unknown, defaulting to 1000 [ 319.385368][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'. [ 319.385684][T13655] sctp: [Deprecated]: syz.1.2061 (pid 13655) Use of int in max_burst socket option. [ 319.385684][T13655] Use struct sctp_assoc_value instead [ 319.489560][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2063'. [ 319.775986][T13673] IPVS: length: 239 != 24 [ 319.933639][T13681] netlink: 'syz.5.2068': attribute type 4 has an invalid length. [ 320.088084][T13686] openvswitch: netlink: Duplicate or invalid key (type 0). [ 320.103955][T13686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.227188][T13691] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 320.235016][T13691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.247898][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2073'. [ 320.506070][T13691] netlink: 'syz.0.2073': attribute type 2 has an invalid length. [ 320.516690][T13702] syzkaller0: entered promiscuous mode [ 320.530950][T13702] syzkaller0: entered allmulticast mode [ 321.240932][T13733] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2086'. [ 321.591284][T13752] netlink: 'syz.2.2094': attribute type 21 has an invalid length. [ 321.694124][T13752] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2094'. [ 321.727650][T13757] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2091'. [ 321.748864][T13752] : renamed from hsr0 (while UP) [ 321.817604][T13765] xt_cgroup: invalid path, errno=-2 [ 321.870508][T13775] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 321.967359][T13782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.023351][T13783] netlink: 'syz.1.2102': attribute type 2 has an invalid length. [ 322.119625][T13791] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 322.505030][T13804] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2106'. [ 322.515898][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 322.780762][T13822] !: renamed from dummy0 (while UP) [ 322.902044][T13828] ip6t_srh: unknown srh invflags 4000 [ 322.906002][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2116'. [ 322.927130][T13827] sctp: [Deprecated]: syz.2.2116 (pid 13827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.927130][T13827] Use struct sctp_sack_info instead [ 323.121626][T13840] tipc: Enabling of bearer rejected, failed to enable media [ 323.223311][T13847] x_tables: unsorted entry at hook 3 [ 323.288934][T13850] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 323.871525][T13890] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 323.991127][T13898] bond10: (slave gretap2): making interface the new active one [ 324.038195][T13898] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 324.215648][T13919] lo: left promiscuous mode [ 324.231530][T13919] syz_tun: left promiscuous mode [ 324.242731][T13919] bond0: (slave syz_tun): Releasing backup interface [ 324.259609][T13919] bridge_slave_0: left allmulticast mode [ 324.268231][T13919] bridge_slave_0: left promiscuous mode [ 324.280466][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.298217][T13919] bridge_slave_1: left allmulticast mode [ 324.298807][T13924] net_ratelimit: 1 callbacks suppressed [ 324.298823][T13924] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.310221][T13919] bridge_slave_1: left promiscuous mode [ 324.325879][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.349114][T13919] bond0: (slave bond_slave_0): Releasing backup interface [ 324.363048][T13919] bond0: (slave bond_slave_1): Releasing backup interface [ 324.385626][T13919] team0: Port device team_slave_1 removed [ 324.392290][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.401482][T13919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.410244][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.418317][T13919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.427765][T13919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.458299][T13928] bond0: option ad_select: unable to set because the bond device is up [ 324.900443][T13953] netlink: 'syz.5.2155': attribute type 8 has an invalid length. [ 324.904603][T13954] __nla_validate_parse: 4 callbacks suppressed [ 324.904620][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2154'. [ 324.960057][T13956] netem: change failed [ 324.967947][T13954] syzkaller0: entered promiscuous mode [ 324.976354][T13954] syzkaller0: entered allmulticast mode [ 325.116300][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2160'. [ 325.188248][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'. [ 325.319347][T13981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2164'. [ 325.435164][T13985] netlink: 'syz.2.2165': attribute type 8 has an invalid length. [ 325.439823][T13987] netlink: 'syz.2.2165': attribute type 8 has an invalid length. [ 326.019228][T14031] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 326.028688][T14031] netlink: 'syz.6.2179': attribute type 4 has an invalid length. [ 326.036673][T14031] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2179'. [ 326.049531][T14033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 326.072194][T14034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 326.588367][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2186'. [ 326.664133][T14061] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2187'. [ 326.690885][T14061] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2187'. [ 327.101138][T14089] Cannot find del_set index 49151 as target [ 327.114998][T14089] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 327.929739][T14149] pim6reg527: entered allmulticast mode [ 328.370181][T14170] syzkaller0: entered promiscuous mode [ 328.377936][T14170] syzkaller0: entered allmulticast mode [ 330.681147][T14237] __nla_validate_parse: 78 callbacks suppressed [ 330.681169][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2236'. [ 330.890178][T14241] syzkaller0: entered promiscuous mode [ 330.898150][T14241] syzkaller0: entered allmulticast mode [ 330.913172][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 330.930748][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'. [ 331.483064][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2249'. [ 331.508913][T14290] bond2 (unregistering): Released all slaves [ 331.544945][T14296] chnl_net:caif_netlink_parms(): no params data found [ 331.633670][T14303] xt_l2tp: invalid flags combination: 0 [ 331.656099][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 331.716078][T14303] bond5: Invalid ad_actor_system MAC address. [ 331.737360][T14303] bond5: option ad_actor_system: invalid value (1) [ 331.771753][T14303] bond5 (unregistering): Released all slaves [ 331.840140][T14318] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2253'. [ 331.919128][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2255'. [ 332.134442][T14332] ip6gre1: entered promiscuous mode [ 332.140726][T14332] ip6gre1: entered allmulticast mode [ 332.427094][T14347] netlink: 'syz.5.2263': attribute type 4 has an invalid length. [ 332.449898][T14347] netlink: 'syz.5.2263': attribute type 4 has an invalid length. [ 332.657493][T14362] team0: Device vti0 is of different type [ 332.748589][T14365] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 332.877824][T14372] Z7nz>RA: entered promiscuous mode [ 332.910881][T14372] tunl0: entered promiscuous mode [ 332.931143][T14372] gre0: entered promiscuous mode [ 332.984849][T14372] gretap0: entered promiscuous mode [ 333.016591][T14372] erspan0: entered promiscuous mode [ 333.047302][T14372] ip_vti0: entered promiscuous mode [ 333.070091][T14372] ip6_vti0: entered promiscuous mode [ 333.080129][T14372] sit0: entered promiscuous mode [ 333.096414][T14372] ip6tnl0: entered promiscuous mode [ 333.113388][T14372] ip6gre0: entered promiscuous mode [ 333.129658][T14372] syz_tun: entered promiscuous mode [ 333.151150][T14372] ip6gretap0: entered promiscuous mode [ 333.178824][T14372] vcan0: entered promiscuous mode [ 333.182838][T14385] netlink: 'syz.1.2276': attribute type 5 has an invalid length. [ 333.192064][T14372] bond0: entered promiscuous mode [ 333.214615][T14372] bond_slave_0: entered promiscuous mode [ 333.230903][T14372] bond_slave_1: entered promiscuous mode [ 333.238946][T14385] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2276'. [ 333.305182][T14372] team0: entered promiscuous mode [ 333.322391][T14372] team_slave_0: entered promiscuous mode [ 333.354395][T14372] team_slave_1: entered promiscuous mode [ 333.388742][T14372] !: entered promiscuous mode [ 333.416512][T14372] nlmon0: entered promiscuous mode [ 333.425140][T14372] caif0: entered promiscuous mode [ 333.441353][T14372] batadv0: entered promiscuous mode [ 333.472717][T14372] vxcan0: entered promiscuous mode [ 333.480232][T14372] vxcan1: entered promiscuous mode [ 333.488319][T14372] veth0: entered promiscuous mode [ 333.501920][T14372] veth1: entered promiscuous mode [ 333.513300][T14372] wg0: entered promiscuous mode [ 333.524191][T14372] wg1: entered promiscuous mode [ 333.532984][T14372] wg2: entered promiscuous mode [ 333.542101][T14372] veth0_to_bridge: entered promiscuous mode [ 333.552815][T14372] bridge_slave_0: entered promiscuous mode [ 333.562690][T14372] veth1_to_bridge: entered promiscuous mode [ 333.575705][T14372] bridge_slave_1: entered promiscuous mode [ 333.582078][T14372] veth0_to_bond: entered promiscuous mode [ 333.592411][T14372] veth1_to_bond: entered promiscuous mode [ 333.606428][T14372] veth0_to_team: entered promiscuous mode [ 333.621366][T14372] veth1_to_team: entered promiscuous mode [ 333.648732][T14372] veth0_to_batadv: entered promiscuous mode [ 333.657687][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.666178][T14372] batadv_slave_0: entered promiscuous mode [ 333.676103][T14372] veth1_to_batadv: entered promiscuous mode [ 333.685402][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.693637][T14372] batadv_slave_1: entered promiscuous mode [ 333.703747][T14372] xfrm0: entered promiscuous mode [ 333.712215][T14372] veth0_to_hsr: entered promiscuous mode [ 333.722589][T14372] veth1_to_hsr: entered promiscuous mode [ 333.734557][T14372] hsr0: entered promiscuous mode [ 333.742365][T14372] veth1_virt_wifi: entered promiscuous mode [ 333.752252][T14372] veth0_virt_wifi: entered promiscuous mode [ 333.761658][T14372] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 333.783239][T14372] vlan0: entered promiscuous mode [ 333.788910][T14372] vlan1: entered promiscuous mode [ 333.795148][T14372] macvlan0: entered promiscuous mode [ 333.803410][T14372] macvlan1: entered promiscuous mode [ 333.811447][T14372] ipvlan0: entered promiscuous mode [ 333.816977][T14372] ipvlan1: entered promiscuous mode [ 333.829048][T14372] macvtap0: entered promiscuous mode [ 333.837676][T14372] macsec0: entered promiscuous mode [ 333.847066][T14372] geneve0: entered promiscuous mode [ 333.855899][T14372] geneve1: entered promiscuous mode [ 333.865189][T14372] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 333.876621][T14372] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 333.888032][T14372] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 333.897227][T14372] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 333.904923][T14372] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 333.912174][T14372] ipip0: entered promiscuous mode [ 333.917533][T14372] gtp0: entered promiscuous mode [ 333.922833][T14372] ip6erspan0: entered promiscuous mode [ 333.929247][T14372] bridge1: entered promiscuous mode [ 333.936321][T14372] mac80211_hwsim hwsim22 wlan2: entered promiscuous mode [ 333.943500][T14372] sit1: entered promiscuous mode [ 333.949642][T14372] @: entered promiscuous mode [ 333.957362][T14372] vlan4094: entered promiscuous mode [ 333.963689][T14372] bond1: entered promiscuous mode [ 333.970748][T14372] mac80211_hwsim hwsim25 wlan3: entered promiscuous mode [ 333.978820][T14372] bridge2: entered promiscuous mode [ 333.986849][T14372] pim6reg527: entered promiscuous mode [ 333.993498][T14372] ip6gre1: left allmulticast mode [ 334.034632][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 334.040786][ T9] syz2: Port: 1 Link DOWN [ 334.063861][T10671] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.073311][T10671] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.120575][T10671] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.160909][T10671] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.185269][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 334.236322][T14412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2283'. [ 334.256747][T10671] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.281280][T10671] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.304677][T14412] netlink: 'syz.2.2283': attribute type 142 has an invalid length. [ 334.314871][T10671] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.336575][T10671] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.451682][T14424] sctp: [Deprecated]: syz.6.2288 (pid 14424) Use of int in maxseg socket option. [ 334.451682][T14424] Use struct sctp_assoc_value instead [ 334.544889][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2290'. [ 334.577056][T10668] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.592177][T10668] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.602735][T10668] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.632734][T10668] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.677850][T14437] netlink: 'syz.1.2292': attribute type 11 has an invalid length. [ 334.741370][T14442] pim6reg1: entered promiscuous mode [ 334.747563][T14442] pim6reg1: entered allmulticast mode [ 335.567285][T14489] tipc: Enabled bearer , priority 0 [ 335.580883][T14489] syzkaller0: MTU too low for tipc bearer [ 335.586977][T14489] tipc: Disabling bearer [ 336.146939][T14526] C: renamed from Z7nz>RA [ 336.193147][T14528] tipc: Enabled bearer , priority 0 [ 336.208350][T14528] syzkaller0: entered promiscuous mode [ 336.254212][T14528] syzkaller0: entered allmulticast mode [ 336.278048][T14537] __nla_validate_parse: 3 callbacks suppressed [ 336.278068][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 336.344407][T14528] tipc: Resetting bearer [ 336.354750][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 336.420582][T14527] tipc: Resetting bearer [ 336.427887][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2321'. [ 336.429542][T14549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2321'. [ 336.463975][T14527] tipc: Disabling bearer [ 336.591640][T14556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2324'. [ 336.811631][T14565] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 336.836740][T14565] bond6 (unregistering): Released all slaves [ 336.911125][T14564] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 336.942671][T14564] bond6 (unregistering): Released all slaves [ 337.374119][T14604] xt_bpf: check failed: parse error [ 337.420130][T14610] pim6reg527: entered allmulticast mode [ 337.664237][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 337.700751][T14626] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 337.752058][T14635] delete_channel: no stack [ 337.976636][T14651] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 338.154794][T14658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2354'. [ 338.165758][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2354'. [ 338.283024][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 338.298127][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 338.400290][T14667] tipc: Enabling of bearer rejected, media not registered [ 338.837631][T14684] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 338.873079][T14688] [ 338.875470][T14688] ====================================================== [ 338.882506][T14688] WARNING: possible circular locking dependency detected [ 338.889540][T14688] syzkaller #0 Not tainted [ 338.893969][T14688] ------------------------------------------------------ [ 338.900985][T14688] syz.6.2365/14688 is trying to acquire lock: [ 338.907055][T14688] ffff888032740270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720 [ 338.916830][T14688] [ 338.916830][T14688] but task is already holding lock: [ 338.924198][T14688] ffffffff8f4263b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 338.933775][T14688] [ 338.933775][T14688] which lock already depends on the new lock. [ 338.933775][T14688] [ 338.944180][T14688] [ 338.944180][T14688] the existing dependency chain (in reverse order) is: [ 338.953192][T14688] [ 338.953192][T14688] -> #2 (nr_node_list_lock){+...}-{3:3}: [ 338.961099][T14688] lock_acquire+0x120/0x360 [ 338.966124][T14688] _raw_spin_lock_bh+0x36/0x50 [ 338.971410][T14688] nr_rt_device_down+0xa9/0x720 [ 338.976787][T14688] nr_device_event+0x137/0x150 [ 338.982070][T14688] notifier_call_chain+0x1b6/0x3e0 [ 338.987705][T14688] __dev_notify_flags+0x18d/0x2e0 [ 338.993248][T14688] netif_change_flags+0xe8/0x1a0 [ 338.998703][T14688] dev_change_flags+0x130/0x260 [ 339.004074][T14688] dev_ioctl+0x7b4/0x1150 [ 339.008930][T14688] sock_do_ioctl+0x22c/0x300 [ 339.014040][T14688] sock_ioctl+0x576/0x790 [ 339.018889][T14688] __se_sys_ioctl+0xfc/0x170 [ 339.024000][T14688] do_syscall_64+0xfa/0xfa0 [ 339.029030][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.035442][T14688] [ 339.035442][T14688] -> #1 (nr_neigh_list_lock){+...}-{3:3}: [ 339.043350][T14688] lock_acquire+0x120/0x360 [ 339.048371][T14688] _raw_spin_lock_bh+0x36/0x50 [ 339.053661][T14688] nr_remove_neigh+0x25/0xe0 [ 339.058800][T14688] nr_add_node+0x1d9f/0x2570 [ 339.063940][T14688] nr_rt_ioctl+0xc12/0xd50 [ 339.068906][T14688] sock_do_ioctl+0xdc/0x300 [ 339.073952][T14688] sock_ioctl+0x576/0x790 [ 339.078815][T14688] __se_sys_ioctl+0xfc/0x170 [ 339.083935][T14688] do_syscall_64+0xfa/0xfa0 [ 339.088961][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.095370][T14688] [ 339.095370][T14688] -> #0 (&nr_node->node_lock){+...}-{3:3}: [ 339.103364][T14688] validate_chain+0xb9b/0x2140 [ 339.108647][T14688] __lock_acquire+0xab9/0xd20 [ 339.113842][T14688] lock_acquire+0x120/0x360 [ 339.118861][T14688] _raw_spin_lock_bh+0x36/0x50 [ 339.124155][T14688] nr_rt_device_down+0x12a/0x720 [ 339.129618][T14688] nr_device_event+0x137/0x150 [ 339.134901][T14688] notifier_call_chain+0x1b6/0x3e0 [ 339.140539][T14688] __dev_notify_flags+0x18d/0x2e0 [ 339.146519][T14688] netif_change_flags+0xe8/0x1a0 [ 339.151975][T14688] dev_change_flags+0x130/0x260 [ 339.157340][T14688] dev_ioctl+0x7b4/0x1150 [ 339.162195][T14688] sock_do_ioctl+0x22c/0x300 [ 339.167312][T14688] sock_ioctl+0x576/0x790 [ 339.172170][T14688] __se_sys_ioctl+0xfc/0x170 [ 339.177367][T14688] do_syscall_64+0xfa/0xfa0 [ 339.182402][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.188814][T14688] [ 339.188814][T14688] other info that might help us debug this: [ 339.188814][T14688] [ 339.199787][T14688] Chain exists of: [ 339.199787][T14688] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 339.199787][T14688] [ 339.213647][T14688] Possible unsafe locking scenario: [ 339.213647][T14688] [ 339.221107][T14688] CPU0 CPU1 [ 339.226472][T14688] ---- ---- [ 339.231839][T14688] lock(nr_node_list_lock); [ 339.236439][T14688] lock(nr_neigh_list_lock); [ 339.243637][T14688] lock(nr_node_list_lock); [ 339.250742][T14688] lock(&nr_node->node_lock); [ 339.255513][T14688] [ 339.255513][T14688] *** DEADLOCK *** [ 339.255513][T14688] [ 339.263648][T14688] 3 locks held by syz.6.2365/14688: [ 339.268851][T14688] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 339.277744][T14688] #1: ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 339.287749][T14688] #2: ffffffff8f4263b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 339.297672][T14688] [ 339.297672][T14688] stack backtrace: [ 339.303561][T14688] CPU: 0 UID: 0 PID: 14688 Comm: syz.6.2365 Not tainted syzkaller #0 PREEMPT(full) [ 339.303580][T14688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.303589][T14688] Call Trace: [ 339.303596][T14688] [ 339.303604][T14688] dump_stack_lvl+0x189/0x250 [ 339.303627][T14688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.303646][T14688] ? __pfx__printk+0x10/0x10 [ 339.303661][T14688] ? print_lock_name+0xde/0x100 [ 339.303676][T14688] print_circular_bug+0x2ee/0x310 [ 339.303695][T14688] check_noncircular+0x134/0x160 [ 339.303715][T14688] validate_chain+0xb9b/0x2140 [ 339.303740][T14688] __lock_acquire+0xab9/0xd20 [ 339.303756][T14688] ? nr_rt_device_down+0x12a/0x720 [ 339.303773][T14688] lock_acquire+0x120/0x360 [ 339.303790][T14688] ? nr_rt_device_down+0x12a/0x720 [ 339.303812][T14688] ? nr_rt_device_down+0x12a/0x720 [ 339.303828][T14688] _raw_spin_lock_bh+0x36/0x50 [ 339.303845][T14688] ? nr_rt_device_down+0x12a/0x720 [ 339.303867][T14688] nr_rt_device_down+0x12a/0x720 [ 339.303887][T14688] nr_device_event+0x137/0x150 [ 339.303902][T14688] notifier_call_chain+0x1b6/0x3e0 [ 339.303922][T14688] __dev_notify_flags+0x18d/0x2e0 [ 339.303938][T14688] ? __pfx___dev_notify_flags+0x10/0x10 [ 339.303951][T14688] ? __dev_change_flags+0x4cc/0x6d0 [ 339.303967][T14688] ? __pfx___dev_change_flags+0x10/0x10 [ 339.303981][T14688] ? full_name_hash+0x92/0xe0 [ 339.303999][T14688] netif_change_flags+0xe8/0x1a0 [ 339.304015][T14688] dev_change_flags+0x130/0x260 [ 339.304030][T14688] dev_ioctl+0x7b4/0x1150 [ 339.304051][T14688] sock_do_ioctl+0x22c/0x300 [ 339.304071][T14688] ? __pfx_sock_do_ioctl+0x10/0x10 [ 339.304094][T14688] sock_ioctl+0x576/0x790 [ 339.304111][T14688] ? __pfx_sock_ioctl+0x10/0x10 [ 339.304129][T14688] ? __fget_files+0x3a0/0x420 [ 339.304142][T14688] ? __fget_files+0x2a/0x420 [ 339.304156][T14688] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.304172][T14688] ? __pfx_sock_ioctl+0x10/0x10 [ 339.304188][T14688] __se_sys_ioctl+0xfc/0x170 [ 339.304207][T14688] do_syscall_64+0xfa/0xfa0 [ 339.304226][T14688] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.304245][T14688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.304259][T14688] ? clear_bhb_loop+0x60/0xb0 [ 339.304274][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.304289][T14688] RIP: 0033:0x7fed28f8f6c9 [ 339.304302][T14688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.304315][T14688] RSP: 002b:00007fed29e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.304331][T14688] RAX: ffffffffffffffda RBX: 00007fed291e5fa0 RCX: 00007fed28f8f6c9 [ 339.304342][T14688] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 339.304352][T14688] RBP: 00007fed29011f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.304361][T14688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.304370][T14688] R13: 00007fed291e6038 R14: 00007fed291e5fa0 R15: 00007ffe362b85d8 [ 339.304387][T14688] [ 339.600106][T14662] caif:caif_disconnect_client(): nothing to disconnect [ 340.043969][ T5828] Bluetooth: hci0: command tx timeout [ 348.045542][ T95] block nbd1: Possible stuck request ffff8880250b7000: control (read@0,1024B). Runtime 150 seconds [ 348.056460][ T95] block nbd1: Possible stuck request ffff8880250b71c0: control (read@1024,1024B). Runtime 150 seconds [ 348.067620][ T95] block nbd1: Possible stuck request ffff8880250b7380: control (read@2048,1024B). Runtime 150 seconds [ 348.078672][ T95] block nbd1: Possible stuck request ffff8880250b7540: control (read@3072,1024B). Runtime 150 seconds